SNMP Management From the Mainframe

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA.Presentation_ID.scr 1

17020874_04F9_c1 © 1999, Cisco Systems, Inc. 17020874_04F9_c1 © 1999, Cisco Systems, Inc.

2© 1999, Cisco Systems, Inc. 7020874_04F9_c1

Session 702Session 702

SNMP Management FromSNMP Management Fromthe Mainframethe Mainframe



Session OverviewSession OverviewIntroductionIntroduction

InstallationInstallation

OperationOperation

MiscellaneousMiscellaneous3© 1999, Cisco Systems, Inc.

7020874_04F9_c1

47020874_04F9_c1 © 1999, Cisco Systems, Inc.

Tutorial: Experiences with theTutorial: Experiences with theNetView/SNMP InterfaceNetView/SNMP Interface

• The samples described in thissession are provided by IBMTCP/IP for MVS version 3,release 2, level 0

• Tivoli’s TME 10 NetView for OS/390was used for the testing



Documentation ResourcesDocumentation Resources

• IBM TCP/IP V3R2 for MVS: customizationand admin.

• IBM TCP/IP V3R2 for MVS: users guide

• Managing TCP/IP Networks using NetViewand the SNMP interface (GG24-3690)

• SNMPREXX in TCPIP.SEZAINST


Terminology Used inTerminology Used inthis Presentationthis Presentation

• SNMP—Simple NetworkManagement Protocol

• TCP/IP—Transmission ControlProtocol/Internet Protocol

• MIB—Management Information Base

• ASN.1—Abstract Syntax NotationOne(1.3.6.1.2.1.1…)



Terminology Used in thisTerminology Used in thisPresentation (Cont.)Presentation (Cont.)

• PING—ICMP Echo Application

• hlq.—high level qualifier

• CLIST—REXX or NetView CLIST

• ISM—Internetwork Status Monitor


TCP/IP, SNMP andTCP/IP, SNMP andNetViewNetView Interface Interface

AddressSpace=NetView

AddressSpace=NetView

SNMP CMDSNMP CMD

AddressSpace=SNMPQE

AddressSpace=SNMPQE

SQESERVSQESERV

SocketInterfaceSocket

InterfaceSNMPIUCV TaskSNMPIUCV Task

PlatformPlatform

MVSMVS

Internet toSNMP Agents

Internet toSNMP Agents

AddressSpace=TCPIP

AddressSpace=TCPIP

3

1

2

8

4 5

7

6


9© 1999, Cisco Systems, Inc. 7020874_04F9_c1 9© 1999, Cisco Systems, Inc.

SNMP InstallationSNMP Installation

7020874_04F9_c1


hlq.SEZAINST Procedures

Instructions

MIB Table

hlq.SEZADSIM SNMP Messages

hlq.SEZADSIP SNMPARMS

hlq.SEZANPNL Panels(122)

hlq.SEZADSIL Load Modules

hlq.SEZANCLS CLISTS (66)

Code Point Tables(4)

Samples Provided by IBMSamples Provided by IBM



Steps to Configure SNMPSteps to Configure SNMP

• Specify SNMP configurationstatements in PROFILE.TCPIP

• Specify SNMP port numbers inETC.SERVICES data set

• Configure the SNMP query engine

• Configure the NetView interface as anSNMP monitor

• Configure the SNMP agent (SNMPD)


AUTOLOG SNMPQE ; SNMP Query Engine SNMPD ; SNMP AgentENDAUTOLOG

OBEY IBMUSER SNMPD SNMPQEENDOBEY

PORT 161 UDP SNMPD ; SNMP Agent 162 UDP SNMPQE ; SNMPQE Agent

PROFILE.TCPIPPROFILE.TCPIP



SYSCONTACT Hal Liberty, extension 1234ENDSYSCONTACT

SYSLOCATION 7025 Kit Creek Road, Edgewater 2nd floor, room 298ENDSYSLOCATION

PROFILE.TCPIP (Cont.)PROFILE.TCPIP (Cont.)


snmp 161/udp # snmp request port

snmp-trap 162/udp # snmp monitor trap port

Update ETC.SERVICESUpdate ETC.SERVICES



Update SNMP Query Engine:

Use procedure hlq.SEZAINST(SNMPPROC)

