508 lines
17 KiB
Plaintext
508 lines
17 KiB
Plaintext
ELTEX-MES-ISS-AAA-MIB DEFINITIONS ::= BEGIN
|
|
|
|
-- Title: ELTEX AAA Private MIB
|
|
-- Version: 1.1
|
|
-- Date: 05 Jun 2020
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32
|
|
FROM SNMPv2-SMI
|
|
OBJECT-GROUP
|
|
FROM SNMPv2-CONF
|
|
TruthValue, DisplayString, RowStatus
|
|
FROM SNMPv2-TC
|
|
eltMesIss
|
|
FROM ELTEX-MES-ISS-MIB
|
|
mcTrapDescr
|
|
FROM ELTEX-SMI-ACTUAL;
|
|
|
|
eltMesIssAaaMIB MODULE-IDENTITY
|
|
LAST-UPDATED "202208030000Z"
|
|
ORGANIZATION "Eltex Enterprise, Ltd."
|
|
CONTACT-INFO
|
|
"eltex-co.ru"
|
|
DESCRIPTION
|
|
"AAA MIB definitions."
|
|
REVISION "202208030000Z"
|
|
DESCRIPTION "Added AAA method 'none'."
|
|
REVISION "202202150000Z"
|
|
DESCRIPTION "Added AAA chain feature for WEB."
|
|
REVISION "202107020000Z"
|
|
DESCRIPTION "Implemented AAA methods lists."
|
|
REVISION "202010290000Z"
|
|
DESCRIPTION "Added remote command authorization."
|
|
REVISION "202006050000Z"
|
|
DESCRIPTION "Added TACACS attributes."
|
|
REVISION "201901310000Z"
|
|
DESCRIPTION "Initial revision."
|
|
::= { eltMesIss 7 }
|
|
|
|
eltMesIssAaaObjects OBJECT IDENTIFIER ::= { eltMesIssAaaMIB 1 }
|
|
eltMesIssAaaNotifications OBJECT IDENTIFIER ::= { eltMesIssAaaMIB 2 }
|
|
|
|
eltMesIssAaaGlobalConfig OBJECT IDENTIFIER ::= { eltMesIssAaaObjects 1 }
|
|
eltMesIssAaaLineConfig OBJECT IDENTIFIER ::= { eltMesIssAaaObjects 2 }
|
|
eltMesIssAaaWebConfig OBJECT IDENTIFIER ::= { eltMesIssAaaObjects 3 }
|
|
|
|
eltMesIssAaaTacacsGlobalConfig OBJECT IDENTIFIER ::= { eltMesIssAaaGlobalConfig 2 }
|
|
eltMesIssAaaRadiusGlobalConfig OBJECT IDENTIFIER ::= { eltMesIssAaaGlobalConfig 3 }
|
|
eltMesIssAaaMethodGlobalConfig OBJECT IDENTIFIER ::= { eltMesIssAaaGlobalConfig 6 }
|
|
|
|
eltMesIssAaaNotificationsPrefix OBJECT IDENTIFIER ::= { eltMesIssAaaNotifications 0 }
|
|
|
|
-- eltMesIssAaaEnableAuthentication OBJECT-TYPE ::= { eltMesIssAaaTacacsGlobalConfig 1 }
|
|
eltMesIssAaaTacacsAttrConfig OBJECT IDENTIFIER ::= { eltMesIssAaaTacacsGlobalConfig 2 }
|
|
|
|
-- ========================================================================== --
|
|
-- Textual Conventions --
|
|
-- ========================================================================== --
|
|
|
|
EltMesIssAaaAuthenticationMethod ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Authentication method."
|
|
SYNTAX INTEGER {
|
|
local(1),
|
|
remoteRadius(2),
|
|
remoteTacacs(3),
|
|
none(4)
|
|
}
|
|
|
|
EltMesIssAaaAuthenticationModeType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Authentication mode. Break stops the process of
|
|
authentication on first failure, chain passes through
|
|
the whole list."
|
|
SYNTAX INTEGER {
|
|
chain(1),
|
|
break(2)
|
|
}
|
|
|
|
EltMesIssAaaLineType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Line type."
|
|
SYNTAX INTEGER {
|
|
console(1),
|
|
telnet(2),
|
|
ssh(3)
|
|
}
|
|
|
|
EltMesIssAaaTacacsAuthenticationType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Tacacs authentication type."
