This section provides an overview of the security services and mechanisms provided by the SNMPv3 User-Based Security Model (USM) to protect network management operations.
The SNMPv3 User-Based Security Model includes these security services:
-
Message integrity: Ensures messages are not altered or destroyed in an unauthorized way.
-
Message origin authentication: Confirms the claimed identity of the originating user.
-
Message confidentiality: Prevents disclosure of information to unauthorized persons.
SNMPv3 USM employs these protocols:
-
Authentication: HMAC-MD5-96, HMAC-SHA-96
-
Privacy: CBC-DES (DES-56) for encryption
Additional features:
-
Only configured users can perform management operations.
-
All SNMP messages are protected using authentication and privacy protocols.