MIBs Depot

ONEACCESS-AAA-MIB

Registered at
1.3.6.1.4.1.13191.1.100.690
1.3.6.1.4.1.13191.10.3.4.10
Last updated
2011-07-26 00:00
Organization
OneAccess
Revisions
2011-07-26 00:00, 2011-06-15 00:00, 2010-12-17 00:01, 2010-07-08 00:01
Namespace
oneaccess
Source file
ONEACCESS-AAA-MIB
Digest
sha256:25b8926bf32fe9e318a2cba2fda42a52b2dba5dcf7418b783a52d474ba97f7a7

Description

Fixed the issues related to octet string range

Contact

Pascal KESTELOOT Postal: ONE ACCESS 381 Avenue du Général de Gaulle 92140 Clamart, France FRANCE Tel: (+33) 01 41 87 70 00 Fax: (+33) 01 41 87 74 00 E-mail: pascal.kesteloot@oneaccess-net.com

Imports

FromSymbols
IF-MIBInterfaceIndex
ONEACCESS-GLOBAL-REGoacExpIMManagement, oacMIBModules
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Counter64, Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, iso
SNMPv2-TCDisplayString, PhysAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

IANAifType-MIB
IF-MIB
ONEACCESS-AAA-MIB
ONEACCESS-GLOBAL-REG
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
oacAAAConfig
OBJECT-IDENTITY
1.3.6.1.4.1.13191.10.3.4.10
oacAAAConfigObjects
OBJECT-IDENTITY
1.3.6.1.4.1.13191.10.3.4.10.1
oacAAARadiusServerConfigTable
OBJECT-TYPE
Configuring Radius Server: For the device to authenticate with an radius server database, the following parameters have to be configured. The cli command for adding a radius server details is radius-server <RADIUS-server-ip> [<RADIUS-UDP-port>] <shared-key> [ <interface> <unit> ] The snmp table will contain the following attributes. 1) hostname or IP Address String 2) Radius Server Port Integer 1-65535 3) Shared Key String. 4) Retransmit Integer 1-100 default 3 5) Timeout Integer 1-600 default 3 6) Interface InterfaceIndex
1.3.6.1.4.1.13191.10.3.4.10.1.1not-accessiblecurrent
oacAAARadiusServerConfigEntry
OBJECT-TYPE
The Radius Server config entry will hold the details of one radius servers configured for the client to send the requests for authentication. This table is indexed on oacAAARadiusServrInfo which can be either an ipaddress or hostname of the Radius Server.
1.3.6.1.4.1.13191.10.3.4.10.1.1.1not-accessiblecurrent
oacAAARadiusServerInfo
OBJECT-TYPE
The Info can be an : A.B.C.D IPv4 host address A.B.C.D Ipv4 subnet hostname Hostname.
1.3.6.1.4.1.13191.10.3.4.10.1.1.1.1DisplayStringread-createcurrent
oacAAARadiusServerPort
OBJECT-TYPE
The default server port to which radius client will connect to a radius server is 1812. But the user can always specify the port to which the client should connect when contacting the configured radius server.
1.3.6.1.4.1.13191.10.3.4.10.1.1.1.2INTEGER (1..65535)read-createcurrent
oacAAARadiusServerSharedKey
OBJECT-TYPE
Pre shared key between the radius client and server.
1.3.6.1.4.1.13191.10.3.4.10.1.1.1.3OCTET STRING (SIZE(8..255))read-createcurrent
oacAAARadiusServerRetries
OBJECT-TYPE
The Client can do the configured number of retries to this radius server before moving to the next radius server. The default number of retries is 3.
1.3.6.1.4.1.13191.10.3.4.10.1.1.1.4INTEGER (1..100)read-createcurrent
oacAAARadiusServerTimeout
OBJECT-TYPE
The nummber of seconds to wait before to call a timeout. The default value is 3 seconds.
1.3.6.1.4.1.13191.10.3.4.10.1.1.1.5INTEGER (1..600)read-createcurrent
oacAAARadiusServerInterface
OBJECT-TYPE
The interface for this device to use to contact the radius server for auth requests. It is identified by the ifIndex. Each interface/unit is identified by an ifIndex.
1.3.6.1.4.1.13191.10.3.4.10.1.1.1.6InterfaceIndexread-createcurrent
oacAAARadiusServerRowStatus
OBJECT-TYPE
The Row status for an entry in the oacAAARadiusServerConfigTable.
1.3.6.1.4.1.13191.10.3.4.10.1.1.1.7RowStatusread-createcurrent
oacAAARadiusConfigAccPort
OBJECT-TYPE
Set the port for Radius accouting. reset or deletion of this value is not possible the port value can only be modified.
1.3.6.1.4.1.13191.10.3.4.10.1.2INTEGER (1..65535)read-writecurrent
oacAAATacacsServerConfigTable
OBJECT-TYPE
Configuring Tacacs client: The cli to add tacacs server info for the tacacs client is tacacs-server <host> [<port>] <key> [ <interface> <unit> ] Hence the snmp table for to hold the tacacs server info has the following 1) hostname or IP Address OCTET STRING 2) TACACs serverport Integer 1-65535 3) Shared Key OCTET STRING 4) Timeout integer 1-600 default 3 5) Interface InterfaceIndex
