[TriLUG] SNMP info?

[Benjamin Reed]

M. Mueller (bhu5nji) [bhu5nji at yahoo.com] wrote:
> Anybody running SNMP?  Is it a big security hole?  If so, can it be closed?

SNMPv1 and SNMPv2 are all horribly insecure.  You should never run them anywhere
other than behind a good firewall.  SNMPv3 includes encryption support; whether
it is any good is a matter yet to be decided.  =)

Unfortunately, SNMPv3 support in devices (and software, for that matter) is
very low at this point.  net-snmp is one of the few open-source tools with good
SNMPv3 support.

Oh, and in that list of SNMP apps, I didn't see OpenNMS...
http://www.opennms.org/ -- we do SNMP performance graphing using RRDtool among
other things. (local boys make it big ;)

-- 
Ben Reed a.k.a. Ranger Rick (ranger at befunk.com)
http://defiance.dyndns.org/ / http://radio.scenespot.org/
Frankenstein was the creator -- not the monster.  It's a common
misconception, held by all truly stupid people. -- Kryten