diff options
Diffstat (limited to 'MIBS/siae/SIAE-USER-MIB')
| -rw-r--r-- | MIBS/siae/SIAE-USER-MIB | 664 |
1 files changed, 664 insertions, 0 deletions
diff --git a/MIBS/siae/SIAE-USER-MIB b/MIBS/siae/SIAE-USER-MIB new file mode 100644 index 0000000..97f78fc --- /dev/null +++ b/MIBS/siae/SIAE-USER-MIB @@ -0,0 +1,664 @@ +-- ---------------------------------------------------------------------------- +-- +-- SIAE MICROELETTRONICA s.p.a. +-- +-- Via Michelangelo Buonarroti, 21 +-- 20093 - Cologno Monzese +-- Milano +-- ITALY +-- +-- ---------------------------------------------------------------------------- +-- ---------------------------------------------------------------------------- + +SIAE-USER-MIB + DEFINITIONS ::= BEGIN + + IMPORTS + MODULE-IDENTITY, OBJECT-TYPE, + IpAddress + FROM SNMPv2-SMI + DisplayString, + RowStatus, + StorageType + FROM SNMPv2-TC + SnmpAdminString + FROM SNMP-FRAMEWORK-MIB + siaeMib + FROM SIAE-TREE-MIB; + + accessControl MODULE-IDENTITY + LAST-UPDATED "201609170000Z" + ORGANIZATION "SIAE MICROELETTRONICA spa" + CONTACT-INFO + "SIAE MICROELETTONICA s.p.a. + Via Michelangelo Buonarroti, 21 + 20093 - Cologno Monzese + Milano - ITALY + Phone : +39-02-27325-1 + E-mail: tbd@siaemic.com + " + DESCRIPTION + "User privileges and credentials for SIAE equipment access + control. + " + REVISION "201609170000Z" + DESCRIPTION + "Added accessControlExtLoginTable. + " + REVISION "201404080000Z" + DESCRIPTION + "Introduced accessControlGroupTelnet leaf + Fixed IMPORTS clause + " + REVISION "201402030000Z" + DESCRIPTION + "Improved description of accessControlMibVersion + " + REVISION "201304160000Z" + DESCRIPTION + "Initial version 01.00.00 + " + ::= { siaeMib 5 } + +------------------------------------------------------------------------------ +-- accessControl GROUP +------------------------------------------------------------------------------ +-- +-- This MIB defines the objects to access the system: users and groups. +-- Each user belongs to a group that identifies the access privileges to all +-- available protocols. A login table shows the users logged in the system. +-- AccessControlClientTable defines the client credentials to use a given +-- service. +-- +-- +------------------------------------------------------------------------------ + +------ Beginning ------------------------------------------------------------- + + accessControlMibVersion OBJECT-TYPE + SYNTAX INTEGER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Numerical version of this module. + The string version of this MIB have the following format: + XX.YY.ZZ + so, for example, the value 1 should be interpreted as 00.00.01 + and the value 10001 should be interpreted as 01.00.01." + DEFVAL {1} + ::= {accessControl 1} + +------- Begin of accessControlGroupTable +-- + accessControlGroupTable OBJECT-TYPE + SYNTAX SEQUENCE OF AccessControlGroupRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table with Group records." + ::= {accessControl 2} + + accessControlGroupRecord OBJECT-TYPE + SYNTAX AccessControlGroupRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Group record. At most 10 records can be present in + accessControlGroupTable." + INDEX {accessControlGroupName} + ::= {accessControlGroupTable 1} + + AccessControlGroupRecord ::= + SEQUENCE { + accessControlGroupName SnmpAdminString, + accessControlGroupProfile INTEGER, + accessControlGroupHttp INTEGER, + accessControlGroupHttps INTEGER, + accessControlGroupSnmp INTEGER, + accessControlGroupFtp INTEGER, + accessControlGroupSftp INTEGER, + accessControlGroupSsh INTEGER, + accessControlGroupRowStatus RowStatus, + accessControlGroupCli INTEGER + } + + accessControlGroupName OBJECT-TYPE + SYNTAX SnmpAdminString (SIZE(1..31)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "ASCII string identifying the Group, used as index for the table." + ::= {accessControlGroupRecord 1} + + accessControlGroupProfile OBJECT-TYPE + SYNTAX INTEGER { + admin (1), + readwrite (2), + maintenance (3), + readonly (4) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object defines the group access privileges. 