initial commit; version 22.5.12042
This commit is contained in:
476
mibs/a3com/A3COM-HUAWEI-SSH-MIB
Normal file
476
mibs/a3com/A3COM-HUAWEI-SSH-MIB
Normal file
@ -0,0 +1,476 @@
|
||||
-- =========================================================================
|
||||
-- Copyright (C) 2007 by H3C TECHNOLOGIES. All rights reserved.
|
||||
--
|
||||
-- Description: Secure Shell(SSH) MIB
|
||||
-- Reference: draft-ylonen-ssh-protocol-00.txt
|
||||
-- Version: V1.0
|
||||
-- History:
|
||||
-- V1.0 2007-11-19 created by ZhangJun 03132
|
||||
-- Initial version.
|
||||
-- =========================================================================
|
||||
A3COM-HUAWEI-SSH-MIB DEFINITIONS ::= BEGIN
|
||||
|
||||
IMPORTS
|
||||
h3cCommon
|
||||
FROM A3COM-HUAWEI-OID-MIB
|
||||
Integer32, OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE
|
||||
FROM SNMPv2-SMI
|
||||
InetAddressType, InetAddress
|
||||
FROM INET-ADDRESS-MIB
|
||||
DisplayString, RowStatus
|
||||
FROM SNMPv2-TC;
|
||||
|
||||
h3cSSH MODULE-IDENTITY
|
||||
LAST-UPDATED "200711190000Z"
|
||||
ORGANIZATION
|
||||
"Hangzhou H3C Tech. Co., Ltd."
|
||||
CONTACT-INFO
|
||||
"Platform Team Hangzhou H3C Tech. Co., Ltd.
|
||||
Hai-Dian District Beijing P.R. China
|
||||
http://www.h3c.com
|
||||
Zip:100085"
|
||||
DESCRIPTION
|
||||
"The initial version."
|
||||
REVISION "200711190000Z"
|
||||
DESCRIPTION
|
||||
"This MIB is used to configure SSH server."
|
||||
::= { h3cCommon 22 }
|
||||
|
||||
--
|
||||
-- Node definitions
|
||||
--
|
||||
-- Scalar MIB objects are defined in this section.
|
||||
h3cSSHServerMIB OBJECT IDENTIFIER ::= { h3cSSH 1 }
|
||||
|
||||
h3cSSHServerMIBObjects OBJECT IDENTIFIER ::= { h3cSSHServerMIB 1 }
|
||||
|
||||
-- Scalar MIB objects, which are considered as global variables
|
||||
-- to SSH server, are defined in this section.
|
||||
h3cSSHServerGlobalConfig OBJECT IDENTIFIER ::= { h3cSSHServerMIBObjects 1 }
|
||||
|
||||
h3cSSHServerVersion OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The protocol version of the SSH server."
|
||||
::= { h3cSSHServerGlobalConfig 1 }
|
||||
|
||||
h3cSSHServerCompatibleSSH1x OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
enableCompatibleSSH1x(1),
|
||||
disableCompatibleSSH1x(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Supporting compatibility with SSH versions 1.x. It is
|
||||
known that there are still devices using the previous
|
||||
versions. During the transition period, it is important to
|
||||
be able to work in a way that is compatible with the
|
||||
installed SSH clients and servers that use the older version
|
||||
of the protocol."
|
||||
::= { h3cSSHServerGlobalConfig 2 }
|
||||
|
||||
h3cSSHServerRekeyInterval OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The time interval of regenerating SSH server key. The unit
|
||||
is hour."
|
||||
::= { h3cSSHServerGlobalConfig 3 }
|
||||
|
||||
h3cSSHServerAuthRetries OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The limit times of a specified user can retry."
|
||||
::= { h3cSSHServerGlobalConfig 4 }
|
||||
|
||||
h3cSSHServerAuthTimeout OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The SSH server has a timeout for authentication and
|
||||
disconnect if the authentication has not been accepted
|
||||
within the timeout period. The unit is second."
