Re: [Isms] Why SNMPv3? [WG Review: Integrated Security Model for SNMP (isms)]

We (Cisco Systems) sell, mostly to enterprises, a network management
system (CiscoWorks) that requires SNMP write access for much of it's
functionality and I have personally worked with many Fortune 100 companies
that are using this NMS and allowing SNMP write access to their network
devices, along with countless smaller companies.

We also sell a large number of DOCSIS-compliant devices. DOCSIS requires
SNMP write access for configuration and provisioning.

We sell other network management systems into the service provider market
that require SNMP write access to the managed devices. They continue to
sell and be used.

SNMP, with write access, is in use today in many environments. These
customers typically are using this write access with insecure community
strings and are securing access with access lists and private management
networks.

I believe that the advantages of using a secure protocol, such as SNMPv3,
along with the ability to authenticate against existing user databases,
will be easier to deploy and more secure than the existing methods.

Chris.

On Thu, 23 Sep 2004, Wes Hardaker wrote:

> >>>>> On Thu, 23 Sep 2004 15:28:41 -0400, "Thomas D. Nadeau" <[email protected]> said:
>
> Thomas> Being a reality and actually being used are two different things.
> Thomas> I too have developed numerous modules that are writable, but not many
> Thomas> people use them.
>
> I sure get an awful lot of questions about an operation that
> supposedly isn't used.
>
> [note the recent ISMS survey results (see the proceedings) had about
> 1/5th of the responses saying they used SNMP for configuration]
>
> --
> Wes Hardaker
> Sparta
>
> _______________________________________________
> Isms mailing list
> [email protected]
> https://www1.ietf.org/mailman/listinfo/isms
>

Chris Elliott  CCIE# 2013       |         |
Customer Diagnostic Engineer   |||       |||
RTP, NC, USA                  |||||     |||||
919-392-2146              .:|||||||||:|||||||||:.
[email protected]        c i s c o S y s t e m s