4513 lines
153 KiB
Plaintext
4513 lines
153 KiB
Plaintext
ALCATEL-IND1-AAA-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-IDENTITY, OBJECT-TYPE, IpAddress, Unsigned32, NOTIFICATION-TYPE, Integer32
|
|
FROM SNMPv2-SMI
|
|
DisplayString, MacAddress, RowStatus
|
|
FROM SNMPv2-TC
|
|
MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP
|
|
FROM SNMPv2-CONF
|
|
ifIndex FROM IF-MIB
|
|
TEXTUAL-CONVENTION FROM SNMPv2-TC
|
|
SnmpAdminString FROM SNMP-FRAMEWORK-MIB
|
|
InetAddressType, InetAddress
|
|
FROM INET-ADDRESS-MIB
|
|
softentIND1AAA, alaAaaTraps
|
|
FROM ALCATEL-IND1-BASE;
|
|
|
|
|
|
alcatelIND1AAAMIB MODULE-IDENTITY
|
|
LAST-UPDATED "200704030000Z"
|
|
ORGANIZATION "Alcatel-Lucent"
|
|
CONTACT-INFO
|
|
"Please consult with Customer Service to ensure the most appropriate
|
|
version of this document is used with the products in question:
|
|
|
|
Alcatel-Lucent, Enterprise Solutions Division
|
|
(Formerly Alcatel Internetworking, Incorporated)
|
|
26801 West Agoura Road
|
|
Agoura Hills, CA 91301-5122
|
|
United States Of America
|
|
|
|
Telephone: North America +1 800 995 2696
|
|
Latin America +1 877 919 9526
|
|
Europe +31 23 556 0100
|
|
Asia +65 394 7933
|
|
All Other +1 818 878 4507
|
|
|
|
Electronic Mail: support@ind.alcatel.com
|
|
World Wide Web: http://alcatel-lucent.com/wps/portal/enterprise
|
|
File Transfer Protocol: ftp://ftp.ind.alcatel.com/pub/products/mibs"
|
|
|
|
DESCRIPTION
|
|
"This module describes an authoritative enterprise-specific Simple
|
|
Network Management Protocol (SNMP) Management Information Base (MIB):
|
|
|
|
For the Birds Of Prey Product Line
|
|
Authentication, Authorization, and Accounting (AAA) Subsystem.
|
|
|
|
The right to make changes in specification and other information
|
|
contained in this document without prior notice is reserved.
|
|
|
|
No liability shall be assumed for any incidental, indirect, special, or
|
|
consequential damages whatsoever arising from or related to this
|
|
document or the information contained herein.
|
|
|
|
Vendors, end-users, and other interested parties are granted
|
|
non-exclusive license to use this specification in connection with
|
|
management of the products for which it is intended to be used.
|
|
|
|
Copyright (C) 1995-2007 Alcatel-Lucent
|
|
ALL RIGHTS RESERVED WORLDWIDE"
|
|
|
|
REVISION "200704030000Z"
|
|
DESCRIPTION
|
|
"The latest version of this MIB Module."
|
|
|
|
::= { softentIND1AAA 1 }
|
|
|
|
|
|
|
|
alcatelIND1AAAMIBObjects OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Branch For Authentication, Authorization, and Accounting (AAA)
|
|
Subsystem Managed Objects."
|
|
::= { alcatelIND1AAAMIB 1 }
|
|
|
|
|
|
alcatelIND1AAAMIBConformance OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Branch For Authentication, Authorization, and Accounting (AAA)
|
|
Subsystem Conformance Information."
|
|
::= { alcatelIND1AAAMIB 2 }
|
|
|
|
|
|
alcatelIND1AAAMIBGroups OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Branch For Authentication, Authorization, and Accounting (AAA)
|
|
Subsystem Units Of Conformance."
|
|
::= { alcatelIND1AAAMIBConformance 1 }
|
|
|
|
|
|
alcatelIND1AAAMIBCompliances OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Branch For Authentication, Authorization, and Accounting (AAA)
|
|
Subsystem Compliance Statements."
|
|
::= { alcatelIND1AAAMIBConformance 2 }
|
|
|
|
-- Overview of the AAA MIB
|
|
--
|
|
-- this MIB provides configuration of the AAA services including the
|
|
-- servers and the local user database
|
|
--
|
|
|
|
-- AAA server MIB
|
|
|
|
aaaServerMIB OBJECT IDENTIFIER ::= { alcatelIND1AAAMIBObjects 1 }
|
|
|
|
AaasRadNasPortTypeConvention ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Only for Radius Server.
|
|
Indicates the type of the physical port of the
|
|
NAS which is authenticating the user."
|
|
|
|
SYNTAX INTEGER {
|
|
async(0),
|
|
sync(1),
|
|
isdn-sync(2),
|
|
isdn-async-v120(3),
|
|
isdn-async-v110 (4),
|
|
virtual(5),
|
|
piafs(6),
|
|
hdlc-clear-channel(7),
|
|
x25 (8),
|
|
x75 (9),
|
|
g3-fax (10),
|
|
sdsl-symmetric-dsl (11),
|
|
adsl-cap-asymmetric-dsl (12),
|
|
adsl-dmt (13),
|
|
idsl (14),
|
|
ethernet (15),
|
|
xdsl (16),
|
|
cable (17),
|
|
wireless-other (18),
|
|
wireless-ieee-802-11 (19)
|
|
}
|
|
|
|
--
|
|
-- Server configuration table
|
|
--
|
|
|
|
aaaServerTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for each AAA server."
|
|
::= { aaaServerMIB 1 }
|
|
|
|
aaaServerEntry OBJECT-TYPE
|
|
SYNTAX AaaServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An AAA server configuration identified by its protocol
|
|
and its index. An entry is created/removed when a server
|
|
is defined or undefined with IOS configuration commands
|
|
via CLI or by issuing appropriate sets to this table
|
|
using snmp."
|
|
INDEX { aaasName }
|
|
::= { aaaServerTable 1 }
|
|
|
|
AaaServerEntry ::= SEQUENCE
|
|
{
|
|
aaasName DisplayString,
|
|
aaasProtocol INTEGER,
|
|
aaasHostName DisplayString,
|
|
aaasIpAddress IpAddress,
|
|
aaasHostName2 DisplayString,
|
|
aaasIpAddress2 IpAddress,
|
|
aaasRetries INTEGER,
|
|
aaasTimout INTEGER,
|
|
aaasRadKey DisplayString,
|
|
aaasRadAuthPort INTEGER,
|
|
aaasRadAcctPort INTEGER,
|
|
aaasLdapPort INTEGER,
|
|
aaasLdapDn DisplayString,
|
|
aaasLdapPasswd DisplayString,
|
|
aaasLdapSearchBase DisplayString,
|
|
aaasLdapServType INTEGER,
|
|
aaasLdapEnableSsl INTEGER,
|
|
aaasAceClear INTEGER,
|
|
aaasRowStatus RowStatus,
|
|
aaasTacacsKey DisplayString,
|
|
aaasTacacsPort INTEGER,
|
|
aaasHttpPort INTEGER,
|
|
aaasHttpDirectory DisplayString,
|
|
aaasHttpProxyHostName DisplayString,
|
|
aaasHttpProxyIpAddress IpAddress,
|
|
aaasHttpProxyPort INTEGER,
|
|
aaasVrfName DisplayString,
|
|
aaasRadMacAddrCase INTEGER,
|
|
aaasRadNasPort INTEGER,
|
|
aaasRadNasPortId INTEGER,
|
|
aaasRadNasPortType AaasRadNasPortTypeConvention,
|
|
aaasRadMacAddrFormat INTEGER,
|
|
aaasRadUniqueAcctSessionId INTEGER,
|
|
aaasRadMacAddrCaseStatus INTEGER,
|
|
aaasRadServerStatus INTEGER,
|
|
aaasRadHealthstatus INTEGER,
|
|
aaasRadPollInterval INTEGER,
|
|
aaasRadFailoverStatus INTEGER,
|
|
aaasRadUser DisplayString,
|
|
aaasRadPasswd DisplayString,
|
|
aaaRadServerPrimaryStatus INTEGER,
|
|
aaaRadServerBackupStatus INTEGER
|
|
}
|
|
|
|
aaasName OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
This name is given by the operator to refer the server."
|
|
::= { aaaServerEntry 1}
|
|
|
|
aaasProtocol OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
radius(1),
|
|
ldap(2),
|
|
ace(3),
|
|
tacacs(4)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Protocol used with the server:
|
|
radius(1) - RADIUS
|
|
ldap(2) - LDAP
|
|
ace(3) - ACE
|
|
tacacs(4) - TACACS+"
|
|
::= { aaaServerEntry 2}
|
|
|
|
aaasHostName OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 64 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"DNS name of the server host."
|
|
::= { aaaServerEntry 3}
|
|
|
|
aaasIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the server host."
|
|
::= { aaaServerEntry 4}
|
|
|
|
aaasHostName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 64 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"DNS name of the backup server host."
|
|
::= { aaaServerEntry 5}
|
|
|
|
aaasIpAddress2 OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the backup server host."
|
|
::= { aaaServerEntry 6}
|
|
|
|
aaasRetries OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 32 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
" Number of retries the switch makes to the server to
|
|
authenticate a user before trying the next backup server.
|
|
The default value is 3."
|
|
DEFVAL { 3 }
|
|
::= { aaaServerEntry 7}
|
|
|
|
aaasTimout OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 30 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Time-out for server replies to authentication requests.
|
|
The default value is 2."
|
|
DEFVAL { 2 }
|
|
::= { aaaServerEntry 8}
|
|
|
|
aaasRadKey OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 64 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The shared secret is a string of characters known to the switch
|
|
and to the RADIUS server, but it is not sent out over the network.
|
|
The secret can be any text string and must be configured here as
|
|
well as on the server. The secret is stored encrypted using a two
|
|
way algorithm."
|
|
::= { aaaServerEntry 9}
|
|
|
|
|
|
aaasRadAuthPort OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 65535 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For RADIUS server only.
|
|
Port number for authentication request;
|
|
the host is not used for authentication if set to 0.
|
|
The default value is 1645."
|
|
DEFVAL { 1645 }
|
|
::= { aaaServerEntry 10}
|
|
|
|
aaasRadAcctPort OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 65535 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For RADIUS server only.
|
|
Port number for accounting request;
|
|
the host is not used for authentication if set to 0.
|
|
The default value is 1646."
|
|
DEFVAL { 1646 }
|
|
::= { aaaServerEntry 11}
|
|
|
|
aaasLdapPort OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 65535 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For LDAP server only.
|
|
Port number for LDAP server host."
|
|
DEFVAL { 0 }
|
|
::= { aaaServerEntry 12}
|
|
|
|
aaasLdapDn OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 255 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For LDAP server only.
|
|
the super user dn, i.e., the administrative distinguished name
|
|
recognized by the LDAP-enabled directory servers
|
|
(e.g., cn=manager)"
|
|
::= { aaaServerEntry 13}
|
|
|
|
aaasLdapPasswd OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For LDAP server only.
|
|
the super user password, i.e., the administrative password
|
|
recognized by LDAP-enabled directory servers (e.g., secret).
|
|
The secret is stored encrypted using a two way algorithm."
|
|
::= { aaaServerEntry 14}
|
|
|
|
aaasLdapSearchBase OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 64 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For LDAP server only.
|
|
Search base recognized by LDAP-enabled
|
|
directory servers (e.g.,o=company, c=US)."
|
|
::= { aaaServerEntry 15}
|
|
|
|
aaasLdapServType OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
ns(0),
|
|
generic(1),
|
|
netscape(2),
|
|
novell(3),
|
|
sun(4),
|
|
microsoft(5)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For LDAP server only.
|
|
Directory server type used in LDAP Authentication:
|
|
ns(0) - non significant value
|
|
generic(1) - Generic Schema
|
|
netscape(2) - Netscape Directory Server
|
|
novell(3) - Novell NDS
|
|
sun(4) - Sun Directory Services
|
|
microsoft(5) - Microsoft Active Directory"
|
|
DEFVAL { netscape }
|
|
::= { aaaServerEntry 16}
|
|
|
|
aaasLdapEnableSsl OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
ns(0),
|
|
true(1),
|
|
false(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Only for LDAP server.
|
|
Specify if the connection between the swtich and the LDAP server
|
|
use a SSL session."
|
|
DEFVAL { false }
|
|
::= { aaaServerEntry 17}
|
|
|
|
aaasAceClear OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
ns(0),
|
|
true(1),
|
|
false(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Only for ACE server.
|
|
The ACE/Server generates a secrets that it sends to clients
|
|
for authentication. While you cannot configure the secret on
|
|
the switch, you can clear it.
|
|
To clear the current ACE/Server secret, set this OID.
|
|
After clearing the secret on the switch, you must also clear
|
|
the secret from the ACE server."
|
|
DEFVAL { false }
|
|
::= { aaaServerEntry 18}
|
|
|
|
|
|
aaasRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaServerEntry 19}
|
|
|
|
aaasTacacsKey OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 64 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The shared secret is a string of characters known to the switch
|
|
and to the TACACS+ server, but it is not sent out over the network.
|
|
The secret can be any text string and must be configured here as
|
|
well as on the server. The secret is stored encrypted using a two
|
|
way algorithm."
|
|
::= { aaaServerEntry 20}
|
|
|
|
|
|
aaasTacacsPort OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 65535 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For TACACS+ server only.
|
|
Port number for LDAP server host."
|
|
DEFVAL { 49 }
|
|
::= { aaaServerEntry 21}
|
|
|
|
aaasHttpPort OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 65535 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For HTTP server only.
|
|
Port number for LDAP server host."
|
|
::= { aaaServerEntry 22}
|
|
|
|
aaasHttpDirectory OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 64 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For HTTP server only.
|
|
A combination of directory tree and filename where the CRL can be found."
|
|
::= { aaaServerEntry 23}
|
|
|
|
aaasHttpProxyHostName OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 64 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For HTTP server only.
|
|
DNS name of the proxy server."
|
|
::= { aaaServerEntry 24}
|
|
|
|
aaasHttpProxyIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For HTTP server only.
|
|
IP address of the proxy server."
|
|
::= { aaaServerEntry 25}
|
|
|
|
aaasHttpProxyPort OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 65535 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For HTTP server only.
|
|
Port number for HTTP proxy server."
|
|
::= { aaaServerEntry 26}
|
|
|
|
aaasVrfName OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the VRF that the server is on.
|
|
This VRF name is valid only when the server type is RADIUS.
|
|
(aaasProtocol = 1 (Radius)."
|
|
::= { aaaServerEntry 27}
|
|
|
|
aaasRadMacAddrCase OBJECT-TYPE
|
|
SYNTAX INTEGER{
|
|
uppercase (0),
|
|
lowercase (1)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Only for Radius Server.
