RE: SNMP question
Harrington, David <dbh <at> enterasys.com>
2004-01-11 23:33:32 GMT
I don't quite agree that the manager is a PDP and the agent a PEP.
If the application makes the decision about which policies should be
distributed, then the application is a PDP. If a device enforces the
policies, then the device is a PEP.
SNMP can be used to distribute policies from the PDP (manager) to an
SNMP agent (on the PEP), and the MIB is a schema to specify the policy.
You also need to be careful thinking that all SNMP entities are either a
manager or an agent. IN SNMPv1 that was true; in SNMPv3, that
distinction is much less clear. Each SNMP entity can provide "agent"
types of functionality and can provide "manager" types of fucntionality,
in a variety of combinations.
> -----Original Message-----
> From: Wijnen, Bert (Bert) [mailto:bwijnen <at> lucent.com]
> Sent: Sunday, January 11, 2004 5:57 PM
> To: chum <at> noos.fr; ops-nm <at> ops.ietf.org
> Subject: RE: SNMP question
> If you look at the DIFFSERV MIB (RFC3289), and if you
> take into account that that MIB representes the management
> objects for Diffservv at a managed device (or SNMP agent
> if you like) then indeed you interpretation to consider
> an SNMP manager as PDP and an SNMP agent as PDP (in the