MIBs Depot

ENTERASYS-TACACS-CLIENT-MIB

Registered at
1.3.6.1.4.1.5624.1.2.58
Last updated
2010-02-01 17:02
Organization
Enterasys Networks, Inc
Revisions
2010-02-01 17:02, 2005-02-10 17:57
Namespace
enterasys
Source file
ENTERASYS-TACACS-CLIENT-MIB
Digest
sha256:0356584504b5f997000a6bc83865bfde5f8aec03e4676450c3cc3430c04b803f

Description

This MIB module defines a portion of the SNMP MIB under the Enterasys Networks enterprise OID pertaining to TACACS+ client configuration.

Contact

Postal: Enterasys Networks 50 Minuteman Rd. Andover, MA 01810-1008 USA Phone: +1 978 684 1000 E-mail: support@enterasys.com WWW: http://www.enterasys.com

Imports

FromSymbols
ENTERASYS-MIB-NAMESetsysModules
INET-ADDRESS-MIBInetAddress, InetAddressType, InetPortNumber
P-BRIDGE-MIBEnabledStatus
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMIInteger32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, iso
SNMPv2-TCDisplayString, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

BRIDGE-MIB
ENTERASYS-MIB-NAMES
ENTERASYS-TACACS-CLIENT-MIB
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
P-BRIDGE-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
etsysTacacsClientObjects
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.58.1
etsysTacacsClientControl
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.58.1.1
etsysTacacsClientSesnAuthEnabled
OBJECT-TYPE
Controls the operation of the TACACS+ client for session authentication and authorization.
1.3.6.1.4.1.5624.1.2.58.1.1.1EnabledStatusread-writecurrent
etsysTacacsClientSesnAcctEnabled
OBJECT-TYPE
Controls the operation of the TACACS+ client for session accounting.
1.3.6.1.4.1.5624.1.2.58.1.1.2EnabledStatusread-writecurrent
etsysTacacsClientCmdAuthEnabled
OBJECT-TYPE
Controls the operation of the TACACS+ client for command level authorization.
1.3.6.1.4.1.5624.1.2.58.1.1.3EnabledStatusread-writecurrent
etsysTacacsClientCmdAcctEnabled
OBJECT-TYPE
Controls the operation of the TACACS+ client for command accounting.
1.3.6.1.4.1.5624.1.2.58.1.1.4EnabledStatusread-writecurrent
etsysTacacsClientSingleConnection
OBJECT-TYPE
Allows the TACACS+ client to send multiple TACACS+ requests on a single TCP connection. All configured TACACS+ servers MUST allow this NAS to use single connection mode.
1.3.6.1.4.1.5624.1.2.58.1.1.5EnabledStatusread-writecurrent
etsysTacacsClientSesnAuth
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.58.1.2
etsysTacacsClientSesnAuthService
OBJECT-TYPE
The service to be requested for management session authorization.
1.3.6.1.4.1.5624.1.2.58.1.2.1SnmpAdminStringread-writecurrent
etsysTacacsClientSesnAuthTable
OBJECT-TYPE
A list of TACACS+ servers that this client may attempt to use.
1.3.6.1.4.1.5624.1.2.58.1.2.2not-accessiblecurrent
etsysTacacsClientSesnAuthEntry
OBJECT-TYPE
A TACACS+ server that this client may attempt to use.
1.3.6.1.4.1.5624.1.2.58.1.2.2.1not-accessiblecurrent
etsysTacacsClientSesnAuthLevel
OBJECT-TYPE
The authorization level for the corresponding attribute value pair. Managed entities are not required to support all authorization levels.
1.3.6.1.4.1.5624.1.2.58.1.2.2.1.1INTEGER {readonly(1), readwrite(2), superuser(3), debug(4)}not-accessiblecurrent
etsysTacacsClientSesnAuthAttribute
OBJECT-TYPE
The attribute part of the attribute-value pair for this access level. The default value 'priv-lvl' is normally defined to have a corresponding value part with a value between '0' and '15' inclusive.
1.3.6.1.4.1.5624.1.2.58.1.2.2.1.2SnmpAdminStringread-writecurrent
etsysTacacsClientSesnAuthValue
OBJECT-TYPE
The value part of the attribute-value pair for this access level. To allow the leveraging of existing Cisco 'enable' mode configurations. When 1.) the etsysTacacsClientSesnAuthService object has the value 'enable', 2.) the attribute part of this attribute-value pair is 'priv-lvl', and 3.) the value part of this attribute-value pair represents a numeric value between 0 and 15, inclusive, then the value part of this attribute-value pair specifies the minimum value required for this access level. If any of the above conditions are not met then this value must be an exact match with the value returned from the TACACS+ server. The default values for this object are '0' for read-only, '1' for read-write, and '15' for superuser authorization.
1.3.6.1.4.1.5624.1.2.58.1.2.2.1.3SnmpAdminStringread-writecurrent
etsysTacacsClientServer
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.58.1.3