1.3.6.1.4.1.13191.10.3.4.10.1.3not-accessiblecurrent
oacAAATacacsServerConfigEntry
OBJECT-TYPE
An entry holds the information per tacacs server configured. the entry is uniquely identified/indexed by the oacAAATacacsServerInfo which can be either the IPv4 address or an hostname.
1.3.6.1.4.1.13191.10.3.4.10.1.3.1not-accessiblecurrent
oacAAATacacsServerInfo
OBJECT-TYPE
The Info can be an : A.B.C.D IPv4 host address A.B.C.D Ipv4 subnet hostname Hostname.
1.3.6.1.4.1.13191.10.3.4.10.1.3.1.1DisplayStringread-createcurrent
oacAAATacacsServerPort
OBJECT-TYPE
The default for an tacacs client to connect to tacacs server is 49. But this can vary depending on the server configuration. Hence when a tacacs server is added the port on which this server is running has to be specified.
1.3.6.1.4.1.13191.10.3.4.10.1.3.1.2INTEGER (1..65535)read-createcurrent
oacAAATacacsServerSharedKey
OBJECT-TYPE
The shared key will be used to authenticate a tacacs client with the tacacs server. This has key is different from the user authentication keys.
1.3.6.1.4.1.13191.10.3.4.10.1.3.1.3OCTET STRING (SIZE(8..255))read-createcurrent
oacAAATacacsServerTimeout
OBJECT-TYPE
The default timeout value for an client to wait for a response from the tacacs server is set to 3 seconds. but this can be modified by setting a value.
1.3.6.1.4.1.13191.10.3.4.10.1.3.1.4INTEGER (1..600)read-createcurrent
oacAAATacacsServerInterface
OBJECT-TYPE
The interface which this tacacs client should use to contact the configured tacacs server. The interface is identified by the ifIndex.
1.3.6.1.4.1.13191.10.3.4.10.1.3.1.5InterfaceIndexread-createcurrent
oacAAATacacsServerRowStatus
OBJECT-TYPE
The Rowstatus for this entry.
1.3.6.1.4.1.13191.10.3.4.10.1.3.1.6RowStatusread-createcurrent
oacAAATacacsConfigUseUsername
OBJECT-TYPE
usage of user name for authentication for enable command.
1.3.6.1.4.1.13191.10.3.4.10.1.4TruthValueread-writecurrent
oacAAAAuthenticationServerConfigTable
OBJECT-TYPE
AAA configuration on OneOS The AAA servers can be configured to either authenticate user login or authenticate enable commands for a given user. OneOS can either use all radius servers or all tacas servers or a group of configured radius servers or a group of configured tacacs servers or only the local database. By default if a radius/tacacs servers are configured, ONEOS will use the AAA servers in the order in which they are configured. The following commands are available to configure the AAA servers. aaa authentication login {default|console|network} {<group-name>|radius|tacacs} aaa authentication enable {default|console|network} {<group-name>|radius|tacacs} Hence the following will be the attributes for the AAA authentication configuration table 1) Authentication for (login or enable) Integer as enum 2) Authentication from (default or console or network) Integer as enum 3) Authentication servertype String
1.3.6.1.4.1.13191.10.3.4.10.1.5not-accessiblecurrent
oacAAAAuthenticationServerConfigEntry
OBJECT-TYPE
An entry will define how a login/enable from console or network will use which group of servers of either radius or tacacs. Each entry is uniquly identified by an dual index.
1.3.6.1.4.1.13191.10.3.4.10.1.5.1not-accessiblecurrent
oacAAAAuthenticationFeature
OBJECT-TYPE
A user can login to the device and just monitor. A user can configure the device when he enters the enabled mode. The device will challenge an user for authentication when ever he enters and enabled command.
1.3.6.1.4.1.13191.10.3.4.10.1.5.1.1INTEGER {login(1), enable(2)}read-createcurrent
oacAAAAuthenticationReqSrc
OBJECT-TYPE
The user can access the device either thru the default mode or from the console or from the network like ssh and telnet.
1.3.6.1.4.1.13191.10.3.4.10.1.5.1.2INTEGER {default(1), console(2), network(3)}read-createcurrent
oacAAAAuthenticationSvrType
OBJECT-TYPE
The authentication servers can be either a group of radius serves or a group of tacacs servers or all radius servers or all tacacs server.
1.3.6.1.4.1.13191.10.3.4.10.1.5.1.3OCTET STRING (SIZE(1..255))read-createcurrent
