Security Models And Levels For Snmpv1, V2, V3 - Cisco ASR 9000 Series User Configuration Manual

SNMP Versions

Security Models and Levels for SNMPv1, v2, v3

The security level determines if an SNMP message needs to be protected from disclosure and if the message
needs to be authenticated. The various security levels that exist within a security model are as follows:
• noAuthNoPriv—Security level that does not provide authentication or encryption.
• authNoPriv—Security level that provides authentication but does not provide encryption.
• authPriv—Security level that provides both authentication and encryption.
Three security models are available: SNMPv1, SNMPv2c, and SNMPv3. The security model combined with
the security level determine the security mechanism applied when the SNMP message is processed.
Table 38: SNMP Security Models and Levels, on page 360
and levels mean.
Table 38: SNMP Security Models and Levels
Model
v1
v2c
v3
v3
Cisco ASR 9000 Series Aggregation Services Router System Management Configuration Guide, Release 5.1.x
360
Level Authentication
noAuthNoPriv Community string
noAuthNoPriv Community string
noAuthNoPriv Username
authNoPriv HMAC-MD5 or
HMAC-SHA
identifies what the combinations of security models
Encryption
No
No
No
No
Implementing SNMP
What Happens
Uses a community
string match for
authentication.
Uses a community
string match for
authentication.
Uses a username
match for
authentication.
Provides
authentication based
on the
4 5
HMAC -MD5
algorithm or the
6
HMAC-SHA .