A network engineer is configuring access control lists on an enterprise router to restrict network management traffic. The policy must allow a Network Management System (NMS) server to send SNMP query messages (such as GetRequest) to managed network devices, and also allow managed devices to send asynchronous event notifications (Traps and Informs) back to the NMS server. Which port and protocol combination must be permitted through the security filters to satisfy both operational requirements?
- UDP port 161 for SNMP queries sent to managed devices, and UDP port 162 for SNMP notifications sent to the NMS server.Cevap
- BTCP port 161 for SNMP queries sent to managed devices, and TCP port 162 for SNMP notifications sent to the NMS server.
- CUDP port 162 for SNMP queries sent to managed devices, and UDP port 161 for SNMP notifications sent to the NMS server.
- DUDP port 161 for both SNMP queries sent to managed devices and SNMP notifications sent to the NMS server.
Cevap
UDP port 161 for SNMP queries sent to managed devices, and UDP port 162 for SNMP notifications sent to the NMS server.
Simple Network Management Protocol (SNMP) uses UDP as its transport protocol. Managed devices run an SNMP agent that listens for incoming management requests (GetRequest, GetNextRequest, SetRequest) on UDP port 161. Conversely, the SNMP manager (NMS) listens for incoming asynchronous notification messages (Traps and Informs) on UDP port 162. Therefore, allowing UDP 161 towards managed devices and UDP 162 towards the NMS fulfills both monitoring requirements.
Adım Adım Çözüm
Anahtar Kavram
SNMP Transport Layer Ports and Operational Mechanics