RE: [Isms] #8: Do we need a mapping between the SSH key and SNMPengineID?

["Kaushik Narayan \(kaushik\)" <kaushik at cisco.com>]

I think we should consider using/mapping the identity of the SNMP engine
to the SNMP engine ID, this will be particularly useful when you have
multiple SNMP engines on the same host (single SSH server). I am not
quite sure about the spoofing issue since that should be taken care by
server (agent) authentication by the SSH transport protocol.


-----Original Message-----
From: isms-bounces at lists.ietf.org [mailto:isms-bounces at lists.ietf.org]
On Behalf Of David B Harrington
Sent: Thursday, October 13, 2005 2:51 PM
To: isms at ietf.org
Subject: [Isms] #8: Do we need a mapping between the SSH key and
SNMPengineID?

#8: Do we need a mapping between the SSH key (or other SSH engine
identifier) and SNMP engineID? What happens if an agent "spoofs"
another engineID, and an NMS perfoms a SET of sensitive parameters to
the agent? 





David Harrington
dbharrington at comcast.net




_______________________________________________
Isms mailing list
Isms at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/isms

_______________________________________________
Isms mailing list
Isms at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/isms