Home > Simple Network Management Protocol SNMP Tutorial

Simple Network Management Protocol SNMP Tutorial

June 16th, 2014 Go to comments

Building a working network is important but monitoring its health is as important as building it. Luckily we have tools to make administrator’s life easier and SNMP is one among of them. SNMP presents in most of the network regardless of the size of that network. And understanding how SNMP works is really important and that what we will learn in this tutorial.

Understand SNMP

SNMP consists of 3 items:

+ SNMP Manager (sometimes called Network Management System – NMS): a software runs on the device of the network administrator (in most case, a computer) to monitor the network.
+ SNMP Agent: a software runs on network devices that we want to monitor (router, switch, server…)
+ Management Information Base (MIB): is the collection of managed objects. This components makes sure that the data exchange between the manager and the agent remains structured. In other words, MIB contains a set of questions that the SNMP Manager can ask the Agent (and the Agent can understand them). MIB is commonly shared between the Agent and Manager.

SNMP_Components.jpg

For example, in the topology above you want to monitor a router, a server and a Multilayer Switch. You can run SNMP Agent on all of them. Then on a PC you install a SNMP Manager software to receive monitoring information. SNMP is the protocol running between the Manager and Agent. SNMP communication between Manager and Agent takes place in form of messages. The monitoring process must be done via a MIB which is a standardized database and it contains parameters/objects to describe these networking devices (like IP addresses, interfaces, CPU utilization, …). Therefore the monitoring process now becomes the process of GET and SET the information from the MIB.

SNMP Versions

SNMP has multiple versions but there are three main versions:

+ SNMP version 1
+ SNMP version 2c
+ SNMP version 3

SNMPv1 is the original version and is very legacy so it should not be used in our network. SNMPv2c updated the original protocol and offered some enhancements. One of the noticeable enhancement is the introduction of INFORM and GETBULK messages which will be explain later in this tutorial.

Both SNMPv1 and v2 did not focus much on security and they provide security based on community string only. Community string is really just a clear text password (without encryption). Any data sent in clear text over a network is vulnerable to packet sniffing and interception. There are two types of community strings in SNMPv2c:

+ Read-only (RO): gives read-only access to the MIB objects which is safer and preferred to other method.
+ Read-write (RW): gives read and write access to the MIB objects. This method allows SNMP Manager to change the configuration of the managed router/switch so be careful with this type.

The community string defined on the SNMP Manager must match one of the community strings on the Agents in order for the Manager to access the Agents.

SNMPv3 provides significant enhancements to address the security weaknesses existing in the earlier versions. The concept of community string does not exist in this version. SNMPv3 provides a far more secure communication using entities, users and groups. This is achieved by implementing three new major features:
+ Message integrity: ensuring that a packet has not been modified in transit.
+ Authentication: by using password hashing (based on the HMAC-MD5 or HMAC-SHA algorithms) to ensure the message is from a valid source on the network.
+ Privacy (Encryption): by using encryption (56-bit DES encryption, for example) to encrypt the contents of a packet.

Note: Although SNMPv3 offers better security but SNMPv2c however is still more common. Cisco has supported SNMPv3 in their routers since IOS version 12.0.3T.

In the next part we will learn the SNMP messages used in each version.

SNMP Messages

SNMP Messages are used to communicate between the SNMP Manager and Agents. SNMPv1 supports five basic SNMP messages:

+ SNMP GET
+ SNMP GET-NEXT
+ SNMP GET-RESPONSE
+ SNMP SET
+ SNMP TRAP

In general, the GET messages are sent by the SNMP Manager to retrieve information from the SNMP Agents while the SET messages are used by the SNMP Manager to modify or assign the value to the SNMP Agents.

Note: GET-NEXT retrieves the value of the next object in the MIB.

The GET-RESPONSE message is used by the SNMP Agents to reply to GET and GET-NEXT messages.

