-- ******************************************************************* -- Juniper User AAA objects MIB. -- -- Copyright (c) 2001-2013, Juniper Networks, Inc. -- All rights reserved. -- -- The contents of this document are subject to change without notice. -- ******************************************************************* JUNIPER-USER-AAA-MIB DEFINITIONS ::= BEGIN IMPORTS Counter64, IpAddress, Integer32, Counter32, Unsigned32, NOTIFICATION-TYPE, MODULE-IDENTITY, OBJECT-TYPE FROM SNMPv2-SMI TEXTUAL-CONVENTION, DisplayString, RowStatus, TruthValue FROM SNMPv2-TC Ipv6AddressPrefix, Ipv6AddressIfIdentifier, Ipv6Address FROM IPV6-TC EnabledStatus FROM JUNIPER-MIMSTP-MIB jnxUserAAAMibRoot FROM JUNIPER-SMI InetAddressType, InetAddress, InetAddressPrefixLength FROM INET-ADDRESS-MIB; jnxUserAAAMib MODULE-IDENTITY LAST-UPDATED "201307100000Z" ORGANIZATION "Juniper Networks, Inc." CONTACT-INFO "Juniper Technical Assistance Center Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, CA 94089 E-mail: support@juniper.net HTTP://www.juniper.net" DESCRIPTION "This module defines the objects pertaining to User authentication, authorization and accounting" REVISION "201307100000Z" DESCRIPTION "Adding jnxUserAAADomainStripUsername and jnxUserAAADomainOverridePassword to jnxUserAAADomain" REVISION "201303180000Z" DESCRIPTION "jnxAccessAuthServerEnabled, corrected description" REVISION "201212290000Z" DESCRIPTION "jnxUserAAADomainDynamicPorfile object has been deprecated and replaced by jnxUserAAADomainDynamicProfile" REVISION "201012080000Z" DESCRIPTION "Updates related to adding address pool display" REVISION "201011230000Z" DESCRIPTION "Updates related to adding address pool traps" REVISION "201002091110Z" DESCRIPTION "Added jnxUserAAAAssignment, jnxUserAAAGeneral, jnxUserAAADomainDelimiters, jnxUserAAADomainParseDirection, jnxUserAAADomain, jnxUserAAADomainTable, jnxUserAAADomainEntry, jnxUserAAADomainName, jnxUserAAADomainStripDomain, jnxUserAAADomainLogicalSystem, jnxUserAAADomainRoutingInstance, jnxUserAAADomainAddrPoolName, jnxUserAAADomainDynamicPorfile, jnxUserAAADomainTargetLogicalSystem, jnxUserAAADomainTargetRoutingInstance, jnxUserAAADomainTunnelProfile, jnxUserAAADomainTunnelTable, jnxUserAAADomainTunnelEntry, jnxUserAAADomainTunnelName, jnxUserAAADomainTunnelDefId, jnxUserAAADomainTunnelPreference, jnxUserAAADomainTunnelRemoteGwName, jnxUserAAADomainTunnelRemoteGwAddress, jnxUserAAADomainTunnelSourceGwName, jnxUserAAADomainTunnelSourceGwAddress, jnxUserAAADomainTunnelSecret, jnxUserAAADomainTunnelLogicalSystems, jnxUserAAADomainTunnelRoutingInstance, jnxUserAAADomainTunnelMedium, jnxUserAAADomainTunnelType, jnxUserAAADomainTunnelId, jnxUserAAADomainTunnelMaxSessions, jnxUserAAADomainPadnTable, jnxUserAAADomainPadnEntry, jnxUserAAADomainPadnIpAddress, jnxUserAAADomainPadnIpMask, jnxUserAAADomainPadnDistance, jnxUserAAAAccessProfile, jnxUserAAAAccessProfileGeneral, jnxUserAAAAccessProfileTable, jnxUserAAAAccessProfileEntry, jnxUserAAAAccessProfileName, jnxUserAAAAccessProfileAuthenticationOrder, jnxUserAAAAccessProfileAccountingOrder, jnxUserAAAAccessProfileAuthorizationOrder, jnxUserAAAAccessProfileProvisioningOrder, jnxUserAAAAccessProfileAccStopOnFailure, jnxUserAAAAccessProfileAccStopOnDeny, jnxUserAAAAccessProfileImmediateUpdate, jnxUserAAAAccessProfileCoaImmediateUpdate, jnxUserAAAAccessProfileInterval, jnxUserAAAAccessProfileStatType." REVISION "200708210000Z" DESCRIPTION "Updates related to SecurID authentication" REVISION "200705140000Z" DESCRIPTION "Creation Date" ::= { jnxUserAAAMibRoot 1 } jnxUserAAANotifications OBJECT IDENTIFIER ::= { jnxUserAAAMib 0 } jnxUserAAAObjects OBJECT IDENTIFIER ::= { jnxUserAAAMib 1 } -- *************************************************************** -- Next Branch node. -- *************************************************************** jnxUserAAAGlobalStats OBJECT IDENTIFIER ::= { jnxUserAAAObjects 1 } jnxUserAAAAccessAuthStats OBJECT IDENTIFIER ::= { jnxUserAAAObjects 2 } jnxUserAAATrapVars OBJECT IDENTIFIER ::= { jnxUserAAAObjects 3 } jnxUserAAAAccessPool OBJECT IDENTIFIER ::= { jnxUserAAAObjects 4 } jnxUserAAAAssignment