武警广东总队计算机网络管理系统的设计与实现
|
摘要
随着计算机网络技术的进步和军队信息化建设的普及,武警广东总队计算机网络发展迅速,网络应用日渐广泛。同时,网络管理也出现了许多新情况新问题,尤其是网上查勤业务的开通和使用,网络运行的好坏直接影响着部队对执勤任务的检查和落实,使网络管理变得更为重要。而网络管理系统具有监控网络性能,实时配置参数,告警显示和故障处理等功能,可以确保网络安全可靠地运转,从而提高网络的使用效率。因此,设计和实现一个适合武警广东总队计算机网络使用的网络管理系统,对提高该网络的管理水平和运行效率具有重要意义。
本文对计算机网络管理系统的国内外研究和应用状况进行了深入的分析,比较了国内外网络管理系统的优缺点,根据武警广东总队计算机网络的特点,采用NetInsight Pro作为网络管理基础平台,设计和实现了一个适合武警广东总队计算机网络使用的多层分布式网络管理系统。系统组件基于SNMP协议,具有较强的针对性和可操作性,主要有以下特点:
1、针对总队计算机网络分布面广、层次分明、管理相对独立的特点,采用多层分布式管理模式,有效解决了多层次网络的管理问题。
2、针对网络设备品种单一、数量较少的特点,基于SNMP和ICMP(Ping)技术设计网络自动拓扑发现算法,提高了拓扑发现的准确性。
3、为减少网络管理系统对网络带宽的占用,采用灵活的轮询间隔设置和上下级数据传送方式,提高了网络管理效能。
4、为确保网络安全,减少外界因素对网络的影响,采用IP地址绑定监测技术,实现自动阻止非法设备接入和对外拨号上网,弥补了人工管理上的漏洞。
论文最后给出了武警广东总队计算机网络管理系统的实现和测试结果,并对结果进行了评价。
With the advance of computer network technology and the popularization of information system constructions in militaries, computer network is greatly developed and widely used in Guangdong department of CAPF (GCPF). Meanwhile, quite a lot new issues come forth in network management, especially in applications of network-based on-duty inspections. The network management is of the primary importance as the inspection is directly effected by the network status. The functions of network management system include: monitoring network performance, configuration parameter, alarms displaying and fault treatment, etc. And it could improve network security and efficiency. Therefore, the design and implementation of a network management system for the GCPF is of great importance to improve network performance.
Based on in-depth analysis and comparisons of international and native network management systems, and taking the characteristics of GCPF network into consideration, a multi-layer distributed network management system for GCPF is designed and implemented using the NetInsight Pro platform, in which the SNMP protocol is adopted. The main advantages of the system are:
1、The GCPF network is dispersed in multiple layers of large area, and independent in management. Therefore, a multi-layer distributed management system is used, which could effectively solve problems in multi-layer network managements.
2、Considering the fewer species and small scale of network devices, SNMP and ICMP (ping) protocol are used to develop the algorithm for automatic topology discovery of networks, which can improves the finding accuracy.
3、Configurable loop query intervals and the way the data transmitted between different layers are used to decrease the bandwidth occupancy of the network management system, which could improve the efficiency of network management system.
4、To guarantee the network security and diminish the effect of environment, IP address bound monitoring technology is used to automatically prevent the connection of illegal device and dial-up internet connection. Therefore, the shortages of management through human beings are resolved.
At the end of this paper, test results and its analysis are presented.
本文对计算机网络管理系统的国内外研究和应用状况进行了深入的分析,比较了国内外网络管理系统的优缺点,根据武警广东总队计算机网络的特点,采用NetInsight Pro作为网络管理基础平台,设计和实现了一个适合武警广东总队计算机网络使用的多层分布式网络管理系统。系统组件基于SNMP协议,具有较强的针对性和可操作性,主要有以下特点:
1、针对总队计算机网络分布面广、层次分明、管理相对独立的特点,采用多层分布式管理模式,有效解决了多层次网络的管理问题。
2、针对网络设备品种单一、数量较少的特点,基于SNMP和ICMP(Ping)技术设计网络自动拓扑发现算法,提高了拓扑发现的准确性。
3、为减少网络管理系统对网络带宽的占用,采用灵活的轮询间隔设置和上下级数据传送方式,提高了网络管理效能。
4、为确保网络安全,减少外界因素对网络的影响,采用IP地址绑定监测技术,实现自动阻止非法设备接入和对外拨号上网,弥补了人工管理上的漏洞。
论文最后给出了武警广东总队计算机网络管理系统的实现和测试结果,并对结果进行了评价。
With the advance of computer network technology and the popularization of information system constructions in militaries, computer network is greatly developed and widely used in Guangdong department of CAPF (GCPF). Meanwhile, quite a lot new issues come forth in network management, especially in applications of network-based on-duty inspections. The network management is of the primary importance as the inspection is directly effected by the network status. The functions of network management system include: monitoring network performance, configuration parameter, alarms displaying and fault treatment, etc. And it could improve network security and efficiency. Therefore, the design and implementation of a network management system for the GCPF is of great importance to improve network performance.
