2285 lines
77 KiB
Plaintext
2285 lines
77 KiB
Plaintext
RADLAN-AAA DEFINITIONS ::= BEGIN
|
|
|
|
-- Title: RADLAN AAA Private Extension
|
|
-- Version: 7.40
|
|
-- Date: 30-Oct-2005
|
|
-- 03-Jun-2003 Changed upper bound of rlRadiusGlobalDefaultDeadtime to 2000
|
|
-- 31-Jul-2003 A new field rlRadiusServerUsage was added to rlRadiusServerEntry
|
|
-- 31-Jul-2003 Group rlAAAEap was added
|
|
-- 22-Sep-2003 Group rlTacacs was added
|
|
-- 11-Nov-2004 Scalar rlAAAAuditingEnable
|
|
-- 13-Dec-2004 MIBs for TIC support
|
|
-- a. New fields were added:
|
|
-- rlAAALineLockedState
|
|
-- rlAAALineConsFailedLogins
|
|
-- rlAAALinePasswordValidTime
|
|
-- rlAAALinePasswordExpieryDate
|
|
-- rlAAALocalLockedState
|
|
-- rlAAALocalConsFailedLogins
|
|
-- rlAAALocalPasswordValidTime
|
|
-- rlAAALocalPasswordExpieryDate
|
|
-- b. New scalars
|
|
-- rlAAAMinPasswordLength
|
|
-- rlAAAPasswordHistSize
|
|
-- rlAAAPasswordHistHoldTime
|
|
-- rlAAASuccLoginWriteToFile
|
|
-- rlAAAUnlockUserName
|
|
-- rlAAAUnlockSystemPassword
|
|
-- c. New tables
|
|
-- rlAAALocalLoginHistTable
|
|
-- rlAAALinePassLoginHistTable
|
|
-- rlAAASystemLoginHistTable
|
|
-- rlAAASysPassStatTable
|
|
-- rlAAALockedLineTable
|
|
-- 07-Jul-2005 Added field rlAAALocalLoginMrid
|
|
-- 30-Oct-2005 Added new table rlAAASystemPasswordVerificationAndSettingTable
|
|
|
|
IMPORTS
|
|
rnd FROM RADLAN-MIB
|
|
rlRadius FROM RADLAN-MIB
|
|
rlAAAEap FROM RADLAN-MIB
|
|
DisplayString FROM SNMPv2-TC-v1
|
|
TruthValue, RowStatus FROM RADLAN-SNMPv2
|
|
Unsigned32, IpAddress,Counter32,
|
|
MODULE-IDENTITY, OBJECT-TYPE FROM SNMPv2-SMI
|
|
TEXTUAL-CONVENTION FROM SNMPv2-TC;
|
|
|
|
rlAAA MODULE-IDENTITY
|
|
LAST-UPDATED "200309210000Z"
|
|
ORGANIZATION "Radlan Computer Communications Ltd."
|
|
CONTACT-INFO
|
|
"radlan.com"
|
|
DESCRIPTION
|
|
"The private MIB module definition for Authentication, Authorization and Accounting
|
|
in Radlan devices."
|
|
REVISION "200309210000Z"
|
|
DESCRIPTION
|
|
"Added this MODULE-IDENTITY clause."
|
|
::= { rnd 79 }
|
|
|
|
RlAAAMethodtype ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Method list type."
|
|
SYNTAX INTEGER {
|
|
rlAAAMethodDeny(0),
|
|
rlAAAMethodLinePassword(1),
|
|
rlAAAMethodSystemPassword(2),
|
|
rlAAAMethodLocalUserTable(3),
|
|
rlAAAMethodRadius(4),
|
|
rlAAAMethodTacacs(5),
|
|
rlAAAMethodSucceed(6)
|
|
}
|
|
|
|
RlAAAServiceType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Line service type.rlAAAServiceTypeDontCare must be the maximum value in the enum."
|
|
SYNTAX INTEGER {
|
|
rlAAAServiceTypeDontCare(0),
|
|
rlAAAServiceTypeTelnet(1),
|
|
rlAAAServiceTypeHttp(2),
|
|
rlAAAServiceTypeSsh(3),
|
|
rlAAAServiceTypeHttps(4),
|
|
rlAAAServiceTypeSnmp(5)
|
|
}
|
|
|
|
RlAAALinePortType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Line physical port type,the
|
|
rlAAAPortDontCare must be the maximum value in the enum."
|
|
SYNTAX INTEGER {
|
|
rlAAAPortDontCare(0),
|
|
rlAAAPortNetwork(1),
|
|
rlAAAPortConsole(2)
|
|
}
|
|
|
|
rlAAAMibVersion OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"MIB's version, the current version is 2. The difference in RlAAALocalLoginHistEntry,
|
|
RlAAALinePassLoginHistEntry, RlAAASystemLoginHistEntry added mrid field."
|
|
::= { rlAAA 1 }
|
|
|
|
|
|
rlAAARetries OBJECT-TYPE
|
|
SYNTAX INTEGER (1..5)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Determines the number of retries for each method
|
|
(Radius, local passwords, local users table and
|
|
tacacs)."
|
|
::= { rlAAA 2 }
|
|
|
|
|
|
rlAAARadiusEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use Radius. When to use
|
|
Radius exactly depends on its position in the
|
|
methods list. "
|
|
::= { rlAAA 3 }
|
|
|
|
rlAAATacacsEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use Tacacs. When to use
|
|
Tacacs exactly depends on its position in the
|
|
methods list."
|
|
::= { rlAAA 4 }
|
|
|
|
rlAAALocalUserEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use the local users table.
|
|
When to use the table exactly depends on its
|
|
position in the methods list. "
|
|
::= { rlAAA 5 }
|
|
|
|
rlAAASystemPasswordEnabled
|
|
OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use the system password.
|
|
When to use the passwords exactly depends on its
|
|
position in the methods list. "
|
|
::= { rlAAA 6 }
|
|
|
|
rlAAALinePasswordEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use the line password.
|
|
When to use the passwords exactly depends on its
|
|
position in the methods list. "
|
|
::= { rlAAA 7 }
|
|
|
|
rlAAAAlwaysSuccessEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use the always success method.
|
|
When to use that method exactly depends on its
|
|
position in the methods list. "
|
|
::= { rlAAA 8 }
|
|
|
|
--
|
|
-- suppoted methods
|
|
--
|
|
|
|
rlAAARadiusSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether Radius is supported in AAA. If the
|
|
value is false Radius will not be used as an
|
|
authentication and accounting method. If the value
|
|
is true Radius will be used by AAA for authentication and
|
|
accounting if the the AAA was configured to do so
|
|
(by setting the appropriate mibs)."
|
|
::= { rlAAA 9 }
|
|
|
|
rlAAATacacsSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether Tacacs+ is supported in AAA. If the
|
|
value is false Tacacs+ will not be used as an
|
|
authentication and accounting method. If the value
|
|
is true Tacacs+ will be used by AAA for authentication and
|
|
accounting if the the AAA was configured to do so
|
|
(by setting the appropriate mibs)."
|
|
::= { rlAAA 10 }
|
|
|
|
rlAAALocalUserSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether the local users db is supported in
|
|
AAA.If the value is false the local users db will not be
|
|
used as an authentication and accounting method. If the
|
|
value is true the local users db will be used by AAA for
|
|
authentication and accounting method if the the AAA was
|
|
configured to do so (by setting the appropriate mibs)."