OBJECT IDENTIFIER ::= { jnxUserAAAObjects 5 } jnxUserAAAAccessProfile OBJECT IDENTIFIER ::= { jnxUserAAAObjects 6 } -- *************************************************************** -- Textual Conventions -- *************************************************************** JnxAuthenticateType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "There several way to authenticate a user, these are the types: radius - authentication via a radius server. local - local authenticaiton. ldap - authentication via a LDAP server. securid- authentication via RSA's SecurID authentication server jsrc - authentication via jsrc" SYNTAX INTEGER { none (0), radius (1), local (2), ldap (3), securid (4), jsrc (5) } JnxAccountingType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "There several choices for accounting, these are the types: radius - accounting via a radius server. local - local accounting. ldap - accounting via a LDAP server. securid- accounting via RSA's SecurID accounting server jsrc - accounting via jsrc" SYNTAX INTEGER { none (0), radius (1), local (2), ldap (3), securid (4), jsrc (5) } JnxAuthorizationType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "There several choices for authorization, these are the types: radius - authorization via a radius server. local - local authorization. ldap - authorization via a LDAP server. securid- authorization via RSA's SecurID authorization server jsrc - authorization via jsrc" SYNTAX INTEGER { none (0), radius (1), local (2), ldap (3), securid (4), jsrc (5) } JnxProvisioningType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "There several choices for provisioning, these are the types: radius - provisioning via a radius server. local - local provisioning. ldap - provisioning via a LDAP server. securid- provisioning via RSA's SecurID provisioning server jsrc - provisioning via jsrc" SYNTAX INTEGER { none (0), radius (1), local (2), ldap (3), securid (4), jsrc (5) } -- *************************************************************** -- Statistic counters for related to access authentication. -- *************************************************************** jnxTotalAuthenticationRequests OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Total authentication requests received." ::= { jnxUserAAAGlobalStats 1 } jnxTotalAuthenticationResponses OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Total authentication responses." ::= { jnxUserAAAGlobalStats 2 } -- *************************************************************** -- Authentication Statistic Table : -- *************************************************************** jnxUserAAAStatTable OBJECT-TYPE SYNTAX SEQUENCE OF JnxAuthStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table exposes the user authentication statistics." ::= { jnxUserAAAAccessAuthStats 1 } jnxUserAAAStatEntry OBJECT-TYPE SYNTAX JnxAuthStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Statistic entry collects for authentication." INDEX { jnxUserAAAStatAuthType } ::= { jnxUserAAAStatTable 1 } JnxAuthStatEntry ::= SEQUENCE { jnxUserAAAStatAuthType JnxAuthenticateType, jnxUserAAAStatRequestReceived Counter64, jnxUserAAAStatAccessAccepted Counter64, jnxUserAAAStatAccessRejected Counter64 } jnxUserAAAStatAuthType OBJECT-TYPE SYNTAX JnxAuthenticateType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry indicates the authentication type. It uniquely identifies the statistics counters related to its authentication." ::= { jnxUserAAAStatEntry 1 } jnxUserAAAStatRequestReceived OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of request received." ::= { jnxUserAAAStatEntry 2 } jnxUserAAAStatAccessAccepted OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of access granted. It is an aggregated statistics for this type of authenticaiton." ::= { jnxUserAAAStatEntry 3 } jnxUserAAAStatAccessRejected OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "This number of access request rejected. It is an aggregated statistics for this type of authentication." ::= { jnxUserAAAStatEntry 4 } -- ******************************************************************** -- Objects