Unlike GET or SET messages, TRAP messages are initiated from the SNMP Agents to inform the SNMP Manager on the occurrence of an event. For example, suppose you want to be alarmed when the CPU usage of your server goes above 80%. But it would be very annoying if the administrator has to actively use the GET message to check the CPU usage from time to time. In this case, the TRAP message is very suitable for that purpose because the administrator would only be informed from the CPU itself when that event occurs. The figure below shows the direction of SNMP messages:

SNMP_Messages_Flow.jpg

From SNMPv2c, two new messages were added: INFORM and GETBULK.

INFORM: An disadvantage of TRAP message is unreliable. SNMP communicates via UDP so it is unreliable because when the SNMP Agents send TRAP message to the SNMP Manager it cannot know if its messages arrive to the SNMP Manager. To amend this problem, a new type of message, called INFORM, was introduced from SNMPv2. With INFORM message, the SNMP Manager can now acknowledge that the message has been received at its end with an SNMP response protocol data unit (PDU). If the sender never receives a response, the INFORM can be sent again. Thus, INFORMs are more likely to reach their intended destination.

GETBULK: The GETBULK operation efficiently retrieve large blocks of data, such as multiple rows in a table. GETBULK fills a response message with as much of the requested data as will fit.

Note: There is no new message types on SNMPv3 compared to SNMPv2c.

SNMP Configuration

In the last part we will go through a simple SNMP configuration so that you can have a closer look at how SNMP works. SNMPv2c is still more popular than SNMPv3 so we will configure SNMPv2c.

1. Configure a community string

Router(config)#snmp-server community 9tut ro

In this case our community string named “9tut”. The ro stands for read-only method.

2. Configure the IP address of a host receiver (SNMP Manager) for SNMPv2c TRAPs or INFORMs

Router(config)#snmp-server host 10.10.10.12 version 2c TRAPCOMM

“TRAPCOMM” is the community string for TRAP.

3. Enable the SNMP Traps

Router(config)#snmp-server enable traps

If we don’t want to enable all trap messages we can specify which traps we want to be notified. For example, if you only want to receive traps about link up/down notification type then use this command instead:

Router(config)#snmp-server enable traps link cisco

Of course we have to configure an SNMP Manager on a computer with these community strings so that they can communicate.

Good resource and reference: http://docwiki.cisco.com/wiki/Simple_Network_Management_Protocol.

Comments (50) Comments
Comment pages
1 2 3 2206
  1. Aashiq
    July 3rd, 2014

    Great stuff…Thanks alot 9tut

  2. Ajay
    July 10th, 2014

    No need to search in Google directly we can go to 9tut…thanks a lot for sharing latest materials and dumps…

  3. Antoinette
    July 14th, 2014

    Thank you, i searched everywhere and most of the material i found was too complicated to comprehend.

  4. Alfa
    July 19th, 2014

    Thanks, 9tut is the best of the best!

  5. Yash
    July 23rd, 2014

    The GET-RESPONSE message is used by the SNMP Agents to reply to GET and GET-RESPONSE messages.

    It should be – “reply to GET and GET-NEXT messages”.

  6. Gedlu L
    July 23rd, 2014

    thanks very much it is a very nice help center

  7. 9tut
    July 25th, 2014

    @Yash: Thanks for your detection. We have just fixed it!

  8. Zoe44
    July 26th, 2014

    That was very simple and well explained. I finally get to understand SNMP.
    Thanks 9TUT. You the best!!

  9. Sunil Jambagi
    July 29th, 2014

    Wow…!! Thank u “9tut” for giving latest materials and dumps…

  10. ccent
    August 12th, 2014

    V well explained ! thanks 9tut

  11. Suriya
    August 18th, 2014

    Very usefull…thank you 9tut

  12. skul
    August 31st, 2014

    Very gud article, 9tut u really know how to teach, Thnx

  13. Shailesh K
    September 1st, 2014

    well Explained……

  14. ALI
    September 3rd, 2014

    superb

  15. Richmond
    September 6th, 2014

    COOL as HELL

  16. satinder
    September 15th, 2014

    Hi
    its really good to be in touch with 9tut.
    thanks

  17. Mushfiq
    October 4th, 2014

    Thanks a lot for giving this . Go ahead.

