Commit version 24.12.13800
This commit is contained in:
@ -1,10 +1,10 @@
|
||||
|
||||
-- ==================================================================
|
||||
-- Copyright (C) 2019 by HUAWEI TECHNOLOGIES. All rights reserved.
|
||||
-- Copyright (C) 2023 by HUAWEI TECHNOLOGIES. All rights reserved.
|
||||
-- Description: This mib which contains objects manages the
|
||||
-- SSH server and SSH client configuration.
|
||||
-- Reference:
|
||||
-- Version: V2.26
|
||||
-- Version: V2.46
|
||||
-- ==================================================================
|
||||
-- ==================================================================
|
||||
--
|
||||
@ -22,10 +22,10 @@
|
||||
FROM SNMPv2-SMI
|
||||
RowStatus, DisplayString
|
||||
FROM SNMPv2-TC;
|
||||
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118
|
||||
hwSSH MODULE-IDENTITY
|
||||
LAST-UPDATED "201902280000Z"
|
||||
LAST-UPDATED "202301040000Z"
|
||||
ORGANIZATION "Huawei Technologies Co.,Ltd."
|
||||
CONTACT-INFO
|
||||
"Huawei Industrial Base
|
||||
@ -40,6 +40,70 @@
|
||||
SSH server and SSH client configuration.
|
||||
"
|
||||
-- Revision history
|
||||
REVISION "202301040000Z"
|
||||
DESCRIPTION "V2.46, add enum keyTypeX509V3RSA2048SHA256 for hwSSHSessionKeyType ."
|
||||
|
||||
REVISION "202208110000Z"
|
||||
DESCRIPTION "V2.45, delete sensitive information from seninfo."
|
||||
|
||||
REVISION "202112270000Z"
|
||||
DESCRIPTION "V2.44, modify hwSSHServerTimeOut to 1,300."
|
||||
|
||||
REVISION "202112080000Z"
|
||||
DESCRIPTION "V2.43, modify hwSSHUserAuthType."
|
||||
|
||||
REVISION "202110300000Z"
|
||||
DESCRIPTION "V2.42, modify hwSSHUserAssignKeyType, hwSSHSessionKeyType."
|
||||
|
||||
REVISION "202110130000Z"
|
||||
DESCRIPTION "V2.41, modify hwSSHUserAuthType."
|
||||
|
||||
REVISION "202110110000Z"
|
||||
DESCRIPTION "V2.40, modify hwSSHClientPublicKeyAlg."
|
||||
|
||||
REVISION "202108260000Z"
|
||||
DESCRIPTION "V2.37, modify hwSSHServerTimeOut."
|
||||
|
||||
REVISION "202106240000Z"
|
||||
DESCRIPTION "V2.38, add x509rsa2048sha256, ed25519."
|
||||
|
||||
REVISION "202106200000Z"
|
||||
DESCRIPTION "V2.37, modify hwRSAPublicKeyCode, hwRSALocalHostPublicKeyCode, hwRSALocalServerPublicKeyCode."
|
||||
|
||||
REVISION "202105280000Z"
|
||||
DESCRIPTION "V2.36, modify hwSSHServerCipherAlg, hwSSHClientCipherAlg."
|
||||
|
||||
REVISION "202103310000Z"
|
||||
DESCRIPTION "V2.35, modify hwSSHServerKeyExchangeAlg, hwSSHClientKeyExchangeAlg."
|
||||
|
||||
REVISION "202101180000Z"
|
||||
DESCRIPTION "V2.34, modify hwSSHServerPublicKeyAlg."
|
||||
|
||||
REVISION "202011230000Z"
|
||||
DESCRIPTION "V2.33, add hwSSHServerAlg, hwSSHServerCipherAlg, hwSSHServerHmacAlg,
|
||||
hwSSHServerKeyExchangeAlg, hwSSHServerDhMinLen, hwSSHServerPublicKeyAlg,
|
||||
hwSSHClientAlg, hwSSHClientCipherAlg, hwSSHClientHmacAlg, hwSSHClientKeyExchangeAlg,
|
||||
hwSSHClientPublicKeyAlg .
