All MIBs › SNMP-USM-AES-MIB
Organization: IETF
Last Updated: 2004-06-14
Category: SNMP Framework
Description: Extends the User-based Security Model (USM) with AES cipher-based privacy protocol support for encrypting SNMPv3 messages.
IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring SNMP-USM-AES-MIB with a free 30-day trial of IPNetwork Monitor.
What Is SNMP-USM-AES-MIB?
SNMP-USM-AES-MIB is a vendor-neutral IETF standard (RFC 3826) that extends SNMPv3's User-based Security Model (USM) by defining the object identities needed to use AES as a privacy (encryption) protocol for SNMP messages, alongside the older DES-based option. It does not expose operational runtime data itself; rather it defines identifier objects that let USM configuration in other MIBs, notably SNMP-USER-BASED-SM-MIB, reference AES as the chosen encryption algorithm for a given user. Because it contains no monitorable performance/hardware objects, its relevance to device monitoring is indirect: it underpins secure SNMP communication used to safely poll all the other hardware/software health data on a device, rather than exposing health data itself. It is explicitly a supplement to RFC 3414 (USM) and is meant to be used together with the standard USM MIB's privacy-protocol configuration objects. It is deployed anywhere SNMPv3 with AES-based message encryption is configured, essentially any modern SNMPv3-managed network device. Engineers implementing or auditing this functionality typically reference the SNMP-USM-AES-MIB RFC/standard documentation for the authoritative specification.
IPNetwork Monitor allows you to monitor SNMP objects defined in SNMP-USM-AES-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- vendor-neutral, standards-based MIB, not tied to a specific manufacturer
- any SNMPv3-managed network device using AES privacy encryption
Monitoring Examples
This module has no sample objects and defines only object identity values used to select AES as an encryption algorithm within USM configuration elsewhere, such as usmUserPrivProtocol in SNMP-USER-BASED-SM-MIB; it is not something an operator polls directly for a monitoring value. Its presence would be inferred rather than measured: if a device's USM configuration references the AES OID defined here, that confirms AES-encrypted SNMPv3 is in use for that user. There is no realistic runtime monitoring scenario for this module standing alone.
Imported Objects
From SNMP-FRAMEWORK-MIB
| snmpPrivProtocols |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-IDENTITY | |
| snmpModules |
OIDs
RFC description
Defines object identities for AES encryption in SNMP User-based Security Model (USM) per RFC 3826.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-managed network device using AES privacy encryption (AES privacy-protocol identity) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.