Based on in-depth analysis and comparisons of international and native network management systems, and taking the characteristics of GCPF network into consideration, a multi-layer distributed network management system for GCPF is designed and implemented using the NetInsight Pro platform, in which the SNMP protocol is adopted. The main advantages of the system are:
1、The GCPF network is dispersed in multiple layers of large area, and independent in management. Therefore, a multi-layer distributed management system is used, which could effectively solve problems in multi-layer network managements.
2、Considering the fewer species and small scale of network devices, SNMP and ICMP (ping) protocol are used to develop the algorithm for automatic topology discovery of networks, which can improves the finding accuracy.
3、Configurable loop query intervals and the way the data transmitted between different layers are used to decrease the bandwidth occupancy of the network management system, which could improve the efficiency of network management system.
4、To guarantee the network security and diminish the effect of environment, IP address bound monitoring technology is used to automatically prevent the connection of illegal device and dial-up internet connection. Therefore, the shortages of management through human beings are resolved.
At the end of this paper, test results and its analysis are presented.
引文
[1]J.Case,K.McCloghrie,and M.Rose,Manager-to-Manager Management Information Base,RFC 1451,IETF,April 1993
[2]Martin-Flatin,A survey of distributed enterprise network and systems management,Journal of Network and System Management,1999
[3]Erfani,Lawrence,Malek and Sugla,Network management:Emerging Trends and Challenges,Bell Labs Technical Journal,1999
[4]J.P.Martin-Flatin and S.Znaty,A Simple Typology of Distributed Network Management Paradingms.Proc.8th IFIP/IEEE International Workshop on Distributed Systems:Operations & Management(DSOM'97),Sydney,Australia,October 1997
[5]G.Goldszmidt,Distributed Management by Delegation.Ph.D.thesis,Columbia University,New York,NY,USA,December 1995
[6]Open Software Foundation,DME.Available at http://webl.osf.org/comm/lit/ lit_dme.html
[7]J.Case,K.McCloghrie,M.Rose and S.Waldbusser,Introduction to version 2 of the Internet-standard network management framework,RFC 1441,SNMP Research,Hughes LAN Systems,Dover Beach Consulting,Carnegie Mellon University,April 1993
[8]S.Mazumdar,Inter-Domain Management between CORBA and SNMP.Proc.7th IFIP/IEEE International Workshop on Distributed Systems:Operations & Management(DSOM'96),L'Aquila,Italy,October 1996
[9]张金祥、吴泉源、王怀民、韩淑玲,一种基于CORBA的多级网络管理系统的设计与实现,计算机研究与发展,Vol 38,No 7,2001
[10]NEC Corporation and Iona Technologies PLC et al.CORBA services:Notification service specification -joint revised submission.Technical Report OMG Document telecom/98-11-01.Object Management Group,November 1998
[11]R.Booth,XML As a Representation for Management Information,White Paper,Draft.Microsoft,May 1998
[12]J.W.K.Hong,J.Y.Kong,T.H.Yun,J.S.Kim,J.T.Park,and J.W.Baek.Web-Based Intranet Services and Network Management.IEEE Communications Magazine,1997