|
||||
modify hwSSHServerTimeOut."
|
||||
|
||||
REVISION "202007140000Z"
|
||||
DESCRIPTION "V2.32, modify hwSftpServerName ."
|
||||
|
||||
REVISION "202007100000Z"
|
||||
DESCRIPTION "V2.31, modify hwSSHSessionKeyType ."
|
||||
|
||||
REVISION "202006130000Z"
|
||||
DESCRIPTION "V2.30, Add hwSftpClient."
|
||||
|
||||
REVISION "201912040000Z"
|
||||
DESCRIPTION "V2.29, Add alarm."
|
||||
|
||||
REVISION "201905230000Z"
|
||||
DESCRIPTION "V2.28, modify hwSSHUserTable."
|
||||
|
||||
REVISION "201905230000Z"
|
||||
DESCRIPTION "V2.27, Add X509V3RSA, X509V3RSAandPASSWORD key authentication."
|
||||
|
||||
REVISION "201902280000Z"
|
||||
DESCRIPTION "V2.26, the description of hwSSHUserTable, hwSSHServerSessionTable, hwRSAPublicKeyTable, hwSSHServerInfoTable,
|
||||
hwSSHUserAuthType,hwSSHUserServiceType were modified and supplemented."
|
||||
@ -98,7 +162,7 @@
|
||||
8.Add hwSCPIPv6ServerEnable OID:1.3.6.1.4.1.2011.5.25.118.1.26."
|
||||
|
||||
REVISION "201409260000Z"
|
||||
DESCRIPTION "V2.15, defect - DTS2014091709267 (default value in the description is updated)."
|
||||
DESCRIPTION "V2.15, default value in the description is updated."
|
||||
|
||||
|
||||
REVISION "201406300000Z"
|
||||
@ -231,7 +295,7 @@
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.1.4
|
||||
hwSSHServerTimeOut OBJECT-TYPE
|
||||
SYNTAX Integer32 (1..120)
|
||||
SYNTAX Integer32 (1..300)
|
||||
UNITS "second"
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
@ -331,7 +395,6 @@
|
||||
DESCRIPTION
|
||||
"
|
||||
This table is used for querying and setting the information about SSH user.
|
||||
The index of this table is hwSSHUserIndex.
|
||||
"
|
||||
::= { hwSSHServer 11 }
|
||||
|
||||
@ -414,7 +477,7 @@
|
||||
authNULL(1),
|
||||
authPASSWORD(2),
|
||||
authRSA(3),
|
||||
authRSAorPASSWORD(4),
|
||||
authRSAorPASSWORDorED25519(4),
|
||||
authRSAandPASSWORD(5),
|
||||
authDSA(6),
|
||||
authDSAandPASSWORD(7),
|
||||
@ -422,7 +485,11 @@
|
||||
authECC(9),
|
||||
authECCandPASSWORD(10),
|
||||
authSM2(11),
|
||||
authSM2andPASSWORD(12)
|
||||
authSM2andPASSWORD(12),
|
||||
authX509V3RSA(13),
|
||||
authX509V3RSAandPASSWORD(14),
|
||||
authED25519(15),
|
||||
authED25519andPASSWORD(16)
|
||||
}
|
||||
MAX-ACCESS read-create
|
||||
STATUS current
|
||||
@ -434,7 +501,7 @@
|
||||
1. authNULL(1) -No authenticate.
|
||||
2. authPASSWORD(2) -Password authentication.
|
||||
3. authRSA(3) -RSA key authentication.
|
||||
4. authRSAorPASSWORD(4) -Password or RSA key authentication.
|
||||
4. authRSAorPASSWORDorED25519(4) -Password or RSA key or ED25519 key authentication.
|
||||
5. authRSAandPASSWORD(5) -Password and RSA key authentication.
|
||||
6. authDSA(6) -DSA key authentication.
|
||||
7. authDSAandPASSWORD(7) -Password or DSA key authentication.
