Commit version 24.12.13800
This commit is contained in:
922
mibs/lancom/LANCOM-MGMT-SECURITY-MIB
Normal file
922
mibs/lancom/LANCOM-MGMT-SECURITY-MIB
Normal file
@ -0,0 +1,922 @@
|
||||
LANCOM-MGMT-SECURITY-MIB DEFINITIONS ::= BEGIN
|
||||
|
||||
-- Broadcom FastPath Mgmt Security MIB
|
||||
-- Copyright 2016-2020 Broadcom.
|
||||
-- This SNMP Management Information Specification
|
||||
-- embodies Broadcom's confidential and proprietary
|
||||
-- intellectual property. Broadcom retains all title
|
||||
-- and ownership in the Specification including any revisions.
|
||||
|
||||
-- This Specification is supplied "AS IS", Broadcom
|
||||
-- makes no warranty, either expressed or implied,
|
||||
-- as to the use, operation, condition, or performance of the
|
||||
-- Specification.
|
||||
|
||||
|
||||
IMPORTS
|
||||
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE,
|
||||
IpAddress, Integer32, Unsigned32 FROM SNMPv2-SMI
|
||||
fastPath FROM LANCOM-REF-MIB
|
||||
DisplayString FROM RFC1213-MIB
|
||||
TruthValue, RowStatus FROM SNMPv2-TC;
|
||||
|
||||
fastPathMgmtSecurity MODULE-IDENTITY
|
||||
LAST-UPDATED "202006150000Z" -- 15 Jume 2020 12:00:00 GMT
|
||||
ORGANIZATION "Broadcom "
|
||||
CONTACT-INFO
|
||||
" Customer Support
|
||||
Postal: Broadcom
|
||||
1030 Swabia Court
|
||||
Suite 400
|
||||
Durham, NC 27703
|
||||
Tel: +1 919 865 2700"
|
||||
DESCRIPTION
|
||||
"The Broadcom Private MIB for FastPath Security"
|
||||
|
||||
-- Revision history.
|
||||
REVISION
|
||||
"202006150000Z" -- 15 June 2020 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"tls12 option is added in agentSSLProtocolLevel object."
|
||||
REVISION
|
||||
"201907110000Z" -- 11 July 2019 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Added MIB objects for Outbound SSH."
|
||||
REVISION
|
||||
"201812050000Z" -- 05 Dec 2018 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Added object agentSSHEcdsaKeyControl, agentSSHEcdsaKeyLen to agentSSHConfigGroup."
|
||||
REVISION
|
||||
"201707110000Z" -- 11 Jul 2017 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Modified the description of the object agentSSHProtocolLevel."
|
||||
REVISION
|
||||
"201705180000Z" -- 18 May 2017 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Added objects agentScpServerAdminMode."
|
||||
REVISION
|
||||
"201703100000Z" -- 10 Mar 2017 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Added objects agentAccountingUpdateNewinfo, agentAccountingUpdatePeriodic."
|
||||
REVISION
|
||||
"201311110000Z" -- 11 Nov 2013 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Fixed allowed integer range for object agentSSLSecurePort."
|
||||
REVISION
|
||||
"201308270000Z" -- 27 Aug 2013 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Added object agentSSHMgmtPortNum to agentSSHConfigGroup."
|
||||
REVISION
|
||||
"201101260000Z" -- 26 Jan 2011 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Postal address updated."
|
||||
REVISION
|
||||
"200705230000Z" -- 23 May 2007 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Broadcom branding related changes."
|
||||
REVISION
|
||||
"200311210000Z" -- 21 Nov 2003 12:00:00 GMT
|
||||
DESCRIPTION
|
||||
"Initial revision."
|
||||
|
||||
::= { fastPath 11 }
|
||||
|
||||
--**************************************************************************************
|
||||
-- agentSSLConfigGroup
|
||||
--
|
||||
--**************************************************************************************
|
||||
|
||||
agentSSLConfigGroup OBJECT IDENTIFIER ::= { fastPathMgmtSecurity 1 }
|
||||
|
||||
agentSSLAdminMode OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
enable(1),
|
||||
disable(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Configures whether the SSL service is enabled on this switch. The
|
||||
default value is disable(2)."
