‫Simple network management protocol as an MP, as an internet standard protocol for collecting and organizing
‫information about managed devices on IP networks and from modifying that information to change device
‫behavior.
‫Devices that typically support as an MP include cable modems, routers, switches, servers, printers
‫and a lot of other devices.
‫It uses the port one, six, one by default.
‫It's an application layer protocol and uses both TCP or UDP protocols in transport layer.
‫As an MP, view one is the original version of the protocol.
‫More recent versions as an MPV to see and as an MPV three feature improvements in performance and flexibility
‫and of course, security.
‫If S&P service is enabled in a network device and if it's not configured in a secure manner, we're
‫able to gather a lot of information using the service.
‫So let's look at our router and see if the SNP service is enabled, if now will enable it and then,
‫well, we're going to have some fun.
‫OK, so now we are back in jeans three and all the devices are up and running.
‫So go to the router console this right click on it and select console.
‫The console is already open here.
‫Now to test the S&P service type show as an MP and hit enter as an MP agent is not enabled at the moment,
‫so let's enable it.
‫Configured terminal, you can complete the command by pressing tab after a few initial letters, or
‫if there's only one option with those letters, then you can use it as it is.
‫So in a year, you can use Configure Terminal Command just like confetti.
‫As an MP server enabled traps to enable S&P Trap.
‫Let me just tell you that as an MP, traps are alert messages sent from a remote as an MP enabled device
‫to a central collector or the SNP manager, right?
‫A trap might tell you that a device is overheating, for example.
‫This will be enough to enable S&P service, so type end to exit from the configuration mode and again
‫type show S&P and hit enter.
‫And look at that yes and no service is enabled now.
‫So you'll see a brief summary of the service.
‫Now we should be able to identify as an MP, community strings.
‫The SNMP community string is like a user ID or password that allows access to a routers or some other
‫devices statistics.
‫As an MP, community strings are used only by devices which support as an MP version one and as an MP
‫version to see protocol as an MP three uses username password authentication along with an encryption
‫key.
‫So once again, enter the Configure Terminal mode.
‫Type in as an MP server community in anywhere the command in just put a question mark to get help about
‫what's expected.
‫So here it waits for the community name, so says Use Public, which is a commonly used name for Read-Only
‫communities unless the community type R0 for Read-Only.
‫So now that we're on a roll, let's create another community with a right privilege this time.
‫Well, the name be private.
‫And I'll put a question mark here to see the options, and we chose our over the previous community.
‫Now let's use R.W. to give community the right access.
‫And to say that configuration mode and you are to save that configuration.
‫Now, let's go back to Khalid Atassi as an MP service.
‫So there's already a terminal screen inside my Carly, and here there's an end map query to query the
‫most used ports, including the SNP default port 161.
‫The query was run before we enable the SNP service, but as you see, yes, an MP was closed then,
‫so that's around the query again.
‫Call the same query by clicking the up arrow.
‫Here it is, the target IP and the ports to scan.
‫So on this query.
‫S Capital S identifies the scan type as a sin scan.
‫It's a scan type to scan TCP ports.
‫O is for OHS detection as Capital V is for version detection.
‫Reason is to see the reason why the port is signed as open or closed.
‫Now press enter to run the query.
‫Well, look at that the Port 161 is supposed to be open, but it's not OK, I know the reason we scanned
‫the TCP ports, but as an MP uses the UDP ports in general.
‫So if we scan the UDP port one six one, we'll see that it's open.
‫OK.
‫We'll scan the Port UDP one, six one in the next lecture.