--==================================================================
-- Copyright (C) 2008 by HUAWEI TECHNOLOGIES. All rights reserved.
--
-- Description: HUAWEI SSH MIB
-- Reference:
-- Version: V1.1
-- History:
-- <author>, <date>, <contents>
-- ZhouYun 2006-3-22
-- Dushyant 2008-12-05
-- ==================================================================
-- ==================================================================
--
-- Varibles and types are imported
--
-- ==================================================================
HUAWEI-SSH-MIB DEFINITIONS ::= BEGIN
IMPORTS
hwDatacomm
FROM HUAWEI-MIB
OBJECT-GROUP, MODULE-COMPLIANCE, NOTIFICATION-GROUP
FROM SNMPv2-CONF
Integer32, OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE
FROM SNMPv2-SMI
RowStatus, DisplayString
FROM SNMPv2-TC;
hwSSH MODULE-IDENTITY
LAST-UPDATED "200812051342Z"
ORGANIZATION
"Huawei Technologies co.,Ltd."
CONTACT-INFO
"VRP Team Huawei Technologies co.,Ltd.
Huawei Bld.,NO.3 Xinxi Rd.,
Shang-Di Information Industry Base,
Hai-Dian District Beijing P.R. China
http://www.huawei.com
Zip:100085
"
DESCRIPTION
"The HUAWEI-SSH-MIB which contains objects manages the SSH Server and SSH Client configuration.
"
REVISION "200607081938Z"
DESCRIPTION
"The initial revision of this MIB module ."
REVISION "200812051342Z"
DESCRIPTION
"MIB module updated for new features in VRP V8."
::= { hwDatacomm 118 }
--
-- Node definitions
--
-- ==================================================================
--
-- ======================= definition begin =========================
--
-- ==================================================================
hwSSHServer OBJECT IDENTIFIER ::= { hwSSH 1 }
hwStelnetServerEnable OBJECT-TYPE
SYNTAX INTEGER
{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies whether the SSH stelnet server is enable.
The default is 2."
::= { hwSSHServer 1 }
hwSftpServerEnable OBJECT-TYPE
SYNTAX INTEGER
{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies whether the sftp server is enable.
The default is 2."
::= { hwSSHServer 2 }
hwSSHServerComp1x OBJECT-TYPE
SYNTAX INTEGER
{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies whether the SSH server is compatible with SSH1.x.
The default is 1."
::= { hwSSHServer 3 }
hwSSHServerTimeOut OBJECT-TYPE
SYNTAX Integer32 (1..120)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies the time when SSH authentication times out.
The unit is the second and the default is 60 seconds."
::= { hwSSHServer 4 }
hwSSHServerRetry OBJECT-TYPE
SYNTAX Integer32 (1..5)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies authentication-retry times for SSH user .
The default is 3."
::= { hwSSHServer 5 }
hwSSHServerPort OBJECT-TYPE
SYNTAX Integer32 (22|1025..65535)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies port number for SSH server supporting.
The default value is 22."
::= { hwSSHServer 6 }
hwSSHServerKeyTimeOut OBJECT-TYPE
SYNTAX Integer32 (0..24)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies update time of the server key ,which unit is hour.
By default,value is 0 hour,which means server key cann't be updated forever.
"
::= { hwSSHServer 7 }
hwSSHServerAlarmEnable OBJECT-TYPE
SYNTAX INTEGER
{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies whether send trap information to NMS.
Only when it values enable,allowed to send trap informations to NMS.
The default is 2."
::= { hwSSHServer 8 }
hwSftpMaxUserNum OBJECT-TYPE
SYNTAX Integer32 (0..15)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies the max number of sftp user that sftp server supporting.
The default is 5."
::= { hwSSHServer 9 }
hwSftpOnLineUserNum OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the number of sftp user that has been connected to sftp server currently ."
::= { hwSSHServer 10 }
hwSSHUserTable OBJECT-TYPE
SYNTAX SEQUENCE OF HwSSHUserEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of configuration about SSH user."
::= { hwSSHServer 11 }
hwSSHUserEntry OBJECT-TYPE
SYNTAX HwSSHUserEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Information about configuration of a SSH user."
INDEX { hwSSHUserIndex }
::= { hwSSHUserTable 1 }
HwSSHUserEntry ::=
SEQUENCE {
hwSSHUserIndex
Integer32,
hwSSHUserName
OCTET STRING,
hwSSHUserAssignKey
OCTET STRING,
hwSSHUserAuthType
INTEGER,
hwSSHUserServiceType
INTEGER,
hwSSHUserSftpDirectory
OCTET STRING,
hwSSHUserAuthorizationCMD
INTEGER,
hwSSHUserRowStatus
RowStatus,
hwSSHUserAssignKeyType
INTEGER
}
hwSSHUserIndex OBJECT-TYPE
SYNTAX Integer32 (1..200)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The object specifies the index of hwSSHUserTable."