|
||||
::= { agentSSLConfigGroup 1 }
|
||||
|
||||
agentSSLSecurePort OBJECT-TYPE
|
||||
SYNTAX Integer32 (443|1025..65535)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Configures the port the SSL service will respond on. The default
|
||||
value is 443."
|
||||
::= { agentSSLConfigGroup 2 }
|
||||
|
||||
agentSSLProtocolLevel OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
ssl30(1), -- SSL 3.0
|
||||
tls10(2), -- TSL 1.0
|
||||
both(3),
|
||||
tls12(4) -- TLS 1.2
|
||||
}
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Indicates which protocol versions of SSL are enabled on this
|
||||
switch. The default value is tls12(4)."
|
||||
::= { agentSSLConfigGroup 3 }
|
||||
|
||||
agentSSLMaxSessions OBJECT-TYPE
|
||||
SYNTAX Integer32 (0..16)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Configures the maximum number of allowable SSL sessions. The default
|
||||
value is 16."
|
||||
::= { agentSSLConfigGroup 4 }
|
||||
|
||||
agentSSLHardTimeout OBJECT-TYPE
|
||||
SYNTAX Integer32 (1..168)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Configures the hard timeout for SSL sessions in hours. The default
|
||||
value is 24 hours."
|
||||
::= { agentSSLConfigGroup 5 }
|
||||
|
||||
agentSSLSoftTimeout OBJECT-TYPE
|
||||
SYNTAX Integer32 (1..60)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Configures the soft (activity) timeout for SSL sessions in minutes.
|
||||
The default value is 5 minutes."
|
||||
::= { agentSSLConfigGroup 6 }
|
||||
|
||||
agentSSLCertificatePresent OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Boolean value indicating whether SSL certificate files exist on the device."
|
||||
::= { agentSSLConfigGroup 7 }
|
||||
|
||||
agentSSLCertificateControl OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
noop(1),
|
||||
generate(2),
|
||||
delete(3)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Controls certificate generation and deletion. Always returns noop(1)."
|
||||
::= { agentSSLConfigGroup 8 }
|
||||
|
||||
agentSSLCertificateGenerationStatus OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Indicates whether certificate files are currently being generated."
|
||||
::= { agentSSLConfigGroup 9 }
|
||||
|
||||
--**************************************************************************************
|
||||
-- agentSSHConfigGroup
|
||||
--
|
||||
--**************************************************************************************
|
||||
|
||||
agentSSHConfigGroup OBJECT IDENTIFIER ::= { fastPathMgmtSecurity 2 }
|
||||
|
||||
agentSSHAdminMode OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
enable(1),
|
||||
disable(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Configures whether the SSH service is enabled on this switch. The
|
||||
default value is disable(2)."
|
||||
::= { agentSSHConfigGroup 1 }
|
||||
|
||||
agentSSHProtocolLevel OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
ssh10(1), -- deprecated, SSH 1.0 no longer supported
|
||||
ssh20(2), -- SSH 2.0
|
||||
both(3) -- deprecated, SSH 1.0 no longer supported
|
||||
}
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Indicates the protocol version of SSH enabled on this switch.
|
||||
Starting with the use of OpenSSH version 7.5P1,
|
||||
SSH Protocol Version 1.0 is no longer supported."
|
||||
DEFVAL { ssh20}
|
||||
::= { agentSSHConfigGroup 2 }
|
||||
|
||||
agentSSHSessionsCount OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Current number of active SSH sessions on this switch."
|
||||
::= { agentSSHConfigGroup 3 }
|
||||
|
||||
agentSSHMaxSessionsCount OBJECT-TYPE
|
||||
SYNTAX Integer32 (0..5)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Max number of SSH sessions permitted on this switch."
|
||||
::= { agentSSHConfigGroup 4 }
|
||||
|
||||
agentSSHSessionTimeout OBJECT-TYPE
|
||||
SYNTAX Integer32 (1..160)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"ssh idle timeout value for this switch im minutes."
|
||||
::= { agentSSHConfigGroup 5 }
|
||||
|
||||
agentSSHKeysPresent OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
dsa(1),
|
||||
rsa(2),
|
||||
both(3), --deprecated
|
||||
none(4),
|
||||
ecdsa(5),
|
||||
all(6)
|
||||
}
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Indicates what key files are present on the device, if any."
