Transport Layer Security Transport Model for the Simple Network Management Protocol
RFC 5953, “Transport Layer Security Transport Model for the Simple Network Management Protocol”, is a Proposed Standard document published in August 2010 by W. Hardaker. It has since been updated by RFC 8996. It has been obsoleted by RFC 6353 — refer to the newer document for the authoritative version. The canonical text is published by the RFC Editor.
Abstract
This document describes a Transport Model for the Simple Network Management Protocol (SNMP), that uses either the Transport Layer Security protocol or the Datagram Transport Layer Security (DTLS) protocol. The TLS and DTLS protocols provide authentication and privacy services for SNMP applications. This document describes how the TLS Transport Model (TLSTM) implements the needed features of a SNMP Transport Subsystem to make this protection possible in an interoperable way.
This Transport Model is designed to meet the security and operational needs of network administrators. It supports the sending of SNMP messages over TLS/TCP and DTLS/UDP. The TLS mode can make use of TCP's improved support for larger packet sizes and the DTLS mode provides potentially superior operation in environments where a connectionless (e.g., UDP) transport is preferred. Both TLS and DTLS integrate well into existing public keying infrastructures.
This document also defines a portion of the Management Information Base (MIB) for use with network management protocols. In particular, it defines objects for managing the TLS Transport Model for SNMP. [STANDARDS-TRACK]
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 5953 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 5952 A Recommendation for IPv6 Address Text Representation
- RFC 5954 Essential Correction for IPv6 ABNF and URI Comparison in RFC 3261
- RFC 5951 Network Management Requirements for MPLS-based Transport Networks
- RFC 5955 The application/timestamped-data Media Type
- RFC 5950 Network Management Framework for MPLS-based Transport Networks
- RFC 5956 Forward Error Correction Grouping Semantics in the Session Description Protocol
- RFC 5949 Fast Handovers for Proxy Mobile IPv6
- RFC 5957 Display-Based Address Sorting for the IMAP4 SORT Extension