Snmpv3 Benefits - Cisco ASR 9000 Series User Configuration Manual

Implementing SNMP
Model
v3
v3
v3
4 Hash-Based Message Authentication Code
5 Message Digest 5
6 Secure Hash Algorithm
7 Data Encryption Standard
8 Cipher Block Chaining
9 Triple Data Encryption Standard
10 Advanced Encryption Standard
Use of 3DES and AES encryption standards requires that the security package (k9sec) be installed. For
information on installing software packages, see Upgrading and Managing Cisco IOS XR Software.

SNMPv3 Benefits

SNMPv3 provides secure access to devices by providing authentication, encryption and access control. These
added security benefits secure SNMP against the following security threats:
• Masquerade—The threat that an SNMP user may assume the identity of another SNMP user to perform
Level
authPriv
authPriv
authPriv
management operations for which that SNMP user does not have authorization.
Cisco ASR 9000 Series Aggregation Services Router System Management Configuration Guide, Release 5.1.x
Authentication Encryption
HMAC-MD5 or DES
HMAC-SHA
HMAC-MD5 or 3DES
HMAC-SHA
HMAC-MD5 or AES
HMAC-SHA
SNMPv3 Benefits
What Happens
Provides
authentication based
on the HMAC-MD5
or HMAC-SHA
algorithms. Provides
7
DES 56-bit
encryption in
addition to
authentication based
8
on the CBC DES
(DES-56) standard.
Provides
authentication based
on the HMAC-MD5
or HMAC-SHA
algorithms. Provides
9
168-bit 3DES level
of encryption.
Provides
authentication based
on the HMAC-MD5
or HMAC-SHA
algorithms. Provides
10
128-bit AES level
of encryption.
361