snmp security... private or authorized?

RouterOS General
1

Hi,

It would be helpful if someone knows the difference between using one of these two kind of snmp security… as it doesn’t appear in the 3.0 on line manual yet, thanks

2

where did you find it? =)

3

In RouterOS v3.7:

[admin@MikroTik] /snmp community> set public security=[ TAB ]
authorized none private

anyone knows the difference between private and authorized?¿?

4

oh… try google for SNMP v3 security model

5

hi, any chance MT could update the manual with info on the snmp “security” setting (none, authorized, private):

https://wiki.mikrotik.com/wiki/Manual:SNMP

read-access (yes | no; Default: yes)	                     Whether read access is enabled for this community
security (authorized | none | private; Default: none)	 
write-access (yes | no; Default: no) 	                     Whether write access is enabled for this community. Read more >>

I have googled this as suggested, and not finding anything related to snmp v3 and Authorized, none or private in the context of v3 “security”

tks

6

hi, any chance MT could update the manual with info on the snmp “security” setting (none, authorized, private):

https://wiki.mikrotik.com/wiki/Manual:SNMP

+1 Yes, please update documentation. (It’s not really a wiki if it can’t be fixed.)
I want to know what this feature does and what security implications it has.

7

For SNMPv3:
none - no hashing nor encryption
authorized - hashing
private - hashing and encryption

So for none, you dont need hash or encryption password, just username.
SNMPv3 with “none” security behaves much like SNMPv2c.

Authorized will use SHA1 or MD5 (depending on your configuration) hash as the authentication mechanism.
(together with username)

Private will additionaly encrypt the payload - so all SNMP data will be encrypted.
This will of course have a performance hit on the device CPU.

BTW, this is SNMP standards-based stuff, not MikroTik-centric.
So if you research SNMP, you would find all of this.