互联网络联网的基本原理6-网络管理(zslcn周生烈编译摘注评)

1、PAGE 6PAGE 7啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊啊 (fm.DocWiki CISCO / zslcn编译注)互联网络联网的基本原理6_网络管理(zslcn周生烈编译摘注评)六Network Management Basics 网络管理基本原理关键词：网络管理模型，配置管理,审计管理,故障管理,安全管理,性能管理指导目录联网技术手册 指导目录Part HYPERLINK /wiki/Internetworking_Technology_Handbook l Internetworking_Basics#Internetworking_Basics 1 In

2、ternetworking Basics 互联网络联网基本原理Part HYPERLINK /wiki/Internetworking_Technology_Handbook l LAN_Technologies#LAN_Technologies 2 LAN Technologies局域网技术part HYPERLINK /wiki/Internetworking_Technology_Handbook l WAN_Technologies#WAN_Technologies 3 WAN Technologies 广域网技术part HYPERLINK /wiki/Internetworking

3、_Technology_Handbook l Internet_Protocols#Internet_Protocols 4 Internet Protocols 互联网协议part HYPERLINK /wiki/Internetworking_Technology_Handbook l Bridging_and_Switching#Bridging_and_Switching 5 Bridging and Switching 桥接和交换part HYPERLINK /wiki/Internetworking_Technology_Handbook l Routing#Routing 6 R

4、outing 路由part HYPERLINK /wiki/Internetworking_Technology_Handbook l Network_Management#Network_Management 7 Network Management 网络管理part HYPERLINK /wiki/Internetworking_Technology_Handbook l Voice.2FData_Integration_Technologies#Voice.2FData_Integration_Technologies 8 Voice/Data Integration Technolog

5、ies 声音/数据集成技术part HYPERLINK /wiki/Internetworking_Technology_Handbook l Wireless_Technologies#Wireless_Technologies 9 Wireless Technologies 无线技术part HYPERLINK /wiki/Internetworking_Technology_Handbook l Cable_Access_Technologies#Cable_Access_Technologies 10 Cable Access Technologies 有线接入技术part HYPER

6、LINK /wiki/Internetworking_Technology_Handbook l Dial-up_Technology#Dial-up_Technology 11 Dial-up Technology 拨号技术part HYPERLINK /wiki/Internetworking_Technology_Handbook l Security_Technologies#Security_Technologies 12 Security Technologies 安全技术part HYPERLINK /wiki/Internetworking_Technology_Handboo

7、k l Quality_of_Service_Networking#Quality_of_Service_Networking 13 Quality of Service Networking 联网服务质量part HYPERLINK /wiki/Internetworking_Technology_Handbook l Network_Caching_Technologies#Network_Caching_Technologies 14 Network Caching Technologies 网络缓存技术part HYPERLINK /wiki/Internetworking_Techn

8、ology_Handbook l IBM_Network_Management#IBM_Network_Management 15 IBM Network Management IBM网络管理part HYPERLINK /wiki/Internetworking_Technology_Handbook l Multiservice_Access_Technologies#Multiservice_Access_Technologies 16 Multiservice Access Technologies 多业务接入技术 HYPERLINK /wiki/Network_Management_

9、Basics /wiki/Network_Management_BasicsThis page was last modified on 17 December 2009, at 21:55六Network Management Basics 网络管理基本原理From DocWikiJump to: HYPERLINK /wiki/Network_Management_Basics l column-one#column-one navigation, HYPERLINK /wiki/Network_Management_Basics l searchInput#searchInput sea

10、rchThis article describes functions common to most network-management architectures and protocols. It also presents the five conceptual areas of management as defined by the International Organization for Standardization (ISO). Subsequent articles in Network Management address specific network manag

11、ement technologies, protocols, and platforms in more detail. 本章叙述了管理功能,它们对于大多数网络管理体系结构和协议s都是共同的。它也介绍了,如ISO所定义的,五种概念区域的管理。在第IX部分的各章,“网络管理”更详细地讲述具体的网络管理技术s,协议s,和平台s。Contents HYPERLINK javascript:toggleToc() hide HYPERLINK /wiki/Network_Management_Basics l What_Is_Network_Management.3F#What_Is_Network_

12、Management.3F 1 What Is Network Management? HYPERLINK /wiki/Network_Management_Basics l A_Historical_Perspective#A_Historical_Perspective 1.1 A Historical Perspective HYPERLINK /wiki/Network_Management_Basics l Network_Management_Architecture#Network_Management_Architecture 2 Network Management Arch

