JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Solaris System Management Agent Administration Guide
search filter icon
search icon

Document Information

Preface

1.  Introduction to the System Management Agent

2.  Configuring the System Management Agent

3.  Working with the System Management Agent

4.  Managing Security

Security Overview

Using USM for Authentication and Message Privacy

Authentication Protocol Algorithms

Message Privacy

Public Keys

Where USM Security Information Is Contained

Using VACM for Access Control

Where VACM Security Information Is Contained

Understanding VACM Tables

Context Table

Security to Group Table

View Tree Family Table

Access Table

Troubleshooting Problems With VACM Tables

Creating and Managing Users

To Create a New SNMPv3 User

To Create a New User Using System Prompts

To Create Additional SNMPv3 Users With Security

Managing SNMPv1 and SNMPv2c Users With SNMPv3 Security

Proxy Statements and Security

Creating and Managing Groups

5.  Migrating From Other Agents

A.  Tools and Man Pages

Glossary

Index

Security Overview

The System Management Agent supports SNMPv1, SNMPv2c and SNMPv3. The SNMPv1 and SNMPv2c authentication service is based on community strings defined on the management station. The SNMPv3 authentication service is based on users. Each request must contain either a community name or a user name depending upon the protocol being used.

The SNMPv3 authentication process implements the User-based Security Model (USM) to obtain a security name and security level from a user name. Similarly, both SNMPv1 and SNMPv2c determine the security level from the community string. The security name and security level are then used together with a context string, a group name and a view name to perform access control. Access control is done through the View-based Access Control Model, (VACM). This access control model is used after the authentication process. So, while USM is designed and used for authentication, VACM is designed and used for authorization.

For information about the supported versions of SNMP within the System Management Agent, see SNMP Versions.