Computer Free Support

In the actual process of network management, network management function should have a very wide range, including a lot of respect. At () SI network management standards defined in the 5 major network management functions: configuration management, performance management, fault management, security management and billing management, which are 5 major functions of the basic network management functions. In fact, network management should also include some other features, such as network planning, network operations personnel management. But apart from the basic network management 5. Great features, and other network management functions are implementation-specific network of the actual conditions, so we only need to pay attention to OSI network management standards in the 5 major functions, one of:

(1) configuration management: automatic discovery of network topology, construction and maintenance of network system configurations. Monitoring network managed object’s status, the key to achieve the network device configuration syntax check, configure automatic generation and automatic configuration backup system for the allocation of a rigorous test of consistency.

(2) fault management; filtering, merging network case, effectively found that positioning a network failure, give troubleshooting advice and troubleshooting tools, the formation of a comprehensive set of fault found alarms and processing mechanisms.

(3) performance management: collection, analysis of network performance data object, the object of monitoring network performance, the quality of network lines for analysis. At the same time, statistical network status information, the use of network development evaluation, it is estimated that, for the network to further provide the basis for planning and adjustment.

(4) safety management: a combination of user authentication, access control, data transmission, storage, confidentiality and integrity mechanisms to protect the network management system for their own safety. Maintenance system logs, allowing the system to use and modify network objects well documented. Control access to network resources.

5) accounting management: The internetworking device according to the bi-directional flow of IP addresses to statistics, a variety of statistical reporting and information flow of contrast, and provide network accounting tools to the user in accordance with the requirements of a custom implementation of network accounting.

We will address the following 5 major functions of each part of the functions of specific description.

1. Configuration Management

(1) configuration of the automatic acquisition of information: in a large network, the need to manage many of the devices are compared, if each device configuration information management personnel are fully rely on manual input, the workload is considerable, but also exist the possibility of error. Not familiar with the network structure for the staff, this job can not even finish ‘, therefore, an advanced network management system should have automatic access to the functional configuration information. Even in the management staff is not very familiar with the network structure and configuration of the status of cases, also through relevant technical means to achieve the network configuration and management. At network equipment configuration information, in accordance with access means can be roughly divided into three categories: one category is network management protocol standard MIB defined in the configuration information (including SNMP; and CMIP protocol); are not second-class network management protocol standards there is the definition, but the equipment is more important to run the configuration information; three categories is used to manage a number of auxiliary information.

(2) auto-configuration, automatic backup and related technologies: automatic acquisition of the functional configuration information from the network device is equivalent to “read” information, the corresponding network management applications have substantial “write” information needs. Means under the same set of network configuration information for classification: one is through the network management protocol standards defined methods (such as SNMP Service in the set) to set up the configuration information; II can automatically log in to the device through the configuration of information; three categories is the need to modify the management of configuration information.

(3) configuration consistency check: in a large network, because many network equipment, but also because of management reasons, these devices are probably not by the same configuration managers. In fact ‘even if the administrators are the same configuration of equipment, because of various reasons will lead to consistency of configuration problem. Therefore, the configuration of the entire network to conduct consistency checks are necessary. At the network configuration, the normal operation of the network most affected are the main router port configuration and routing information configuration, therefore, want to conduct, induced mainly of inspection are the two types of information.

(4) Record user functions: system security configuration of the NMS are safe core, therefore, the need for users to configure the operation of each Record. In configuration management, the need for users to record and preserve. Managers can view the specific user at a specific time to carry out the operation of a specific configuration.

2. Performance Management

(1) Performance Monitoring: by the user-defined managed object and its property. Managed object types, including lines and routers; managed object property, including traffic, delay, packet loss rate, CPU utilization, temperature, memory headroom. For each managed object, regular collection of performance data, automatically generated performance reports.

(2) threshold control: can be for each managed object of a property set for each threshold, for a particular managed object of a specific property can be for different time periods and performance indicators set threshold. Can check by setting the threshold switch control inspection and alarm threshold to provide the corresponding threshold management and spill alarm mechanism.

