1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
|
--
-- MODULE-IDENTITY
-- OrgName
-- Fortinet, Inc.
-- ContactInfo
-- Technical Support
-- e-mail: support@fortinet.com
-- http://www.fortinet.com
--
FORTINET-FORTIAUTHENTICATOR-MIB DEFINITIONS ::= BEGIN
IMPORTS
fnGenTrapMsg, FnIndex, fortinet
FROM FORTINET-CORE-MIB
MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
FROM SNMPv2-CONF
sysName
FROM SNMPv2-MIB
Gauge32, MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE
FROM SNMPv2-SMI
DisplayString, TEXTUAL-CONVENTION
FROM SNMPv2-TC;
fnFortiAuthenticatorMib MODULE-IDENTITY
LAST-UPDATED "201901170000Z"
ORGANIZATION
"Fortinet Technologies, Inc."
CONTACT-INFO
"Technical Support
email: support@fortinet.com
http://www.fortinet.com
"
DESCRIPTION
"MIB module for Fortinet FortiAuthenticator devices"
REVISION "202004160000Z"
DESCRIPTION
"Include RAID status"
REVISION "201901170000Z"
DESCRIPTION
"Include Fsso user data and add facmodel information"
REVISION "201506080000Z"
DESCRIPTION
"Include Radius proxy, high availability data"
REVISION "201211050000Z"
DESCRIPTION
"Initial version of FORTINET-FORTIAUTHENTICATOR-MIB."
::= { fortinet 113 }
--
-- FortiAuthenticator MIB Textual Conventions (TC)
--
FacHaState ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"Enumerated type for FAC High Availability states"
SYNTAX INTEGER {
unknownOrDetermining (1),
clusterPrimary (2),
clusterSecondary (3),
standalonePrimary (4),
loadBalancer (5),
disabled (255)
}
--
-- fortinet.fnFortiAuthenticatorMib
--
facTraps OBJECT IDENTIFIER
::= { fnFortiAuthenticatorMib 0 }
facSystem OBJECT IDENTIFIER
::= { fnFortiAuthenticatorMib 1 }
facHa OBJECT IDENTIFIER
::= { facSystem 201 }
facAuth OBJECT IDENTIFIER
::= { facSystem 202 }
facMIBConformance OBJECT IDENTIFIER
::= { fnFortiAuthenticatorMib 600 }
facModel OBJECT IDENTIFIER
::= { fnFortiAuthenticatorMib 100 }
--
-- fortinet.fnFortiAuthenticatorMib.facSystem
--
facSysModel OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION "System model string"
::= { facSystem 1 }
facSysSerial OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Device serial number"
::= { facSystem 2 }
facSysVersion OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Device firmware version"
::= { facSystem 3 }
facSysCpuUsage OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Instantaneous CPU usage"
::= { facSystem 4 }
facSysMemUsage OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Instantaneous memory utilization"
::= { facSystem 5 }
facSysLogDiskUsage OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Instantaneous log disk usage"
::= { facSystem 6 }
-- fnFortiAuthenticatorMib.facSystem.facHa
facHaCurrentStatus OBJECT-TYPE
SYNTAX FacHaState
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Instantaneous HA status for this node"
::= { facHa 1 }
-- fnFortiAuthenticatorMib.facSystem.facAuth
facAuthUserCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of local users"
::= { facAuth 1 }
facAuthGroupCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of user groups"
::= { facAuth 2 }
facFortiTokenCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of FortiTokens"
::= { facAuth 3 }
facAuthUsersRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of local users that can still be added before reaching the table limit"
::= { facAuth 4 }
facAuthGroupRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of user groups that can still be added before reaching the table limit"
::= { facAuth 5 }
facFortiTokenRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of FortiTokens that can still be added before reaching the table limit"
::= { facAuth 6 }
facRadiusNasCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius NAS"
::= { facAuth 7 }
facRadiusNasRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius NAS that can still be added before reaching the table limit"
::= { facAuth 8 }
facUserCertificateCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of user certificates"
::= { facAuth 9 }
facRadiusLoginsTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius logins since startup"
::= { facAuth 10 }
facRadiusLogins5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius logins in the last 5 minutes"
::= { facAuth 11 }
facRadiusFailuresTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius login failures since startup"
::= { facAuth 12 }
facRadiusFailures5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius login failures in the last 5 minutes"
::= { facAuth 13 }
facRadiusAccountingTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius accounting records since startup"
::= { facAuth 14 }
facRadiusAccounting5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius accounting records in the last 5 minutes"
::= { facAuth 15 }
facLdapLoginsTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Ldap logins since startup"
::= { facAuth 16 }
facLdapLogins5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Ldap logins in the last 5 minutes"
::= { facAuth 17 }
facLdapFailuresTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Ldap login failures since startup"
::= { facAuth 18 }
facLdapFailures5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Ldap login failures in the last 5 minutes"
::= { facAuth 19 }
facAuthEventsTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of authentication events since startup"
::= { facAuth 20 }
facAuthEvents5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of authentication events in the last 5 minutes"
::= { facAuth 21 }
facAuthFailuresTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of authentication failures since startup"
::= { facAuth 22 }
facAuthFailures5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of authentication failures in the last 5 minutes"
::= { facAuth 23 }
facRadiusProxyInTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius accounting proxy requests received since startup"
::= { facAuth 24 }
facRadiusProxyOutTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius accounting proxy requests sent since startup"
::= { facAuth 25 }
facFssoUserCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of signed-in fsso users"
::= { facAuth 26 }
facFssoUserRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of fsso users can still signed in before reaching the table limit"
::= { facAuth 27 }
facRaidStatus OBJECT-TYPE
SYNTAX INTEGER {
none(0), -- no raid detected or status unknown
ok(1),
degraded(2), -- at least one failed disk, but raid is still functioning
failed(3), -- raid does not work any more, has to be deleted and re-created
initializing(4),
verifying(5),
rebuilding(6)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION "RAID status"
::= { facAuth 28 }
--
-- fnFortiAuthenticatorMib.facTraps
--
facTrapAuthUsersThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facAuthUsersRemaining }
STATUS current
DESCRIPTION
"The user table is nearly full."