|
|
This Attribute contains a text string which identifies the case of the Mac Address Authentication."
|
|
DEFVAL {uppercase}
|
|
::= { aaaServerEntry 28}
|
|
|
|
aaasRadNasPort OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
default(0),
|
|
ifindex(1),
|
|
not-applicable(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Only for Radius Server.
|
|
This Attribute contains a text string which identifies the port of
|
|
the NAS which is authenticating the user."
|
|
DEFVAL { default }
|
|
::= { aaaServerEntry 29}
|
|
|
|
aaasRadNasPortId OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Only for Radius Server.
|
|
This Attribute contains a text string which identifies the port of
|
|
the NAS which is authenticating the user."
|
|
DEFVAL { disable }
|
|
::= { aaaServerEntry 30}
|
|
|
|
aaasRadNasPortType OBJECT-TYPE
|
|
SYNTAX AaasRadNasPortTypeConvention
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Only for Radius Server.
|
|
It indicates the type of the physical port of the NAS
|
|
which is authenticating the user."
|
|
DEFVAL { ethernet }
|
|
::= { aaaServerEntry 31 }
|
|
|
|
aaasRadMacAddrFormat OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
uppercase(0),
|
|
lowercase(1)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This Attribute shall set Mac-address-format to uppercase or lowercase.
|
|
By default the format will be uppercase."
|
|
DEFVAL { uppercase }
|
|
::= { aaaServerEntry 32}
|
|
|
|
|
|
aaasRadUniqueAcctSessionId OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Getting command based Accounting Session_ID"
|
|
DEFVAL { disable }
|
|
::= { aaaServerEntry 33}
|
|
|
|
aaasRadMacAddrCaseStatus OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
disable(0),
|
|
enable(1)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"To enable/disable mac-address case feature"
|
|
DEFVAL { disable }
|
|
::= { aaaServerEntry 34}
|
|
|
|
aaasRadServerStatus OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
down(0),
|
|
up(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The current status of the configured server"
|
|
DEFVAL { down }
|
|
::= { aaaServerEntry 35}
|
|
|
|
aaasRadHealthstatus OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"To Enable/Disable Radius-Health-Check feature"
|
|
DEFVAL { disable }
|
|
::= { aaaServerEntry 36 }
|
|
|
|
aaasRadPollInterval OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"To set polling value for each radius server"
|
|
DEFVAL {50}
|
|
::={ aaaServerEntry 37 }
|
|
|
|
aaasRadFailoverStatus OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"To enable/disable failover for radius server"
|
|
DEFVAL { disable }
|
|
::={ aaaServerEntry 38 }
|
|
|
|
aaasRadUser OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Username for Radius server"
|
|
::={ aaaServerEntry 39 }
|
|
|
|
aaasRadPasswd OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Password for radius server"
|
|
::={ aaaServerEntry 40 }
|
|
|
|
aaaRadServerPrimaryStatus OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
down(0),
|
|
up(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of primary server"
|
|
DEFVAL { down }
|
|
::= { aaaServerEntry 41}
|
|
|
|
aaaRadServerBackupStatus OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
down(0),
|
|
up(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of backup server"
|
|
DEFVAL { down }
|
|
::= { aaaServerEntry 42}
|
|
|
|
aaaTacacsServerCmdAuthorization OBJECT-TYPE
|
|
SYNTAX INTEGER{
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Getting command based authorization
|
|
from theTACACS+ server"
|
|
::= {aaaServerMIB 2}
|
|
aaaTacacsServerWaitTime OBJECT-TYPE
|
|
SYNTAX INTEGER(0..200)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the value of wait time from the TACACS+ server"
|
|
DEFVAL { 0 }
|
|
::= {aaaServerMIB 3}
|
|
|
|
-- AAA authentication accounting MIB
|
|
|
|
aaaAuthAcctMIB OBJECT IDENTIFIER ::= { alcatelIND1AAAMIBObjects 2 }
|
|
|
|
--
|
|
-- Authenticated Vlan configuration table
|
|
--
|
|
|
|
aaaAuthVlanTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAuthVlanEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table allow to display and modify the configuration of the
|
|
authentication servers for the authenticated vlans."
|
|
::= { aaaAuthAcctMIB 1 }
|
|
|
|
aaaAuthVlanEntry OBJECT-TYPE
|
|
SYNTAX AaaAuthVlanEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"There can be one or several entries in this table. In case of
|
|
single authority, all vlan are authenticated by the same set of
|
|
servers, the aaatvVlan index is then equal to 0. In case of multiple
|
|
authorities, each authenticated vlan has its own list of servers."
|
|
INDEX { aaatvVlan }
|
|
::= { aaaAuthVlanTable 1 }
|
|
|
|
AaaAuthVlanEntry ::= SEQUENCE
|
|
{
|
|
aaatvVlan INTEGER,
|
|
aaatvName1 DisplayString,
|
|
aaatvName2 DisplayString,
|
|
aaatvName3 DisplayString,
|
|
aaatvName4 DisplayString,
|
|
aaatvRowStatus RowStatus,
|
|
aaatvCertificate INTEGER
|
|
}
|
|
|
|
aaatvVlan OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 65535 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"It indicate the vlan number authenticated by the servers.
|
|
The value (0) means that all vlan are authenticated by the same
|
|
servers (single mode configuration)."
|
|
::= { aaaAuthVlanEntry 1}
|
|
|
|
aaatvName1 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
An Ace server can not be used in front hand."
|
|
::= { aaaAuthVlanEntry 2}
|
|
|
|
aaatvName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
An Ace server can not be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthVlanEntry 3}
|
|
|
|
aaatvName3 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
An Ace server can not be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthVlanEntry 4}
|
|
|
|
aaatvName4 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
An Ace server can not be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthVlanEntry 5}
|
|
|
|
aaatvRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaAuthVlanEntry 6}
|
|
|
|
aaatvCertificate OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
noCertificate(0),
|
|
certificateOnly(1),
|
|
certificateWithPassword(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"use of x509 user certificate during the HTTPs session establisment.
|
|
noCertificate(0)- no user certificate is required,
|
|
certificateOnly(1) - the DN from the certifiicate is used to access to the authorization
|
|
data of the user
|
|
certificateWithPassword(2) - the user must execute a log-in procedure with user
|
|
name and password after his certificate validation"
|
|
DEFVAL { noCertificate }
|
|
::= { aaaAuthVlanEntry 7}
|
|
|
|
|
|
--
|
|
-- Authenticated switch access configuration table
|
|
--
|
|
|
|
aaaAuthSATable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAuthSAEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table allow to display and modify the configuration of the
|
|
authentication servers for the switch accesses."
|
|
::= { aaaAuthAcctMIB 2 }
|
|
|
|
aaaAuthSAEntry OBJECT-TYPE
|
|
SYNTAX AaaAuthSAEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A switch access authentication entry is specified by the type
|
|
of access."
|
|
INDEX { aaatsInterface}
|
|
::= { aaaAuthSATable 1 }
|
|
|
|
AaaAuthSAEntry ::= SEQUENCE
|
|
{
|
|
aaatsInterface INTEGER,
|
|
aaatsName1 DisplayString,
|
|
aaatsName2 DisplayString,
|
|
aaatsName3 DisplayString,
|
|
aaatsName4 DisplayString,
|
|
aaatsRowStatus RowStatus,
|
|
aaatsCertificate INTEGER,
|
|
aaatsName5 DisplayString
|
|
}
|
|
|
|
aaatsInterface OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
default(1),
|
|
console(2),
|
|
telnet(3),
|
|
ftp(4),
|
|
http(5),
|
|
snmp(6),
|
|
ssh(7)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Type of connection that must be authenticated
|
|
default(1) -define the default authentication method for console,
|
|
telnet, ftp, snmp , http and ssh. If the operator
|
|
interface is not especially configured the default value
|
|
is applied to this interface."
|
|
::= { aaaAuthSAEntry 1}
|
|
|
|
|
|
aaatsName1 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
Special value 'local' correspond to the local database.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
snmp entry can only use ldap server and local database."
|
|
::= { aaaAuthSAEntry 2}
|
|
|
|
aaatsName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local database.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
snmp entry can only use ldap server and local database."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthSAEntry 3}
|
|
|
|
aaatsName3 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local database.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
snmp entry can only use ldap server and local database."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthSAEntry 4}
|
|
|
|
aaatsName4 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local database.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
snmp entry can only use ldap server and local database."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthSAEntry 5}
|
|
|
|
aaatsName5 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local database.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
snmp entry can only use ldap server and local database."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthSAEntry 6}
|
|
|
|
aaatsRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaAuthSAEntry 7}
|
|
|
|
aaatsCertificate OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
noCertificate(0),
|
|
certificateOnly(1),
|
|
certificateWithPassword(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"use of x509 user certificate during the HTTPs session establisment.
|
|
noCertificate(0)- no user certificate is required,
|
|
certificateOnly(1) - the DN from the certifiicate is used to access to the authorization
|
|
data of the user
|
|
certificateWithPassword(2) - the user must execute a log-in procedure with user
|
|
name and password after his certificate validation"
|
|
DEFVAL { noCertificate }
|
|
::= { aaaAuthSAEntry 8}
|
|
|
|
--
|
|
-- Accounting configuration table for vlan
|
|
--
|
|
|
|
aaaAcctVlanTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAcctVlanEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table allows to display and configure the accounting
|
|
servers for authenticated Vlans."
|
|
::= { aaaAuthAcctMIB 3 }
|
|
|
|
aaaAcctVlanEntry OBJECT-TYPE
|
|
SYNTAX AaaAcctVlanEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"There can be one or several entries in this table. In case of
|
|
single authority, accounting information for all vlans are sent
|
|
to the same set of servers, the aaatVlan index is then equal to 0. In case of multiple
|
|
authorities, each authenticated vlan has its own list of servers."
|
|
INDEX { aaacvVlan }
|
|
::= { aaaAcctVlanTable 1 }
|
|
|
|
AaaAcctVlanEntry ::= SEQUENCE
|
|
{
|
|
aaacvVlan INTEGER,
|
|
aaacvName1 DisplayString,
|
|
aaacvName2 DisplayString,
|
|
aaacvName3 DisplayString,
|
|
aaacvName4 DisplayString,
|
|
aaacvRowStatus RowStatus
|
|
}
|
|
|
|
|
|
aaacvVlan OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 65535 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Current vlan number.
|
|
The value (0) for avlan interface means that all authenticated
|
|
vlans use the same servers for authentication."
|
|
::= { aaaAcctVlanEntry 1}
|
|
|
|
aaacvName1 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
Special value 'local' correspond to the local log.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
An Ace server can not be used for accounting."
|
|
::= { aaaAcctVlanEntry 2}
|
|
|
|
aaacvName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local log.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
An Ace server can not be used for accounting."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctVlanEntry 3}
|
|
|
|
aaacvName3 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local log.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
An Ace server can not be used for accounting."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctVlanEntry 4}
|
|
|
|
aaacvName4 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local log.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
An Ace server can not be used for accounting."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctVlanEntry 5}
|
|
|
|
aaacvRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaAcctVlanEntry 6}
|
|
|
|
|
|
|
|
--
|
|
-- Accounting configuration table for switch accesses
|
|
--
|
|
|
|
aaaAcctSATable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAcctSAEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for Switch access accounting."
|
|
::= { aaaAuthAcctMIB 4 }
|
|
|
|
aaaAcctSAEntry OBJECT-TYPE
|
|
SYNTAX AaaAcctSAEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Accounting configuration for switch access."
|
|
INDEX { aaacsInterface }
|
|
::= { aaaAcctSATable 1 }
|
|
|
|
AaaAcctSAEntry ::= SEQUENCE
|
|
|
|
{
|
|
aaacsInterface INTEGER,
|
|
aaacsName1 DisplayString,
|
|
aaacsName2 DisplayString,
|
|
aaacsName3 DisplayString,
|
|
aaacsName4 DisplayString,
|
|
aaacsRowStatus RowStatus,
|
|
aaaAccountingSessionIdStatus INTEGER,
|
|
aaacsName5 DisplayString
|
|
}
|
|
|
|
aaacsInterface OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1 .. 1 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For now, accounting for console, telnet, ftp, http, snmp, ssh are stored
|
|
in the same set of servers, the index is always (1)."
|
|
DEFVAL { 1 }
|
|
::= { aaaAcctSAEntry 1}
|
|
|
|
|
|
aaacsName1 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
Special value 'local' correspond to the local log.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
An Ace server can not be used for accounting."
|
|
::= { aaaAcctSAEntry 2}
|
|
|
|
aaacsName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local log.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
An Ace server can not be used for accounting."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctSAEntry 3}
|
|
|
|
aaacsName3 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local log.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
An Ace server can not be used for accounting."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctSAEntry 4}
|
|
|
|
aaacsName4 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local log.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
An Ace server can not be used for accounting."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctSAEntry 5}
|
|
|
|
aaacsRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaAcctSAEntry 6}
|
|
|
|
aaaAccountingSessionIdStatus OBJECT-TYPE
|
|
SYNTAX INTEGER{
|
|
enable(1),
|
|
disable(2)}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Getting command based Accounting Session_ID"
|
|
DEFVAL { disable }
|
|
::= { aaaAcctSAEntry 7}
|
|
|
|
aaacsName5 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of a server used if the precedent is not accessible.
|
|
Special value 'local' correspond to the local log.
|
|
Other name correspond to an index value of the aaaServerTable
|
|
An Ace server can not be used for accounting."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctSAEntry 8}
|
|
|
|
--
|
|
-- Authenticated 802.1x configuration table
|
|
--
|
|
|
|
aaaAuth8021xTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAuth8021xEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for 802.1X authentication."
|
|
::= { aaaAuthAcctMIB 5 }
|
|
|
|
aaaAuth8021xEntry OBJECT-TYPE
|
|
SYNTAX AaaAuth8021xEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"configuration for 802.1X authentication."
|
|
INDEX { aaatxInterface }
|
|
::= { aaaAuth8021xTable 1 }
|
|
|
|
AaaAuth8021xEntry ::= SEQUENCE
|
|
{
|
|
aaatxInterface INTEGER,
|
|
aaatxName1 DisplayString,
|
|
aaatxName2 DisplayString,
|
|
aaatxName3 DisplayString,
|
|
aaatxName4 DisplayString,
|
|
aaatxOpen INTEGER,
|
|
aaatxRowStatus RowStatus,
|
|
aaatxName5 DisplayString
|
|
}
|
|
|
|
|
|
aaatxInterface OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1 .. 1 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For now, the index is always (1)."