(3) the performance of sub-bridges: an analysis of historical data, statistics and organize, computing performance indicators to judge the status of performance, provide a reference for network planning.

(4) Visualized performance report: data scanning and processing, to generate performance trend curve to reflect the intuitive graphical performance analysis results.

(5) real-time performance monitoring: the provision of a series of real-time data acquisition; analysis and visualization tool for on the flow, load, packet loss, temperature, memory, delay lines and other network equipment and the performance indicators in real-time detection, can be arbitrary set of data collection interval.

(6) network performance query object: through the list or by Keyword Search by pipe network objects and their property’s performance record.

3. Fault Management

(1) fault monitoring: active or passive detection network to receive information on a variety of case and identified one of the network and system failures related to the contents of one of the key part of maintaining the track record to generate a network failure case.

(2) failure alarm: receiving fault monitoring module information from the police, according to police policy-driven alarm different procedures in order to alarm window / ring (notice of first-line network management staff) or e-mail (to inform the decision-making managers) network a serious issue fault alarm.

(3) failure of information management: to rely on case records for analysis, the definition of network fault and generate fault card, record the steps and troubleshooting and fault-related duty logs, troubleshooting tectonic action Record of the incident – failure – pose a logical log on the interrelated whole, to reflect the fault generation, changes in the elimination of the entire process in all its aspects.

(4) debugging support tools: provides managers with a series of real-time detection instrument, to be regulated on the state of equipment to test and record test results for analysis and troubleshooting technical personnel; mistake irresolute on the basis of the experience and management Members of the fault status to give a description of the prompt action irresolute mistake.

(5) retrieval / analysis fault information: please refer to the keyword search query and fault management system to all database records, fault records of routinely collected data, give up on this basis to be regulated network system, to be regulated lines of equipment reliability parameters.

4. Safety Management

Safety management function is divided into two parts, the first network management are their own safety, followed by the object to be regulated network security.

Network management process, storage and transmission of information management and control of network operation and management is essential, once the leak, tampering and forgery, the network will cause catastrophic damage. Network management of its own security mechanisms to ensure the following:

(1) administrator authentication, based on public key certificate authentication mechanism; to improve system efficiency, for the trust domain (such as LAN) users, you can use a simple password authentication.

(2) the management of information storage and transmission of encryption and integrity, Web browsers and network management server uses Secure Sockets Layer (SSL) transmission protocol, encrypted transmission of management information and ensure its integrity; internal storage of confidential information , such as log passwords and so on, is also encrypted.

(3) Network Management division management and user access control, network management system user (ie Administrator) by the mission is divided into several different groups of users, different user groups have different terms of reference of the user’s operation by the access control check to ensure that unauthorized users can not use the network management system.

(4) the system log analysis, logging all the operations, allowing the system to the operation and modify objects on the network there is well documented, but also contribute to failure of the Tracking and Recovery.

Network security management object has the following features:

(1) the network resource access control, through management of the router access control list to complete the firewall management capabilities, from network layer (1P) and the transport layer (TCP) to control access to network resources, protect the internal network equipment and application services, to prevent external attacks.

(2) alarm case analysis, network object receiving the warning issued by case, analysts security-related information (such as routers log information, SNMP authentication failure information), real-time alerts to the administrator and provide the history of security incidents retrieval and analysis of mechanism, discovered in a timely manner the ongoing attacks or suspicious signs of the attack.

(3) the host system’s security vulnerability detection, real-time monitoring of the host system’s essential services (such as WWW, DNS, etc.) status, to provide security monitoring tools, to search for possible existence of the security system vulnerability or security risks, and give the make-up measures.

In short, network management through the gateway (ie border router) to control external users access to network resources in order to prevent external attacks; case through an analysis of alarm treatment to detect possible attacks being carried out; through the security vulnerability seized Escapement to identify potential safety problems exist, as a preventive measure.

