1. SNMPv3 OVERVIEW: DESIGN DECISIONS ARCHITECTURE SNMP MESSAGE STRUCTURE
SECURE COMMUNICATION
• USER SECURITY MODEL (USM)
ACCESS CONTROL
• VIEW BASED ACCESS CONTROL MODEL (VACM)
IMPLEMENTATIONS
RFCs
Copyright © 2001 by Aiko Pras
These sheets may be used for educational purposes

2. DESIGN DECISIONS ADDRESS THE NEED FOR SECURY SET SUPPORT
DEFINE AN ARCHITECTURE THAT ALLOWS FOR LONGEVITY OF SNMP
ALLOW THAT DIFFERENT PORTIONS OF THE ARCHITECTURE
MOVE AT DIFFERENT SPEEDS TOWARDS STANDARD STATUS
ALLOW FOR FUTURE EXTENSIONS
KEEP SNMP AS SIMPLE AS POSSIBLE
ALLOW FOR MINIMAL IMPLEMENTATIONS
SUPPORT ALSO THE MORE COMPLEX FEATURES,
WHICH ARE REQUIRED IN LARGE NETWORKS
RE-USE EXISTING SPECIFICATIONS, WHENEVER POSSIBLE

3. SNMPv3 ARCHITECTURE

4. SNMPv3 ARCHITECTURE: MANAGER

5. SNMPv3 ARCHITECTURE: AGENT

6. CONCEPTS: snmpEngineID

7. CONCEPTS: Context

8. PRIMITIVES BETWEEN MODULES

9. sendPdu

10. prepareOutgoingMessage

11. generateRequestMsg

12. send / receive

13. prepareDataElements

14. processIncomingMsg

15. processPd

16. isAccessAllowed

17. returnResponsePdu

18. prepareResponseMessage

19. generateResponseMsg

20. send / receive

21. prepareDataElements

22. processIncomingMsg

23. processResponsePdu

24. MODULES OF THE SNMPv3 ARCHITECTURE
DISPATCHER AND MESSAGE PROCESSING MODULE
• SNMPv3 MESSAGE STRUCTURE
• snmpMPDMIB
• RFC 2572
APPLICATIONS
• snmpTargetMIB
• snmpNotificationMIB
• snmpProxyMIB
• RFC 2573
SECURITY SUBSYSTEM
• USER BASED SECURITY MODEL
• snmpUsmMIB
• RFC 2574
ACCESS CONTROL SUBSYSTEM
• VIEW BASED ACCESS CONTROL MODEL
• snmpVacmMIB
• RFC 2575

25. SNMPv3 MESSAGE STRUCTURE

26. SNMPv3 PROCESSING MODULE PARAMETERS

27. SECURE COMMUNICATION VERSUS ACCESS CONTROL

28. USM: SECURITY THREATS

29. USM MESSAGE STRUCTURE

30. IDEA BEHIND REPLAY PROTECTION

31. IDEA BEHIND DATA INTEGRITY AND AUTHENTICATION

32. IDEA BEHIND AUTHENTICATION

33. IDEA BEHIND THE DATA CONFIDENTIALITY (DES)

34. IDEA BEHIND ENCRYPTION

35. VIEW BASED ACCESS CONTROL MODEL
ACCESS CONTROL TABLE
MIB VIEWS

36. ACCESS CONTROL TABLES

37. MIB VIEWS

38. SNMPv3 IMPLEMENTATIONS
ACE*COMM
AdventNet
BMC Software
Cisco
Epilogue
Gambit communications
Halcyon
IBM
ISI
IWL
MG-SOFT
MultiPort Corporation
SimpleSoft
SNMP Research
SNMP++
TU of Braunschweig
UCD
University of Quebec

39. SNMPv3 RFCs