1. Network Management Specification
92
June 2004
8000-A2-GB30-30
When creating new trap managers, the agent will set the following default values:
TDomain=UDP (only UDP is supported)
retryCount=3
timeout=100
8.4.4
User-based Security Model (USM) RFC 3414_std62
RFC 3414_std62 discusses the “User-based security model” for SNMPv3. It defines the
elements of procedure for providing SNMP message-level security. The mechanisms to be
implemented related to this feature are Discovery and Timeliness, Authentication, Privacy
and Key management.
RFC 3414_std62 also defines the usmUserTable which is supported by the SNMP agent to
configure SNMPv3 users. By default this table defines a user to access the device using the
MD5 protocol for authentication and the DES protocol for encryption when the device is
configured for v3 auth and Priv mode (pdnMpdExtSecurityModeConfig=0x04). Addi-
tional users can be cloned from this initial user.
The agent supports the HMAC-MD5-96 and the HMAC-SHA-96 protocols for authentica-
tion and the CBC-DES Symmetric Encryption Protocol for Privacy.
8.4.4.1
USM Statistics MIBs
usmStatsUnsuppportedSecLevels, usmStatsNonInTimeWindows,
usmStatsUnknownUserNames, usmStatsUnknownEngineIDs, usmStatsWrongDigests,
usmStatsDecryptionErrors.
8.4.4.2
usmUserTable
This table allows remote SNMP entities to define SNMPv3 users and maintain authentica-
tion and privacy information for them. The engineID and the userName are used to index
this table. All entries will have the same local engineID. Also this product will support cre-
ation of user with noAuthNoPriv or AuthPriv combination of securityLevel. Thus, a Auth-
NoPriv will not be supported.
Table 1-112. USM mibs
Object
Supported
Comments
snmpUsmTable
read-create
Can be used to add new v3 users
usmStatsUnsuppportedSecLevels
read-only
statistics supported as per standard.
usmStatsNonInTimeWindows
read-only
statistics supported as per standard.
usmStatsUnknownUserNames
read-only
statistics supported as per standard.
usmStatsUnknownEngineIDs
read-only
statistics supported as per standard.
usmStatsWrongDigests
read-only
statistics supported as per standard.
usmStatsDecryptionErrors
read-only
statistics supported as per standard.
