As Arthur mentioned, the main enhancement to SNMPv3 is security. I have
only read about it so far, but would like to start looking at it in our lab.
Cisco supports SNMPv3 in IOS 12.X.
The SNMP security added includes authentication and optional encryption. I
am not sure at what cost this will be in overhead(this is why we want to
test it)? Several new MIBs are added in SNMPv3, including View-based Access
Control(VACM) MIB, Remote Configuration of SNMP MIB, SNMP Community MIB
(maps SNMPv1 and SNMPv2c to a securityName, contextEngineID, and
contextName), Expression MIB, Scheduling MIB (can be used to trigger mgmt.
functions), Script MIB (can execute scripts using security of SNMPv3), and
Notification Log MIB.
Not sure how well SNMPv3 works in practice, but some of its enhancements
sound beneficial. I think it is important for network management
applications such as NetView to support SNMPv3 as soon as possible so at
least we have the option to utilize these features as vendors roll out
SNMPv3 compatibility in their local SNMP agents.
Joe Prokott - West Group
Network Architect
610 Opperman Drive
St. Paul, MN 55123
Phone: 651-687-4536
Fax: 651-687-6946
E-mail: joe.prokott@westgroup.com
-----Original Message-----
From: Boulieris, Arthur [mailto:Arthur.Boulieris@NZ.UNISYS.COM]
Sent: Monday, June 14, 1999 9:44 PM
To: NV-L@UCSBVM.UCSB.EDU
Subject: Re: NetView SNMPv3 support
I have done a bit of reading on snmpv3 and found a web site with a bit of
info.
the main drive for version 3 is for secure encrypted mib values and more
importantly community name,any one with this can work out teh topology of a
network.
http://www.snmp.com/snmpv3.html
ta ab
-----Original Message-----
From: James Shanks [mailto:James_Shanks@TIVOLI.COM]
Sent: Tuesday, 15 June 1999 11:59
To: NV-L@UCSBVM.UCSB.EDU
Subject: Re: NetView SNMPv3 support
1. No support for SNMPV3 has been announced. When it is, you'll find it
on the Tivoli web site and here.
2. As always, if you have a business need for this, then you should send a
note to netview@tivoli.com. If you think your business has a pressing need
to be leading edge on these issues, then I suggest you contact your Tivoli
marketing rep about becoming a Lighthouse customer (one who participates in
requirement workshops, beta programs, and that sort of thing). Only a
customer in such a program will be "non-disclosed", that is, privy to plans
before they are announced. They will also help establish the priorities
for new function.
3. I would be very surprised to learn that any agent which supports V3
will not also support V1 (because that would be commercial suicide), so it
is unlikely that your deployment of SNMPV3-capable agents will be hampered
by lack of support in NetView. That does mean, of course, that you would
be able to use any new V3 function until NetView supports it. If you
find such an agent, one which supports V3 and not V, I am sure we would all
very much like to hear about it.
4. I think we (subscribers to the NV-L list) would all like to know what
your plans are for SNMPV3. I doubt that most folks even know what it
contains, and since V2 was never popular, except for the new MIB
constructs, most don't even know what to expect from it. Care to share?
What does West Publishing want out of SNMP V3? What agents are you looking
to deploy?
James Shanks
Tivoli (NetView for UNIX) L3 Support
"Prokott, Joe" <Joe.Prokott@WESTGROUP.COM> on 06/14/99 04:04:35 PM
Please respond to Discussion of IBM NetView and POLYCENTER Manager on
NetView <NV-L@UCSBVM.UCSB.EDU>
To: NV-L@UCSBVM.UCSB.EDU
cc: (bcc: James Shanks/Tivoli Systems)
Subject: NetView SNMPv3 support
I assume SNMPv3 is not supported by NV 5.1.1, correct? If so, does NV plan
on supporting SNMPv3? If so, when? We can not even look at upgrading
agents to SNMPv3 our management applications (i.e., NetView, etc...) do not
support SNMPv3.
Also, has anyone out there looked at and/or implemented SNMPv3 in their
environment in any way - development or production???
Thanks,
Joe Prokott - West Group
Network Architect
610 Opperman Drive
St. Paul, MN 55123
Phone: 651-687-4536
Fax: 651-687-6946
E-mail: joe.prokott@westgroup.com
|