used for the traps -- ******************************************************************** jnxUserAAAServerName OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The server name which identifies the authentication server." ::= { jnxUserAAATrapVars 1 } jnxUserAAAAddressPoolName OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The address pool name which identifies the local address pool." ::= { jnxUserAAATrapVars 2 } -- *************************************************************** -- definition of access authentication related traps. -- *************************************************************** -- -- Authentication Service is up -- jnxAccessAuthServiceUp NOTIFICATION-TYPE STATUS current DESCRIPTION "An access authentication trap signifies that the specified service has started. " ::= { jnxUserAAANotifications 1 } -- -- Authentication Service is down -- jnxAccessAuthServiceDown NOTIFICATION-TYPE STATUS current DESCRIPTION "An access authentication trap signifies that the specified service has been stopped." ::= { jnxUserAAANotifications 2 } -- -- Authentication server is not accessible. -- jnxAccessAuthServerDisabled NOTIFICATION-TYPE OBJECTS { jnxUserAAAServerName } STATUS current DESCRIPTION "An access authentication trap signifies that the External authentication server is not responding." ::= { jnxUserAAANotifications 3 } -- -- Authentication server state change to UP . -- jnxAccessAuthServerEnabled NOTIFICATION-TYPE OBJECTS { jnxUserAAAServerName } STATUS current DESCRIPTION "An access authentication trap signifies that the AAA client has changed the status of the External authentication server to UP." ::= { jnxUserAAANotifications 4 } -- -- Address Pool or Linked Pool chain has reached its warning -- threshold. -- jnxAccessAuthAddressPoolHighThreshold NOTIFICATION-TYPE OBJECTS { jnxUserAAAAddressPoolName } STATUS current DESCRIPTION "An access authentication trap signifies that the address pool has reached its high threshold." ::= { jnxUserAAANotifications 5 } -- -- Address Pool or Linked Pool chain has reached its abate -- threshold. -- jnxAccessAuthAddressPoolAbateThreshold NOTIFICATION-TYPE OBJECTS { jnxUserAAAAddressPoolName } STATUS current DESCRIPTION "An access authentication trap signifies that the address pool has reached its abate threshold" ::= { jnxUserAAANotifications 6 } -- -- Address Pool or Linked Pool chain is completely used up. -- jnxAccessAuthAddressPoolOutOfAddresses NOTIFICATION-TYPE OBJECTS { jnxUserAAAAddressPoolName } STATUS current DESCRIPTION "An access authentication trap signifies that an Out Of Addresses event occured on the pool." ::= { jnxUserAAANotifications 7 } -- -- Address Pool or Linked Pool chain is completely used up. -- jnxAccessAuthAddressPoolOutOfMemory NOTIFICATION-TYPE OBJECTS { jnxUserAAAAddressPoolName } STATUS current DESCRIPTION "An access authentication trap signifies that an Out Of Memory event occured on the pool." ::= { jnxUserAAANotifications 8 } -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ -- Managed objects for Access profile -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ jnxUserAAAAccessPoolGeneral OBJECT IDENTIFIER ::= { jnxUserAAAAccessPool 1 } jnxUserAAAAccessPoolTable OBJECT-TYPE SYNTAX SEQUENCE OF JnxUserAAAAccessPool MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entries in this table specify the address pools." ::= { jnxUserAAAAccessPoolGeneral 1 } jnxUserAAAAccessPoolEntry OBJECT-TYPE SYNTAX JnxUserAAAAccessPool MAX-ACCESS not-accessible STATUS current DESCRIPTION "A read-only description of the local address pools." INDEX { jnxUserAAAAccessPoolIdent } ::= { jnxUserAAAAccessPoolTable 1 } JnxUserAAAAccessPool ::= SEQUENCE { jnxUserAAAAccessPoolIdent Unsigned32, jnxUserAAAAccessPoolRoutingInstance DisplayString, jnxUserAAAAccessPoolName DisplayString, jnxUserAAAAccessPoolLinkName DisplayString, jnxUserAAAAccessPoolFamilyType InetAddressType, jnxUserAAAAccessPoolInetNetwork InetAddress, jnxUserAAAAccessPoolInetPrefixLength InetAddressPrefixLength, jnxUserAAAAccessPoolOutOfMemory Counter64, jnxUserAAAAccessPoolOutOfAddresses Counter64, jnxUserAAAAccessPoolAddressTotal