snmp - snmp private mib 阻止公共用户读取节点

Question

我正在处理一个私有 mib，其中包括一些带有敏感信息的节点。我希望这些节点只能由拥有私人社区字符串的用户读取。

细节：

usersEntry
    usersIndex
    usersName
    usersPassword

我希望这些敏感信息只对具有社区字符串的用户可读，而不是对具有私有社区字符串的用户可读。

Answer 1

Unless you are writing an SNMP agent of your own, the flexibility on security depends on the vendor of that agent. Talk to the vendor and you will know the answer.

Generally speaking, for SNMP v2 you won't get what you want, as role based security model was introduced only in SNMP v3,

http://www.rfc-editor.org/rfc/rfc3414.txt

If the vendor happens to also back port RFC3414 support for v2, you should be lucky enough to also use it in v2. If not, you are on your own.