- Remove PVC volume mount from k8s/deployment.yaml - Delete k8s/mib-pvc.yaml (no longer needed) - Update .gitignore to commit MIB files to git - Add mix import_mibs task to copy MIBs from LibreNMS - Add all MIB files from priv/mibs/ to git This fixes the multi-attach volume error in Kubernetes where new pods couldn't start because the RWO (ReadWriteOnce) PVC was attached to the old pod. MIBs are now part of the Docker image and can be used by all pods simultaneously.
2284 lines
77 KiB
Text
2284 lines
77 KiB
Text
RADLAN-AAA DEFINITIONS ::= BEGIN
|
|
|
|
-- Title: RADLAN AAA Private Extension
|
|
-- Version: 7.40
|
|
-- Date: 30-Oct-2005
|
|
-- 03-Jun-2003 Changed upper bound of rlRadiusGlobalDefaultDeadtime to 2000
|
|
-- 31-Jul-2003 A new field rlRadiusServerUsage was added to rlRadiusServerEntry
|
|
-- 31-Jul-2003 Group rlAAAEap was added
|
|
-- 22-Sep-2003 Group rlTacacs was added
|
|
-- 11-Nov-2004 Scalar rlAAAAuditingEnable
|
|
-- 13-Dec-2004 MIBs for TIC support
|
|
-- a. New fields were added:
|
|
-- rlAAALineLockedState
|
|
-- rlAAALineConsFailedLogins
|
|
-- rlAAALinePasswordValidTime
|
|
-- rlAAALinePasswordExpieryDate
|
|
-- rlAAALocalLockedState
|
|
-- rlAAALocalConsFailedLogins
|
|
-- rlAAALocalPasswordValidTime
|
|
-- rlAAALocalPasswordExpieryDate
|
|
-- b. New scalars
|
|
-- rlAAAMinPasswordLength
|
|
-- rlAAAPasswordHistSize
|
|
-- rlAAAPasswordHistHoldTime
|
|
-- rlAAASuccLoginWriteToFile
|
|
-- rlAAAUnlockUserName
|
|
-- rlAAAUnlockSystemPassword
|
|
-- c. New tables
|
|
-- rlAAALocalLoginHistTable
|
|
-- rlAAALinePassLoginHistTable
|
|
-- rlAAASystemLoginHistTable
|
|
-- rlAAASysPassStatTable
|
|
-- rlAAALockedLineTable
|
|
-- 07-Jul-2005 Added field rlAAALocalLoginMrid
|
|
-- 30-Oct-2005 Added new table rlAAASystemPasswordVerificationAndSettingTable
|
|
|
|
IMPORTS
|
|
rnd FROM RADLAN-MIB
|
|
rlRadius FROM RADLAN-MIB
|
|
rlAAAEap FROM RADLAN-MIB
|
|
DisplayString FROM SNMPv2-TC-v1
|
|
TruthValue, RowStatus FROM RADLAN-SNMPv2
|
|
Unsigned32, IpAddress,Counter32,
|
|
MODULE-IDENTITY, OBJECT-TYPE FROM SNMPv2-SMI
|
|
TEXTUAL-CONVENTION FROM SNMPv2-TC;
|
|
|
|
rlAAA MODULE-IDENTITY
|
|
LAST-UPDATED "200309210000Z"
|
|
ORGANIZATION "Radlan Computer Communications Ltd."
|
|
CONTACT-INFO
|
|
"radlan.com"
|
|
DESCRIPTION
|
|
"The private MIB module definition for Authentication, Authorization and Accounting
|
|
in Radlan devices."
|
|
REVISION "200309210000Z"
|
|
DESCRIPTION
|
|
"Added this MODULE-IDENTITY clause."
|
|
::= { rnd 79 }
|
|
|
|
RlAAAMethodtype ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Method list type."
|
|
SYNTAX INTEGER {
|
|
rlAAAMethodDeny(0),
|
|
rlAAAMethodLinePassword(1),
|
|
rlAAAMethodSystemPassword(2),
|
|
rlAAAMethodLocalUserTable(3),
|
|
rlAAAMethodRadius(4),
|
|
rlAAAMethodTacacs(5),
|
|
rlAAAMethodSucceed(6)
|
|
}
|
|
|
|
RlAAAServiceType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Line service type.rlAAAServiceTypeDontCare must be the maximum value in the enum."
|
|
SYNTAX INTEGER {
|
|
rlAAAServiceTypeDontCare(0),
|
|
rlAAAServiceTypeTelnet(1),
|
|
rlAAAServiceTypeHttp(2),
|
|
rlAAAServiceTypeSsh(3),
|
|
rlAAAServiceTypeHttps(4),
|
|
rlAAAServiceTypeSnmp(5)
|
|
}
|
|
|
|
RlAAALinePortType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Line physical port type,the
|
|
rlAAAPortDontCare must be the maximum value in the enum."
|
|
SYNTAX INTEGER {
|
|
rlAAAPortDontCare(0),
|
|
rlAAAPortNetwork(1),
|
|
rlAAAPortConsole(2)
|
|
}
|
|
|
|
rlAAAMibVersion OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"MIB's version, the current version is 2. The difference in RlAAALocalLoginHistEntry,
|
|
RlAAALinePassLoginHistEntry, RlAAASystemLoginHistEntry added mrid field."
|
|
::= { rlAAA 1 }
|
|
|
|
|
|
rlAAARetries OBJECT-TYPE
|
|
SYNTAX INTEGER (1..5)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Determines the number of retries for each method
|
|
(Radius, local passwords, local users table and
|
|
tacacs)."
|
|
::= { rlAAA 2 }
|
|
|
|
|
|
rlAAARadiusEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use Radius. When to use
|
|
Radius exactly depends on its position in the
|
|
methods list. "
|
|
::= { rlAAA 3 }
|
|
|
|
rlAAATacacsEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use Tacacs. When to use
|
|
Tacacs exactly depends on its position in the
|
|
methods list."
|
|
::= { rlAAA 4 }
|
|
|
|
rlAAALocalUserEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use the local users table.
|
|
When to use the table exactly depends on its
|
|
position in the methods list. "
|
|
::= { rlAAA 5 }
|
|
|
|
rlAAASystemPasswordEnabled
|
|
OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use the system password.
|
|
When to use the passwords exactly depends on its
|
|
position in the methods list. "
|
|
::= { rlAAA 6 }
|
|
|
|
rlAAALinePasswordEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use the line password.
|
|
When to use the passwords exactly depends on its
|
|
position in the methods list. "
|
|
::= { rlAAA 7 }
|
|
|
|
rlAAAAlwaysSuccessEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies whether AAA will use the always success method.
