Security for connections from SNMP

Security for SNMP depends on the protocol you use for the SNMP connections. Community names are used to authenticate the connection to the SNMP protocols v1 and 2c. “Public” and “private” are community names; they are passed to the SNMP agent as words that allow access to SNMP data.

SNMPv3 introduces significant increases in security for SNMP connections. Client connections are authenticated with a user name and password.

This version also introduces encrypted passwords and encrypted message content.

For the default login and user authentication for Unified Agent SNMP agent services, see “UAF SNMP Agent Service”.

Sample connection

For example, you can use the program NET-SNMP to connect the SNMP service and to query the aseErrorTable from the Sybase Adaptive Server MIB. For more information, see the referencehttp://net-snmp.sourceforge.net/.

In “Viewing the SNMP information from NET-SNMP”, “snmpwalk” is a NET-SNMP application using SNMP GETNEXT requests to query a network entity for a tree of information. In the SNMP protocol version 1 (“-v 1”), “-c public” specifies the community name. “localhost:1498” declares the network-addressable host name at port number 1498. The last keyword identifies the branch of the SNMP tree to query.

$ snmpwalk -v 1 -c public MYHOST:1498 enterprise
SNMPv2-SMI::enterprises.897.1.1.1.1.1.1 = INTEGER: 1
SNMPv2-SMI::enterprises.897.1.1.1.1.2.1 = STRING: "WEBSPINNER"
SNMPv2-SMI::enterprises.897.1.1.1.1.3.1 = INTEGER: 1
SNMPv2-SMI::enterprises.897.1.1.1.1.4.1 = INTEGER: 2
SNMPv2-SMI::enterprises.897.1.1.1.1.5.1 = INTEGER: 3
SNMPv2-SMI::enterprises.897.1.1.1.1.6.1 = STRING: "sa"
SNMPv2-SMI::enterprises.897.1.1.1.1.7.1 = INTEGER: 4
SNMPv2-SMI::enterprises.897.1.1.1.1.8.1 = INTEGER: 5
SNMPv2-SMI::enterprises.897.1.1.1.1.9.1 = STRING: "Hello SNMP World"