|
|
SYNTAX INTEGER {
|
|
ascii(1),
|
|
pap(2)
|
|
}
|
|
|
|
EltMesIssAaaAuthorizationMethod ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Authorization method."
|
|
SYNTAX INTEGER {
|
|
local(1),
|
|
remoteTacacs(2),
|
|
tacacsFallbackToLocal(3),
|
|
global(255)
|
|
}
|
|
|
|
-- ========================================================================== --
|
|
-- Global Objects --
|
|
-- ========================================================================== --
|
|
|
|
eltMesIssAaaEnableAuthentication OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaAuthenticationMethod
|
|
MAX-ACCESS read-write
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"Configures the mechanism by which the user enable has to be
|
|
authenticated for accessing to manage the switch. Authentication
|
|
is done either locally or in the remote side through a RADIUS Server or TACACS.
|
|
If Authentication is configured as radiusFallbackToLocal or tacacsFallbackToLocal
|
|
then Local authentication provides a back door or a secondary option
|
|
for authentication if the server fails."
|
|
DEFVAL { local }
|
|
::= { eltMesIssAaaGlobalConfig 1 }
|
|
|
|
eltMesIssAaaTacacsAuthenticationType OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaTacacsAuthenticationType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Configures TACACS authentication type."
|
|
DEFVAL { pap }
|
|
::= { eltMesIssAaaTacacsGlobalConfig 1 }
|
|
|
|
eltMesIssAaaAuthenticationMode OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaAuthenticationModeType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Configures the authentication mode (chain or break)
|
|
switch uses to pass through the configured authentication
|
|
lists of methods."
|
|
DEFVAL { break }
|
|
::= { eltMesIssAaaGlobalConfig 5 }
|
|
|
|
-- ========================================================================== --
|
|
-- Method list table --
|
|
-- ========================================================================== --
|
|
|
|
eltMesIssAaaMethodListTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EltMesIssAaaMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The table specifies all methods list per method name."
|
|
::= { eltMesIssAaaMethodGlobalConfig 1 }
|
|
|
|
eltMesIssAaaMethodListEntry OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The row definition for this table."
|
|
INDEX { eltMesIssAaaMethodListName,
|
|
eltMesIssAaaAuthenticationMethodIndex }
|
|
::= { eltMesIssAaaMethodListTable 1 }
|
|
|
|
EltMesIssAaaMethodListEntry ::= SEQUENCE {
|
|
eltMesIssAaaMethodListName DisplayString,
|
|
eltMesIssAaaAuthenticationMethodIndex INTEGER (1..4),
|
|
eltMesIssAaaMethodType EltMesIssAaaAuthenticationMethod,
|
|
eltMesIssAaaMethodRowStatus RowStatus
|
|
}
|
|
|
|
eltMesIssAaaMethodListName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Methods' List Name"
|
|
::= { eltMesIssAaaMethodListEntry 1 }
|
|
|
|
eltMesIssAaaAuthenticationMethodIndex OBJECT-TYPE
|
|
SYNTAX INTEGER (1..4)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Method type index in list.
|
|
The smallest index has the highest priority."
|
|
::= { eltMesIssAaaMethodListEntry 2 }
|
|
|
|
eltMesIssAaaMethodType OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaAuthenticationMethod
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Method type that will be used in the methods'
|
|
list."
|
|
::= { eltMesIssAaaMethodListEntry 3 }
|
|
|
|
eltMesIssAaaMethodRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Method status in the list."
|
|
::= { eltMesIssAaaMethodListEntry 4 }
|
|
|
|
-- ========================================================================== --
|
|
-- Line Config --
|
|
-- ========================================================================== --
|
|
|
|
eltMesIssAaaLineLoginAuthenticationTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EltMesIssAaaLineLoginAuthenticationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of login authentication mechanisms for line."
|
|
::= { eltMesIssAaaLineConfig 1 }
|
|
|
|
eltMesIssAaaLineLoginAuthenticationEntry OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaLineLoginAuthenticationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry containing login authentication mechanism for line."
