net-snmp可扩展方案研究

《net-snmp可扩展方案研究》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、NetSnmpExtensibleagentschemeNetsnmpsupport2extensibleagentschemes:1.ProxyAgent*:161SNMPManagerSNMPMasterAgentSNMPSubAgent1SNMPSubAgent2SNMPSubAgent3SNMPSNMPFirewallProxyDevice*:PortCommunityName=Dev1CommunityName=Dev2CommunityName=Dev3MIBMIBMIBMIB*:Port*:PortProxie

2、dDevicesAgentSystem1)Featuresa)UsethestandardSNMPpacketformat.b)EveryProxieddeviceneedsanIPaddressanduniquecommunitystring.c)AproxySNMPsubagentlistensonanon-standardport,andsimplyreceivesrequestsfromthemasteragent.d)Masteragentmakesrequestdispatchdecisionbycommunit

3、ystringinrequest.e)Thisfunctionreliesonstaticconfigurationonmasteragentandsubagents.2)Net-SNMPConfigurationProxycreatesamappingbetweenOIDsandSubAgent.(MaybedifferentsubagenthassameOIDtree.)a)Community/ContextMappinglEveryproxieddeviceneedsauniquecommunitystring.lMa

4、pSNMPv1/v2ccommunitytoanamedSNMPv3context.#SkipthissectionifyouaregoingtobeusingSNMPv3toaccesstheproxyagentcom2sec-Cnctx_remote1notConfigUserdefaultremote_community1lAllowthe'notConfigUser'(amemberof'notConfigGroup')accessforthesecontexts.#Note:Sinceweusedacommonpr

5、efixforthecontextname,wejustneedoneaccesslineusingprefixmatching,insteadoftwousingexactmatching.accessnotConfigGroupctx_remoteanynoauthprefixsystemviewnonenonelRelatethecontexttoIPaddressandOIDofproxieddevice.#ForIGMPv2remotehost.proxy-Cnctx_remote1-v2c-clocal_comm

6、unityremote_ip1.1.3#ForIGMPv3remotehost:thisshouldbe1line,withoutthe''continuation.proxy-Cnctx_remote2-v3-uMD5DESUser-aMD5-A"PasswordA"-xDES-X"PasswordX"-lauthPrivremote_ip2.1.3Inthiscase,Proxymakespassingdecisionthroughcommunitystringincludedinpacketheader.Ifthe

7、reamarchedcommunityandOID,thentherequestissenttotherelatedIPaddress.lConfigureproxieddevice.#SkipthissectionifyouaregoingtobeusingSNMPv3toaccesstheproxyagentcom2secnotConfigUserproxy_ipproxy_communityb)RemappingOIDlEverythingNet-SNMPimplementsisinthe.iso.org(.1.3)t

8、ree.Soyoucouldremaparemotetreetoiso.4(.1.4),andnocontextsorspecialcommunitystringsareneeded.lIfyouaremonitoringspecificobjectsbyOIDs,thenyoumight