RE: I-D ACTION:draft-hardaker-snmp-session-sm-00.txt
"Sharon Chisholm" <[email protected]> Tue, 14 Oct 2003 09:08:13 -0400
| Newsgroups | gmane.ietf.snmpv3 |
|---|---|
| Message-ID | <[email protected]> |
Hi Might I suggest then that providing a MIB way of doing the same thing might just be noise? As for more detailed configuration, why can't this be done in the protocol? A monitoring MIB would be useful though if you can keep it nice and simple - i.e. no superfluous configuration. Sharon -----Original Message----- From: Wes Hardaker [mailto:[email protected]] Sent: Tuesday, October 14, 2003 1:02 AM To: Chisholm, Sharon [CAR:0S00:EXCH] Cc: [email protected] Subject: Re: I-D ACTION:draft-hardaker-snmp-session-sm-00.txt >>>>> On Mon, 13 Oct 2003 19:31:24 -0400, "Sharon Chisholm" >>>>> <[email protected]> said: Sharon> I've only skimmed the draft, but I suspect a MIB to do cleanup Sharon> may not be the best approach. If things are setup using non-SNMP Sharon> means, shouldn't tear down be done that way? The MIB is more for super-management. The draft already supports either side randomly dropping the session, and will support (IE, its not there now) a notification mechanism to the other side that one side intentionally dropped a connection. This will all be "within-SBSM-messages". Greater ability may be controlled by the accompanying MIB module, but the details haven't been worked out. Thanks for the comments! Sharon> If I understood things from my quick skim, I think I like the Sharon> approach of not using SNMP to set up the session since it avoids Sharon> all the bootstrap issues and is easier to sell to people who Sharon> don't think they want to use SNMP for configuration. That was the primary goal; reuse of existing authentication mechanisms. Things like password databases, radius, ... are all heavily used and there is no reason they can't be used within SNMP as well. -- Wes Hardaker Sparta