|
||||
@ -443,6 +510,10 @@
|
||||
10.authECCandPASSWORD(10) -Password and ECC key authentication.
|
||||
11.authSM2(11) -SM2 key authentication.
|
||||
12.authSM2andPASSWORD(12) -Password and SM2 key authentication.
|
||||
13. authX509V3RSA(13) -X509V3RSA key authentication.
|
||||
14. authX509V3RSAandPASSWORD(14) -Password and X509V3RSA key authentication.
|
||||
15. authED25519(15) -ED25519 key authentication.
|
||||
16. authED25519andPASSWORD(16) -Password and ED25519 key authentication.
|
||||
"
|
||||
DEFVAL { authPASSWORD }
|
||||
::= { hwSSHUserEntry 4 }
|
||||
@ -538,7 +609,9 @@
|
||||
keyTypeRSA(1),
|
||||
keyTypeDSA(2),
|
||||
keyTypeECC(3),
|
||||
keyTypeSM2(5)
|
||||
keyTypeSM2(5),
|
||||
keyTypePKI(6),
|
||||
keyTypeED25519(7)
|
||||
}
|
||||
MAX-ACCESS read-create
|
||||
STATUS current
|
||||
@ -550,6 +623,8 @@
|
||||
3. keyTypeDSA(2)-The public key type of SSH user is DSA
|
||||
4. keyTypeECC(3)-The public key type of SSH user is ECC
|
||||
5. keyTypeSM2(5)-The public key type of SSH user is SM2
|
||||
6. keyTypePKI(6)-The public key type of SSH user is PKI.
|
||||
7.keyTypeED25519(7)-The public key type os SSH user is ED25519.
|
||||
"
|
||||
::= { hwSSHUserEntry 9 }
|
||||
|
||||
@ -563,7 +638,6 @@
|
||||
"
|
||||
The object shows current session information of the SSH server which includes username,
|
||||
version information, retry times of online users currently.
|
||||
The index of this table is hwSSHSessionIndex.
|
||||
"
|
||||
::= { hwSSHServer 12 }
|
||||
|
||||
@ -837,7 +911,12 @@
|
||||
keyTypeRSA(1),
|
||||
keyTypeDSA(2),
|
||||
keyTypeECC(3),
|
||||
keyTypeSM2(5)
|
||||
keyTypeSM2(5),
|
||||
keyTypePKI(6),
|
||||
keyTypeRSASHA256(7),
|
||||
keyTypeRSASHA512(8),
|
||||
keyTypeED25519(9),
|
||||
keyTypeX509V3RSA2048SHA256(10)
|
||||
}
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
@ -848,6 +927,11 @@
|
||||
2.keyTypeDSA(2) -The public key type of SSH session is DSA.
|
||||
3.keyTypeECC(3) -The public key type of SSH session is ECC.
|
||||
4.keyTypeSM2(5) -The public key type of SSH session is SM2.
|
||||
5.keyTypePKI(6) -The public key type of SSH session is PKI.
|
||||
6.keyTypeRSASHA256(7) -The public key type of SSH session is RSA_SHA2_256.
|
||||
7.keyTypeRSASHA512(8) -The public key type of SSH session is RSA_SHA2_512.
|
||||
8.keyTypeED25519(9) -The public key type of SSH session is ED25519.
|
||||
9.keyTypeX509V3RSA2048SHA256(10) - The public key type of SSH session is X509V3_RSA2048_SHA25.
|
||||
"
|
||||
::= { hwSSHServerSessionEntry 14 }
|
||||
|
||||
@ -890,7 +974,6 @@
|
||||
DESCRIPTION
|
||||
"
|
||||
A table of configuration about RSA Public Key.
|
||||
The index of this table is hwRSAPublicKeyName.
|
||||
hwRSAPublicKeyName is the name of RSA Public Key.
|
||||
"
|
||||
::= { hwSSHServer 13 }
|
||||
@ -937,12 +1020,12 @@
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.1.13.1.2
|
||||
hwRSAPublicKeyCode OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (1..2048))
|
||||
SYNTAX OCTET STRING (SIZE (1..4096))
|
||||
MAX-ACCESS read-create
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
The object specifies is RSA Public Key Code that in the format of ber, the maximum length of the node is 2048.