|
||||
::= { h3cSSHServerGlobalConfig 5 }
|
||||
|
||||
h3cSFTPServerIdleTimeout OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The SFTP server has a timeout for idle connection if a user
|
||||
has no activities within the timeout period. The unit is
|
||||
minute."
|
||||
::= { h3cSSHServerGlobalConfig 6 }
|
||||
|
||||
h3cSSHServerEnable OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
enableSSHServer(1),
|
||||
disableSSHServer(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Enable SSH server function."
|
||||
::= { h3cSSHServerGlobalConfig 7 }
|
||||
|
||||
h3cSFTPServerEnable OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
enableSFTPService(1),
|
||||
disableSFTPService(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Enable SFTP server function."
|
||||
::= { h3cSSHServerGlobalConfig 8 }
|
||||
|
||||
-- SSH users are defined in this section.
|
||||
h3cSSHUserConfig OBJECT IDENTIFIER ::= { h3cSSHServerMIBObjects 2 }
|
||||
|
||||
-- Define a group which consists of all objects used for users.
|
||||
h3cSSHUserConfigTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF H3cSSHUserConfigEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A table for managing SSH users."
|
||||
::= { h3cSSHUserConfig 1 }
|
||||
|
||||
h3cSSHUserConfigEntry OBJECT-TYPE
|
||||
SYNTAX H3cSSHUserConfigEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"SSH users configuration entry."
|
||||
INDEX
|
||||
{
|
||||
h3cSSHUserName
|
||||
}
|
||||
::= { h3cSSHUserConfigTable 1 }
|
||||
|
||||
H3cSSHUserConfigEntry ::= SEQUENCE
|
||||
{
|
||||
h3cSSHUserName DisplayString,
|
||||
h3cSSHUserServiceType INTEGER,
|
||||
h3cSSHUserAuthType INTEGER,
|
||||
h3cSSHUserPublicKeyName DisplayString,
|
||||
h3cSSHUserWorkDirectory DisplayString,
|
||||
h3cSSHUserRowStatus RowStatus
|
||||
}
|
||||
|
||||
h3cSSHUserName OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The name of SSH user."
|
||||
::= { h3cSSHUserConfigEntry 1 }
|
||||
|
||||
h3cSSHUserServiceType OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
invalid(1),
|
||||
all(2),
|
||||
stelnet(3),
|
||||
sftp(4)
|
||||
}
|
||||
MAX-ACCESS read-create
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The service type of SSH user uses."
|
||||
DEFVAL { invalid }
|
||||
::= { h3cSSHUserConfigEntry 2 }
|
||||
|
||||
h3cSSHUserAuthType OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
invalid(1),
|
||||
password(2),
|
||||
publicKey(3),
|
||||
any(4),
|
||||
publicKeyPassword(5)
|
||||
}
|
||||
MAX-ACCESS read-create
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The authentication type of SSH user chooses."
|
||||
DEFVAL { invalid }
|
||||
::= { h3cSSHUserConfigEntry 3 }
|
||||
|
||||
h3cSSHUserPublicKeyName OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-create
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The public key which is used for authentication."
|
||||
DEFVAL { "" }
|
||||
::= { h3cSSHUserConfigEntry 4 }
|
||||
|
||||
h3cSSHUserWorkDirectory OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-create
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The SFTP user's work directory associates with an existing user."
|
||||
DEFVAL { "" }
|
||||
::= { h3cSSHUserConfigEntry 5 }
|
||||
|
||||
|
||||
h3cSSHUserRowStatus OBJECT-TYPE
|
||||
SYNTAX RowStatus
|
||||
MAX-ACCESS read-create
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The row status variable, used in accordance to installation
|
||||
and removal conventions for conceptual rows.
|
||||
|
||||
When the `h3cSSHUserRowStatus' is set to active(1), no objects
|
||||
in this table can be modified.