5. Billing Management

(1) Billing Data Acquisition: Data Acquisition billing are the basis of the entire billing system, but will always be subject to billing data acquisition hardware and software acquisition equipment constraints, but also for billing and network resources.

(2) data management and data maintenance: Accounting Management artificial highly interactive, although there is a lot of data maintenance system, auto-complete, but still need human management, including paying the cost of input, information networking unit maintenance, and billing decisions Style .

(3) billing policy makers; often flexible because of changes in accounting policies, so users realize formulate freely enter billing policy is particularly important. This required a billing formulate policies friendly man-machine interface and improve the implementation of the billing policy data model.

(4) policy comparison and decision support: accounting management should provide many sets of billing data policy for the policy makers to provide basis for decision making.

(5) data analysis and cost: the use of network resources, the use of collected data, network users, as well as detailed information on billing policy computing network users use of resources, and calculate the cost should be paid.

(6) Data Query: provided to each network users about their use of network resources, detailed information, users can be calculated based on these information, check their fees.

Traditional local area network management for a range of local area network, in this local area network including the main managed object are: server, client machines, a variety of network cabling and hubs, as well as a variety of network operating system. At this scale because of the local area network, network management object is limited, network management generally includes three aspects: understanding of network operation, and network maintenance.

1. Learn Network

Must control a LAN, the LAN must have a clear understanding. A clear understanding of the network as well as a variety of network management information data records, is to ensure the normal operation of the network as well as a variety of network maintenance with the basic premise.

(1) identification of the target network hardware situation: local area networks are composed of various nodes, such nodes are the main server and client, so first of all necessary hardware to identify the composition of these nodes. Hardware identification, including server and client know the brand, their chip rate, card brands and configuration, as well as the hub models and brands, so you can know the local area network hardware device and hardware providers can achieve performance has generally understanding. In addition, the hardware of the server must also have a better understanding, including servers, peripherals configuration, the hard drive capacity and memory size.

(2) determine the topology of the LAN: Learn the key components of the network after they are required to learn more about how to connect the operation, that is, the actual network structure cabling system. Three common cabling topology is a star, bus and ring topology, there is also wireless and point-to-point topology, but not commonly used. Learn at LAN cabling structure for their respective advantages and disadvantages of each structure, it should be noted that it will lead to differences in performance and failure. And know that the necessary network implementation approach. Commonly used network is Ethernet, it is a protocol supports a wide range of transmission, and a variety of sophisticated forms of cabling standards. Identify non-Ethernet-based, network transmission of the more serious the mission, the more there is potential conflict, and conflict will lead to the impact of response time. So there is substantial activity on the network nodes will be greatly reduced performance, if the Ethernet hub on the signal is always a conflict, then the network in a familiar layout may have to reconsider the distribution of network users. Ethernet cable include:粗缆Ethernet, or called 10Base5 Ethernet, the use of large coaxial cable;细缆Ethernet, also known as 10Base2 Ethernet, the use of small caliber RG-58 coaxial cable; 10BaseT Ethernet, in the star structure the use of unshielded twisted pair. The way for the adoption of Ethernet LAN, network administrators must not only clearly the principle of Ethernet, but also must understand the network used by Ethernet cable and plugs, as well as their characteristics, so that the event of a failure in the network can help find the point of failure and exclusion. In addition to Ethernet, the rest of the transmission network have marker ring (Token Ring), FDDI (FDDl), as well as ARCnet, etc.. Learn to use the transmission network are local area network management, one of the basic conditions.

(3) to determine the interconnection network: First, determine the necessary network of connected devices and access networks. These devices and access methods include: using a modem (Modem), use the network socket, use the CSU / DSU to connect, use the bridge job, the use of routers, the use of gateways. These access devices to ensure the connectivity of network nodes as well as the LAN backbone connectivity and has an important role, but also a network failure of many hair point of failure and the possible impact on network performance bottlenecks. On the other hand, is also required at the network server or other network equipment up to determine the LAN subnet and all client machines can be connected, and record all network subnets and the IP address of the client distribution.