|
|
::= { rlAAA 11 }
|
|
|
|
rlAAASystemPasswordSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether system password is supported in AAA.
|
|
If the value is false system password will not be used as
|
|
an authentication and accounting method. If the value is
|
|
true the system password will be used by AAA for
|
|
authentication and accounting method if the the AAA was
|
|
configured to do so (by setting the appropriate mibs)."
|
|
::= { rlAAA 12 }
|
|
|
|
rlAAALinePasswordSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether line password is supported in AAA.
|
|
If the value is false line password will not be used as an
|
|
authentication and accounting method. If the value is true
|
|
the line password will be used by AAA for authentication and
|
|
accounting method if the the AAA was configured
|
|
to do so (by setting the appropriate mibs)."
|
|
::= { rlAAA 13 }
|
|
|
|
rlAAALineAlwaysSuccessSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether line always success method is
|
|
supported in AAA.If the value is false always success
|
|
method will not be used as an authentication and
|
|
accounting method. If the value is true the always
|
|
success method will be used by AAA for authentication and
|
|
accounting method if the the AAA was configured
|
|
to do so (by setting the appropriate mibs)."
|
|
::= { rlAAA 14 }
|
|
|
|
--
|
|
-- method list table
|
|
--
|
|
|
|
|
|
rlAAAMethodListTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAAMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all methods list per method name."
|
|
::= { rlAAA 15 }
|
|
|
|
rlAAAMethodListEntry OBJECT-TYPE
|
|
SYNTAX RlAAAMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAAMethodListName}
|
|
::= { rlAAAMethodListTable 1 }
|
|
|
|
RlAAAMethodListEntry ::= SEQUENCE {
|
|
rlAAAMethodListName DisplayString,
|
|
rlAAAMethodType1 RlAAAMethodtype,
|
|
rlAAAMethodType2 RlAAAMethodtype,
|
|
rlAAAMethodType3 RlAAAMethodtype,
|
|
rlAAAMethodType4 RlAAAMethodtype,
|
|
rlAAAMethodType5 RlAAAMethodtype,
|
|
rlAAAMethodType6 RlAAAMethodtype,
|
|
rlAAAMethodType7 RlAAAMethodtype,
|
|
rlAAAMethodListStatus RowStatus
|
|
}
|
|
|
|
rlAAAMethodListName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Line Method List Name"
|
|
::= { rlAAAMethodListEntry 1 }
|
|
|
|
rlAAAMethodType1 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " first method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 2 }
|
|
|
|
rlAAAMethodType2 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " second method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 3 }
|
|
|
|
|
|
rlAAAMethodType3 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "3th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 4 }
|
|
|
|
rlAAAMethodType4 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " 4th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 5 }
|
|
|
|
rlAAAMethodType5 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "5th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 6 }
|
|
|
|
|
|
rlAAAMethodType6 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " 6th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 7 }
|
|
|
|
|
|
rlAAAMethodType7 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " 7th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 8 }
|
|
|
|
rlAAAMethodListStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "method list status can be destroy or createAndGo"
|
|
::= { rlAAAMethodListEntry 9 }
|
|
|
|
|
|
|
|
--
|
|
-- Line table
|
|
--
|
|
--- AAA MIBs for TIC support
|
|
--- Added read only fields to show if a user is locked,
|
|
--- password expiry date and number of consecutive failed logins.
|
|
--- New read write field to set the expiry time for a password.
|
|
--
|
|
-- Line table
|
|
--
|
|
|
|
rlAAALineTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALineEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all lines, their passwords and their
|
|
authorizations level .the table ordered lexicography by
|
|
the line name. when a new line is being authenticate the
|
|
search in line table is from the first entry in table
|
|
till it find the first entry that fit application input
|
|
line parameters ."
|
|
::= { rlAAA 16 }
|
|
|
|
rlAAALineEntry OBJECT-TYPE
|
|
SYNTAX RlAAALineEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAALinePortType,
|
|
rlAAAIfIndex,
|
|
rlAAAServiceType}
|
|
::= { rlAAALineTable 1 }
|
|
|
|
RlAAALineEntry ::= SEQUENCE {
|
|
rlAAALinePortType RlAAALinePortType,
|
|
rlAAAIfIndex Unsigned32,
|
|
rlAAAServiceType RlAAAServiceType,
|
|
rlAAALineMethodListNameLevel1 DisplayString,
|
|
rlAAALineMethodListNameLevel2 DisplayString,
|
|
rlAAALineMethodListNameLevel3 DisplayString,
|
|
rlAAALineMethodListNameLevel4 DisplayString,
|
|
rlAAALineMethodListNameLevel5 DisplayString,
|
|
rlAAALineMethodListNameLevel6 DisplayString,
|
|
rlAAALineMethodListNameLevel7 DisplayString,
|
|
rlAAALineMethodListNameLevel8 DisplayString,
|
|
rlAAALineMethodListNameLevel9 DisplayString,
|
|
rlAAALineMethodListNameLevel10 DisplayString,
|
|
rlAAALineMethodListNameLevel11 DisplayString,
|
|
rlAAALineMethodListNameLevel12 DisplayString,
|
|
rlAAALineMethodListNameLevel13 DisplayString,
|
|
rlAAALineMethodListNameLevel14 DisplayString,
|
|
rlAAALineMethodListNameLevel15 DisplayString,
|
|
rlAAALinePassword DisplayString,
|
|
rlAAALineStatus RowStatus,
|
|
rlAAALineLockedState INTEGER,
|
|
rlAAALineConsFailedLogins Counter32,
|
|
rlAAALinePasswordValidTime Unsigned32,
|
|
rlAAALinePasswordExpieryDate DisplayString
|
|
}
|
|
|
|
|
|
rlAAALinePortType OBJECT-TYPE
|
|
SYNTAX RlAAALinePortType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " the physical port type ."
|
|
::= { rlAAALineEntry 1 }
|
|
|
|
rlAAAIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Identifies the ifindex for which this entry can be used.
|
|
If index 0 means don't care (can be used for all if indices).
|
|
For port type console the value could be only 0."
|
|
::= { rlAAALineEntry 2}
|
|
|
|
rlAAAServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "the service type"
|
|
::= { rlAAALineEntry 3 }
|
|
|
|
rlAAALineMethodListNameLevel1 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 1 .That name points to the method
|
|
list table .It is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 4 }
|
|
|
|
rlAAALineMethodListNameLevel2 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 2 that name points to the method
|
|
list table it is the key in method list table .by that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 5 }
|
|
|
|
rlAAALineMethodListNameLevel3 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 3 that name points to the method
|
|
list table it is the key in method list table .by that way
|
|
we can reach the methods list to be used for this line"
|
|
::= { rlAAALineEntry 6}
|
|
|
|
rlAAALineMethodListNameLevel4 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 4-that name points to the method
|
|
list table it is the key in method list table .by that way
|
|
we can reach the methods list to be used for this line"
|
|
::= { rlAAALineEntry 7}
|
|
|
|
rlAAALineMethodListNameLevel5 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 5 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 8}
|
|
|
|
rlAAALineMethodListNameLevel6 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 6 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 9}
|
|
|
|
rlAAALineMethodListNameLevel7 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 7 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 10}
|
|
|
|
rlAAALineMethodListNameLevel8 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 8 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 11}
|
|
|
|
rlAAALineMethodListNameLevel9 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 9 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 12}
|
|
|
|
rlAAALineMethodListNameLevel10 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 10 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 13}
|
|
|
|
rlAAALineMethodListNameLevel11 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 11 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 14}
|
|
|
|
rlAAALineMethodListNameLevel12 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 12 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 15}
|
|
|
|
rlAAALineMethodListNameLevel13 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 13 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 16}
|
|
|
|
rlAAALineMethodListNameLevel14 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 14 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 17}
|
|
|
|
rlAAALineMethodListNameLevel15 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 15 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 18}
|
|
|
|
rlAAALinePassword OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Line Password. Zero length password is considered as no
|
|
password. Password with zero length means that in case this
|
|
password is the method to be used a method fail is returned
|
|
and no other method is being used.