|
||||
The object specifies is RSA Public Key Code that in the format of der, the maximum length of the node is 4096.
|
||||
When the RSA public key is created, the index value is the name of the public key, which uses the ASCII code.
|
||||
The public key value must be generated through a tool. Firstly, use the PUTTYGEN.EXE tool to generate the matching
|
||||
public key and private key. Then, use the sshkey.exe tool to convert the generated public key to the required public key value.
|
||||
@ -1268,7 +1351,6 @@
|
||||
"
|
||||
A table of configuration about the relation
|
||||
between the SSH server and the rsa peerkey.
|
||||
The index of this table is hwSSHServerIndex.
|
||||
"
|
||||
::= { hwSSHClient 2 }
|
||||
|
||||
@ -1406,7 +1488,231 @@
|
||||
"The object specifies maximum KeepAlive packet to send to SSH Server before disconnect.
|
||||
The default is 3."
|
||||
::= { hwSSHClient 4 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.1.29
|
||||
hwSSHServerInsecureAlgo OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (1..255))
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The insecure algorithm list."
|
||||
::= { hwSSHServer 29 }
|
||||
|
||||
hwSSHServerAlg OBJECT IDENTIFIER ::= { hwSSHServer 30 }
|
||||
|
||||
hwSSHServerCipherAlg OBJECT-TYPE
|
||||
SYNTAX BITS
|
||||
{
|
||||
des3cbc(0),
|
||||
arcfour128(1),
|
||||
arcfour256(2),
|
||||
blowfishcbc(3),
|
||||
aes128cbc(4),
|
||||
aes192cbc(5),
|
||||
aes256cbc(6),
|
||||
aes128ctr(7),
|
||||
aes192ctr(8),
|
||||
aes256ctr(9),
|
||||
aes128gcm(10),
|
||||
aes256gcm(11),
|
||||
chacha20poly1305(12)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
List of the SSH server cipher algorithm.
|
||||
Through this list, the index can be configured in batches in the format of bit-domain string.
|
||||
It can be configured as follows: to configure the index n, set the nth in the bit string to 1,
|
||||
that is,......000100......For example, to configure the index 1, set the first character of
|
||||
the string to 1, and issue 0100 0000, namely, # 0x40 (note that the value of the bit type
|
||||
starts from 0). For example, to configure the index 8, set the eighth character of the string
|
||||
to 1, and issue 0000 0000 1000 0000, namely, # 0x00 0x80.
|
||||
"
|
||||
::= { hwSSHServerAlg 1 }
|
||||
|
||||
hwSSHServerHmacAlg OBJECT-TYPE
|
||||
SYNTAX BITS
|
||||
{
|
||||
hmacmd5(0),
|
||||
hmacmd596(1),
|
||||
hmacsha1(2),
|
||||
hmacsha196(3),
|
||||
hmacsha2256(4),
|
||||
hmacsha225696(5),
|
||||
hmacsha2512(6)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
List of the SSH server hmac algorithm.
|
||||
Through this list, the index can be configured in batches in the format of bit-domain string.
|
||||
"
|
||||
::= { hwSSHServerAlg 2 }
|
||||
|
||||
hwSSHServerKeyExchangeAlg OBJECT-TYPE
|
||||
SYNTAX BITS
|
||||
{
|
||||
dhGroup1Sha1(0),
|
||||
dhGroup14Sha1(1),
|
||||
dhGroupExchangeSha1(2),
|
||||
dhGroupExchangeSha256(3),
|
||||
ecdhSha2Nistp256(4),
|
||||
ecdhSha2Nistp384(5),
|
||||
ecdhSha2Nistp521(6),
|
||||
sm2KepSha2Nistp256(7),
|
||||
curve25519Sha256(8)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
List of the SSH server key exchange algorithm.
|
||||
Through this list, the index can be configured in batches in the format of bit-domain string.