|
||||
::= { agentSSHConfigGroup 6 }
|
||||
|
||||
agentSSHKeyGenerationStatus OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
dsa(1),
|
||||
rsa(2),
|
||||
both(3), --deprecated
|
||||
none(4),
|
||||
ecdsa(5),
|
||||
all(6)
|
||||
}
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Indicates what key files are currently being generated, if any."
|
||||
::= { agentSSHConfigGroup 7 }
|
||||
|
||||
agentSSHRSAKeyControl OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
noop(1),
|
||||
generate(2),
|
||||
delete(3)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Controls RSA key generation and deletion. A read of this object always returns noop(1)."
|
||||
::= { agentSSHConfigGroup 8 }
|
||||
|
||||
agentSSHDSAKeyControl OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
noop(1),
|
||||
generate(2),
|
||||
delete(3)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Controls DSA key generation and deletion. A read of this object always returns noop(1)."
|
||||
::= { agentSSHConfigGroup 9 }
|
||||
|
||||
agentSSHMgmtPortNum OBJECT-TYPE
|
||||
SYNTAX Integer32 (1..65535)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Get/Set the TCP port number that the SSH server listens to for incoming
|
||||
requests. The port number is an integer value from 1 to 65535. Before setting
|
||||
this object, check your system (e.g. using 'netstat') to make sure the desired
|
||||
port number is not currently being used by any other service. The default
|
||||
value for this object is 22.
|
||||
|
||||
Note that existing SSH login sessions are not affected by a change in value of
|
||||
this object, although establishment of any new SSH sessions must use the new
|
||||
port number."
|
||||
::= { agentSSHConfigGroup 10 }
|
||||
|
||||
agentScpServerAdminMode OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
enable(1),
|
||||
disable(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Configures SCP server admin mode to download files to the switch.
|
||||
The default value is disable(2)."
|
||||
DEFVAL { disable }
|
||||
::= { agentSSHConfigGroup 11 }
|
||||
|
||||
agentSSHEcdsaKeyControl OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
noop(1),
|
||||
generate(2),
|
||||
delete(3)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Controls ECDSA key generation and deletion. A read of this object always returns noop(1)."
|
||||
::= { agentSSHConfigGroup 12 }
|
||||
|
||||
agentSSHEcdsaKeyLen OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Get/Set ECDSA key length. Supported Key lengths are 256, 384 and 521 bits."
|
||||
::= { agentSSHConfigGroup 13 }
|
||||
|
||||
|
||||
--************************************************************************************
|
||||
-- agentListAuthenticationGroup
|
||||
--
|
||||
--************************************************************************************
|
||||
|
||||
agentListAuthenticationGroup OBJECT IDENTIFIER ::= { fastPathMgmtSecurity 3 }
|
||||
|
||||
agentListAuthenticationTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF AgentListAuthenticationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table contains sets of authentication lists."
|
||||
::= { agentListAuthenticationGroup 1 }
|
||||
|
||||
agentListAuthenticationEntry OBJECT-TYPE
|
||||
SYNTAX AgentListAuthenticationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specifies objects for agentListAuthenticationTable table."
|
||||
INDEX { agentListAuthenticationAccessLevel,
|
||||
agentListAuthenticationIndex }
|
||||
::= { agentListAuthenticationTable 1 }
|
||||
|
||||
AgentListAuthenticationEntry ::= SEQUENCE {
|
||||
agentListAuthenticationAccessLevel
|
||||
INTEGER,
|
||||
agentListAuthenticationIndex
|
||||
Unsigned32,
|
||||
agentListAuthenticationName
|
||||
DisplayString,
|
||||
agentListAuthenticationAccessLine
|
||||
BITS,
|
||||
agentListAuthenticationRowStatus
|
||||
RowStatus
|
||||
}
|
||||
|
||||
agentListAuthenticationAccessLevel OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
login(0),
|
||||
enable(1)
|
||||
}
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specifies access level of authentication list, login(0) or enable(1)."
|
||||
::= { agentListAuthenticationEntry 1 }
|
||||
|
||||
agentListAuthenticationIndex OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Index of authentication list. Maximum allowed value for login is 5.
|
||||
Maximum allowed value for enable is 5."
