登录查看更多内容

What are the best ways to implement SNMP in your network?

由人工智能和领英社区提供技术支持

If you manage a network of devices, you probably want to monitor their performance, availability, and configuration. One of the most widely used protocols for network management is SNMP, or Simple Network Management Protocol. SNMP allows you to collect and manipulate data from your network devices using a standardized format and interface. But how can you implement SNMP in your network effectively and securely? Here are some best practices and tips to help you get started.

此文章中的业界达人

由社区从 15 条内容中精选。了解更多

Ayobanji Iluyomade

Manager, IT Service Performance at MTN Nigeria
Jitendra Kumar

Ex IT Manager Looking for a new role

1 Choose the right SNMP version

SNMP has three versions: SNMPv1, SNMPv2c, and SNMPv3. Each version has different features, security levels, and compatibility issues. SNMPv1 is the oldest and simplest version, but it has no encryption or authentication mechanisms. SNMPv2c adds some enhancements, such as bulk data transfer and 64-bit counters, but it still relies on plain text community strings for security. SNMPv3 is the most secure and advanced version, as it supports encryption, authentication, and access control. However, it also requires more configuration and resources. You should choose the SNMP version that suits your network needs and device capabilities.

添加您的观点

Ayobanji Iluyomade

Manager, IT Service Performance at MTN Nigeria
举报内容
For the sake of security, go for version 3. I don't know why anyone will sacrifice security at this time and age. You might struggle with implementation without the right skill sets initially but I think it is the way to go

已翻译

赞
Jitendra Kumar

Ex IT Manager Looking for a new role
举报内容
Fortify Authentication: Ditch those easily guessed default community strings! Create complex, unique ones for each device. If possible, upgrade to SNMPv3 for top-notch encryption and user authentication. Network Partitioning: Consider isolating SNMP traffic on a separate network. This keeps critical SNMP communication away from regular data flow, boosting overall security. Streamline Management: Use just one SNMP management tool to gather data from all devices. This simplifies things and reduces errors. Be Proactive: Enable SNMP traps on your devices. These alerts notify you of important events like high CPU usage, allowing you to tackle problems before they snowball.

已翻译

赞
Victor A.

Analista de Redes Sênior | AlhambraIT Brasil | Redes | Datacenter | Roteamento
举报内容
A maioria das series de equipamentos possuem o SNMPv3 e ele deve ser a primeira op??o para coleta de informa??es da sua rede. é a forma mais segura e rápida das três op??es do protocolo. Muitos linhas menores de equipamentos só entregam até o V2, mas se você utilizar controle de acesso, ACL com bloqueio de redes desconhecidas da porta 161 udp, poderá usar o SNMPv2 com um pouco mais de tranquilidade no seu ambiente.

已翻译

赞
Mohamed Ibrahim

Senior IT Engineer at MaxAB
举报内容
Based on my experience, While SNMPv2 is easier to set up, SNMPv3 offers better security features such as encryption and authentication. If security is a top priority, go with SNMPv3. The following are some points we can consider: 1- We must configure SNMPv3 Users and Groups: With SNMPv3, create users and groups, and define their access permissions (read-only or read-write). Use strong passwords based on your security requirements. 2- Implement Encryption and Authentication (SNMPv3): SNMPv3 provides encryption and authentication options. Choose appropriate authentication protocols (MD5 or SHA) and encryption algorithms (DES or AES) based on your security needs.

已翻译

赞
Jair Santos de Oliveira

??Analista de TI /??Windows Server/?? Suporte a Clientes /?? Redes /??????? Hayper-v , VmWare.exi /??Manuten??o em Geral Notebooks e Desktops / Manuten??o em Impressoras Laser/ ?? CFTV Instala??o de Cameras de Seguran?a
举报内容
O SNMP (Simple Network Management Protocol) é um protocolo amplamente utilizado para gerenciamento e monitoramento de redes. Ele permite que você obtenha informa??es sobre o estado e o desempenho dos dispositivos de rede. Aqui est?o algumas das melhores maneiras de implementar o SNMP em sua rede:

已翻译

赞

加载更多内容

2 Configure SNMP agents and managers

SNMP agents are the software components that run on your network devices and provide information to SNMP managers. SNMP managers are the software applications that run on your network management stations and request information from SNMP agents. To configure SNMP agents, you need to set the device IP address, SNMP port, community string, and MIB (Management Information Base) file. The MIB file defines the structure and content of the data that the agent can provide. To configure SNMP managers, you need to set the agent IP address, SNMP port, community string, and MIB file. You also need to specify the type of SNMP operation you want to perform, such as GET, SET, or TRAP.

添加您的观点

Alex Sant Anna Silvério

Analista de Seguran?a da Informa??o | Analista de Infraestrutura | Analista de TI
举报内容
Quando selecionar uma ferramenta de monitoramento, é crucial escolher uma que seja estável e flexível em rela??o às várias vers?es do protocolo SNMP. Isso é especialmente importante em redes maiores, onde é comum encontrar uma variedade de dispositivos, como impressoras, telefones IP e outros dispositivos IoT, que podem suportar diferentes vers?es do protocolo. Certifique-se de que a ferramenta escolhida seja capaz de lidar eficientemente com várias vers?es do SNMP ou, se preferir, que seja compatível com uma única vers?o do protocolo. Minha sugest?o é o Zabbix.

