Lesson 53: Network Management Protocols

Effective network operation relies on continuous monitoring and logging.

SNMP (Simple Network Management Protocol)

SNMP is used to collect data from network devices and modify device configuration.

• NMS (Network Management Station): The software that monitors the network.
• Agent: Software running on the device (router/switch).
• MIB (Management Information Base): A hierarchical structure defining the variables that can be queried or set.
• SNMP Traps: Asynchronous messages sent by the agent to the NMS when a significant event occurs (e.g., interface link down).

Security: SNMPv3 is required in modern networks as it offers authentication and encryption, unlike SNMPv1/v2c.

Syslog (System Logging)

Syslog provides message logging for monitoring system events. Messages are categorized by severity levels (0 is Emergency, 7 is Debugging).

Cisco Syslog Severity Levels (Example):

• Level 1: Alert (Immediate action needed)
• Level 5: Notification (Normal but significant condition)
• Level 6: Informational (Routine activity, useful for tracking)

It is best practice to configure devices to send syslog messages to a centralized, external syslog server for long-term storage and analysis.