SNMP defined
SNMP (Simple Network Management Protocol) is a standard protocol for managing network devices in TCP/IP networks. It defines communication between a management system (Manager) and managed devices (Agent), enabling network administrators to remotely collect device status, performance metrics, and receive abnormal event notifications.
Core SNMP components
The SNMP architecture consists of the following core components:
- Manager: a server running NMS software that actively polls Agents and handles Traps
- Agent: a process running on the managed device that maintains its local MIB and responds to Manager queries
- MIB (Management Information Base): defines the monitorable objects (a set of OIDs) on the device
- OID (Object Identifier): a numeric identifier for each monitorable object in the MIB — e.g. .1.3.6.1.2.1.1.3.0 represents system uptime
- Community String: the plaintext "password" in SNMP v1/v2c (weak security)
- Trap: an asynchronous event notification the Agent pushes to the Manager (e.g. link down, temperature threshold breach)
The evolution of SNMP security
SNMP has gone through three generations of security model:
- SNMPv1: plaintext community string, no encryption, no authentication — only for trusted intranets
- SNMPv2c: adds GetBulk and Inform, but still uses plaintext community — no real security improvement
- SNMPv3: introduces USM (User-based Security Model) with authentication (MD5/SHA) and encryption (DES/AES) — the minimum security standard for enterprise deployment
Key Point
CloudSino DCOS supports SNMP v1/v2c/v3 and can collect MIB data from switches, routers, PDUs, temperature/humidity sensors, automatically linking it to the hardware asset inventory.