Policybased Network Management with SNMP

1
Policy-based Network Management with SNMP

• Szabolcs Boros

2
Overview

• traditional vs. policy based management
• IETF policy-based management architecture
• the SNMP approach to policy-based management
• definition of terms
• architecture
• MIB modules
• example of configuration with policies
• conclusions and further work

3
Benefits drawbacks of policy-based management

• high level rules
• overall consistent network behavior
• high reliability
• efficiency

• erroneous policy problems
• security leaks
• incompatibility

4
IETF policy-based management architecture
BB
BB
BB
BB
PR
PR
PR
PR
PDP
PDP
PDP
PDP
BB - Bandwidth Broker PR - Policy Repository PDP
- Policy Decision Point PEP - Policy
EnforcementPoint
...
5
COPS Approach

• translates policies into configuration
  instructions
• needs new protocol (COPS)
• uses reliable transport protocol

6
SNMP Approach

• possibility for integrated management
• traditional management with SNMP used together
  with the more powerful policy-based management
  techniques

7
Definition of Terms (1)

• technical domain
• mechanism
• device
• instance

8
Definition of Terms (2)

• policy filter, policy action, roles, elements,
  capabilities, time
• policy rule is if policyFilter then PolicyAction

9
SNMP policy-based management architecture
Manager
Agent
Policy ManagementMIBModule
DiffServPolicy MIBModule
DiffServMIB Module
10
Policy Management MIB Module

• policy table
• policy filters
• policy actions
• schedule information
• precedence and grouping information
• role tables
• easy mapping of strings to elements and
  vice-versa
• capabilities table
• inherent capabilities of the system

11
DiffServ Policy MIB Module
converts from mechanism and device independent
to mechanism, device and instance dependent
level

• per-hop-behavior table
• pointers to meter, action and queue tables
• meter, action, queue tables
• provide configuration templates for tables in the
  DiffServ MIB module

12
Configuration example
Manager
1
Agent
Policy MIB Module
pmPolicyTable
pmRoleESTable
pmCapabilitiesTable
DiffServ Policy MIB Module
ActionTable
MeterTable
QueueTable
PHB Table
DiffServ MIB Module
ActionTable
TBMeterTable
QueueTable
Classifier Table
6
13
Further work

• registration in the capabilities table
• naming framework for capabilities
• implementation