|
|
DEFVAL { 1 }
|
|
::= { aaaAuth8021xEntry 1}
|
|
|
|
|
|
aaatxName1 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
::= { aaaAuth8021xEntry 2}
|
|
|
|
aaatxName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuth8021xEntry 3}
|
|
|
|
aaatxName3 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuth8021xEntry 4}
|
|
|
|
aaatxName4 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuth8021xEntry 5}
|
|
|
|
aaatxOpen OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
global(1),
|
|
unique(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Type of port openning after authentication. If open-global(1) the port treats packet with unknown MAC addresses like an un-authenticated port. If open-unique(2), the port drops incomming packet with unknown MAC addresses."
|
|
DEFVAL { unique }
|
|
::= { aaaAuth8021xEntry 6}
|
|
|
|
aaatxRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaAuth8021xEntry 7}
|
|
|
|
aaatxName5 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuth8021xEntry 8}
|
|
|
|
--
|
|
-- Accounting configuration table for 802.1x
|
|
--
|
|
|
|
|
|
aaaAcct8021xTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAcct8021xEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for 802.1X accounting."
|
|
::= { aaaAuthAcctMIB 6 }
|
|
|
|
aaaAcct8021xEntry OBJECT-TYPE
|
|
SYNTAX AaaAcct8021xEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Configuration for 802.1X accounting."
|
|
INDEX { aaacxInterface }
|
|
::= { aaaAcct8021xTable 1 }
|
|
|
|
AaaAcct8021xEntry ::= SEQUENCE
|
|
{
|
|
aaacxInterface INTEGER,
|
|
aaacxName1 DisplayString,
|
|
aaacxName2 DisplayString,
|
|
aaacxName3 DisplayString,
|
|
aaacxName4 DisplayString,
|
|
aaacxRowStatus RowStatus,
|
|
aaacxName5 DisplayString
|
|
}
|
|
|
|
|
|
aaacxInterface OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1 .. 1 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For now, the index is always (1)."
|
|
DEFVAL { 1 }
|
|
::= { aaaAcct8021xEntry 1}
|
|
|
|
aaacxName1 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
::= { aaaAcct8021xEntry 2}
|
|
|
|
aaacxName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAcct8021xEntry 3}
|
|
|
|
aaacxName3 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAcct8021xEntry 4}
|
|
|
|
aaacxName4 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAcct8021xEntry 5}
|
|
|
|
aaacxRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaAcct8021xEntry 6}
|
|
|
|
aaacxName5 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAcct8021xEntry 7}
|
|
|
|
--
|
|
-- Accounting configuration table for MAC
|
|
--
|
|
|
|
|
|
aaaAcctMACTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAcctMACEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for MAC accounting."
|
|
::= { aaaAuthAcctMIB 10 }
|
|
|
|
aaaAcctMACEntry OBJECT-TYPE
|
|
SYNTAX AaaAcctMACEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Configuration for MAC accounting."
|
|
INDEX { aaaAcctSvrInterface }
|
|
::= { aaaAcctMACTable 1 }
|
|
|
|
AaaAcctMACEntry ::= SEQUENCE
|
|
{
|
|
aaaAcctSvrInterface INTEGER,
|
|
aaaAcctSvr1 SnmpAdminString,
|
|
aaaAcctSvr2 SnmpAdminString,
|
|
aaaAcctSvr3 SnmpAdminString,
|
|
aaaAcctSvr4 SnmpAdminString,
|
|
aaaAcctSvrRowStatus RowStatus,
|
|
aaaAcctSvr5 SnmpAdminString
|
|
}
|
|
|
|
|
|
aaaAcctSvrInterface OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1 .. 1 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For now, the index is always (1)."
|
|
DEFVAL { 1 }
|
|
::= { aaaAcctMACEntry 1}
|
|
|
|
aaaAcctSvr1 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
::= { aaaAcctMACEntry 2}
|
|
|
|
aaaAcctSvr2 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctMACEntry 3}
|
|
|
|
aaaAcctSvr3 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctMACEntry 4}
|
|
|
|
aaaAcctSvr4 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctMACEntry 5}
|
|
|
|
aaaAcctSvrRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaAcctMACEntry 6}
|
|
|
|
aaaAcctSvr5 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAcctMACEntry 7}
|
|
|
|
--
|
|
-- PKI agent configuration
|
|
--
|
|
|
|
aaaPkiTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaPkiEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for PKI."
|
|
::= { aaaAuthAcctMIB 7 }
|
|
|
|
aaaPkiEntry OBJECT-TYPE
|
|
SYNTAX AaaPkiEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Configuration for PKI."
|
|
INDEX { aaatpInterface }
|
|
::= { aaaPkiTable 1 }
|
|
|
|
AaaPkiEntry ::= SEQUENCE
|
|
{
|
|
aaatpInterface INTEGER,
|
|
aaatpName1 DisplayString,
|
|
aaatpName2 DisplayString,
|
|
aaatpName3 DisplayString,
|
|
aaatpName4 DisplayString,
|
|
aaatpLevel INTEGER,
|
|
aaatpRowStatus RowStatus
|
|
}
|
|
|
|
|
|
aaatpInterface OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1 .. 1 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For now, the index is always (1)."
|
|
DEFVAL { 1 }
|
|
::= { aaaPkiEntry 1}
|
|
|
|
aaatpName1 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server contening the CRL.
|
|
It corresponds to an index value of the aaaServerTable"
|
|
::= { aaaPkiEntry 2}
|
|
|
|
aaatpName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server contening the CRL.
|
|
It corresponds to an index value of the aaaServerTable"
|
|
DEFVAL { "" }
|
|
::= { aaaPkiEntry 3}
|
|
|
|
aaatpName3 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server contening the CRL.
|
|
It corresponds to an index value of the aaaServerTable"
|
|
DEFVAL { "" }
|
|
::= { aaaPkiEntry 4}
|
|
|
|
aaatpName4 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server contening the CRL.
|
|
It corresponds to an index value of the aaaServerTable"
|
|
DEFVAL { "" }
|
|
::= { aaaPkiEntry 5}
|
|
|
|
aaatpLevel OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
certificate(1),
|
|
notRevoked(2),
|
|
repository(3)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"level of control to do on the user certificate.
|
|
certificate means that there is a valid chain of certificate between the user certificate and a root certificate known by the switch. The root certificates are managed using specific pki commands.
|
|
All certificates are valid and well signed.
|
|
not-revoked means that using CRL or other ways configuring using pki commands the non-revocation of the certificate is checked.
|
|
repository means that after the precedent control, there is a binary comparison of the certificate on the server and the one received during the authorization (instantaneous revocation possible)
|
|
This verification is only possible when the access handler is configured with certificateOnly"
|
|
DEFVAL { certificate }
|
|
::= { aaaPkiEntry 6}
|
|
|
|
aaatpRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaPkiEntry 7}
|
|
|
|
|
|
--
|
|
-- Servers used for MAC based authentication --
|
|
|
|
aaaAuthMACTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAuthMACEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for non-suplicant ( MAC based ) authentication."
|
|
::= { aaaAuthAcctMIB 8 }
|
|
|
|
aaaAuthMACEntry OBJECT-TYPE
|
|
SYNTAX AaaAuthMACEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"configuration for MAC based authentication."
|
|
INDEX { aaatxInterface }
|
|
::= { aaaAuthMACTable 1 }
|
|
|
|
AaaAuthMACEntry ::= SEQUENCE
|
|
{
|
|
aaaMacInterface INTEGER,
|
|
aaaMacSrvrName1 DisplayString,
|
|
aaaMacSrvrName2 DisplayString,
|
|
aaaMacSrvrName3 DisplayString,
|
|
aaaMacSrvrName4 DisplayString,
|
|
aaaMacSrvrRowStatus RowStatus,
|
|
aaaMacSrvrName5 DisplayString
|
|
}
|
|
|
|
|
|
aaaMacInterface OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1 .. 1 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For now, the index is always (1)."
|
|
DEFVAL { 1 }
|
|
::= { aaaAuthMACEntry 1}
|
|
|
|
|
|
aaaMacSrvrName1 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
::= { aaaAuthMACEntry 2}
|
|
|
|
aaaMacSrvrName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthMACEntry 3}
|
|
|
|
aaaMacSrvrName3 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthMACEntry 4}
|
|
|
|
aaaMacSrvrName4 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthMACEntry 5}
|
|
|
|
aaaMacSrvrRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaAuthMACEntry 6}
|
|
|
|
|
|
aaaMacSrvrName5 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
It corresponds to an index value of the aaaServerTable
|
|
Only RADIUS server can be used in front hand."
|
|
DEFVAL { "" }
|
|
::= { aaaAuthMACEntry 7}
|
|
|
|
--
|
|
-- Accounting configuration table for commands
|
|
--
|
|
aaaAcctCmdTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAcctCmdEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table stores the commands that will be logged during an accounting session.
|
|
This feature is valid only for Tacacs+ accounting"
|
|
::= { aaaAuthAcctMIB 9 }
|
|
|
|
aaaAcctCmdEntry OBJECT-TYPE
|
|
SYNTAX AaaAcctCmdEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Tacacs+ Accounting configuration for executed commands."
|
|
INDEX { aaacmdInterface }
|
|
::= { aaaAcctCmdTable 1 }
|
|
|
|
AaaAcctCmdEntry ::= SEQUENCE
|
|
{
|
|
aaacmdInterface INTEGER,
|
|
aaacmdSrvName1 DisplayString,
|
|
aaacmdSrvName2 DisplayString,
|
|
aaacmdSrvName3 DisplayString,
|
|
aaacmdSrvName4 DisplayString,
|
|
aaacmdRowStatus RowStatus,
|
|
aaacmdSrvName5 DisplayString
|
|
}
|
|
|
|
aaacmdInterface OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1 .. 1 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For now, accounting for console, telnet, ftp, http, snmp, ssh are stored
|
|
in the same set of servers, the index is always (1)."
|
|
DEFVAL { 1 }
|
|
::= { aaaAcctCmdEntry 1}
|
|
|
|
|
|
aaacmdSrvName1 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the Tacacs+ server.
|
|
Other name correspond to an index value of the aaaServerTable"
|
|
::= { aaaAcctCmdEntry 2}
|
|
|
|
aaacmdSrvName2 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the Tacacs+ server used if the precedent is not accessible.
|
|
Other name correspond to an index value of the aaaServerTable"
|
|
DEFVAL { "" }
|
|
::= { aaaAcctCmdEntry 3}
|
|
|
|
aaacmdSrvName3 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the Tacacs+ server used if the precedent is not accessible.
|
|
Other name correspond to an index value of the aaaServerTable"
|
|
DEFVAL { "" }
|
|
::= { aaaAcctCmdEntry 4}
|
|
|
|
aaacmdSrvName4 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the Tacacs+ server used if the precedent is not accessible.
|
|
Other name correspond to an index value of the aaaServerTable"
|
|
DEFVAL { "" }
|
|
::= { aaaAcctCmdEntry 5}
|
|
|
|
aaacmdRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaAcctCmdEntry 6}
|
|
|
|
aaacmdSrvName5 OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the Tacacs+ server used if the precedent is not accessible.
|
|
Other name correspond to an index value of the aaaServerTable"
|
|
DEFVAL { "" }
|
|
::= { aaaAcctCmdEntry 7}
|
|
|
|
--
|
|
-- user local database configuration table
|
|
--
|
|
aaaUserMIB OBJECT IDENTIFIER ::= { alcatelIND1AAAMIBObjects 3 }
|
|
|
|
aaaUserTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for the local user database."
|
|
::= { aaaUserMIB 1 }
|
|
|
|
aaaUserEntry OBJECT-TYPE
|
|
SYNTAX AaaUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An user configuration identified by its user name."
|
|
INDEX { aaauUserName }
|
|
::= { aaaUserTable 1 }
|
|
|
|
AaaUserEntry ::= SEQUENCE
|
|
{
|
|
aaauUserName DisplayString,
|
|
aaauPassword DisplayString,
|
|
aaauReadRight1 Unsigned32,
|
|
aaauReadRight2 Unsigned32,
|
|
aaauWriteRight1 Unsigned32,
|
|
aaauWriteRight2 Unsigned32,
|
|
aaauProfile INTEGER,
|
|
aaauSnmpLevel INTEGER,
|
|
aaauSnmpAuthKey OCTET STRING,
|
|
aaauRowStatus RowStatus,
|
|
aaauOldPassword DisplayString,
|
|
aaauEndUserProfile DisplayString,
|
|
aaauPasswordExpirationDate DisplayString,
|
|
aaauPasswordExpirationInMinute INTEGER,
|
|
aaauPasswordAllowModifyDate DisplayString,
|
|
aaauPasswordLockoutEnable INTEGER,
|
|
aaauBadAtempts INTEGER,
|
|
aaauSnmpOnly INTEGER,
|
|
aaauSnmpPrivPassword DisplayString
|
|
}
|
|
|
|
aaauUserName OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 63 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the user."
|
|
::= { aaaUserEntry 1}
|
|
|
|
aaauPassword OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 47 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Password of the user. For get response the password in encoded in a
|
|
one way method. This makes the password readable by noone."
|
|
::= { aaaUserEntry 2}
|
|
|
|
aaauReadRight1 OBJECT-TYPE
|
|
SYNTAX Unsigned32 ( 0 .. 4294967295 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the families that the user can execute with read right.
|
|
Each bit of the 32-bit integer mask represents a command's family
|
|
number. When the family bit is set, the user is allowed to run
|
|
commands of this family.First part of the bitmask.If the value is
|
|
not specified, the value configured for the 'default' user is taken"
|
|
::= { aaaUserEntry 3}
|
|
|
|
aaauReadRight2 OBJECT-TYPE
|
|
SYNTAX Unsigned32 ( 0 .. 4294967295 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the families that the user can execute with read right.
|
|
Each bit of the 32-bit integer mask represents a command's family
|
|
number. When the family bit is set, the user is allowed to run
|
|
commands of this family.Second part of the bitmask.If the value is
|
|
not specified, the value configured for the 'default' user is taken"
|
|
::= { aaaUserEntry 4}
|
|
|
|
|
|
aaauWriteRight1 OBJECT-TYPE
|
|
SYNTAX Unsigned32 ( 0 .. 4294967295 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the families that the user can execute with write right.
|
|
Each bit of the 32-bit integer mask represents a command's family
|
|
number. When the family bit is set, the user is allowed to run commands of
|
|
this family. First part of the bitmask.If the value is
|
|
not specified, the value configured for the 'default' user is taken"
|
|
::= { aaaUserEntry 5}
|
|
|
|
aaauWriteRight2 OBJECT-TYPE
|
|
SYNTAX Unsigned32 ( 0 .. 4294967295 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the families that the user can execute with write right.
|
|
Each bit of the 32-bit integer mask represents a command's family
|
|
number. When the family bit is set, the user is allowed to run commands of
|
|
this family. Second part of the bitmask.If the value is
|
|
not specified, the value configured for the 'default' user is taken"
|
|
::= { aaaUserEntry 6}
|
|
|
|
aaauProfile OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 2147483647 )
|
|
MAX-ACCESS read-create
|
|
STATUS obsolete
|
|
DESCRIPTION
|
|
"Specifies the profile number.
