HOW-TO Securely Use SNMP on a BGP/MPLS VPN Network

Author: Guillaume Tamboise Published June 21, 2011 from SANS

Let us consider the case of an IP/MPLS Service Provider offering extra-net connectivity, along with access to services. The Service Provider manages its MPLS network and in some cases the Customer Edge (CE) routers. The network operations are made possible by its Operations and Business Support System (OSS/BSS) devices, hosted behind some of its own CE routers. Some value may be added by on-demand services hosted behind CE routers on managed servers. All these components can be managed using SNMP; we will see how to make the components interact safely.

Tags:

Read the complete paper at SANS