PLANET CS-2001 - Manual (Page 44)

33
Terms in SNMP
SNMPv3
 SNMP is a protocol specially designed to monitor network-attached devices such
as servers, switches, routers, workstations etc. By utilizing the information
supplied by SNMP, IT administrators are able to instantly understand and resolve
network issues as well as help with resource utilization and planning.
 A network implementing SNMP consists of three major components: the
managed device, the agent (SNMP software that resides in the managed device)
and the Network management station (NMS).
 There are currently three versions of SNMP:
 SNMPv1: lacks encryption and authentication allowing information to be
easily intercepted and read.
 SNMPv2: provides a vast improvement for some of the security concerns
associated with SNMPv1. SNMPv2 is not compatible with SNMPv1 and
runs at a lower speed and as a result it has not been widely accepted.
 SNMPv3: resolved the problems associated with the previous two versions.
Not only does it provide encryption, but also the agent is able to
authenticate the NMS and provide message integrity to ensure that a packet
hasn’t been tampered with. In addition, it can provide access control based
upon a permission list.
Security Mode
 SNMP defines three authentication and privacy levels:
 Level 1 provides neither privacy nor authentication and is referred to as
NoAuthNoPriv. Under this setting, there is neither privacy nor
authentication as would be the case when running SNMPv1. This is best
suited to networks where there is no need for security.
 Level 2 provides authentication without privacy and is referred to as
AuthNoPriv.
 Level 3 provides not only authentication for SMTP data but also encryption
and is referred to as AuthPriv.
User Name
 The NMS uses this user name to access information from the CS-2001.
Auth Protocol
 Supports the authentication protocols of HMAC_MD5_96 and HMAC_SHA_96.