[13]J.P.Martin-Flatin,Push vs.Pull in Web-Based Network Management.In M.Sloman.S.Mazumdar,and E.Lupu(Eds.),Proc.6th IFIP/IEEE International Symposium on Integrated Network Management(IM'99),Boston,MA,USA, May 1999
[14]A.Bieszczad,T.White,and B.Pagurek,Mobile Agents for Network Management.IEEE Communications Surveys,1998
[15]M.Baldi,S.Gai,and G.P.Picco,Exploiting Code Mobility in Decentralized and Flexible Network Management.Proc.1st International Workshop on Mobile Agents(MA'97),Berlin Germany,LNCS,April 1997,Springer,Berlin,Germany
[16]M.Baldi and G.P.Picco,Evaluating the Tradeoffs of Mobile Code Design Paradigms in Network Management Applications.Proc.20th International Conference on Software Engineering(ICSE'98),Kyoto,Japan,April 1998,IEEE Press
[17]李拥新、陈鸣、宁丽华、蒋序平,基于Policy的网络管理模型的研究与实现,计算机研究与发展,Vol 39,No1,2002
[18]徐斌、钱德沛、张文杰、栾钟治,主动网络管理体系结构的研究,计算机研究与发展,Vol 39,No4,2002
[19]IBM Tivoli Software,http://www-306.ibm.com/software/tivoli
[20]CA Unicenter,http://www.myitforum.corn/forums/CA_Unicenter/ forumid_109/tt.htm
[21]Management Software:HP OpenView,http://h20229.www2.hp.com
[22]BMC PATROL Overview,http://www.softwareinnovations.co.uk/products/patrol.html
[23]余春风,国内网络管理软件市场分析及展望,电讯快报.网络通信,2005.2
[24]Siteview,http://www.siteview.com/Index/Catalog256V/254S/101.aspx
[25]NetSureXpert,http://www.jbns.com.cn/web/02-chanpinzhichuang/02-yiyong.htm
[26]BitView网管软件,http://www.bit-way.com/default3.aspx-id=576
[27]NetStrong Net Management System,http://www.nstrong.com
[28]Netlnsight Pro技术白皮书,南京如特科技有限公司,2006
[29]Stallings W.SNMP and SNMPv2:the Infrastructure for Network Management.IEEE Communications Magazine,1998
[30]蔡开裕、范金鹏,计算机网络,机械工业出版社,2003
[31]陶洋、胡敏,网络管理原理与实践,科学出版社,2000
[32]胡谷雨、谢希仁,网络管理技术教程,北京希望电子出版社,2002
[33]郭军,网络管理,北京邮电大学出版社,2003
[34]王焕然、徐明伟,SNMP网络管理综述,小型微型计算机系统,Vol 25,No 3,2004
[35]范荣明,深入SNMP管理模型,计算机网络世界,2002.8
[36]杨家海、任宪坤、王沛瑜,网络管理原理与实现技术,清华大学出版社,2000
[37]雷雪梅,现代网络管理,国防工业出版社,2005
[38]王达,网管员必读--超级网管经验谈,电子工业出版社,2005
[39]ISO/IEC 7498-4 Information Processing Systems:Open Systems Interconnection:Basic Reference Model(Part 4):Management Framcwork.1989
[40]倪春胜、王继龙,基于Web的大规模网络配置管理系统,计算机工程,2005.5
[41]李学渊,基于SNMP网络性能管理的研究,计算机与数字工程,2005.4
[42]崔政,基于分布式的网络故障管理系统的研究与实现,现代电子技术,2006.2
[43]关媛、王小军、陆建德,基于SNMP的网络拓扑发现算法与实现,苏州大学学报,2006.1
[44]何鹏、邱建林,几种网络拓扑搜索方法的分析研究,微机发展,2005.7
[45]马文彬、张慧勇,ip网络拓扑自动发现,http://www.z6688.com/info/13402-1.htm
[46]张延磊、马玉祥,分布式网络管理体系结构的研究,电子科技,2005.3
[47]连红、胡谷雨、胥光辉,IP网络管理系统的设计与实现,微电子学与计算机,2005.11
[2]Martin-Flatin,A survey of distributed enterprise network and systems management,Journal of Network and System Management,1999
[3]Erfani,Lawrence,Malek and Sugla,Network management:Emerging Trends and Challenges,Bell Labs Technical Journal,1999
[4]J.P.Martin-Flatin and S.Znaty,A Simple Typology of Distributed Network Management Paradingms.Proc.8th IFIP/IEEE International Workshop on Distributed Systems:Operations & Management(DSOM'97),Sydney,Australia,October 1997
[5]G.Goldszmidt,Distributed Management by Delegation.Ph.D.thesis,Columbia University,New York,NY,USA,December 1995
[6]Open Software Foundation,DME.Available at http://webl.osf.org/comm/lit/ lit_dme.html
[7]J.Case,K.McCloghrie,M.Rose and S.Waldbusser,Introduction to version 2 of the Internet-standard network management framework,RFC 1441,SNMP Research,Hughes LAN Systems,Dover Beach Consulting,Carnegie Mellon University,April 1993
