Latest revision as of 14:03, 28 December 2006

What's the difference between SNMPv1, SNMPv2 and SNMPv3?

What's the difference between SNMPv2 and SNMPv2c?

A full description is probably beyond the scope of this FAQ. Very briefly, the original protocol and admin framework was described in RFCs 1155-1157, and is now known as SNMPv1.

Practical experience showed up various problems and deficiencies with this, and a number of revised frameworks were developed to try and address these problems. Unfortunately, it proved difficult to achieve any sort of agreement - particularly over the details of the administrative framework to use.

There was less disagreement over the proposed changes to the protocol operations. These included:

• increasing the range of errors that could be reported
• introducing "exception values"
  so a single missing value didn't affect the other varbinds in the same request)
• a new GETBULK operation
  (a supercharged GETNEXT)
• new notification PDUs
  (closer in structure to the other request PDUs)

Strictly speaking, it's this revised protocol (originally defined in RFC 1905, and most recently in RFC 3416) that is "SNMPv2".

The only framework based on this protocol that saw a significant level of use was "Community-based SNMPv2" or "SNMPv2c" (defined in RFC 1901). This retained the same administrative framework as SNMPv1 (with all of the accompanying limitations), but using the new protocol operations.

More recently, a new administrative framework has been developed, building on the various competing SNMPv2 proposals, and using the same SNMPv2 protocol operations. This is SNMPv3, which is defined in RFCs 3411-3418. It addresses some of the deficiencies of the community-based versions, including significant improvements to the security of SNMP requests (like it finally has some!). SNMPv3 is now a full IETF standard protocol.

Strictly speaking, SNMPv3 just defines a fairly abstract framework, based around the idea of "Security Models" and "Access Control Models". It's this combination of SNMPv3 plus accompanying models that actually provides a working SNMP system. However, the only models in common use are the "User-based Security Model" (RFC 3414) and the "View-based Access Control Model" (RFC 3415). So "SNMPv3" is frequently used to mean the combination of the basic SNMPv3 framework with these two particular models. This is also sometimes described as "SNMPv3/USM".

So in brief:

• SNMPv2c updated the protocol operations but left the administrative framework unchanged.
• SNMPv3 updated the administrative framework but left the protocol operations unchanged.

   FAQ:General
   

1. What is it?
2. Where can I get it?
3. What documentation is available?
4. Are there binaries available?
5. What's the difference between UCD-SNMP and Net-SNMP?
6. What operating systems does it run on?
7. What happens if mine isn't listed?
8. Does it run on Windows?
9. How do I find out about new releases?
10. How can I find out what other people are doing?
11. How do I submit a patch or bug report?
12. Can I reuse the code in my commercial application?
13. What's the difference between SNMPv1, SNMPv2 and SNMPv3?
    What's the difference between SNMPv2 and SNMPv2c?
14. Which versions of SNMP are supported in this package?
15. Can I use SNMPv1 requests with an SNMPv2 MIB (or vice versa)?
16. How can I monitor my system with SNMP?
17. Where can I find more information about network management?
18. What ports does SNMP use?
19. Is Net-SNMP thread safe?