SNMP family

1
SNMP family

• J. Won-Ki Hong
• Dept. of Computer Science and Engineering
• POSTECH
• Tel [phone]
• Email jwkhong_at_postech.ac.kr

2
Table of Contents

• The evolution of SNMP
• secure SNMP
• SNMPv2
• SNMPv2u
• SNMPv2
• SNMPng

3
The Evolution of SNMP
SGMP
SNMP
secure SNMP
SNMPv2 Working Group
SNMPv2 Security Working Group
SNMPv2
SNMPv2
SNMPv2u(USEC)
SNMPng
SGMP Simple gateway-monitoring protocol
4
secure SNMP

• RFC 1341, 1352, 1353, 1321
• Addresses security elements
• Authentication and integrity
• authenticates originator of message(private key)
• Access controls
• Reads and Writes on MIB views has been improved
• Security and privacy
• guarantees that message has not been altered
• Encryption options are available
• Elements of the model
• party, MIB view, Access-control policy

5
SNMPv2

• RFC 1445, 1446, 1447
• Three security elements
• included the concept of the context
• Coordinates activities of multiple managers
• locking mechanisms to prevent writing to same
  agent
• A GET BULK operation has been added
• used between managers

6
SNMPv2 (contd)

• The Trap PDU is the same format as the other PDUs
• The same software can code and decode all PDUs
• SNMP mangers can talk each other
• SNMPv1 supported manager-to-agent only
• No APIs, nor any object-oriented additions

7
SNMPv2u(USEC)

• A User-Based Security Model for SNMPv2
• RFC 1910
• Eliminate the party-based definitions
• Retain the core security elements
• transport and clock information are
  agent-specific
• key information is user-specific
• access rights are formed from the intersection of
  the transport/clock and key information
• Reduce the complexity of the architecture and its
  implementation

8
SNMPv2

• Strong security and administrative frame work
• Sensitivity to needs of agents, managers and
  administrators
• Ease of configuration, ease of use

9
SNMPng

• recommendation
• Timeliness Check Module
• Authentication Module
• Encryption Module
• Proxy Determination Module
• Proxy Handling Module
• Access Control Module
• Varbind processing Module
• Overall Framework Issue
• The Modularity Issue
• etc.

10
references

• 1 William Stallings, SNMP, SNMPv2 and CMIP
  Addison Wesley, 1993
• 2Uyless Black, Network Management Standards,
  McGraw-Hill Inc, 1995
• 3USEC Resource Pages, Simple-Times Org, Jan
  1997 http//www.simple-times.org/pub/simpletimes/u
  sec/index.html
• 4SNMPv2 Web Sites, SNMP Research
  International, Inc., 1996 http//www.snmp.com/v2st
  ar.html
• 5Simple Network Management Protocol - Next
  Generation, TIS Research, Aug 1996
• http//www.tis.com/docs/research/network/snmp-ng.
  html