Performance Analysis of SNMP over SSH

The simple network management protocol (SNMP) is widely used for remote network resource management due to its simplicity and distributed management capabilities. However, the increased use of SNMP to manage and control network resources such as routers and servers also introduces security risks whereby unauthorized users can retrieve information or modify the given resources remotely. The basic security framework introduced in SNMPv3 only specifies the use of symmetric cryptography techniques to address the security concerns. This paper outlines a new methodology, public-key security model (PSM), to integrate public cryptography techniques into the SNMP framework. It extends the existing user-based security model (USM) to include per-session authentication and encryption keys, thus enhancing the security of the SNMPv3 protocol.

Since decades, there has been many efforts to make Simple Network Management Protocol popularly called as SNMP. The study has revealed a protocol, based on review published in 2002, which includes User-based Security Model (USM), which comprise of users and key-management infrastructure issues. Since that period the network operators have been reporting that deployment of another user with key management infrastructure for securing SNMP is an expensive proposition and a appropriate reason to defy deployment of SNMPv3. This paper narrates how existing security protocols operate above the transport layer and beneath application protocol render a secured SNMP. These protocols can take gain of deployed key management infrastructures that are employed in other network management interface and this would incur less operational costs linked with secured SNMP. The objective of this paper is focus on performance analysis of a model implementation, comparing the functioning and performance of SSH, SNMPv3, TLS, and DTLS with other flavors of SNMP. The paper also attempts to study the differences among diverse options to secure SNMP and offer strategies for selecting solutions to apply or deploy.

SNMP (Simple Network Management Protocol) is a standard protocol for management of network devices. It provides excellent features, such as scalability, information management, authentication, encryption, and access control. However, SNMP has a structural weakness to fully support control functions for integrated management of digital convergence devices, and it has a limitation of message length in SNMP communication. In this paper, we present an extended SNMP scheme for integrated management of digital convergence devices with control functions. We modified the SNMP architecture by adding DDS (Device Driver Subsystem) to SNMP engine for controlling different devices and by defining CADM (Control Agent Driver Model), in order to solve the ambiguity problem between 'set' and 'control' of SNMP. And the extended SNMP made it easy for SNMP applications to use various control functions. The extended SNMP can transport massive high-level information, such as messages in XML format by adding three new SNMP commands, which eliminate the limit of message length. Therefore, the extended SNMP is adequate to develop context-aware SNMP applications.

We propose a 6LoWPAN-SNMP that enables transmission of SNMP messages over IPv6-enabled low-power wireless personal area networks (6LoWPAN). The 6LoWPAN-SNMP is an extended modification of the Simple Network Management Protocol (SNMP). Compared to traditional IP-networks, 6LoWPAN is a severely resource-constrained network; hence, existing SNMP protocols need to be modified to meet the goals in RFC 4919, ldquo6LoWPAN Problems and Goalsrdquo. The proposed 6LoWPAN-SNMP provides for native communication of SNMP messages on LoWPAN networks. The proposed mechanism is resource-efficient and fully compatible with the standard SNMP. It utilizes SNMP header compression and provides extended protocol operations to reduce the number of SNMP messages generated among the SNMP entities. Compatibility with the standard SNMP is achieved by a proxy forwarder on the 6LoWPAN gateway. The proposed mechanism is implemented on actual hardware platforms using the open-source Net-SNMP library and the Berkeley 6LoWPAN on the TinyOS 2.1. The feasibility and effectiveness of 6LoWPAN-SNMP is evaluated. The experimental results show that 6LoWPAN can be effectively supported with network management functionality based on SNMP.

This paper presents Virtual-Machines-MIB, a MIB (Management Information Base) directed to virtual machines management through SNMP (Simple Network Management Protocol). Virtual-Machines-MIB aims to define a standard interface of virtual machines management, allowing the management of several virtual machines monitors, like Xen, KVM and VMWare, with a common SNMP management tool. Different from previous virtual machines management MIBs, which allows the manager to perform only monitoring operations, Virtual-Machines-MIB allows to perform control operations, like create, delete, restart, turn on, pause and shut down virtual machines. It is also possible to use the proposed solution to change a virtual machine's name, amount of RAM, virtual CPU's and virtual storage drives. Practical results are presented using ordinary SNMP management tools performing KVM and Xen management. To do this, SNMP agents which support Virtual-Machines-MIB were developed and installed on KVM and Xen hosts. These SNMP agents are based on NET-SNMP public domain's agent, that was extended to support Virtual-Machines-MIB using libvirt API.