|
||||
::= { agentListAuthenticationEntry 2 }
|
||||
|
||||
agentListAuthenticationName OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(1..15))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Name of selected authentication list. Setting a value for an empty row
|
||||
prevents creating a new row in the table. Value must not be empty."
|
||||
::= { agentListAuthenticationEntry 3 }
|
||||
|
||||
agentListAuthenticationAccessLine OBJECT-TYPE
|
||||
SYNTAX BITS {
|
||||
undefined(0),
|
||||
console(1),
|
||||
telnet(2),
|
||||
ssh(3)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object is being used for assigning specified authentication list to
|
||||
access line. One list can be assigned to different access lines at one time.
|
||||
Bit mask value is being used for configuring and has values as follows:
|
||||
- undefined(0) - show that list is not assigned. Used for clearing any
|
||||
assigned value;
|
||||
- console(1) - assign specified list to console access line;
|
||||
- telnet(2) - assign specified list to telnet access line;
|
||||
- ssh(3) - assign specified list to ssh access line.
|
||||
Before configuring this field authentication methods must be configured for
|
||||
specified list."
|
||||
::= { agentListAuthenticationEntry 4 }
|
||||
|
||||
agentListAuthenticationRowStatus OBJECT-TYPE
|
||||
SYNTAX RowStatus
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Status of authentication list entry row.
|
||||
active(1) - Shows that configured row is operational.
|
||||
notReady(3) - Shows that configured row doesn't have configured methods in
|
||||
the table agentListAuthenticationMethodsTable
|
||||
destroy(6) - Delete specified row from table. For default list, default
|
||||
method sets will be restored."
|
||||
::= { agentListAuthenticationEntry 5 }
|
||||
|
||||
agentListAuthenticationMethodsGroup OBJECT IDENTIFIER ::= { agentListAuthenticationGroup 2 }
|
||||
|
||||
agentListAuthenticationMethodsTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF AgentListAuthenticationMethodsEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table contains set of methods for specified authentication list
|
||||
and is child table for agentListAuthenticationTable. When a row in
|
||||
parent table is removed, the same row in this table is removed."
|
||||
::= { agentListAuthenticationMethodsGroup 1 }
|
||||
|
||||
agentListAuthenticationMethodsEntry OBJECT-TYPE
|
||||
SYNTAX AgentListAuthenticationMethodsEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specify objects for agentListAuthenticationMethodsTable."
|
||||
INDEX { agentListAuthenticationAccessLevel,
|
||||
agentListAuthenticationIndex,
|
||||
agentListAuthenticationMethodsIndex }
|
||||
::= { agentListAuthenticationMethodsTable 1 }
|
||||
|
||||
AgentListAuthenticationMethodsEntry ::= SEQUENCE {
|
||||
agentListAuthenticationMethodsIndex
|
||||
Unsigned32,
|
||||
agentListAuthenticationMethodsValue
|
||||
INTEGER
|
||||
}
|
||||
|
||||
agentListAuthenticationMethodsIndex OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Index of method in specified authentication list."
|
||||
::= { agentListAuthenticationMethodsEntry 1 }
|
||||
|
||||
agentListAuthenticationMethodsValue OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
undefined(0),
|
||||
enable(1),
|
||||
line(2),
|
||||
local(3),
|
||||
none(4),
|
||||
radius(5),
|
||||
tacacs(6),
|
||||
deny(7)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Value of specified method. For login and enable access lines
|
||||
set of method values are different and are as follows:
|
||||
* login access line: enable(1), line(2), local(3), none(4),
|
||||
radius(5), tacacs(6);
|
||||
* enable access line: enable(1), line(2), none(4), radius(5),
|
||||
tacacs(6), deny(7).
|
||||
Undefined(0) value is used for displaying empty method. Setting
|
||||
this value will clear configured method from the list. A list
|
||||
of authentication methods may not be modified once associated
|
||||
to an access line."
|
||||
::= { agentListAuthenticationMethodsEntry 2 }
|
||||
|
||||
--************************************************************************************
|
||||
-- agentListAutorizationGroup
|
||||
--
|
||||
--************************************************************************************
|
||||
|
||||
agentListAutorizationGroup OBJECT IDENTIFIER ::= { fastPathMgmtSecurity 4 }
|
||||
|
||||
agentListAutorizationTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF AgentListAutorizationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table contains sets of authorization lists."