|
|
When to use that method exactly depends on its
|
|
position in the methods list. "
|
|
::= { rlAAA 8 }
|
|
|
|
--
|
|
-- suppoted methods
|
|
--
|
|
|
|
rlAAARadiusSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether Radius is supported in AAA. If the
|
|
value is false Radius will not be used as an
|
|
authentication and accounting method. If the value
|
|
is true Radius will be used by AAA for authentication and
|
|
accounting if the the AAA was configured to do so
|
|
(by setting the appropriate mibs)."
|
|
::= { rlAAA 9 }
|
|
|
|
rlAAATacacsSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether Tacacs+ is supported in AAA. If the
|
|
value is false Tacacs+ will not be used as an
|
|
authentication and accounting method. If the value
|
|
is true Tacacs+ will be used by AAA for authentication and
|
|
accounting if the the AAA was configured to do so
|
|
(by setting the appropriate mibs)."
|
|
::= { rlAAA 10 }
|
|
|
|
rlAAALocalUserSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether the local users db is supported in
|
|
AAA.If the value is false the local users db will not be
|
|
used as an authentication and accounting method. If the
|
|
value is true the local users db will be used by AAA for
|
|
authentication and accounting method if the the AAA was
|
|
configured to do so (by setting the appropriate mibs)."
|
|
::= { rlAAA 11 }
|
|
|
|
rlAAASystemPasswordSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether system password is supported in AAA.
|
|
If the value is false system password will not be used as
|
|
an authentication and accounting method. If the value is
|
|
true the system password will be used by AAA for
|
|
authentication and accounting method if the the AAA was
|
|
configured to do so (by setting the appropriate mibs)."
|
|
::= { rlAAA 12 }
|
|
|
|
rlAAALinePasswordSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether line password is supported in AAA.
|
|
If the value is false line password will not be used as an
|
|
authentication and accounting method. If the value is true
|
|
the line password will be used by AAA for authentication and
|
|
accounting method if the the AAA was configured
|
|
to do so (by setting the appropriate mibs)."
|
|
::= { rlAAA 13 }
|
|
|
|
rlAAALineAlwaysSuccessSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "This mib show whether line always success method is
|
|
supported in AAA.If the value is false always success
|
|
method will not be used as an authentication and
|
|
accounting method. If the value is true the always
|
|
success method will be used by AAA for authentication and
|
|
accounting method if the the AAA was configured
|
|
to do so (by setting the appropriate mibs)."
|
|
::= { rlAAA 14 }
|
|
|
|
--
|
|
-- method list table
|
|
--
|
|
|
|
|
|
rlAAAMethodListTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAAMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all methods list per method name."
|
|
::= { rlAAA 15 }
|
|
|
|
rlAAAMethodListEntry OBJECT-TYPE
|
|
SYNTAX RlAAAMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAAMethodListName}
|
|
::= { rlAAAMethodListTable 1 }
|
|
|
|
RlAAAMethodListEntry ::= SEQUENCE {
|
|
rlAAAMethodListName DisplayString,
|
|
rlAAAMethodType1 RlAAAMethodtype,
|
|
rlAAAMethodType2 RlAAAMethodtype,
|
|
rlAAAMethodType3 RlAAAMethodtype,
|
|
rlAAAMethodType4 RlAAAMethodtype,
|
|
rlAAAMethodType5 RlAAAMethodtype,
|
|
rlAAAMethodType6 RlAAAMethodtype,
|
|
rlAAAMethodType7 RlAAAMethodtype,
|
|
rlAAAMethodListStatus RowStatus
|
|
}
|
|
|
|
rlAAAMethodListName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Line Method List Name"
|
|
::= { rlAAAMethodListEntry 1 }
|
|
|
|
rlAAAMethodType1 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " first method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 2 }
|
|
|
|
rlAAAMethodType2 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " second method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 3 }
|
|
|
|
|
|
rlAAAMethodType3 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "3th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 4 }
|
|
|
|
rlAAAMethodType4 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " 4th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 5 }
|
|
|
|
rlAAAMethodType5 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "5th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 6 }
|
|
|
|
|
|
rlAAAMethodType6 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " 6th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 7 }
|
|
|
|
|
|
rlAAAMethodType7 OBJECT-TYPE
|
|
SYNTAX RlAAAMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " 7th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAMethodListEntry 8 }
|
|
|
|
rlAAAMethodListStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "method list status can be destroy or createAndGo"
|
|
::= { rlAAAMethodListEntry 9 }
|
|
|
|
|
|
|
|
--
|
|
-- Line table
|
|
--
|
|
--- AAA MIBs for TIC support
|
|
--- Added read only fields to show if a user is locked,
|
|
--- password expiry date and number of consecutive failed logins.
|
|
--- New read write field to set the expiry time for a password.
|
|
--
|
|
-- Line table
|
|
--
|
|
|
|
rlAAALineTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALineEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all lines, their passwords and their
|
|
authorizations level .the table ordered lexicography by
|
|
the line name. when a new line is being authenticate the
|
|
search in line table is from the first entry in table
|
|
till it find the first entry that fit application input
|
|
line parameters ."
|
|
::= { rlAAA 16 }
|
|
|
|
rlAAALineEntry OBJECT-TYPE
|
|
SYNTAX RlAAALineEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAALinePortType,
|
|
rlAAAIfIndex,
|
|
rlAAAServiceType}
|
|
::= { rlAAALineTable 1 }
|
|
|
|
RlAAALineEntry ::= SEQUENCE {
|
|
rlAAALinePortType RlAAALinePortType,
|
|
rlAAAIfIndex Unsigned32,
|
|
rlAAAServiceType RlAAAServiceType,
|
|
rlAAALineMethodListNameLevel1 DisplayString,
|
|
rlAAALineMethodListNameLevel2 DisplayString,
|
|
rlAAALineMethodListNameLevel3 DisplayString,
|
|
rlAAALineMethodListNameLevel4 DisplayString,
|
|
rlAAALineMethodListNameLevel5 DisplayString,
|
|
rlAAALineMethodListNameLevel6 DisplayString,
|
|
rlAAALineMethodListNameLevel7 DisplayString,
|
|
rlAAALineMethodListNameLevel8 DisplayString,
|
|
rlAAALineMethodListNameLevel9 DisplayString,
|
|
rlAAALineMethodListNameLevel10 DisplayString,
|
|
rlAAALineMethodListNameLevel11 DisplayString,
|
|
rlAAALineMethodListNameLevel12 DisplayString,
|
|
rlAAALineMethodListNameLevel13 DisplayString,
|
|
rlAAALineMethodListNameLevel14 DisplayString,
|
|
rlAAALineMethodListNameLevel15 DisplayString,
|
|
rlAAALinePassword DisplayString,
|
|
rlAAALineStatus RowStatus,
|
|
rlAAALineLockedState INTEGER,
|
|
rlAAALineConsFailedLogins Counter32,
|
|
rlAAALinePasswordValidTime Unsigned32,
|
|
rlAAALinePasswordExpieryDate DisplayString
|
|
}
|
|
|
|
|
|
rlAAALinePortType OBJECT-TYPE
|
|
SYNTAX RlAAALinePortType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " the physical port type ."
