Article View: comp.protocols.snmp
Article #130Re: secure snmp: too much bang for the buck?
From: Ed Alcoff - Prod Mtg
Date: Mon, 14 Sep 1992 23:21
Date: Mon, 14 Sep 1992 23:21
21 lines
1166 bytes
1166 bytes
Pls realize that SMP provides for a slight mod to the Secure SNMP as spec'd in the RFCs. Also, I disagree that a vendor should not support SETs because of a lack of security. Leave the security of the net to the user- they can choose to use SETs or not with an appropriate entry in a typical snmpd.conf (use READ instead of READ-WRITE) Also, SMP/Secure SNMP does not provide a perfectly secure environment. Due to possible export restrictions, some vendors may choose not to implement encryption. Also, one cannot set the value of the life delay to 0 so that one will be able to intercept the packet and retransmit it from a rogue implementation. So it's much better, but certainly not overkill. Cheers, /era
Technical Details
Message-ID:
<1992Sep14.232138.2837@twg.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!eco.twg.com!twg.com!twg.com!olderaReferences:
<1992Sep12.213808.27554@gordian.com>Show Full Headers
Complete Article Headers
Newsgroups: comp.protocols.snmp Path: arc1-ca.pugleaf.net!sparky!uunet!eco.twg.com!twg.com!twg.com!oldera From: oldera@twg.com (Ed Alcoff - Prod Mtg) Subject: Re: secure snmp: too much bang for the buck? Message-ID: <1992Sep14.232138.2837@twg.com> Sender: news@twg.com (USENET News System) Organization: The Wollongong Group, Palo Alto, CA References: <1992Sep12.213808.27554@gordian.com> Date: Mon, 14 Sep 1992 23:21:38 GMT Lines: 21