[8]S.Mazumdar,Inter-Domain Management between CORBA and SNMP.Proc.7th IFIP/IEEE International Workshop on Distributed Systems:Operations & Management(DSOM'96),L'Aquila,Italy,October 1996
[9]张金祥、吴泉源、王怀民、韩淑玲,一种基于CORBA的多级网络管理系统的设计与实现,计算机研究与发展,Vol 38,No 7,2001
[10]NEC Corporation and Iona Technologies PLC et al.CORBA services:Notification service specification -joint revised submission.Technical Report OMG Document telecom/98-11-01.Object Management Group,November 1998
[11]R.Booth,XML As a Representation for Management Information,White Paper,Draft.Microsoft,May 1998
[12]J.W.K.Hong,J.Y.Kong,T.H.Yun,J.S.Kim,J.T.Park,and J.W.Baek.Web-Based Intranet Services and Network Management.IEEE Communications Magazine,1997
[13]J.P.Martin-Flatin,Push vs.Pull in Web-Based Network Management.In M.Sloman.S.Mazumdar,and E.Lupu(Eds.),Proc.6th IFIP/IEEE International Symposium on Integrated Network Management(IM'99),Boston,MA,USA, May 1999
[14]A.Bieszczad,T.White,and B.Pagurek,Mobile Agents for Network Management.IEEE Communications Surveys,1998
[15]M.Baldi,S.Gai,and G.P.Picco,Exploiting Code Mobility in Decentralized and Flexible Network Management.Proc.1st International Workshop on Mobile Agents(MA'97),Berlin Germany,LNCS,April 1997,Springer,Berlin,Germany
[16]M.Baldi and G.P.Picco,Evaluating the Tradeoffs of Mobile Code Design Paradigms in Network Management Applications.Proc.20th International Conference on Software Engineering(ICSE'98),Kyoto,Japan,April 1998,IEEE Press
[17]李拥新、陈鸣、宁丽华、蒋序平,基于Policy的网络管理模型的研究与实现,计算机研究与发展,Vol 39,No1,2002
[18]徐斌、钱德沛、张文杰、栾钟治,主动网络管理体系结构的研究,计算机研究与发展,Vol 39,No4,2002
[19]IBM Tivoli Software,http://www-306.ibm.com/software/tivoli
[20]CA Unicenter,http://www.myitforum.corn/forums/CA_Unicenter/ forumid_109/tt.htm
[21]Management Software:HP OpenView,http://h20229.www2.hp.com
[22]BMC PATROL Overview,http://www.softwareinnovations.co.uk/products/patrol.html
[23]余春风,国内网络管理软件市场分析及展望,电讯快报.网络通信,2005.2
[24]Siteview,http://www.siteview.com/Index/Catalog256V/254S/101.aspx
[25]NetSureXpert,http://www.jbns.com.cn/web/02-chanpinzhichuang/02-yiyong.htm
[26]BitView网管软件,http://www.bit-way.com/default3.aspx-id=576
[27]NetStrong Net Management System,http://www.nstrong.com
[28]Netlnsight Pro技术白皮书,南京如特科技有限公司,2006
[29]Stallings W.SNMP and SNMPv2:the Infrastructure for Network Management.IEEE Communications Magazine,1998
[30]蔡开裕、范金鹏,计算机网络,机械工业出版社,2003
[31]陶洋、胡敏,网络管理原理与实践,科学出版社,2000
[32]胡谷雨、谢希仁,网络管理技术教程,北京希望电子出版社,2002
[33]郭军,网络管理,北京邮电大学出版社,2003
[34]王焕然、徐明伟,SNMP网络管理综述,小型微型计算机系统,Vol 25,No 3,2004
[35]范荣明,深入SNMP管理模型,计算机网络世界,2002.8
[36]杨家海、任宪坤、王沛瑜,网络管理原理与实现技术,清华大学出版社,2000
[37]雷雪梅,现代网络管理,国防工业出版社,2005
[38]王达,网管员必读--超级网管经验谈,电子工业出版社,2005
[39]ISO/IEC 7498-4 Information Processing Systems:Open Systems Interconnection:Basic Reference Model(Part 4):Management Framcwork.1989
[40]倪春胜、王继龙,基于Web的大规模网络配置管理系统,计算机工程,2005.5
[41]李学渊,基于SNMP网络性能管理的研究,计算机与数字工程,2005.4
[42]崔政,基于分布式的网络故障管理系统的研究与实现,现代电子技术,2006.2
[43]关媛、王小军、陆建德,基于SNMP的网络拓扑发现算法与实现,苏州大学学报,2006.1
[44]何鹏、邱建林,几种网络拓扑搜索方法的分析研究,微机发展,2005.7
[45]马文彬、张慧勇,ip网络拓扑自动发现,http://www.z6688.com/info/13402-1.htm
[46]张延磊、马玉祥,分布式网络管理体系结构的研究,电子科技,2005.3
[47]连红、胡谷雨、胥光辉,IP网络管理系统的设计与实现,微电子学与计算机,2005.11