(4) to determine user load and positioning: network load are the most important aspects of the user’s distribution, because each network and server are on the number of users affect the network performance a key factor in determining the number of network users, as well as their respective positioning particularly important. First, view the file on the server load, the normal operation of file servers know the time, view server CPU utilization rates, as well as servers on the number of network connections, these data provide a direct network load data; then, using these data analysis of many servers in which the highest utilization rate, which burden the network, and finally to network users, as well as distribution of the load there is a general understanding.

2. Network Operations

For the smooth functioning of a local area network must achieve a lot of work that include the following: configure the network, that is, select the network operating system, select the network connection protocol, and select the network protocol configuration of network client software; then configure the network server and network peripherals equipment, prepare well for the network deal with the accident prevention; Finally have network security management, network user rights distribution and virus prevention and treatment.

(1) configure network; configure network is necessary to select the network operating system. Traditional network operating system including UNIX, Windows NT, NetWare, VINES, Windows for Workgroups, LANtastic, PersonaI Net-Ware and so on, these network operating systems have their own characteristics, relatively speaking, at two in the local Windows NT and Net – Ware more common. NT The biggest advantage is price and support its development giant Microsoft. NT Supported IPX and TCP / IP, therefore, in most network environments welcome addition, its security and network management functions are also good in hardware is also fully compatible with the installation more convenient time. At the existing network, around 70% of the network operating system uses Novell’s NetWare series. NetWare is a fast and reliable operating system, very similar to DOS, it is a variety of network protocols and a variety of client operating system has a comprehensive support and its compatibility and modular design also makes it ahead of other systems.

Choose the network protocol configuration is also an important component of the network. Now popular LAN network protocols including IPX / SPX, TCP / IP, NETBIOS, NetBEUI and AppleTalk, etc.. More common are the protocol IPX / SPX and TCP / IP, one of IPX / SPX are used by NetWare data transmission method used in the LAN is very common; TCP / IP are used for Internet protocol networks, with wide-ranging implications force.

In determining the network operating system and network protocol, the need to configure the network, each client machine’s network software. In the DOS platform, the general is to install the appropriate network protocol software, network drive, and then modify some of the parameters in the configuration file; in the GUI operating system (such as Windows series, Macintosh and OS2), then select the corresponding dialog window to configure the network parameters; at UNIX systems, mainly rely on the modified system configuration file to configure the network.

(2) configure the network server: In the LAN, the server often play an important role, a good server can be configured to protect the network running smoothly. The first is on the server disk and volume in accordance with the nature of the content distribution space divided by the size of job, this can put different programs and data stored in the order in accordance with a disk, while the volume can be used not only must the level of stored data , but also can control user access, then the server process to start network services, monitoring Internet users visit. Have a number of peripherals, such as shared printers, shared external disk or drive, etc., these devices should be on at the server configured correctly.

Finally, it should be noted that the accident prevention network, first of all is to ensure that power (especially the power supply network server), the general approach is to configure UPS emergency power supply; then ensure that servers are state of the environment (such as to maintain the room at the temperature and humidity must scope); Finally do a good job are important data and system backup job. Backup hardware devices including hard disk arrays and tape, CD-ROM drive and so on, a lot of back-up method, commonly used are disk mirroring, disk or disk array, such as duplex. During the backup must want to do a good job when detailed records to back up the contents of the classification and marking to do.

(3) network security control: the control of network security first and foremost mission is to manage user registration and access. Up at LAN, network operating systems generally provide user management and permissions distribution tool. For local area network, the Department of users, the use of these tools can check and set user information, account restrictions, such as changing the account password, set up group to determine the group accounts, modify group or account permissions, account valid time settings and so on. From time to time on the network to inspect the current visit and do a good job records, the timely detection of anomalies. In addition, the management of external powers and local area network connection is also very important, the general local area network to external users may access the LAN, such as view existing documents, delivery of their documents or to use other network resources, so users need to set up this account, but it should be use of the network in accordance with its detailed control over their access, and then regularly check which users have recently registered a number of the account is no longer necessary and timely write-off.