  18. Anonymous
    October 8th, 2014

    Great material did not know, best of all did not have to use google for it :) great explanation.

  19. Tanmay
    November 1st, 2014

    great explanation….

  20. sokheng
    November 9th, 2014

    Thank you!

  21. Anonymous
    November 17th, 2014

    Hi ,

    can anyone send me the latest dumps. i am going to do my exam on 23rd of this month. please help me out my friends.:(

  22. Anonymous
    November 18th, 2014

    my mail id simshon007@gmail.com kindly send the latest dumps in PDF format i dont have the VCE exam suit with me. kindly help me out .

  23. Anonymous
    November 19th, 2014

    Thank you!

  24. Anonymous
    November 19th, 2014

    my mail id waseqhaque@gmail.com kindly send the latest dumps in PDF format i dont have the VCE exam suit with me. kindly help me out .

  25. Gerson MEM
    November 25th, 2014

    In this line: PC you install a SMNP Manager software to receive monitoring information. change SMNP by SNMP. Saludos desde México QRO

  26. Anonymous
    November 27th, 2014

    My Mail id is singhjaspreet1984@gmail.com, kindly send me the latest dumps in PDF format.

  27. Hamid
    December 6th, 2014

    You guys awesome , I like your site ! Great job

  28. 9tut
    December 7th, 2014

    @Gerson MEM: Thanks for your detection. I have just updated it.

  29. Mir Shamsuddin Shams
    January 7th, 2015

    Thanks 9tut, I learnt a good subject.

  30. Sanc
    January 18th, 2015

    Hi, The users who login here after making payment are able to view more questions??

  31. alamin
    January 18th, 2015

    nice ….great tutorial

  32. mahesh
    February 25th, 2015

    my mail id firemahesh@yahoo.com kindly send the latest dumps in PDF format i dont have the VCE exam suit with me. kindly help me out .

  33. Priya
    February 27th, 2015

    @Sanc–Yes, after becoming a paid member you can have more questions and simulations.

  34. jayananda br
    March 17th, 2015

    latest dump on to this mail id jayananda.br@outlook.com

  35. Stian
    April 12th, 2015

    Fantastic site, CCNA is now a step closer to reality :) hehe

  36. Anonymous
    April 17th, 2015

    Latest dump to this email abbamota@gmail.com. Thanks for the great jobs.

  37. Frank Morgan
    May 5th, 2015

    Please send the latest dumps for the 120-200 to frankmorgan7777@yahoo.com

  38. Mohammed shahid
    May 15th, 2015

    begmbo khus hua

  39. adex
    May 31st, 2015

    Nice to be in this site

  40. lhex
    June 2nd, 2015

    very well presented, nice job 9tut!

  41. arnav
    June 4th, 2015

    super like

  42. Mason
    June 29th, 2015

    Please latest dump:
    mohkam59@yahoo.com

  43. Fazil Ali VS
    July 11th, 2015

    Nice Infos

  44. siddhu dhangar
    August 17th, 2015

    very nice info

  45. Hasan
    August 17th, 2015

    Very nice sir, it’s so helpfull

  46. Jawwad
    August 21st, 2015

    Very good notes, really helpful

  47. Asad
    September 5th, 2015

    Very true and brief explanation

  48. Mr.Nay Zaw
    September 10th, 2015

    I like this tutorial .This is good idea.

  49. Anonymous
    September 13th, 2015

    It would’ve been more helpful For the beginner like me if you included a little config or details about the snmp manager. But tnx for the info though!

  50. Faizal KaKKaDaN
    September 14th, 2015

    Excellent….!!!!!

Comment pages
1 2 3 2206
Add a Comment