Network Management System Device Identification via SNMP and SLP
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network management systems face challenges in easily identifying devices and enhancing operability, particularly with SNMPv3, where only IP addresses are displayed, making it difficult to identify devices and limiting the functionality of device management applications.
Innovation Solution
A network management system that employs a dual-search approach using both SNMPv1 and SNMPv3 protocols to distinguish between devices and acquire detailed information, including engine IDs, and optionally uses SLP for additional device information, ensuring secure authentication and enhanced display capabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SNMPv3 protocol is used for network management, then security function is improved, but device identification capability deteriorates
Solution Approach 1:
The patent segments the device identification process into two distinct parts: (1) SNMPv3 protocol interaction for secure authentication and basic information retrieval, and (2) File system interaction for retrieving detailed device information such as device names, model numbers, and serial numbers. This segmentation allows the system to leverage the security strengths of SNMPv3 while overcoming its limitation in providing detailed device identification through a complementary file system access mechanism.
2Loss of information
If SNMPv1 protocol is used for device search, then device information acquisition is improved, but security function deteriorates
Solution Approach 1:
The patent introduces a file system as an intermediary layer between the network management system and device information. Instead of directly relying on SNMPv1 for all information retrieval (which provides comprehensive data but lacks security), the system uses the file system as a mediator to store and retrieve detailed device information securely. The SNMPv1 protocol is used only for initial device discovery and basic information acquisition, while sensitive operations leverage the file system's secure access mechanisms.
3Reliability
If only IP addresses are displayed for SNMPv3 devices, then security is maintained, but operability of device management application deteriorates
Solution Approach 1:
The patent adds another dimension to device information storage and retrieval by implementing a file system-based information repository alongside the traditional SNMP information hierarchy. While SNMPv3 maintains security by limiting displayed information to basic identifiers like IP addresses, the file system dimension provides additional layers of device information (device names, models, serial numbers) that can be accessed through controlled file operations. This dimensional expansion allows the system to maintain security constraints while enhancing operational capability through supplementary information sources.
Data Source
AI summary
A network management system which is capable of easily identifying devices, and enhancing the operability of a device management application used by a manager. The network management system includes devices, and a server connected to the devices via a network. The server is configured to be capable of communicating with the devices by SNMPv1, SNMPv3 and SLP. When SNMPv1 can be used for a device, the server acquires device information from the device by SNMPv1. When SNMPv1 cannot be used but SNMPv3 can be used for a device, and an SNMPv3 password is registered, the server acquires device information from the device by SNMPv3. When SNMPv1 cannot be used but SNMPv3 can be used for a device, and a SNMPv3 password is not registered, the server acquires device information from the device by SLP.