Support The Integration Of High-performance Ipv4/ipv6 Router Network Management Structure

Traditional network management structures generally adopt the basic model put forward in SNMP protocol. With the rapid development of the computer network, the deficiency of this model is becoming more outstanding in the singleness of manage methods, badness of expandability, lack of the capability to reply the extreme instance, and insecurity of management. The high-performance IPv4/IPv6 router is an important component of the backbone IPv6 networks, and its need for new network management system is extremely urgent. The system should not only solve the above problems, but also support the management of IPv4/IPv6 dual-stack, and guarantee relatively high security performance.The main contents of the dissertation are network management structures which support the high-performance IPv4/IPv6 router. The study of this subject is funded by the great projects named "High-performance IPv6 router basic platform and experimental system" and "T bit high-performance IPv4/v6 router basic platform and experimental system", which belong to the information technology field communication technological subject of National High Technology Research and Development Program of China (863 Program). Based on the analysis of SNMP basic principle, this dissertation considered the design of IPv4/IPv6 router's network management system, and proposed a new network management structure support EPv4/EPv6 dual-stack router. The structure has solved the problem of the network management system in the singleness of manage methods and badness of expandability, and improved the security performance of router network management.The main work this dissertation does is as follows:Firstly, the current situation and development trend of network management technology both at home and abroad are studied. The whole architecture of network management system is analyzed, and the module to the network management system is divided. We propose an integrated network management framework which offers the unified interface for many kinds of management's access ways, and manages the operation information and configure files of system centrally. Then we analyze the design philosophy and implementation method of INMF in detail.Secondly, the dissertation analyzes the structure model of the network management station in the INMF, and proposes a structure of message-server-based network management station, which processes communication within the system through a message server. The structure has improved the efficiency of inside communication and the expansibility of system. We have analyzed the structure of network management agent, and designed the model that supportsSNMPv3 in the framework.Thirdly, the main characteristic and function of IPv6 and SNMPv3 protocol is studied, and the keys to support IPv6 and SNMPv3 protocol in the actual network management system development are pointed out. Afterwards practical tests are carried on.Fourthly, considering the security feature of SNMP protocol in message encryption, authentication and access control, the security model of USM and VACM that are defined by SNMPv3 protocol are emphasized. Then the security of network management based on INMF in high-performance FPv4/IPv6 router is discussed.