rfc2271.An Architecture for Describing SNMP Manage

NetworkWorkingGroupD.HarringtonRequestforComments:2271CabletronSystems,Inc.Obsoletes:2261R.PresuhnCategory:StandardsTrackBMCSoftware,Inc.B.WijnenIBMT.J.WatsonResearchJanuary1998AnArchitectureforDescribingSNMPManagementFrameworksStatusofthisMemoThisdocumentspecifiesanInternetstandardstrackprotocolfortheInternetcommunity,andrequestsdiscussionandsuggestionsforimprovements.PleaserefertothecurrenteditionoftheInternetOfficialProtocolStandards(STD1)forthestandardizationstateandstatusofthisprotocol.Distributionofthismemoisunlimited.CopyrightNoticeCopyright(C)TheInternetSociety(1998).AllRightsReserved.IANANoteDuetoaclericalerrorintheassignmentofthesnmpModulesinthismemo,thisRFCprovidesthecorrectednumberassignmentforthisprotocol.ThismemoobsoletesRFC2261.AbstractThisdocumentdescribesanarchitecturefordescribingSNMPManagementFrameworks.ThearchitectureisdesignedtobemodulartoallowtheevolutionoftheSNMPprotocolstandardsovertime.ThemajorportionsofthearchitectureareanSNMPenginecontainingaMessageProcessingSubsystem,aSecuritySubsystemandanAccessControlSubsystem,andpossiblymultipleSNMPapplicationswhichprovidespecificfunctionalprocessingofmanagementdata.TableofContents1.Introduction................................................31.1.Overview..................................................31.2.SNMP......................................................41.3.GoalsofthisArchitecture................................51.4.SecurityRequirementsofthisArchitecture................61.5.DesignDecisions..........................................72.DocumentationOverview......................................8Harrington,et.al.StandardsTrack[Page1]RFC2271SNMPv3ArchitectureJanuary19982.1.DocumentRoadmap..........................................102.2.ApplicabilityStatement...................................102.3.CoexistenceandTransition................................102.4.TransportMappings........................................112.5.MessageProcessing........................................112.6.Security..................................................112.7.AccessControl............................................112.8.ProtocolOperations.......................................122.9.Applications..............................................122.10.StructureofManagementInformation......................122.11.TextualConventions......................................132.12.ConformanceStatements...................................132.13.ManagementInformationBaseModules......................132.13.1.SNMPInstrumentationMIBs..............................132.14.SNMPFrameworkDocuments.................................133.ElementsoftheArchitecture................................143.1.TheNamingofEntities....................................143.1.1.SNMPengine.............................................153.1.1.1.snmpEngineID..........................................163.1.1.2.Dispatcher............................................163.1.1.3.MessageProcessingSubsystem..........................163.1.1.3.1.MessageProcessingModel............................173.1.1.4.SecuritySubsystem....................................173.1.1.4.1.SecurityModel......................................173.1.1.4.2.SecurityProtocol...................................183.1.2.AccessControlSubsystem................................183.1.2.1.AccessControlModel..................................183.1.3.Applications............................................183.1.3.1.SNMPManager..........................................193.1.3.2.SNMPAgent............................................203.2.TheNamingofIdentities..................................213.2.1.Principal...............................................213.2.2.securityName............................................213.2.3.Model-dependentsecurityID.............................223.3.TheNamingofManagementInformation......................223.3.1.AnSNMPContext.........................................233.3.2.contextEngineID.........................................243.3.3.contextName.............................................243.3.4.scopedPDU...............................................253.4.OtherConstructs..........................................253.4.1.maxSizeResponseScopedPDU................................253.4.2.LocalConfigurationDatastore...........................253.4.3.securityLevel...........................................254.AbstractServiceInterfaces.................................264.1.DispatcherPrimitives.....................................264.1.1.GenerateOutgoingRequestorNotification...............264.1.2.ProcessIncomingRequestorNotificationPDU............264.1.3.GenerateOutgoingResponse..............................27Harrington,et.al.StandardsTrack[Page2]RFC2271SNMPv3ArchitectureJanuary19984.1.4.ProcessIncomingResponsePDU...........................274.1.5.RegisteringResponsibilityforHandlingSNMPPDUs.......284.2.MessageProcessingSubsystemPrimitives...................284.2.1.PrepareOutgoingSNMPRequestorNotificationMessage...284.2.2.Preparea