13、itecture HYPERLINK /wiki/Network_Management_Basics l Figure:_A_Typical_Network_Management_Architecture_Maintains_Many_Relationships#Figure:_A_Typical_Network_Management_Architecture_Maintains_Many_Relationships 2.1 Figure: A Typical Network Management Architecture Maintains Many Relationships HYPERL

14、INK /wiki/Network_Management_Basics l ISO_Network_Management_Model#ISO_Network_Management_Model 3 ISO Network Management Model HYPERLINK /wiki/Network_Management_Basics l Performance_Management#Performance_Management 3.1 Performance Management HYPERLINK /wiki/Network_Management_Basics l Configuratio

15、n_Management#Configuration_Management 3.2 Configuration Management HYPERLINK /wiki/Network_Management_Basics l Accounting_Management#Accounting_Management 3.3 Accounting Management HYPERLINK /wiki/Network_Management_Basics l Fault_Management#Fault_Management 3.4 Fault Management HYPERLINK /wiki/Netw

16、ork_Management_Basics l Security_Management#Security_Management 3.5 Security Management HYPERLINK /wiki/Network_Management_Basics l Review_Questions#Review_Questions 4 Review Questions 1. What Is Network Management? 什么是网络管理？Network management means different things to different people. In some cases

17、, it involves a solitary network consultant monitoring network activity with an outdated protocol analyzer. In other cases, network management involves a distributed database, autopolling of network devices, and high-end workstations generating real-time graphical views of network topology changes a

18、nd traffic. In general, network management is a service that employs a variety of tools, applications, and devices to assist human network managers in monitoring and maintaining networks. 网络管理对于不同的人们意味着不同的事情。在某些情况下,它有一个独立的网络监护,用一个保持更新的协议分析器,监视着网络的活动。在其它的情况下,网络管理包含了一个分布式数据库,自动轮询网络设备s,并在高端工作站s上,产生网络拓扑

19、变化和信流的实时图形视图。一般说来,网络管理是一种服务,它使用各种工具,应用程序s,和设备s,帮助网络管理者的人们来监督和维护网络s。 A Historical Perspective 历史透视The early 1980s saw tremendous expansion in the area of network deployment. As companies realized the cost benefits and productivity gains created by network technology, they began to add networks and ex

20、pand existing networks almost as rapidly as new network technologies and products were introduced. By the mid-1980s, certain companies were experiencing growing pains from deploying many different (and sometimes incompatible) network technologies. 八十年代早期,已经看到了网络部署区域极大的扩充。当公司s意识到了由于网络技术所产生的价值利益和生产收益,

21、他们就开始增加网络s和扩充现有的网络s,几乎与新技术s出现的速度和产品的引进一样迅速。到了八十年代中期,某些公司从部署许多不同的(有时是不兼容的)网络技术中,已经体验到增长的苦涩。The problems associated with network expansion affect both day-to-day network operation management and strategic network growth planning. Each new network technology requires its own set of experts. In the earl

22、y 1980s, the staffing requirements alone for managing large, heterogeneous networks created a crisis for many organizations. An urgent need arose for automated network management (including what is typically called network capacity planning) integrated across diverse environments. 伴随网络扩充而带来的问题s,同时影响

23、着日常网络操作管理和战略上的网络增长规划。每一种新的网络技术需要它自己的一组专家。在八十年代早期,对于许多机构而言,仅有管理大型,同质网络s的职能需求,就产生了一种危机。一种紧急的需要,要求自动管理综合了含盖各种环境的网络s(包括通常称为网络容量规划),出现了。 2. Network Management Architecture 网络管理的体系结构Most network management architectures use the same basic structure and set of relationships. End stations (managed devices),

24、 such as computer systems and other network devices, run software that enables them to send alerts when they recognize problems (for example, when one or more user-determined thresholds are exceeded). Upon receiving these alerts, management entities are programmed to react by executing one, several,

25、 or a group of actions, including operator notification, event logging, system shutdown, and automatic attempts at system repair大多数网络管理体系结构s使用同一种基本结构和同一组关系。端站(受管理的设备s),如计算机系统s和其它网络设备s,运行软件,当它们确认有问题s时(例如,当超过一个或多个用户确定的门槛时),使它们发出警报s。在接收到这些警报后,管理实体s被编程,用执行一个,几个或一组动作,包括操作者提醒,事件登记,系统关闭,以及自动尝试系统修复,来作出反应。.

