Análisis del protocolo SNMPv3 para el desarrollo de un prototipo de monitoreo de red segura.

Abstract

The analysis of the Simple Network Management System (SNMPv3) protocol allowed the development of a secure network monitoring prototype in terms of authentication, privacy and access control, in order to guarantee the safe transit of the data Of management, the prototype was implemented in the CISCO Academy of the Higher Polytechnic School of Chimborazo. The method used during the research process was the Experimental, allowed to establish the security differences offered by each version of the Simple Network Administration and Management protocol. The experimental method consisted of two network schemas, in the first network scheme was configured with versions one and two of the protocol in mention (SNMPv1 / v2), and the second scheme was configured the last version of the protocol, for the construction of The simulation scenarios used the following materials: two 2960 Series SwitchsCatalyst, a 2811 router, a laptop computer that processed the management information collected from the agents installed on the devices being monitored, and a desktop machine that was spy Network. With SNMPv3 it was possible to have 100% of the encryption of the management information during the traffic of the same, as opposed to 0% offered by SNMPv1 / v2, it also guarantees that the management information during its journey through the network does not suffer This modification is due to the protocol's ability to authenticate the message issuer, it also ensures that the monitored devices are only accessed by authorized users, this is because the protocol allows to configure unique users in the devices with their rights of Accesses. So we conclude that the security offered by SNMPv3 in terms of authentication, privacy and access control is far above the insipid security offered by previous versions of the protocol.