net-snmp-隐私协议：哪些可用？使用哪个？

Question

net-snmp 5.8。支持'-x AES 256'如果我的snmp服务器支持，我怎么知道？

为了尝试使用我得到的

> /opt/netsnmp/bin/snmpwalk  -v3 -l authPriv -u frank -a MD5 -A frank123 -x AES256 -X frank123  127.0.0.1
Timeout: No Response from 127.0.0.1

在使用-x AES128时起作用。

我正在使用

> /opt/netsnmp/bin/snmpwalk --version
NET-SNMP version: 5.8

并使用AES256支持进行编译。它在mib文件级别上有规定吗？如何选择a）给定用户的隐私协议或b）snmp查询？看着tcpdump，我找不到隐私协议的任何selector。SNMP协议中是否有一个？

Answer 1

USM MIB https://tools.ietf.org/html/rfc3414列出了用户及其用户SNMP代理的身份验证/隐私。例如

% snmpwalk -v 1 -c public snmp.live.gambitcommunications.com snmpUsmMib
SNMP-USER-BASED-SM-MIB::usmStatsUnsupportedSecLevels.0 = Counter32: 0
SNMP-USER-BASED-SM-MIB::usmStatsNotInTimeWindows.0 = Counter32: 0
SNMP-USER-BASED-SM-MIB::usmStatsUnknownUserNames.0 = Counter32: 0
SNMP-USER-BASED-SM-MIB::usmStatsUnknownEngineIDs.0 = Counter32: 0
SNMP-USER-BASED-SM-MIB::usmStatsWrongDigests.0 = Counter32: 0
SNMP-USER-BASED-SM-MIB::usmStatsDecryptionErrors.0 = Counter32: 0
SNMP-USER-BASED-SM-MIB::usmUserSpinLock.0 = INTEGER: 721764
SNMP-USER-BASED-SM-MIB::usmUserSecurityName."...I.MIMIC"."user1" = STRING: user1
SNMP-USER-BASED-SM-MIB::usmUserSecurityName."...I.MIMIC"."user2" = STRING: user2
...
SNMP-USER-BASED-SM-MIB::usmUserAuthProtocol."...I.MIMIC"."user1" = OID: SNMP-USER-BASED-SM-MIB::usmNoAuthProtocol
...
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol."...I.MIMIC"."user1" = OID: SNMP-USER-BASED-SM-MIB::usmNoPrivProtocol
...