|
||||
"
|
||||
::= { hwSSHServerAlg 3 }
|
||||
|
||||
hwSSHServerDhMinLen OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
modulus1024(1),
|
||||
modulus2048(2),
|
||||
modulus3072(3),
|
||||
modulus4096(4)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
This object indicates the length of DH.
|
||||
Options:
|
||||
1.modulus1024(1),
|
||||
2.modulus2048(2),
|
||||
3.modulus3072(3),
|
||||
4.modulus4096(4).
|
||||
"
|
||||
::= { hwSSHServerAlg 4 }
|
||||
|
||||
hwSSHServerPublicKeyAlg OBJECT-TYPE
|
||||
SYNTAX BITS
|
||||
{
|
||||
rsa(0),
|
||||
rsasha2256(1),
|
||||
rsasha2512(2),
|
||||
x509rsa(3),
|
||||
x509rsa2048sha256(4),
|
||||
ed25519(5)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
List of the SSH server public key algorithm.
|
||||
Through this list, the index can be configured in batches in the format of bit-domain string.
|
||||
"
|
||||
::= { hwSSHServerAlg 5 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.2.5
|
||||
hwSSHClientInsecureAlgo OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (1..255))
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The insecure algorithm list."
|
||||
::= { hwSSHClient 5 }
|
||||
|
||||
hwSSHClientAlg OBJECT IDENTIFIER ::= { hwSSHClient 6 }
|
||||
|
||||
hwSSHClientCipherAlg OBJECT-TYPE
|
||||
SYNTAX BITS
|
||||
{
|
||||
des3cbc(0),
|
||||
arcfour128(1),
|
||||
arcfour256(2),
|
||||
blowfishcbc(3),
|
||||
aes128cbc(4),
|
||||
aes192cbc(5),
|
||||
aes256cbc(6),
|
||||
aes128ctr(7),
|
||||
aes192ctr(8),
|
||||
aes256ctr(9),
|
||||
aes128gcm(10),
|
||||
aes256gcm(11),
|
||||
chacha20poly1305(12)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
List of the SSH client cipher algorithm. However, the blowfishcbc algorithm is not supported.
|
||||
Through this list, the index can be configured in batches in the format of bit-domain string.
|
||||
It can be configured as follows: to configure the index n, set the nth in the bit string to 1,
|
||||
that is,......000100......For example, to configure the index 1, set the first character of
|
||||
the string to 1, and issue 0100 0000, namely, # 0x40 (note that the value of the bit type
|
||||
starts from 0). For example, to configure the index 8, set the eighth character of the string
|
||||
to 1, and issue 0000 0000 1000 0000, namely, # 0x00 0x80.
|
||||
"
|
||||
::= { hwSSHClientAlg 1 }
|
||||
|
||||
hwSSHClientHmacAlg OBJECT-TYPE
|
||||
SYNTAX BITS
|
||||
{
|
||||
hmacmd5(0),
|
||||
hmacmd596(1),
|
||||
hmacsha1(2),
|
||||
hmacsha196(3),
|
||||
hmacsha2256(4),
|
||||
hmacsha225696(5),
|
||||
hmacsha2512(6)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
List of the SSH client hmac algorithm.
|
||||
Through this list, the index can be configured in batches in the format of bit-domain string.
|
||||
"
|
||||
::= { hwSSHClientAlg 2 }
|
||||
|
||||
hwSSHClientKeyExchangeAlg OBJECT-TYPE
|
||||
SYNTAX BITS
|
||||
{
|
||||
dhGroup1Sha1(0),
|
||||
dhGroup14Sha1(1),
|
||||
dhGroupExchangeSha1(2),
|
||||
dhGroupExchangeSha256(3),
|
||||
ecdhSha2Nistp256(4),
|
||||
ecdhSha2Nistp384(5),
|
||||
ecdhSha2Nistp521(6),
|
||||
sm2KepSha2Nistp256(7),
|
||||
curve25519Sha256(8)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
List of the SSH client key exchange algorithm.
|
||||
Through this list, the index can be configured in batches in the format of bit-domain string.
