MIBs Depot

RADLAN-SSH-MIB

Last updated
2002-09-30 00:24
Organization
Radlan Computer Communication Ltd.
Revisions
2003-01-03 00:24, 2003-09-21 00:24
Namespace
radlan
Source file
RADLAN-SSH-MIB
Digest
sha256:82b2883a963485f786af751a3e78e4104f15706cfbb625309815924a1c082b20

Description

The MIB module describes the private MIB for SSH supported by Radlan's software and products.

Contact

radlan.com

Imports

FromSymbols
RADLAN-MIBrnd
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP
SNMPv2-SMIIpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, RowStatus, TEXTUAL-CONVENTION

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

BRIDGE-MIB
IANAifType-MIB
IEEE8021-PAE-MIB
IF-MIB
P-BRIDGE-MIB
Q-BRIDGE-MIB
RADLAN-MIB
RADLAN-SSH-MIB
RFC1158-MIB
RFC1271-MIB
RMON-MIB
RMON2-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-SMI-v1
SNMPv2-TC
SNMPv2-TC-v1
TOKEN-RING-RMON-MIB

Textual conventions

NameOIDSyntaxAccessStatus
RlSshPublicKeyAlgorithm
TEXTUAL-CONVENTION
This textual convention describes the various possible public key algorithms. The key algorithm is used to select the PK to be generated and is also used when viewing the public keys.
current
RlSshPublicKeyDigestFormat
TEXTUAL-CONVENTION
This textual convention describes the format used to display the public key fingerprint. The hex format is the format used by PGP and OpenSSH. The bubble-babble format is used by SSH.com software.
current

