链接:http://www.tech-faq.com/snmp.html
重点是community,对snmp设备(服务),community就类似于密码
SNMP is the Simple Network Management Protocol.
The SNMP protocol is used by network management systems to communicate with network elements.
For this to work, the network element must be equipped with an SNMP agent.
Most professional-grade network hardware comes with an SNMP agent built in. These agents must be enabled and configured to communicate with the network management system.
Operating
systems
, such as Unix and Windows, can also be configured with SNMP agents.
SNMP Messages
SNMP messages may be initiated by either the network management system (NMS) or by the network element.
An SNMP TRAP is a message which is initiated by a network element and sent to the network management system. For example, a router could send a message if one of it's redundant power supplies fails or a printer could send an SNMP trap when it is out of paper.
An SNMP GET is a message which is initiated by the network management system when it wants to retrieve some
data
from a network element. For example, the network management system might query a router for the utilization on a WAN link every 5 minutes. It could then create charts and graphs from that data, or it could warn the operator when the link was overutilized.
An SNMP SET is a message which is initiated by the NMS when it wants to change data on a network element. For example, the NMS may wish to alter a static route on a router.
The SNMP MIB
The SNMP MIB, or Management Information Base, is a collection of variables which is shared between the NMS and the network element (NE).
The MIB is extensible, which means that hardware and software manufacturers can add new variables to the MIB. These new MIB definitions must be added both to the network element and to the network management system.
SNMP Community Strings
The most basic form of SNMP security is the Community String.
SNMP Community Strings are like passwords for network elements.
Most often, there is one community string which is used for read-only access to a network element. The default value for this community string is often "public". Using this community string like a password, the NMS can retrieve data from network elements.
Less often, there is also a read-write community string. The default value for this is often "private". Using this community string, the NMS can actually change MIB variables on a network element.
SNMP Versions
The SNMP protocol has benefited from major upgrades since its introduction in 1988.
Unfortunately, a large percentage of network element vendors and even some network management system vendors are not taking advantage of these improvements.
Many network elements support only SNMPv1 and SNMPv2c. Support for SNMPv3 is minimal.
Version | Description |
---|---|
SNMPv1 | SNMPv1, which implements community-based security |
SNMPv2c | SNMPv2 with community-based security |
SNMPv2u | SNMPv2 with user-based security |
SNMPv2 | SNMPv2 with party-based security |
SNMPv3 | SNMPv3, which implements user-based security |