Re: MIB

[Jon Saperia <saperia@mediaone.net>]

I am not sure who posted this portion of the thread:

>> VACM isn't available in deployed SNMPv1 implementations.  Most OSPF
>> routers do NOT now implement SNMPv3, so VACM just isn't available
>> (nor is MD5 Auth, which is the real issue here).
>> 

The above claim is not accurate from what I have seen. I did a quick check
of the Cisco page and found better than 50 references to support for SNMPv3
on everything from access routers, to the main line series, to catalyst
machines, to cable routers (they have a whole series of these).

The release notes were for the 12.x IOS series. My point is that while Cisco
is not the only vendor, they have a fairly large footprint :-)

SNMPv3 it is available on many platforms and by the time the MIB Module
under discussion is released in product, I expect that more will be.

I also think Bert had it write in his earlier note. The IETF gives the
facilities for security and should offer ideas about their effective
deployment, the user decides how and if to use them. Is it not possible to
configure the same information with the CLI and not use SSH or Radius or
other measures? Not a good operational practice given the availability of
better solutions. This is the same problem.

/jon