Counter64, jnxUserAAAAccessPoolAddressesInUse Counter64, jnxUserAAAAccessPoolAddressUsage INTEGER, jnxUserAAAAccessPoolAddressUsageHigh INTEGER, jnxUserAAAAccessPoolAddressUsageAbate INTEGER } jnxUserAAAAccessPoolIdent OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The address identifier key." ::= { jnxUserAAAAccessPoolEntry 1 } jnxUserAAAAccessPoolRoutingInstance OBJECT-TYPE SYNTAX DisplayString (SIZE(1..63)) MAX-ACCESS read-only STATUS current DESCRIPTION "The routing instance of the address pool." ::= { jnxUserAAAAccessPoolEntry 2 } jnxUserAAAAccessPoolName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..63)) MAX-ACCESS read-only STATUS current DESCRIPTION "The address pool name." ::= { jnxUserAAAAccessPoolEntry 3 } jnxUserAAAAccessPoolLinkName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..63)) MAX-ACCESS read-only STATUS current DESCRIPTION "The address pool link name." ::= { jnxUserAAAAccessPoolEntry 4 } jnxUserAAAAccessPoolFamilyType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The family type of this pool." ::= { jnxUserAAAAccessPoolEntry 5 } jnxUserAAAAccessPoolInetNetwork OBJECT-TYPE SYNTAX InetAddress (SIZE(2..48)) MAX-ACCESS read-only STATUS current DESCRIPTION "The Match criteria for this pool. Network or Prefix" ::= { jnxUserAAAAccessPoolEntry 6 } jnxUserAAAAccessPoolInetPrefixLength OBJECT-TYPE SYNTAX InetAddressPrefixLength MAX-ACCESS read-only STATUS current DESCRIPTION "The Prefix Length for an IPv6 pool" ::= { jnxUserAAAAccessPoolEntry 7 } jnxUserAAAAccessPoolOutOfMemory OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The Number of times this pool has flagged an Out of Memory condition." ::= { jnxUserAAAAccessPoolEntry 8 } jnxUserAAAAccessPoolOutOfAddresses OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The Number of times this pool has flagged an Out of Address condition." ::= { jnxUserAAAAccessPoolEntry 9 } jnxUserAAAAccessPoolAddressTotal OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of Addresses or prefixes in this pool." ::= { jnxUserAAAAccessPoolEntry 10 } jnxUserAAAAccessPoolAddressesInUse OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of Addresses or prefixes given out from this pool." ::= { jnxUserAAAAccessPoolEntry 11 } jnxUserAAAAccessPoolAddressUsage OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "The percentage of addresses used in this pool or linked pool. If this pool is the head of a linked chain of pools, this number reflects the Usage for the whole chain. Conversely, if this pool it part of a linked chain of pools but not the head of the chain, the value will not be used." ::= { jnxUserAAAAccessPoolEntry 12 } jnxUserAAAAccessPoolAddressUsageHigh OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "The configured high percentage threshold of addresses used in this pool or linked pool. An SNMP trap is generated when this threshold is exceeded. This trap will only be generated for unlinked pools or pools that are the head of a linked chain of pools Conversely, if this pool it part of a linked chain of pools but not the head of the chain, then no traps will be generated." ::= { jnxUserAAAAccessPoolEntry 13 } jnxUserAAAAccessPoolAddressUsageAbate OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "The configured abate percentage threshold of addresses used in this pool or linked pool. An SNMP trap clear is generated when address use falls below this threshold percentage. This trap will only be generated for unlinked pools or pools that are the head of a linked chain of pools Conversely, if this pool it part of a linked chain of pools but not the head of the chain, then no traps will be generated." ::= { jnxUserAAAAccessPoolEntry 14 } -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ -- Managed objects for Assignment functions -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ jnxUserAAAGeneral OBJECT IDENTIFIER ::= { jnxUserAAAAssignment 1 } jnxUserAAADomainDelimiters OBJECT-TYPE SYNTAX DisplayString (SIZE(0..8)) MAX-ACCESS read-only STATUS current DESCRIPTION "The list of delimiters used to separate the user's name from the user's domain