|
|
INDEX { eltMesIssAaaLineLoginAuthenticationLineType }
|
|
::= { eltMesIssAaaLineLoginAuthenticationTable 1 }
|
|
|
|
EltMesIssAaaLineLoginAuthenticationEntry ::= SEQUENCE {
|
|
eltMesIssAaaLineLoginAuthenticationLineType
|
|
EltMesIssAaaLineType,
|
|
eltMesIssAaaLineLoginMethodListName
|
|
DisplayString
|
|
}
|
|
|
|
eltMesIssAaaLineLoginAuthenticationLineType OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaLineType
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Line type."
|
|
::= { eltMesIssAaaLineLoginAuthenticationEntry 1 }
|
|
|
|
eltMesIssAaaLineLoginMethodListName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Login authentication name of the list of methods for line."
|
|
::= { eltMesIssAaaLineLoginAuthenticationEntry 2 }
|
|
|
|
eltMesIssAaaLineEnableAuthenticationTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EltMesIssAaaLineEnableAuthenticationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of enable authentication mechanisms for line."
|
|
::= { eltMesIssAaaLineConfig 2 }
|
|
|
|
eltMesIssAaaLineEnableAuthenticationEntry OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaLineEnableAuthenticationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry containing enable authentication mechanism for line."
|
|
INDEX { eltMesIssAaaLineEnableAuthenticationLineType }
|
|
::= { eltMesIssAaaLineEnableAuthenticationTable 1 }
|
|
|
|
EltMesIssAaaLineEnableAuthenticationEntry ::=
|
|
SEQUENCE {
|
|
eltMesIssAaaLineEnableAuthenticationLineType
|
|
EltMesIssAaaLineType,
|
|
eltMesIssAaaLineEnableMethodListName
|
|
DisplayString
|
|
}
|
|
|
|
eltMesIssAaaLineEnableAuthenticationLineType OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaLineType
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Line type."
|
|
::= { eltMesIssAaaLineEnableAuthenticationEntry 1 }
|
|
|
|
eltMesIssAaaLineEnableMethodListName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Enable authentication name of the list of methods for line."
|
|
::= { eltMesIssAaaLineEnableAuthenticationEntry 2 }
|
|
|
|
eltMesIssAaaLineIdleTimeoutTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EltMesIssAaaLineIdleTimeoutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of idle timeout configuration for line"
|
|
::= { eltMesIssAaaLineConfig 3 }
|
|
|
|
eltMesIssAaaLineIdleTimeoutEntry OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaLineIdleTimeoutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry containing idle timeout for line."
|
|
INDEX { eltMesIssAaaLineIdleTimeoutLineType }
|
|
::= { eltMesIssAaaLineIdleTimeoutTable 1 }
|
|
|
|
EltMesIssAaaLineIdleTimeoutEntry ::=
|
|
SEQUENCE {
|
|
eltMesIssAaaLineIdleTimeoutLineType
|
|
EltMesIssAaaLineType,
|
|
eltMesIssLineIdleTimeout
|
|
Unsigned32
|
|
}
|
|
|
|
eltMesIssAaaLineIdleTimeoutLineType OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaLineType
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Line type."
|
|
::= { eltMesIssAaaLineIdleTimeoutEntry 1 }
|
|
|
|
eltMesIssLineIdleTimeout OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..18000)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Idle timeout for line."
|
|
DEFVAL { 1800 }
|
|
::= { eltMesIssAaaLineIdleTimeoutEntry 2 }
|
|
|
|
-- ========================================================================== --
|
|
-- WEB authentication config --
|
|
-- ========================================================================== --
|
|
|
|
eltMesIssAaaWebLoginMethodListName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Login authentication name of the list of methods for WEB."
|
|
::= { eltMesIssAaaWebConfig 1 }
|
|
|
|
-- ========================================================================== --
|
|
-- Commands Authorization Rule Global table --
|
|
-- ========================================================================== --
|
|
|
|
eltMesIssAaaCommandAuthorizationTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EltMesIssAaaCommandAuthorizationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of command authorization mechanisms per privilege level."
|
|
::= { eltMesIssAaaGlobalConfig 4 }
|
|
|
|
eltMesIssAaaCommandAuthorizationEntry OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaCommandAuthorizationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry containing command authorization mechanism per privilege level."