Create MIB Data set:

Copy hlq.SEZAINST(MIBDESC) into hlq.MIBDESC.DATA

Configure the SNMPConfigure the SNMPQuery EngineQuery Engine


SNMP Query Engine ParametersSNMP Query Engine Parameters

• MSSNMPMS—Optional data set forNLS support; it specifies the SNMPmessage repository

Sample: hcl.SEZAINT(MSSNMP)

• SYSTCPD—Explicitly identifies whichdata set is to be used to obtain theTCPIP.DATA parameters

Sample: hcl.SEZAINST(TCPDATA)



Configure NetView as an Configure NetView as anSNMP MonitorSNMP Monitor

• Add:SNMP TaskSNMP CommandSNMPARMSSNMP MessagesSNMP CLISTsSNMP PANELSSNMP Load ModulesSNMP Automation TableSNMP Autotasks


NetView UpdatesNetView Updates

• Add SNMP Task:SNMP TASK MOD=SNMPIUCV,TSKID=SNMPIUCV,

PRI=5,INIT=Y

• Add SNMP Command:SNMP CMDMDL MOD=SNMP,ECHO=Y,TYPE=R,RES=Y

• Add SNMP MessagesDSIMSG hlq.SDSIMSG1

hlq.SEZADSIM

• Add SNMP CLISTsDSICLD hlq.USER.SEZANCLS

hlq.DSICLD



NetView Updates (Cont.)NetView Updates (Cont.)

• Add SNMP PANELSCNMPNL1 hlq.USER.SEZANPNL

hlq.CNMPNL1

• Add SNMP load modulesSteplib or add to linklist

• Add SNMP Automation TableUse hcl.SEZANCLS(SNMPAUTO)

• Add SNMP Autotasks


Member name: SNMPARMS*

* SNMPQE SNMPQE * Userid of SNMP Query Engine

SNMPQE OESNMQD1 * Userid of SNMP Query Engine

SNMPQERT 60 * Retry timer (seconds) for IUCV CONNECT

SNMPRCNT 2 * Retry count for sending SNMP requests

SNMPRITO 10 * Retry initial timeout (10ths of a second)

SNMPRETO 2 * Retry backoff exponent (1=linear,2=exponential)

SNMPMMLL 80 * Line length for Multiline Messages 38/44

Sample SNMP Parameter Data SetSample SNMP Parameter Data Set(SNMPARMS)(SNMPARMS)



Configure the SNMP Configure the SNMPAgent (SNMPD)Agent (SNMPD)

• To configure the SNMP agent,perform the following tasks:

Create a trap destination data set

Create a community name data set

Update the SNMPD cataloged procedure

Use Procedure hlq.SEZAINST(SNMPPROC)


SNMP CommandSNMP CommandOperationOperation




SNMP GET host_name comm_name var_name1…

SNMP GETNext host_name comm_namevar_name1…

SNMP SET host_name comm_name var_name1var_value1

SNMP TRAPson net_mask desired _net

SNMP TRAPSOFf filter_id

SNMP MIBvname asn.1_name

SNMP PING host_name

SNMP CommandSNMP Command


Command:

netvasis SNMP GET 172.18.55.14 public 1.3.6.1.2.1.1.1.0

Response:

SNM040I SNMP Request 9405 from HAL2 Returned thefollowing response:

SNM042I Variable name: 1.3.6.1.2.1.1.1.0

SNM043I Variable value type: 9

SNM044I Variable value: Sysname: OS/390 Nodename:MVSD Release: 05.00 Version:

SNM044I Variable value: 2 Machine: 9672

SNM049I SNMP Request 9405 End of response

Sample: SNMP GETSample: SNMP GET



SNMP Command NotesSNMP Command Notes

• GET, GETNext and SET can haveup to ten variables

• Total command restricted to 256characters

• Command is case sensitive


REXX CodingREXX CodingConsiderationsConsiderations

• NetView CGLOBAL names will be uppercaseSample:tmiba.sysDescr becomes TMIBA.SYSDESCR

• Use “address netvasis” to execute SNMPSample:address netvasis,“SNMP cmd” HOST COMM vvar1



Command:

SNMP PING 172.18.55.14

Response:

