The Snmpv3 New Security Features

Simple Network Management Protocol (SNMP) is the present network management protocol in TCP/IP stack. SNMP provides a method to monitor and supervise the various devices and resources in the computer networks. Because of its simplicity, SNMP is wide spread and supported by many manufacturers. There are three versions of SNMP which are SNMPv1, SNMPv2 and SNMPv3. To overcome the lack of security in SNMPv1 and SNMPv2, SNMPv3 is greatly improved in its security and user management, and it makes use of the User-based Security Mode (USM) and the View-based Access Control Mode (VACM). USM could be used to avoid the modification of information, masquerade, disclosure, and delay or replay of messages. VACM could be used to check whether a specific type of access (read, write, notify) to a particular object is allowed.The project detailed described in this paper is mainly about the implementation of the security features of the Agent side in SNMPv3 system. The design adopts an uniform network management architecture, gives an implementation plan of the SNMPv3 security features which is compatible with SNMPv1 and SNMPv2. The USM and VACM security function was implemented by coding and debugging. The testing plan is designed in this paper and the system test has been passed.The main work in this paper is listed below:1. Analyzes the SNMPv3 standards, compares it with SNMPv1 and SNMPv2, and understands the function features of USM and VACM.2. Analyzes the security features in SNMPv3 system, gives out the USM and VACM implementation plan according to the SNMPv3 system logical architecture.3. Designs the USM and VACM's functional blocks and implementation flows, implements the SNMPv3 system security features through the code compiling and debugging.4. Designs the USM and VACM testing plan, tests USM and VACM functions in the integrated environment, successfully implements the SNMPv3 system's new security features through analyzing the testing results.