::= { hwSSHUserEntry 1 }
hwSSHUserName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (1..255))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies the name of a SSH user,the maximum length of the node is 85."
::= { hwSSHUserEntry 2 }
hwSSHUserAssignKey OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (0..64))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies a peer public key for a SSH user.This peer public key on the SSH server must exist."
::= { hwSSHUserEntry 3 }
hwSSHUserAuthType OBJECT-TYPE
SYNTAX INTEGER
{
authNULL(1),
authPASSWORD(2),
authRSA(3),
authRSAorPASSWORD(4),
authRSAandPASSWORD(5),
authDSA(6),
authDSAandPASSWORD(7),
authAny(8)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies the authentication type of SSH user.The default authentication type is authNULL. "
DEFVAL { authNULL }
::= { hwSSHUserEntry 4 }
hwSSHUserServiceType OBJECT-TYPE
SYNTAX INTEGER
{
servicetypeNULL(1),
servicetypeSTELNET(2),
servicetypeSFTP(3),
servicetypeALL(4),
servicetypeSNetConf(5)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies the service type of SSH user.The default service type is servicetypeNULL. "
DEFVAL { servicetypeNULL }
::= { hwSSHUserEntry 5 }
hwSSHUserSftpDirectory OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (0..255))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies the working directory for the sftp user.
The total length of absolute path is 128,the length of single directory is 128."
::= { hwSSHUserEntry 6 }
hwSSHUserAuthorizationCMD OBJECT-TYPE
SYNTAX INTEGER
{
authorizationNULL(1),
authorizationAAA(2)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies the authorization type of SSH user.When authorizationAAA is specified,
the SSH user will be authorizated by HWTACACS server.The default authorization is authorizationNULL ,
indicating SSH user doesn't need to be authorizated by HWTACACS server. "
DEFVAL { authorizationNULL }
::= { hwSSHUserEntry 7 }
hwSSHUserRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies the status of this table entry.
When the status is active, hwSSHUserAssignKey,hwSSHUserAuthType,
hwSSHUserServiceType,hwSSHUserSftpDirectory and hwSSHUserAuthorizationCMD's
value in the entry are allowed to be modified."
::= { hwSSHUserEntry 8 }
hwSSHUserAssignKeyType OBJECT-TYPE
SYNTAX INTEGER
{
keyTypeNULL(0),
keyTypeRSA(1),
keyTypeDSA(2)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies the public key type of SSH user. "
::= { hwSSHUserEntry 9 }
hwSSHServerSessionTable OBJECT-TYPE
SYNTAX SEQUENCE OF HwSSHServerSessionEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The object shows current session information of the SSH server which includes username,
version information ,retry times of online users currently ."
::= { hwSSHServer 12 }
hwSSHServerSessionEntry OBJECT-TYPE
SYNTAX HwSSHServerSessionEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table to show current session information of the SSH server."
INDEX { hwSSHSessionIndex }
::= { hwSSHServerSessionTable 1 }
HwSSHServerSessionEntry ::=
SEQUENCE {
hwSSHSessionIndex
Integer32,
hwSSHSessionUserName
DisplayString,
hwSSHSessionConnectType
INTEGER,
hwSSHSessionVer
DisplayString,
hwSSHSessionState
INTEGER,
hwSSHSessionRetry
Integer32,
hwSSHSessionCtosCipher
DisplayString,
hwSSHSessionStocCipher
DisplayString,
hwSSHSessionCtosHmac
DisplayString,
hwSSHSessionStocHmac
DisplayString,
hwSSHSessionKex
DisplayString,
hwSSHSessionAuthType
DisplayString,
hwSSHSessionServiceType
DisplayString,
hwSSHSessionKeyType
INTEGER,
hwSSHSessionConnectionIndex
Integer32
}
hwSSHSessionIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The object specifies the index of hwSSHServerSessionTable."
::= { hwSSHServerSessionEntry 1 }
hwSSHSessionUserName OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the name of a SSH user,which has started a session."
::= { hwSSHServerSessionEntry 2 }
hwSSHSessionConnectType OBJECT-TYPE
SYNTAX INTEGER
{
none(0),
vty0(1),
vty1(2),
vty2(3),
vty3(4),
vty4(5),
vty5(6),
vty6(7),
vty7(8),
vty8(9),
vty9(10),
vty10(11),
vty11(12),
vty12(13),
vty13(14),
vty14(15),
vty15(16),
vty16(17),
vty17(18),
vty18(19),
vty19(20),
vty20(21)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the line number supports a connection of SSH user which is in connection with SSH server.