|
|
A profile number in the user account database represents the geographic
|
|
privilege. This number points to an entry in the table of the user profiles."
|
|
DEFVAL { 0 }
|
|
::= { aaaUserEntry 7}
|
|
|
|
aaauSnmpLevel OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
no(1),
|
|
noauth(2),
|
|
sha(3),
|
|
md5(4),
|
|
shaDes(5),
|
|
md5Des(6),
|
|
shaAes(7),
|
|
shaAes192(8),
|
|
shaAes256(9),
|
|
sha3Des(10),
|
|
sha224(11),
|
|
sha256(12),
|
|
sha224Aes(13),
|
|
sha224Aes192(14),
|
|
sha224Aes256(15),
|
|
sha2243Des(16),
|
|
sha256Aes(17),
|
|
sha256Aes192(18),
|
|
sha256Aes256(19),
|
|
sha2563Des(20)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies if the user is authorized to use SNMP and if yes its security level.
|
|
no(1) - Not authorized to use SNMP.
|
|
noauth(2) - SNMPv1,SNMPv2c or SNMPv3 without authentication.
|
|
sha(3) - SNMPv3 with SHA authentication and no encryption.
|
|
md5(4) - SNMPv3 with MD5 authentication and no encryption.
|
|
sha-des(5) - SNMPv3 with SHA authentication and encryption.
|
|
md5-des(6) - SNMPv3 with MD5 authentication and encryption.
|
|
shaAes(7) - SNMPv3 with SHA authentication and Aes encryption.
|
|
shaAes192(8) - SNMPv3 with SHA authentication and Aes192 encryption.
|
|
shaAes256(9) - SNMPv3 with SHA authentication and Aes256 encryption.
|
|
sha3Des(10) - SNMPv3 with SHA authentication and 3Des encryption.
|
|
sha224(11) - SNMPv3 with SHA224 authentication and no encryption.
|
|
sha256(12) - SNMPv3 with SHA256 authentication and no encryption.
|
|
sha224Aes(13) - SNMPv3 with SHA224 authentication and Aes encryption.
|
|
sha224Aes192(14) - SNMPv3 with SHA224 authentication and Aes192 encryption.
|
|
sha224Aes256(15) - SNMPv3 with SHA224 authentication and Aes256 encryption.
|
|
sha2243Des(16) - SNMPv3 with SHA224 authentication and 3Des encryption.
|
|
sha256Aes(17) - SNMPv3 with SHA256 authentication and Aes encryption.
|
|
sha256Aes192(18) - SNMPv3 with SHA256 authentication and Aes192 encryption.
|
|
sha256Aes256(19) - SNMPv3 with SHA256 authentication and Aes256 encryption.
|
|
sha2563Des(20) - SNMPv3 with SHA256 authentication and 3Des encryption.
|
|
If the value is not specified, the value configured for the 'default' user
|
|
is taken"
|
|
::= { aaaUserEntry 8}
|
|
|
|
aaauSnmpAuthKey OBJECT-TYPE
|
|
SYNTAX OCTET STRING ( SIZE( 0 .. 255 ) )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Authentication key of the user. The key is encoded in a two way method.
|
|
The encryption key is deducted from this key."
|
|
::= { aaaUserEntry 9}
|
|
|
|
aaauRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaUserEntry 10}
|
|
|
|
aaauOldPassword OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 47 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Internal use"
|
|
::= { aaaUserEntry 11}
|
|
|
|
aaauEndUserProfile OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the END user profile name."
|
|
::= { aaaUserEntry 12}
|
|
|
|
aaauPasswordExpirationDate OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 16 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The local time of when the password would be expired.
|
|
This date will be reset once the value of
|
|
aaaAsaDefaultPasswordExpirationInDays is updated.
|
|
|
|
Only the following format is valid:
|
|
|
|
mm/dd/yyyy hh:mm
|
|
|
|
where
|
|
mm - month (1-12)
|
|
dd - day (1-31)
|
|
yyyy - year (2000-2050)
|
|
hh - hour (1-24)
|
|
mm - minute (1-59)
|
|
|
|
Password will not be expired if set to empty string"
|
|
::= { aaaUserEntry 13}
|
|
|
|
aaauPasswordExpirationInMinute OBJECT-TYPE
|
|
SYNTAX INTEGER ( -1 .. 216000 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of minutes from now till the password expiration time.
|
|
Setting this object will update aaauPasswordExpirationDate.
|
|
If -1, password will not be expired.
|
|
If 0, password has been expired."
|
|
::= { aaaUserEntry 14}
|
|
|
|
aaauPasswordAllowModifyDate OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 16 ) )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The local time of when the password can be start to be modified.
|
|
This date will be reset once the value of
|
|
aaauPasswordAllowModifyDate is updated.
|
|
|
|
Only the following format is valid:
|
|
|
|
mm/dd/yyyy hh:mm
|
|
|
|
where
|
|
mm - month (1-12)
|
|
dd - day (1-31)
|
|
yyyy - year (2000-2050)
|
|
hh - hour (1-24)
|
|
mm - minute (1-59)
|
|
|
|
Password will not be expired if set to empty string"
|
|
::= { aaaUserEntry 15}
|
|
|
|
aaauPasswordLockoutEnable OBJECT-TYPE
|
|
SYNTAX INTEGER {lockout(1),unlock(2),expired(3)}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicate whether this account is locked out."
|
|
DEFVAL { unlock }
|
|
::= { aaaUserEntry 16}
|
|
|
|
aaauBadAtempts OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 999 )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number bad password attempts in the observation window."
|
|
DEFVAL { 0 }
|
|
::= { aaaUserEntry 17}
|
|
|
|
aaauSnmpOnly OBJECT-TYPE
|
|
SYNTAX INTEGER {enable(1),disable(2)}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Enable or disable User SNMP only restriction"
|
|
DEFVAL { disable }
|
|
::= { aaaUserEntry 18}
|
|
|
|
aaauSnmpPrivPassword OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 8 .. 30 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Privacy Password of the user. For get response the password in encoded in a
|
|
one way method. This makes the password readable by none."
|
|
::= { aaaUserEntry 19}
|
|
|
|
--
|
|
-- Authenticated users table
|
|
--
|
|
|
|
aaaAuthenticatedUserTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAuthenticatedUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Provide the list of users currently authenticated into the
|
|
switch for bridging purpose."
|
|
::= { alcatelIND1AAAMIBObjects 4 }
|
|
|
|
aaaAuthenticatedUserEntry OBJECT-TYPE
|
|
SYNTAX AaaAuthenticatedUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry in the AaaAuthenticatedUserTable."
|
|
INDEX {aaaaMacAddress}
|
|
::= { aaaAuthenticatedUserTable 1 }
|
|
|
|
AaaAuthenticatedUserEntry ::= SEQUENCE
|
|
{
|
|
aaaaMacAddress MacAddress,
|
|
aaaaUserName DisplayString,
|
|
aaaaSlot INTEGER,
|
|
aaaaPort INTEGER,
|
|
aaaaVlan INTEGER,
|
|
aaaaDrop INTEGER
|
|
}
|
|
|
|
aaaaMacAddress OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Mac address of the user's device."
|
|
::= { aaaAuthenticatedUserEntry 1 }
|
|
|
|
aaaaUserName OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Login name of the user."
|
|
::= { aaaAuthenticatedUserEntry 2 }
|
|
|
|
aaaaSlot OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 2147483647 )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Slot number on which user is connected."
|
|
::= { aaaAuthenticatedUserEntry 3 }
|
|
|
|
aaaaPort OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 2147483647 )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number on which the user is connected."
|
|
::= { aaaAuthenticatedUserEntry 4 }
|
|
|
|
aaaaVlan OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 65535 )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Vlan number on which the user is authenticated."
|
|
::= { aaaAuthenticatedUserEntry 5 }
|
|
|
|
aaaaDrop OBJECT-TYPE
|
|
SYNTAX INTEGER { true(1), false(2) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Allow to remove a Mac address from a Vlan.
|
|
The corresponding user is logged out of the network."
|
|
DEFVAL { false }
|
|
::= { aaaAuthenticatedUserEntry 6 }
|
|
|
|
|
|
|
|
-- Authenticated vlan specific configuration MIB
|
|
|
|
aaaAvlanConfig OBJECT IDENTIFIER ::= { alcatelIND1AAAMIBObjects 5 }
|
|
|
|
--
|
|
-- Authenticated vlan configuration group
|
|
--
|
|
|
|
aaaAvlanDnsName OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 255 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Dns name used to get the authentication Web
|
|
page when authenticating using http."
|
|
::= { aaaAvlanConfig 1}
|
|
|
|
|
|
aaaAvlanDhcpDefGateway OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address that is used as the DHCP gateway address
|
|
before the user get authenticated.It specifies the subnet
|
|
into which a client receives its IP address prior to
|
|
authentication"
|
|
::= { aaaAvlanConfig 2}
|
|
|
|
aaaAvlanDefaultTraffic OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
ns(0),
|
|
true(1),
|
|
false(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Enable the traffic in the default vlan prior to authentication
|
|
if the value is true"
|
|
::= { aaaAvlanConfig 3}
|
|
|
|
aaaAvlanPortBound OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
ns(0),
|
|
true(1),
|
|
false(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Associate a MAC address to a specific Vlan on an authenticated
|
|
port (printers, ...)"
|
|
::= { aaaAvlanConfig 4}
|
|
|
|
aaaAvlanLanguage OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
ns(0),
|
|
true(1),
|
|
false(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Force to read the language specific file for HTTP AVLAN (label.txt)"
|
|
::= { aaaAvlanConfig 5}
|
|
|
|
|
|
-- ASA specific configuration MIB
|
|
|
|
aaaAsaConfig OBJECT IDENTIFIER ::= { alcatelIND1AAAMIBObjects 6 }
|
|
|
|
--
|
|
-- ASA configuration group
|
|
--
|
|
|
|
aaaAsaPasswordSizeMin OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 14 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Minimum number of digits of the passwords
|
|
( nominator aaauPassword)."
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 1}
|
|
|
|
aaaAsaDefaultPasswordExpirationInDays OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 150 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Default password expiration time in days to be applied to all users.
|
|
Updating this object will reset aaauPasswordExpirationDate.
|
|
Password expiration will not be enforced if set to 0."
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 2}
|
|
|
|
aaaAsaPasswordContainUserName OBJECT-TYPE
|
|
SYNTAX INTEGER {enable(1),disable(2)}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicate whether check password contains username or not."
|
|
DEFVAL { disable }
|
|
::= { aaaAsaConfig 3}
|
|
|
|
aaaAsaPasswordMinUpperCase OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 7 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Minimum number of English uppercase characters required for password. 0 is disable"
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 4}
|
|
|
|
aaaAsaPasswordMinLowerCase OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 7 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Minimum number of English lowercase characters required for password 0 is disable."
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 5}
|
|
|
|
aaaAsaPasswordMinDigit OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 7 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Minimum number of base-10 digits required for password. 0 is disable"
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 6}
|
|
|
|
aaaAsaPasswordMinNonAlphan OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 7 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Minimum number of non-alphanumeric required for password. 0 is disable"
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 7}
|
|
|
|
aaaAsaPasswordHistory OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 24 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Password history feature will prevent users from repeatedly using the same password. 0 is disable"
|
|
DEFVAL { 4 }
|
|
::= { aaaAsaConfig 8}
|
|
|
|
aaaAsaPasswordMinAge OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 150 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The password can't be modified in these days. 0 is disable"
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 9}
|
|
|
|
aaaAsaLockoutWindow OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 99999 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The window of time in which the system increments the bad logon count.(minutes) 0 is disable"
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 10}
|
|
|
|
aaaAsaLockoutDuration OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 99999 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The amount of time that an account is locked due to the aaauLockoutThreshold being exceeded.(minutes) 0 is disable"
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 11}
|
|
|
|
aaaAsaLockoutThreshold OBJECT-TYPE
|
|
SYNTAX INTEGER ( 0 .. 999 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of invalid logon attempts that are permitted before the account is locked out. 0 is disable"
|
|
DEFVAL { 0 }
|
|
::= { aaaAsaConfig 12}
|
|
|
|
|
|
aaaAsaROUserPingTrtEnable OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
disable (0),
|
|
enable (1)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS obsolete
|
|
DESCRIPTION
|
|
"Global user config to allow/deny ping
|
|
and traceroute cmds for read-only user.
|
|
0 - disable
|
|
1 - enable "
|
|
DEFVAL { disable }
|
|
::= { aaaAsaConfig 13}
|
|
|
|
aaaAsaAccessPolicyAdminConsoleOnly OBJECT-TYPE
|
|
SYNTAX INTEGER {enable(1),disable(2)}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Enable or disable AdminUser console only restriction"
|
|
DEFVAL { disable }
|
|
::= { aaaAsaConfig 14}
|
|
|
|
aaaAsaCertPassword OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Password to be used for reading certificate"
|
|
::= { aaaAsaConfig 15}
|
|
|
|
aaaAsaAccessMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
default (0),
|
|
enhanced (1)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Globally sets the access mode as enhanced or default.
