Lectures notes for 2010 - KTH

SNMPv3
March 1997, the SNMPv3 Working group was chartered to define a standard for SNMP
security and administration. Target: April 1998 - all SNMPv3 specifications
submitted to IESG for consideration as Proposed Standards.
Based on “An Architecture for Describing SNMP Management Frameworks” (RFC
2271)
Composed of multiple subsystems:
1.a message processing and control subsystem - Message Processing and Dispatching for SNMP (RFC 2272)
2.a security subsystem - based on a User-based Security Model (USM) (RFC 2274), provides SNMP message level
security (Keyed-MD5 as the authentication protocol and the use of CBC-DES as the privacy protocol - but with support
for others) defines a MIB for remotely monitoring/managing the configuration parameters for this Security model
3.a local processing subsystem - responsibile for processing the SNMP PDUs that operate on local instrumentation,
applies access control [View-based Access Control Model (VACM) (RFC 2275)] and invokes method routines to
access management information, and prepares a response to the received SNMP request.
4.SNMPv3 Applications (RFC 2273) - includes Proxy Forwarder Applications, which can forward SNMP requests to
other SNMP entities, to translate SNMP requests of one version into SNMP requests of another version or into
operations of some non-SNMP management protocol; and support aggregated managed objects where the value of one
managed object depends upon the values of multiple (remote) items.
Maguire SNMPv3 9: 7 of 71
maguire@kth.se 2010.03.21 Internetworking/Internetteknik