On Wed, 24 Feb 2021 at 01:59, Simon Chamlian <simon.chaml...@mpbc.ca> wrote:

> When these flags (--with-security-modules and --with-transports) are not
> specified, what does snmpv3 uses by default?
>

The default set of security modules is defined in
configure.d/config_modules_security_modules and is just usm.
USM is the standard User Security Module we all know and love that uses a
username given in the request (plus optional authentication) to authorise
access to the agent.

The default set of transports are (depending on the operating system)
TCPIPv6 UDPIPv6 TCP UDP Alias Unix and Callback defined in
config_modules_transport

Most distributions will not use the defaults as they will enable or disable
various things. For example, recent Debian versions come with tsm and the
related transports enabled.

You need secure transports for tsm to work as there is no authentication
information in the SNMP packet but is found in the transport (e.g. UDP by
itself has no user or password). Protocols such as DTLS have the concept of
user (called a principal).

 - Craig
_______________________________________________
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to