'Admin' profile can + read and write all MIB, 'readwrite' profile can write all MIB leaves + but it can not manage users, 'maintenance' profile can do only manual + operations, while 'readonly' can only perform get operations." + ::= {accessControlGroupRecord 2} + + accessControlGroupHttp OBJECT-TYPE + SYNTAX INTEGER { + deny (1), + allow (2) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object allows or denies a given group using http protocol + for WebLct to access equipment." + ::= {accessControlGroupRecord 3} + + accessControlGroupHttps OBJECT-TYPE + SYNTAX INTEGER { + deny (1), + allow (2) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object allows or denies a given group using https protocol + for WebLct to access equipment." + ::= {accessControlGroupRecord 4} + + accessControlGroupSnmp OBJECT-TYPE + SYNTAX INTEGER { + deny (1), + allowV1 (2), + allowV2c (3), + allowV3 (4) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object allows or denies a given group using snmp + protocol to access network equipment. If snmp protocol + is enabled, it is possible to choose between V1, V2c + and V3 versions of snmp." + ::= {accessControlGroupRecord 5} + + accessControlGroupFtp OBJECT-TYPE + SYNTAX INTEGER { + deny (1), + allow (2) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object allows or denies a given group using ftp + protocol." + ::= {accessControlGroupRecord 6} + + accessControlGroupSftp OBJECT-TYPE + SYNTAX INTEGER { + deny (1), + allow (2) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object allows or denies a given group using sftp + protocol." + ::= {accessControlGroupRecord 7} + + accessControlGroupSsh OBJECT-TYPE + SYNTAX INTEGER { + deny (1), + allow (2) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object allows or denies a given group using ssh + protocol." + ::= {accessControlGroupRecord 8} + + accessControlGroupRowStatus OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object is used to manage a row in accessControlGroupTable." + ::= {accessControlGroupRecord 9} + + accessControlGroupCli OBJECT-TYPE + SYNTAX INTEGER { + deny (1), + allow (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object allows or denies a given group using both cli through + serial port and remote cli (telnet). Only 'admin' profile is + allowed to use cli and can execute all commands." + ::= {accessControlGroupRecord 10} + +-- +------- End of accessControlGroupTable + +-- +------- The following table defines the users of the equipment, +------- connected to the group table. + +------- Begin of accessControlUserTable +-- + accessControlUserTable OBJECT-TYPE + SYNTAX SEQUENCE OF AccessControlUserRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table with User records. At most 10 records can be present in + accessControlUserTable." + ::= {accessControl 3} + + accessControlUserRecord OBJECT-TYPE + SYNTAX AccessControlUserRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "User record." + INDEX {accessControlUserName} + ::= {accessControlUserTable 1} + + AccessControlUserRecord ::= + SEQUENCE { + accessControlUserName SnmpAdminString, + accessControlUserGroupName SnmpAdminString, + accessControlUserPwd DisplayString, + accessControlUserSnmpAuthProt INTEGER, + accessControlUserSnmpAuthKey OCTET STRING, + accessControlUserSnmpPrivProt INTEGER, + accessControlUserSnmpPrivKey OCTET STRING, + accessControlUserTimeout INTEGER, + accessControlUserRowStatus RowStatus + } + + accessControlUserName OBJECT-TYPE + SYNTAX SnmpAdminString (SIZE(1..31)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "ASCII string identifying the user." + ::= {accessControlUserRecord 1} + + accessControlUserGroupName OBJECT-TYPE + SYNTAX SnmpAdminString (SIZE(1..31)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object specifies which group this user belongs to. + It must refers to an entry of accessControlGroupTable." + ::= {accessControlUserRecord 2} + + accessControlUserPwd OBJECT-TYPE + SYNTAX DisplayString (SIZE(1..31)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object specifies the login password of the specified + user." + ::= {accessControlUserRecord 3} + + accessControlUserSnmpAuthProt OBJECT-TYPE + SYNTAX INTEGER { + noAuth (1), + md5 (2), + sha (3) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object is used to set the user authentication protocol + if the related group can use snmp protocol." + ::= {accessControlUserRecord 4} + + accessControlUserSnmpAuthKey