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAALineEntry 19 }
|
|
|
|
rlAAALineStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Line status can be destroy or createAndGo"
|
|
::= { rlAAALineEntry 20 }
|
|
|
|
rlAAALineLockedState OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
locked(0),
|
|
usable(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Line locked status"
|
|
::= { rlAAALineEntry 21 }
|
|
|
|
rlAAALineConsFailedLogins OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Number of last consecutive failed logins"
|
|
::= { rlAAALineEntry 22 }
|
|
|
|
rlAAALinePasswordValidTime OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The period of time in days, during which the password,
|
|
is considered valid for login. Value of 0 means never expired.
|
|
The actual range is product specific.
|
|
After this time the system may allow limited number of logins
|
|
to change the password. "
|
|
DEFVAL { 0 }
|
|
::= { rlAAALineEntry 23}
|
|
|
|
rlAAALinePasswordExpieryDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "If Line password aging is active, the date on which
|
|
The current password will expire.
|
|
Otherwise zero size string"
|
|
::= { rlAAALineEntry 24 }
|
|
|
|
|
|
--
|
|
-- local user db table
|
|
--
|
|
|
|
---_for rlAAALocalUserTable addition is in BOLD.
|
|
--- Added read only fields to show if a user is locked,
|
|
--- password expiry date and number of consecutive failed logins.
|
|
--- New read write field to set the expiry time for a password.
|
|
|
|
|
|
rlAAALocalUserTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALocalUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all usernames, their passwords and
|
|
their authorizations."
|
|
::= { rlAAA 17 }
|
|
|
|
rlAAALocalUserEntry OBJECT-TYPE
|
|
SYNTAX RlAAALocalUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAALocalUserName}
|
|
::= { rlAAALocalUserTable 1 }
|
|
|
|
RlAAALocalUserEntry ::= SEQUENCE {
|
|
rlAAALocalUserName DisplayString,
|
|
rlAAALocalUserPassword DisplayString,
|
|
rlAAALocalUserPrivilage INTEGER,
|
|
rlAAALocalHostStatus RowStatus,
|
|
rlAAALocalLockedState INTEGER,
|
|
rlAAALocalConsFailedLogins Counter32,
|
|
rlAAALocalPasswordValidTime Unsigned32,
|
|
rlAAALocalPasswordExpieryDate DisplayString
|
|
|
|
}
|
|
|
|
rlAAALocalUserName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(1..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Local User Name"
|
|
::= { rlAAALocalUserEntry 1 }
|
|
|
|
rlAAALocalUserPassword OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Local User Password .The password can be null
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
|
|
::= { rlAAALocalUserEntry 2 }
|
|
|
|
rlAAALocalUserPrivilage OBJECT-TYPE
|
|
SYNTAX INTEGER (1..15)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Local User Privilage"
|
|
::= { rlAAALocalUserEntry 3 }
|
|
|
|
rlAAALocalHostStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Local User status"
|
|
::= { rlAAALocalUserEntry 4 }
|
|
|
|
rlAAALocalLockedState OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
locked(0),
|
|
usable(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Local User locked status"
|
|
::= { rlAAALocalUserEntry 5 }
|
|
|
|
rlAAALocalConsFailedLogins OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Number of last consecutive failed logins"
|
|
::= { rlAAALocalUserEntry 6 }
|
|
|
|
rlAAALocalPasswordValidTime OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The period of time in days, during which the password,
|
|
is considered valid for login. Value of 0 means never expired.
|
|
The actual range is product specific.
|
|
After this time the system may allow limited number of logins
|
|
to change the password. "
|
|
DEFVAL { 0 }
|
|
::= { rlAAALocalUserEntry 7 }
|
|
|
|
rlAAALocalPasswordExpieryDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "If User password aging is active, the date on which
|
|
The current password will expire.
|
|
Otherwise zero size string"
|
|
::= { rlAAALocalUserEntry 8 }
|
|
|
|
--
|
|
-- system password
|
|
--
|
|
|
|
rlAAASystemPasswordlevel1 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 1.
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 18 }
|
|
|
|
rlAAASystemPasswordlevel2 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 2
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 19 }
|
|
|
|
rlAAASystemPasswordlevel3 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 3
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 20 }
|
|
|
|
rlAAASystemPasswordlevel4 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 4
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 21 }
|
|
|
|
rlAAASystemPasswordlevel5 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 5
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 22 }
|
|
|
|
rlAAASystemPasswordlevel6 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 6
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 23 }
|
|
|
|
rlAAASystemPasswordlevel7 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 7
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 24 }
|
|
|
|
rlAAASystemPasswordlevel8 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 8
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 25 }
|
|
|
|
rlAAASystemPasswordlevel9 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 9
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 26 }
|
|
|
|
rlAAASystemPasswordlevel10 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 10
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 27 }
|
|
|
|
rlAAASystemPasswordlevel11 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 11
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 28 }
|
|
|
|
rlAAASystemPasswordlevel12 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 12
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 29 }
|
|
|
|
rlAAASystemPasswordlevel13 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 13
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 30 }
|
|
|
|
rlAAASystemPasswordlevel14 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 14
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 31 }
|
|
|
|
rlAAASystemPasswordlevel15 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 15
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not part of it"
|
|
::= { rlAAA 32 }
|
|
|
|
rlAAAUserTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAAUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table holds all current users that have been authenticated."
|
|
::= { rlAAA 33 }
|
|
|
|
rlAAAUserEntry OBJECT-TYPE
|
|
SYNTAX RlAAAUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAAUserIndex}
|
|
::= { rlAAAUserTable 1 }
|
|
|
|
RlAAAUserEntry ::= SEQUENCE {
|
|
rlAAAUserIndex Unsigned32,
|
|
rlAAAUserServiceType RlAAAServiceType,
|
|
rlAAAUserRemoteIpAddress IpAddress,
|
|
rlAAAUserName DisplayString,
|
|
rlAAAUserLevel Unsigned32,
|
|
rlAAAUserIfIndex Unsigned32
|
|
}
|
|
|
|
rlAAAUserIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "User Index"
|
|
::= { rlAAAUserEntry 1 }
|
|
|
|
rlAAAUserServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "The service that the user uses. Service dont care is console
|
|
terminal."
|
|
::= { rlAAAUserEntry 2 }
|
|
|
|
rlAAAUserRemoteIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User remote IP address."