|
|
::= { rlAAALineEntry 1 }
|
|
|
|
rlAAAIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Identifies the ifindex for which this entry can be used.
|
|
If index 0 means don't care (can be used for all if indices).
|
|
For port type console the value could be only 0."
|
|
::= { rlAAALineEntry 2}
|
|
|
|
rlAAAServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "the service type"
|
|
::= { rlAAALineEntry 3 }
|
|
|
|
rlAAALineMethodListNameLevel1 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 1 .That name points to the method
|
|
list table .It is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 4 }
|
|
|
|
rlAAALineMethodListNameLevel2 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 2 that name points to the method
|
|
list table it is the key in method list table .by that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 5 }
|
|
|
|
rlAAALineMethodListNameLevel3 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 3 that name points to the method
|
|
list table it is the key in method list table .by that way
|
|
we can reach the methods list to be used for this line"
|
|
::= { rlAAALineEntry 6}
|
|
|
|
rlAAALineMethodListNameLevel4 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 4-that name points to the method
|
|
list table it is the key in method list table .by that way
|
|
we can reach the methods list to be used for this line"
|
|
::= { rlAAALineEntry 7}
|
|
|
|
rlAAALineMethodListNameLevel5 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 5 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 8}
|
|
|
|
rlAAALineMethodListNameLevel6 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 6 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 9}
|
|
|
|
rlAAALineMethodListNameLevel7 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 7 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 10}
|
|
|
|
rlAAALineMethodListNameLevel8 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 8 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 11}
|
|
|
|
rlAAALineMethodListNameLevel9 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 9 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 12}
|
|
|
|
rlAAALineMethodListNameLevel10 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 10 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 13}
|
|
|
|
rlAAALineMethodListNameLevel11 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 11 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 14}
|
|
|
|
rlAAALineMethodListNameLevel12 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 12 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 15}
|
|
|
|
rlAAALineMethodListNameLevel13 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 13 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 16}
|
|
|
|
rlAAALineMethodListNameLevel14 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 14 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 17}
|
|
|
|
rlAAALineMethodListNameLevel15 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Method list Name for level 15 that name points to the method
|
|
list table it is the key in method list table .in that way
|
|
we can reach the methods list to be used for that line"
|
|
::= { rlAAALineEntry 18}
|
|
|
|
rlAAALinePassword OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Line Password. Zero length password is considered as no
|
|
password. Password with zero length means that in case this
|
|
password is the method to be used a method fail is returned
|
|
and no other method is being used.
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAALineEntry 19 }
|
|
|
|
rlAAALineStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Line status can be destroy or createAndGo"
|
|
::= { rlAAALineEntry 20 }
|
|
|
|
rlAAALineLockedState OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
locked(0),
|
|
usable(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Line locked status"
|
|
::= { rlAAALineEntry 21 }
|
|
|
|
rlAAALineConsFailedLogins OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Number of last consecutive failed logins"
|
|
::= { rlAAALineEntry 22 }
|
|
|
|
rlAAALinePasswordValidTime OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The period of time in days, during which the password,
|
|
is considered valid for login. Value of 0 means never expired.
|
|
The actual range is product specific.
|
|
After this time the system may allow limited number of logins
|
|
to change the password. "
|
|
DEFVAL { 0 }
|
|
::= { rlAAALineEntry 23}
|
|
|
|
rlAAALinePasswordExpieryDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "If Line password aging is active, the date on which
|
|
The current password will expire.
|
|
Otherwise zero size string"
|
|
::= { rlAAALineEntry 24 }
|
|
|
|
|
|
--
|
|
-- local user db table
|
|
--
|
|
|
|
---_for rlAAALocalUserTable addition is in BOLD.
|
|
--- Added read only fields to show if a user is locked,
|
|
--- password expiry date and number of consecutive failed logins.
|
|
--- New read write field to set the expiry time for a password.
|
|
|
|
|
|
rlAAALocalUserTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALocalUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all usernames, their passwords and
|
|
their authorizations."
|
|
::= { rlAAA 17 }
|
|
|
|
rlAAALocalUserEntry OBJECT-TYPE
|
|
SYNTAX RlAAALocalUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAALocalUserName}
|
|
::= { rlAAALocalUserTable 1 }
|
|
|
|
RlAAALocalUserEntry ::= SEQUENCE {
|
|
rlAAALocalUserName DisplayString,
|
|
rlAAALocalUserPassword DisplayString,
|
|
rlAAALocalUserPrivilage INTEGER,
|
|
rlAAALocalHostStatus RowStatus,
|
|
rlAAALocalLockedState INTEGER,
|
|
rlAAALocalConsFailedLogins Counter32,
|
|
rlAAALocalPasswordValidTime Unsigned32,
|
|
rlAAALocalPasswordExpieryDate DisplayString
|
|
|
|
}
|
|
|
|
rlAAALocalUserName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(1..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Local User Name"
|
|
::= { rlAAALocalUserEntry 1 }
|
|
|
|
rlAAALocalUserPassword OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Local User Password .The password can be null
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
|
|
::= { rlAAALocalUserEntry 2 }
|
|
|
|
rlAAALocalUserPrivilage OBJECT-TYPE
|
|
SYNTAX INTEGER (1..15)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Local User Privilage"
|
|
::= { rlAAALocalUserEntry 3 }
|
|
|
|
rlAAALocalHostStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Local User status"
|
|
::= { rlAAALocalUserEntry 4 }
|
|
|
|
rlAAALocalLockedState OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
locked(0),
|
|
usable(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Local User locked status"
|
|
::= { rlAAALocalUserEntry 5 }
|
|
|
|
rlAAALocalConsFailedLogins OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Number of last consecutive failed logins"
|
|
::= { rlAAALocalUserEntry 6 }
|
|
|
|
rlAAALocalPasswordValidTime OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The period of time in days, during which the password,
|
|
is considered valid for login. Value of 0 means never expired.
|
|
The actual range is product specific.
|
|
After this time the system may allow limited number of logins
|
|
to change the password. "
|
|
DEFVAL { 0 }
|
|
::= { rlAAALocalUserEntry 7 }
|
|
|
|
rlAAALocalPasswordExpieryDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "If User password aging is active, the date on which
|
|
The current password will expire.
|
|
Otherwise zero size string"
|
|
::= { rlAAALocalUserEntry 8 }
|
|
|
|
--
|
|
-- system password
|
|
--
|
|
|
|
rlAAASystemPasswordlevel1 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 1.