This object is used only for STelnet connections. Not valid for Sftp or SNetconf connections."
::= { hwSSHServerSessionEntry 3 }
hwSSHSessionVer OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the version information of a SSH user which is in connection with SSH server."
::= { hwSSHServerSessionEntry 4 }
hwSSHSessionState OBJECT-TYPE
SYNTAX INTEGER { started(1) }
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the state of a SSH user which is in connection with SSH server ."
::= { hwSSHServerSessionEntry 5 }
hwSSHSessionRetry OBJECT-TYPE
SYNTAX Integer32 (0..5)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies SSH user's retrying times in authentications."
::= { hwSSHServerSessionEntry 6 }
hwSSHSessionCtosCipher OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the cipher of custom to server."
::= { hwSSHServerSessionEntry 7 }
hwSSHSessionStocCipher OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the cipher of server to custom."
::= { hwSSHServerSessionEntry 8 }
hwSSHSessionCtosHmac OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the hmac of custom to server."
::= { hwSSHServerSessionEntry 9 }
hwSSHSessionStocHmac OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the hmac of server to custom."
::= { hwSSHServerSessionEntry 10 }
hwSSHSessionKex OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the key exchange."
::= { hwSSHServerSessionEntry 11 }
hwSSHSessionAuthType OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the authentication type of SSH session."
::= { hwSSHServerSessionEntry 12 }
hwSSHSessionServiceType OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the service type of SSH session."
::= { hwSSHServerSessionEntry 13 }
hwSSHSessionKeyType OBJECT-TYPE
SYNTAX INTEGER
{
keyTypeRSA(1),
keyTypeDSA(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the public key type of SSH session."
::= { hwSSHServerSessionEntry 14 }
hwSSHSessionConnectionIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object specifies the line number supports a connection of SSH user which is in connection with SSH(STelnet/Sftp/SNetConf) server ."
::= { hwSSHServerSessionEntry 15 }
hwSTelnetMaxUserNum OBJECT-TYPE
SYNTAX Integer32 (0..15)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies the max number of STelnet user that STelnet Server supporting.
The default is 5."
::= { hwSSHServer 13 }
hwSNetConfMaxUserNum OBJECT-TYPE
SYNTAX Integer32 (0..15)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies the max number of SNetConf user that SNetConf Server supporting.
The default is 5."
::= { hwSSHServer 14 }
hwSNetConfServerEnable OBJECT-TYPE
SYNTAX INTEGER
{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies whether the SSH SNetConf Server is enable.
The default is 2."
::= { hwSSHServer 15 }
hwSSHKeepAliveEnable OBJECT-TYPE
SYNTAX INTEGER
{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies whether the KeepAlive functionality on SSH Server is enable.
The default is 2."
::= { hwSSHServer 16 }
hwSSHClient OBJECT IDENTIFIER ::= { hwSSH 2 }
hwSSHFirstTimeAuthEnable OBJECT-TYPE
SYNTAX INTEGER
{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies whether the SSH client supports first-time-authentication.
The default is 2."
::= { hwSSHClient 1 }
hwSSHServerInfoTable OBJECT-TYPE
SYNTAX SEQUENCE OF HwSSHServerInfoEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of configuration about the relation between the SSH server and the rsa peerkey."
::= { hwSSHClient 2 }
hwSSHServerInfoEntry OBJECT-TYPE
SYNTAX HwSSHServerInfoEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of configuration about the relation between the SSH server and the rsa peerkey."
INDEX { hwSSHServerIndex }
::= { hwSSHServerInfoTable 1 }
HwSSHServerInfoEntry ::=
SEQUENCE {
hwSSHServerIndex
Integer32,
hwSSHServerName
OCTET STRING,
hwSSHServerAssignKey
OCTET STRING,
hwSSHServerRowStatus
RowStatus,
hwSSHServerAssignDSAKey
OCTET STRING
}
hwSSHServerIndex OBJECT-TYPE
SYNTAX Integer32 (1..20)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The object specifies the index of hwSSHServerInfoTable."
::= { hwSSHServerInfoEntry 1 }
hwSSHServerName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (1..255))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies the name of a SSH server, the maximum length of the node is 46."
::= { hwSSHServerInfoEntry 2 }
hwSSHServerAssignKey OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (0..64))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies a RSA peer public key for a SSH server.This peer public key must exist."
::= { hwSSHServerInfoEntry 3 }
hwSSHServerRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies the status of this table entry.
When the status is active, hwSSHServerAssignKey's value in the entry is
allowed to be modified."
