Give priority to SNMPv3 over earlier SNMP versions

[Irwin_McC]

Where NNMi is managing a mix of SNMPv3 and SNMPv2/v1 devices, for example during migration to SNMPv3, then NNMi needs to allow multiple versions for Communication. If the Communication Configuration has both Community Strings and SNMPv3 credentials in a Region or Default Settings and the Minimum SNMP Security Level set to "Community", all current NNMi versions will try to use SNMPv2 first, then SNMPv1 and only if those fail will it try SNMPv3. This can cause slow rediscovery times, especially with multiple Community Strings, and will cause it to use the less secure version if the device is configured to allow both v2 and v3. It is possible to work around these limitations by defining separate Regions for v2 and v3 but that requires additional administrative effort.

It would be a better solution if NNMi gave precedence to SNMPv3, then SNMPv2 and finally SNMPv1. This would ensure it uses the most secure version that a device supports without the need for extra administration, and allow much faster rediscovery for SNMPv3 devices in a network were some SNMPv2 devices are still present.

[TapanS]

Changed the status to Waiting for Votes.

[Ronnie]

GM would like this fast tracked also.

[TapanS]

Moved to Waiting for Votes

[AkashDeep]

Thanks to community for showing the interest. We are moving it to "Under Consideration" for technical fecibility and planning. We shall consider this idea for future release.

[Radmilo]

CN would like ot fast track it. It is becoming increasingly important

Also, in mena time, will be nice to have OFFICIAL recommendation how to configure NNMi the best possible way to accomodate mix of SNMP v1, v2 and v3 devices to avoid 5-10 minutes SNMPv3 (re)discovery

Thanks

Radmilo

[tka]

In  our environment SNMPv2c and SNMPv3 is used. The trend is towards secured management communication and therefore SNMPv3.

Yes we would like to have this feature.

I am working for a tier one provider. Short rediscovery times are a must, for NNMi monitoring thousands of nodes with a huge amount of interfaces in order to provide accurate and up to date management incident. If rediscovery is slow, it is likely that the topology is outdated affecting the monitoring quality.