MIBs Depot

ENTERASYS-SSH-SERVER-MIB

Registered at
1.3.6.1.4.1.5624.1.2.26
Last updated
2003-02-19 19:03
Organization
Enterasys Networks, Inc
Revisions
2003-02-19 19:03, 2002-11-14 15:41, 2002-09-27 17:48, 2002-09-18 20:41
Namespace
enterasys
Source file
ENTERASYS-SSH-SERVER-MIB
Digest
sha256:e976ef1d418a61c16e065d3a3fbd51d7be41456a2fb254a9e55cb5c85d835414

Description

This MIB module defines a portion of the SNMP enterprise MIBs under Enterasys Networks' enterprise OID pertaining to Secure Shell (SSH) system management functionality, specifically for embedded systems. This is a subset of the objects that would be required for a full-featured, host- based implementation. It provides configuration controls for Enterasys Networks' Secure Shell system management -- a feature that enhances system security by authenticating and encrypting the remote system management function.

Contact

Postal: Enterasys Networks 35 Industrial Way, P.O. Box 5005 Rochester, NH 03867-0505 USA Phone: +1 603 332 9400 E-mail: support@enterasys.com WWW: http://www.enterasys.com

Imports

FromSymbols
ENTERASYS-MIB-NAMESetsysModules
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMIMODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, iso
SNMPv2-TCDisplayString, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