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 18 }
|
|
|
|
rlAAASystemPasswordlevel2 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 2
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 19 }
|
|
|
|
rlAAASystemPasswordlevel3 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 3
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 20 }
|
|
|
|
rlAAASystemPasswordlevel4 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 4
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 21 }
|
|
|
|
rlAAASystemPasswordlevel5 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 5
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 22 }
|
|
|
|
rlAAASystemPasswordlevel6 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 6
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 23 }
|
|
|
|
rlAAASystemPasswordlevel7 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 7
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 24 }
|
|
|
|
rlAAASystemPasswordlevel8 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 8
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 25 }
|
|
|
|
rlAAASystemPasswordlevel9 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 9
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 26 }
|
|
|
|
rlAAASystemPasswordlevel10 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 10
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 27 }
|
|
|
|
rlAAASystemPasswordlevel11 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 11
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 28 }
|
|
|
|
rlAAASystemPasswordlevel12 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 12
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 29 }
|
|
|
|
rlAAASystemPasswordlevel13 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 13
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 30 }
|
|
|
|
rlAAASystemPasswordlevel14 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 14
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not not part of it"
|
|
::= { rlAAA 31 }
|
|
|
|
rlAAASystemPasswordlevel15 OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "system Password for level 15
|
|
allowed formats:
|
|
a. Display string starting with '$' for clear text
|
|
b. Encrypted password: starts with # sign followed by 32
|
|
octets representing Hex Decimal value(in the 0-9 a-f A-F
|
|
range)
|
|
the $ and # as first octet are a directive to indicate what
|
|
is the type of password and are not part of it"
|
|
::= { rlAAA 32 }
|
|
|
|
rlAAAUserTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAAUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table holds all current users that have been authenticated."
|
|
::= { rlAAA 33 }
|
|
|
|
rlAAAUserEntry OBJECT-TYPE
|
|
SYNTAX RlAAAUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAAUserIndex}
|
|
::= { rlAAAUserTable 1 }
|
|
|
|
RlAAAUserEntry ::= SEQUENCE {
|
|
rlAAAUserIndex Unsigned32,
|
|
rlAAAUserServiceType RlAAAServiceType,
|
|
rlAAAUserRemoteIpAddress IpAddress,
|
|
rlAAAUserName DisplayString,
|
|
rlAAAUserLevel Unsigned32,
|
|
rlAAAUserIfIndex Unsigned32
|
|
}
|
|
|
|
rlAAAUserIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "User Index"
|
|
::= { rlAAAUserEntry 1 }
|
|
|
|
rlAAAUserServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "The service that the user uses. Service dont care is console
|
|
terminal."
|
|
::= { rlAAAUserEntry 2 }
|
|
|
|
rlAAAUserRemoteIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User remote IP address."
|
|
::= { rlAAAUserEntry 3 }
|
|
|
|
rlAAAUserName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User Name"
|
|
::= { rlAAAUserEntry 4 }
|
|
|
|
rlAAAUserLevel OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..15)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User level"
|
|
::= { rlAAAUserEntry 5 }
|
|
|
|
rlAAAUserIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User if index."
|
|
::= { rlAAAUserEntry 6 }
|
|
|
|
rlAAATest OBJECT IDENTIFIER ::= { rlAAA 34 }
|
|
|
|
rlAAATestPassword OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable enables the user supplying the correct code to use the
|
|
AAA test feature."
|
|
::= {rlAAATest 1}
|
|
|
|
rlAAATestUserTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAATestUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table enables a user to perform a simulation of authentiction."
|
|
::= { rlAAATest 2 }
|
|
|
|
rlAAATestUserEntry OBJECT-TYPE
|
|
SYNTAX RlAAATestUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The row definition for this table."
|
|
INDEX { rlAAATestUserIndex}
|
|
::= { rlAAATestUserTable 1 }
|
|
|
|
RlAAATestUserEntry ::= SEQUENCE {
|
|
rlAAATestUserIndex Unsigned32,
|
|
rlAAATestPortType RlAAALinePortType,
|
|
rlAAATestIfIndex INTEGER,
|
|
rlAAATestServiceType RlAAAServiceType,
|
|
rlAAATestUserAuthenticationStatus INTEGER,
|
|
rlAAATestUserAuthenticationAction INTEGER,
|
|
rlAAATestUserInput DisplayString,
|
|
rlAAATestUserStatus RowStatus
|
|
}
|
|
|
|
rlAAATestUserIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"User entry index (the number is used just to identify the user)."
|
|
::= { rlAAATestUserEntry 1 }
|
|
|
|
rlAAATestPortType OBJECT-TYPE
|
|
SYNTAX RlAAALinePortType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " the physical port type ."
|
|
::= { rlAAATestUserEntry 2 }
|
|
|
|
rlAAATestIfIndex OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " line ifIndex can configue to be zero witch means
|
|
Don't-care value"
|
|
::= { rlAAATestUserEntry 3}
|
|
|
|
rlAAATestServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "the service type"
|
|
::= { rlAAATestUserEntry 4 }
|
|
|
|
|
|
rlAAATestUserAuthenticationStatus OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
needPassword(1),
|
|
needUsername(2),
|
|
success(3),
|
|
failure(4),
|
|
aborted(5),
|
|
deleted(6),
|
|
waiting(7),
|
|
usedNewMethod(8)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Shows the ststus of the operation and what is expected from the
|
|
'user'."
|
|
::= { rlAAATestUserEntry 5 }
|
|
|
|
rlAAATestUserAuthenticationAction OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
begin(1),
|
|
receivePassword(2),
|
|
receiveUsername(3),
|
|
abort(4),
|
|
delete(5),
|
|
continue(6)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"By setting this field the process moves from one state to another. On
|
|
creation the value must be begin.
|
|
When the value of rlAAATestUserAuthenticationStatus is needPassword
|
|
the value can be set to receivePassword or abort.
|
|
When the value of rlAAATestUserAuthenticationStatus is needUsername
|
|
the value can be set to receiveUsername or abort.
|
|
When the value of rlAAATestUserAuthenticationStatus is success or failure
|
|
the value can be set to delete or abort.
|
|
When the value of rlAAATestUserAuthenticationStatus is aborted the value
|
|
can be set to delete.
|
|
When the value of rlAAATestUserAuthenticationStatus is deleted the value
|
|
can not be set to any value.