in the username field. The default is '@'." ::= { jnxUserAAAGeneral 1 } jnxUserAAADomainParseDirection OBJECT-TYPE SYNTAX INTEGER { rightToLeft(1), leftToRight(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The direction in which the user's name is parsed: either search for domain delimiter from left to right or right to left; first delimiter marks boundry. The default is right to left." DEFVAL { rightToLeft } ::= { jnxUserAAAGeneral 2 } jnxUserAAADomain OBJECT IDENTIFIER ::= { jnxUserAAAAssignment 2 } jnxUserAAADomainTable OBJECT-TYPE SYNTAX SEQUENCE OF JnxUserAAADomainEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entries in this table specify the assignment of a remote access user to a logical system, based on the user's domain." ::= { jnxUserAAADomain 1 } jnxUserAAADomainEntry OBJECT-TYPE SYNTAX JnxUserAAADomainEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A specification of the logical system to which users on a specified domain should be assigned." INDEX { IMPLIED jnxUserAAADomainName } ::= { jnxUserAAADomainTable 1 } JnxUserAAADomainEntry ::= SEQUENCE { jnxUserAAADomainName DisplayString, jnxUserAAADomainStripDomain TruthValue, jnxUserAAADomainLogicalSystem DisplayString, jnxUserAAADomainRoutingInstance DisplayString, jnxUserAAADomainAddrPoolName DisplayString, jnxUserAAADomainDynamicPorfile DisplayString, jnxUserAAADomainTargetLogicalSystem DisplayString, jnxUserAAADomainTargetRoutingInstance DisplayString, jnxUserAAADomainTunnelProfile DisplayString, jnxUserAAADomainDynamicProfile DisplayString, jnxUserAAADomainStripUsername INTEGER, jnxUserAAADomainOverridePassword TruthValue } jnxUserAAADomainName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..63)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The domain name uniquely identifying this entry." ::= { jnxUserAAADomainEntry 1 } jnxUserAAADomainStripDomain OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Enables/disables the domain name stripping feature, which causes the system to strip the domain name before sending the access-request to RADIUS for authentication." DEFVAL { false } ::= { jnxUserAAADomainEntry 2 } jnxUserAAADomainLogicalSystem OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The name of the logical system, which will be used by the AAA subsystem for this session. If not specified, will be mapped to default." DEFVAL { "" } ::= { jnxUserAAADomainEntry 3 } jnxUserAAADomainRoutingInstance OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The name of the routing instance, which will be used by the AAA subsystem for this session. If not specified, will be mapped to default." DEFVAL { "" } ::= { jnxUserAAADomainEntry 4 } jnxUserAAADomainAddrPoolName OBJECT-TYPE SYNTAX DisplayString (SIZE(0..63)) MAX-ACCESS read-only STATUS current DESCRIPTION "The configured the address-pool-name for the domain name." DEFVAL { "" } ::= { jnxUserAAADomainEntry 5 } jnxUserAAADomainDynamicPorfile OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The configured dynamic-profile which will be used for this session upon succeeding validation." DEFVAL { "" } ::= { jnxUserAAADomainEntry 6 } jnxUserAAADomainTargetLogicalSystem OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The configured target logical-system that this session will need to be mapped to. If not specified, will be mapped to default." ::= { jnxUserAAADomainEntry 7 } jnxUserAAADomainTargetRoutingInstance OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The configured routing-instance that this session will need to be mapped to." ::= { jnxUserAAADomainEntry 8 } jnxUserAAADomainTunnelProfile OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The associated tunnel profile." ::= { jnxUserAAADomainEntry 9 } jnxUserAAADomainDynamicProfile OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The configured dynamic-profile to be used for this session." DEFVAL { "" } ::= { jnxUserAAADomainEntry 10 } jnxUserAAADomainStripUsername OBJECT-TYPE SYNTAX INTEGER { disabled(0), leftToRight(1), rightToLeft(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "Displays the strip-username configuration." DEFVAL { 0 } ::= { jnxUserAAADomainEntry 11 } jnxUserAAADomainOverridePassword OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Displays the override-password configuration." DEFVAL { false } ::= { jnxUserAAADomainEntry 12 } jnxUserAAADomainTunnelTable OBJECT-TYPE SYNTAX SEQUENCE OF JnxUserAAADomainTunnelEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entries in this table specify the tunnels associated with a domain." ::= { jnxUserAAADomain 2 } jnxUserAAADomainTunnelEntry OBJECT-TYPE SYNTAX JnxUserAAADomainTunnelEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A specification of the tunnels associated with a domain." INDEX { jnxUserAAADomainTunnelName, jnxUserAAADomainTunnelDefId } ::= { jnxUserAAADomainTunnelTable 1 } JnxUserAAADomainTunnelEntry ::= SEQUENCE { jnxUserAAADomainTunnelName OCTET STRING, jnxUserAAADomainTunnelDefId Integer32, jnxUserAAADomainTunnelPreference Integer32, jnxUserAAADomainTunnelRemoteGwName DisplayString, jnxUserAAADomainTunnelRemoteGwAddress IpAddress, jnxUserAAADomainTunnelSourceGwName DisplayString, jnxUserAAADomainTunnelSourceGwAddress IpAddress, jnxUserAAADomainTunnelSecret DisplayString, jnxUserAAADomainTunnelLogicalSystems DisplayString, jnxUserAAADomainTunnelRoutingInstance DisplayString, jnxUserAAADomainTunnelMedium INTEGER, jnxUserAAADomainTunnelType INTEGER, jnxUserAAADomainTunnelId DisplayString, jnxUserAAADomainTunnelMaxSessions Unsigned32} jnxUserAAADomainTunnelName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(1..63)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The domain name associated with this entry." ::= { jnxUserAAADomainTunnelEntry 1 } jnxUserAAADomainTunnelDefId OBJECT-TYPE SYNTAX Integer32 (1..31) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The tunnel definition id value associated with this entry." ::= { jnxUserAAADomainTunnelEntry 2 } jnxUserAAADomainTunnelPreference OBJECT-TYPE SYNTAX Integer32 (1..31) MAX-ACCESS read-only STATUS current DESCRIPTION "The tunnel's preference value associated with this entry. " ::= { jnxUserAAADomainTunnelEntry 3 } jnxUserAAADomainTunnelRemoteGwName OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This name specifies the hostname expected from the peer (the LNS) when a tunnel is setup." ::= { jnxUserAAADomainTunnelEntry 4 } jnxUserAAADomainTunnelRemoteGwAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "IP address of LNS tunnel endpoint" ::= { jnxUserAAADomainTunnelEntry 5 } jnxUserAAADomainTunnelSourceGwName OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This name specifies the hostname expected from the peer (the LNS) when a tunnel is setup." ::= { jnxUserAAADomainTunnelEntry 6 } jnxUserAAADomainTunnelSourceGwAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The source address of the tunnel (overrides the default address for this LS/RI.) " ::= { jnxUserAAADomainTunnelEntry 7 } jnxUserAAADomainTunnelSecret OBJECT-TYPE SYNTAX DisplayString (SIZE(0..32)) MAX-ACCESS read-only STATUS current DESCRIPTION "The tunnel password associated with this entry." ::= { jnxUserAAADomainTunnelEntry 8 } jnxUserAAADomainTunnelLogicalSystems OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The logical systems associated with this entty." ::= { jnxUserAAADomainTunnelEntry 9 } jnxUserAAADomainTunnelRoutingInstance OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The routing instance associated with this entty." ::= { jnxUserAAADomainTunnelEntry 10 } jnxUserAAADomainTunnelMedium OBJECT-TYPE SYNTAX INTEGER { tunnelMediumIPv4(1), tunnelMediumUnknown(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The tunnel medium associated with this entry. The medium dictates the format of the tunnel address." ::= { jnxUserAAADomainTunnelEntry 11 } jnxUserAAADomainTunnelType OBJECT-TYPE SYNTAX INTEGER { tunnelL2tp(1), tunnelUnknown(2), tunnelL2f(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The tunnel type associated with this entry." ::= { jnxUserAAADomainTunnelEntry 12 } jnxUserAAADomainTunnelId OBJECT-TYPE SYNTAX DisplayString (SIZE(0..32)) MAX-ACCESS read-only STATUS current DESCRIPTION "The tunnel identifier associated with this