|
||||
|
||||
When 'h3cSSHUserRowStatus' is set to notInService(2), every object
|
||||
except the 'h3cSSHUserName' object in this table can be modified.
|
||||
|
||||
To create a row in this table, a manager must set this object
|
||||
to createAndGo(4). Until instances of all corresponding columns
|
||||
are appropriately configured, the value of the corresponding
|
||||
instance of the h3cSSHUserRowStatus column is 'notReady'."
|
||||
::= { h3cSSHUserConfigEntry 6 }
|
||||
|
||||
-- Define a group which consists of all objects used for sessions.
|
||||
h3cSSHSessionInfoTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF H3cSSHSessionInfoEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A table for SSH sessions."
|
||||
::= { h3cSSHServerMIBObjects 3 }
|
||||
|
||||
h3cSSHSessionInfoEntry OBJECT-TYPE
|
||||
SYNTAX H3cSSHSessionInfoEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The SSH session information entry."
|
||||
INDEX
|
||||
{
|
||||
h3cSSHSessionID
|
||||
}
|
||||
::= { h3cSSHSessionInfoTable 1 }
|
||||
|
||||
H3cSSHSessionInfoEntry ::= SEQUENCE
|
||||
{
|
||||
h3cSSHSessionID Integer32,
|
||||
h3cSSHSessionUserName DisplayString,
|
||||
h3cSSHSessionUserIpAddrType InetAddressType,
|
||||
h3cSSHSessionUserIpAddr InetAddress,
|
||||
h3cSSHSessionClientVersion DisplayString,
|
||||
h3cSSHSessionServiceType INTEGER,
|
||||
h3cSSHSessionEncry INTEGER,
|
||||
h3cSSHSessionState INTEGER
|
||||
}
|
||||
|
||||
h3cSSHSessionID OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The identifier of SSH session."
|
||||
::= { h3cSSHSessionInfoEntry 1 }
|
||||
|
||||
h3cSSHSessionUserName OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The user name of SSH session."
|
||||
::= { h3cSSHSessionInfoEntry 2 }
|
||||
|
||||
h3cSSHSessionUserIpAddrType OBJECT-TYPE
|
||||
SYNTAX InetAddressType
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The user IP address type of SSH session."
|
||||
::= { h3cSSHSessionInfoEntry 3 }
|
||||
|
||||
h3cSSHSessionUserIpAddr OBJECT-TYPE
|
||||
SYNTAX InetAddress
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The user IP address of SSH session."
|
||||
::= { h3cSSHSessionInfoEntry 4 }
|
||||
|
||||
h3cSSHSessionClientVersion OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The client version of SSH session. It is known that there are still
|
||||
devices using the previous versions."
|
||||
::= { h3cSSHSessionInfoEntry 5 }
|
||||
|
||||
h3cSSHSessionServiceType OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
invalid(1),
|
||||
stelnet(2),
|
||||
sftp(3)
|
||||
}
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The service type of SSH session."
|
||||
::= { h3cSSHSessionInfoEntry 6 }
|
||||
|
||||
h3cSSHSessionEncry OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
invalid(1),
|
||||
aes128CBC(2),
|
||||
desCBC(3),
|
||||
des3CBC(4)
|
||||
}
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The encryption algorithm of SSH session. There are several encryption
|
||||
algorithms used in SSH protocol, please refer to RFC4253 Section 6.3."
|
||||
::= { h3cSSHSessionInfoEntry 7 }
|
||||
|
||||
h3cSSHSessionState OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
init(1),
|
||||
verExchange(2),
|
||||
keysExchange(3),
|
||||
authRequest(4),
|
||||
serviceRequest(5),
|
||||
established(6),
|
||||
disconnect(7)
|
||||
}
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The status of SSH session.
|
||||
init : This session is in initial status.
|
||||
verExchange : This session is in version exchanging.
|
||||
keysExchange : This session is in keys exchanging.