|
|
When the value of rlAAATestUserAuthenticationStatus is waiting the value
|
|
can be set or abort."
|
|
::= { rlAAATestUserEntry 6 }
|
|
|
|
rlAAATestUserInput OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..160))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"If the acion was set to receivePassword than this field should hold
|
|
the value of the password.
|
|
If the action was set to receiveUsername than this field should hold
|
|
the value of the username. "
|
|
::= { rlAAATestUserEntry 7 }
|
|
|
|
rlAAATestUserStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entry status. The entry can not be deleted. It will be deleted if
|
|
unchanged more than 2 minutes."
|
|
::= { rlAAATestUserEntry 8 }
|
|
|
|
---
|
|
--- rlRadius
|
|
---
|
|
|
|
rlRadiusMibVersion OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"MIB's version, the current version is 2.
|
|
1 - original version.
|
|
2 - field rlRadiusServerUsage was added to rlRadiusServerEntry"
|
|
::= { rlRadius 1 }
|
|
|
|
rlRadiusGlobalDefaultTimeout OBJECT-TYPE
|
|
SYNTAX INTEGER (1..30)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum time (in seconds) to wait for this RADIUS
|
|
server to reply. This MIB is used if the value of the
|
|
field rlRadiusServerUseGlobalDefaultTimeout is false."
|
|
::= { rlRadius 2 }
|
|
|
|
rlRadiusGlobalDefaultRetries OBJECT-TYPE
|
|
SYNTAX INTEGER (1..10)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of times to try contacting this RADIUS server. This MIB
|
|
is used if the value of the field
|
|
rlRadiusServerUseGlobalDefaultRetries is false."
|
|
::= { rlRadius 3 }
|
|
|
|
|
|
rlRadiusGlobalDefaultDeadtime OBJECT-TYPE
|
|
SYNTAX INTEGER (0..2000)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of minutes that any RADIUS server is ignored after
|
|
it has failed. This MIB is used if the value of the field
|
|
rlRadiusServerUseGlobalDefaultDeadtime is false."
|
|
::= { rlRadius 4 }
|
|
|
|
rlRadiusGlobalDefaultKey OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Secret key to be shared with this RADIUS server. This MIB is
|
|
used if the value of the field rlRadiusServerUseGlobalDefaultKey
|
|
is false."
|
|
::= { rlRadius 5 }
|
|
|
|
|
|
rlRadiusGlobalDefaultSource OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the interface to use with this server.
|
|
A value of 0.0.0.0 for this object disables source
|
|
address specification. This MIB is used if the value of the
|
|
field rlRadiusServerUseGlobalDefaultSource is false."
|
|
::= { rlRadius 6 }
|
|
|
|
|
|
rlRadiusServerTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlRadiusServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The (conceptual) table listing the RADIUS
|
|
servers with which the cliient shares a secret."
|
|
::= { rlRadius 7 }
|
|
|
|
rlRadiusServerEntry OBJECT-TYPE
|
|
SYNTAX RlRadiusServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) representing a RADIUS
|
|
server with which the client shares
|
|
a secret."
|
|
INDEX { rlRadiusServerAddress,
|
|
rlRadiusServerAuthPortNumber,
|
|
rlRadiusServerAcctPortNumber}
|
|
::= { rlRadiusServerTable 1 }
|
|
|
|
RlRadiusServerEntry ::= SEQUENCE {
|
|
rlRadiusServerAddress IpAddress,
|
|
rlRadiusServerAuthPortNumber INTEGER,
|
|
rlRadiusServerAcctPortNumber INTEGER,
|
|
rlRadiusServerTimeout INTEGER,
|
|
rlRadiusServerRetries INTEGER,
|
|
rlRadiusServerDeadtime INTEGER,
|
|
rlRadiusServerUseGlobalDefaultKey TruthValue,
|
|
rlRadiusServerKey DisplayString,
|
|
rlRadiusServerSource IpAddress,
|
|
rlRadiusServerPriority INTEGER,
|
|
rlRadiusServerStatus RowStatus,
|
|
rlRadiusServerUsage INTEGER
|
|
}
|
|
|
|
rlRadiusServerAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP address of the RADIUS server
|
|
referred to in this table entry."
|
|
::= { rlRadiusServerEntry 1 }
|
|
|
|
rlRadiusServerAuthPortNumber OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The UDP port the client is using to send authentication
|
|
requests to this server."
|
|
::= { rlRadiusServerEntry 2 }
|
|
|
|
rlRadiusServerAcctPortNumber OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The UDP port the client is using to send accounting
|
|
requests to this server."
|
|
::= { rlRadiusServerEntry 3 }
|
|
|
|
rlRadiusServerTimeout OBJECT-TYPE
|
|
SYNTAX INTEGER (0..30)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum time (in seconds) to wait for this RADIUS
|
|
server to reply. Value of 0 means that rlRadiusGlobalDefaultTimeout."
|
|
DEFVAL { 3 }
|
|
::= { rlRadiusServerEntry 4 }
|
|
|
|
rlRadiusServerRetries OBJECT-TYPE
|
|
SYNTAX INTEGER (0..10)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of times to try contacting this RADIUS server. Value of
|
|
0 means that rlRadiusGlobalDefaultRetries."
|
|
DEFVAL { 3 }
|
|
::= { rlRadiusServerEntry 5 }
|
|
|
|
rlRadiusServerDeadtime OBJECT-TYPE
|
|
SYNTAX INTEGER (0..2001)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of minutes that any RADIUS server is ignored after
|
|
it has failed. Value of 2001 means that rlRadiusGlobalDefaultDeadtime
|
|
will be used."
|
|
DEFVAL { 0 }
|
|
::= { rlRadiusServerEntry 6 }
|
|
|
|
rlRadiusServerUseGlobalDefaultKey OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"If this field is set to true the value in field rlRadiusServerKey
|
|
is ignored and instead the value in the MIB
|
|
rlRadiusGlobalDefaultKey is used. Otherwise the value in
|
|
rlRadiusServerKey is used."
|
|
DEFVAL { false }
|
|
::= { rlRadiusServerEntry 7 }
|
|
|
|
rlRadiusServerKey OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Secret key to be shared with this RADIUS server."
|
|
DEFVAL { "" }
|
|
::= { rlRadiusServerEntry 8 }
|
|
|
|
rlRadiusServerSource OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the interface to use with this server.
|
|
A value of 0.0.0.0 for this object disables source
|
|
address specification. Value of 255.255.255.255 means that
|
|
rlRadiusGlobalDefaultSource will be used."
|
|
DEFVAL { '00000000'H }
|
|
::= { rlRadiusServerEntry 9 }
|
|
|
|
rlRadiusServerPriority OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Determines the order in which the servers will be used, when 0 is
|
|
the highest priority. If more than one server share the same
|
|
priority - they will be used in lexicgoraphic order
|
|
(the order of entries in this table)."