etsysTacacsClientServerTable
OBJECT-TYPE
A list of TACACS+ servers that this client may attempt to use.
1.3.6.1.4.1.5624.1.2.58.1.3.1not-accessiblecurrent
etsysTacacsClientServerEntry
OBJECT-TYPE
A TACACS+ server that this client may attempt to use.
1.3.6.1.4.1.5624.1.2.58.1.3.1.1not-accessiblecurrent
etsysTacacsClientServerIndex
OBJECT-TYPE
A number uniquely identifying each conceptual row in the etsysTacacsClientServerTable. In the event of an agent restart, the same value of etsysTacacsClientServerIndex must be used to identify each conceptual row in etsysTacacsClientServerTable as prior to the restart.
1.3.6.1.4.1.5624.1.2.58.1.3.1.1.1Integer32 (1..2147483647)not-accessiblecurrent
etsysTacacsClientServerAddressType
OBJECT-TYPE
The type of Internet address by which this TACACS+ server is reachable.
1.3.6.1.4.1.5624.1.2.58.1.3.1.1.2InetAddressTyperead-createcurrent
etsysTacacsClientServerAddress
OBJECT-TYPE
The Internet address for the TACACS+ server. The etsysTacacsClientServerAddress may not be empty due to the SIZE restriction. Also the size of a DNS name is limited to 64 characters. If a row is created administratively by an SNMP operation and the address type value is dns(16), then the agent stores the DNS name internally. A DNS name lookup must be performed on the internally stored DNS name whenever it is being used to contact the peer. If a row is created by the managed entity itself and the address type value is dns(16), then the agent stores the IP address internally. A DNS reverse lookup must be performed on the internally stored IP address whenever the value is retrieved via SNMP.
1.3.6.1.4.1.5624.1.2.58.1.3.1.1.3InetAddress (SIZE(1..64))read-createcurrent
etsysTacacsClientServerPortNumber
OBJECT-TYPE
The TCP port number (0-65535) the client is using to send requests to this server.
1.3.6.1.4.1.5624.1.2.58.1.3.1.1.4InetPortNumberread-createcurrent
etsysTacacsClientServerTimeout
OBJECT-TYPE
The number of seconds to wait for a TACACS+ server to respond to a request.
1.3.6.1.4.1.5624.1.2.58.1.3.1.1.5Integer32 (1..180)read-writecurrent
etsysTacacsClientServerSecret
OBJECT-TYPE
This object is the secret shared between the TACACS+ server and TACACS+ client.
1.3.6.1.4.1.5624.1.2.58.1.3.1.1.6OCTET STRING (SIZE(0..32))read-createcurrent
etsysTacacsClientServerSecretEntered
OBJECT-TYPE
This indicates the existence of a shared secret.
1.3.6.1.4.1.5624.1.2.58.1.3.1.1.7TruthValueread-onlycurrent
etsysTacacsClientServerStatus
OBJECT-TYPE
Lets users create and delete TACACS+ server entries on systems that support this capability. Rules 1. When creating a TACACS+ client, it is up to the management station to determine a suitable etsysTacacsClientServerIndex. To facilitate interoperability, agents should not put any restrictions on the etsysTacacsClientServerIndex beyond the obvious ones that it be valid and unused. 2. Before a new row can become 'active', values must be supplied for the columnar objects etsysTacacsClientServerAddress and etsysTacacsClientServerSecret. 3. The value of etsysTacacsClientServerStatus MAY need to be set to 'notInService' in order to modify a writable object in the same conceptual row. 4. etsysTacacsClientServer entries whose status is 'notReady' or 'notInService' will not be used for authentication.
1.3.6.1.4.1.5624.1.2.58.1.3.1.1.8RowStatusread-createcurrent
etsysTacacsClientConformance
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.58.2
etsysTacacsClientCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.58.2.1
etsysTacacsClientGroups
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.58.2.2

Conformance

NameOIDStatus
etsysTacacsClientCompliance
MODULE-COMPLIANCE
The compliance statement for clients implementing the TACACS+ Client MIB.
1.3.6.1.4.1.5624.1.2.58.2.1.1current
etsysTacacsClientSessionGroup
OBJECT-GROUP
The collection of objects required to do TACACS+ authentication, authorization, and accounting for management sessions.
1.3.6.1.4.1.5624.1.2.58.2.2.1current
etsysTacacsClientCmdAuthGroup
OBJECT-GROUP
Additional objects for TACACS+ command authorization.
1.3.6.1.4.1.5624.1.2.58.2.2.2current
etsysTacacsClientCmdAcctGroup
OBJECT-GROUP
Additional objects for TACACS+ command accounting.
1.3.6.1.4.1.5624.1.2.58.2.2.3current
etsysTacacsClientSesnAuthGroup
OBJECT-GROUP
Additional objects to map read-only, read-write, superuser, and debug authorization level into a service level and respective attribute-value pairs.
1.3.6.1.4.1.5624.1.2.58.2.2.4current