Nokia 7705 - 4.1.2 Management Information Base; 4.1.3 SNMP Versions; 4.1.4 Management Information Access Control

System Management Guide SNMP
Edition: 01 3HE 11018 AAAC TQZZA 191
4.1.2 Management Information Base
A MIB is a formal specifications document with definitions of management
information used to remotely monitor, configure, and control a managed device or
network system. The agent’s management information consists of a set of network
objects that can be managed with SNMP. Object identifiers are unique object names
that are organized in a hierarchical tree structure. The main branches are defined by
the Internet Engineering Task Force (IETF). When requested, the Internet Assigned
Numbers Authority (IANA) assigns a unique branch for use by a private organization
or company. The branch assigned to the 7705 SAR is 1.3.6.1.4.1.6527.
The SNMP agent provides management information to support a collection of IETF
specified MIBs and a number of MIBs defined to manage device parameters and
network data unique to the 7705 SAR.
4.1.3 SNMP Versions
The agent supports multiple versions of the SNMP protocol.
• SNMP Version 1 (SNMPv1) is the original Internet-standard network
management framework.
SNMPv1 provides access control for communities and uses a community string
match for authentication.
• SNMPv2c uses a community string match for authentication.
• SNMP Version 3 (SNMPv3) provides access control for users. In SNMPv3,
User-based Security Model (USM) defines the user authentication and
encryption features. The View Access Control MIB (VACM) defines the user
access control features. The SNMP-COMMUNITY-MIB is used to associate
SNMPv1/SNMPv2c community strings with SNMPv3 VACM access control.
SNMPv3 uses a user name match for authentication.
4.1.4 Management Information Access Control
By default, the 7705 SAR implementation of SNMP uses SNMPv3. SNMPv3
incorporates security model and security level features. A security model is the
authentication type for the group and the security level is the permitted level of
security within a security model. The combination of the security level and security
model determines which security mechanism handles an SNMP packet.