XML‐Based Network Management for IP Networks

XML‐based network management, which applies XML technologies to network management, has been proposed as an alternative to existing network management. The use of XML in network management offers many advantages. However, most existing network devices are already embedded with simple network management protocol (SNMP) agents and managed by SNMP managers. For integrated network management, we present the architectures of an XML‐based manager, an XML‐based agent, and an XML/SNMP gateway for legacy SNMP agents. We describe our experience of developing an XML‐based network management system (XNMS), XML‐based agent, and an XML/SNMP gateway. We also verify the effectiveness of our XML‐based agent and XML/SNMP gateway through performance tests. Our experience with developing XNMS and XML‐based agents can be used as a guideline for development of XML‐based management systems that fully take advantage of the strengths of XML technologies.     

Integrating SNMP agents with XML-based management systems

XML-based network management systems are becoming more and more popular these days. However, it has to be taken into account that there is a broad existing management infrastructure based on non-XML protocols. Today, the most dominant technology in Internet management is based on the SNMP framework. This article presents an approach for seamless integration of management information supplied by SNMP agents into XML-based systems. This is done by an automated transformation of SMI MIB definitions into XML schema definitions, which implies a corresponding transformation of SNMP management information into XML documents. Furthermore, we present an SNMP-to-XML gateway that allows retrieval of such XML management information at runtime.     

Development and testing of an SNMP‐based integrated management system for heterogeneous power line communication networks

Power line communication (PLC) is an evolving technology which uses existing power lines for data transmission. Like any other communication network, PLC networks need to be managed to ensure efficient use of resources and secure operations. Currently, major PLC chip vendors are trying to provide network management solutions based on the Simple Network Management Protocol (SNMP) by developing their own management systems, but they cannot manage heterogeneous PLC networks comprised of PLC devices from various PLC chip vendors. In this paper, we provide our experience of developing and testing an integrated management system for a heterogeneous PLC network based on SNMP. We present our approach for integrated management by defining the common PLC management information base (MIB) and an integrated PLC proxy agent for providing interoperability to legacy PLC devices which do not support the common PLC MIB. We also present the development of an integrated PLC network management system and its test in heterogeneous PLC networks deployed in South Korea. The contribution of our work is to provide a guideline for developing and testing integrated NMSs for any heterogeneous networks including PLC networks. Copyright © 2009 John Wiley & Sons, Ltd.     

IPv4/IPv6转换网关的SNMP代理设计与实现

基于NAT-PT技术的IPv4/IPv6转换网关部署在IPv4/IPv6网络边缘,用于两网互通.对转换网关提供网络管理功能对保障两网互通有着重要意义.然而,网关所在网络业务流量的复杂性和其基于网络处理器的架构对网络管理的实现提出了挑战.本文提出了一种转换网关SNMP代理的设计方案,定义了NAT-PT MIB,实现了网络处理器环境下分布式MIB的采集并提供了对IPv4/IPv6两网内进行网络管理的支持.     

SNMP‐based enterprise IP network topology discovery

Precise network topology information is required to perform management activities such as fault detection, root cause analysis, performance monitoring, and load balancing in enterprise networks. To accomplish these management tasks, both network discovery and connectivity information are essential. This paper examines various problems with the existing topology discovery mechanisms and proposes an SNMP‐based approach to discover physical as well as logical topology. We present algorithms for identifying network device types and discovering connectivity among them. The connectivity of end host and management information base (MIB)‐enabled devices with switches and routers is discussed and evaluated. We also present an algorithm for discovering logical topology, such as VLAN and subnet connectivity. Finally, we present a combination of graph and tree layouts, to visualize connectivity information. Copyright © 2010 John Wiley & Sons, Ltd.     

Desktop versus web‐based network management

This paper introduces a novel management paradigm called desktop‐based management that enables management of network resources from a desktop environment. It also covers the design and the implementation of SMB_―SNMP, a simple desktop‐based management system that allows people to manage SNMP resources from a desktop environment. Copyright © 1999 John Wiley & Sons, Ltd.     

In‐service QoS monitoring of real‐time applications using SM MIB

Current network management needs an end‐to‐end overview of various flows rather than the information that is purely local to the individual devices. The typical manager‐centric polling approach, however, is not suitable to understand network‐wide behavior of a large‐scale Internet. In this paper, we propose a new management information base (MIB) approach called Service Monitoring MIB (SM MIB). The MIB provides a network manager with dynamic end‐to‐end management information by utilizing special packets. The special packet is an Internet control message protocol (ICMP) application that is sent to a remote network element to monitor Internet services. The SM MIB makes an end‐to‐end management feasible while it reduces management‐related traffic and manager‐to‐manager interactions. Real examples show that the proposed SM MIB is useful for end‐to‐end QoS monitoring. We discuss the accuracy of the obtained data as well as the monitoring overhead. Copyright © 2004 John Wiley & Sons, Ltd.     

