PDN-SECURITY-MIB
- Registered at
- 1.3.6.1.4.1.1795.2.24.2.8.11.3.6.1.4.1.1795.2.24.2.8.21.3.6.1.4.1.1795.2.24.2.8.31.3.6.1.4.1.1795.2.24.2.8.41.3.6.1.4.1.1795.2.24.2.8.51.3.6.1.4.1.1795.2.24.2.8.61.3.6.1.4.1.1795.2.24.2.8.71.3.6.1.4.1.1795.2.24.2.8.81.3.6.1.4.1.1795.2.24.2.8.9
- Namespace
- zhone
- Source file
PDN-SECURITY-MIB- Digest
sha256:70f4fea8184bc24629c12739fffc4fcb5f9d3e5d77d7480549a7e85391e217ae
Imports
| From | Symbols |
|---|---|
| PDN-HEADER-MIB | pdn-security |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP |
| SNMPv2-SMI | IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, iso |
| SNMPv2-TC | DisplayString, RowStatus, TEXTUAL-CONVENTION |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
PDN-HEADER-MIB PDN-SECURITY-MIB SNMPv2-CONF SNMPv2-SMI SNMPv2-TC
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| devSecurityMgrValidation OBJECT-TYPE This object is used to either enable or disable SNMP IP validation. When enabled the first check on any incoming PDU is based on the IP address of the datagram. If the IP address is configured in the devSecurityMgrTable then the community name is checked. If the community name is correct then the lowest access level between the the Table and the community name is taken. | 1.3.6.1.4.1.1795.2.24.2.8.1 | INTEGER {disable(1), enable(2)} | read-write | mandatory |
| devSecurityMgrMaxNumber OBJECT-TYPE Maximum number of managers allowed in the devSecurityMgrTable. | 1.3.6.1.4.1.1795.2.24.2.8.2 | INTEGER | read-only | mandatory |
| devSecurityMgrCurrentNumber OBJECT-TYPE Current number of managers in the devSecurityMgrTable. | 1.3.6.1.4.1.1795.2.24.2.8.3 | INTEGER | read-only | mandatory |
| devSecurityMgrTable OBJECT-TYPE A list of the security manager entries. In order to add a new Security Manager the devSecurityMgrIpAddress object must be created first by setting it to a valid IP Address. | 1.3.6.1.4.1.1795.2.24.2.8.4 | not-accessible | deprecated | |
| devSecurityMgrEntry OBJECT-TYPE The SNMP IP Address configuration items. | 1.3.6.1.4.1.1795.2.24.2.8.4.1 | not-accessible | deprecated | |
| devSecurityMgrIpAddress OBJECT-TYPE This is used to specify the IP address that identifies the SNMP manager(s) that are authorized to send SNMP messages. An existing Security Manager may be deleted by setting the devSecurityMgrIpAddress object to 0.0.0.0 or by setting the devSecurityMgrIpAddress object to a new IP Address. A new Security Manager may be added by setting the devSecurityMgrIpAddress object of 0.0.0.0 to the new address as long as there is still room for another Security Manager. When ever a new Security Manager is added or an existing Security Manager's IP Address is modified, the devSecurityMgrAccess object is set to the default value of read (1). | 1.3.6.1.4.1.1795.2.24.2.8.4.1.1 | IpAddress | read-write | deprecated |
| devSecurityMgrAccess OBJECT-TYPE This field is used to specify the access allowed for an authorized NMS when Manager Validation is performed. If the IP address for the NMS sending an SNMP message is on the list of allowed managers, this option along with the Community Name access determine the type of access allowed for the that manager. When ever a new Security Manager is added or an existing Security Manager's IP Address is modified, the devSecurityMgrAccess object is set to the default value of read (1). If the index for this object is not in the existing table and if there is room in the table then the index will be used to create a new Security Manager and will be given the requested access level. | 1.3.6.1.4.1.1795.2.24.2.8.4.1.2 | INTEGER {read(1), readWrite(2)} | read-write | deprecated |
| newSecurityMgrTable OBJECT-TYPE A list of the security manager entries. If an entry is not found in this table, it is added to the table. | 1.3.6.1.4.1.1795.2.24.2.8.5 | not-accessible | deprecated | |
| newSecurityMgrEntry OBJECT-TYPE The SNMP IP Address configuration items. | 1.3.6.1.4.1.1795.2.24.2.8.5.1 | not-accessible | deprecated | |
| newSecurityMgrIpAddress OBJECT-TYPE This is used to specify the IP address that identifies the SNMP manager(s) that are authorized to send SNMP messages. This object is the binary AND of SNMP or telnet source IP address and its subnet mask if the subnet mask is available. Subnet mask is assumed to be 255.255.255.255 when not available | 1.3.6.1.4.1.1795.2.24.2.8.5.1.1 | IpAddress | read-write | deprecated |
