[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference azur::mcc

Title:DECmcc user notes file. Does not replace IPMT.
Notice:Use IPMT for problems. Newsletter location in note 6187
Moderator:TAEC::BEROUD
Created:Mon Aug 21 1989
Last Modified:Wed Jun 04 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:6497
Total number of notes:27359

4209.0. "SNMP proxy agent - iconic map pb" by ANNECY::HAGENMULLER (EIC Annecy - dtn 7887.41.99) Tue Dec 08 1992 06:27

(part of this note has been cross-posted in relevant ULTRIX notefiles)

		hello,

We face a problem when using a SNMP proxy agent written by one of our patner
(Stratacom). A sub-contractor of them has developped a SNMP agent running on
an ULTRIX DECstation so that a SNMP manager can monitor an IPX network 
(composed of 1 to 40 IPX switches that don't "speak" SNMP but rather use a 
proprietary protocol). 
One primary goal of this proxy agent is of course to translate a SNMP request 
to a IPX specific command (and vice-versa).

The problem we must overcome is that with DECmcc the whole IPX network is 
only represented by one icon. In fact, the liability of this issue doesn't
rest upon DECmcc because DECmcc only sees one new SNMP entity.
Yet such a limitation cannot be accepted by Stratacom people and users and 
we must find out a workaround.

I guess this shortcoming is not peculiar to the Stratacom proxy agent since we 
should encounter a similar limitation with any other "proxy agent" (DECmcc
only sees one SNMP entity because the proxy agent is generally accessed via only
one IP address).

We are trying to find a solution to this issue that would provide the network
administrator with a mean to display as many icons as the "proxy network"
consists of (for example here as many icons as there are IPX nodes).

We are investigating 2 different ways of doing this :

	- one can think about using different and fixed (or user selectable)
	  UDP source ports, each of them representing a different sub-entity.
	  For example, we might reserve the UDP ports from 1200 to 1239 to
	  be used for Staracom IPX nodes.
	  The drawback of such an approach is that at least the DECmcc SNMP 
	  AM should be modify in order to allow this kind of configuration.
	  The mapping mechasnism between the icon and the network address
	  should also be altered to include the UDP port for an SNMP entity 
	  (this is especially important for the trap management which currently
	  uses the second trap field (ip address) to find the identity of the
	  sending entity).
	  Can anybody give us an idea of the necessary modification and 
	  corresponding workload ?


	- a second solution consists in getting DECmcc believed that there 
	  are a number of different entity that can be managed through the
	  proxy agent merely by defining fictitious IP address :

	  Therefore we are comtemplating to modify the IP layer of ULTRIX 
	  station so that it could act as a router for a fictitious network 
	  (let's say network Y where each address would represent an IPX node) 
	  and capture all the frames sent to this network Y :

		network X
	---------------------------------------------
	     |				|
	 --------	 -------------------------------
	|	 |	|				|
	| DECmcc |	| DECstation X.2 that acts as a |
	| X.1	 |	| router for the fictitious 	|
	 --------	| network Y			|
			 -------------------------------

	  We would like that when DECmcc sends a SNMP frame to the network Y 
	  (let's say Y.1 for example) it is intercepted by DECstation X.2 which
	   modify some of the values in the data field before giving the frame 
	  to an UDP application running on the same node (X.2).
	  It means that the DECstation can act as an IP router (sending RIP 
	  messages would be enough since it needs not really forward frames) 
	  and modify the data field before giving the frame to the upper layer 
	  (UDP).
	  Conversely, when the proxy agent (the UDP application) wants to answer
	  DECmcc the IP source address of the frame issued by the DECstation 
	  must have the address of Y.1 and not X.2 !

	  Do you think this solution can be achieved ? What are the main diffi-
	  culties ?



thanks for help,
regards, Christophe

T.RTitleUserPersonal
Name
DateLines
4209.1YAHEY::BOSETue Dec 08 1992 09:119
	Christophe,

		One piece of information that might be interesting to you
	is that in V1.3 the SNMP AM will allow you to create multiple icons
	for the same proxy agent address. Refer to the SNMP AM use guide to
	find out how to do it.