PKG‐VUL: Security Vulnerability Evaluation and Patch Framework for Package‐Based Systems

In information security and network management, attacks based on vulnerabilities have grown in importance. Malicious attackers break into hosts using a variety of techniques. The most common method is to exploit known vulnerabilities. Although patches have long been available for vulnerabilities, system administrators have generally been reluctant to patch their hosts immediately because they perceive the patches to be annoying and complex. To solve these problems, we propose a security vulnerability evaluation and patch framework called PKG‐VUL, which evaluates the software installed on hosts to decide whether the hosts are vulnerable and then applies patches to vulnerable hosts. All these operations are accomplished by the widely used simple network management protocol (SNMP). Therefore, system administrators can easily manage their vulnerable hosts through PKG‐VUL included in the SNMP‐based network management systems as a module. The evaluation results demonstrate the applicability of PKG‐VUL and its performance in terms of devised criteria.     

Web Services‐based network management: approaches and the WSNET system

While the Simple Network Management Protocol (SNMP) is still the dominant protocol for managing network elements in IP‐based networks and the Internet, network managers are acknowledging its limitations with respect to configuration management, application development and decentralization of management tasks. Web Services (WS) have been recently proposed to alleviate these limitations, given their pertinence to both decentralized management paradigms (e.g., CORBA), and XML management systems which provide efficiency in configuration management operations. This paper reviews architectures for WS‐based network management, outlining their advantages and disadvantages. These architectures address management of both individual network elements and composite multi‐device networks. Moreover, the paper introduces the architecture of a prototype system for WS‐based network management, namely WSNET. Along with presentation of the WSNET system, we provide a set of experimental results reporting performance figures for the WSNET system, as well as for systems based on other WS architectures. These figures allow for a comparative evaluation of the various systems, and manifest the benefits of the WSNET implementation. An important conclusion from our work is that WS should be seen as an accompaniment to conventional SNMP management rather than a replacement. However, there are also cases (e.g., need for secure remote access) where WS serve as a core rather than auxiliary solution, given that conventional methods are not applicable. Copyright © 2006 John Wiley & Sons, Ltd.     

HFC网管系统的MIB原理与实现

近几年HFC网络技术的迅猛发展使得网络规模更加庞大、结构更加复杂，只有通过适当的网络管理，功能强大的网络才能得到充分利用，而有效的网络管理及良好性能已成为评价网络的一个重要标准。SNMP是一种易于实现的基本网络管理工具，能满足目前网络管理的需求，将SNMP协议引入到HFC网管系统是大势所趋，而在网络管理的实现过程中，对MIB的实现尤为重要。     

基于SNMP的SDH网络管理系统代理研究与实现

本文对SNMP管理协议框架在SDH传送网络管理系统中的应用进行了分析和研究,提出了一种基于SNMP的SDH网络管理系统设计方案,并详细论述了网管代理的实现技术;在研究标准SNMP管理信息库的RFC建议基础上设计实现了管理SDH传输设备的MIB结构;完成了网络通信接口驱动程序与SNMP协议栈到嵌入式实时操作系统的移植;实现了SNMP协议栈操作支持例程和SDH管理应用进程。     

Design and implementation of a web‐based Internet performance management system using SNMP MIB‐II

This article is aimed at defining items of analysis using SNMP MIB‐II for the purpose of analyzing the performance of Internet‐based networks running on TCP/IP protocol, and then utilizing these items, in conjunction with various Web technology and JAVA, to design and implement a Web‐based interface of a management system to analyze the performance of the Internet. Copyright © 1999 John Wiley & Sons, Ltd.     

Network management integrating SNMP/CMIP protocol implementations

In this paper, a new approach to integratingSNMP andCMIP protocols in a network management system is introduced. It is based on the use of proxy systems allowing to integrate SNMP network management agents in a general network management framework based onCMIP. The system architecture for marrying the protocols is first presented. Then the key features of a new protocol gateway implementing the proxy function are described, with emphasis on the explanation of theSNMP/CMIP mapping algorithm and the threshold/event reporting functions.     