|
|
::= { rlAAAUserEntry 3 }
|
|
|
|
rlAAAUserName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User Name"
|
|
::= { rlAAAUserEntry 4 }
|
|
|
|
rlAAAUserLevel OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..15)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User level"
|
|
::= { rlAAAUserEntry 5 }
|
|
|
|
rlAAAUserIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User if index."
|
|
::= { rlAAAUserEntry 6 }
|
|
|
|
rlAAATest OBJECT IDENTIFIER ::= { rlAAA 34 }
|
|
|
|
rlAAATestPassword OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable enables the user supplying the correct code to use the
|
|
AAA test feature."
|
|
::= {rlAAATest 1}
|
|
|
|
rlAAATestUserTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAATestUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table enables a user to perform a simulation of authentiction."
|
|
::= { rlAAATest 2 }
|
|
|
|
rlAAATestUserEntry OBJECT-TYPE
|
|
SYNTAX RlAAATestUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The row definition for this table."
|
|
INDEX { rlAAATestUserIndex}
|
|
::= { rlAAATestUserTable 1 }
|
|
|
|
RlAAATestUserEntry ::= SEQUENCE {
|
|
rlAAATestUserIndex Unsigned32,
|
|
rlAAATestPortType RlAAALinePortType,
|
|
rlAAATestIfIndex INTEGER,
|
|
rlAAATestServiceType RlAAAServiceType,
|
|
rlAAATestUserAuthenticationStatus INTEGER,
|
|
rlAAATestUserAuthenticationAction INTEGER,
|
|
rlAAATestUserInput DisplayString,
|
|
rlAAATestUserStatus RowStatus
|
|
}
|
|
|
|
rlAAATestUserIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"User entry index (the number is used just to identify the user)."
|
|
::= { rlAAATestUserEntry 1 }
|
|
|
|
rlAAATestPortType OBJECT-TYPE
|
|
SYNTAX RlAAALinePortType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " the physical port type ."
|
|
::= { rlAAATestUserEntry 2 }
|
|
|
|
rlAAATestIfIndex OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " line ifIndex can configue to be zero witch means
|
|
Don't-care value"
|
|
::= { rlAAATestUserEntry 3}
|
|
|
|
rlAAATestServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "the service type"
|
|
::= { rlAAATestUserEntry 4 }
|
|
|
|
|
|
rlAAATestUserAuthenticationStatus OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
needPassword(1),
|
|
needUsername(2),
|
|
success(3),
|
|
failure(4),
|
|
aborted(5),
|
|
deleted(6),
|
|
waiting(7),
|
|
usedNewMethod(8)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Shows the ststus of the operation and what is expected from the
|
|
'user'."
|
|
::= { rlAAATestUserEntry 5 }
|
|
|
|
rlAAATestUserAuthenticationAction OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
begin(1),
|
|
receivePassword(2),
|
|
receiveUsername(3),
|
|
abort(4),
|
|
delete(5),
|
|
continue(6)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"By setting this field the process moves from one state to another. On
|
|
creation the value must be begin.
|
|
When the value of rlAAATestUserAuthenticationStatus is needPassword
|
|
the value can be set to receivePassword or abort.
|
|
When the value of rlAAATestUserAuthenticationStatus is needUsername
|
|
the value can be set to receiveUsername or abort.
|
|
When the value of rlAAATestUserAuthenticationStatus is success or failure
|
|
the value can be set to delete or abort.
|
|
When the value of rlAAATestUserAuthenticationStatus is aborted the value
|
|
can be set to delete.
|
|
When the value of rlAAATestUserAuthenticationStatus is deleted the value
|
|
can not be set to any value.
|
|
When the value of rlAAATestUserAuthenticationStatus is waiting the value
|
|
can be set or abort."
|
|
::= { rlAAATestUserEntry 6 }
|
|
|
|
rlAAATestUserInput OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"If the acion was set to receivePassword than this field should hold
|
|
the value of the password.
|
|
If the action was set to receiveUsername than this field should hold
|
|
the value of the username. "
|
|
::= { rlAAATestUserEntry 7 }
|
|
|
|
rlAAATestUserStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entry status. The entry can not be deleted. It will be deleted if
|
|
unchanged more than 2 minutes."
|
|
::= { rlAAATestUserEntry 8 }
|
|
|
|
---
|
|
--- rlRadius
|
|
---
|
|
|
|
rlRadiusMibVersion OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"MIB's version, the current version is 2.
|
|
1 - original version.
|
|
2 - field rlRadiusServerUsage was added to rlRadiusServerEntry"
|
|
::= { rlRadius 1 }
|
|
|
|
rlRadiusGlobalDefaultTimeout OBJECT-TYPE
|
|
SYNTAX INTEGER (1..30)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum time (in seconds) to wait for this RADIUS
|
|
server to reply. This MIB is used if the value of the
|
|
field rlRadiusServerUseGlobalDefaultTimeout is false."
|
|
::= { rlRadius 2 }
|
|
|
|
rlRadiusGlobalDefaultRetries OBJECT-TYPE
|
|
SYNTAX INTEGER (1..10)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of times to try contacting this RADIUS server. This MIB
|
|
is used if the value of the field
|
|
rlRadiusServerUseGlobalDefaultRetries is false."
|
|
::= { rlRadius 3 }
|
|
|
|
|
|
rlRadiusGlobalDefaultDeadtime OBJECT-TYPE
|
|
SYNTAX INTEGER (0..2000)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of minutes that any RADIUS server is ignored after
|
|
it has failed. This MIB is used if the value of the field
|
|
rlRadiusServerUseGlobalDefaultDeadtime is false."
|
|
::= { rlRadius 4 }
|
|
|
|
rlRadiusGlobalDefaultKey OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Secret key to be shared with this RADIUS server. This MIB is
|
|
used if the value of the field rlRadiusServerUseGlobalDefaultKey
|
|
is false."
|
|
::= { rlRadius 5 }
|
|
|
|
|
|
rlRadiusGlobalDefaultSource OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the interface to use with this server.
|
|
A value of 0.0.0.0 for this object disables source
|
|
address specification. This MIB is used if the value of the
|
|
field rlRadiusServerUseGlobalDefaultSource is false."
|
|
::= { rlRadius 6 }
|
|
|
|
|
|
rlRadiusServerTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlRadiusServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The (conceptual) table listing the RADIUS
|
|
servers with which the cliient shares a secret."
|
|
::= { rlRadius 7 }
|
|
|
|
rlRadiusServerEntry OBJECT-TYPE
|
|
SYNTAX RlRadiusServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) representing a RADIUS
|
|
server with which the client shares
|
|
a secret."
|
|
INDEX { rlRadiusServerAddress,
|
|
rlRadiusServerAuthPortNumber,
|
|
rlRadiusServerAcctPortNumber}
|
|
::= { rlRadiusServerTable 1 }
|
|
|
|
RlRadiusServerEntry ::= SEQUENCE {
|
|
rlRadiusServerAddress IpAddress,
|
|
rlRadiusServerAuthPortNumber INTEGER,
|
|
rlRadiusServerAcctPortNumber INTEGER,
|
|
rlRadiusServerTimeout INTEGER,
|
|
rlRadiusServerRetries INTEGER,
|
|
rlRadiusServerDeadtime INTEGER,
|
|
rlRadiusServerUseGlobalDefaultKey TruthValue,
|
|
rlRadiusServerKey DisplayString,
|
|
rlRadiusServerSource IpAddress,
|
|
rlRadiusServerPriority INTEGER,
|
|
rlRadiusServerStatus RowStatus,
|
|
rlRadiusServerUsage INTEGER
|
|
}
|
|
|
|
rlRadiusServerAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP address of the RADIUS server
|
|
referred to in this table entry."