SNM040I SNMP Request 9407 from HAL2 Returned thefollowing response:

SNM042I Variable name: 1.3.6.1.4.1.2.2.1.3.2.172.18.55.14

SNM043I Variable value type: 1

SNM044I Variable value: 2

SNM049I SNMP Request 9407 End of response

Sample: SNMP PINGSample: SNMP PING


Comments on SamplesComments on Samples

• Written in 1990 and unchanged

• Simple usability changes suggested

• May be dropped from TCP/IP

• Samples: not supported



SNMPMGMTSNMPMGMTSamplesSamples



SNMPMGMT Provides:SNMPMGMT Provides:

• PING function• Group function• Traps filters query/on/off• Poll hosts• Poll variables• GET/GETN function• SET function• Trap to NPDA alert function



Output from TCP/IPOutput from TCP/IPSamples (SNMPMGMT)Samples (SNMPMGMT)


PF4—GroupsPF4—Groups



PF4 Groups—#1 OutputPF4 Groups—#1 Output


PF5—Trap SupportPF5—Trap Support



PF-7 Poll HostsPF-7 Poll Hosts


Selected Host 3Selected Host 3



Index 3—Interface DetailsIndex 3—Interface Details


PF8—Poll VariablesPF8—Poll Variables



PF9 Get/GetnextPF9 Get/Getnext


PF9 Get/Getnext outputPF9 Get/Getnext output



Usability Changes (Suggestions)Usability Changes (Suggestions)

• Change PF12 to PF3

• Change color from blueto turquoise

• Change SNMP calls


Change:

keys.panel01="PF1 PF12 ENTER"

rout.panel01="HLP RETURN GETINTF”

To:

keys.panel01="PF1 PF3 PF12 ENTER"

rout.panel01="HLP RETURN RETURN GETINTF"

PFK UsagePFK Usage



Screen ColorScreen Color

Change:

interpret "$IX"||i '="FA IN CB HD UN"' /*set disp attributes*/

To:

interpret "$IX"||i '="FA IN CT HD UN"' /*set disp attributes*/


Change:

jan="SNMP GET" HOST COMMUN mibsys1 mibsys2 mibsys3

'GLOBALV PUTT JAN' /* put cmd in common global */

'TRAP AND SUPPRESS MESSAGES SNM040I' /* trap MLWTOmessage */

'ISSCMD' /* preserve upper or lower case*/

To:

'TRAP AND SUPPRESS MESSAGES SNM040I' /* trap MLWTOmessage

address netvasis 'SNMP GET' HOST COMMUN mibsys1 mibsys2mibsys3

Message ProcessingMessage Processing



SNMP MonitoringSNMP Monitoring

• One can to the following:Periodically poll hosts

Collect MIB variables

Set trap filters


Performance HintsPerformance Hints

• Use IP address to query hosts• Put copy of MIB in NetView• Build MIB table in NetView storage• Use ASN.1 notation in commands• Use NetView to find MIBvname,

not TCP/IPExample:snmp get 172.18.55.14 public1.3.6.1.2.1.1.1.0



Performance ExperiencesPerformance Experiences

RUNCMD vs. SNMPFunction: Collect Router CPU and MEM details and archive

Router RUNCMD SNMP

A .760 seconds .08 seconds

B .810 seconds .08 seconds

C .580 seconds .08 seconds

Show Version/sysDesc

Router RUNCMD SNMP

B .17 seconds .09 seconds


Security ConsiderationsSecurity Considerations

• NetView provides first level of security

• Security is based on SNMP rulesTarget host must support SNMP

Community names are used to controlGET and SET

• Suggestions:Do not allow “SET” option

Always suppress community name

Always control security from the target host



ConclusionsConclusions

• SNMP management from mainframe is viable

• Performance can be excellent

• TCP/IP samples are a good starter kit

• Save TCP/IP samples before theyare lost

• Watch for future solutions


Why Is Cisco LookingWhy Is Cisco Lookingat this Function?at this Function?

• Provide the ability to mange Ciscoproducts from the main frame

• Provide alternate to the servicepoint interface

• Provide the ability to managemore than routers



Questions?Questions?


Please Complete YourPlease Complete YourEvaluation FormEvaluation Form

Session 702Session 702




Documents

SNMP Management From the Mainframe