topic Re: SNMP and AAA in Network Access Control https://community.cisco.com/t5/network-access-control/snmp-and-aaa/m-p/778418#M409036 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>SNMPv3 provides for both security models and security levels. A security model is an authentication strategy that is set up for a user and the role in which the user resides. A security level is the permitted level of security within a security model. A combination of a security model and a security level determines which security mechanism is employed when handling an SNMP packet.</P><P></P><P>Access Control occurs (either implicitly or explicitly) in an SNMP entity when processing SNMP retrieval or modification request messages from an SNMP entity. For example a Command Responder application applies Access Control when processing requests that it received from a Command Generator application. These requests contain Read Class and Write Class PDUs as defined in [RFC3411].</P><P></P><P> Access Control also occurs in an SNMP entity when an SNMP notification message is generated (by a Notification Originator application).</P><P></P><P>To implement the model described above, an SNMP entity needs to retain information about access rights and policies. This information is part of the SNMP engine's Local configuration Datastore (LCD). See [RFC3411] for the definition of LCD.</P><P></P><P></P><P></P><P>As of Cisco MDS SAN-OS, SNMP v3 user management can be centralized at the AAA server level. This centralized user management allows the SNMP agent running on the Cisco MDS switch to leverage the user authentication service of AAA server. Once user authentication is verified, the SNMP PDUs are processed further. Additionally, the AAA server is also used to store user group names. SNMP uses the group names to apply the access/role policy that is locally available in the switch.</P></BODY></HTML> Wed, 05 Sep 2007 21:52:08 GMT Dev Vishwakarma 2007-09-05T21:52:08Z SNMP and AAA https://community.cisco.com/t5/network-access-control/snmp-and-aaa/m-p/778417#M409035 <P>Hello,</P><P></P><P>Has anyone get working the SNMP v3 authentication thru AAA servers?</P><P></P><P>Any feedback is greatly appreciated</P> Sun, 10 Mar 2019 22:22:02 GMT https://community.cisco.com/t5/network-access-control/snmp-and-aaa/m-p/778417#M409035 eastcoast5 2019-03-10T22:22:02Z Re: SNMP and AAA https://community.cisco.com/t5/network-access-control/snmp-and-aaa/m-p/778418#M409036 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>SNMPv3 provides for both security models and security levels. A security model is an authentication strategy that is set up for a user and the role in which the user resides. A security level is the permitted level of security within a security model. A combination of a security model and a security level determines which security mechanism is employed when handling an SNMP packet.</P><P></P><P>Access Control occurs (either implicitly or explicitly) in an SNMP entity when processing SNMP retrieval or modification request messages from an SNMP entity. For example a Command Responder application applies Access Control when processing requests that it received from a Command Generator application. These requests contain Read Class and Write Class PDUs as defined in [RFC3411].</P><P></P><P> Access Control also occurs in an SNMP entity when an SNMP notification message is generated (by a Notification Originator application).</P><P></P><P>To implement the model described above, an SNMP entity needs to retain information about access rights and policies. This information is part of the SNMP engine's Local configuration Datastore (LCD). See [RFC3411] for the definition of LCD.</P><P></P><P></P><P></P><P>As of Cisco MDS SAN-OS, SNMP v3 user management can be centralized at the AAA server level. This centralized user management allows the SNMP agent running on the Cisco MDS switch to leverage the user authentication service of AAA server. Once user authentication is verified, the SNMP PDUs are processed further. Additionally, the AAA server is also used to store user group names. SNMP uses the group names to apply the access/role policy that is locally available in the switch.</P></BODY></HTML> Wed, 05 Sep 2007 21:52:08 GMT https://community.cisco.com/t5/network-access-control/snmp-and-aaa/m-p/778418#M409036 Dev Vishwakarma 2007-09-05T21:52:08Z Re: SNMP and AAA https://community.cisco.com/t5/network-access-control/snmp-and-aaa/m-p/778419#M409037 <HTML><HEAD></HEAD><BODY><P>Please mark it resolved so other can benefit from it.</P><P></P><P>regards,</P><P>-dev</P></BODY></HTML> Wed, 19 Sep 2007 12:44:41 GMT https://community.cisco.com/t5/network-access-control/snmp-and-aaa/m-p/778419#M409037 Dev Vishwakarma 2007-09-19T12:44:41Z