Today few organizations have a thorough understanding of what is on their networks at any given time. This study tries to develop Computer and Network Asset Manager (CNAM) that is a network management application which helps large enterprises, and Small medium enterprises (SMEs) service providers, manage their data centers and IT infrastructure efficiently and cost effectively. CANM collects information on all hardware components of the network instruments that are on the network. In this project, a real-time network monitoring method is suggested for dynamic information to reduce the complexity and cost based on network management. In the proposed method, a Simple Network Management Protocol (SNMP) is first used to collect data for start interaction between equipment in the specific data center, to gather these data SNMP would need to request it from Management Information Base (MIB) that served as a database for stored information. Furthermore, to ensure data authenticity in the management station that fetches real-time data periodically from equipment, network engineer would have to manually key-in static information into CNAM when it was first launched. The SNMP would then pick up on this stored static information and automatically began collecting real-time data; this feature will be developed with the help of Model View Controller (MVC) pattern that is a software pattern for implementing user interfaces. It allows users to have interaction with the CNAM as well as input the related data. The object oriented approach shall be used to implement SNMP and MIB which represents system management information. Web Based Enterprise Management (WBEM) is required in order to transfer protocol like SNMP, as well as to enter the actual data manually for further authenticity with the real time data. This study would hopefully encourage companies to try an interactive solution for problem in managing their equipment in the data center.

규모가 커지고 라우터, 스위치, 서버 등과 같은 구성 요소가 다양해지고 있는 네트워크를 효율적으로 지원할 수 있는 SNMP(Simple Network Management Protocol)가 네트워크 관리의 표준 프로토콜로 가장 널리 사용되고 있다. 하지만, SNMP는 네트워크 과부하, 처리 지연 그리고 테이블 검색의 비효율성과 같은 성능적 문제점이 있다. 본 연구에서는 SNMP의 성능 개선을 위해 SNMP-GetBulk 응답메시지 내의 중복되는 OID 정보를 줄이는 기법과 NMS 캐쉬와 새로운 SNMP-GetUpdate 요청이 결합된 기법의 두 가지 제안을 제시한다. 분석을 통해 첫 번째 제안 기법은 네트워크 과부하를 감소시키고, 두 번째 기법은 SNMP 요청의 처리 지연과 테이블 검색 문제를 개선함을 보였고, 이로 인해 네트워크 관리의 확장성도 개선할 수 있다. SNMP(Simple Network Management Protocol) is most commonly used as a standard protocol for effective network management by supporting the increasing size of the network and the variety of network elements such as router, switch, server and so on. However, SNMP has performance drawbacks of network overhead, processing latency, and the inefficiency in data retrieval. In this paper, we propose two schemes to improve the performance of SNMP; 1) the first scheme to reduce the amount of redundant OID information within a SNMP-GetBulk response message, 2) the second scheme of newly proposed SNMP-GetUpdate message combined with the cache in MNS. Through the analysis with real experiments, we show that our first scheme reduces the network overhead and the second scheme improves the processing latency and the retrieval of SNMP MB tables. And, therefore the scalability of network management can be improved.

Feasibility of SNMP OID compression

IPv6 over low-power wireless personal area networks (6LoWPAN), composed by large number of constrained devices with wireless communication ability, are becoming more and more important, not only because their reduced cost but also a lot of real world applications and their ability to connect to IP networks. Since devices in 6LoWPAN are expected to be deployed in extremely large numbers and they are expected to have limited compute, display and input capabilities, it makes network management critical in 6LoWPAN. The Simple Network Management Protocol (SNMP) is a widely used application protocol for network management and information control. In this paper, a network management architecture of 6LoWPAN based on SNMP is designed, including SNMP agents for constrained devices supporting IEEE 802.15.4 Radios and Contiki Embedded Operating System and SNMP manager in real IPv6 network.

