1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
|
-- This module defines enterprise MIBs for Authentication
-- Configuration
--
-- Copyright (c) 1999-2004, Juniper Networks, Inc.
-- All rights reserved.
NETSCREEN-SET-AUTH-MIB DEFINITIONS ::= BEGIN
IMPORTS
netscreenSetting, netscreenSettingMibModule
FROM NETSCREEN-SMI
Integer32, MODULE-IDENTITY, OBJECT-TYPE
FROM SNMPv2-SMI
DisplayString
FROM SNMPv2-TC
;
netscreenSetAuthMibModule MODULE-IDENTITY
LAST-UPDATED "200411102022Z" -- Nov 10, 2004
ORGANIZATION
"Juniper Networks, Inc."
CONTACT-INFO
"Customer Support
1194 North Mathilda Avenue
Sunnyvale, California 94089-1206
USA
Tel: 1-800-638-8296
E-mail: customerservice@juniper.net
HTTP://www.juniper.net"
DESCRIPTION
"This module defines the object that are used to monitor all
the configuration info"
REVISION "200405030000Z" -- May 03, 2004
DESCRIPTION
"Added nsSetAuthCfgEntry attributes"
REVISION "200411102022Z" -- Nov 10, 2004
DESCRIPTION
"Modified copyright and contact information"
REVISION "200403030000Z" -- March 03, 2004
DESCRIPTION
"Converted to SMIv2 by Longview Software"
REVISION "200311100000Z" -- November 10, 2003
DESCRIPTION
"Correct spelling mistake"
REVISION "200204270000Z" -- April 27, 2002
DESCRIPTION
"More than one auth setting allowed in one system"
REVISION "200105270000Z" -- May 27, 2001
DESCRIPTION
"Creation Date"
::= { netscreenSettingMibModule 2 }
NsSetAuthCfgEntry ::= SEQUENCE
{
nsSetAuthCfgIdx Integer32,
nsSetAuthCfgVsys Integer32,
nsSetAuthCfgName DisplayString,
nsSetAuthCfgPrimary DisplayString,
nsSetAuthCfgBackup1 DisplayString,
nsSetAuthCfgBackup2 DisplayString,
nsSetAuthCfgConnIdleTimeout Integer32,
nsSetAuthCfgAuthAccount INTEGER,
nsSetAuthCfgIkeAccount INTEGER,
nsSetAuthCfgL2tpAccount INTEGER,
nsSetAuthCfgAdminAccount INTEGER,
nsSetAuthCfgXauthAccount INTEGER,
nsSetAuthCfgMethod INTEGER,
nsSetAuthCfgPort Integer32,
nsSetAuthCfgSecCliRetry Integer32,
nsSetAuthCfgSecCliTimeout Integer32,
nsSetAuthCfgSecEncType INTEGER,
nsSetAuthCfgSecUseDuress INTEGER,
nsSetAuthCfgLDAPCni DisplayString,
nsSetAuthCfgLDAPDn DisplayString,
nsSetAuthCfgSepChar DisplayString,
nsSetAuthCfgSepNumber Integer32,
nsSetAuthCfgRevInterval Integer32,
nsSetAuthCfgRadRetries Integer32,
nsSetAuthCfgEnableStnID INTEGER,
nsSetAuthCfgDomainName DisplayString,
nsSetAuthCfgAcctSessIdLen Integer32,
nsSetAuthCfgRFC2138Compatibility INTEGER,
nsSetAuthCfgSourceIfName DisplayString,
nsSetAuthCfgAcctPort Integer32,
nsSetAuthCfgAcctListActn INTEGER,
nsSetAuthCfgSourceIfInfo Integer32
}
nsSetAuth OBJECT IDENTIFIER ::= { netscreenSetting 2 }
nsSetAuthCfgTable OBJECT-TYPE
SYNTAX SEQUENCE OF NsSetAuthCfgEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The authentication configuration of NetScreen device."
::= { nsSetAuth 1 }
nsSetAuthCfgEntry OBJECT-TYPE
SYNTAX NsSetAuthCfgEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"NetScreen admin user authentication setting table."
INDEX
{ nsSetAuthCfgIdx }
::= { nsSetAuthCfgTable 1 }
nsSetAuthCfgIdx OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Authentication server config index."
::= { nsSetAuthCfgEntry 1 }
nsSetAuthCfgVsys OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Virtural system the setting belongs to."
::= { nsSetAuthCfgEntry 2 }
nsSetAuthCfgName OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Authentication server setting entry name."