OBJECT-TYPE + SYNTAX OCTET STRING + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object specifies the user authentication key if + the related group can use snmpv3 protocol." + ::= {accessControlUserRecord 5} + + accessControlUserSnmpPrivProt OBJECT-TYPE + SYNTAX INTEGER { + noPriv (1), + des (2), + aes (3) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object is used to set the user cipher protocol if + the related group can use snmp protocol." + ::= {accessControlUserRecord 6} + + accessControlUserSnmpPrivKey OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(0..127)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object specifies the user cipher key if the related + group can use snmpv3 protocol." + ::= {accessControlUserRecord 7} + + accessControlUserTimeout OBJECT-TYPE + SYNTAX INTEGER (0..3600) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object defines the user timeout after login operation. + Zero timeout means no timeout." + DEFVAL {300} + ::= {accessControlUserRecord 8} + + accessControlUserRowStatus OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object is used to manage an instance in accessControlUserTable." + ::= {accessControlUserRecord 9} + +-- +------- End of accessControlUserTable + +-- +------- The following table defines the users logged in the system. + +------- Begin of accessControlLoginTable +-- + accessControlLoginTable OBJECT-TYPE + SYNTAX SEQUENCE OF AccessControlLoginRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table with Login records. At most 4 users via WebLct, + 10 users via snmp and 10 users via cli can be logged + at the same time in the equipment." + ::= {accessControl 4} + + accessControlLoginRecord OBJECT-TYPE + SYNTAX AccessControlLoginRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Login record. The create operation is performed by setting + accessControlLoginPwd object." + INDEX {accessControlLoginIpAddress, + accessControlLoginUserName, + accessControlLoginType} + ::= {accessControlLoginTable 1} + + AccessControlLoginRecord ::= + SEQUENCE { + accessControlLoginUserName SnmpAdminString, + accessControlLoginIpAddress IpAddress, + accessControlLoginRequest INTEGER, + accessControlLoginTrapEnable INTEGER, + accessControlLoginType INTEGER, + accessControlLoginPwd OCTET STRING, + accessControlLoginPolling INTEGER + } + + accessControlLoginUserName OBJECT-TYPE + SYNTAX SnmpAdminString (SIZE(1..31)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object defines the name of the logged user." + ::= {accessControlLoginRecord 1} + + accessControlLoginIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object defines the IP address of the logged user." + ::= {accessControlLoginRecord 2} + + accessControlLoginRequest OBJECT-TYPE + SYNTAX INTEGER { + noAction (1), + logout (2), + forcelogout (3) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to do logout or to force logout + of other users. Only users with 'admin' profile can + force logout." + ::= {accessControlLoginRecord 3} + + accessControlLoginTrapEnable OBJECT-TYPE + SYNTAX INTEGER { + disable (1), + enable (2) + } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object enables/disables trap receiver for a + given user." + DEFVAL {disable} + ::= {accessControlLoginRecord 4} + + accessControlLoginType OBJECT-TYPE + SYNTAX INTEGER { + web (1), + snmp (2), + cli (3) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object identifies login type." + ::= {accessControlLoginRecord 5} + + accessControlLoginPwd OBJECT-TYPE + SYNTAX OCTET STRING (SIZE(1..31)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object is used to create a row in the table. It + must correspond to the user password defined in + accessControlUserTable." + ::= {accessControlLoginRecord 6} + + accessControlLoginPolling OBJECT-TYPE + SYNTAX INTEGER { + polling (1) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object is used to refresh the timeout of the related instance + of the table. To keep user logged in, manager must read this object + before the end of accessControlUserTimeout. For cli users execution + of cli commands refreshes timeout." + ::= {accessControlLoginRecord 7} + +-- +------- End of accessControlLoginTable + +-- +------- The following table defines the user credentials required to access +------- FTP and SFTP services. + +------- Begin of accessControlClientTable +-- + accessControlClientTable OBJECT-TYPE + SYNTAX SEQUENCE OF AccessControlClientRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Table with records that show client credentials to + access FTP and SFTP services." + ::= {accessControl 5} + + accessControlClientRecord OBJECT-TYPE + SYNTAX AccessControlClientRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Client credentials record for a given user." + INDEX {accessControlClientService} + ::= {accessControlClientTable 1} + + AccessControlClientRecord ::= + SEQUENCE { + accessControlClientService INTEGER, + accessControlClientServiceStatus INTEGER, + accessControlClientName SnmpAdminString, + accessControlClientPwd SnmpAdminString, + accessControlClientStorageType StorageType, + accessControlClientRowStatus RowStatus + } + + accessControlClientService OBJECT-TYPE + SYNTAX INTEGER { + ftp (1), + sftp (2) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object is used to identify the service that a given user + can access as client." + ::= {accessControlClientRecord 1} + + accessControlClientServiceStatus OBJECT-TYPE + SYNTAX INTEGER { + disable (1), + enable (2) + } + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "This object is used to enable/disable the FTP/SFTP client + on the equipment. If both clients are enabled, SFTP client + is adopted." + ::= {accessControlClientRecord 2} + + accessControlClientName OBJECT-TYPE + SYNTAX SnmpAdminString (SIZE(1..31)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "ASCII string identifying the client name." + DEFVAL {""} + ::= {accessControlClientRecord 3} + + accessControlClientPwd OBJECT-TYPE + SYNTAX SnmpAdminString (SIZE(1..31)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "ASCII string identifying the client password." + DEFVAL {""} + ::= {accessControlClientRecord 4} + + accessControlClientStorageType OBJECT-TYPE + SYNTAX StorageType + MAX-ACCESS read-create + STATUS current + DESCRIPTION "The storage type for this conceptual row. + " + DEFVAL {nonVolatile} + ::= {accessControlClientRecord 5} + + accessControlClientRowStatus OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "The status of this conceptual row." + ::= {accessControlClientRecord 6} + +-- +------- End of accessControlClientTable + + +-- +------- The following table augments accessControlLoginTable +------- to show additional information about logged users. + +------- Begin of accessControlExtLoginTable +-- + + accessControlExtLoginTable OBJECT-TYPE + SYNTAX SEQUENCE OF AccessControlExtLoginRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "A table that contains additional information about + every user that is logged into the equipment." + ::= { accessControl 6 } + + accessControlExtLoginRecord OBJECT-TYPE + SYNTAX AccessControlExtLoginRecord + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Additional information record for a given logged + user." + AUGMENTS { accessControlLoginRecord } + ::= { accessControlExtLoginTable 1 } + + AccessControlExtLoginRecord ::= + SEQUENCE{ + accessControlExtLoginProfile INTEGER, + accessControlExtLoginAuthMode INTEGER + } + + accessControlExtLoginProfile OBJECT-TYPE + SYNTAX INTEGER { + admin (1), + readwrite (2), + maintenance (3), + readonly (4) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object defines the access privileges associated to logged user. + 'Admin' profile can read and write all MIB, 'readwrite' profile can + write all MIB leaves but it can not manage users, 'maintenance' can + do only manual operations, while 'readonly' can only perform get + operations. In case of local authentication, the user profile is found + in local database, while, if authentication is remote, the profile is + assigned by remote server." + ::= { accessControlExtLoginRecord 1 } + + accessControlExtLoginAuthMode OBJECT-TYPE + SYNTAX INTEGER { + local (1), + remote (2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This object shows if logged user has been authenticated locally or by remote + server (i.e RADIUS, TACACS, etc...)." + ::= { accessControlExtLoginRecord 2 } + +-- +------- End of accessControlExtLoginTable + + +------ End group ------------------------------------------------------------- + +END + |