1.3.6.1.2.1.4.31.1.1 - Hello, anybody there?

94 Pages·2015·2.79 MB·English

.1.3.6.1.2.1.4.31.1.1 - Hello, anybody there?
Troopers 2015
Gabriel Müller, Senior Consultant
Facts and figures
AWK Group AG
Activity Consultancy, engineering and project management Background of our consultants
for informationtechnology from a single source
Professional experience of our consultants:
Owner The share capital is wholly owned by the partners
more than 15 years 10 to15 years 5 to10 years > 5 years
Founded in 1986
Employees Over150 staff
Professional training of our consultants:
Clients Over 400 Electrical Engineering Computer Science Physics Div.
Projects Over 4,000
Additional qualifications of our consultants:
Site Locations Zurich, Berne,Basle, Lausanne
Doctorate Business Management Degree
International Member of ITIC GROUP, aninternational network of
Network independent consultancy firms
0 % 25 % 50 % 75 % 100 %
Turnover Partners of AWK
Mio CHF
Fromlefttoright:
André Arrigoni, Ralph Tonezzer,
Peter Gabriel, Kurt Biri, Christian
Mauz, Oliver Vaterlaus
(Managing Partner)
2
Agenda
1. Motivation
2. SNMP Basics
3. Looking for IPv6 counters and routing information
4. Looking for IPv6 security information
5. Summary
6. Demo
3
Motivation
● … for monitoring
● … for monitoring of IPv6 information
● … for monitoring of IPv6 information with SNMP
“In theory there is no difference between theory and practice. In practice there is.”
(Yogi Berra)
4
SNMP Basics
Agent and Client
● SNMP Agent
 Provides management information
 In form of management objects (MOs)
 Uniquely defined by object identifiers (OIDs)
 In a tree-like format
 Management Information Base (MIB) describes information available
● SNMP Client
─ Allows user to retrieve information (get) or set configuration parameters (set)
(network) element NMS
get / set
SNMP SNMP
agent client
trap / inform
Note: ‘MIBs’ → MIB Modules (all available modules of a certain element together build the MIB)
5
SNMP Basics
MIB Tree
Example:
iso(1)
snmpwalk -v 2c -On -c … localhost 1.3.6.1.2.1.4.1
org(3) .1.3.6.1.2.1.4.1.0 = INTEGER: forwarding(1)
dod(6)
internet(1)
mgmt(2) private(4)
Enterprise MIBs
Standard MIBs
Cisco(9) Juniper(2636) netscreen(3224)
mib-2(1)
system(1) interface(2) at(3) ip(4) ipv6(55)
ipForwarding
RFC 4292: IP-Forwarding-MIB
RFC 4293: IP-MIB
6
SNMP Basics
IPv6 MIB Modules
● A bit of history
IPv6-MIB Current IP-MIB
Current IP-Forward-MIB
Source: www.cisco.com
7
SNMP Basics
IP-MIB (RFC 4293)
+--ip(4) (.1.3.6.1.2.1) //without .4.24
+--(Scalars)
+--ipAddrTable(20) //deprecated
+--ipNetToMediaTable(22) //deprecated
+--ipv4InterfaceTable(28) | +--ipSystemStatsTable(1)
+--ipv6InterfaceTable(30) | +--ipSystemStatsEntry (1)
+--ipIfStatsTable(3)
+--ipTrafficStats(31)
| +--ipIfStatsEntry(1)
+--ipAddressPrefixTable(32)
+--ipAddressTable(34)
+--ipNetToPhysicalTable(35)
+--ipv6ScopeZoneIndexTable(36)
+--ipDefaultRouterTable(37)
+--ipv6RouterAdvertTable(39)
8
SNMP Basics
IP-Forwarding-MIB (RFC 4292)
+--ipForward(24) (.1.3.6.1.2.1)
+--(Scalars)
+--ipForwardTable(2) //deprecated
+--ipCidrRouteTable(4) //deprecated
+--ipForwardConformance(5)
+--inetCidrRouteTable(7)
| +--inetCidrRouteEntry(1)
9
SNMP-Basics
IPv6-MIB (RFC 2465)
+--ipv6MIB(55)
+--ipv6MIBObjects(1)
| +--(Scalars)
| +--ipv6IfTable(5) | +--ipv6IfStatsEntry(1)
| +--ipv6IfStatsTable(6)
| +--ipv6AddrPrefixTable(7)
| +--ipv6RouteEntry(1)
| +--ipv6AddrTable(8)
| +--ipv6RouteTable(11)
| +--ipv6NetToMediaTable(12)
Definiton Datagram: “A self-contained, independent entity of data carrying sufficient information to be
routed from the source to the destination computer without reliance on earlier exchanges between this
source and destination computer and the transporting network.”
(RFC 1594)
10