::= { nsSetAuthCfgEntry 3 }
nsSetAuthCfgPrimary OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Primary authentication server IP or domain name."
::= { nsSetAuthCfgEntry 4 }
nsSetAuthCfgBackup1 OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"First backup authentication server IP or domain name.It's
optional."
::= { nsSetAuthCfgEntry 5 }
nsSetAuthCfgBackup2 OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Secondary backup authentication server IP or domain name.It's
optional."
::= { nsSetAuthCfgEntry 6 }
nsSetAuthCfgConnIdleTimeout OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"connection timeout threshold setting. 0 means no timeout
setting."
::= { nsSetAuthCfgEntry 7 }
nsSetAuthCfgAuthAccount OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Allow authentication account."
::= { nsSetAuthCfgEntry 8 }
nsSetAuthCfgIkeAccount OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Allow IKE account."
::= { nsSetAuthCfgEntry 9 }
nsSetAuthCfgL2tpAccount OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Allow L2tp account."
::= { nsSetAuthCfgEntry 10 }
nsSetAuthCfgAdminAccount OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Allow administration account."
::= { nsSetAuthCfgEntry 11 }
nsSetAuthCfgXauthAccount OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Allow Xauth account."
::= { nsSetAuthCfgEntry 12 }
nsSetAuthCfgMethod OBJECT-TYPE
SYNTAX INTEGER {
build-in-user-db(0),
radius-server(1),
secureId-server(2),
ldap-server(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"NetScreen device admin user authentication method."
::= { nsSetAuthCfgEntry 13 }
nsSetAuthCfgPort OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Server listening port number."
::= { nsSetAuthCfgEntry 14 }
nsSetAuthCfgSecCliRetry OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"SecureID client client retry times"
::= { nsSetAuthCfgEntry 15 }
nsSetAuthCfgSecCliTimeout OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"SecureID client timeout threshold."
::= { nsSetAuthCfgEntry 16 }
nsSetAuthCfgSecEncType OBJECT-TYPE
SYNTAX INTEGER {
sdi(0),
des(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"SecureID traffic encryption type."
::= { nsSetAuthCfgEntry 17 }
nsSetAuthCfgSecUseDuress OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Use duress in SecureID authentication."
::= { nsSetAuthCfgEntry 18 }
nsSetAuthCfgLDAPCni OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..2))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"LDAP server common name identifier"
::= { nsSetAuthCfgEntry 19 }
nsSetAuthCfgLDAPDn OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"LDAP server distinguished name"
::= { nsSetAuthCfgEntry 20 }
nsSetAuthCfgSepChar OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..2))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Seperator character for this entry"
::= { nsSetAuthCfgEntry 21 }
nsSetAuthCfgSepNumber OBJECT-TYPE
SYNTAX Integer32
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Seperator number for this entry"
::= { nsSetAuthCfgEntry 22 }
nsSetAuthCfgRevInterval OBJECT-TYPE
SYNTAX Integer32
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Revert interval for this entry"
::= { nsSetAuthCfgEntry 23 }
nsSetAuthCfgRadRetries OBJECT-TYPE
SYNTAX Integer32
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Radius retries for this entries"
::= { nsSetAuthCfgEntry 24 }
nsSetAuthCfgEnableStnID OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Enable/Disable call station ID for this entry."
::= { nsSetAuthCfgEntry 25 }
nsSetAuthCfgDomainName OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Domain name for this entry"
::= { nsSetAuthCfgEntry 26 }
nsSetAuthCfgAcctSessIdLen OBJECT-TYPE
SYNTAX Integer32
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Acct session identifier length for this entry"
::= { nsSetAuthCfgEntry 27 }
nsSetAuthCfgRFC2138Compatibility OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Is RFC2138 compatible for this entry"
::= { nsSetAuthCfgEntry 28 }
nsSetAuthCfgSourceIfName OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Source interface name for this entry"
::= { nsSetAuthCfgEntry 29 }
nsSetAuthCfgAcctPort OBJECT-TYPE
SYNTAX Integer32
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Radius accounting port for this entry"
::= { nsSetAuthCfgEntry 30 }
nsSetAuthCfgAcctListActn OBJECT-TYPE
SYNTAX INTEGER {
none(0),
cleanup-sess(1)
}
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Radius accounting action for this entry"
::= { nsSetAuthCfgEntry 31 }
nsSetAuthCfgSourceIfInfo OBJECT-TYPE
SYNTAX Integer32
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Source interface info for this entry. Returns -1 if no interface is selected"
::= { nsSetAuthCfgEntry 32 }
END
|