已翻译

赞
Victor A.

Analista de Redes Sênior | AlhambraIT Brasil | Redes | Datacenter | Roteamento
举报内容
Fabricantes fornecem a MIB e em muitas vezes um template completo para o seu gerenciar de SNMP/monitoramento. A principais ferramentas do mercado permitem customizar e adapta-las para um cenário especifico. Os templates também, pois uma coleta de informa??es n?o necessárias pode consumir recursos desnecessariamente.

已翻译

赞
Anupam Kumar Mishra

FDE @Harman International ? CISCO Certified CCST CyberSecurity ? Google Cloud Arcade Facilitator ? Google Cloud Certified
举报内容
Manufacturers provide the MIB and often a complete template for your SNMP/monitoring management. The main tools on the market allow you to customize and adapt them to a specific scenario. So do templates, as a collection of information that is not necessary can consume resources unnecessarily.

已翻译

赞

3 Secure your SNMP traffic

SNMP traffic can expose sensitive information about your network devices, such as their configuration, status, and performance. To protect your SNMP traffic from unauthorized access or modification, it is recommended to use SNMPv3 if possible, as it offers encryption, authentication, and access control features. Additionally, strong and unique community strings should be used for each device and manager and changed regularly. Access control lists (ACLs) should be used to restrict the IP addresses that can access your SNMP devices and managers. Firewalls and VPNs should also be implemented to filter and encrypt your SNMP traffic. Lastly, SNMP traps can be used to alert you of any abnormal or suspicious events on your network devices.

添加您的观点

Victor A.

Analista de Redes Sênior | AlhambraIT Brasil | Redes | Datacenter | Roteamento
举报内容
Proteja o seu trafego SNMP manipulando o acesso ao protocolo, restringindo as redes com autoriza??o de fazer as coletas, impedindo que esteja aberto pra internet(limitar para sua LAN). Utilize communities com o mesmo critério de senhas de alta seguran?a. Um SNMP vulnerável é facilmente vitima de man-in-the-middle ou replay attack.

已翻译

赞
Mark Haines

Creative Solver of Technical Issues Big and Small
举报内容
Secure and standardize your SNMP configuration. Does all your network support the latest version of SNMP? Are there plans to replace antiquated infrastructure? One of the most important parted of an effective SNMP strategy should revolve around security best practices.

已翻译

赞

4 Optimize your SNMP performance

SNMP can generate a high volume of traffic on your network, particularly if you have a large number of devices and managers. This can negatively impact the performance and bandwidth of your network. To optimize your SNMP performance, you should use SNMPv2c or SNMPv3 if possible, as they support bulk data transfer and reduce the number of SNMP messages. Additionally, set polling intervals that are suitable for your network size and device type. Too short intervals can overload your network and devices, while too long intervals may miss important changes or issues. Furthermore, utilize SNMP filters to limit the amount of data collected and stored, allowing you to specify the types and values of data that are relevant. Lastly, take advantage of SNMP thresholds to trigger actions or alerts based on certain conditions or values; this will automate your network management tasks and reduce manual intervention.

添加您的观点

Victor A.

Analista de Redes Sênior | AlhambraIT Brasil | Redes | Datacenter | Roteamento
举报内容
Em uma rede grande com alta disponibilidade é essencial ter o SNMP coletando informa??es para analisar o comportamento da mesma, mas o custo dos recursos pode ser altíssimo. A quantidade de pacotes e informa??es coletadas acaba exigindo maior armazenamento, processamento e um pouco da rede. Verifique as MIBS e otimize a ferramenta de gest?o para coletar somente necessário e intervalos específicos que n?o causem estresse para as caixas monitoradas.

已翻译

赞

5 Keep your SNMP updated and maintained

SNMP is constantly evolving and improving, as new features, standards, and security patches are released. You should keep your SNMP software and hardware updated and maintained, to ensure that you are using the latest and most reliable version of SNMP. You should also monitor and troubleshoot your SNMP system regularly, to detect and resolve any errors, failures, or vulnerabilities. You can use SNMP tools and utilities, such as SNMPwalk, SNMPtest, or SNMPcheck, to perform various SNMP operations and tests on your network devices and managers.

添加您的观点

Victor A.

Analista de Redes Sênior | AlhambraIT Brasil | Redes | Datacenter | Roteamento
举报内容
Utilize equipamentos novos que n?o atingiram o EoL. Acompanhe as atualiza??es do fabricantes, pois mesmo se tratando de um protocolo que já esta a décadas sendo usado, é comum ter erros ou comportamento inesperado dependendo do equipamento.

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Computer Networking

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What are the best ways to implement SNMP in your network?

1

2

3

4

5

6

1 Choose the right SNMP version

2 Configure SNMP agents and managers

3 Secure your SNMP traffic

4 Optimize your SNMP performance

5 Keep your SNMP updated and maintained

6 Here’s what else to consider

Computer Networking

给文章评分

感谢您的反馈

更多Computer Networking相关文章

更多相关阅读内容

What are the best ways to implement SNMP in your network?

1

2

3

4

5

6

1 Choose the right SNMP version

2 Configure SNMP agents and managers

3 Secure your SNMP traffic

4 Optimize your SNMP performance

5 Keep your SNMP updated and maintained

6 Here’s what else to consider

Computer Networking

给文章评分

感谢您的反馈

查看其他技能