::= { hwSSHServerInfoEntry 4 }
hwSSHServerAssignDSAKey OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (0..64))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object specifies a DSA peer public key for a SSH server.This peer public key must exist."
::= { hwSSHServerInfoEntry 5 }
hwSSHKeepAliveInterval OBJECT-TYPE
SYNTAX Integer32(0..3600)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies KeepAlive Timeout interval on SSH Client.
The default is 0. 0 specify no KeepAlive packet should be sent to Server."
::= { hwSSHClient 3 }
hwSSHKeepAliveMaxCount OBJECT-TYPE
SYNTAX Integer32(1..30)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The object specifies maximum KeepAlive packet to send to SSH Server before disconnect.
The default is 3."
::= { hwSSHClient 4 }
hwSSHNotifications OBJECT IDENTIFIER ::= { hwSSH 3 }
hwSSHSftpUserNumExceedMax NOTIFICATION-TYPE
OBJECTS { hwSftpOnLineUserNum, hwSftpMaxUserNum }
STATUS current
DESCRIPTION
"This notification was sent when the total number of sftp users requesting sftp service
exceeds max user number configured."
::= { hwSSHNotifications 1 }
-- Conformance information
hwSSHMIBConformance OBJECT IDENTIFIER ::= { hwSSH 4 }
hwSSHMIBCompliances OBJECT IDENTIFIER ::= { hwSSHMIBConformance 1 }
-- this module
hwSSHMIBCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for systems supporting the HUAWEI-SSH-MIB."
MODULE HUAWEI-SSH-MIB
MANDATORY-GROUPS { hwSSHServerGroup, hwSSHUserGroup, hwSSHServerSessionGroup,
hwSSHClientGroup, hwSSHServerInfoGroup, hwSSHNotificationGroup }
::= { hwSSHMIBCompliances 1 }
hwSSHMIBGroups OBJECT IDENTIFIER ::= { hwSSHMIBConformance 2 }
hwSSHServerGroup OBJECT-GROUP
OBJECTS { hwStelnetServerEnable, hwSftpServerEnable, hwSSHServerComp1x, hwSSHServerTimeOut,
hwSSHServerRetry, hwSSHServerPort, hwSSHServerKeyTimeOut, hwSSHServerAlarmEnable,
hwSftpMaxUserNum, hwSftpOnLineUserNum, hwSTelnetMaxUserNum, hwSNetConfMaxUserNum,
hwSNetConfServerEnable, hwSSHKeepAliveEnable }
STATUS current
DESCRIPTION
"The SSH server attribute group."
::= { hwSSHMIBGroups 1 }
hwSSHUserGroup OBJECT-GROUP
OBJECTS { hwSSHUserName, hwSSHUserAssignKey, hwSSHUserAuthType, hwSSHUserServiceType,
hwSSHUserSftpDirectory, hwSSHUserAuthorizationCMD, hwSSHUserRowStatus, hwSSHUserAssignKeyType }
STATUS current
DESCRIPTION
"The SSH user's group."
::= { hwSSHMIBGroups 2 }
hwSSHServerSessionGroup OBJECT-GROUP
OBJECTS { hwSSHSessionUserName, hwSSHSessionConnectType, hwSSHSessionVer, hwSSHSessionState,
hwSSHSessionRetry, hwSSHSessionCtosCipher, hwSSHSessionStocCipher, hwSSHSessionCtosHmac,
hwSSHSessionStocHmac, hwSSHSessionKex, hwSSHSessionAuthType, hwSSHSessionServiceType,
hwSSHSessionKeyType, hwSSHSessionConnectionIndex }
STATUS current
DESCRIPTION
"The SSH server's session group."
::= { hwSSHMIBGroups 3 }
hwSSHClientGroup OBJECT-GROUP
OBJECTS { hwSSHFirstTimeAuthEnable, hwSSHKeepAliveInterval, hwSSHKeepAliveMaxCount }
STATUS current
DESCRIPTION
"The SSH client's attribute group."
::= { hwSSHMIBGroups 4 }
hwSSHServerInfoGroup OBJECT-GROUP
OBJECTS { hwSSHServerName, hwSSHServerAssignKey, hwSSHServerRowStatus, hwSSHServerAssignDSAKey }
STATUS current
DESCRIPTION
"The SSH serverInfo's group."
::= { hwSSHMIBGroups 5 }
hwSSHNotificationGroup NOTIFICATION-GROUP
NOTIFICATIONS { hwSSHSftpUserNumExceedMax }
STATUS current
DESCRIPTION
"The SSH Notification group."
::= { hwSSHMIBGroups 6 }
END
--
-- HUAWEI-SSH-MIB.mib
--