|
|
::= { rlRadiusServerEntry 1 }
|
|
|
|
rlRadiusServerAuthPortNumber OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The UDP port the client is using to send authentication
|
|
requests to this server."
|
|
::= { rlRadiusServerEntry 2 }
|
|
|
|
rlRadiusServerAcctPortNumber OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The UDP port the client is using to send accounting
|
|
requests to this server."
|
|
::= { rlRadiusServerEntry 3 }
|
|
|
|
rlRadiusServerTimeout OBJECT-TYPE
|
|
SYNTAX INTEGER (0..30)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum time (in seconds) to wait for this RADIUS
|
|
server to reply. Value of 0 means that rlRadiusGlobalDefaultTimeout."
|
|
DEFVAL { 3 }
|
|
::= { rlRadiusServerEntry 4 }
|
|
|
|
rlRadiusServerRetries OBJECT-TYPE
|
|
SYNTAX INTEGER (0..10)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of times to try contacting this RADIUS server. Value of
|
|
0 means that rlRadiusGlobalDefaultRetries."
|
|
DEFVAL { 3 }
|
|
::= { rlRadiusServerEntry 5 }
|
|
|
|
rlRadiusServerDeadtime OBJECT-TYPE
|
|
SYNTAX INTEGER (0..2001)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of minutes that any RADIUS server is ignored after
|
|
it has failed. Value of 2001 means that rlRadiusGlobalDefaultDeadtime
|
|
will be used."
|
|
DEFVAL { 0 }
|
|
::= { rlRadiusServerEntry 6 }
|
|
|
|
rlRadiusServerUseGlobalDefaultKey OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"If this field is set to true the value in field rlRadiusServerKey
|
|
is ignored and instead the value in the MIB
|
|
rlRadiusGlobalDefaultKey is used. Otherwise the value in
|
|
rlRadiusServerKey is used."
|
|
DEFVAL { false }
|
|
::= { rlRadiusServerEntry 7 }
|
|
|
|
rlRadiusServerKey OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Secret key to be shared with this RADIUS server."
|
|
DEFVAL { "" }
|
|
::= { rlRadiusServerEntry 8 }
|
|
|
|
rlRadiusServerSource OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the interface to use with this server.
|
|
A value of 0.0.0.0 for this object disables source
|
|
address specification. Value of 255.255.255.255 means that
|
|
rlRadiusGlobalDefaultSource will be used."
|
|
DEFVAL { '00000000'H }
|
|
::= { rlRadiusServerEntry 9 }
|
|
|
|
rlRadiusServerPriority OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Determines the order in which the servers will be used, when 0 is
|
|
the highest priority. If more than one server share the same
|
|
priority - they will be used in lexicgoraphic order
|
|
(the order of entries in this table)."
|
|
DEFVAL { 0 }
|
|
::= { rlRadiusServerEntry 10 }
|
|
|
|
rlRadiusServerStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION ""
|
|
::= { rlRadiusServerEntry 11 }
|
|
|
|
rlRadiusServerUsage OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
userAuthentication(1),
|
|
portAuthentication(2),
|
|
all(3),
|
|
wirelessAuthentication (4)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Determines actions for which the radius server will be used."
|
|
DEFVAL { 3 }
|
|
::= { rlRadiusServerEntry 12 }
|
|
|
|
--
|
|
-- rlAAAEap
|
|
--
|
|
|
|
RlAAAEapMethodtype ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Method list type."
|
|
SYNTAX INTEGER {
|
|
rlAAAEapMethodDeny(0),
|
|
rlAAAEapMethodRadius(1),
|
|
rlAAAEapMethodSucceed(2)
|
|
}
|
|
|
|
rlAAAEapMethodListTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAAEapMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all methods list per method name."
|
|
::= { rlAAAEap 1 }
|
|
|
|
rlAAAEapMethodListEntry OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAAEapMethodListName}
|
|
::= { rlAAAEapMethodListTable 1 }
|
|
|
|
RlAAAEapMethodListEntry ::= SEQUENCE {
|
|
rlAAAEapMethodListName DisplayString,
|
|
rlAAAEapMethodType1 RlAAAEapMethodtype,
|
|
rlAAAEapMethodType2 RlAAAEapMethodtype,
|
|
rlAAAEapMethodType3 RlAAAEapMethodtype,
|
|
rlAAAEapMethodType4 RlAAAEapMethodtype,
|
|
rlAAAEapMethodType5 RlAAAEapMethodtype,
|
|
rlAAAEapMethodListStatus RowStatus
|
|
}
|
|
|
|
rlAAAEapMethodListName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Line Method List Name"
|
|
::= { rlAAAEapMethodListEntry 1 }
|
|
|
|
rlAAAEapMethodType1 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " first method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 2 }
|
|
|
|
rlAAAEapMethodType2 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " second method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 3 }
|
|
|
|
rlAAAEapMethodType3 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "3th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 4 }
|
|
|
|
rlAAAEapMethodType4 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " 4th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 5 }
|
|
|
|
rlAAAEapMethodType5 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "5th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 6 }
|
|
|
|
rlAAAEapMethodListStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "method list status can be destroy or createAndGo"
|
|
::= { rlAAAEapMethodListEntry 7 }
|
|
|
|
rlAAAEapCurrentMethodList OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies the method list that will be used for authentication."
|
|
::= { rlAAAEap 2 }
|
|
|
|
|
|
--- rlTacacs
|
|
|
|
RlTacacsConnectionType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Specifies TCP connection type between device and TACACS+ server"
|
|
SYNTAX INTEGER {
|
|
rlTacacsSingleConnection(0),
|
|
rlTacacsPerSessionConnection(1)
|
|
}
|
|
|
|
RlTacacsConnectionStatus ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Specifies the status of TCP connection
|
|
between device and TACACS+ server."
|
|
SYNTAX INTEGER {
|
|
rlTacacsConnected(0),
|
|
rlTacacsNotConnected(1)
|
|
}
|
|
|
|
rlTacacs OBJECT IDENTIFIER ::= { rlAAA 40 }
|
|
|
|
rlTacacsMibVersion OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"MIB's version, the current version is 1."
|
|
::= { rlTacacs 1 }
|
|
|
|
rlTacacsGlobalDefaultTimeout OBJECT-TYPE
|
|
SYNTAX INTEGER (1..30)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum time (in seconds) to wait for TACACS+
|
|
server to reply. This MIB is used if the value of the
|
|
field rlTacacsServerTimeout is 0."
|
|
DEFVAL { 5 }
|
|
::= { rlTacacs 2 }
|
|
|
|
rlTacacsGlobalDefaultKey OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Secret key to be shared with TACACS+ server. This MIB is
|
|
used if the value of the field rlTacacsServerUseGlobalDefaultKey
|
|
is false."