ENTERASYS-MIB-NAMES
ENTERASYS-SSH-SERVER-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
etsysSshObjects
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.1
etsysSshGeneralBranch
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.1.1
etsysSshEnabled
OBJECT-TYPE
Controls the operation of the Secure Shell server task on the embedded system. When enabled, the SSH server will accept connection requests and create a secure transport layer on which to transmit system configuration data.
1.3.6.1.4.1.5624.1.2.26.1.1.1TruthValueread-writedeprecated
etsysSshEventLogFilter
OBJECT-TYPE
Specifies the filter for event log messages. Valid values are information, warning, and error. The values are defined as follows: none (1) Pass no messages. This is effectively a disable condition for Event Logging. information (2) Pass Informational Level, Warning Level and Error Level messages. warning (3) Pass Warning Level and Error Level messages. error (4) Pass Error Level messages only.
1.3.6.1.4.1.5624.1.2.26.1.1.2INTEGER {none(1), information(2), warning(3), error(4)}read-writedeprecated
etsysSshMaxConnections
OBJECT-TYPE
Specifies the maximum number of simultaneous connections that the target system supports. This is an implementation restriction.
1.3.6.1.4.1.5624.1.2.26.1.1.3INTEGER (1..255)read-onlydeprecated
etsysSshNumConnections
OBJECT-TYPE
Specifies the maximum number of simultaneous connections that the server will currently allow. This value must be less than or equal to etsysSshMaxConnections.
1.3.6.1.4.1.5624.1.2.26.1.1.4INTEGER (0..255)read-writedeprecated
etsysSshNetworkBranch
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.1.2
etsysSshCryptoBranch
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.1.3
etsysSshCiphers
OBJECT-TYPE
Specifies the ciphers to use for encrypting the session. Current enumerated types, DES, 3DES, Blowfish, Arcfour, Twofish, and CAST128 are supported. Special values to this option are any, anystd, that allows only standard (see below) ciphers, and anycipher that allows either any available cipher or excludes non-encrypting cipher mode none but allows all others. anystdcipher is the same as above, but includes only those ciphers mentioned in the IETF-SecSH-draft (excluding 'none').
1.3.6.1.4.1.5624.1.2.26.1.3.1INTEGER {anyStdCipher(1), anyCipher(2), des(3), tripleDes(4), blowfish(5), arcFour(6), twofish(7), cast128(8), aes(9)}read-writedeprecated
etsysSshMACs
OBJECT-TYPE
Specifies the MAC (Message Authentication Code) algorithm to use for data integrity verification. Currently enumerated types, hmacSha1, hmacSha1Dash96, hmacMd5, hmacMd5Dash96, hmacRipemd160, and hmacRipemd160Dash96 are supported, of which hmacSha1, hmacSha1Dash96, hmacMd5, and hmacMd5Dash96 are included in all distributions. Special values to this option are anyStdMac, that allows only standard (see below) MACs, and anyMac that allows either any available MAC or excludes none but allows all others. AnyStdMac is the same as above, but includes only those MACs mentioned in the IETF-SecSH-draft (excluding none).
1.3.6.1.4.1.5624.1.2.26.1.3.2INTEGER {anyStdMac(1), anyMac(2), hmacSha1(3), hmacSha1Dash96(4), hmacMd5(5), hmacMd5Dash96(6), hmacRipemd160(7), hmacRipemd160Dash96(8)}read-writedeprecated
etsysSshRekeyIntervalSeconds
OBJECT-TYPE
Specifies the number of seconds after which the key exchange is done again. A value of 0 (zero) turns re-key requests off. This does not prevent the client from requesting re-keys. Note that not all clients support this function.
1.3.6.1.4.1.5624.1.2.26.1.3.3INTEGER (0..65535)read-writedeprecated
etsysSshRandomSeed
OBJECT-TYPE
Specifies optional additional entropy information that will be merged with the seed for the random number generator.
1.3.6.1.4.1.5624.1.2.26.1.3.4OCTET STRING (SIZE(0..80))read-writedeprecated
etsysSshLoginBranch
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.1.4
etsysSshLoginGraceTime
OBJECT-TYPE
The server disconnects after this many seconds if the user has not successfully been authenticated and logged in. The range limit is from 1 second to 1 hour.
1.3.6.1.4.1.5624.1.2.26.1.4.1INTEGER (1..3600)read-writedeprecated
etsysSshIdleTimeout
OBJECT-TYPE
Specifies the maximum number of minutes before a user is disconnected due to lack of activity. A value of zero means that there is no idle timeout.
1.3.6.1.4.1.5624.1.2.26.1.4.2INTEGER (0..65535)read-writedeprecated
etsysSshBannerMessage
OBJECT-TYPE
Banner message that is displayed at the client before the login.
1.3.6.1.4.1.5624.1.2.26.1.4.3DisplayString (SIZE(0..255))read-writedeprecated
etsysSshServerKeyBranch
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.1.5
etsysSshGenerateHostKeys
OBJECT-TYPE
Causes the host to generate a new private/public host key pair, using the cipher algorithm currently selected in etsysSshAdminKeyType. Note that this can be compute intensive on many platforms. The meaning of the values are as follows: notInitiated (1) On a write, this is a no-operation, on a read, it indicates that no key material generation operation has ever been initiated, at least since the last reset to factory defaults initialization of the managed entity. No key material exists. completed (2) On a write, this is a no-operation, on a read, this indicates that a key pair has been successfully generated. failed (3) On a write, this is a no-operation, on a read, it indicates that the key generation operation has failed. generate (4) On a write, this causes the managed entity to generate a new key pair, on a read, it indicates that the managed entity is still working on creating the new keys. completedPending (5) On a write, this is a no-operation, on a read, this indicates that a key pair has been successfully generated but its use is pending due to another required operation, such as a reboot.
1.3.6.1.4.1.5624.1.2.26.1.5.1INTEGER {notInitiated(1), completed(2), failed(3), generate(4), completedPending(5)}read-writedeprecated
etsysSshPublicHostKey
OBJECT-TYPE
The host's public key, of type etsysSshOperKeyType.
1.3.6.1.4.1.5624.1.2.26.1.5.2OCTET STRING (SIZE(0..512))read-onlydeprecated
etsysSshAdminKeyType
OBJECT-TYPE
Determines the type of the key pair to be (re)created on the next key (re)creation operation. The etsysSshOperKeyType object returns the type of key that is currently being used by the SSH server.
1.3.6.1.4.1.5624.1.2.26.1.5.3INTEGER {dsa768(1), rsa768(2), dsa1024(3), rsa1024(4), dsa2048(5), rsa2048(6), dsa3072(7), rsa3072(8), dsa512(9), rsa512(10)}read-writedeprecated
etsysSshOperKeyType
OBJECT-TYPE
Indicates the type of the key pair currently in effect on the managed entity. The value of the etsysSshAdminKeyType object is copied to the etsysSshOperKeyType object upon successful completion of the (re)creation of a key pair. A value of none indicates that due to the failure of the initial key pair generation there is no active key pair.
1.3.6.1.4.1.5624.1.2.26.1.5.4INTEGER {dsa768(1), rsa768(2), dsa1024(3), rsa1024(4), dsa2048(5), rsa2048(6), dsa3072(7), rsa3072(8), dsa512(9), rsa512(10), none(99)}read-onlydeprecated
etsysSshAuthBranch
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.1.6
etsysSshPasswordGuesses
OBJECT-TYPE
Specifies the number of tries that the user has when attempting to authenticate using password authentication.
1.3.6.1.4.1.5624.1.2.26.1.6.1INTEGER (1..100)read-writedeprecated
etsysSshAllowedAuthentications
OBJECT-TYPE
This specifies the authentications methods that are allowed. This is an enumerated list currently consisting of the following types: password, publickey. Each specifies an authentication method. With RequiredAuthentications, the administrator can force users to complete several authentications before they are considered authenticated.
1.3.6.1.4.1.5624.1.2.26.1.6.2INTEGER {allAuth(1), password(2), publickey(3)}read-writedeprecated
etsysSshRequiredAuthentications
OBJECT-TYPE
Related to AllowedAuthentications, this is used to specify what authentication methods the users must complete before continuing. If this value is left zero, it does not mean that no authentications are required. It means that the client can authenticate itself with any of the authentications given in AllowedAuthentications. This parameter has no default. Note: This parameter has to be a subset for AllowedAuthentications. Otherwise, the server denies connection every time.
1.3.6.1.4.1.5624.1.2.26.1.6.3INTEGER {noAuth(1), password(2), publickey(3)}read-writedeprecated
etsysSshConformance
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.2
etsysSshGroups
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.2.1
etsysSshCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.26.2.2

Conformance

NameOIDStatus
etsysSshBaseGroup
OBJECT-GROUP
A collection of objects providing basic SSH server configuration on a managed entity.
1.3.6.1.4.1.5624.1.2.26.2.1.1deprecated
etsysSshAdvancedGroup
OBJECT-GROUP
A collection of objects providing advanced feature support for configuration of the SSH server on the managed entity.
1.3.6.1.4.1.5624.1.2.26.2.1.2deprecated
etsysSshEventLogGroup
OBJECT-GROUP
A collection of objects to manage SSH event logs on the managed entity. Conditionally mandatory for all managed entities that implement the event log feature.
1.3.6.1.4.1.5624.1.2.26.2.1.3deprecated
etsysSshCompliance
MODULE-COMPLIANCE
The compliance statement for devices that support the Enterasys Secure Shell (SSH) MIB.
1.3.6.1.4.1.5624.1.2.26.2.2.1deprecated