rfc3411.An Architecture for Describing Simple Netw

NetworkWorkingGroupD.HarringtonRequestforComments:3411EnterasysNetworksSTD:62R.PresuhnObsoletes:2571BMCSoftware,Inc.Category:StandardsTrackB.WijnenLucentTechnologiesDecember2002AnArchitectureforDescribingSimpleNetworkManagementProtocol(SNMP)ManagementFrameworksStatusofthisMemoThisdocumentspecifiesanInternetstandardstrackprotocolfortheInternetcommunity,andrequestsdiscussionandsuggestionsforimprovements.PleaserefertothecurrenteditionoftheInternetOfficialProtocolStandards(STD1)forthestandardizationstateandstatusofthisprotocol.Distributionofthismemoisunlimited.CopyrightNoticeCopyright(C)TheInternetSociety(2002).AllRightsReserved.AbstractThisdocumentdescribesanarchitecturefordescribingSimpleNetworkManagementProtocol(SNMP)ManagementFrameworks.ThearchitectureisdesignedtobemodulartoallowtheevolutionoftheSNMPprotocolstandardsovertime.ThemajorportionsofthearchitectureareanSNMPenginecontainingaMessageProcessingSubsystem,aSecuritySubsystemandanAccessControlSubsystem,andpossiblymultipleSNMPapplicationswhichprovidespecificfunctionalprocessingofmanagementdata.ThisdocumentobsoletesRFC2571.TableofContents1.Introduction................................................41.1.Overview..................................................41.2.SNMP......................................................51.3.GoalsofthisArchitecture................................61.4.SecurityRequirementsofthisArchitecture................61.5.DesignDecisions..........................................82.DocumentationOverview......................................102.1.DocumentRoadmap..........................................112.2.ApplicabilityStatement...................................11Harrington,etal.StandardsTrack[Page1]RFC3411ArchitectureforSNMPManagementFrameworksDecember20022.3.CoexistenceandTransition................................112.4.TransportMappings........................................122.5.MessageProcessing........................................122.6.Security..................................................122.7.AccessControl............................................132.8.ProtocolOperations.......................................132.9.Applications..............................................142.10.StructureofManagementInformation......................152.11.TextualConventions......................................152.12.ConformanceStatements...................................152.13.ManagementInformationBaseModules......................152.13.1.SNMPInstrumentationMIBs..............................152.14.SNMPFrameworkDocuments.................................153.ElementsoftheArchitecture................................163.1.TheNamingofEntities....................................173.1.1.SNMPengine.............................................183.1.1.1.snmpEngineID..........................................183.1.1.2.Dispatcher............................................183.1.1.3.MessageProcessingSubsystem..........................193.1.1.3.1.MessageProcessingModel............................193.1.1.4.SecuritySubsystem....................................203.1.1.4.1.SecurityModel......................................203.1.1.4.2.SecurityProtocol...................................203.1.2.AccessControlSubsystem................................213.1.2.1.AccessControlModel..................................213.1.3.Applications............................................213.1.3.1.SNMPManager..........................................223.1.3.2.SNMPAgent............................................233.2.TheNamingofIdentities..................................253.2.1.Principal...............................................253.2.2.securityName............................................253.2.3.Model-dependentsecurityID.............................263.3.TheNamingofManagementInformation......................263.3.1.AnSNMPContext.........................................283.3.2.contextEngineID.........................................283.3.3.contextName.............................................293.3.4.scopedPDU...............................................293.4.OtherConstructs..........................................293.4.1.maxSizeResponseScopedPDU................................293.4.2.LocalConfigurationDatastore...........................293.4.3.securityLevel...........................................294.AbstractServiceInterfaces.................................304.1.DispatcherPrimitives.....................................304.1.1.GenerateOutgoingRequestorNotification...............314.1.2.ProcessIncomingRequestorNotificationPDU............314.1.3.GenerateOutgoingResponse..............................324.1.4.ProcessIncomingResponsePDU...........................324.1.5.RegisteringResponsibilityforHandlingSNMPPDUs.......32Harrington,etal.StandardsTrack[Page2]RFC3411ArchitectureforSNMPManagementFrameworksDecember20024.2.MessageProcessingSubsystemPrimitives...................334.2.1.PrepareOutgoingSNMPRequestorNotificationMessage...334.2.2.PrepareanOutgoingSNMPRe