Simple network management protocol as an MP, it's an Internet standard protocol for collecting and
organizing information about managed devices on IP networks and for modifying that information to change
device behavior.
Devices that typically support as an MP include cable modems, routers, switches, servers, printers
and a lot of other devices.
It uses the port one six one by default.
It's an application layer protocol and uses both TCP or UDP protocols in transport layer.
As an MP, this one is the original version of the protocol.
More recent versions as an MPV to see and as an MPV, three feature improvements in performance and
flexibility and of course, security.
If S&P service is enabled in a network device and if it's not configured in a secure manner, we're
able to gather a lot of information using the service.
So let's look at our router and see if the SNP services enabled, if now will enable it and then, well,
we're going to have some fun.
OK, so now we are back in three and all the devices are up and running.
So go to the router, console this right, click on it and select console, the console is already open
here now to test the SNP service type show as an MP and hit enter as an agent is not enabled at the
moment.
So let's enable.
Configured terminal, you can complete the command by pressing tab after a few initial letters, or
if there's only one option with those letters, then you can use it as it is.
So in your ear, you can use configure terminal command, just like Konforti.
S&P server enabled traps to enable S&P trap.
Let me just tell you that as an MP, traps are alert messages sent from a remote as an MP enabled device
to a central collector or the S&P manager, right.
A trap might tell you that a device is overheating, for example.
This will be enough to enable S&P service so type end to exit from the configuration mode and again
type show S&P and hit enter and look at that, the S&P service is enabled now.
So you'll see a brief summary of the service.
Now, we should be able to identify as an MP community string's, the S&P community string is like a
user ID or password that allows access to a routers or some other devices statistics.
S&P community strings are used only by devices which support S&P Version one and S&P version to see
protocol, S&P V3 uses username password authentication along with an encryption key.
So once again, enter the configure terminal mode.
Type in S&P server community in anywhere the command, you can just put a question mark to get help
about what's expected.
So here it waits for the community name.
So Cissy's public, which is a commonly used name for Read-Only communities and less the community type
Auro for Read-Only.
So now that we're on a roll, let's create another community with a right privilege this time.
Let the name be private.
And I'll put a question mark here to see the options that we chose R.O. for the previous community.
Now let's use RW to give community the right access.
And to accept the configuration mode and we are to save that configuration.
Now, let's go back to Cali, to Texas, the S&P service.
So there's already a terminal screen inside my colleague.
And here there's an end map query to query the most U.S. ports, including the S&P default port one
six one.
The query was run before we enabled the S&P service.
But as you see, the S&P report was closed then.
So let's run the query again.
Call the same query by clicking the up arrow.
Here it is, the target IP and the ports to scan.
So on this query s capital S. identifies the scam type as a sin scam, it's a scam type to scan TCP
ports O is for OS detection as Capital V is for version detection.
Reason is to see the reason why the port is signed as open or closed.
Now press enter to run the query.
Wow, look at that, the port one sixty one is supposed to be open, but it's not OK.
I know the reason we scanned the TCP ports, but S&P uses the UDP ports in general.
So if we scan the UDP port one six one, we'll see that it's open.
OK, we'll scan the Port UDP one six one in the next lecture.