Objects

NameOIDSyntaxAccessStatus
rlSshMibVersion
OBJECT-TYPE
The MIB version. The current version is 2
1.3.6.1.4.1.89.78.1INTEGERread-onlycurrent
rlSshServer
OBJECT-IDENTITY
1.3.6.1.4.1.89.78.2
rlSshServerHostPublicKeyTable
OBJECT-TYPE
This table contains the router's public key. Each row in this table contains a fragment of the key, in printable binhex format. There may be up to 160 characters in every fragment, and they are all combined to form one key. The key is generated by writing to rlSshServerRegenerateHostKey. To cause clients to connect to this router without printing warning messages (and also prevent active man-in-the-middle), the router's public key must printed out and inserted into the client's authorized_keys file
1.3.6.1.4.1.89.78.2.1not-accessiblecurrent
rlSshServerHostPublicKeyTableEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.89.78.2.1.1not-accessiblecurrent
rlSshServerHostPublicKeyAlgorithm
OBJECT-TYPE
Identifies the type of public key to be displayed.
1.3.6.1.4.1.89.78.2.1.1.1RlSshPublicKeyAlgorithmread-onlycurrent
rlSshServerHostPublicKeyFragmentId
OBJECT-TYPE
Identifies the index of this fragment in the final key. All segments must be combined to form one big key.
1.3.6.1.4.1.89.78.2.1.1.2Unsigned32read-onlycurrent
rlSshServerHostPublicKeyFragmentText
OBJECT-TYPE
A part of the readable text entry for the server's public authorzation key.
1.3.6.1.4.1.89.78.2.1.1.3DisplayStringread-onlycurrent
rlSshServerHostPublicKeyFingerprintTable
OBJECT-TYPE
This table contains the fingerprint for the router's public key.
1.3.6.1.4.1.89.78.2.2not-accessiblecurrent
rlSshServerHostPublicKeyFingerprintTableEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.89.78.2.2.1not-accessiblecurrent
rlSshServerHostPublicKeyFingerprintAlgorithm
OBJECT-TYPE
Identifies the type of public key to be displayed.
1.3.6.1.4.1.89.78.2.2.1.1RlSshPublicKeyAlgorithmread-onlycurrent
rlSshServerHostPublicKeyFingerprintDigestFormat
OBJECT-TYPE
Format of the digest to be displayed (OpenSSH or SSH.com).
1.3.6.1.4.1.89.78.2.2.1.2RlSshPublicKeyDigestFormatread-onlycurrent
rlSshServerHostPublicKeyFingerprint
OBJECT-TYPE
SECSH format fingerprint of the server's public key. To prevent man in the middle attacks, users should make sure the ssh Server's fingerprint, as printed in the connection process, is similar to the one printed here.
1.3.6.1.4.1.89.78.2.2.1.3DisplayStringread-onlycurrent
rlSshServerAuthorizedUsersPublicKeyTable
OBJECT-TYPE
This table contains public keys for all users who are authorized to access the router. For a user to be able to log in using SSH, the user name must appear in this table, and the user's public key must match the one found here.
1.3.6.1.4.1.89.78.2.3not-accessiblecurrent
rlSshServerAuthorizedUsersPublicKeyTableEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.89.78.2.3.1not-accessiblecurrent
rlSshServerAuthorizedUserName
OBJECT-TYPE
Name of the user who owns this public key. Both the user name and the key bytes must match before a user is authenticated using this key.
1.3.6.1.4.1.89.78.2.3.1.1DisplayString (SIZE(1..48))read-writecurrent
rlSshServerAuthorizedUserPublicKeyFragmentId
OBJECT-TYPE
Identifies the index of this fragment in the final key. All segments must be combined to form one big key.
1.3.6.1.4.1.89.78.2.3.1.2Unsigned32read-writecurrent
rlSshServerAuthorizedUserPublicKeyFragmentText
OBJECT-TYPE
A part of the readable text entry for the user's public authorzation key.
1.3.6.1.4.1.89.78.2.3.1.3DisplayStringread-writecurrent
rlSshServerAuthorizedUserPublicKeyFragmentStatus
OBJECT-TYPE
Create or delete a fragment of the user's public key. A user is deleted if it has no remaining fragments.
1.3.6.1.4.1.89.78.2.3.1.4RowStatusread-writecurrent
rlSshServerAuthorizedUsersPublicKeyFingerprintTable
OBJECT-TYPE
This table contains the fingerprints of the public keys for all users who are authorized to access the router. To prevent man in the middle attacks, users should make sure the user's fingerprint, as printed in the connection process, is similar to the one printed here.
1.3.6.1.4.1.89.78.2.5not-accessiblecurrent
rlSshServerAuthorizedUsersPublicKeyFingerprintTableEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.89.78.2.5.1not-accessiblecurrent
rlSshServerAuthorizedUserFingerprintName
OBJECT-TYPE
Name of the user who owns this public key. Both the user name and the key bytes must match before a user is authenticated using this key.
1.3.6.1.4.1.89.78.2.5.1.1DisplayString (SIZE(1..48))read-writecurrent
rlSshServerAuthorizedUserPublicKeyFingerprintAlgorithm
OBJECT-TYPE
Identifies the type of public key to be displayed.
1.3.6.1.4.1.89.78.2.5.1.2RlSshPublicKeyAlgorithmread-onlycurrent
rlSshServerAuthorizedUserPublicKeyFingerprintDigestFormat
OBJECT-TYPE
Format of the digest to be displayed (OpenSSH or SSH.com).
1.3.6.1.4.1.89.78.2.5.1.3RlSshPublicKeyDigestFormatread-onlycurrent
rlSshServerAuthorizedUserPublicKeyFingerprint
OBJECT-TYPE
SECSH format fingerprint of the user's public key. To prevent man in the middle attacks, users should make sure their ssh fingerprint, as printed in the connection process, is similar to the one printed here.