|
||||
::= { agentListAutorizationGroup 1 }
|
||||
|
||||
agentListAutorizationEntry OBJECT-TYPE
|
||||
SYNTAX AgentListAutorizationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specifies objects for agentListAutorizationTable table."
|
||||
INDEX { agentListAutorizationType,
|
||||
agentListAutorizationIndex }
|
||||
::= { agentListAutorizationTable 1 }
|
||||
|
||||
AgentListAutorizationEntry ::= SEQUENCE {
|
||||
agentListAutorizationType
|
||||
INTEGER,
|
||||
agentListAutorizationIndex
|
||||
Unsigned32,
|
||||
agentListAutorizationName
|
||||
DisplayString,
|
||||
agentListAutorizationAccessLine
|
||||
BITS,
|
||||
agentListAutorizationRowStatus
|
||||
RowStatus
|
||||
}
|
||||
|
||||
agentListAutorizationType OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
command(0),
|
||||
exec(1)
|
||||
}
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specify type of authorization list, command(0) or exec(1)."
|
||||
::= { agentListAutorizationEntry 1 }
|
||||
|
||||
agentListAutorizationIndex OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Index of authorization list. Maximum value is 5."
|
||||
::= { agentListAutorizationEntry 2 }
|
||||
|
||||
agentListAutorizationName OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(1..20))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Name of selected authorization list. Setting a value for an empty row
|
||||
prevents creating a new row in the table. Value must not be empty."
|
||||
::= { agentListAutorizationEntry 3 }
|
||||
|
||||
agentListAutorizationAccessLine OBJECT-TYPE
|
||||
SYNTAX BITS {
|
||||
undefined(0),
|
||||
console(1),
|
||||
telnet(2),
|
||||
ssh(3)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object is being used for assigning specified authorization list to
|
||||
an access line. One list can be assigned to different access lines. Bit
|
||||
mask value is being used for configuring and has values as follows:
|
||||
- undefined(0) - show that list isn't assigned, used for clearing any
|
||||
assigned value;
|
||||
- console(1) - assign specified list to console access line;
|
||||
- telnet(2) - assign specified list to telnet access line;
|
||||
- ssh(3) - assign specified list to ssh access line.
|
||||
Before configuring this field, authorization methods must be configured
|
||||
for specified list."
|
||||
::= { agentListAutorizationEntry 4 }
|
||||
|
||||
agentListAutorizationRowStatus OBJECT-TYPE
|
||||
SYNTAX RowStatus
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Status of authorization list entry row.
|
||||
active(1) - Shows that configured row is operational.
|
||||
notReady(3) - Shows that configured row doesn't have configured methods in
|
||||
the table agentListAutorizationMethodsTable.
|
||||
destroy(6) - Delete specified row from table. For default list, default
|
||||
method sets will be restored."
|
||||
|
||||
::= { agentListAutorizationEntry 5 }
|
||||
|
||||
agentListAutorizationMethodsGroup OBJECT IDENTIFIER ::= { agentListAutorizationGroup 2 }
|
||||
|
||||
agentListAutorizationMethodsTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF AgentListAutorizationMethodsEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table contains set of methods for specified authorization list
|
||||
and is a child table for agentListAuthorizationTable. When a row in
|
||||
parent table is removed, the same row in this table is removed."
|
||||
::= { agentListAutorizationMethodsGroup 1 }
|
||||
|
||||
agentListAutorizationMethodsEntry OBJECT-TYPE
|
||||
SYNTAX AgentListAutorizationMethodsEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specify objects for agentListAutorizationMethodsTable."
|
||||
INDEX { agentListAutorizationType,
|
||||
agentListAutorizationIndex,
|
||||
agentListAutorizationMethodsIndex }
|
||||
::= { agentListAutorizationMethodsTable 1 }
|
||||
|
||||
AgentListAutorizationMethodsEntry ::= SEQUENCE {
|
||||
agentListAutorizationMethodsIndex
|
||||
Unsigned32,
|
||||
agentListAutorizationMethodsValue
|
||||
INTEGER
|
||||
}
|
||||
|
||||
agentListAutorizationMethodsIndex OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Index of method in specified authorization list."