Scalability and performance of an agent‐based network management middleware

Rapid growth of computer network sizes and uses necessitate analysis of network application middleware in terms of its scalability as well as performance. In this paper we analyze a distributed network management middleware based on agents that can be dispatched to locations where they can execute close to the managed nodes. The described middleware operates between the network protocol layer and the application layer and uses standard TCP protocol and SNMP probes to interface the network. By aggregating requests from many users into a single agent, our system allows multiple managers to probe problem areas with minimal management traffic overhead. We discuss and quantify the benefits of the described middleware by implementing real‐time network managers using our system. The main result of this paper is a comparison of scalability and efficiency of our agent‐based management middleware and traditional SNMP‐based data collection. To this end, we measured traffic in both real and simulated networks. In the latter case, we designed, used and described here a method of separating simulated application flow into separate subflows to simplify design of simulations. Copyright © 2004 John Wiley & Sons, Ltd.     

SNMP GetRows: an effective scheme for retrieving management information from MIB tables

Management information accessible via SNMP is organized in the Management Information Base (MIB). Many management applications are based on management information within an MIB table. The management information useful for management applications may be located in some rows of an MIB table. Owing to the limitation of current SNMP GetNext and GetBulk services, it is usually inevitable to retrieve all the rows of an MIB table even if some of them are needed. As the size of the MIB table grows, the object retrieval will incur considerable bandwidth and latency. Without loss of the simplicity of SNMP, we propose a novel SNMP service, called GetRows, to provide the capability of object selection via SNMP. Using GetRows, a management application can specify criteria for evaluating rows of an MIB table. Only the object instances in the rows selected by the criteria will be retrieved. Thus, less bandwidth and latency can be achieved by using the proposed GetRows service. Copyright © 2006 John Wiley & Sons, Ltd.     

一种具有普适性的单子网物理拓扑发现算法

文中提出了一种适用于单子网异构IP网络的物理拓扑发现算法,此算法基于网络中的SNMP MIB库,具有普适性.在AFT信息不足的情况下,可用端口流量的关系获得端口的连接信息.理论和仿真证明,即使在有个别网络元素不支持SNMP的情况下,此算法仍可准确地进行物理拓扑发现.     

LDAP与传统网络管理协议的集成研究

当前的企业管理对网络设备信息的访问必须通过专用的管理协议（如CMIP，SNMP）进行，因此造成网元的MIB独立于企业目录，为使企业采用统一的方式管理企业信息库中的各种信息资源，则必须实现MIB和企业目录信息树的集成，针对上述问题，文章主要论述了LDAP与MIB的一种集成方案。     

一种基于网络管理的CORBA/SNMP网关模型的构建

首先介绍了分布式CORBA技术在网络管理中应用的必然趋势，通过分析基于传统的SNMP和分布式CORBA两种网络管理体系的结构框架以及JIDM规范，提出了一种新的基于网络管理的CORBA／SNMP网关模型框架。最后，介绍了搭建CORBA／SNMP网关模型所需要的开发平台并基于此开发平台进行了相关的试验和仿真，其结果进一步表明本文所提出的模型是适用的、正确的、能够将现有的SNMP网管系统集成到CORBA网管系统中。     

ForCES体系结构中支持SNMP 的FE代理端的研究和实现

网络管理系统由网管站、管理代理、管理信息数据库和网络管理协议构成.简单网络管理协议（SNMP）包括管理信息结构（SMI）、管理信息库（MIB）和SNMP 三部分.首先介绍了ForCES体系结构、ForCES最新进展和SNMP简单网络管理协议,然后提出了一种ForCES支持SNMP的方案,并指出了ForCES结构下的路由器在实现网络管理上的主要问题和困难,最后给出了如何利用网络管理软件开发ForCES模型中FE端SNMP代理的具体方法.     

OAM MIB: an end-to-end performance management solution for ATM

Current network management needs an end-to-end overview of various connections rather than the information that is purely local to the individual devices. The typical manager-centric polling approach, however, is not adequate to understand network-wide behavior of a large-scale broadband network. We propose a new management information base (MIB) approach, called operation, administration, and maintenance (OAM) MIB. The MIB provides a network manager with dynamic end-to-end management information by utilizing special standard ATM cells. The MIB makes end-to-end management feasible while it reduces management-related traffic and manager-to-manager interactions. In our model, a customer network management system accesses the MIB through M1/M2 reference points of the ATM Forum management architecture with simple network management protocol (SNMP)