1.3.6.1.4.1.89.78.2.5.1.4DisplayStringread-onlycurrent
rlSshServerSessionTable
OBJECT-TYPE
Each row in this table corresponds to an active SSH session with the server
1.3.6.1.4.1.89.78.2.6not-accessiblecurrent
rlSshServerSessionTableEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.89.78.2.6.1not-accessiblecurrent
rlSshServerSessionIdentifier
OBJECT-TYPE
Identifies the connection to which this row corresponds.
1.3.6.1.4.1.89.78.2.6.1.1Unsigned32read-onlycurrent
rlSshServerSessionPeerAddress
OBJECT-TYPE
The network address of the remote host connected to the server.
1.3.6.1.4.1.89.78.2.6.1.2IpAddressread-onlycurrent
rlSshServerSessionPeerPort
OBJECT-TYPE
The source network port of the remote host connected to the server.
1.3.6.1.4.1.89.78.2.6.1.3Unsigned32read-onlycurrent
rlSshServerSessionPeerVersion
OBJECT-TYPE
The client version of the remote host connected to the server.
1.3.6.1.4.1.89.78.2.6.1.4DisplayStringread-onlycurrent
rlSshServerSessionUsername
OBJECT-TYPE
SSH authenticated name of user connected to the server.
1.3.6.1.4.1.89.78.2.6.1.5DisplayStringread-onlycurrent
rlSshServerSessionCipher
OBJECT-TYPE
Data encryption cipher used in this connection.
1.3.6.1.4.1.89.78.2.6.1.6DisplayStringread-onlycurrent
rlSshServerSessionHMAC
OBJECT-TYPE
Message authentication code used in this connection.
1.3.6.1.4.1.89.78.2.6.1.7DisplayStringread-onlycurrent
rlSshServerPort
OBJECT-TYPE
Specifies the TCP port used by the SSH 2 Server to listen for incoming connections.
1.3.6.1.4.1.89.78.2.101Unsigned32 (1..65535)read-writecurrent
rlSshServerEnable
OBJECT-TYPE
Enables listening for incoming SSH2 connections on the port defined in rlSshServerPort.
1.3.6.1.4.1.89.78.2.102INTEGER {enable(1), disable(2)}read-writecurrent
rlSshServerEnablePublicKeyAuthentication
OBJECT-TYPE
If PK authentication is enabled, incoming SSH connections are authenticated using public key authentication (using rlSshServerAuthorizedUsersPublicKeyTable), before authenticating using the router's standard AAA. If disabled, SSH connections are only authorized by the router's AAA component.
1.3.6.1.4.1.89.78.2.103INTEGER {enable(1), disable(2)}read-writecurrent
rlSshServerRegenerateHostKey
OBJECT-TYPE
Setting to a value other than none results in the Server (Host) Key being regenerated. The key size is host-specific.
1.3.6.1.4.1.89.78.2.104RlSshPublicKeyAlgorithmread-writecurrent
rlSshClient
OBJECT-IDENTITY
1.3.6.1.4.1.89.78.3
rlSshClientUserName
OBJECT-TYPE
Specifies the default user name the ssh client will use when authenticating to a remote server.
1.3.6.1.4.1.89.78.3.1DisplayStringread-writecurrent
rlSshClientRegenerateSelfKey
OBJECT-TYPE
Setting to a value other than none results in the client self key being regenerated. The key size is host-specific.
1.3.6.1.4.1.89.78.3.2RlSshPublicKeyAlgorithmread-writecurrent
rlSshClientSelfPublicKeyTable
OBJECT-TYPE
This table contains the router's client self public key. Each row in this table contains a fragment of the key, in printable binhex format. There may be up to 160 characters in every fragment, and they are all combined to form one key. The key is generated by writing to rlSshClientRegenerateSelfKey. To cause clients to connect to this router without printing warning messages (and also prevent active man-in-the-middle), the router's public key must printed out and inserted into the client's authorized_keys file
1.3.6.1.4.1.89.78.3.3not-accessiblecurrent
rlSshClientSelfPublicKeyTableEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.89.78.3.3.1not-accessiblecurrent
rlSshClientSelfPublicKeyFragmentId
OBJECT-TYPE
Identifies the index of this fragment in the final key. All segments must be combined to form one big key.
1.3.6.1.4.1.89.78.3.3.1.1Unsigned32read-onlycurrent
rlSshClientSelfPublicKeyAlgorithm
OBJECT-TYPE
Identifies the type of public key to be displayed.
1.3.6.1.4.1.89.78.3.3.1.2RlSshPublicKeyAlgorithmread-onlycurrent
rlSshClientSelfPublicKeyFragmentText
OBJECT-TYPE
A part of the readable text entry for the router's client public authorization key.
1.3.6.1.4.1.89.78.3.3.1.3DisplayStringread-writecurrent
rlSshClientSelfPublicKeyFingerprintTable
OBJECT-TYPE
This table contains the fingerprint for the client's self key.
1.3.6.1.4.1.89.78.3.4not-accessiblecurrent
rlSshClientSelfPublicKeyFingerprintTableEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.89.78.3.4.1not-accessiblecurrent
rlSshClientSelfPublicKeyFingerprintAlgorithm
OBJECT-TYPE
Identifies the type of public key to be displayed.
1.3.6.1.4.1.89.78.3.4.1.1RlSshPublicKeyAlgorithmread-onlycurrent
rlSshClientSelfPublicKeyFingerprintDigestFormat
OBJECT-TYPE
Format of the digest to be displayed (OpenSSH or SSH.com).
1.3.6.1.4.1.89.78.3.4.1.2RlSshPublicKeyDigestFormatread-onlycurrent
rlSshClientSelfPublicKeyFingerprint
OBJECT-TYPE
SECSH format fingerprint of the client's self key. To prevent man in the middle attacks, users should make sure the ssh Server's fingerprint, as printed in the connection process, is similar to the one printed here.
1.3.6.1.4.1.89.78.3.4.1.3DisplayStringread-onlycurrent