	Rahul.
4209.2we need a general solutionTOOK::MATTHEWSTue Dec 08 1992 10:4216
    We also have a similar issue for managing other OSI management
    stations. In our recent demo at Interop with Northern Telecom,
    we actually managed DPN's through the NT-IWS DPN management 
    system. We had an icon for the IWS and icons for the DPNs that
    we could only access via the IWS. Stella Ko can tell you how
    she was able to do it. The additional info to map requests
    for a DPN to the IWS was actually done via registration so
    that you could select a DPN but the connection went to the IWS.
    
    This is a general impm issue that we need to address in general
    rather than do Ultrix or SNMP specific fixes. We need a generally
    implemented method to support entities that are on the other side
    of proxies, mediators, or other management systems. We need it
    for SNMP, SMP, OSI CMIP, and DEC CMIP.
    
    wally
4209.3thanks for your commentsANNECY::HAGENMULLEREIC Annecy - dtn 7887.41.99Tue Dec 08 1992 12:1033
.1 Rahul, thank you for your answer. I'll get a copy of the SNMP AM use manual
   from the net. Unfortunately I don't think this nice feature will allow me
   to cope with our problem since there must be a way to tell the proxy agent 
   which entity you want to perform management action on.
   This might be achieve in :
	
	- the IP layer by using a different IP address for each entity
	  behind the proxy agent.

	- the UDP layer by using a specific UDP port address for each entity.

	- the SNMP layer by using a dedicated MIB variable : the problem
	  would then be to combine this variable with each SNMP SET, GET
	  or GET-NEXT request. Othervise the proxy agent would not be able 
	  to know the entity the request is send to.


All in all the advantage of using different IP addresses is that it doesn't 
necessitate any DECmcc modification (I wouldn't like to ask you to write
a specific Stratacom patch for the SNMP AM but anyhow if somebody think 
this is a general DECmcc issue and propose a global solution ...)


.2 Wally, I'll try to get in touch with Stella (did she use SNMP to manage
   DPNs ?).
   Anyway I quite agree with you : it's a global issue which should be solved
   whatever proxy agent you will use. Yet it's not only a matter of DECmcc
   and I'm afraid SNMP or CMIP don't include such authentification mechanism.


Ch.

4209.4Use the Community Name.CHRISB::BRIENENNetwork Management Applications!Tue Dec 08 1992 16:4610
RE: 4209.3

>   Unfortunately I don't think this nice feature will allow me
>   to cope with our problem since there must be a way to tell the proxy agent 
>   which entity you want to perform management action on.

 One way of doing this (supported by SNMP AM V1.3) is to use the
Community Name as a sub-identifier.


4209.5community - yes if automaticANNECY::HAGENMULLEREIC Annecy - dtn 7887.41.99Thu Dec 10 1992 05:1519
.4 You're right ! We might use such a solution provided the association 
between the icon and the community name would be automatic (I can't imagine
a customer performing a OPERATION - VIA ... command each time before he 
accesses an entity by double-clicking on the corresponding icon. 
If, for example, he forgets to modify the VIA password he will then access an 
other entity than the one he believes to look at (in fact the previous IPX node
he had a look at) ... this would lead to an extreme confusion).

As far as I know there is no such reference attribute that might be defined
once and for all. Futhermore, a reference attribute wouldn't do since it must
be associted to each icon (assuming there are N icons representing the same
entity) and not to the proxy agent's entity (there is only one).

Is there a way to make it automatic ?

thanks, Ch.


4209.6you were right, it worksANNECY::HAGENMULLEREIC Annecy - dtn 7887.41.99Thu Dec 10 1992 08:5517
It works !
After reading the SNMP use manual, I've tested the following fcl command

MCC> register snmp ipx1 proxy agent address = a.b.c.d read community name -
_MCC> = "xxxxxx" , write community name = "yyyyyy" 

available with V1.3 of the SNMP AM and it works (I've multiple icons ipx1,
ipx2, ipx3, ... and each snmp request contains a different community name.

The only thing that remains to be done is now to translate the snmp request to
the appropriate proprietary protocol on the proxy agent depending on the 
community name used.


thanks to all.

Christophe
4209.7MOLAR::YAHEY::BOSEThu Jun 03 1993 18:264
	Please refer to note 5090.

	Rahul.