1.11.1 Ensure 'snmp-server group' is set to 'v3 priv'

Information

Sets the SNMP v3 group with authentication and privacy

Rationale:

SNMP Version 3 provides security enhancements that are not available in SNMP Version 1 or SNMP Version 2c. SNMP Versions 1 and 2c transmit data between the SNMP server and SNMP agent in clear text. SNMP Version 3 adds authentication and privacy options to secure protocol operations.

For configuration purposes, the authentication and privacy options are grouped together into security models. Security models apply to users and groups, and are divided into the following three types:
*NoAuthPriv--No Authentication and No Privacy, which means that no security is applied to messages.
*AuthNoPriv--Authentication but No Privacy, which means that messages are authenticated.
*AuthPriv--Authentication and Privacy, which means that messages are authenticated and encrypted.

It is recommended that packets should be authenticated and encrypted

Solution

Run the following to configure the SNMP v3 group.

HOSTNAME(CONFIG)# SNMP-SERVER GROUP _<group_name> _ V3 PRIV

See Also

https://workbench.cisecurity.org/files/1903

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-2, CSCv7|11.1

Plugin: Cisco

Control ID: ff7a6a6d9df4d42acf319f9c7502256108fae7f64fc4852a2fd8d29a844f9fa7