entry." ::= { jnxUserAAADomainTunnelEntry 13 } jnxUserAAADomainTunnelMaxSessions OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum number of tunnel sessions allowed in this tunnel entry." ::= { jnxUserAAADomainTunnelEntry 14 } jnxUserAAADomainPadnTable OBJECT-TYPE SYNTAX SEQUENCE OF JnxUserAAADomainPadnEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entries in this table specify the PPPoE active discovery network (PADN) parameters associated with a domain." ::= { jnxUserAAADomain 3 } jnxUserAAADomainPadnEntry OBJECT-TYPE SYNTAX JnxUserAAADomainPadnEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A specification of the PPPoE active discovery network parameters associated with a domain." INDEX { jnxUserAAADomainName, jnxUserAAADomainPadnIpAddress, jnxUserAAADomainPadnIpMask } ::= { jnxUserAAADomainPadnTable 1 } JnxUserAAADomainPadnEntry ::= SEQUENCE { jnxUserAAADomainPadnIpAddress IpAddress, jnxUserAAADomainPadnIpMask IpAddress, jnxUserAAADomainPadnDistance Integer32 } jnxUserAAADomainPadnIpAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IP address of this entry." ::= { jnxUserAAADomainPadnEntry 1 } jnxUserAAADomainPadnIpMask OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IP mask of this entry." ::= { jnxUserAAADomainPadnEntry 2 } jnxUserAAADomainPadnDistance OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The administrative distance metric of this entry." ::= { jnxUserAAADomainPadnEntry 3 } -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ -- Managed objects for Access profile -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ jnxUserAAAAccessProfileGeneral OBJECT IDENTIFIER ::= { jnxUserAAAAccessProfile 1 } jnxUserAAAAccessProfileTable OBJECT-TYPE SYNTAX SEQUENCE OF JnxUserAAAAccessProfileEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entries in this table specify the assignment of authentication methods for a particular subscriber type." ::= { jnxUserAAAAccessProfileGeneral 1 } jnxUserAAAAccessProfileEntry OBJECT-TYPE SYNTAX JnxUserAAAAccessProfileEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A specification of the authentication methods for a particular subscriber type." INDEX { IMPLIED jnxUserAAAAccessProfileName } ::= { jnxUserAAAAccessProfileTable 1 } JnxUserAAAAccessProfileEntry ::= SEQUENCE { jnxUserAAAAccessProfileName DisplayString, jnxUserAAAAccessProfileAuthenticationOrder OCTET STRING, jnxUserAAAAccessProfileAccountingOrder OCTET STRING, jnxUserAAAAccessProfileAuthorizationOrder OCTET STRING, jnxUserAAAAccessProfileProvisioningOrder OCTET STRING, jnxUserAAAAccessProfileAccStopOnFailure TruthValue, jnxUserAAAAccessProfileAccStopOnDeny TruthValue, jnxUserAAAAccessProfileImmediateUpdate TruthValue, jnxUserAAAAccessProfileCoaImmediateUpdate TruthValue, jnxUserAAAAccessProfileInterval Integer32, jnxUserAAAAccessProfileStatType INTEGER } jnxUserAAAAccessProfileName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..63)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The access profile name." ::= { jnxUserAAAAccessProfileEntry 1 } jnxUserAAAAccessProfileAuthenticationOrder OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..5)) MAX-ACCESS read-only STATUS current DESCRIPTION "The set of authentication mechanisms configured on this system. Each octet in this object contains one of the values defined in the JnxAuthenticateType TEXTUAL-CONVENTION. The system will sequence through each octet of this object starting at octet 1 and attempt to use the corresponding authentication protocol defined by JnxAuthenticateType. If an authentication protocol is configured and attempts to reach the authentication server fail, the system will move to the next octet in this object and retry the authentication in the form dictated by the corresponding authentication protocoltype. The process of sequencing thru each octet will stop if the authentication server is successfully contacted, or there are no more configured octets in this object." ::= { jnxUserAAAAccessProfileEntry 2 } jnxUserAAAAccessProfileAccountingOrder OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..5)) MAX-ACCESS read-only STATUS