|
|
DEFVAL { "" }
|
|
::= { rlTacacs 3 }
|
|
|
|
rlTacacsGlobalDefaultSourceIpInterface OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the interface to use with TACACS+ server.
|
|
A value of 0.0.0.0 for this object disables source
|
|
address specification. This MIB is used if the value of the
|
|
field rlTacacsServerSource is 255.255.255.255."
|
|
DEFVAL { '00000000'H }
|
|
::= { rlTacacs 6 }
|
|
|
|
rlTacacsServerTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlTacacsServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The (conceptual) table listing the TACACS+
|
|
servers with which the cliient shares a secret."
|
|
::= { rlTacacs 7 }
|
|
|
|
rlTacacsServerEntry OBJECT-TYPE
|
|
SYNTAX RlTacacsServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) representing a TACACS+
|
|
server with which the client shares
|
|
a secret."
|
|
INDEX { rlTacacsServerAddress }
|
|
::= { rlTacacsServerTable 1 }
|
|
|
|
RlTacacsServerEntry ::= SEQUENCE {
|
|
rlTacacsServerAddress IpAddress,
|
|
rlTacacsServerPortNumber INTEGER,
|
|
rlTacacsServerConnectionType RlTacacsConnectionType,
|
|
rlTacacsServerConnectionStatus RlTacacsConnectionStatus,
|
|
rlTacacsServerTimeout INTEGER,
|
|
rlTacacsServerUseGlobalDefaultKey TruthValue,
|
|
rlTacacsServerKey DisplayString,
|
|
rlTacacsServerSourceIpInterface IpAddress,
|
|
rlTacacsServerPriority INTEGER,
|
|
rlTacacsServerRowStatus RowStatus
|
|
}
|
|
|
|
rlTacacsServerAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP address of the TACACS+ server
|
|
referred to in this table entry."
|
|
::= { rlTacacsServerEntry 1 }
|
|
|
|
rlTacacsServerPortNumber OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The TCP port the client establishes connections with this server."
|
|
DEFVAL { 49 }
|
|
::= { rlTacacsServerEntry 2 }
|
|
|
|
rlTacacsServerConnectionType OBJECT-TYPE
|
|
SYNTAX RlTacacsConnectionType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies TCP connection type between device and TACACS+ server.
|
|
Either a single open connection between device and server
|
|
(rlTacacsSingleConnection), or open/close connection per
|
|
communication session (rlTacacsPerSessionConnection)."
|
|
DEFVAL { rlTacacsPerSessionConnection }
|
|
::= { rlTacacsServerEntry 3 }
|
|
|
|
rlTacacsServerConnectionStatus OBJECT-TYPE
|
|
SYNTAX RlTacacsConnectionStatus
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies status TCP connection type between device and TACACS+ server."
|
|
DEFVAL { rlTacacsConnected }
|
|
::= { rlTacacsServerEntry 4 }
|
|
|
|
rlTacacsServerTimeout OBJECT-TYPE
|
|
SYNTAX INTEGER (0..30)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum time (in seconds) to wait for this TACACS+ server to reply.
|
|
Value of 0 means that rlTacacsGlobalDefaultTimeout value is used."
|
|
DEFVAL { 5 }
|
|
::= { rlTacacsServerEntry 5 }
|
|
|
|
rlTacacsServerUseGlobalDefaultKey OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"If this field is set to true the value in field rlTacacsServerKey
|
|
is ignored and instead the value in the MIB
|
|
rlTacacsGlobalDefaultKey is used. Otherwise the value in
|
|
rlTacacsServerKey is used."
|
|
DEFVAL { false }
|
|
::= { rlTacacsServerEntry 6 }
|
|
|
|
rlTacacsServerKey OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Secret key to be shared with this TACACS+ server."
|
|
DEFVAL { "" }
|
|
::= { rlTacacsServerEntry 7 }
|
|
|
|
rlTacacsServerSourceIpInterface OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the interface to use with this server.
|
|
A value of 0.0.0.0 for this object disables source
|
|
address specification. Value of 255.255.255.255 means that
|
|
rlTacacsGlobalDefaultSource will be used."
|
|
DEFVAL { '00000000'H }
|
|
::= { rlTacacsServerEntry 8 }
|
|
|
|
rlTacacsServerPriority OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Determines the order in which the TACACS+ servers will be used,
|
|
when 0 is the highest priority. If more than one server share the
|
|
same priority - they will be used in lexicgoraphic order
|
|
(the order of entries in this table)."
|
|
DEFVAL { 0 }
|
|
::= { rlTacacsServerEntry 9 }
|
|
|
|
rlTacacsServerRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION ""
|
|
::= { rlTacacsServerEntry 10 }
|
|
|
|
|
|
--- AAA Login auditing control (SysLog)
|
|
|
|
rlAAAAuditingEnable OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Controls whether SysLog messages
|
|
should be issued on login events"
|
|
DEFVAL { true }
|
|
::= { rlAAA 41 }
|
|
|
|
rlAAAMinPasswordLength OBJECT-TYPE
|
|
SYNTAX INTEGER (0..64)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The minimum length of password for local user authentication
|
|
defined in field rlAAALocalUserPassword in rlAAALocalUserTable.
|
|
The value applies only to new or updated user passwords.
|
|
In actual implementation the range may be reduced to (0 | N-64),
|
|
where N is a platform dependent (for TIC compatibility N=8) "
|
|
DEFVAL { 0 }
|
|
::= { rlAAA 42 }
|
|
|
|
--- Password history size
|
|
rlAAAPasswordHistSize OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of most recent password,
|
|
previously defined for Local User Table, Line Table,
|
|
System Password Table for specific entity.
|
|
This list used for password reusing prevention.
|
|
Value of 0 means none. Changing the value
|
|
does not cause the loss of history.
|
|
History Max size is product specific."
|
|
DEFVAL { 0 }
|
|
::= { rlAAA 43 }
|
|
|
|
--- Password history hold time
|
|
|
|
rlAAAPasswordHistHoldTime OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The time in day, which an old password
|
|
may be used in password history check.
|
|
Changing the value does not cause the
|
|
loss of history."
|
|
|
|
DEFVAL { 0 }
|
|
::= { rlAAA 44 }
|
|
|
|
--- controls wether successful logins are written to file
|
|
|
|
rlAAASuccLoginWriteToFile OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Controls whether successful logins are
|
|
written to login file"
|
|
DEFVAL { true }
|
|
::= { rlAAA 45 }
|
|
|
|
|
|
--- Read-only table for successful login history - Local Users
|
|
|
|
rlAAALocalLoginHistTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALocalLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table holds successful login history
|
|
for all users. This table is read-only."
|
|
::= { rlAAA 46 }
|
|
|
|
rlAAALocalLoginHistEntry OBJECT-TYPE
|
|
SYNTAX RlAAALocalLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAALocalLoginHistName,
|
|
rlAAALocalLoginHistIndex}
|
|
::= { rlAAALocalLoginHistTable 1 }
|
|
|
|
RlAAALocalLoginHistEntry ::= SEQUENCE {
|
|
rlAAALocalLoginHistName DisplayString,
|
|
rlAAALocalLoginHistIndex Unsigned32,
|
|
rlAAALocalLoginHistServiceType RlAAAServiceType,
|
|
rlAAALocalLoginHistRemoteIpAddress IpAddress,
|
|
rlAAALocalLoginHistLocalIpAddress IpAddress,
|
|
rlAAALocalLoginDateTime DisplayString,
|
|
rlAAALocalLoginMrid Unsigned32
|
|
}
|
|
|
|
rlAAALocalLoginHistName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User Name"
|
|
::= { rlAAALocalLoginHistEntry 1 }
|
|
|
|
rlAAALocalLoginHistIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..10)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "Index in History for specific user.