|
|
DEFVAL { 0 }
|
|
::= { rlRadiusServerEntry 10 }
|
|
|
|
rlRadiusServerStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION ""
|
|
::= { rlRadiusServerEntry 11 }
|
|
|
|
rlRadiusServerUsage OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
userAuthentication(1),
|
|
portAuthentication(2),
|
|
all(3),
|
|
wirelessAuthentication (4)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Determines actions for which the radius server will be used."
|
|
DEFVAL { 3 }
|
|
::= { rlRadiusServerEntry 12 }
|
|
|
|
--
|
|
-- rlAAAEap
|
|
--
|
|
|
|
RlAAAEapMethodtype ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Method list type."
|
|
SYNTAX INTEGER {
|
|
rlAAAEapMethodDeny(0),
|
|
rlAAAEapMethodRadius(1),
|
|
rlAAAEapMethodSucceed(2)
|
|
}
|
|
|
|
rlAAAEapMethodListTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAAEapMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all methods list per method name."
|
|
::= { rlAAAEap 1 }
|
|
|
|
rlAAAEapMethodListEntry OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodListEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAAEapMethodListName}
|
|
::= { rlAAAEapMethodListTable 1 }
|
|
|
|
RlAAAEapMethodListEntry ::= SEQUENCE {
|
|
rlAAAEapMethodListName DisplayString,
|
|
rlAAAEapMethodType1 RlAAAEapMethodtype,
|
|
rlAAAEapMethodType2 RlAAAEapMethodtype,
|
|
rlAAAEapMethodType3 RlAAAEapMethodtype,
|
|
rlAAAEapMethodType4 RlAAAEapMethodtype,
|
|
rlAAAEapMethodType5 RlAAAEapMethodtype,
|
|
rlAAAEapMethodListStatus RowStatus
|
|
}
|
|
|
|
rlAAAEapMethodListName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Line Method List Name"
|
|
::= { rlAAAEapMethodListEntry 1 }
|
|
|
|
rlAAAEapMethodType1 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " first method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 2 }
|
|
|
|
rlAAAEapMethodType2 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " second method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 3 }
|
|
|
|
rlAAAEapMethodType3 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "3th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 4 }
|
|
|
|
rlAAAEapMethodType4 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " 4th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 5 }
|
|
|
|
rlAAAEapMethodType5 OBJECT-TYPE
|
|
SYNTAX RlAAAEapMethodtype
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "5th method type that will be used in the method
|
|
linked list."
|
|
::= { rlAAAEapMethodListEntry 6 }
|
|
|
|
rlAAAEapMethodListStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "method list status can be destroy or createAndGo"
|
|
::= { rlAAAEapMethodListEntry 7 }
|
|
|
|
rlAAAEapCurrentMethodList OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(3..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Specifies the method list that will be used for authentication."
|
|
::= { rlAAAEap 2 }
|
|
|
|
|
|
--- rlTacacs
|
|
|
|
RlTacacsConnectionType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Specifies TCP connection type between device and TACACS+ server"
|
|
SYNTAX INTEGER {
|
|
rlTacacsSingleConnection(0),
|
|
rlTacacsPerSessionConnection(1)
|
|
}
|
|
|
|
RlTacacsConnectionStatus ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION "Specifies the status of TCP connection
|
|
between device and TACACS+ server."
|
|
SYNTAX INTEGER {
|
|
rlTacacsConnected(0),
|
|
rlTacacsNotConnected(1)
|
|
}
|
|
|
|
rlTacacs OBJECT IDENTIFIER ::= { rlAAA 40 }
|
|
|
|
rlTacacsMibVersion OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"MIB's version, the current version is 1."
|
|
::= { rlTacacs 1 }
|
|
|
|
rlTacacsGlobalDefaultTimeout OBJECT-TYPE
|
|
SYNTAX INTEGER (1..30)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum time (in seconds) to wait for TACACS+
|
|
server to reply. This MIB is used if the value of the
|
|
field rlTacacsServerTimeout is 0."
|
|
DEFVAL { 5 }
|
|
::= { rlTacacs 2 }
|
|
|
|
rlTacacsGlobalDefaultKey OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Secret key to be shared with TACACS+ server. This MIB is
|
|
used if the value of the field rlTacacsServerUseGlobalDefaultKey
|
|
is false."
|
|
DEFVAL { "" }
|
|
::= { rlTacacs 3 }
|
|
|
|
rlTacacsGlobalDefaultSourceIpInterface OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the interface to use with TACACS+ server.
|
|
A value of 0.0.0.0 for this object disables source
|
|
address specification. This MIB is used if the value of the
|
|
field rlTacacsServerSource is 255.255.255.255."
|
|
DEFVAL { '00000000'H }
|
|
::= { rlTacacs 6 }
|
|
|
|
rlTacacsServerTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlTacacsServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The (conceptual) table listing the TACACS+
|
|
servers with which the cliient shares a secret."
|
|
::= { rlTacacs 7 }
|
|
|
|
rlTacacsServerEntry OBJECT-TYPE
|
|
SYNTAX RlTacacsServerEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) representing a TACACS+
|
|
server with which the client shares
|
|
a secret."
|
|
INDEX { rlTacacsServerAddress }
|
|
::= { rlTacacsServerTable 1 }
|
|
|
|
RlTacacsServerEntry ::= SEQUENCE {
|
|
rlTacacsServerAddress IpAddress,
|
|
rlTacacsServerPortNumber INTEGER,
|
|
rlTacacsServerConnectionType RlTacacsConnectionType,
|
|
rlTacacsServerConnectionStatus RlTacacsConnectionStatus,
|
|
rlTacacsServerTimeout INTEGER,
|
|
rlTacacsServerUseGlobalDefaultKey TruthValue,
|
|
rlTacacsServerKey DisplayString,
|
|
rlTacacsServerSourceIpInterface IpAddress,
|
|
rlTacacsServerPriority INTEGER,
|
|
rlTacacsServerRowStatus RowStatus
|
|
}
|
|
|
|
rlTacacsServerAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP address of the TACACS+ server
|
|
referred to in this table entry."
|
|
::= { rlTacacsServerEntry 1 }
|
|
|
|
rlTacacsServerPortNumber OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The TCP port the client establishes connections with this server."
|
|
DEFVAL { 49 }
|
|
::= { rlTacacsServerEntry 2 }
|
|
|
|
rlTacacsServerConnectionType OBJECT-TYPE
|
|
SYNTAX RlTacacsConnectionType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies TCP connection type between device and TACACS+ server.