Search and to eliminate the virus is also a local area network management, an important task. Virus on the LAN is very serious harm, a network of virus can be transmitted quickly through the network to the LAN of each client machine, so to detect and kill the virus. There are many different ways to identify the virus: up at the file level, using CRC technology can be expected to file size or other characteristics and before the file is opened to see the actual characteristics of comparison; most commonly used method is to scan the document and found a sign of known viruses, code, thereby identifying each of the deformation of a virus. Once the discovery of the virus, of course, have to clear it. The use of some antivirus software can kill the virus restore the original document. Another method is to delete a virus file, and then use the backup files virus-free alternative. It also must be affected by the virus on the server volumes to be scanned, if the network server or client machine communication between the existence, it is also necessary to scan other systems. Continuing to determine the appropriate virus protection to avoid viruses are the most effective way, so that protection include: the creation and strengthening of anti-virus rules and procedures; up at the client to install and update anti-virus software; the installation of network-based anti-virus software.

3. Network Maintenance

Network Maintenance Network is to protect an important aspect of normal operation, including fault detection and exclusion, routine inspections of the network and network upgrades.

(1) common network failures and repair: In the local area network, the most important job of the fault detection are file server maintenance. As long as the server normal work, focus on data storage that is safe, users can access these data when necessary. Of course, the network connection device should ensure that users can continue to work, and the client itself should also be able to work properly.

Fault treatment process has four main components: found fault indications, tracking the root causes of failures, troubleshooting, fault Record solution. Network fault often necessary to deal with many investigations and studies, but relatively few questions are really more complicated. Common situation is that the fault solution is very simple, but by other issues or incomplete information concealed. During treatment at fault, can refer to Figure 1 in the flow chart to ensure that the network fault logic and structured analysis.

When the network management staff received failure reports, the first should check whether other users have encountered the same problem, if multiple users have reported similar problems, then it is possible that there is a server or a cable fault, not the user client machine caused by the fault.

Rule out the possibility of error on a file server is crucial, because it usually will affect a lot of users, so first of all want to carefully check the server: The server is running? Monitor whether the information? Server to respond to keyboard input? Server console indicate abnormal termination or other information? server NIC (network adapter) whether to send and receive data? server volume is already installed?

File server is usually very stable, but they are also particularly prone to three types of faults: the first network operating system failure is not an error itself, but because of the changes caused by configuration, so at any time to change the network operating system configuration have to backup the previous configuration and change the Record Date; second type of fault parts are ineffective, although the NIC and disk failures are most common, but the keyboard port-to-SIMM any parts are likely to malfunction, even at high also on the quality of the server can not be avoided; third type of fault server software modules are triggered by the conflict system failure, such as the disk driver or LAN driver caused memory failure.

When the server to check all aspects of failure are not problems, caused by a large number of users access failure problem is likely to appear in the network cable system. If the fault is the bus network topology, then the fault detection would be more onerous job possible; for the star structure, hub or MAU should check whether the electricity and normal operation. If you connect the equipment itself is running well, they can check the physical connection with the server. In general, the physical network, cable and plug-ins by aging, electromagnetic interference, cable length restrictions are the most common source of physical network failure; connected equipment, such as patch panels, hubs and routers are also many hair-point failure .

(2) network check: network checks are in the network under normal operation status of the server and network operations of the dynamic information collection and analysis process. Some data on the best time to check every day, and some data to check a long time once.

(3) network upgrade: Network upgrades are an ongoing process, it is necessary to consider some of the financial and budgetary factors. In network management in general needs to be considered are the need for upgrades, these upgrades be able to guarantee the normal operation of the network. Although the network operating system upgrade is usually the most pressing, but the hardware and software upgrades may also be required.

