Re: identical snmpEngineID across multiple device

On Wed, Mar 18, 2020 at 6:30 AM Pushpa Thimmaiah <[email protected]>
wrote:

> If two device has same snmpEngineID then will it impact on device security?
>

Two things off the top of my head:

1. The localized keys will be the same,  meaning that if a localized key is
stolen it can be used for all devices with the same engineID;
2. A conforming SNMP manager may not be able to talk to multiple devices
with the same EngineID (because it will cache the engineBoots/engineTime,
but different agents will have different engineBoots/engineTime values).
Doing this can cause messages to be determined to be replay attacks
(because the engineID in use identifies a different system).

  Bill

_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders