網(wǎng)路管理相關(guān)技術(shù)

1、網(wǎng)路管理相關(guān)技術(shù)、應(yīng)用與趨勢(shì)網(wǎng)路管理相關(guān)技術(shù)、應(yīng)用與趨勢(shì)張晃崚 CCIE #13673麟瑞科技區(qū)域銷售事業(yè)處 副處長Agenda網(wǎng)路發(fā)展循環(huán)與趨勢(shì)網(wǎng)路管理分類網(wǎng)路管理相關(guān)技術(shù)與應(yīng)用網(wǎng)路管理的未來網(wǎng)路發(fā)展循環(huán)與趨勢(shì)網(wǎng)路發(fā)展循環(huán)與趨勢(shì)網(wǎng)路發(fā)展循環(huán)與趨勢(shì)網(wǎng)路發(fā)展循環(huán)與趨勢(shì)Networks are Increasing in scale and complexityNo longer just managing the elements, but the services across it as wellQoS, security, uptime, availabilityEthernet, Int

2、ernet802.11 WIFI WLANWiMAX ?網(wǎng)路管理的分類網(wǎng)路管理的分類(FCAPS)ISO defines five functional area of network managementFault ManagementConfiguration ManagementAccounting ManagementPerformance ManagementSecurity Management網(wǎng)路管理的分類網(wǎng)路管理的分類(Fault Management)The process of locating, diagnosing, and correcting network pro

3、blems網(wǎng)路管理的分類網(wǎng)路管理的分類(Configuration Management)The process of obtaining data from the network and using that data to manage the setup of all network devicesAllows access to configuration informationFacilitates remote configuration and provisioningProvides an up-to-date inventory of network components網(wǎng)

4、路管理的分類網(wǎng)路管理的分類(Accounting Management)Measuring the usage of network resources by users in order to establish the metrics, check quotas, determine costs and bill usersMeasures and reports accounting information based on individual groups and usersAdministers the cost of the networkInternal verificatio

5、n of third-party billing for usage網(wǎng)路管理的分類網(wǎng)路管理的分類(Performance Management)Ensuring that the data network remains accessible and has adequate bandwidthReduces network overcrowding and inaccessibilityProvides a consistent level of service to the network userDetermine utilization trends to proactively is

6、olate and solve performance problems網(wǎng)路管理的分類網(wǎng)路管理的分類(Security Management)Protecting sensitive information on devices attached to a data network by controlling access points to that informationBuild network user confidenceSecures sensitive information from both internal and external sourcesProtects the

7、 network functionality from malicious attacks網(wǎng)路管理相關(guān)技術(shù)網(wǎng)路管理相關(guān)技術(shù)SNMPSNMPv1,SNMPv2, SNMPv3MIBRMONSyslogNetflow/sFlow網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Fault Management)Event logging Syslog serverEvent consolidationEvent correlation Expert systemEnvironment Monitoring Temperature, powerAlarm/Automatically response網(wǎng)路管理相關(guān)網(wǎng)路

8、管理相關(guān)應(yīng)用應(yīng)用(Configuration Management)Keep multiple copies of recent configurations (compare, download, etc.)Simplify and control configuration changes (commands and software images) to multiple devicesTrack what changes were made, when the changes were made and who made the changesNetwork problems typi

9、cally begin with incorrectly configured devices網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Configuration Management)Cisco CiscoWorks Resource Management Essential (RME)Configuration managerSoftware image managerChange audit services網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Accounting Management)NetflowCisco proprietoryV1, V5, V6, V9 (RFC 3954)sFlowIn

10、Mon Corp. proposed (RFC 3176)IPFIX (Future)IP Flow Information ExportTraffic Analysis & Accounting SolutionssFlowInMonTraffic ServersFlow enabled switches & routersNetwork-wide, continuous surveillance20K+ ports from a single pointTimely data and alertsReal-time top talkersSite-wide thresholds and a

11、larmsConsolidated network-wide historical usage dataFoundry SwitchesForce10 SwitchesHP ProCurve 9300sFlow ProbeHP XRMON enabled switchesHP ProCurve SwitchesXRMONNetFlowNetFlow enabled routersCisco, Juniper, EnterasysSNMPAny switch/router網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Accounting Management)Ethernet, IP and TCP con

12、nection information is presented 網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Accounting Management)網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Performance Management)SNMPSNMPv1,SNMPv2, SNMPv3MIBRMONSyslogNetflow/sFlowTraffic Monitoring/Visualizing MRTG Cacti VisualPulse SmokePingTraffic Accounting/Statistics NetFlow/sFlow InMon Traffic ServerService Co

13、ntrol/Bandwidth Management Service Control Engine (SCE)網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Performance Management)Cacti網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Performance Management)Test ReportTest Graph網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Performance Management)VisualPulse網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Performance Management)SmokePingNETWORKBILLINGSERVICE CONTROLPLATFORMSU

14、BSCRIBER MANAGERCOLLECTIONMANAGERDHCP/AAA/RADIUSSERVICESPORTALSUBSCRIBERS網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Performance Management)Service Control EngineLimit P2P flow=10Kbps網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Performance Management)網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Security Management)Security appliances managementSecurity events consolidation and cor

15、relationIdentity managementCisco MARS (Monitoring, Analysis & Response System)Gain Network IntelligenceTopology, traffic flow, device configuration, and enforcement devicesContextCorrelationCorrelates, reduces and categorizes eventsValidates incidentsValid IncidentsSessionsRulesVerifyIsolated Events

16、CorrelationReductionRouter Cfg.Firewall LogSwitch Cfg.Switch LogServer LogAV AlertApp LogVA ScannerFirewall Cfg.NetflowNAT Cfg.IDS Event.網(wǎng)路管理相關(guān)網(wǎng)路管理相關(guān)應(yīng)用應(yīng)用(Security Management)SureVector Analysis Visible and accurate attack path Drill-down, full incident and raw event details Pinpoint the true sources of anomalous and attack behavior More complete and accurate story1. Host A Port Scans Target X2. Host A Buffer Overflow Attacks