|
|
Either a single open connection between device and server
|
|
(rlTacacsSingleConnection), or open/close connection per
|
|
communication session (rlTacacsPerSessionConnection)."
|
|
DEFVAL { rlTacacsPerSessionConnection }
|
|
::= { rlTacacsServerEntry 3 }
|
|
|
|
rlTacacsServerConnectionStatus OBJECT-TYPE
|
|
SYNTAX RlTacacsConnectionStatus
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies status TCP connection type between device and TACACS+ server."
|
|
DEFVAL { rlTacacsConnected }
|
|
::= { rlTacacsServerEntry 4 }
|
|
|
|
rlTacacsServerTimeout OBJECT-TYPE
|
|
SYNTAX INTEGER (0..30)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum time (in seconds) to wait for this TACACS+ server to reply.
|
|
Value of 0 means that rlTacacsGlobalDefaultTimeout value is used."
|
|
DEFVAL { 5 }
|
|
::= { rlTacacsServerEntry 5 }
|
|
|
|
rlTacacsServerUseGlobalDefaultKey OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"If this field is set to true the value in field rlTacacsServerKey
|
|
is ignored and instead the value in the MIB
|
|
rlTacacsGlobalDefaultKey is used. Otherwise the value in
|
|
rlTacacsServerKey is used."
|
|
DEFVAL { false }
|
|
::= { rlTacacsServerEntry 6 }
|
|
|
|
rlTacacsServerKey OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Secret key to be shared with this TACACS+ server."
|
|
DEFVAL { "" }
|
|
::= { rlTacacsServerEntry 7 }
|
|
|
|
rlTacacsServerSourceIpInterface OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP address of the interface to use with this server.
|
|
A value of 0.0.0.0 for this object disables source
|
|
address specification. Value of 255.255.255.255 means that
|
|
rlTacacsGlobalDefaultSource will be used."
|
|
DEFVAL { '00000000'H }
|
|
::= { rlTacacsServerEntry 8 }
|
|
|
|
rlTacacsServerPriority OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Determines the order in which the TACACS+ servers will be used,
|
|
when 0 is the highest priority. If more than one server share the
|
|
same priority - they will be used in lexicgoraphic order
|
|
(the order of entries in this table)."
|
|
DEFVAL { 0 }
|
|
::= { rlTacacsServerEntry 9 }
|
|
|
|
rlTacacsServerRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION ""
|
|
::= { rlTacacsServerEntry 10 }
|
|
|
|
|
|
--- AAA Login auditing control (SysLog)
|
|
|
|
rlAAAAuditingEnable OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Controls whether SysLog messages
|
|
should be issued on login events"
|
|
DEFVAL { true }
|
|
::= { rlAAA 41 }
|
|
|
|
rlAAAMinPasswordLength OBJECT-TYPE
|
|
SYNTAX INTEGER (0..64)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The minimum length of password for local user authentication
|
|
defined in field rlAAALocalUserPassword in rlAAALocalUserTable.
|
|
The value applies only to new or updated user passwords.
|
|
In actual implementation the range may be reduced to (0 | N-64),
|
|
where N is a platform dependent (for TIC compatibility N=8) "
|
|
DEFVAL { 0 }
|
|
::= { rlAAA 42 }
|
|
|
|
--- Password history size
|
|
rlAAAPasswordHistSize OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of most recent password,
|
|
previously defined for Local User Table, Line Table,
|
|
System Password Table for specific entity.
|
|
This list used for password reusing prevention.
|
|
Value of 0 means none. Changing the value
|
|
does not cause the loss of history.
|
|
History Max size is product specific."
|
|
DEFVAL { 0 }
|
|
::= { rlAAA 43 }
|
|
|
|
--- Password history hold time
|
|
|
|
rlAAAPasswordHistHoldTime OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The time in day, which an old password
|
|
may be used in password history check.
|
|
Changing the value does not cause the
|
|
loss of history."
|
|
|
|
DEFVAL { 0 }
|
|
::= { rlAAA 44 }
|
|
|
|
--- controls wether successful logins are written to file
|
|
|
|
rlAAASuccLoginWriteToFile OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Controls whether successful logins are
|
|
written to login file"
|
|
DEFVAL { true }
|
|
::= { rlAAA 45 }
|
|
|
|
|
|
--- Read-only table for successful login history - Local Users
|
|
|
|
rlAAALocalLoginHistTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALocalLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table holds successful login history
|
|
for all users. This table is read-only."
|
|
::= { rlAAA 46 }
|
|
|
|
rlAAALocalLoginHistEntry OBJECT-TYPE
|
|
SYNTAX RlAAALocalLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAALocalLoginHistName,
|
|
rlAAALocalLoginHistIndex}
|
|
::= { rlAAALocalLoginHistTable 1 }
|
|
|
|
RlAAALocalLoginHistEntry ::= SEQUENCE {
|
|
rlAAALocalLoginHistName DisplayString,
|
|
rlAAALocalLoginHistIndex Unsigned32,
|
|
rlAAALocalLoginHistServiceType RlAAAServiceType,
|
|
rlAAALocalLoginHistRemoteIpAddress IpAddress,
|
|
rlAAALocalLoginHistLocalIpAddress IpAddress,
|
|
rlAAALocalLoginDateTime DisplayString,
|
|
rlAAALocalLoginMrid Unsigned32
|
|
}
|
|
|
|
rlAAALocalLoginHistName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User Name"
|
|
::= { rlAAALocalLoginHistEntry 1 }
|
|
|
|
rlAAALocalLoginHistIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..10)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "Index in History for specific user.
|
|
Lower number means more recent login."
|
|
::= { rlAAALocalLoginHistEntry 2 }
|
|
|
|
rlAAALocalLoginHistServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "The service that the user uses.
|
|
Service don't care is console terminal."
|
|
::= { rlAAALocalLoginHistEntry 3 }
|
|
|
|
rlAAALocalLoginHistRemoteIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User remote IP address."
|
|
::= { rlAAALocalLoginHistEntry 4 }
|
|
|
|
rlAAALocalLoginHistLocalIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "local Ip Address on login."
|
|
::= { rlAAALocalLoginHistEntry 5 }
|
|
|
|
rlAAALocalLoginDateTime OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Date and time in the SysLog Format:
|
|
DD-MMM-YYYY HH:MM:SS"
|
|
::= { rlAAALocalLoginHistEntry 6 }
|
|
|
|
rlAAALocalLoginMrid OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Mrid - indicates to which instance the connection was established "
|
|
::= { rlAAALocalLoginHistEntry 7 }
|
|
|
|
|
|
--- Read-only table for successful login history - Line passwords
|
|
|
|
rlAAALinePassLoginHistTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALinePassLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table holds successful login history
|
|
for Line passwords. This table is read-only."
