Re: SNMPv3 security

Wes Hardaker <[email protected]> Fri, 08 Aug 2003 09:29:51 -0700

Newsgroups	gmane.ietf.snmpv3
Organization	Sparta
Message-ID	<[email protected]>

>>>>> On Thu, 7 Aug 2003 15:02:59 -0700, "Fleischman, Eric" <[email protected]> said:

Eric> Changing topics, I remain interested in any insights this group
Eric> may care to offer me on approaches to supplement SNMPv3 security
Eric> by protocols operating at a different layer.

Eric,

FYI:

1) snmp can run over TCP (thus your snmp over ssh over tcp should work
   just fine), though not every implementation supports it (SNMP
   research products do not, for example).

2) A snmp/krb5 draft was written a while back by Ken Hornstein and
   myself (though it's now out of date...  Ken, we really need to
   republish this and send it to the IESG), and an implementation of
   it is available in the Net-SNMP toolkit.

-- 
Wes Hardaker
Sparta