|
|
Lower number means more recent login."
|
|
::= { rlAAALocalLoginHistEntry 2 }
|
|
|
|
rlAAALocalLoginHistServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "The service that the user uses.
|
|
Service don't care is console terminal."
|
|
::= { rlAAALocalLoginHistEntry 3 }
|
|
|
|
rlAAALocalLoginHistRemoteIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User remote IP address."
|
|
::= { rlAAALocalLoginHistEntry 4 }
|
|
|
|
rlAAALocalLoginHistLocalIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "local Ip Address on login."
|
|
::= { rlAAALocalLoginHistEntry 5 }
|
|
|
|
rlAAALocalLoginDateTime OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Date and time in the SysLog Format:
|
|
DD-MMM-YYYY HH:MM:SS"
|
|
::= { rlAAALocalLoginHistEntry 6 }
|
|
|
|
rlAAALocalLoginMrid OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Mrid - indicates to which instance the connection was established "
|
|
::= { rlAAALocalLoginHistEntry 7 }
|
|
|
|
|
|
--- Read-only table for successful login history - Line passwords
|
|
|
|
rlAAALinePassLoginHistTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALinePassLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table holds successful login history
|
|
for Line passwords. This table is read-only."
|
|
::= { rlAAA 47 }
|
|
|
|
rlAAALinePassLoginHistEntry OBJECT-TYPE
|
|
SYNTAX RlAAALinePassLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX {rlAAALinePassLoginHistPortType,
|
|
rlAAALinePassLoginHistIfIndex,
|
|
rlAAALinePassLoginHistServiceType,
|
|
rlAAALinePassLoginHistIndex }
|
|
::= { rlAAALinePassLoginHistTable 1 }
|
|
|
|
RlAAALinePassLoginHistEntry ::= SEQUENCE {
|
|
rlAAALinePassLoginHistPortType RlAAALinePortType,
|
|
rlAAALinePassLoginHistIfIndex Unsigned32,
|
|
rlAAALinePassLoginHistServiceType RlAAAServiceType,
|
|
rlAAALinePassLoginHistIndex Unsigned32,
|
|
rlAAALinePassLoginHistActServiceType RlAAAServiceType,
|
|
rlAAALinePassLoginHistRemoteIpAddress IpAddress,
|
|
rlAAALinePassLoginHistLocalIpAddress IpAddress,
|
|
rlAAALinePassLoginDateTime DisplayString ,
|
|
rlAAALinePassLoginMrid Unsigned32
|
|
}
|
|
|
|
|
|
rlAAALinePassLoginHistPortType OBJECT-TYPE
|
|
SYNTAX RlAAALinePortType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " the physical port type."
|
|
::= { rlAAALinePassLoginHistEntry 1 }
|
|
|
|
rlAAALinePassLoginHistIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Identifies the ifindex for which this entry can be used.
|
|
If index 0 means don't care
|
|
(can be used for all if indices).
|
|
For port type console the value could be only 0."
|
|
::= { rlAAALinePassLoginHistEntry 2}
|
|
|
|
rlAAALinePassLoginHistServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "the service type"
|
|
::= { rlAAALinePassLoginHistEntry 3 }
|
|
|
|
rlAAALinePassLoginHistIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..10)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "Index in History for specific user.
|
|
Lower number means more recent login."
|
|
::= { rlAAALinePassLoginHistEntry 4 }
|
|
|
|
rlAAALinePassLoginHistActServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "The service that the user uses.
|
|
Service don't care is console terminal."
|
|
::= { rlAAALinePassLoginHistEntry 5 }
|
|
|
|
rlAAALinePassLoginHistRemoteIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User remote IP address."
|
|
::= { rlAAALinePassLoginHistEntry 6 }
|
|
|
|
rlAAALinePassLoginHistLocalIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "local Ip Address on login."
|
|
::= { rlAAALinePassLoginHistEntry 7 }
|
|
|
|
rlAAALinePassLoginDateTime OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Date and time in the SysLog Format:
|
|
DD-MMM-YYYY HH:MM:SS"
|
|
::= { rlAAALinePassLoginHistEntry 8 }
|
|
|
|
|
|
rlAAALinePassLoginMrid OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Mrid - indicates to which instance the connection was established "
|
|
::= { rlAAALinePassLoginHistEntry 9 }
|
|
|
|
--- Read-only table for successful login history - System Passwords
|
|
|
|
rlAAASystemLoginHistTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAASystemLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table holds successful login history
|
|
for system passwords. This table is read-only."
|
|
::= { rlAAA 48 }
|
|
|
|
rlAAASystemLoginHistEntry OBJECT-TYPE
|
|
SYNTAX RlAAASystemLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAASystemLoginHistLevel,
|
|
rlAAASystemLoginHistIndex}
|
|
::= { rlAAASystemLoginHistTable 1 }
|
|
|
|
RlAAASystemLoginHistEntry ::= SEQUENCE {
|
|
rlAAASystemLoginHistLevel INTEGER,
|
|
rlAAASystemLoginHistIndex Unsigned32,
|
|
rlAAASystemLoginHistServiceType RlAAAServiceType,
|
|
rlAAASystemLoginHistRemoteIpAddress IpAddress,
|
|
rlAAASystemLoginHistLocalIpAddress IpAddress,
|
|
rlAAASystemLoginDateTime DisplayString,
|
|
rlAAASystemLoginMrid Unsigned32
|
|
}
|
|
|
|
rlAAASystemLoginHistLevel OBJECT-TYPE
|
|
SYNTAX INTEGER (1..15)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User Name"
|
|
::= { rlAAASystemLoginHistEntry 1 }
|
|
|
|
rlAAASystemLoginHistIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..10)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "Index in History for specific user.
|
|
Lower number means more recent login."
|
|
::= { rlAAASystemLoginHistEntry 2 }
|
|
|
|
rlAAASystemLoginHistServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "The service that the user uses.
|
|
Service don't care is console terminal."
|
|
::= { rlAAASystemLoginHistEntry 3 }
|
|
|
|
rlAAASystemLoginHistRemoteIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User remote IP address."
|
|
::= { rlAAASystemLoginHistEntry 4 }
|
|
|
|
rlAAASystemLoginHistLocalIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "local Ip Address on login."
|
|
::= { rlAAASystemLoginHistEntry 5 }
|
|
|
|
rlAAASystemLoginDateTime OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Date and time in the SysLog Format:
|
|
DD-MMM-YYYY HH:MM:SS"
|
|
::= { rlAAASystemLoginHistEntry 6 }
|
|
|
|
rlAAASystemLoginMrid OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Mrid - indicates to which instance the connection was established "
|
|
::= { rlAAASystemLoginHistEntry 7 }
|
|
|
|
|
|
--
|
|
-- System Passwords status table
|
|
--
|
|
rlAAASysPassStatTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAASysPassStatEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all system password and
|
|
their security properties: is password locked
|
|
due to wrong password, when and how it was locked
|
|
or last unsuccessful login information, expiry date
|
|
of the password."
