Re: coex draft last call -- review of changes since RFC 2576
Dave Shield <[email protected]> Fri, 10 Jan 2003 14:01:44 +0000
| Newsgroups | gmane.ietf.snmpv3 |
|---|---|
| Message-ID | <[email protected]> |
> > p18: 3.2 bullet (6)
> > This description says to strip out snmpTrapAddress.0, but says
> > nothing about the other two varbind that may potentially have
> > been added - snmpTrapCommunity.0 and snmpTrapEnterprise.0.
> >
> > In particular, the snmpTrapEnterprise.0 varbind has already
> > been used to set the SNMPv1 enterprise notification parameter
> > (see 3.2 bullet(1) ). Retaining it here would seem unnecessary,
> > so it would be sensible to remove this as well.
>
> Although snmpTrapAddress.0 should ans snmpTrapEnterprise.0 are
> in principle reconstructable, the previous version of the spec
> said to leave them in. Since this behaviour is harmless, I cannot
> see any reason to change to make that change now.
> > Should the snmpTrapCommunity.0 varbind be retained or not? Does
> > it make a difference whether this value is the same as the SNMPv1
> > community notification parameter on the outgoing notification?
>
> That needs to stay in order to ensure that the original community
> string is available after a trap has passed through a proxy chain
> such as the one illustrated above.
Keeping all three would also have the advantage of being consistent,
I suppose.
And according to 3.1(4), these snmpTrapAddress.0, snmpTrapCommunity.0 and
snmpTrapEnterprise.0 varbinds should only ever be appended once - correct?
What happens if the incoming SNMPv1 notification already includes
one (or more) of these varbinds, and the values are inconsistent with
the corresponding SNMPv1 notification parameters? i.e. the 'agent-addr'
(or 'enterprise') field says one thing, and the snmpTrapAddress.0
(or snmpTrapEnterprise.0) varbind says another.
Should the proxy:
a) replace the old varbind with the new value
(dropping the old value completely)
b) leave the old varbind as it stands
(dropping the new value completely)
or c) append a second snmpTrap{xxx}.0 varbind
(thus retaining both values)
According to the specification as it currently stands, the correct
behaviour would appear to be b) - yes?
This scenario is probably relatively unlikely for the snmpTrapAddress.0
or snmpTrapEnterprise.0 varbinds. But it seems quite plausible for
the snmpTrapCommunity.0 varbind - depending on the appropriate response
to the following:
> > How to handle snmpTrapCommunity.0 seems less obvious - in
> > particular, should the outgoing SNMPv1 notification use this
> > community name, or that determined from the proxy's own configuration
> > (e.g. the SNMP-COMMUNITY-MIB)?
Dave