基于目录服务的企业网SNMP管理数据安全模型

当Manager跨越Internet对Agent实施SNMP管理时，企业网中的SNMP管理数据就面临着来自外部网络的安全性威胁。虽然IETF在SNMPv3规范中提出了某些安全性解决方案，但这些方案并不适用于现有的、异构版本SNMP设备共存的网络环境。本文基于目录服务和LDAP技术设计并实现了一个SNMP管理数据安全模型。该模型能够为跨Internet的企业网中各种版本的SNMP设备提供身份验证及访问控制等安全功能。

A Directory-Based Security Model of SNMP Management Data in Enterprise Networks

When the manager tries to manage SNMP devices across Internet, the management data in enterprise networks should face to the security threats coming from outer network. Though the IETF has proposed some security schemes in SNMPv3 specifications, these schemes can not work under the circumstances of heterogeneous SNMP version devices coexisting. The paper proposes and implements a SNMP security model for the management data using directory service and LDAP technologies. This model can provide security functions such as authentication and access control for different SNMP version devices in enterprise networks while spanning over Internet.