|
|
::= { rlAAA 49 }
|
|
|
|
rlAAASysPassStatEntry OBJECT-TYPE
|
|
SYNTAX RlAAASysPassStatEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAASysPassStatLevel}
|
|
::= { rlAAASysPassStatTable 1 }
|
|
|
|
RlAAASysPassStatEntry ::= SEQUENCE {
|
|
rlAAASysPassStatLevel INTEGER,
|
|
rlAAASysPassStatLockedState INTEGER,
|
|
rlAAASysPassStatConsFailedLogins Counter32,
|
|
rlAAASysPassStatPasswordValidTime Unsigned32,
|
|
rlAAASysPassStatPasswordExpieryDate DisplayString
|
|
}
|
|
|
|
rlAAASysPassStatLevel OBJECT-TYPE
|
|
SYNTAX INTEGER (1..15)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "System password level"
|
|
::= { rlAAASysPassStatEntry 1 }
|
|
|
|
rlAAASysPassStatLockedState OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
locked(0),
|
|
usable(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "System password locked status"
|
|
::= { rlAAASysPassStatEntry 2 }
|
|
|
|
rlAAASysPassStatConsFailedLogins OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Number of last consecutive failed logins"
|
|
::= { rlAAASysPassStatEntry 3 }
|
|
|
|
|
|
rlAAASysPassStatPasswordValidTime OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The period of time in days, during which the password,
|
|
is considered valid for login. Value of 0 means never expired.
|
|
The actual range is product specific.
|
|
After this time the system may allow limited number of logins
|
|
to change the password. "
|
|
DEFVAL { 0 }
|
|
::= { rlAAASysPassStatEntry 4 }
|
|
|
|
rlAAASysPassStatPasswordExpieryDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "If System password aging is active, the date,
|
|
on which the current password will expire.
|
|
Otherwise zero size string"
|
|
::= { rlAAASysPassStatEntry 5 }
|
|
|
|
|
|
--- Number of failures before lock-out (1-5, 0 for disable)
|
|
|
|
|
|
rlAAAMaxNumLogAttmpts OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of consecutive unsuccessful login attempts
|
|
before user is locked. Value of 0 means no limit. The actual range is
|
|
product specific. TIC requirement is 3."
|
|
DEFVAL { 0 }
|
|
::= { rlAAA 50 }
|
|
|
|
|
|
--
|
|
-- Unlock user action scalar
|
|
--
|
|
|
|
rlAAAUnlockUserName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "An action MIB variable setting with value
|
|
of Local User Name will unlock this user.
|
|
The value of this variable is not saved to
|
|
non volatile storage. Read of this variable
|
|
always returns zero length display string."
|
|
::= { rlAAA 51 }
|
|
|
|
|
|
|
|
--
|
|
-- Unlock user system passwords
|
|
--
|
|
|
|
rlAAAUnlockSystemPassword OBJECT-TYPE
|
|
SYNTAX INTEGER (0..15)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "An action MIB variable setting with value
|
|
of Level will unlock the system password
|
|
for this level. The value of this variable
|
|
is not saved to non volatile storage.
|
|
Read of this variable always returns zero.
|
|
Zero (0) does no action."
|
|
::= { rlAAA 52 }
|
|
|
|
--
|
|
-- Locked lines table
|
|
--
|
|
|
|
rlAAALockedLineTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALockedLineEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies lines statuses.
|
|
Users cannot access the product from
|
|
remote based on a password of the locked line.
|
|
This table enables to unlock lines."
|
|
::= { rlAAA 53 }
|
|
|
|
|
|
rlAAALockedLineEntry OBJECT-TYPE
|
|
SYNTAX RlAAALockedLineEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAALockedLinePortType,
|
|
rlAAALockedLineIfIndex,
|
|
rlAAALockedLineServiceType}
|
|
::= { rlAAALockedLineTable 1 }
|
|
|
|
RlAAALockedLineEntry ::= SEQUENCE {
|
|
rlAAALockedLinePortType RlAAALinePortType,
|
|
rlAAALockedLineIfIndex Unsigned32,
|
|
rlAAALockedLineServiceType RlAAAServiceType,
|
|
rlAAALockedLineStatus INTEGER
|
|
}
|
|
|
|
rlAAALockedLinePortType OBJECT-TYPE
|
|
SYNTAX RlAAALinePortType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " the physical port type ."
|
|
::= { rlAAALockedLineEntry 1 }
|
|
|
|
rlAAALockedLineIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Identifies the ifindex for which this entry can be used.
|
|
If index 0 means don't care (can be used for all if indices).
|
|
For port type console the value could be only 0."
|
|
::= { rlAAALockedLineEntry 2}
|
|
|
|
rlAAALockedLineServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "the service type"
|
|
::= { rlAAALockedLineEntry 3 }
|
|
|
|
rlAAALockedLineStatus OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
locked(0),
|
|
usable(1)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The entry exists only if a line exist.
|
|
Setting this field to value usable results in
|
|
resetting the password failure counter,
|
|
and unlock a locked user."
|
|
::= { rlAAALockedLineEntry 4 }
|
|
|
|
--
|
|
-- SystemPasswordVerificationAndSetting Table
|
|
--
|
|
|
|
rlAAASystemPasswordVerificationAndSettingTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAASystemPasswordVerificationAndSettingEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies per every system level, old and new passwords.
|
|
Serves for verification the old password and setting a new password."
|
|
::= { rlAAA 54 }
|
|
|
|
rlAAASystemPasswordVerificationAndSettingEntry OBJECT-TYPE
|
|
SYNTAX RlAAASystemPasswordVerificationAndSettingEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row of system password verification and setting table."
|
|
INDEX { rlAAASystemPasswordSettingPrivilegeLevel}
|
|
::= { rlAAASystemPasswordVerificationAndSettingTable 1 }
|
|
|
|
RlAAASystemPasswordVerificationAndSettingEntry ::= SEQUENCE {
|
|
rlAAASystemPasswordSettingPrivilegeLevel INTEGER,
|
|
rlAAASystemPasswordVerificationOldPassword DisplayString,
|
|
rlAAASystemPasswordSettingNewPassword DisplayString,
|
|
rlAAASystemPasswordConfirmNewPassword DisplayString
|
|
}
|
|
|
|
rlAAASystemPasswordSettingPrivilegeLevel OBJECT-TYPE
|
|
SYNTAX INTEGER (1..15)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "System password Privelege Level to be set."
|
|
::= { rlAAASystemPasswordVerificationAndSettingEntry 1 }
|
|
|
|
rlAAASystemPasswordVerificationOldPassword OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Old system password to be verified."
|
|
|
|
::= { rlAAASystemPasswordVerificationAndSettingEntry 2 }
|
|
|
|
rlAAASystemPasswordSettingNewPassword OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "New system password to be set."
|
|
|
|
::= { rlAAASystemPasswordVerificationAndSettingEntry 3 }
|
|
|
|
rlAAASystemPasswordConfirmNewPassword OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "New system password to be confirmed."
|
|
|
|
::= { rlAAASystemPasswordVerificationAndSettingEntry 4 }
|
|
|
|
END
|