network management

  1. Network Management Station
    The administrator
  2. MIB
    tracks of the interface of errors how many packets
  3. management network
    that provides the interconnection between managing systems and the managed systems
  4. production network
    the traffic of subscribers and end users
  5. Out of band connection
    no user traffic on this
  6. Dedicated Management Network
    • Advantages
    • –Reliability
    • –Interference avoidance
    • –Ease of network planning
    • –Security
    • •Disadvantages
    • –Cost and overhead
    • –No reasonable alternative (DSL
    • line, for example)
  7. Network monitoring and alerting
    is that the staff or someone else looking at the network
  8. Audit
    what users are doing
  9. Network Operations Center (NOC)
    • The place from which large networks are managed
    • May or may not house the communications
    • equipment itself
  10. Packet-level detail
    • Seeing too many errors on an interface
    • Pc might be sending out bad frames
  11. Monitoring from a switch
    You will not always see what some one else will see on their comps
    • bidirectionaltraffic is mirrored from source Gigabit Ethernet port 1 to destination GigabitEthernet port 2, retaining the encapsulation method.
    • Switch(config)# monitor session 1 source interface gigabitethernet0/1
    • Switch(config)# monitor session 1 destination interface gigabitethernet0/2 encapsulation replicate
    • supports source ports, source VLANs, and destination ports on different switches, enabling remote monitoring of multiple switches across your network.
    • The RSPAN traffic from the source ports or VLANs is copied into the RSPAN VLAN and forwarded over trunk ports
  14. Remote Span
    • shows how to create
    • RSPAN VLAN 901.
    • –Switch(config)# vlan 901
    • –Switch(config-vlan)# remote span
    • –Switch(config-vlan)# end
    • My switch and any one associated with
    • that route
    • remove any existing RSPAN configuration for session 1, configure RSPAN session 1 to monitor multiple source interfaces, and configure the destination as RSPAN VLAN
    • 901.
    • –Switch(config)# no monitor session 1
    • –Switch(config)# monitor session 1 source interface gigabitethernet0/1 tx
    • –Switch(config)# monitor session 1 source interface gigabitethernet0/2 rx
    • Switch(config)# monitor session 1 source interface port-channel 2
    • Switch(config)# monitor session 1 destination remote vlan 901
    • –Switch(config)# end
  16. Wireshark
    • Free Protocol Analyzer
    • Collects packets as they pass by your NIC
    • Can collect everything
  17. Capture Filter
    only collect items that match particular criteria
  18. Wireshark
    is a LAN tool
  19. span command
    • You will see all the traffic to and from the port
    • The user cannot detect it
  20. Display Filters Combining Two Tests
    • and, or
    • Both tests must be TRUE for the result to be TRUE and the packet to be kept
    • or
    • If either test is TRUE, the result is TRUE and the packet will be kept
Card Set
network management
Ch 3