|
||||
"
|
||||
::= { hwSSHClientAlg 3 }
|
||||
|
||||
hwSSHClientPublicKeyAlg OBJECT-TYPE
|
||||
SYNTAX BITS
|
||||
{
|
||||
rsa(0),
|
||||
rsasha2256(1),
|
||||
rsasha2512(2),
|
||||
ed25519(3)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
List of the SSH client public key algorithm.
|
||||
Through this list, the index can be configured in batches in the format of bit-domain string.
|
||||
"
|
||||
::= { hwSSHClientAlg 4 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.3
|
||||
hwSSHNotifications OBJECT IDENTIFIER ::= { hwSSH 3 }
|
||||
@ -1420,8 +1726,37 @@
|
||||
"This notification was sent when the total number of sftp users requesting sftp service
|
||||
exceeds max user number configured."
|
||||
::= { hwSSHNotifications 1 }
|
||||
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.3.2
|
||||
hwSSHServerUsedInsecureAlgo NOTIFICATION-TYPE
|
||||
OBJECTS { hwSSHServerInsecureAlgo }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This notification was sent when the insecure algorithm was configured for the SSH server."
|
||||
::= { hwSSHNotifications 2 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.3.3
|
||||
hwSSHClientUsedInsecureAlgo NOTIFICATION-TYPE
|
||||
OBJECTS { hwSSHClientInsecureAlgo }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This notification was sent when the insecure algorithm was configured for the SSH client."
|
||||
::= { hwSSHNotifications 3 }
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.3.4
|
||||
hwSSHServerUsedInsecureAlgoClear NOTIFICATION-TYPE
|
||||
OBJECTS { hwSSHServerInsecureAlgo }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This notification was sent when the insecure algorithm was configured for the SSH server."
|
||||
::= { hwSSHNotifications 4 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.3.3
|
||||
hwSSHClientUsedInsecureAlgoClear NOTIFICATION-TYPE
|
||||
OBJECTS { hwSSHClientInsecureAlgo }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This notification was sent when the insecure algorithm was configured for the SSH client."
|
||||
::= { hwSSHNotifications 5 }
|
||||
-- Conformance information
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.4
|
||||
hwSSHMIBConformance OBJECT IDENTIFIER ::= { hwSSH 4 }
|
||||
@ -1455,7 +1790,7 @@
|
||||
OBJECTS { hwStelnetServerEnable, hwSftpServerEnable, hwSSHServerComp1x, hwSSHServerTimeOut, hwSSHServerRetry,
|
||||
hwSSHServerPort, hwSSHServerKeyTimeOut, hwSSHServerAlarmEnable, hwSftpMaxUserNum, hwSftpOnLineUserNum,
|
||||
hwSNetConfMaxUserNum, hwSNetConfServerEnable, hwSSHKeepAliveEnable, hwSCPServerEnable,
|
||||
hwSCPMaxUserNum }
|
||||
hwSCPMaxUserNum, hwSSHServerInsecureAlgo }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
@ -1493,7 +1828,7 @@
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.4.2.4
|
||||
hwSSHClientGroup OBJECT-GROUP
|
||||
OBJECTS { hwSSHFirstTimeAuthEnable, hwSSHKeepAliveInterval, hwSSHKeepAliveMaxCount }
|
||||
OBJECTS { hwSSHFirstTimeAuthEnable, hwSSHKeepAliveInterval, hwSSHKeepAliveMaxCount, hwSSHClientInsecureAlgo, hwSSHServerUsedInsecureAlgoClear, hwSSHClientUsedInsecureAlgoClear }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
@ -1515,7 +1850,7 @@
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.4.2.6
|
||||
hwSSHNotificationGroup NOTIFICATION-GROUP
|
||||
NOTIFICATIONS { hwSSHSftpUserNumExceedMax }
|
||||
NOTIFICATIONS { hwSSHSftpUserNumExceedMax, hwSSHServerUsedInsecureAlgo, hwSSHClientUsedInsecureAlgo }
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
@ -1530,12 +1865,12 @@
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.5.1
|
||||
hwRSALocalHostPublicKeyCode OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..2048))
|
||||
SYNTAX OCTET STRING (SIZE (0..4096))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
The object specifies the local host RSA Public Key Code in the format of ber.