|
||||
authRequest : This session is in authentication requesting.
|
||||
serviceRequest : This session is in service requesting.
|
||||
established : This session has been established.
|
||||
disconnected : This session has been disconnected."
|
||||
::= { h3cSSHSessionInfoEntry 8 }
|
||||
|
||||
|
||||
-- Define a group which consists of all objects used for trap.
|
||||
h3cSSHServerObjForTrap OBJECT IDENTIFIER ::= { h3cSSHServerMIB 2 }
|
||||
|
||||
h3cSSHAttemptUserName OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The user name of the attacker who attempted to log in."
|
||||
::= { h3cSSHServerObjForTrap 1 }
|
||||
|
||||
h3cSSHAttemptIpAddrType OBJECT-TYPE
|
||||
SYNTAX InetAddressType
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The IP address type of the attacker who attempted to log in."
|
||||
::= { h3cSSHServerObjForTrap 2 }
|
||||
|
||||
h3cSSHAttemptIpAddr OBJECT-TYPE
|
||||
SYNTAX InetAddress
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The IP address of the attacker who attempted to log in."
|
||||
::= { h3cSSHServerObjForTrap 3 }
|
||||
|
||||
h3cSSHUserAuthFailureReason OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
{
|
||||
exceedRetries(1),
|
||||
authTimeout(2),
|
||||
otherReason(3)
|
||||
}
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The reason for that a user failed to log in."
|
||||
::= { h3cSSHServerObjForTrap 4 }
|
||||
|
||||
--
|
||||
-- Notification definitions
|
||||
--
|
||||
-- =================================================================
|
||||
-- Traps are defined below.
|
||||
h3cSSHServerNotifications OBJECT IDENTIFIER ::= { h3cSSHServerMIB 3 }
|
||||
|
||||
-- All trap definitions should be placed under this object.
|
||||
h3cSSHServerNotificationsPrefix OBJECT IDENTIFIER ::= { h3cSSHServerNotifications 0 }
|
||||
|
||||
-- All objects used for TRAP only are defined here.
|
||||
h3cSSHUserAuthFailure NOTIFICATION-TYPE
|
||||
OBJECTS
|
||||
{
|
||||
h3cSSHAttemptUserName,
|
||||
h3cSSHAttemptIpAddrType,
|
||||
h3cSSHAttemptIpAddr,
|
||||
h3cSSHUserAuthFailureReason
|
||||
}
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The trap is generated when a user fails to authentication."
|
||||
::= { h3cSSHServerNotificationsPrefix 1 }
|
||||
|
||||
h3cSSHVersionNegotiationFailure NOTIFICATION-TYPE
|
||||
OBJECTS
|
||||
{
|
||||
h3cSSHAttemptIpAddrType,
|
||||
h3cSSHAttemptIpAddr
|
||||
}
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The trap is generated when a user fails to negotiate SSH
|
||||
protocol version."
|
||||
::= { h3cSSHServerNotificationsPrefix 2 }
|
||||
|
||||
h3cSSHUserLogin NOTIFICATION-TYPE
|
||||
OBJECTS
|
||||
{
|
||||
h3cSSHSessionUserName,
|
||||
h3cSSHSessionUserIpAddrType,
|
||||
h3cSSHSessionUserIpAddr
|
||||
}
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The trap is generated when a user logs in successfully."
|
||||
::= { h3cSSHServerNotificationsPrefix 3 }
|
||||
|
||||
h3cSSHUserLogoff NOTIFICATION-TYPE
|
||||
OBJECTS
|
||||
{
|
||||
h3cSSHSessionUserName,
|
||||
h3cSSHSessionUserIpAddrType,
|
||||
h3cSSHSessionUserIpAddr
|
||||
}
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The trap is generated when a user logs off."
|
||||
::= { h3cSSHServerNotificationsPrefix 4 }
|
||||
|
||||
END
|
Reference in New Issue
Block a user