oacAAAAuthenticationServerRowStatus
OBJECT-TYPE
The Row status for this entry.
1.3.6.1.4.1.13191.10.3.4.10.1.5.1.4RowStatusread-createcurrent
oacAAAAuthenticationConfigBannerSeqTable
OBJECT-TYPE
This table holds upto 40 banner messages used in authentication
1.3.6.1.4.1.13191.10.3.4.10.1.6not-accessiblecurrent
oacAAAAuthenticationConfigBannerSeqEntry
OBJECT-TYPE
Each entry will hold one banner string
1.3.6.1.4.1.13191.10.3.4.10.1.6.1not-accessiblecurrent
oacAAAAuthenticationBannerSequence
OBJECT-TYPE
The maximum number of strings that can be stored are 40.
1.3.6.1.4.1.13191.10.3.4.10.1.6.1.1INTEGER (1..40)read-createcurrent
oacAAAAuthenticationBannerString
OBJECT-TYPE
banner test is a set of string maximum upto 255 characters.
1.3.6.1.4.1.13191.10.3.4.10.1.6.1.2OCTET STRING (SIZE(1..255))read-createcurrent
oacAAAAuthenticationBannerSeqRowStatus
OBJECT-TYPE
The row status of this entry
1.3.6.1.4.1.13191.10.3.4.10.1.6.1.3RowStatusread-createcurrent
oacAAAGroupServerConfigTable
OBJECT-TYPE
Configuring AAA Group Servers: The cli command to configure a group of servers aaa group server { radius | tacacs } <group-name> server {<A.B.C.D>|<hostname> } The SNMP table for group servers will be 1) group name OCTET STRING 2) group type INTEGER (ENUM) 3) server OCTET STRING
1.3.6.1.4.1.13191.10.3.4.10.1.7not-accessiblecurrent
oacAAAGroupServerConfigEntry
OBJECT-TYPE
A group server entry will hold information about an configured radius or tacacs server to which group it belongs to.
1.3.6.1.4.1.13191.10.3.4.10.1.7.1not-accessiblecurrent
oacAAAServerGroupName
OBJECT-TYPE
The group name which is the index for each entry.
1.3.6.1.4.1.13191.10.3.4.10.1.7.1.1DisplayStringread-createcurrent
oacAAAServerGroupType
OBJECT-TYPE
Only server of type defined above can be added to this group. all the servers can be either of type radius or type tacacs.
1.3.6.1.4.1.13191.10.3.4.10.1.7.1.2INTEGER {radius(1), tacacs(2)}read-createcurrent
oacAAAServerGroupServerInfo
OBJECT-TYPE
This object will hold the inforamtion about the server, which can be an IPv4 Address or an Hostname.
1.3.6.1.4.1.13191.10.3.4.10.1.7.1.3DisplayStringread-createcurrent
oacAAAServerGroupRowStatus
OBJECT-TYPE
The row status for this entry.
1.3.6.1.4.1.13191.10.3.4.10.1.7.1.4RowStatusread-createcurrent
oacAAAAuthorizationConfigCmdLevelDefTacacs
OBJECT-TYPE
To enable AAA authorization for a given privilege level
1.3.6.1.4.1.13191.10.3.4.10.1.8INTEGER (0..15)read-writecurrent
oacAAAAccCmdsConfigTable
OBJECT-TYPE
This table provides the information for AAA accounting commands. SNMP table for the above command will be 1) access level of the command INTEGER 0-15 2) tacacs+ group OCTET STRING default all.
1.3.6.1.4.1.13191.10.3.4.10.1.9not-accessiblecurrent
oacAAAAccCmdsConfigEntry
OBJECT-TYPE
each entry will define an access level and the tacacs group name.
1.3.6.1.4.1.13191.10.3.4.10.1.9.1not-accessiblecurrent
oacAAAAccCmdAccessLevel
OBJECT-TYPE
The command access level for which accounting has to be done.
1.3.6.1.4.1.13191.10.3.4.10.1.9.1.1INTEGER (0..15)read-createcurrent
oacAAAAccTacacsGroupName
OBJECT-TYPE
The group of servers that can be used to perform accounting for a given command access level.
1.3.6.1.4.1.13191.10.3.4.10.1.9.1.2DisplayStringread-createcurrent
oacAAAAccCmdsRowStatus
OBJECT-TYPE
The row status for this entry.
1.3.6.1.4.1.13191.10.3.4.10.1.9.1.3RowStatusread-createcurrent
oacAAAAccConfigExecStartStop
OBJECT-TYPE
Set EXEC accounting and the method is default, to use start-stop record accounting notice. Uses TACACS+ server for accounting.
1.3.6.1.4.1.13191.10.3.4.10.1.10OCTET STRING (SIZE(0..255))read-writecurrent
oacAAAAccConfigSystemStartStop
OBJECT-TYPE
Set System accounting and the method is default, to use start-stop record accounting notice. Uses TACACS+ server for accounting.
1.3.6.1.4.1.13191.10.3.4.10.1.11OCTET STRING (SIZE(0..255))read-writecurrent
oacAAAConfigConformance
OBJECT-IDENTITY
1.3.6.1.4.1.13191.10.3.4.10.2
oacAAAConfigGroups
OBJECT-IDENTITY
1.3.6.1.4.1.13191.10.3.4.10.2.1
oacAAACompls
OBJECT-IDENTITY
1.3.6.1.4.1.13191.10.3.4.10.2.2

Conformance

NameOIDStatus
oacAAAConfigGroup
OBJECT-GROUP
Group of AAA objects
1.3.6.1.4.1.13191.10.3.4.10.2.1.1current