|
|
0 - default
|
|
1 - enhanced "
|
|
DEFVAL { default }
|
|
::= { aaaAsaConfig 16}
|
|
|
|
aaaAsaIpLockoutThreshold OBJECT-TYPE
|
|
SYNTAX INTEGER(0..999)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the value of the threshold for failed login attempts from an IP address after which the IP address will be banned from switch access"
|
|
DEFVAL { 6 }
|
|
::= {aaaAsaConfig 17}
|
|
|
|
aaaSwitchAccessMgmtStationState OBJECT-TYPE
|
|
SYNTAX INTEGER {enable(1),disable(2)}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Enable or disable Management station in Enhanced mode"
|
|
DEFVAL { disable }
|
|
::= { aaaAsaConfig 18}
|
|
|
|
|
|
-- Authenticated IP address vlan specific configuration MIB
|
|
|
|
aaaAvlanAddressTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaAvlanAddressEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Vlan authenticated IP address Table"
|
|
::= { alcatelIND1AAAMIBObjects 7 }
|
|
|
|
aaaAvlanAddressEntry OBJECT-TYPE
|
|
SYNTAX AaaAvlanAddressEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Vlan authenticated IP address entry"
|
|
INDEX {aaaAvlanId}
|
|
::= { aaaAvlanAddressTable 1 }
|
|
|
|
AaaAvlanAddressEntry ::= SEQUENCE
|
|
{
|
|
aaaAvlanId INTEGER,
|
|
aaaAvlanIpAddress IpAddress
|
|
|
|
}
|
|
|
|
aaaAvlanId OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1 .. 4094 )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Vlan Id corresponding to the authenticated IP address"
|
|
::= { aaaAvlanAddressEntry 1 }
|
|
|
|
aaaAvlanIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Authenticated IP address for this vlan id"
|
|
::= { aaaAvlanAddressEntry 2}
|
|
|
|
|
|
|
|
-- User Network Profile Table configuration MIB
|
|
|
|
aaaUserNetProfileTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaUserNetProfileEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"User Network Profile Table"
|
|
::= { alcatelIND1AAAMIBObjects 8 }
|
|
|
|
aaaUserNetProfileEntry OBJECT-TYPE
|
|
SYNTAX AaaUserNetProfileEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"User Network Profile entry"
|
|
INDEX {aaaUserNetProfileName}
|
|
::= {aaaUserNetProfileTable 1 }
|
|
|
|
AaaUserNetProfileEntry ::= SEQUENCE
|
|
{
|
|
aaaUserNetProfileName DisplayString,
|
|
aaaUserNetProfileVlanID INTEGER,
|
|
aaaUserNetProfileRowStatus RowStatus,
|
|
aaaUserNetProfileHICflag INTEGER,
|
|
aaaUserNetProfileQosPolicyListName DisplayString,
|
|
aaaUserNetProfileMaxIngressBw Integer32,
|
|
aaaUserNetProfileMaxEgressBw Integer32,
|
|
aaaUserNetProfileMaxDefaultDepth Integer32,
|
|
aaaUserNetworkProfileRedirectUrl SnmpAdminString
|
|
}
|
|
|
|
aaaUserNetProfileName OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 1 .. 32 ) )
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The name of this profile."
|
|
::= { aaaUserNetProfileEntry 1 }
|
|
|
|
aaaUserNetProfileVlanID OBJECT-TYPE
|
|
SYNTAX INTEGER (1 .. 4094)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The VLAN id for this profile."
|
|
::= { aaaUserNetProfileEntry 2}
|
|
|
|
aaaUserNetProfileRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
::= { aaaUserNetProfileEntry 3}
|
|
|
|
aaaUserNetProfileHICflag OBJECT-TYPE
|
|
SYNTAX INTEGER (1 .. 2)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The flag to indicate if HIC is enabled (1) or disabled (2)."
|
|
::= { aaaUserNetProfileEntry 4}
|
|
|
|
aaaUserNetProfileQosPolicyListName OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 1 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The name of the QoS Policy List name that will be used if this
|
|
User Network Profile is applied for a given device along with
|
|
aaaUserNetProfileVlanID."
|
|
::= { aaaUserNetProfileEntry 5 }
|
|
|
|
aaaUserNetProfileMaxIngressBw OBJECT-TYPE
|
|
SYNTAX Integer32 (-1 .. 10000000)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION "Maximum Ingress Bandwidth (Kbits/sec) allowed for traffic associated to this profile.
|
|
If -1, specifies Not Applicable Bandwidth means Ingress Bw will not be applied."
|
|
DEFVAL { -1 }
|
|
::= { aaaUserNetProfileEntry 6 }
|
|
|
|
aaaUserNetProfileMaxEgressBw OBJECT-TYPE
|
|
SYNTAX Integer32 (-1 .. 10000000)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION "Maximum Egress Bandwidth (Kbits/sec) allowed for traffic associated to this profile.
|
|
If -1, specifies Not Applicable Bandwidth means Egress Bw will not be applied."
|
|
DEFVAL { -1 }
|
|
::= { aaaUserNetProfileEntry 7 }
|
|
|
|
aaaUserNetProfileMaxDefaultDepth OBJECT-TYPE
|
|
SYNTAX Integer32 (-1 .. 131072)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION "Maximum Default Depth (Kbits/sec) associated to Bandwidth.
|
|
If -1, specifies Not Applicable Depth.For depth value of -1
|
|
and 0 default optimal depth will be applied, otherwise BW will
|
|
be applied with depth specified"
|
|
DEFVAL { -1 }
|
|
::= { aaaUserNetProfileEntry 8 }
|
|
|
|
aaaUserNetworkProfileRedirectUrl OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The redirection url is used to re-direct to the Clearpass page for the BYOD feature."
|
|
::= { aaaUserNetProfileEntry 9 }
|
|
-- Radius Agent IP Information
|
|
|
|
aaaRadAgentConfig OBJECT-TYPE
|
|
SYNTAX INTEGER (1 .. 3)
|
|
MAX-ACCESS read-write
|
|
STATUS obsolete
|
|
DESCRIPTION
|
|
"The Agent Config Information
|
|
1 -- Default(Loopback0 or closest IP)
|
|
2 -- Non Loopback0
|
|
3 -- Interface IP Specified by User
|
|
This object has been obsoleted. Use the alaIpManagedIntfEntry objects
|
|
in AlcatelIND1Ip.mib"
|
|
DEFVAL { 1 }
|
|
::= { alcatelIND1AAAMIBObjects 9}
|
|
|
|
aaaRadAgentIP OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS obsolete
|
|
DESCRIPTION
|
|
"The Agent IP Address in Radius Packets.
|
|
This object has been obsoleted. Use the alaIpManagedIntfEntry
|
|
objects in AlcatelIND1Ip.mib"
|
|
::= { alcatelIND1AAAMIBObjects 10}
|
|
|
|
|
|
-- START: AAA HIC-Related MIB ------------------
|
|
aaaHicConfig OBJECT IDENTIFIER ::= { alcatelIND1AAAMIBObjects 11 }
|
|
|
|
-- HIC Server Table MIB --
|
|
|
|
aaaHicSvrTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaHicSvrEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for each HIC server."
|
|
::= { aaaHicConfig 1 }
|
|
|
|
aaaHicSvrEntry OBJECT-TYPE
|
|
SYNTAX AaaHicSvrEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A HIC server configuration."
|
|
INDEX { aaaHicSvrName }
|
|
::= { aaaHicSvrTable 1 }
|
|
|
|
AaaHicSvrEntry ::= SEQUENCE
|
|
{
|
|
aaaHicSvrName SnmpAdminString,
|
|
aaaHicSvrIpAddr IpAddress,
|
|
aaaHicSvrPort INTEGER,
|
|
aaaHicSvrKey SnmpAdminString,
|
|
aaaHicSvrRowStatus RowStatus,
|
|
aaaHicSvrStatus INTEGER,
|
|
aaaHicSvrRole INTEGER,
|
|
aaaHicSvrConnection INTEGER
|
|
}
|
|
|
|
aaaHicSvrName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
This name is given by the operator to refer the server."
|
|
::= { aaaHicSvrEntry 1}
|
|
|
|
aaaHicSvrIpAddr OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the server host."
|
|
::= { aaaHicSvrEntry 2}
|
|
|
|
|
|
aaaHicSvrPort OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1025 .. 65535 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"For HIC server only. Port number for HIC request"
|
|
DEFVAL { 11707 }
|
|
::= { aaaHicSvrEntry 3}
|
|
|
|
aaaHicSvrKey OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The shared secret is a string of characters known to the switch
|
|
and to the HIC server. It is used to compute the digest to
|
|
preserve the integrity between the HIC server and the AoS Switch.
|
|
The secret is stored encrypted using a two way algorithm."
|
|
::= { aaaHicSvrEntry 4}
|
|
|
|
aaaHicSvrRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
::= { aaaHicSvrEntry 5}
|
|
|
|
aaaHicSvrStatus OBJECT-TYPE
|
|
SYNTAX INTEGER {down(1), up(2)}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"HIC server status."
|
|
DEFVAL { down }
|
|
::= { aaaHicSvrEntry 6}
|
|
|
|
aaaHicSvrRole OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
primary(1),
|
|
backup(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Role of the server either primary or backup"
|
|
DEFVAL { primary }
|
|
::= { aaaHicSvrEntry 7}
|
|
|
|
aaaHicSvrConnection OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
active(1),
|
|
inactive(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The server connection specifies the current mode of the server either active or inactive."
|
|
DEFVAL { inactive }
|
|
::= { aaaHicSvrEntry 8}
|
|
|
|
|
|
-- HIC Allowed/Exception IP Table MIB --
|
|
|
|
aaaHicAllowedTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaHicAllowedEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table contains the list of allowed/exception IP Addresses the
|
|
the HIC hosts allowed to access during HIC. Those are the IP addresses
|
|
of the Remediation/Patch servers, and the Web Agent Download server."
|
|
::= { aaaHicConfig 2 }
|
|
|
|
aaaHicAllowedEntry OBJECT-TYPE
|
|
SYNTAX AaaHicAllowedEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A Remediation server configuration."
|
|
INDEX { aaaHicAllowedName }
|
|
::= { aaaHicAllowedTable 1 }
|
|
|
|
AaaHicAllowedEntry ::= SEQUENCE
|
|
{
|
|
aaaHicAllowedName SnmpAdminString,
|
|
aaaHicAllowedIpAddr IpAddress,
|
|
aaaHicAllowedIpMask IpAddress,
|
|
aaaHicAllowedRowStatus RowStatus
|
|
}
|
|
|
|
aaaHicAllowedName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the server.
|
|
This name is given by the operator to refer the server."
|
|
::= { aaaHicAllowedEntry 1}
|
|
|
|
aaaHicAllowedIpAddr OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the allowed entry."
|
|
::= { aaaHicAllowedEntry 2}
|
|
|
|
aaaHicAllowedIpMask OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP Mask of the allowed entry."
|
|
DEFVAL { 'ffffffff'h }
|
|
::= { aaaHicAllowedEntry 3}
|
|
|
|
aaaHicAllowedRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
::= { aaaHicAllowedEntry 4}
|
|
|
|
-- HIC Override MAC Table MIB --
|
|
|
|
aaaHicOverrideTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaHicOverrideEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows list of MAC addresses that overrides the
|
|
existing HIC status."
|
|
::= { aaaHicConfig 3 }
|
|
|
|
aaaHicOverrideEntry OBJECT-TYPE
|
|
SYNTAX AaaHicOverrideEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"HIC MAC override list configuration."
|
|
INDEX { aaaHicOverrideMac }
|
|
::= { aaaHicOverrideTable 1 }
|
|
|
|
AaaHicOverrideEntry ::= SEQUENCE
|
|
{
|
|
aaaHicOverrideMac MacAddress,
|
|
aaaHicOverrideStatus INTEGER,
|
|
aaaHicOverrideRowStatus RowStatus
|
|
}
|
|
|
|
aaaHicOverrideMac OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Static MAC address index to each override entry."
|
|
::= { aaaHicOverrideEntry 1}
|
|
|
|
aaaHicOverrideStatus OBJECT-TYPE
|
|
SYNTAX INTEGER {enforce(1),bypass(2)}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Overriding status of each static MAC address."
|
|
DEFVAL { enforce }
|
|
::= { aaaHicOverrideEntry 2}
|
|
|
|
aaaHicOverrideRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
::= { aaaHicOverrideEntry 3}
|
|
|
|
|
|
-- HIC Host Table MIB --
|
|
|
|
aaaHicHostTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaHicHostEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows list of HIC Hosts and their active HIC status."
|
|
::= { aaaHicConfig 4 }
|
|
|
|
aaaHicHostEntry OBJECT-TYPE
|
|
SYNTAX AaaHicHostEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"HIC Host status information."
|
|
INDEX { aaaHicHostMac }
|
|
::= { aaaHicHostTable 1 }
|
|
|
|
AaaHicHostEntry ::= SEQUENCE
|
|
{
|
|
aaaHicHostMac MacAddress,
|
|
aaaHicHostStatus INTEGER
|
|
}
|
|
|
|
aaaHicHostMac OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Static MAC address index to each override entry."
|
|
::= { aaaHicHostEntry 1}
|
|
|
|
aaaHicHostStatus OBJECT-TYPE
|
|
SYNTAX INTEGER {inprogress(1),success(2),fail(3),timeout(4)}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"HIC status of each HIC Host."
|
|
DEFVAL { fail }
|
|
::= { aaaHicHostEntry 2}
|
|
|
|
-- Global HIC Configuration Information --
|
|
aaaHicConfigInfo OBJECT IDENTIFIER ::= { aaaHicConfig 5 }
|
|
|
|
aaaHicStatus OBJECT-TYPE
|
|
SYNTAX INTEGER {enable(1), disable(2)}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"HIC Status. The HIC server has to be configured before HIC
|
|
can be enabled."
|
|
DEFVAL { disable }
|
|
::= { aaaHicConfigInfo 1}
|
|
|
|
aaaHicAllowed1Name OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 31 ) )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the rem server.
|
|
This name is given by the operator to refer the remediation server."
|
|
::= { aaaHicConfigInfo 2}
|
|
|
|
aaaHicAllowed2Name OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 31 ) )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the rem server.
|
|
This name is given by the operator to refer the alternate remediation server."
|
|
::= { aaaHicConfigInfo 3}
|
|
|
|
aaaHicAllowed3Name OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 31 ) )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the rem server.
|
|
This name is given by the operator to refer the alternate remediation server."
|
|
::= { aaaHicConfigInfo 4}
|
|
|
|
aaaHicAllowed4Name OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 31 ) )
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the rem server.
|
|
This name is given by the operator to refer the alternate remediation server."
|
|
::= { aaaHicConfigInfo 5 }
|
|
|
|
aaaHicWebAgentDownloadUrl OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 0 .. 127 ) )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The URL for web agent download."
|
|
::= { aaaHicConfigInfo 6}
|
|
|
|
aaaHicCustomHttpProxyPort OBJECT-TYPE
|
|
SYNTAX INTEGER ( 1025 .. 65535 )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The custom HTTP port for QoS to intercept the host's initial HTTP request."
|
|
DEFVAL { 8080 }
|
|
::= { aaaHicConfigInfo 7}
|
|
|
|
aaaHicBgPollInterval OBJECT-TYPE
|
|
SYNTAX Integer32( 16 .. 256 )
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Background-poll-interval provides time frequency in seconds for background polling packets."
|
|
DEFVAL { 16 }
|
|
::= { aaaHicConfigInfo 8}
|
|
|
|
aaaHicSvrFailMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
hold(1),
|
|
passthrough(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The server-failure-mode specifies the policy to be followed in case both the servers are not reachable, value can be either passthrough or hold"
|
|
DEFVAL { hold }
|
|
::= { aaaHicConfigInfo 9}
|
|
|
|
|
|
|
|
-- END: AAA HIC-Related MIB ------------------
|
|
|
|
|
|
|
|
-- AAA Classification IP network address rule ***
|
|
|
|
aaaUNPIpNetRuleTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaUNPIpNetRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of IP network address rules. This is used to match
|
|
the InetAddress of a packet to a User Network Profile entry."