|
|
INDEX { eltMesIssAaaCommandAuthorizationPrivilege }
|
|
::= { eltMesIssAaaCommandAuthorizationTable 1 }
|
|
|
|
EltMesIssAaaCommandAuthorizationEntry ::=
|
|
SEQUENCE {
|
|
eltMesIssAaaCommandAuthorizationPrivilege
|
|
Unsigned32 (1..15),
|
|
eltMesIssAaaCommandAuthorizationMethod
|
|
EltMesIssAaaAuthorizationMethod
|
|
}
|
|
|
|
eltMesIssAaaCommandAuthorizationPrivilege OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..15)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"User privilege level."
|
|
::= { eltMesIssAaaCommandAuthorizationEntry 1 }
|
|
|
|
eltMesIssAaaCommandAuthorizationMethod OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaAuthorizationMethod
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Authorization method for privilege."
|
|
DEFVAL { local }
|
|
::= { eltMesIssAaaCommandAuthorizationEntry 2 }
|
|
|
|
-- ========================================================================== --
|
|
-- Commands Authorization Rule per line --
|
|
-- ========================================================================== --
|
|
|
|
eltMesIssAaaLineCommandAuthorizationTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EltMesIssAaaLineCommandAuthorizationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of command authorization mechanisms for line."
|
|
::= { eltMesIssAaaLineConfig 4 }
|
|
|
|
eltMesIssAaaLineCommandAuthorizationEntry OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaLineCommandAuthorizationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry containing command authorization mechanism for line."
|
|
INDEX { eltMesIssAaaLineCommandAuthorizationLineType }
|
|
::= { eltMesIssAaaLineCommandAuthorizationTable 1 }
|
|
|
|
EltMesIssAaaLineCommandAuthorizationEntry ::=
|
|
SEQUENCE {
|
|
eltMesIssAaaLineCommandAuthorizationLineType
|
|
EltMesIssAaaLineType,
|
|
eltMesIssAaaLineCommandAuthorizationMethod
|
|
EltMesIssAaaAuthorizationMethod
|
|
}
|
|
|
|
eltMesIssAaaLineCommandAuthorizationLineType OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaLineType
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Line type."
|
|
::= { eltMesIssAaaLineCommandAuthorizationEntry 1 }
|
|
|
|
eltMesIssAaaLineCommandAuthorizationMethod OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaAuthorizationMethod
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Authorization method for line."
|
|
DEFVAL { global }
|
|
::= { eltMesIssAaaLineCommandAuthorizationEntry 2 }
|
|
|
|
-- ========================================================================== --
|
|
-- TACACS attributes --
|
|
-- ========================================================================== --
|
|
|
|
eltMesIssAaaTacacsAttrPortConfigTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EltMesIssAaaTacacsAttrPortConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of TACACS attributes configuring mechanism."
|
|
::= { eltMesIssAaaTacacsAttrConfig 1 }
|
|
|
|
eltMesIssAaaTacacsAttrPortConfigEntry OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaTacacsAttrPortConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry containing TACACS attributes configuring
|
|
mechanism."
|
|
INDEX { eltMesIssAaaTacacsAttrPortLineType }
|
|
::= { eltMesIssAaaTacacsAttrPortConfigTable 1 }
|
|
|
|
EltMesIssAaaTacacsAttrPortConfigEntry ::=
|
|
SEQUENCE {
|
|
eltMesIssAaaTacacsAttrPortLineType
|
|
EltMesIssAaaLineType,
|
|
eltMesIssAaaTacacsAttrPortFormat
|
|
OCTET STRING
|
|
}
|
|
|
|
eltMesIssAaaTacacsAttrPortLineType OBJECT-TYPE
|
|
SYNTAX EltMesIssAaaLineType
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Line type."
|
|
::= { eltMesIssAaaTacacsAttrPortConfigEntry 1 }
|
|
|
|
eltMesIssAaaTacacsAttrPortFormat OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"User defined string to use as port attribute
|
|
in TACACS packets. Specify port
|
|
string template:
|
|
<%n: line session index>,
|
|
<%%: single %>."
|
|
::= { eltMesIssAaaTacacsAttrPortConfigEntry 2 }
|
|
|
|
-- ========================================================================== --
|
|
-- Notifications --
|
|
-- ========================================================================== --
|
|
|
|
eltMesIssAaaUserTrap NOTIFICATION-TYPE
|
|
OBJECTS { mcTrapDescr }
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A eltMesIssAaaUserTrap is generated when user
|
|
connects/rejects/disconnects from the session."
|
|
::= { eltMesIssAaaNotificationsPrefix 1 }
|
|
|
|
END
|
|
|