一、前言
SNMP(Simple Network Management Protocol,简单网络管理协议)的前身是简单网关监控协议(SGMP),用来对通信线路进行管理。随后,人们对SGMP进行了很大的修改,特别是加入了符合Internet定义的SMI和MIB:体系结构,改进后的协议就是著名的SNMP。SNMP的目标是管理互联网Internet上众多厂家生产的软硬件平台,因此SNMP受Internet标准网络管理框架的影响也很大。现在SNMP已经出到第三个版本的协议,其功能较以前已经大大地加强和改进了。
二、环境
设备:
网管工作站 windows server 2003
fw-1和fw-2 防火墙H3C F100-C
SW-2 quidway S2000系列
Web server CentOS6.4 32位
IP地址规划:
网管工作站 192.168.3.100/24
fw-1
eth0/0 192.168.3.1/24
eth0/4 1.1.1.1/24
fw-2
eth0/0 192.168.4.1/24
eth0/4 1.1.1.2/24
SW-2
vlan 1 192.168.4.10/24
Web server 192.168.4.100/24
需要软件:
What's_up_Gold
三、配置
网管工作站
安装SNMP
进入“控制面板→添加/删除windows组件→管理和监视工具→详细信息”
安装What's_up_Gold软件
fw-1
system-viewSystem View: return to User View with Ctrl+Z.[H3C]sysname fw-1[fw-1]int eth0/0[fw-1-Ethernet0/0]ip add 192.168.3.1 24[fw-1-Ethernet0/0]int eth0/4[fw-1-Ethernet0/4]ip add 1.1.1.1 24[fw-1-Ethernet0/4]quit[fw-1]firewall zone trust[fw-1-zone-trust]add int eth0/0 The interface has been added to trust security zone.[fw-1-zone-trust]quit[fw-1]firewall zone untrust[fw-1-zone-untrust]add int eth0/4[fw-1-zone-untrust]quit[fw-1]ip route-static 192.168.4.0 24 1.1.1.2[fw-1]snmp-agent[fw-1]snmp-agent sys-info contact zhangsan[fw-1]snmp-agent sys-info location main-jifang [fw-1]snmp-agent sys-info version all[fw-1]snmp-agent community read public [fw-1]snmp-agent community write private[fw-1]snmp-agent trap enable[fw-1]snmp-agent target-host trap address udp-domain 192.168.3.100 udp-port 162 params securityname public
fw-2
system-viewSystem View: return to User View with Ctrl+Z.[H3C]sysname fw-2[fw-2]int eth0/0[fw-2-Ethernet0/0]ip add 192.168.4.1 24[fw-2-Ethernet0/0]int eth0/4[fw-2-Ethernet0/4]ip add 1.1.1.2 24[fw-2]firewall zone trust[fw-2-zone-trust]add int eth0/0 The interface has been added to trust security zone.[fw-2-zone-trust]quit[fw-2]firewall zone untrust[fw-2-zone-untrust]add int eth0/4[fw-2]ip route-static 192.168.3.0 24 1.1.1.1[fw-2]ping 1.1.1.1 PING 1.1.1.1: 56 data bytes, press CTRL_C to break Reply from 1.1.1.1: bytes=56 Sequence=1 ttl=255 time=20 ms Reply from 1.1.1.1: bytes=56 Sequence=2 ttl=255 time=6 ms Reply from 1.1.1.1: bytes=56 Sequence=3 ttl=255 time=5 ms Reply from 1.1.1.1: bytes=56 Sequence=4 ttl=255 time=5 ms Reply from 1.1.1.1: bytes=56 Sequence=5 ttl=255 time=8 ms --- 1.1.1.1 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 5/8/20 ms[fw-2]snmp-agent[fw-2]snmp-agent sys-info contact lisi[fw-2]snmp-agent sys-info location branch-jifang [fw-2]snmp-agent sys-info version all[fw-2]snmp-agent community read public[fw-2]snmp-agent community write private[fw-2]snmp-agent trap enable[fw-2]snmp-agent target-host trap address udp-domain 192.168.3.100 udp-port 162 params securityname public
SW1
system-viewEnter system view, return to user view with Ctrl+Z.[Quidway]sysname SW1[SW1]int vlan 1[SW1-Vlan-interface1]ip add 192.168.4.10 255.255.255.0[SW1]ip route-static 0.0.0.0 0.0.0.0 192.168.4.1[SW1]ping 192.168.4.1 PING 192.168.4.1: 56 data bytes, press CTRL_C to break Reply from 192.168.4.1: bytes=56 Sequence=1 ttl=255 time = 70 ms Reply from 192.168.4.1: bytes=56 Sequence=2 ttl=255 time = 20 ms Reply from 192.168.4.1: bytes=56 Sequence=3 ttl=255 time = 20 ms Reply from 192.168.4.1: bytes=56 Sequence=4 ttl=255 time = 20 ms Reply from 192.168.4.1: bytes=56 Sequence=5 ttl=255 time = 10 ms --- 192.168.4.1 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 10/28/70 ms[SW1]snmp-agent sys-info contact lisi [SW1]snmp-agent sys-info location branch-jifang [SW1]snmp-agent sys-info version all[SW1]snmp-agent community read public[SW1]snmp-agent community write private[SW1]snmp-agent trap enable[SW1]snmp-agent target-host trap address udp-domain 192.168.3.100 udp-port 162 params securityname public[SW1]local-user user1New local user added.[SW1-luser-user1]password simple 123[SW1-luser-user1]service-type telnet level 3[SW1-luser-user1]quit[SW1]user-interface vty 0 4[SW1-ui-vty0-4]authentication-mode scheme[SW1-ui-vty0-4]quit
Web server
[root@localhost ~]# yum install httpd net-snmp[root@localhost ~]# service httpd startStarting httpd: [ OK ][root@localhost ~]# service snmpd startStarting snmpd: [ OK ]
四、扫描拓扑
五、远程管理
选中设备单击右键“Connect”,即可远程管理。