|
|
::= { alcatelIND1AAAMIBObjects 12 }
|
|
|
|
aaaUNPIpNetRuleEntry OBJECT-TYPE
|
|
SYNTAX AaaUNPIpNetRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An IP network address rule entry."
|
|
INDEX { aaaUNPIpNetRuleAddrType,
|
|
aaaUNPIpNetRuleAddr,
|
|
aaaUNPIpNetRuleMask }
|
|
::= { aaaUNPIpNetRuleTable 1 }
|
|
|
|
AaaUNPIpNetRuleEntry ::= SEQUENCE {
|
|
aaaUNPIpNetRuleAddrType
|
|
InetAddressType,
|
|
aaaUNPIpNetRuleAddr
|
|
InetAddress,
|
|
aaaUNPIpNetRuleMask
|
|
InetAddress,
|
|
aaaUNPIpNetRuleProfileName
|
|
SnmpAdminString,
|
|
aaaUNPIpNetRuleRowStatus
|
|
RowStatus
|
|
}
|
|
|
|
aaaUNPIpNetRuleAddrType OBJECT-TYPE
|
|
SYNTAX InetAddressType
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP network address type used for VLAN classification. For now
|
|
Only IPv4 is supported."
|
|
::= { aaaUNPIpNetRuleEntry 1 }
|
|
|
|
aaaUNPIpNetRuleAddr OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP network address used for VLAN classification. Only IPv4 is
|
|
supported."
|
|
::= { aaaUNPIpNetRuleEntry 2 }
|
|
|
|
aaaUNPIpNetRuleMask OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP network mask applying to the IP network address."
|
|
::= { aaaUNPIpNetRuleEntry 3 }
|
|
|
|
|
|
aaaUNPIpNetRuleProfileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The profile name in the User Network Profile Table to be
|
|
applied."
|
|
::= { aaaUNPIpNetRuleEntry 4 }
|
|
|
|
aaaUNPIpNetRuleRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Row Status for creating/deleting rules."
|
|
::= { aaaUNPIpNetRuleEntry 5 }
|
|
|
|
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
|
|
|
|
-- AAA Classification MAC address rule ***
|
|
|
|
aaaUNPMacRuleTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaUNPMacRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of MAC address rules. This is used to match
|
|
the MAC Address of a packet to a User Network Profile entry "
|
|
::= { alcatelIND1AAAMIBObjects 13 }
|
|
|
|
aaaUNPMacRuleEntry OBJECT-TYPE
|
|
SYNTAX AaaUNPMacRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A MAC rule entry."
|
|
INDEX {aaaUNPMacRuleAddr }
|
|
::= { aaaUNPMacRuleTable 1 }
|
|
|
|
AaaUNPMacRuleEntry ::= SEQUENCE {
|
|
aaaUNPMacRuleAddr
|
|
MacAddress,
|
|
aaaUNPMacRuleProfileName
|
|
SnmpAdminString,
|
|
aaaUNPMacRuleRowStatus
|
|
RowStatus
|
|
}
|
|
|
|
aaaUNPMacRuleAddr OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The MAC address used for VLAN classification."
|
|
::= { aaaUNPMacRuleEntry 1 }
|
|
|
|
aaaUNPMacRuleProfileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The profile name in the User Network Profile Table to be
|
|
applied."
|
|
::= { aaaUNPMacRuleEntry 2 }
|
|
|
|
aaaUNPMacRuleRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Row Status for creating/deleting rules."
|
|
::= { aaaUNPMacRuleEntry 3 }
|
|
|
|
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
|
|
-- AAA Classification MAC range rule ***
|
|
|
|
aaaUNPMacRangeRuleTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaUNPMacRangeRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of MAC range rules. This is used to match
|
|
the MAC Address Range of a packet to a User Network Profile entry."
|
|
::= { alcatelIND1AAAMIBObjects 14 }
|
|
|
|
aaaUNPMacRangeRuleEntry OBJECT-TYPE
|
|
SYNTAX AaaUNPMacRangeRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A MAC range rule entry."
|
|
INDEX {aaaUNPMacRangeRuleLoAddr }
|
|
::= { aaaUNPMacRangeRuleTable 1 }
|
|
|
|
AaaUNPMacRangeRuleEntry ::= SEQUENCE {
|
|
aaaUNPMacRangeRuleLoAddr
|
|
MacAddress,
|
|
aaaUNPMacRangeRuleHiAddr
|
|
MacAddress,
|
|
aaaUNPMacRangeRuleProfileName
|
|
SnmpAdminString,
|
|
aaaUNPMacRangeRuleRowStatus
|
|
RowStatus
|
|
}
|
|
|
|
aaaUNPMacRangeRuleLoAddr OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The lower bound of MAC address range used for VLAN classification."
|
|
::= { aaaUNPMacRangeRuleEntry 1 }
|
|
|
|
aaaUNPMacRangeRuleHiAddr OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The upper bound of MAC address range used for VLAN classification."
|
|
::= { aaaUNPMacRangeRuleEntry 2 }
|
|
|
|
aaaUNPMacRangeRuleProfileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The profile name in the User Network Profile Table to be
|
|
applied."
|
|
::= { aaaUNPMacRangeRuleEntry 3 }
|
|
|
|
aaaUNPMacRangeRuleRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Row Status for creating/deleting rules."
|
|
::= { aaaUNPMacRangeRuleEntry 4 }
|
|
|
|
|
|
-- HIC Server down UNP Map Table MIB --
|
|
aaaHicSvrDownUnpMapTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaHicSvrDownUnpMapEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows current configuration for HIC server down UNP mapping."
|
|
::= { alcatelIND1AAAMIBObjects 15 }
|
|
|
|
aaaHicSvrDownUnpMapEntry OBJECT-TYPE
|
|
SYNTAX AaaHicSvrDownUnpMapEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A HIC server down UNP configuration."
|
|
INDEX { aaaHicSvrDownUnpName }
|
|
::= { aaaHicSvrDownUnpMapTable 1 }
|
|
|
|
AaaHicSvrDownUnpMapEntry ::= SEQUENCE
|
|
{
|
|
aaaHicSvrDownUnpName SnmpAdminString,
|
|
aaaHicSvrDownMappedUnpName SnmpAdminString,
|
|
aaaHicSvrDownUnpRowStatus RowStatus
|
|
}
|
|
|
|
|
|
aaaHicSvrDownUnpName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 32 ) )
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The profile name which needs to be modified when the HIC server is down."
|
|
::= { aaaHicSvrDownUnpMapEntry 1 }
|
|
|
|
aaaHicSvrDownMappedUnpName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 32 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The target UNP profile name to which the host needs to be moved when the HIC server is down."
|
|
::= { aaaHicSvrDownUnpMapEntry 2 }
|
|
|
|
aaaHicSvrDownUnpRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Row Status for creating/deleting UNP mapping."
|
|
::= { aaaHicSvrDownUnpMapEntry 3 }
|
|
|
|
-- START: AAA REDIRECT CONFIG-RELATED MIB---------------------
|
|
|
|
aaaRedirectConfig OBJECT IDENTIFIER ::= { alcatelIND1AAAMIBObjects 16 }
|
|
|
|
-- Redirect server config MIB --
|
|
|
|
aaaRedirectServerTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaRedirectServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table is used to configure ClearPass redirect server name with its Ip address and url list."
|
|
::= { aaaRedirectConfig 1 }
|
|
|
|
aaaRedirectServerEntry OBJECT-TYPE
|
|
SYNTAX AaaRedirectServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Redirect server configuration."
|
|
INDEX { aaaRedirectServerName }
|
|
::= { aaaRedirectServerTable 1 }
|
|
|
|
AaaRedirectServerEntry ::= SEQUENCE
|
|
{
|
|
aaaRedirectServerName SnmpAdminString,
|
|
aaaRedirectServerIpAddress IpAddress,
|
|
aaaRedirectServerUrl1 SnmpAdminString,
|
|
aaaRedirectServerUrl2 SnmpAdminString,
|
|
aaaRedirectServerUrl3 SnmpAdminString,
|
|
aaaRedirectServerUrl4 SnmpAdminString,
|
|
aaaRedirectServerUrl5 SnmpAdminString,
|
|
aaaRedirectSvrConfigRowStatus RowStatus
|
|
}
|
|
|
|
aaaRedirectServerName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
" The name of the ClearPass redirect server name."
|
|
::= { aaaRedirectServerEntry 1 }
|
|
|
|
aaaRedirectServerIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Ip Address for the clearpass rediret server for BYOD feature."
|
|
::= { aaaRedirectServerEntry 2 }
|
|
|
|
aaaRedirectServerUrl1 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The redirect URL configured on the server. Maximum it can accept 5 URLs."
|
|
::= { aaaRedirectServerEntry 3 }
|
|
|
|
aaaRedirectServerUrl2 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The redirect URL configured on the server. Maximum it can accept 5 URLs."
|
|
::= { aaaRedirectServerEntry 4 }
|
|
|
|
aaaRedirectServerUrl3 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The redirect URL configured on the server. Maximum it can accept 5 URLs."
|
|
::= { aaaRedirectServerEntry 5 }
|
|
|
|
aaaRedirectServerUrl4 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The redirect URL configured on the server. Maximum it can accept 5 URLs."
|
|
::= { aaaRedirectServerEntry 6 }
|
|
|
|
aaaRedirectServerUrl5 OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The redirect URL configured on the server. Maximum it can accept 5 URLs."
|
|
::= { aaaRedirectServerEntry 7 }
|
|
|
|
aaaRedirectSvrConfigRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Rowstatus of the Redirect Server Entry."
|
|
::= { aaaRedirectServerEntry 8 }
|
|
|
|
-- END: Redirect server config MIB --
|
|
|
|
-- AAA Redirect URL config MIB --
|
|
|
|
aaaRedirectUrlConfigTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaRedirectURLEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table is used to configure redirect URLs for the redirection to happen."
|
|
::= { aaaRedirectConfig 2 }
|
|
|
|
aaaRedirectURLEntry OBJECT-TYPE
|
|
SYNTAX AaaRedirectURLEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Redirect URL configuration.Maximum 5 entries can be allowed"
|
|
INDEX { aaaRedirectServerUrlName }
|
|
::= { aaaRedirectUrlConfigTable 1 }
|
|
|
|
AaaRedirectURLEntry ::= SEQUENCE
|
|
{
|
|
aaaRedirectServerUrlName SnmpAdminString,
|
|
aaaRedirectServerUrl SnmpAdminString,
|
|
aaaRedirectServerRowStatus RowStatus
|
|
}
|
|
|
|
aaaRedirectServerUrlName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The name of the redirect URL.At maximum 5 redirect URLS can be allowed per switch."
|
|
::= { aaaRedirectURLEntry 1 }
|
|
|
|
aaaRedirectServerUrl OBJECT-TYPE
|
|
SYNTAX SnmpAdminString ( SIZE( 1 .. 31 ) )
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The URL where the redirect should happen. At maximum 5 URLS can be allowed per switch."
|
|
::= { aaaRedirectURLEntry 2 }
|
|
|
|
aaaRedirectServerRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The RowStatus of the table entry."
|
|
::= { aaaRedirectURLEntry 3 }
|
|
|
|
-- END: Redirect URL config MIB --
|
|
|
|
--AAA Redirect Pause timer and port bounce config --
|
|
|
|
aaaRedirectGlobalConfig OBJECT IDENTIFIER ::= { aaaRedirectConfig 3 }
|
|
|
|
aaaRedirectPauseTimerConfig OBJECT-TYPE
|
|
SYNTAX Integer32 (0 .. 300)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This is used to configure the pause timer value. Default value is 0."
|
|
DEFVAL { 0 }
|
|
::= { aaaRedirectGlobalConfig 1 }
|
|
|
|
aaaPortBounceConfig OBJECT-TYPE
|
|
SYNTAX INTEGER{ enable (1),disable(2) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This command is used to globally enable/disable port bounce config in switch."
|
|
::= { aaaRedirectGlobalConfig 2 }
|
|
|
|
-- END: AAA Redireect Pause timer and port bounce cofig --
|
|
|
|
--AAA Redirect port bounce slot/port --
|
|
|
|
aaaPortBounceInterfaceTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaPortBounceInterfaceEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table to list port bounce status in slot/port basis."
|
|
::= { aaaRedirectConfig 4 }
|
|
|
|
aaaPortBounceInterfaceEntry OBJECT-TYPE
|
|
SYNTAX AaaPortBounceInterfaceEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries for aaa port bounce slot/port status."
|
|
INDEX { ifIndex }
|
|
::= { aaaPortBounceInterfaceTable 1 }
|
|
|
|
AaaPortBounceInterfaceEntry ::= SEQUENCE
|
|
{
|
|
aaaPortBouncePortSlot Integer32,
|
|
aaaPortBounceIF Integer32,
|
|
aaaPortBounceStatus INTEGER
|
|
}
|
|
|
|
aaaPortBouncePortSlot OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The physical slot number to enable/disable port bounce."
|
|
::= { aaaPortBounceInterfaceEntry 1 }
|
|
|
|
aaaPortBounceIF OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface number of the switch."
|
|
::= { aaaPortBounceInterfaceEntry 2 }
|
|
|
|
aaaPortBounceStatus OBJECT-TYPE
|
|
SYNTAX INTEGER{ enable(1), disable(2) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Enabling/Disabling Port bounce in slot/port basis."
|
|
DEFVAL { enable }
|
|
::= { aaaPortBounceInterfaceEntry 3 }
|
|
|
|
-- END: AAA PORT BOUNCE SLOT/PORT CONFIG --
|
|
--AAA BYOD WHITE LIST IP CONFIG --
|
|
|
|
aaaBYODWhiteListTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaBYODWhiteListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table is used to configure the BYOD white list IP address."
|
|
::= { aaaRedirectConfig 5 }
|
|
|
|
aaaBYODWhiteListEntry OBJECT-TYPE
|
|
SYNTAX AaaBYODWhiteListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"BYOD White List IP configuration."
|
|
INDEX { aaaBYODWhiteListIPAddress, aaaBYODWhiteListIPMask }
|
|
::= { aaaBYODWhiteListTable 1 }
|
|
|
|
AaaBYODWhiteListEntry ::= SEQUENCE
|
|
{
|
|
aaaBYODWhiteListIPAddress IpAddress,
|
|
aaaBYODWhiteListIPMask IpAddress,
|
|
aaaBYODWhiteListRowStatus RowStatus
|
|
}
|
|
|
|
aaaBYODWhiteListIPAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Ip Address added as a whitelist entry."
|
|
::= { aaaBYODWhiteListEntry 1 }
|
|
|
|
aaaBYODWhiteListIPMask OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP network mask applying to the whitelist IP address."
|
|
::= { aaaBYODWhiteListEntry 2 }
|
|
|
|
aaaBYODWhiteListRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The RowStatus of the table entry."