::= { facTraps 100 }
facTrapAuthGroupThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facAuthGroupRemaining }
STATUS current
DESCRIPTION
"The user group table is nearly full."
::= { facTraps 101 }
facTrapRadiusNasThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facRadiusNasRemaining }
STATUS current
DESCRIPTION
"The Radius NAS table is nearly full."
::= { facTraps 102 }
facTrapAuthEventsThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facAuthEvents5Mins }
STATUS current
DESCRIPTION
"The Authentication request rate has exceded the configured threshhold."
::= { facTraps 103 }
facTrapAuthFailureThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facAuthFailures5Mins }
STATUS current
DESCRIPTION
"The Authentication failure rate has exceded the configured threshhold."
::= { facTraps 104 }
facTrapUserLockout NOTIFICATION-TYPE
OBJECTS { facSysSerial, sysName, fnGenTrapMsg }
STATUS current
DESCRIPTION
"A user has been locked out for repeated login failures."
::= { facTraps 105 }
facTrapHAStatusChange NOTIFICATION-TYPE
OBJECTS { facSysSerial, sysName, facHaCurrentStatus, fnGenTrapMsg }
STATUS current
DESCRIPTION
"The FAC device's HA status has changed."
::= { facTraps 106 }
facTrapHASyncActivityLow NOTIFICATION-TYPE
OBJECTS { facSysSerial, sysName, fnGenTrapMsg }
STATUS current
DESCRIPTION
"There has been low HA sync activity recently."
::= { facTraps 107 }
facTrapRaidStatusChange NOTIFICATION-TYPE
OBJECTS { facSysSerial, facRaidStatus }
STATUS current
DESCRIPTION
"The FAC device's RAID status has changed."
::= { facTraps 108 }
--
-- fnFortiAuthenticatorMib.facMIBConformance
--
facSystemConformanceGroup OBJECT-GROUP
OBJECTS { facSysModel, facSysSerial, facSysVersion,
facSysCpuUsage, facSysMemUsage, facSysLogDiskUsage,
facAuthUserCount, facAuthGroupCount, facFortiTokenCount,
facAuthUsersRemaining, facAuthGroupRemaining, facFortiTokenRemaining,
facRadiusNasCount, facRadiusNasRemaining, facUserCertificateCount,
facRadiusLoginsTotal, facRadiusLogins5Mins, facRadiusFailuresTotal,
facRadiusFailures5Mins, facRadiusAccountingTotal, facRadiusAccounting5Mins,
facLdapLoginsTotal, facLdapLogins5Mins, facLdapFailuresTotal,
facLdapFailures5Mins, facAuthEventsTotal, facAuthEvents5Mins,
facAuthFailuresTotal, facAuthFailures5Mins, facHaCurrentStatus,
facRadiusProxyInTotal, facRadiusProxyOutTotal,
facFssoUserCount, facFssoUserRemaining, facRaidStatus
}
STATUS current
DESCRIPTION "Basic FortiAuthenticator system information"
::= { facMIBConformance 1 }
facTrapsConformanceGroup NOTIFICATION-GROUP
NOTIFICATIONS { facTrapAuthUsersThreshold, facTrapAuthGroupThreshold,
facTrapRadiusNasThreshold, facTrapAuthEventsThreshold,
facTrapAuthFailureThreshold, facTrapUserLockout,
facTrapHAStatusChange, facTrapHASyncActivityLow,
facTrapRaidStatusChange }
STATUS current
DESCRIPTION "Event notifications."
::= { facMIBConformance 2 }
facMIBCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION "Compliance statement for FortiAuthenticator MIB"
MODULE
GROUP facSystemConformanceGroup
DESCRIPTION
"This group is mandatory for all FortiAuthenticator appliances
supporting this MIB."
GROUP facTrapsConformanceGroup
DESCRIPTION
"Traps are optional and may not be implemented on some
devices."
::= { facMIBConformance 100 }
-- facModel start
facvm OBJECT IDENTIFIER ::= { facModel 101 }
facvmhv OBJECT IDENTIFIER ::= { facModel 102 }
facvmxen OBJECT IDENTIFIER ::= { facModel 103 }
facvmkvm OBJECT IDENTIFIER ::= { facModel 104 }
facdocker OBJECT IDENTIFIER ::= { facModel 105 }
fac2hd OBJECT IDENTIFIER ::= { facModel 204 }
fac2he OBJECT IDENTIFIER ::= { facModel 205 }
fac4hc OBJECT IDENTIFIER ::= { facModel 303 }
fac4he OBJECT IDENTIFIER ::= { facModel 305 }
fac1kc OBJECT IDENTIFIER ::= { facModel 403 }
fac1kd OBJECT IDENTIFIER ::= { facModel 404 }
fac2ke OBJECT IDENTIFIER ::= { facModel 505 }
fac3kd OBJECT IDENTIFIER ::= { facModel 604 }
fac3ke OBJECT IDENTIFIER ::= { facModel 605 }
fac3hf OBJECT IDENTIFIER ::= { facModel 706 }
fac8hf OBJECT IDENTIFIER ::= { facModel 806 }
-- facModel end
END
|