current DESCRIPTION "The set of accounting mechanisms configured on this system. Each octet in this object contains one of the values defined in the JnxAccountingType TEXTUAL-CONVENTION. The system will sequence through each octet of this object starting at octet 1 and attempt to use the corresponding accounting protocol defined by JnxAccountingType. If an accounting protocol is configured and attempts to reach the accounting server fail, the system will move to the next octet in this object and retry the accounting in the form dictated by the corresponding accounting protocoltype. The process of sequencing thru each octet will stop if the accounting server is successfully contacted, or there are no more configured octets in this object." ::= { jnxUserAAAAccessProfileEntry 3 } jnxUserAAAAccessProfileAuthorizationOrder OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..5)) MAX-ACCESS read-only STATUS current DESCRIPTION "The set of accounting mechanisms configured on this system. Each octet in this object contains one of the values defined in the JnxAuthorizationType TEXTUAL-CONVENTION. The system will sequence through each octet of this object starting at octet 1 and attempt to use the corresponding accounting protocol defined by JnxAuthorizationType. If an accounting protocol is configured and attempts to reach the accounting server fail, the system will move to the next octet in this object and retry the accounting in the form dictated by the corresponding accounting protocoltype. The process of sequencing thru each octet will stop if the accounting server is successfully contacted, or there are no more configured octets in this object." ::= { jnxUserAAAAccessProfileEntry 4 } jnxUserAAAAccessProfileProvisioningOrder OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..5)) MAX-ACCESS read-only STATUS current DESCRIPTION "The set of provisioning mechanisms configured on this system. Each octet in this object contains one of the values defined in the JnxProvisioningType TEXTUAL-CONVENTION. The system will sequence through each octet of this object starting at octet 1 and attempt to use the corresponding accounting protocol defined by JnxProvisioningType. If an accounting protocol is configured and attempts to reach the accounting server fail, the system will move to the next octet in this object and retry the accounting in the form dictated by the corresponding accounting protocoltype. The process of sequencing thru each octet will stop if the accounting server is successfully contacted, or there are no more configured octets in this object." ::= { jnxUserAAAAccessProfileEntry 5 } jnxUserAAAAccessProfileAccStopOnFailure OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Enables/disables the Acct-Stop message if a user fails authentication, but AAA-server grants access." ::= { jnxUserAAAAccessProfileEntry 6 } jnxUserAAAAccessProfileAccStopOnDeny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Enables/disables the Acct-Stop message if AAA-server denies access." ::= { jnxUserAAAAccessProfileEntry 7 } jnxUserAAAAccessProfileImmediateUpdate OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Enables/disables the Acct-Update message on receipt of a Acct-response for the Acct-Start message." ::= { jnxUserAAAAccessProfileEntry 8 } jnxUserAAAAccessProfileCoaImmediateUpdate OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Enables/disables the Acct-Update message on completion of processing a change of authorization." ::= { jnxUserAAAAccessProfileEntry 9 } jnxUserAAAAccessProfileInterval OBJECT-TYPE SYNTAX Integer32 UNITS "minutes" MAX-ACCESS read-only STATUS current DESCRIPTION "The interval in minutes between accounting updates(Interim-stats off, if not specified)." ::= { jnxUserAAAAccessProfileEntry 10 } jnxUserAAAAccessProfileStatType OBJECT-TYPE SYNTAX INTEGER { time(0), volume-time(1) } MAX-ACCESS read-only STATUS current DESCRIPTION "The type of statistics are collected. These are the configured types: time - the option to report only uptime volume-time - the option to report both volume and uptime" ::= { jnxUserAAAAccessProfileEntry 11 } END