|
||||
The object specifies the local host RSA Public Key Code in the format of der.
|
||||
"
|
||||
::= { hwRSALocalKeyTable 1 }
|
||||
|
||||
@ -1555,12 +1890,12 @@
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.5.3
|
||||
hwRSALocalServerPublicKeyCode OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (0..2048))
|
||||
SYNTAX OCTET STRING (SIZE (0..4096))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
The object specifies the local server RSA Public Key Code in the format of ber.
|
||||
The object specifies the local server RSA Public Key Code in the format of der.
|
||||
"
|
||||
::= { hwRSALocalKeyTable 3 }
|
||||
|
||||
@ -1577,6 +1912,115 @@
|
||||
"
|
||||
::= { hwRSALocalKeyTable 4 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.6
|
||||
hwSftpClient OBJECT IDENTIFIER ::= { hwSSH 6 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.6.1
|
||||
hwSftpServerAuthenticationSwitch OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
disable(1),
|
||||
enable(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The object specifies whether the sftp server authentication switch.
|
||||
Options:
|
||||
1.disable(1) -indicates the sftp server authentication switch disable.
|
||||
2.enable(2)-indicates the sftp server authentication switch enable.
|
||||
The default value is enable.
|
||||
"
|
||||
::= { hwSftpClient 1 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.6.2
|
||||
hwSftpServerAuthenticationTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF HwSftpServerAuthenticationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
A table of configuration about the relation between the ip address
|
||||
and the sftp server public key name.
|
||||
"
|
||||
::= { hwSftpClient 2 }
|
||||
|
||||
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.6.2.1
|
||||
hwSftpServerAuthenticationEntry OBJECT-TYPE
|
||||
SYNTAX HwSftpServerAuthenticationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
A table of configuration about the relation between the ip address
|
||||
and the sftp server public key name.
|
||||
The index of this entry is hwSftpServerName.
|
||||
"
|
||||
INDEX { IMPLIED hwSftpServerName }
|
||||
::= { hwSftpServerAuthenticationTable 1 }
|
||||
|
||||
HwSftpServerAuthenticationEntry ::=
|
||||
SEQUENCE {
|
||||
hwSftpServerName
|
||||
OCTET STRING,
|
||||
hwSftpServerPublicKeyType
|
||||
INTEGER,
|
||||
hwSftpServerPublicKeyName
|
||||
OCTET STRING,
|
||||
hwSftpServerRowStatus
|
||||
RowStatus
|
||||
}
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.6.2.1.1
|
||||
hwSftpServerName OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (1..255))
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
The IPv4 or IPv6 of the SFTP server.
|
||||
"
|
||||
::= { hwSftpServerAuthenticationEntry 1 }
|
||||
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.6.2.1.2
|
||||
hwSftpServerPublicKeyType OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
rsa(1)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
The object specifies the sftp server public key type.
|
||||
"
|
||||
::= { hwSftpServerAuthenticationEntry 2 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.6.2.1.3
|
||||
hwSftpServerPublicKeyName OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE (1..40))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
The object specifies a sftp server public key name .
|
||||
This public key name must exist.
|
||||
"
|
||||
::= { hwSftpServerAuthenticationEntry 3 }
|
||||
|
||||
-- 1.3.6.1.4.1.2011.5.25.118.6.2.1.4
|
||||
hwSftpServerRowStatus OBJECT-TYPE
|
||||
SYNTAX RowStatus
|
||||
MAX-ACCESS read-create
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"
|
||||
Row operation object.
|
||||
createAndGo(4)is supplied to create a new instance of a conceptual row.
|
||||
destroy(6)is supplied to delete the instances associated with an existing conceptual row.
|
||||
"
|
||||
::= { hwSftpServerAuthenticationEntry 4 }
|
||||
|
||||
END
|
||||
|
Reference in New Issue
Block a user