|
|
::= { aaaBYODWhiteListEntry 3 }
|
|
|
|
|
|
-- END: AAA BYOD WHITE LIST IP CONFIG --
|
|
|
|
-- START: AAA SWITCH ACCESS CONFIG-RELATED MIB---------------------
|
|
|
|
aaaSwitchAccessConfig OBJECT IDENTIFIER ::= { alcatelIND1AAAMIBObjects 17 }
|
|
|
|
-- SwitchAccess config MIB --
|
|
|
|
|
|
aaaSwitchAccessMgmtStationTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaSwitchAccessMgmtStationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table is used to configure SwitchAccess management station's Ip address."
|
|
::= {aaaSwitchAccessConfig 1 }
|
|
|
|
aaaSwitchAccessMgmtStationEntry OBJECT-TYPE
|
|
SYNTAX AaaSwitchAccessMgmtStationEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SwitchAccessManagementStation configuration."
|
|
INDEX { aaaSwitchAccessMgmtStationIpAddress }
|
|
::= { aaaSwitchAccessMgmtStationTable 1 }
|
|
|
|
AaaSwitchAccessMgmtStationEntry ::= SEQUENCE
|
|
{
|
|
aaaSwitchAccessMgmtStationIpAddress IpAddress,
|
|
aaaSwitchAccessMgmtStationIpAddressMask IpAddress,
|
|
aaaSwitchAccessMgmtStationRowStatus Integer32
|
|
}
|
|
|
|
aaaSwitchAccessMgmtStationIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Ip Address for the SwitchAccess management station"
|
|
::= { aaaSwitchAccessMgmtStationEntry 1 }
|
|
|
|
aaaSwitchAccessMgmtStationIpAddressMask OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Ip Address mask for the SwitchAccess management station"
|
|
::= { aaaSwitchAccessMgmtStationEntry 2 }
|
|
|
|
aaaSwitchAccessMgmtStationRowStatus OBJECT-TYPE
|
|
SYNTAX Integer32 (0 .. 1)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Rowstatus of the AaaSwitchAccessMgmtStationEntry. 0 (allowed) 1 (blocked)."
|
|
::= { aaaSwitchAccessMgmtStationEntry 3 }
|
|
|
|
aaaSwitchAccessBannedIpTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaSwitchAccessBannedIpEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table is used to retrieve the Banned Ip address."
|
|
::= {aaaSwitchAccessConfig 2}
|
|
|
|
aaaSwitchAccessBannedIpEntry OBJECT-TYPE
|
|
SYNTAX AaaSwitchAccessBannedIpEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SwitchAccessManagementStation configuration."
|
|
INDEX { aaaSwitchAccessBannedIpAddress }
|
|
::= { aaaSwitchAccessBannedIpTable 1 }
|
|
|
|
AaaSwitchAccessBannedIpEntry ::= SEQUENCE
|
|
{
|
|
aaaSwitchAccessBannedIpAddress IpAddress,
|
|
aaaSwitchAccessBannedIpRowStatus Unsigned32
|
|
}
|
|
|
|
aaaSwitchAccessBannedIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"To see the list of ip addresses which are banned"
|
|
::= { aaaSwitchAccessBannedIpEntry 1 }
|
|
|
|
aaaSwitchAccessBannedIpRowStatus OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0 .. 4194967295)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Rowstatus of the AaaSwitchAccessBannedIpEntry. 1 - active. 0 - inactive."
|
|
::= { aaaSwitchAccessBannedIpEntry 2 }
|
|
|
|
|
|
aaaSwitchAccessPrivMaskTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AaaSwitchAccessPrivMaskEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table is used to create the read write permissions for the each session."
|
|
::= { aaaSwitchAccessConfig 3}
|
|
|
|
aaaSwitchAccessPrivMaskEntry OBJECT-TYPE
|
|
SYNTAX AaaSwitchAccessPrivMaskEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Priv mask configuration identified by the access type"
|
|
INDEX { aaaSwitchAccessType }
|
|
::= { aaaSwitchAccessPrivMaskTable 1 }
|
|
|
|
AaaSwitchAccessPrivMaskEntry ::= SEQUENCE
|
|
{
|
|
aaaSwitchAccessType DisplayString,
|
|
aaaSwitchAccessReadRight1 Unsigned32,
|
|
aaaSwitchAccessReadRight2 Unsigned32,
|
|
aaaSwitchAccessWriteRight1 Unsigned32,
|
|
aaaSwitchAccessWriteRight2 Unsigned32,
|
|
aaaSwitchAccessPrivMaskRowStatus RowStatus
|
|
}
|
|
|
|
aaaSwitchAccessType OBJECT-TYPE
|
|
SYNTAX DisplayString ( SIZE( 0 .. 63 ) )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the access type"
|
|
::= { aaaSwitchAccessPrivMaskEntry 1}
|
|
|
|
aaaSwitchAccessReadRight1 OBJECT-TYPE
|
|
SYNTAX Unsigned32 ( 0 .. 4294967295 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the families through the access type can execute with read right.
|
|
Each bit of the 32-bit integer mask represents a command's family
|
|
number. When the family bit is set, through the access type the user is allowed to run
|
|
commands of this family.First part of the bitmask.If the value is
|
|
not specified, the value configured for the 'default'."
|
|
::= { aaaSwitchAccessPrivMaskEntry 2}
|
|
|
|
aaaSwitchAccessReadRight2 OBJECT-TYPE
|
|
SYNTAX Unsigned32 ( 0 .. 4294967295 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the families through the access type can execute with read right.
|
|
Each bit of the 32-bit integer mask represents a command's family
|
|
number. When the family bit is set, through the access type the user is allowed to run
|
|
commands of this family.First part of the bitmask.If the value is
|
|
not specified, the value configured for the 'default'."
|
|
::= { aaaSwitchAccessPrivMaskEntry 3}
|
|
|
|
aaaSwitchAccessWriteRight1 OBJECT-TYPE
|
|
SYNTAX Unsigned32 ( 0 .. 4294967295 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the families through the access type can execute with read right.
|
|
Each bit of the 32-bit integer mask represents a command's family
|
|
number. When the family bit is set, through the access type the user is allowed to run
|
|
commands of this family.First part of the bitmask.If the value is
|
|
not specified, the value configured for the 'default'."
|
|
::= { aaaSwitchAccessPrivMaskEntry 4}
|
|
|
|
aaaSwitchAccessWriteRight2 OBJECT-TYPE
|
|
SYNTAX Unsigned32 ( 0 .. 4294967295 )
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the families through the access type can execute with read right.
|
|
Each bit of the 32-bit integer mask represents a command's family
|
|
number. When the family bit is set, through the access type the user is allowed to run
|
|
commands of this family.First part of the bitmask.If the value is
|
|
not specified, the value configured for the 'default'."
|
|
::= { aaaSwitchAccessPrivMaskEntry 5}
|
|
|
|
aaaSwitchAccessPrivMaskRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this table entry."
|
|
DEFVAL { notInService }
|
|
::= { aaaSwitchAccessPrivMaskEntry 6}
|
|
|
|
|
|
-- END: AAA SWITCH ACCESS CONFIG-RELATED MIB---------------------
|
|
|
|
alaAaaTlsConfig OBJECT IDENTIFIER ::= { alcatelIND1AAAMIBObjects 18 }
|
|
|
|
alaAaaTlsBaseConfig OBJECT IDENTIFIER ::= { alaAaaTlsConfig 1 }
|
|
|
|
alaAaaTlsCaFileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Name of the CA bundle file (in PEM format) stored in /flash/switch directory."
|
|
::= { alaAaaTlsBaseConfig 1 }
|
|
|
|
alaAaaTlsCrlFileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Name of the CRL file (in PEM format) stored in /flash/switch directory."
|
|
::= { alaAaaTlsBaseConfig 2 }
|
|
|
|
alaAaaTlsKeyFileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Name of the rsa key file stored in /flash/switch directory."
|
|
::= { alaAaaTlsBaseConfig 3 }
|
|
|
|
alaAaaTlsCertFileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Name of the certificate to be verified stored in /flash/switch directory."
|
|
::= { alaAaaTlsBaseConfig 4 }
|
|
|
|
alaAaaTlsSelfSignedCert OBJECT IDENTIFIER ::= { alaAaaTlsConfig 2 }
|
|
|
|
alaAaaTlsSelfSignedCertFileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Name of the self-signed certificate file stored in /flash/switch directory."
|
|
::= { alaAaaTlsSelfSignedCert 1 }
|
|
|
|
alaAaaTlsSelfSignedCertKeyFileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Name of the key file file stored in /flash/switch directory."
|
|
::= { alaAaaTlsSelfSignedCert 2 }
|
|
|
|
alaAaaTlsSelfSignedCertValidPeriod OBJECT-TYPE
|
|
SYNTAX Integer32 (0..3650)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The valid period in days of certificate."
|
|
::= { alaAaaTlsSelfSignedCert 3 }
|
|
|
|
alaAaaTlsSelfSignedCertCommonName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The certificate common name."
|
|
::= { alaAaaTlsSelfSignedCert 4 }
|
|
|
|
alaAaaTlsSelfSignedCertOrgName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The certificate organization name ."
|
|
::= { alaAaaTlsSelfSignedCert 5 }
|
|
|
|
alaAaaTlsSelfSignedCertOrgUnit OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The certificate organization unit."
|
|
::= { alaAaaTlsSelfSignedCert 6 }
|
|
|
|
alaAaaTlsSelfSignedCertLocality OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Locality of the certificate organization."
|
|
::= { alaAaaTlsSelfSignedCert 7 }
|
|
|
|
alaAaaTlsSelfSignedCertState OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The state of certificate organization."
|
|
::= { alaAaaTlsSelfSignedCert 8 }
|
|
|
|
alaAaaTlsSelfSignedCertCountry OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (2))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The country of certificate organization."
|
|
::= { alaAaaTlsSelfSignedCert 9 }
|
|
|
|
alaAaaTlsSelfSignedCertAction OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
create (1),
|
|
delete (2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Create/delete self-signed certificate stored in /flash/switch directory."
|
|
::= { alaAaaTlsSelfSignedCert 10 }
|
|
|
|
alaAaaTlsCsr OBJECT IDENTIFIER ::= { alaAaaTlsConfig 3 }
|
|
|
|
alaAaaTlsCsrFileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The domain name of csr file stored in /flash/switch directory."
|
|
::= { alaAaaTlsCsr 1 }
|
|
|
|
alaAaaTlsCsrKeyFileName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Name of key file stored in /flash/switch directory."
|
|
::= { alaAaaTlsCsr 2 }
|
|
|
|
alaAaaTlsCsrCommonName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The csr common name."
|
|
::= { alaAaaTlsCsr 3 }
|
|
|
|
alaAaaTlsCsrOrgName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The csr organization name ."
|
|
::= { alaAaaTlsCsr 4 }
|
|
|
|
alaAaaTlsCsrOrgUnit OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The csr organization unit."
|
|
::= { alaAaaTlsCsr 5 }
|
|
|
|
alaAaaTlsCsrLocality OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Locality of the certificate organization."
|
|
::= { alaAaaTlsCsr 6 }
|
|
|
|
alaAaaTlsCsrState OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The state of certificate organization."
|
|
::= { alaAaaTlsCsr 7 }
|
|
|
|
alaAaaTlsCsrCountry OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (2))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The country of certificate organization."
|
|
::= { alaAaaTlsCsr 8 }
|
|
|
|
--
|
|
-- END: AAA TLS CONFIG-RELATED MIB---------------------
|
|
|
|
--
|
|
-- AAA-HIC Trap description
|
|
--
|
|
|
|
alaAaaTrapsDesc OBJECT IDENTIFIER ::= { alaAaaTraps 1 }
|
|
alaAaaTrapsDescRoot OBJECT IDENTIFIER ::= { alaAaaTrapsDesc 0 }
|
|
alaAaaTrapsObj OBJECT IDENTIFIER ::= { alaAaaTraps 2 }
|
|
|
|
aaaHicServerTrap NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
aaaHSvrIpAddress,
|
|
aaaHSvrRole,
|
|
aaaHSvrName
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"AAA HIC server down Trap is sent when the HIC server is down."
|
|
::= {alaAaaTrapsDescRoot 1 }
|
|
|
|
aaaHicServerChangeTrap NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
aaaHSvrIpAddress,
|
|
aaaHSvrCurrIpAddress
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"AAA HIC server Change Trap is sent when the active HIC server is changed from one server to primary to back ot back to primary."
|
|
::= {alaAaaTrapsDescRoot 2 }
|
|
|
|
aaaHicServerUpTrap NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
aaaHSvrIpAddress,
|
|
aaaHSvrRole,
|
|
aaaHSvrName
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"AAA HIC server Up trap is send when at least one of the eserver cam UP."
|
|
::= {alaAaaTrapsDescRoot 3 }
|
|
|
|
--
|
|
-- Object used in the trap
|
|
--
|
|
|
|
aaaHSvrIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "HIC/Rem/WebDL server's IP address."
|
|
::= { alaAaaTrapsObj 1 }
|
|
|
|
aaaHSvrCurrIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "Current active HIC server's IP address."
|
|
::= { alaAaaTrapsObj 2 }
|
|
|
|
aaaHSvrRole OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "HIC server's Role."
|
|
::= { alaAaaTrapsObj 3 }
|
|
|
|
aaaHSvrName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "HIC server's Name."
|
|
::= { alaAaaTrapsObj 4 }
|
|
|
|
-- AAA authentication TRAPS
|
|
alaAaaAuthTrapsDesc OBJECT IDENTIFIER ::= { alaAaaTraps 3 }
|
|
alaAaaAuthTrapsDescRoot OBJECT IDENTIFIER ::= { alaAaaAuthTrapsDesc 0 }
|
|
alaAaaAuthTrapsObj OBJECT IDENTIFIER ::= { alaAaaTraps 4 }
|
|
aaaAuthenticationFailureTrap NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
aaaAuthSysName,
|
|
aaaAuthIpAddress,
|
|
aaaAuthPort,
|
|
aaaAuthUserName,
|
|
aaaAuthType,
|
|
aaaAuthFailureReason
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This trap shall be raised, when ever
|
|
user authentication gets failed."
|
|
::= { alaAaaAuthTrapsDescRoot 1 }
|
|
--
|
|
-- Object used in the trap
|
|
--
|
|
aaaAuthSysName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "System name"
|
|
::= { alaAaaAuthTrapsObj 1 }
|
|
aaaAuthIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "This is the IP-address with which authentication request is sent. It is the IP-Address of the switch "
|
|
::= { alaAaaAuthTrapsObj 2 }
|
|
aaaAuthPort OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "This the port-ID, which is filled in Auth-request."
|
|
::= { alaAaaAuthTrapsObj 3 }
|
|
aaaAuthUserName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "user-name string."
