Avaya G430 - Page 306

SNMPv2c
SNMPv2c is very similar to SNMPv1. However, SNMPv2c adds support for the get-bulk action
and supports a different trap format.
SNMPv3
SNMPv3 enables the following features over SNMPv1 or v2c:
• User authentication with a username and password
• Communication encryption between the Network Management Station (NMS) and the
SNMP agent at the application level
• Access control definition for specific MIB items available on the SNMP agent
• Notification of specified network events directed toward specified users
• Definition of roles using access control, each with unique access permissions and
authentication and encryption requirements
The basic components in SNMPv3 access control are users, groups, and views. In addition,
SNMPv3 uses an SNMP engine ID to identify SNMP identity. An SNMP engine ID is assigned
to each MAC address of each device in the network. Each SNMP engine ID should be unique
in the network.
Users
SNMPv3 uses the User-based Security Model (USM) for security, and the View-based Access
Control Model (VACM) for access control. USM uses the HMAC-MD5-96 and HMAC-SHA-96
protocols for user authentication, and the CBC-DES56 protocol for encryption or privacy.
An unlimited number of users can access SNMPv3 at the same time.
Related topics:
SNMP security levels on page 307
snmp-server user command on page 307
SNMP
306 Administering Avaya G430 Branch Gateway October 2013
Comments? infodev@avaya.com