Server upgrades are most important. Must upgrade the server has three types: the most simple user licenses are upgraded, if the web server has reached maximum capacity and the need to accommodate more users, on the need for a permit to upgrade; the other two kinds of server network operating system upgrades are upgrade, if you are using are outdated or there is failure of network operating system, you should upgrade to the latest version; third server to upgrade the scope of the meaning of a number of relatively broad, mainly referring to hardware upgrades, hardware upgrades may include increase disk space, and improve fault-tolerant measures or system upgrade. In addition, the upgrade client software is also sometimes necessary, because the old client software for the network operating system may be a heavy burden.

In determining the most important after the upgrade, should decide the need to purchase products, and upgrade costs of an assessment, and then formulate the implementation of the escalation of job steps, and finally the costs and benefits should be summed up both the advantages of the new configuration.

What is a domain name
Domain name is the web site, domain name is designed to let others be able to visit a website.
On the domain name in the network referred to as “corn.”
Take our reality to the supermarket, for example, then the domain name is the specific location of the supermarket, No. XX at XX on the road, the concept of domain names are very deep, but we have to go to understand the simple, domain names that people can find the Supermarket specific address, that is, the domain name, we know the address of a supermarket, we can find the supermarket, we know that a domain name, we will be able to visit a station.
On the network, the real address are the IP, but IP is a string of figures, is too complex, and IP limited resources, while some station want the regular exchange server, for a server but also for the first IP, a server corresponds to an independent the IP, we used computer, many are dynamic IP, there is no independent IP.
An IP, that is, on one server may have hundreds of stations, so if you are using an IP, then乱了套, so someone in order to facilitate memory, invented the concept of domain names.
At domain name, a term commonly used is the domain name, such as www.zhaoyuan.org.cn I want to replace this address 123.130.126.217, then my domain name administration in the background, put the domain name resolves to 123.130.126.217, analysis completed visit the domain name when, in fact, a visit to 123.130.126.217

Level domain names can be divided into different levels, including top-level domain, such as the secondary domain name.

Top-level domains are divided into two categories: country top-level domain (national top-level domainnames, referred to as nTLDs), currently more than 200 countries are in accordance with the distribution of the ISO3166 country code top-level domain, such as China is cn, the United States are us, Japan is jp, etc.; are two international top-level domains (international top-level domain names, referred to as iTDs), such as the express business. com, said that network providers. net, said the non-profit organizations. org and so on. At present the majority of domain name disputes have occurred in the com top-level domain under the Internet because most companies are for the purpose of profit. To strengthen the management of the domain name to resolve the domain name resources nervous, Internet Society, Internet sub-site agencies and the World Intellectual Property Organization (WIPO) and other international organizations, after extensive consultations, in the original three international gTLDs: (com.net.org) of based on an increase of seven new gTLDs Internationally: firm (corporate), store (sales of companies or enterprises), Web (highlight WWW activity units), arts (prominent cultural, recreational activities of the unit), rec (prominent entertainment, recreational activities of the unit), info (information services units), nom (personal), and in the world select the new domain name registration body for receiving the application for registration.

2 refers to top-level domain names under the domain name, in the international top-level domain name, it refers to people online register domain names, such as ibm, yahoo, microsoft, etc.; in the country top-level domain, it is the express categories of symbols Enterprise Registration , such as com, edu, gov, net and so on.

Our country at Internet Information Center (Inter NIC) and running the official register of top-level domains are CN, this is our country’s level domain name. At top-level domain under the domain name of our country is divided into two categories of two types of domain names and domain names Administrative Region. A total of six types of domain names, including scientific research institutions for ac; for industrial, commercial and financial enterprises com; for educational institutions edu; for government departments, gov; for Internet Network Information Center and the Operations Center of the net; for non-profit organizations org. The SAR domain has 34, corresponding to our country in various provinces, autonomous regions and municipalities. 3 domain names with the letters (A ~ Z, a ~ z, capitalization, etc.), numbers (0 ~ 9) and connectors (-) of the domain name at all levels between the solid point (.) Connections, the three-tier domain name The length should not more than 20 characters. If there is no special reason, it is recommended to adopt the applicant’s English name (or initials) or Pinyin name (or initials), as the three-level domain names, domain names in order to maintain clarity and simplicity.