Simple Network Management Protocol (Snmp); Protocol Overview; Implementation Information; Snmpv3 Compliance With Fips - Dell S6000–ON Configuration Manual

Simple Network Management Protocol
(SNMP)
The Simple Network Management Protocol (SNMP) is designed to manage devices on IP networks by
monitoring device operation, which might require administrator intervention.
NOTE: On Dell Networking routers, standard and private SNMP management information bases
(MIBs) are supported, including all Get and a limited number of Set operations (such as set vlan
and copy cmd).

Protocol Overview

Network management stations use SNMP to retrieve or alter management data from network elements.
A datum of management information is called a managed object; the value of a managed object can be
static or variable. Network elements store managed objects in a database called a management
information base (MIB).
MIBs are hierarchically structured and use object identifiers to address managed objects, but managed
objects also have a textual name called an object descriptor.

Implementation Information

The following describes SNMP implementation information.
• Dell Networking OS supports SNMP version 1 as defined by RFC 1155, 1157, and 1212, SNMP version 2c
as defined by RFC 1901, and SNMP version 3 as defined by RFC 2571.
• Dell Networking OS supports up to 16 trap receivers.
• Dell Networking OS implementation of the sFlow MIB supports sFlow configuration via SNMP sets.
• SNMP traps for the spanning tree protocol (STP) and multiple spanning tree protocol (MSTP) state
changes are based on BRIDGE MIB (RFC 1483) for STP and IEEE 802.1 draft ruzin-mstp-mib-02 for
MSTP.

SNMPv3 Compliance With FIPS

SNMPv3 is compliant with the Federal information processing standard (FIPS) cryptography standard. The
Advanced Encryption Standard (AES) Cipher Feedback (CFB) 128-bit encryption algorithm is in
compliance with RFC 3826. SNMPv3 provides multiple authentication and privacy options for user
configuration. A subset of these options are the FIPS-approved algorithms: HMAC-SHA1-96 for
authentication and AES128-CFB for privacy. The other options are not FIPS-approved algorithms because
of known security weaknesses. The AES128-CFB privacy option is supported and is compliant with RFC
3826.
838

Simple Network Management Protocol (SNMP)

46