| newSecurityMgrAccess OBJECT-TYPE This field is used to specify the access allowed for an authorized NMS when Manager Validation is performed. If the IP address for the NMS sending an SNMP message is on the list of allowed managers, this option along with the Community Name access determine the type of access allowed for the that manager. When ever a new Security Manager is added or an existing Security Manager's IP Address is modified, the newSecurityMgrAccess object is set to the default value of read (1). If the index for this object is not in the existing table and if there is room in the table then the index will be used to create a new Security Manager and will be given the requested access level. In addition changing an existing access permission to noAccess invalidates the corresponding row of this table. It is upto the implementation to decide whether to actually remove this entry from the table or not. read (1) ==> no telnet access and snmp read only access readWrite (2) ==> no telnet access and snmp read-write access noAccess (3) ==> no telnet access and no snmp read-write access telnetNoAccess (4) ==> telnet access and no snmp access telnetRead (5) ==> telnet access and snmp read only access telnetReadWrite (6) ==> telnet access and snmp read-write access. | 1.3.6.1.4.1.1795.2.24.2.8.5.1.2 | INTEGER {read(1), readWrite(2), noAccess(3), telnetNoAccess(4), telnetRead(5), telnetReadWrite(6)} | read-write | deprecated |
| newSecurityMgrSubnetMask OBJECT-TYPE This object is used to specify the subnet mask | 1.3.6.1.4.1.1795.2.24.2.8.5.1.3 | IpAddress | read-write | deprecated |
| devSecurityTelnetSourceValidation OBJECT-TYPE This object is used to either enable or disable telnet source address screening | 1.3.6.1.4.1.1795.2.24.2.8.6 | INTEGER {disable(1), enable(2)} | read-write | mandatory |
| devSecurityFtpSourceValidation OBJECT-TYPE This object is used to either enable or disable ftp source address screening | 1.3.6.1.4.1.1795.2.24.2.8.7 | INTEGER {disable(1), enable(2)} | read-write | mandatory |
| securityMgrTable OBJECT-TYPE A list of the security manager entries. If an entry is not found in this table, it is added to the table. | 1.3.6.1.4.1.1795.2.24.2.8.8 | not-accessible | mandatory | |
| securityMgrEntry OBJECT-TYPE The device access security configuration items. | 1.3.6.1.4.1.1795.2.24.2.8.8.1 | not-accessible | mandatory | |
| securityMgrIpAddress OBJECT-TYPE This is used to specify the IP address that identifies the SNMP manager(s) that are authorized to send SNMP messages. | 1.3.6.1.4.1.1795.2.24.2.8.8.1.1 | IpAddress | read-only | mandatory |
| securityMgrSubnetMask OBJECT-TYPE This object is used to specify the subnet mask | 1.3.6.1.4.1.1795.2.24.2.8.8.1.2 | IpAddress | read-only | mandatory |
| securityMgrSnmpAccess OBJECT-TYPE This is used to specify the snmp access to the device. | 1.3.6.1.4.1.1795.2.24.2.8.8.1.3 | INTEGER {readOnly(1), readWrite(2), noAccess(3)} | read-write | mandatory |
| securityMgrTelnetAccess OBJECT-TYPE This is used to specify the telnet access to the device. | 1.3.6.1.4.1.1795.2.24.2.8.8.1.4 | INTEGER {disable(1), enable(2)} | read-write | mandatory |
| securityMgrFtpAccess OBJECT-TYPE This is used to specify the ftp access to the device. | 1.3.6.1.4.1.1795.2.24.2.8.8.1.5 | INTEGER {disable(1), enable(2)} | read-write | mandatory |
| securityMgrTrapAccess OBJECT-TYPE This is used to specify the trap access to the device. NOTE: the pdnDevTrapMgrTable should be used instead. | 1.3.6.1.4.1.1795.2.24.2.8.8.1.6 | INTEGER {trapAccess(1), noTrapAccess(2)} | read-write | deprecated |
| securityMgrRowStatus OBJECT-TYPE The status of this table entry. | 1.3.6.1.4.1.1795.2.24.2.8.8.1.7 | RowStatus | read-write | mandatory |
| devSecuritySNMPMgrAccess OBJECT-TYPE This object is used to either enable or disable SNMP access to the system. When disabled the first check on any incoming PDU is based on the UPD type of the datagram. If it is an SNMP manager trying to access SNMP agent on the system the access will be denied. | 1.3.6.1.4.1.1795.2.24.2.8.9 | INTEGER {disable(1), enable(2)} | read-write | mandatory |