|
|
::= { alaAaaAuthTrapsObj 4 }
|
|
aaaAuthType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "Type of authentication which took place."
|
|
::= { alaAaaAuthTrapsObj 5 }
|
|
aaaAuthFailureReason OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION "Failure reason for which authentication failed."
|
|
::= { alaAaaAuthTrapsObj 6 }
|
|
|
|
-- AAA RADIUS SERVER STATUS TRAPS
|
|
alaAaaRadiusTrapsDesc OBJECT IDENTIFIER ::= { alaAaaTraps 5 }
|
|
alaAaaRadiusTrapsDescRoot OBJECT IDENTIFIER ::= { alaAaaRadiusTrapsDesc 0 }
|
|
aaaRadiusServerUpTrap NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
aaasIpAddress,
|
|
aaasIpAddress2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"AAA RADIUS server Up trap is sent when the server is reachable."
|
|
::= { alaAaaRadiusTrapsDescRoot 1 }
|
|
|
|
aaaRadiusServerDownTrap NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
aaasIpAddress,
|
|
aaasIpAddress2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"AAA RADIUS server Down trap is sent when the server is unreachable."
|
|
::= { alaAaaRadiusTrapsDescRoot 2 }
|
|
|
|
|
|
--
|
|
-- Compliance Statements
|
|
--
|
|
|
|
alcatelIND1AAAMIBCompliance MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Compliance statement for
|
|
Authentication, Authorization, and Accounting (AAA) Subsystem."
|
|
MODULE -- this module
|
|
|
|
MANDATORY-GROUPS
|
|
{
|
|
aaaServerMIBGroup,
|
|
aaaAuthAcctGroup,
|
|
aaaUserMIBGroup,
|
|
aaaHicGroup,
|
|
aaaVlanGroup,
|
|
aaaUNPMacRangeRuleGroup,
|
|
aaaUNPMacRuleGroup,
|
|
aaaUserNetProfileGroup,
|
|
aaaAuthenticatedUserGroup,
|
|
aaaAuthFailureTrapGroup,
|
|
aaaRedirectGroup
|
|
}
|
|
|
|
::= { alcatelIND1AAAMIBCompliances 1 }
|
|
|
|
|
|
--
|
|
-- Units Of Conformance
|
|
--
|
|
|
|
aaaServerMIBGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
aaasName, -- Server configuration table
|
|
aaasProtocol,
|
|
aaasHostName,
|
|
aaasIpAddress,
|
|
aaasHostName2,
|
|
aaasIpAddress2,
|
|
aaasRetries,
|
|
aaasTimout,
|
|
aaasRadKey,
|
|
aaasRadAuthPort,
|
|
aaasRadAcctPort,
|
|
aaasLdapPort,
|
|
aaasLdapDn,
|
|
aaasLdapPasswd,
|
|
aaasLdapSearchBase,
|
|
aaasLdapServType,
|
|
aaasLdapEnableSsl,
|
|
aaasAceClear,
|
|
aaasRowStatus,
|
|
aaasTacacsKey,
|
|
aaasTacacsPort,
|
|
aaasHttpPort,
|
|
aaasHttpDirectory,
|
|
aaasHttpProxyHostName,
|
|
aaasHttpProxyIpAddress,
|
|
aaasHttpProxyPort,
|
|
aaasVrfName,
|
|
aaasRadMacAddrCase,
|
|
aaaTacacsServerCmdAuthorization,
|
|
aaasRadNasPort,
|
|
aaasRadNasPortId,
|
|
aaasRadNasPortType,
|
|
aaasRadMacAddrFormat,
|
|
aaasRadUniqueAcctSessionId,
|
|
aaasRadMacAddrCaseStatus,
|
|
aaasRadServerStatus,
|
|
aaasRadHealthstatus,
|
|
aaasRadPollInterval,
|
|
aaasRadFailoverStatus,
|
|
aaasRadUser,
|
|
aaasRadPasswd,
|
|
aaaRadServerPrimaryStatus,
|
|
aaaRadServerBackupStatus
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Collection of objects for management of AAA Server."
|
|
::= { alcatelIND1AAAMIBGroups 1 }
|
|
|
|
|
|
aaaAuthAcctGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
aaatvVlan, -- Authenticated Vlan configuration table
|
|
aaatvName1,
|
|
aaatvName2,
|
|
aaatvName3,
|
|
aaatvName4,
|
|
aaatvRowStatus,
|
|
aaatvCertificate,
|
|
|
|
aaatsInterface, -- Authenticated switch access configuration table
|
|
aaatsName1,
|
|
aaatsName2,
|
|
aaatsName3,
|
|
aaatsName4,
|
|
aaatsRowStatus,
|
|
aaatsCertificate,
|
|
aaatsName5,
|
|
|
|
aaacvVlan, -- Accounting configuration table for vlan
|
|
aaacvName1,
|
|
aaacvName2,
|
|
aaacvName3,
|
|
aaacvName4,
|
|
aaacvRowStatus,
|
|
|
|
aaacsInterface, -- Accounting configuration table for switch accesses
|
|
aaacsName1,
|
|
aaacsName2,
|
|
aaacsName3,
|
|
aaacsName4,
|
|
aaacsRowStatus,
|
|
|
|
aaatxInterface, -- Authentication configuration table for 802.1x
|
|
aaatxName1,
|
|
aaatxName2,
|
|
aaatxName3,
|
|
aaatxName4,
|
|
aaatxOpen,
|
|
aaatxRowStatus,
|
|
aaatxName5,
|
|
|
|
aaacxInterface, -- Accounting configuration table for 802.1x
|
|
aaacxName1,
|
|
aaacxName2,
|
|
aaacxName3,
|
|
aaacxName4,
|
|
aaacxRowStatus,
|
|
|
|
|
|
aaaAcctSvrInterface, -- Accounting configuration table for MAC
|
|
aaaAcctSvr1,
|
|
aaaAcctSvr2,
|
|
aaaAcctSvr3,
|
|
aaaAcctSvr4,
|
|
aaaAcctSvrRowStatus,
|
|
|
|
|
|
aaatpInterface, -- PKI agent configuration
|
|
aaatpName1,
|
|
aaatpName2,
|
|
aaatpName3,
|
|
aaatpName4,
|
|
aaatpLevel,
|
|
aaatpRowStatus,
|
|
|
|
aaacmdInterface,
|
|
aaacmdSrvName1,
|
|
aaacmdSrvName2,
|
|
aaacmdSrvName3,
|
|
aaacmdSrvName4,
|
|
aaacmdRowStatus
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Collection of objects for management of AAA Authentication Accounting."
|
|
::= { alcatelIND1AAAMIBGroups 2 }
|
|
|
|
|
|
aaaUserMIBGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
aaauUserName, -- User local database configuration table
|
|
aaauPassword,
|
|
aaauReadRight1,
|
|
aaauReadRight2,
|
|
aaauWriteRight1,
|
|
aaauWriteRight2,
|
|
aaauProfile,
|
|
aaauSnmpLevel,
|
|
aaauSnmpAuthKey,
|
|
aaauRowStatus,
|
|
aaauOldPassword,
|
|
aaauEndUserProfile,
|
|
aaauPasswordExpirationDate,
|
|
aaauPasswordExpirationInMinute,
|
|
aaauPasswordAllowModifyDate,
|
|
aaauPasswordLockoutEnable ,
|
|
aaauBadAtempts,
|
|
aaaAsaPasswordSizeMin, -- ASA specific configuration MIB
|
|
aaaAsaDefaultPasswordExpirationInDays,
|
|
aaaAsaPasswordContainUserName,
|
|
aaaAsaPasswordMinUpperCase,
|
|
aaaAsaPasswordMinLowerCase,
|
|
aaaAsaPasswordMinDigit,
|
|
aaaAsaPasswordMinNonAlphan,
|
|
aaaAsaPasswordHistory,
|
|
aaaAsaPasswordMinAge,
|
|
aaaAsaLockoutWindow,
|
|
aaaAsaLockoutDuration,
|
|
aaaAsaLockoutThreshold,
|
|
aaauSnmpPrivPassword,
|
|
aaauSnmpOnly,
|
|
aaaAsaROUserPingTrtEnable,
|
|
aaaAsaAccessPolicyAdminConsoleOnly,
|
|
aaaAsaCertPassword,
|
|
aaaAsaAccessMode,
|
|
aaaAsaIpLockoutThreshold,
|
|
aaaSwitchAccessMgmtStationState
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Collection of objects for management of AAA User Local Database."
|
|
::= { alcatelIND1AAAMIBGroups 3 }
|
|
|
|
aaaHicGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
-- HIC Server table
|
|
aaaHicSvrIpAddr,
|
|
aaaHicSvrPort,
|
|
aaaHicSvrKey,
|
|
aaaHicSvrRowStatus,
|
|
aaaHicSvrStatus,
|
|
aaaHicSvrRole,
|
|
aaaHicSvrConnection,
|
|
-- Allowed/Exception IP Address table
|
|
aaaHicAllowedIpAddr,
|
|
aaaHicAllowedRowStatus,
|
|
aaaHicAllowedIpMask,
|
|
-- HIC Override table
|
|
aaaHicOverrideStatus,
|
|
aaaHicOverrideRowStatus,
|
|
-- HIC Host status table
|
|
aaaHicHostStatus,
|
|
aaaHicStatus, -- Global HIC config data
|
|
aaaHicAllowed1Name,
|
|
aaaHicAllowed2Name,
|
|
aaaHicAllowed3Name,
|
|
aaaHicAllowed4Name,
|
|
aaaHicWebAgentDownloadUrl,
|
|
aaaHicCustomHttpProxyPort,
|
|
|
|
aaaHicBgPollInterval,
|
|
aaaHicSvrFailMode ,
|
|
|
|
-- HIC Server down UNP Map Table MIB --
|
|
aaaHicSvrDownMappedUnpName,
|
|
aaaHicSvrDownUnpRowStatus ,
|
|
|
|
-- Hic Server Change Trap --
|
|
aaaHSvrIpAddress,
|
|
aaaHSvrCurrIpAddress ,
|
|
aaaHSvrRole,
|
|
aaaHSvrName,
|
|
-- Mac Address based configuration --
|
|
aaaMacInterface ,
|
|
aaaMacSrvrName1,
|
|
aaaMacSrvrName2,
|
|
aaaMacSrvrName3,
|
|
aaaMacSrvrName4,
|
|
aaaMacSrvrRowStatus ,
|
|
aaaMacSrvrName5,
|
|
-- Radius Agent IP Information --
|
|
aaaRadAgentConfig,
|
|
aaaRadAgentIP,
|
|
|
|
aaaUNPIpNetRuleProfileName,
|
|
aaaUNPIpNetRuleRowStatus
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Collection of objects for management of AAA HIC."
|
|
::= { alcatelIND1AAAMIBGroups 4 }
|
|
|
|
aaaTrapsGroup NOTIFICATION-GROUP
|
|
NOTIFICATIONS {
|
|
aaaHicServerTrap,
|
|
aaaHicServerChangeTrap,
|
|
aaaHicServerUpTrap,
|
|
aaaAuthenticationFailureTrap,
|
|
aaaRadiusServerUpTrap,
|
|
aaaRadiusServerDownTrap
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Collection of Traps for AAA HIC & RADIUS servers."
|
|
::= { alcatelIND1AAAMIBGroups 5 }
|
|
|
|
aaaVlanGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
aaaAvlanDnsName,
|
|
aaaAvlanDhcpDefGateway,
|
|
aaaAvlanDefaultTraffic,
|
|
aaaAvlanPortBound,
|
|
aaaAvlanLanguage,
|
|
|
|
aaaAvlanId,
|
|
aaaAvlanIpAddress
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Authenticated vlan configuration Group."
|
|
::= { alcatelIND1AAAMIBGroups 6 }
|
|
|
|
aaaUNPMacRangeRuleGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
aaaUNPMacRangeRuleHiAddr,
|
|
aaaUNPMacRangeRuleProfileName,
|
|
aaaUNPMacRangeRuleRowStatus
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A MAC range rule entry."
|
|
::= { alcatelIND1AAAMIBGroups 7 }
|
|
|
|
|
|
aaaUNPMacRuleGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
aaaUNPMacRuleProfileName,
|
|
aaaUNPMacRuleRowStatus
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
" A MAC rule entry."
|
|
::= { alcatelIND1AAAMIBGroups 8 }
|
|
|
|
aaaUserNetProfileGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
aaaUserNetProfileVlanID,
|
|
aaaUserNetProfileRowStatus,
|
|
aaaUserNetProfileHICflag,
|
|
aaaUserNetProfileQosPolicyListName,
|
|
aaaUserNetProfileMaxIngressBw,
|
|
aaaUserNetProfileMaxEgressBw,
|
|
aaaUserNetProfileMaxDefaultDepth,
|
|
aaaUserNetworkProfileRedirectUrl
|
|
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"user Network profile entry."
|
|
::= { alcatelIND1AAAMIBGroups 9 }
|
|
|
|
aaaAuthenticatedUserGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
aaaaUserName,
|
|
aaaaSlot,
|
|
aaaaPort,
|
|
aaaaVlan ,
|
|
aaaaDrop ,
|
|
aaaaMacAddress
|
|
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"user Network profile entry."
|
|
::= { alcatelIND1AAAMIBGroups 10 }
|
|
|
|
aaaAuthFailureTrapGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
aaaAuthSysName,
|
|
aaaAuthIpAddress,
|
|
aaaAuthPort,
|
|
aaaAuthUserName ,
|
|
aaaAuthType ,
|
|
aaaAuthFailureReason
|
|
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This trap shall be raised, when ever
|
|
user authentication gets failed."
|
|
::= { alcatelIND1AAAMIBGroups 11 }
|
|
|
|
aaaRedirectGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{
|
|
-- Redirect Server Config
|
|
aaaRedirectServerIpAddress,
|
|
aaaRedirectServerUrl1,
|
|
aaaRedirectServerUrl2,
|
|
aaaRedirectServerUrl3,
|
|
aaaRedirectServerUrl4,
|
|
aaaRedirectServerUrl5,
|
|
aaaRedirectSvrConfigRowStatus,
|
|
-- Redirect URL Config
|
|
aaaRedirectServerUrl,
|
|
aaaRedirectServerRowStatus,
|
|
-- Pause timer
|
|
aaaRedirectPauseTimerConfig,
|
|
-- Port Bounce
|
|
aaaPortBounceConfig,
|
|
-- Port Bounce slot/port
|
|
aaaPortBounceStatus,
|
|
aaaBYODWhiteListIPAddress,
|
|
aaaBYODWhiteListIPMask,
|
|
aaaBYODWhiteListRowStatus
|
|
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Collection of Redirect Objects for Management."
|
|
::= { alcatelIND1AAAMIBGroups 12 }
|
|
|
|
END
|