|
||||
::= { agentListAutorizationMethodsEntry 1 }
|
||||
|
||||
agentListAutorizationMethodsValue OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
undefined(0),
|
||||
tacacs(1),
|
||||
radius(2),
|
||||
local(3),
|
||||
none(4)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Value of specified method. For command and exec authorization types,
|
||||
set of method values are different and are as follows:
|
||||
* command: tacacs(1), radius(2), none(4);
|
||||
* exec: tacacs(1), radius(2), local(3), none(4).
|
||||
Undefined(0) value is being used for displaying empty method. Setting
|
||||
this object to undefined will clear configured method from the list.
|
||||
A list of authentication methods may not be modified once associated
|
||||
to an access line."
|
||||
::= { agentListAutorizationMethodsEntry 2 }
|
||||
|
||||
--************************************************************************************
|
||||
-- agentListAccountingGroup
|
||||
--
|
||||
--************************************************************************************
|
||||
|
||||
agentListAccountingGroup OBJECT IDENTIFIER ::= { fastPathMgmtSecurity 5 }
|
||||
|
||||
agentListAccountingTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF AgentListAccountingEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table contains sets of accounting lists."
|
||||
::= { agentListAccountingGroup 1 }
|
||||
|
||||
agentListAccountingEntry OBJECT-TYPE
|
||||
SYNTAX AgentListAccountingEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specify objects for agentListAccountingTable."
|
||||
INDEX { agentListAccountingType,
|
||||
agentListAccountingIndex }
|
||||
::= { agentListAccountingTable 1 }
|
||||
|
||||
AgentListAccountingEntry ::= SEQUENCE {
|
||||
agentListAccountingType
|
||||
INTEGER,
|
||||
agentListAccountingIndex
|
||||
Unsigned32,
|
||||
agentListAccountingName
|
||||
DisplayString,
|
||||
agentListAccountingRecordType
|
||||
INTEGER,
|
||||
agentListAccountingAccessLine
|
||||
BITS,
|
||||
agentListAccountingRowStatus
|
||||
RowStatus
|
||||
}
|
||||
|
||||
agentListAccountingType OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
command(0),
|
||||
exec(1)
|
||||
}
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specify type of accounting list, command(0) or exec(1)."
|
||||
::= { agentListAccountingEntry 1 }
|
||||
|
||||
agentListAccountingIndex OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Index of accounting list. Maximum value is 5."
|
||||
::= { agentListAccountingEntry 2 }
|
||||
|
||||
agentListAccountingName OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(1..15))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Name of selected accounting list. Setting a value for an empty row
|
||||
prevents creating a new row in the table. Value must not be empty."
|
||||
::= { agentListAccountingEntry 3 }
|
||||
|
||||
agentListAccountingRecordType OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
undefined(0),
|
||||
start-stop(1),
|
||||
stop-only(2),
|
||||
none(3)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specify record type of accounting list, start-stop(1), stop-only(2) or
|
||||
none(3)."
|
||||
::= { agentListAccountingEntry 4 }
|
||||
|
||||
agentListAccountingAccessLine OBJECT-TYPE
|
||||
SYNTAX BITS {
|
||||
undefined(0),
|
||||
console(1),
|
||||
telnet(2),
|
||||
ssh(3)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object is being used for assigning specified accounting list to an
|
||||
access line. One list can be assigned to different access lines. Bit mask
|
||||
value is being used for configuring and has values as follows:
|
||||
- undefined(0) - show that list isn't assigned, used for clearing any
|
||||
assigned value;
|
||||
- console(1) - assign specified list to console access line;
|
||||
- telnet(2) - assign specified list to telnet access line;
|
||||
- ssh(3) - assign specified list to ssh access line.
|
||||
Before configuring this field, accounting methods must be configured for
|
||||
specified list."
|
||||
::= { agentListAccountingEntry 5 }
|
||||
|
||||
agentListAccountingRowStatus OBJECT-TYPE
|
||||
SYNTAX RowStatus
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Status of accounting list entry row.
|
||||
active(1) - Shows that configured row is operational.
|
||||
notReady(3) - Shows that configured row doesn't have configured methods in
|
||||
the table agentListAccountingMethodsTable or record type
|
||||
is not configured.
|
||||
destroy(6) - Delete specified row from table. For default list default
|
||||
method sets will be restored."