In this paper, we present the network management model for a multimedia service in the broadband wireless access network (BWA), also known as the local multipoint distribution service. The BWA typically provides band ranges between 10-66 GHz, and is further characterized by high rates and short ranges due to rain and foliage attenuation. The proposed model consists of a base station manager (BS) a SNMP (simple network management protocol) agent, and a user-friendly graphic user interface (GUI). The manager-to-SNMP agent communicates using a mechanism based on the extensible SNMP trap feature. SNMP agents, which are used to manage elements of the BWA network, communicate with the BS manager using SNMP PDU. BS manager provides configuration management function and fault management function.

This paper proposes a detection scheme for reactions of optical fiber sensors and shows experiments and results to identify sensor conditions with Simple Network Management Protocol (SNMP) as the Internet standard protocol. Optical Sensory Nerve network (OSN) with optical fiber sensors has been developed in order to alleviate issues on wireless sensor networks about battery lifetime and data communication. Moreover, a method to gather sensed information with SNMP and a commercially available device has been devised; however, this method holds issues on limited performance. Thus, this paper demonstrates the detection scheme using original SNMP agent software and experiments utilizing two types of sensors (binary switch sensors & mat sensors). The SNMP agent software allows to increase the number of sensors which can be detected and installed in OSN.

This paper proposes a system architecture design for the Internet of Things (IoT) implemented in temperature and relative humidity measurement using DHT 11 temperature and humidity sensor. Simple Network Management Protocol (SNMP) is used to manage different network devices and transfer information so that the ESP32 Wi-Fi microcontroller connected to the sensor can communicate with Open Platform Communication (OPC) server. In addition, the network variables are identified by Object Identifiers (OIDs) then collected to Management Information Base (MIB). These two elements are required by the SNMP monitoring tool for enabling the user to monitor network infrastructure and run troubleshooting. Data acquired from the ESP32 Wi-Fi microcontroller are accumulated on the OPC server using SNMP and subsequently transferred to the OPC Client such as Human Machine Interface (HMI) and OPC data logger. The OPC server has a ping channel feature to determine network latency measured as a round trip time – the time taken for data to get its destination and back again. Later on, the ESP32 microcontroller was also connected to a mobile application via Wi-Fi for displaying real-time data simultaneously with the HMI. The SNMP network latency test on the proposed system architecture design results in 126,33 ms for 13 minutes without a corrupt packet of data. The result indicates SNMP can be used as an alternative protocol for IoT data communication.

Energy automation systems have been expanding and there are more Ethernet capable devices in the network. Protection relays, switches, GPS and also computers have many critic diagnosis information available via the network interface. The intention of this paper is to present how the already available information can be used in the human-machine interfaces and SCADA systems to have a more detailed diagnosis of the network and its devices. Information like IED (Intelligent Electronic Devices) health status, CPU loads, fiber-optics light intensity, GOOSE (Generic Oriented Object Substation Event) message errors, can be used to early detect equipment failure and network instabilities. Early analysis can prevent problems with the equipment interlocking and protection functionalities and improves the power system availability. The simple network management protocol (SNMP) is a management protocol widely implemented, which makes it an ideal manufacturer-independent solution for this purpose. To test this concept a Siemens SCADA system was used as a manager of the SNMP enabled devices in an already commissioned power plant with Siemens Siprotec 4 protection relays. Further ideas were also developed.

Simple Network Management Protocol (SNMP) is used to communicate between a manager and agents in the internetworking management system. The manager monitors the network by sending queries to agents, which, in turn, perform corresponding operations and reply to the manager with the query results. In this paper, we use formal semantics as a means of specifying query requirement's analysis and of establishing a conceptual basis for query procedure derivation. Our approach is demonstrated with respect to the two general purpose queries (get and get-next) of SNMP.

HINOC (High performance Network Over Coax) is an access network technology aimed at solving the bandwidth limit in user area. With the development of HINOC technology, it is significant to build an effective and efficient management system for HINOC network. After introduction to the basic principles of HINOC, this paper demonstrates a HINOC management system based on SNMP (Simple Network Management Protocol), of which we implemented SNMP agent. Through comparison with the proxy agent scheme in several aspects, we find that the embedded agent scheme is more suitable for HINOC. To meet the detailed management requirements for HINOC, a set of HINOC-MGMT-MIB is defined and implemented in HB/HM software system, which enables monitoring of base information and network status, access control, QoS management, software automated upgrade, etc. The lab trial results manifest the agent functions properly on HINOC device.