论文部分内容阅读
简单网络管理协议 (SNMP)由于其易于实现和广泛的TCP/IP应用基础成为事实上的网络管理的标准 ,然而SNMP存在着许多缺陷 ,最重要的一点就是缺少安全性。简单网络管理协议的最新版本———SNMPv3针对这一点进行了有效地扩展。SNMPv3通过认证、加密和存取控制等手段 ,有效地抵御了信息更改、伪装、消息序列的更改和泄漏等安全威胁。通过对SNMPv3的相关分析 ,建立一种基于SNMPv3的安全有效网络管理系统实际可行 ,该系统采用分布式、动态的体系结构 ,具有灵活的扩展能力 ;并使用模块化的功能结构 ,使得整个系统易于升级和分布 ,并能够与原有的支持SN MPv1/v2的网络系统兼容 ;系统通过信息过滤和信息库归类的方法解决了信息量庞大且杂乱的问题
The Simple Network Management Protocol (SNMP) has become a de facto standard for network management due to its ease of implementation and extensive TCP / IP application foundation. However, there are a number of shortcomings with SNMP. The most important point is the lack of security. SNMPv3, the latest version of Simple Network Management Protocol, has been effectively extended for this purpose. SNMPv3 effectively protects against security threats such as information changes, masquerading, message sequence changes, and leaks through authentication, encryption, and access control. Through the correlation analysis of SNMPv3, it is practicable to establish a secure and effective network management system based on SNMPv3. The system adopts distributed and dynamic architecture and has flexible scalability. The modular functional structure is used to make the whole system easy to use Upgrade and distribution, and be compatible with existing network systems that support SN MPv1 / v2. The system solves the problem of large amount of information and messiness through information filtering and information base classification