|
||||
|
||||
::= { agentListAccountingEntry 6 }
|
||||
|
||||
agentListAccountingMethodsGroup OBJECT IDENTIFIER ::= { agentListAccountingGroup 2 }
|
||||
|
||||
agentListAccountingMethodsTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF AgentListAccountingMethodsEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table contains set of methods for specified accounting list."
|
||||
::= { agentListAccountingMethodsGroup 1 }
|
||||
|
||||
agentListAccountingMethodsEntry OBJECT-TYPE
|
||||
SYNTAX AgentListAccountingMethodsEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table contains set of methods for specified accounting list and is
|
||||
a child table for agentListAccountingTable. When a row in parent table is
|
||||
removed, the same row in this table is removed."
|
||||
INDEX { agentListAccountingType,
|
||||
agentListAccountingIndex,
|
||||
agentListAccountingMethodsIndex }
|
||||
::= { agentListAccountingMethodsTable 1 }
|
||||
|
||||
AgentListAccountingMethodsEntry ::= SEQUENCE {
|
||||
agentListAccountingMethodsIndex
|
||||
Unsigned32,
|
||||
agentListAccountingMethodsValue
|
||||
INTEGER
|
||||
}
|
||||
|
||||
agentListAccountingMethodsIndex OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Index of method in specified accounting list."
|
||||
::= { agentListAccountingMethodsEntry 1 }
|
||||
|
||||
agentListAccountingMethodsValue OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
undefined(0),
|
||||
tacacs(1),
|
||||
radius(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Value of specified method. For command and exec authorization types
|
||||
set of method values are as follows:
|
||||
* command: tacacs(1);
|
||||
* exec: tacacs(1), radius(2).
|
||||
Undefined(0) value is being used for displaying empty method. Setting
|
||||
this object to undefined will clear configured method from the list.
|
||||
A list of authentication methods may not be modified once associated
|
||||
to an access line."
|
||||
::= { agentListAccountingMethodsEntry 2 }
|
||||
|
||||
agentAccountingUpdateConfigGroup OBJECT IDENTIFIER ::= { agentListAccountingGroup 3 }
|
||||
|
||||
agentAccountingUpdateNewinfo OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
enable(1),
|
||||
disable(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Configures interim accounting record to be sent to the
|
||||
accounting server, whenever there is new accounting
|
||||
information to be reported. By default sending newinfo
|
||||
to accouting servers is disabled."
|
||||
::= { agentAccountingUpdateConfigGroup 1 }
|
||||
|
||||
agentAccountingUpdatePeriodic OBJECT-TYPE
|
||||
SYNTAX Integer32 (0..200)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Configures interim accounting record to be sent to the
|
||||
accounting server periodically. By default the periodic
|
||||
timeout is 0 and no interim accouting record is sent to
|
||||
accouting servers."
|
||||
::= { agentAccountingUpdateConfigGroup 2 }
|
||||
|
||||
|
||||
--**************************************************************************************
|
||||
-- agentOutboundSSHGroup -> contains MIB objects displaying various properties
|
||||
-- of a Outbound SSH
|
||||
--
|
||||
--**************************************************************************************
|
||||
|
||||
agentOutboundSSHGroup OBJECT IDENTIFIER ::= { fastPathMgmtSecurity 6}
|
||||
|
||||
agentOutboundSSHAdminMode OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
enable(1),
|
||||
disable(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" Admin-mode of the Outbound SSH."
|
||||
DEFVAL { disable }
|
||||
::= { agentOutboundSSHGroup 1 }
|
||||
|
||||
agentOutboundSSHMaxSessions OBJECT-TYPE
|
||||
SYNTAX INTEGER (0..5)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The maximum no. of Outbound SSH sessions allowed."
|
||||
DEFVAL { 5 }
|
||||
::= { agentOutboundSSHGroup 2 }
|
||||
|
||||
agentOutboundSSHActiveSessions OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Get the number of active outgoing SSH sessions."
|
||||
::= { agentOutboundSSHGroup 3 }
|
||||
|
||||
|
||||
agentOutboundSSHTimeout OBJECT-TYPE
|
||||
SYNTAX INTEGER (0..160)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The login inactivity timeout value for Outbound SSH."
|
||||
DEFVAL { 5 }
|
||||
::= { agentOutboundSSHGroup 4 }
|
||||
|
||||
|
||||
END
|
||||
Reference in New Issue
Block a user