SNMP or Simple Network Management Protocol is a protocol for internet standards that helps in the collection and organization of the information related to the managed devices present on the IP networks. It is supported in devices that have cable modems, routers, servers, switches, workstations, etc.
SNMP operates in application layers of Protocol Suite of the internet and the messages are transported via UDP or User Datagram Protocol. SNMP has three versions, named as SNMP V1, SNMP V2 and SNMP V3. The first two versions have only small differences whereas there are various differences between version 2 and version 3 that are often misunderstood.
SNMPv2 vs SNMPv3
The main difference between SNMPV2 and SNMPV3 is that of the features some of which are lacking in the older versions. SNMPV2 is the second version of SNMP and is currently the most used version but the major disadvantage of this version was that there was no security provided to a person on the network. SNMPV3 is the newest version of SNMP and to the primary focus of this version was to enhance security for the person on the network.
Comparison Table Between SNMPV2 and SNMPV3
| Parameter of Comparison | SNMPV2 | SNMPV3 |
| What it stands for? | SNMPV2 is an abbreviated form of Simple Network Management Protocol version 2. | SNMPV3 is an abbreviated form of Simple Network Management Protocol version 3. |
| What it refers to? | Simple Network Management Protocol version 2 is the standard protocol for the internet to collect and organize information regarding the managed devices present on the IP networks, it was an improved version of the earlier launched versions with some improvements. | Simple Network Management Protocol version 3 is also an internet standard protocol for the same purpose, however, it has improved cryptographic security, remote configuration enhancements, textual conventions, etc. |
| Version and its security | SNMPV2 is the second and currently existing version of SNMP, however, this version is similar to the earlier version in terms of security where no security is provided to a person on the network. | SNMPV3 is the third and newest version of SNMP and the primary focus of this version is to improve security features. |
| Protocol and protocol operations | SNMPV2 comes with a simple request and response protocol. The protocol operations used by SNMPV2 are as Set Changes: Trap, Similarity: Get, GetNext message format. New protocol operations added are named as GetBulk and Inform. | SNMPV3 uses the protocol operations of SNMPV2 and the PDU format message. |
| Message format | SNMPV2 has seven messages in it, which are GetRequest, GetNext, SetRequest, Trap, Response, InformRequest, GetBulkRequest. | SNMPV3 uses similar message formats to other versions of SNMP along with proposed new features. |
What is SNMPV2?
SNMP version 2 is defined in RFC or request for comments 1441 to RFC or request for comment1452. It has various improvements over earlier version of SNMP. The performance of the version was improved and was added with security and confidentiality features.
SNMP version 2 has seven messages in it, namely, GetRequest, GetNext, Trap, SetRequest, Response, InformRequest, GetBulkRequest. GetBulkRequest message was added to get large data in a single request.
User reports of SNMPV2 suggested that they found this version complex due to the security system that are party based. SNMP version 2 exists in three types named SNMPV2c, SNMPV2u and SNMPV2. However, the SNMP V2c is regarded as de facto SNMP V2 though it is a Draft Standard since people found it easier than SNMPV2.
What is SNMPV3?
SNMP version 3 is the latest version of SNMP. SNMPV3 or SNMP version 3 is a similar protocol of SNMP version 2, the only change was regarding the security and encryption. The main focus of this version was the security enhancements since earlier versions can not tackle the security concerns properly.
SNMP version 3 was different due to the addition of new features of texts, concepts and new terminologies. SNMP version 3 used the same protocol of SNMP version 2.
Main Differences Between SNMPV2 and SNMPV3
- SNMP stands for Simple Network Management Protocol, V in V2 and V3 refers to version 2 and 3 respectively.
- SNMPV2 is the second version of SNMP and SNMPV3 is the third version.
- SNMPV2 and SNMPV3 differ in terms of security and remote configuration model.
- SNMPV2 uses complex party-based security systems, on the other hand, SNMPV3 uses an enhanced cryptographic security system.
- Standards of SNMPV2 are RFC-1441, 1452, RFC-1909, 1910, RFC- 1901 to 1908, on the other hand, standards of SNMPV3 are RFC- 1902 to 1908, 2271 to 2275, where RFC stands for request for comments.
- SNMPV2 provides no security to the person on the network, on the other hand, the primary focus of the SNMPV3 is a security enhancement.
- SNMPV2 uses a simple request and response protocol.
- The protocol operations used by SNMPV2 are Set Changes: Trap, Similarity: Get, GetNext message format. New protocol operations added are GetBulk and Inform, on the other hand, SNMPV3 also uses the same protocols and its PDU message format.
- SNMPV2 and SNMPV3 use seven message formats but version 3 uses them with new proposed features.
- Plaintext community strings are present in SNMPV2 while they are absent in SNMPV3.
- Encrypted traffic and Detection of malformed packets are done in both SNMPV2 and SNMPV3.
- Both the versions are not susceptible to injection attacks, replay attacks, sniffing of session keys.
- SNMPV2 is susceptible to buffer overflow attacks and brute force attacks while SNMPV3 is not susceptible to these attacks.
- Default or known passwords are present in version 2 while they are lacking in version 3.
- SNMP version 2 defines a general framework with which MIB is defined and structured, on the other hand, SNMP version 3 can configure agents to several numbers of levels of access to MIB.
Conclusion
SNMP V2 and SNMP V3 both are the improved versions of the SNMP but SNMP V3 is more secure as compared to version 2, also it has improved performance. But SNMPV2 is a more widely used protocol version but some people now consider version 2 as obsolete. Version 2 was introduced with inform features that acknowledged the receipt of messages by the manager while version 3 authenticates each message and ensures privacy.
References
- https://ieeexplore.ieee.org/abstract/document/663326/
- https://wxcafe.net/pub/IPJ/ipj01-3.pdf