26、Management entities also can poll end stations to check the values of certain variables. Polling can be automatic or user-initiated, but agents in the managed devices respond to all polls. Agents are software modules that first compile information about the managed devices in which they reside, then

27、 store this information in a management database, and finally provide it (proactively or reactively) to management entities within network management systems (NMSs) via a network management protocol. Well-known network management protocols include the Simple Network Management Protocol (SNMP) and Co

28、mmon Management Information Protocol (CMIP). Management proxies are entities that provide management information on behalf of other entities. 管理实体也可以轮询端站s来检查某些变量的值。轮询可以自动启动或用户启动,而由在被管理设备s中的代理s来响应所有的轮询。代理s是软件模块s,居于管理设备s中。它们首先编译有关管理设备s的信息,然后,把这些信息存储在一个管理数据库中,最后经由一个网络管理协议,把信息提供给(或主动或被动)NMSs(网络管理系统s)内的实

29、体s。已知的网络管理协议s包括SNMP(简单网络管理协议),和CMIP(公用管理信息协议)。管理代理s是实体s,代表其它实体s提供管理信息。图6-1说明了一个典型的网络管理体系结构. HYPERLINK /wiki/Network_Management_Basics l Figure:_A_Typical_Network_Management_Architecture_Maintains_Many_Relationships o Network Management Basics Figure: A Typical Network Management Architecture Maintai

30、ns Many Relationships depicts a typical network management architecture. Figure: A Typical Network Management Architecture Maintains Many Relationships3. ISO Network Management Model ISO网络管理模型The ISO has contributed a great deal to network standardization. Its network management model is the primary

31、 means for understanding the major functions of network management systems. This model consists of five conceptual areas, as discussed in the next sections. ISO已经为网络标准化做了大量的贡献。它的网络管理模型是用于理解网络管理系统s主要功能s的主要工具。该模型如在下一节讨论中指出的,由五个概念区域组成。3.1 Performance Management 性能管理域The goal of performance management i

32、s to measure and make available various aspects of network performance so that internetwork performance can be maintained at an acceptable level. Examples of performance variables that might be provided include network throughput, user response times, and line utilization. 性能管理的目标是测量和实现网络性能可用的各个方面,以

33、使互联网络性能能持在可接受的水平。可以提供的性能变量s的例子s,包括网络吞吐量,用户响应时间,和线路利用。Performance management involves three main steps. First, performance data is gathered on variables of interest to network administrators. Second, the data is analyzed to determine normal (baseline) levels. Finally, appropriate performance threshol

34、ds are determined for each important variable so that exceeding these thresholds indicates a network problem worthy of attention. 性能管理包括三个主要步骤。首先,收集信息数据,并把它放到网络管理员感兴趣的变量s上。其次,分析数据以确定正常水平。最后,对每个重要变量,确认适当的性能门槛,超过门槛,就指示一个值得注意的网络问题。Management entities continually monitor performance variables. When a pe

35、rformance threshold is exceeded, an alert is generated and sent to the network management system. 管理实体不断监视性能变量s。当一个性能门槛被超过,就产生一个报警,并送到网络管理系统。Each of the steps just described is part of the process to set up a reactive system. When performance becomes unacceptable because of an exceeded user-defined

36、threshold, the system reacts by sending a message. Performance management also permits proactive methods: For example, network simulation can be used to project how network growth will affect performance metrics. Such simulation can alert administrators to impending problems so that counteractive me

37、asures can be taken. 上面所叙述的每一步,是建立一个反应系统的部分过程。当性能由于超过用户定义的门槛,而变得不可接受时,系统就通过发送一个消息来反应。性能管理也允许前摄的方法s:例如,网络仿真可以用于规划,如何将影响网络性能的度量s。这样的仿真可以向管理员报警即将发生的问题s,以及时采取预防措施。3.2 Configuration Management 配置管理域The goal of configuration management is to monitor network and system configuration information so that the

38、 effects on network operation of various versions of hardware and software elements can be tracked and managed. 配置管理的目标是监督网络和系统配置信息,以使能对影响网络操作的各种型式的软件和硬件组件,进行跟踪和管理。Each network device has a variety of version information associated with it. An engineering workstation, for example, may be configured

