Proxy snmp v3 requests to snmp v2c configured servers
I am trying to configure Net-SNMP to accept incoming SNMP v3 requests to a proxy agent and relay them to other internal application servers as SNMP v2c requests.
I saw some comments that it is possible to get SNMP v3 requests and relay them as SNMP v2c. Also, it is written that setting up the "proxy" directive with the necessary SNMPv2c flags (typically -v2c -c {someCommunity}) is enough in the snmpd.conf file. But as far as I know, we use -n CONTEXT_NAME to query SNMP agent and relay the request to other nodes. But there is community string for SNMP v2c. As a result, how should I shape my SNMP query to send as SNMP v3 but force the SNMP agent to relay it as SNMP v2c to other internal nodes?
Additionally, if I can't use different SNMP versions during proxy and if I configure snmpd.conf to support SNMPv3 proxy, all authentication passphrases and encryption keys will be hard-coded in snmpd.conf, so this is security vulnerability, right? As a result, I need to to find a way to configure my proxy path with SNMPv2c.
snmp
asked Feb 25 at 11:07
korayguneykorayguney
1
migrated from security.stackexchange.com Feb 25 at 11:13
This question came from our site for information security professionals.
add a comment |
I am trying to configure Net-SNMP to accept incoming SNMP v3 requests to a proxy agent and relay them to other internal application servers as SNMP v2c requests.
I saw some comments that it is possible to get SNMP v3 requests and relay them as SNMP v2c. Also, it is written that setting up the "proxy" directive with the necessary SNMPv2c flags (typically -v2c -c {someCommunity}) is enough in the snmpd.conf file. But as far as I know, we use -n CONTEXT_NAME to query SNMP agent and relay the request to other nodes. But there is community string for SNMP v2c. As a result, how should I shape my SNMP query to send as SNMP v3 but force the SNMP agent to relay it as SNMP v2c to other internal nodes?
Additionally, if I can't use different SNMP versions during proxy and if I configure snmpd.conf to support SNMPv3 proxy, all authentication passphrases and encryption keys will be hard-coded in snmpd.conf, so this is security vulnerability, right? As a result, I need to to find a way to configure my proxy path with SNMPv2c.
snmp
asked Feb 25 at 11:07
korayguneykorayguney
1
migrated from security.stackexchange.com Feb 25 at 11:13
This question came from our site for information security professionals.
This is not a security question but a SNMP configuration question.
– schroeder
Feb 25 at 11:12
add a comment |
I am trying to configure Net-SNMP to accept incoming SNMP v3 requests to a proxy agent and relay them to other internal application servers as SNMP v2c requests.
I saw some comments that it is possible to get SNMP v3 requests and relay them as SNMP v2c. Also, it is written that setting up the "proxy" directive with the necessary SNMPv2c flags (typically -v2c -c {someCommunity}) is enough in the snmpd.conf file. But as far as I know, we use -n CONTEXT_NAME to query SNMP agent and relay the request to other nodes. But there is community string for SNMP v2c. As a result, how should I shape my SNMP query to send as SNMP v3 but force the SNMP agent to relay it as SNMP v2c to other internal nodes?
Additionally, if I can't use different SNMP versions during proxy and if I configure snmpd.conf to support SNMPv3 proxy, all authentication passphrases and encryption keys will be hard-coded in snmpd.conf, so this is security vulnerability, right? As a result, I need to to find a way to configure my proxy path with SNMPv2c.
snmp
asked Feb 25 at 11:07
korayguneykorayguney
1
I am trying to configure Net-SNMP to accept incoming SNMP v3 requests to a proxy agent and relay them to other internal application servers as SNMP v2c requests.
I saw some comments that it is possible to get SNMP v3 requests and relay them as SNMP v2c. Also, it is written that setting up the "proxy" directive with the necessary SNMPv2c flags (typically -v2c -c {someCommunity}) is enough in the snmpd.conf file. But as far as I know, we use -n CONTEXT_NAME to query SNMP agent and relay the request to other nodes. But there is community string for SNMP v2c. As a result, how should I shape my SNMP query to send as SNMP v3 but force the SNMP agent to relay it as SNMP v2c to other internal nodes?
Additionally, if I can't use different SNMP versions during proxy and if I configure snmpd.conf to support SNMPv3 proxy, all authentication passphrases and encryption keys will be hard-coded in snmpd.conf, so this is security vulnerability, right? As a result, I need to to find a way to configure my proxy path with SNMPv2c.
snmp
snmp
asked Feb 25 at 11:07
korayguneykorayguney
1
asked Feb 25 at 11:07
korayguneykorayguney
1
asked Feb 25 at 11:07
korayguneykorayguney
1
asked Feb 25 at 11:07
korayguneykorayguney
1
asked Feb 25 at 11:07
korayguneykorayguney
1
1
migrated from security.stackexchange.com Feb 25 at 11:13
This question came from our site for information security professionals.
migrated from security.stackexchange.com Feb 25 at 11:13
This question came from our site for information security professionals.
This is not a security question but a SNMP configuration question.
– schroeder
Feb 25 at 11:12
add a comment |
This is not a security question but a SNMP configuration question.
– schroeder
Feb 25 at 11:12
This is not a security question but a SNMP configuration question.
– schroeder
Feb 25 at 11:12
This is not a security question but a SNMP configuration question.
– schroeder
Feb 25 at 11:12
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1409219%2fproxy-snmp-v3-requests-to-snmp-v2c-configured-servers%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1409219%2fproxy-snmp-v3-requests-to-snmp-v2c-configured-servers%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
This is not a security question but a SNMP configuration question.
– schroeder
Feb 25 at 11:12