使用SNMPv2配合IPSec或SNMPv3实现安全网络管理

Employing SNMPv2 over IPSec or SNMPv3 to Provide Secure Network Management

主要讨论的是如何在主干网上为SNMP提供安全性。通过比较SNMPv3内建的安全特性和SNMPv2配合IPSec这两种不同的实现方法,得出:在大型网络上,SNMPv2配合IPSec比SNMPv3在功能和性能上具有更多的优点。最后,提出将这两种实现方案配合使用的方法将更加适合大型主干网上对SNMP设备的管理。

This paper addresses the problem of providing secure network management by using the Simple Network Man-agement Protocol(SNMP )across a backbone network.We compare the built -in authentication and pr ivacy features of SNMP version 3(SNMPv3)with SNMP version 2(SNMPv2c)over IP Security(IPSec).Our results indicate that a framewo rk based on IPSec offers more functional and p erformance advantages than that of SNMPv3.After that,We suggest that a n ew method combining SNMPv3with SNMPv2over IP Sec could be better.