39、as follows: 每个网络设备都有各种与它有关的版本信息。例如,一个工程工作站可以配置如下：Operating system, Version 3.2 Ethernet interface, Version 5.4 TCP/IP software, Version 2.0 NetWare software, Version 4.1 NFS software, Version 5.1 Serial communications controller, Version 1.1 X.25 software, Version 1.0 SNMP software, Version 3.1 Conf

40、iguration management subsystems store this information in a database for easy access. When a problem occurs, this database can be searched for clues that may help solve the problem. 配置管理子系统s将该信息存储在一个数据库中,以便于访问。当一个问题发生时,就可以搜索该数据库,以求取线索,帮助解决问题。3.3 Accounting Management 审计管理域The goal of accounting mana

41、gement is to measure network utilization parameters so that individual or group uses on the network can be regulated appropriately. Such regulation minimizes network problems (because network resources can be apportioned based on resource capacities) and maximizes the fairness of network access acro

42、ss all users. 审计管理的目标是,测量网络使用参数,以使网络上的单体或成组可以适当地调整。这样的调整会使网络问题s最小化,(因为网络资源可以根据资源能力进行分摊),并使访问网络的所有用户能得到最大的公正性。As with performance management, the first step toward appropriate accounting management is to measure utilization of all important network resources. Analysis of the results provides insight

43、into current usage patterns, and usage quotas can be set at this point. Some correction, of course, will be required to reach optimal access practices. From this point, ongoing measurement of resource use can yield billing information as well as information used to assess continued fair and optimal

44、resource utilization. 与性能管理结合在一起,进行适当的审计管理的第一步,是测量所有重要网络资源的利用度。进而分析其结果s,弄清当前用法的模式s,并设置用途的指标。当然,某些修正是必要的,以达到优化访问的实现。从这一点出发,继续测量资源使用就能得到信息清单和信息,用以访问利用度持续良好和优化的资源。3.4 Fault Management 故障管理域The goal of fault management is to detect, log, notify users of, and (to the extent possible) automatically fix ne

45、twork problems to keep the network running effectively. Because faults can cause downtime or unacceptable network degradation, fault management is perhaps the most widely implemented of the ISO network management elements. 故障管理的目标是检测,登记,通知用户s,和(尽可能)修复网络问题s以有效地保持网络运行。因为故障能够引起停机或不可接受的网络退化,故障管理或许是ISO网络

46、管理部件s中实现最为广泛的部件s。 Fault management involves first determining symptoms and isolating the problem. Then the problem is fixed and the solution is tested on all-important subsystems. Finally, the detection and resolution of the problem is recorded. 故障管理包括确定症状和隔离问题;然后修复问题,并在所有重要的子系统上进行测试,取得结果;最后,记录被测出和被

47、解决的问题。3.5 Security Management 安全管理域The goal of security management is to control access to network resources according to local guidelines so that the network cannot be sabotaged (intentionally or unintentionally) and sensitive information cannot be accessed by those without appropriate authorizatio

48、n. A security management subsystem, for example, can monitor users logging on to a network resource and can refuse access to those who enter inappropriate access codes. 安全管理的目标是按照局限的原则s,有控制地访问网络资源,以使网络不会被破坏(有意或无意),或敏感信息没有适当的授权就不能被访问。例如,一个安全管理子系统可以监督用户s对网络资源的使用,可以拒绝用不恰当代码访问的用户s进入。Security management

49、subsystems work by partitioning network resources into authorized and unauthorized areas. For some users, access to any network resource is inappropriate, mostly because such users are usually company outsiders. For other (internal) network users, access to information originating from a particular

50、department is inappropriate. Access to Human Resource files, for example, is inappropriate for most users outside the Human Resources department. 安全管理子系统把网络资源按在授权区和不授权区分开。对于某些用户s,访问任何网络资源都是不适当的,这通常指的是公司外部人员。对于其他(内部)网络用户s,访问源于一个具体部门的信息,是不适当的。例如,访问人事资源文件s,对于人事资源部门外部的大多数用户,都是不适当的。Security management su

51、bsystems perform several functions. They identify sensitive network resources (including systems, files, and other entities) and determine mappings between sensitive network resources and user sets. They also monitor access points to sensitive network resources and log inappropriate access to sensitive network resources. 安全管理子系统执行若干功能。它们识别敏感网络资源s(包括系统s,文件s,和其他实体s),确定敏感网络资源和用户组的映射关系。它们也监视敏