|
|
::= { rlAAA 47 }
|
|
|
|
rlAAALinePassLoginHistEntry OBJECT-TYPE
|
|
SYNTAX RlAAALinePassLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX {rlAAALinePassLoginHistPortType,
|
|
rlAAALinePassLoginHistIfIndex,
|
|
rlAAALinePassLoginHistServiceType,
|
|
rlAAALinePassLoginHistIndex }
|
|
::= { rlAAALinePassLoginHistTable 1 }
|
|
|
|
RlAAALinePassLoginHistEntry ::= SEQUENCE {
|
|
rlAAALinePassLoginHistPortType RlAAALinePortType,
|
|
rlAAALinePassLoginHistIfIndex Unsigned32,
|
|
rlAAALinePassLoginHistServiceType RlAAAServiceType,
|
|
rlAAALinePassLoginHistIndex Unsigned32,
|
|
rlAAALinePassLoginHistActServiceType RlAAAServiceType,
|
|
rlAAALinePassLoginHistRemoteIpAddress IpAddress,
|
|
rlAAALinePassLoginHistLocalIpAddress IpAddress,
|
|
rlAAALinePassLoginDateTime DisplayString ,
|
|
rlAAALinePassLoginMrid Unsigned32
|
|
}
|
|
|
|
|
|
rlAAALinePassLoginHistPortType OBJECT-TYPE
|
|
SYNTAX RlAAALinePortType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " the physical port type."
|
|
::= { rlAAALinePassLoginHistEntry 1 }
|
|
|
|
rlAAALinePassLoginHistIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Identifies the ifindex for which this entry can be used.
|
|
If index 0 means don't care
|
|
(can be used for all if indices).
|
|
For port type console the value could be only 0."
|
|
::= { rlAAALinePassLoginHistEntry 2}
|
|
|
|
rlAAALinePassLoginHistServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "the service type"
|
|
::= { rlAAALinePassLoginHistEntry 3 }
|
|
|
|
rlAAALinePassLoginHistIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..10)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "Index in History for specific user.
|
|
Lower number means more recent login."
|
|
::= { rlAAALinePassLoginHistEntry 4 }
|
|
|
|
rlAAALinePassLoginHistActServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "The service that the user uses.
|
|
Service don't care is console terminal."
|
|
::= { rlAAALinePassLoginHistEntry 5 }
|
|
|
|
rlAAALinePassLoginHistRemoteIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User remote IP address."
|
|
::= { rlAAALinePassLoginHistEntry 6 }
|
|
|
|
rlAAALinePassLoginHistLocalIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "local Ip Address on login."
|
|
::= { rlAAALinePassLoginHistEntry 7 }
|
|
|
|
rlAAALinePassLoginDateTime OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Date and time in the SysLog Format:
|
|
DD-MMM-YYYY HH:MM:SS"
|
|
::= { rlAAALinePassLoginHistEntry 8 }
|
|
|
|
|
|
rlAAALinePassLoginMrid OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Mrid - indicates to which instance the connection was established "
|
|
::= { rlAAALinePassLoginHistEntry 9 }
|
|
|
|
--- Read-only table for successful login history - System Passwords
|
|
|
|
rlAAASystemLoginHistTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAASystemLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table holds successful login history
|
|
for system passwords. This table is read-only."
|
|
::= { rlAAA 48 }
|
|
|
|
rlAAASystemLoginHistEntry OBJECT-TYPE
|
|
SYNTAX RlAAASystemLoginHistEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAASystemLoginHistLevel,
|
|
rlAAASystemLoginHistIndex}
|
|
::= { rlAAASystemLoginHistTable 1 }
|
|
|
|
RlAAASystemLoginHistEntry ::= SEQUENCE {
|
|
rlAAASystemLoginHistLevel INTEGER,
|
|
rlAAASystemLoginHistIndex Unsigned32,
|
|
rlAAASystemLoginHistServiceType RlAAAServiceType,
|
|
rlAAASystemLoginHistRemoteIpAddress IpAddress,
|
|
rlAAASystemLoginHistLocalIpAddress IpAddress,
|
|
rlAAASystemLoginDateTime DisplayString,
|
|
rlAAASystemLoginMrid Unsigned32
|
|
}
|
|
|
|
rlAAASystemLoginHistLevel OBJECT-TYPE
|
|
SYNTAX INTEGER (1..15)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User Name"
|
|
::= { rlAAASystemLoginHistEntry 1 }
|
|
|
|
rlAAASystemLoginHistIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..10)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "Index in History for specific user.
|
|
Lower number means more recent login."
|
|
::= { rlAAASystemLoginHistEntry 2 }
|
|
|
|
rlAAASystemLoginHistServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "The service that the user uses.
|
|
Service don't care is console terminal."
|
|
::= { rlAAASystemLoginHistEntry 3 }
|
|
|
|
rlAAASystemLoginHistRemoteIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "User remote IP address."
|
|
::= { rlAAASystemLoginHistEntry 4 }
|
|
|
|
rlAAASystemLoginHistLocalIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "local Ip Address on login."
|
|
::= { rlAAASystemLoginHistEntry 5 }
|
|
|
|
rlAAASystemLoginDateTime OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Date and time in the SysLog Format:
|
|
DD-MMM-YYYY HH:MM:SS"
|
|
::= { rlAAASystemLoginHistEntry 6 }
|
|
|
|
rlAAASystemLoginMrid OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Mrid - indicates to which instance the connection was established "
|
|
::= { rlAAASystemLoginHistEntry 7 }
|
|
|
|
|
|
--
|
|
-- System Passwords status table
|
|
--
|
|
rlAAASysPassStatTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAASysPassStatEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies all system password and
|
|
their security properties: is password locked
|
|
due to wrong password, when and how it was locked
|
|
or last unsuccessful login information, expiry date
|
|
of the password."
|
|
::= { rlAAA 49 }
|
|
|
|
rlAAASysPassStatEntry OBJECT-TYPE
|
|
SYNTAX RlAAASysPassStatEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAASysPassStatLevel}
|
|
::= { rlAAASysPassStatTable 1 }
|
|
|
|
RlAAASysPassStatEntry ::= SEQUENCE {
|
|
rlAAASysPassStatLevel INTEGER,
|
|
rlAAASysPassStatLockedState INTEGER,
|
|
rlAAASysPassStatConsFailedLogins Counter32,
|
|
rlAAASysPassStatPasswordValidTime Unsigned32,
|
|
rlAAASysPassStatPasswordExpieryDate DisplayString
|
|
}
|
|
|
|
rlAAASysPassStatLevel OBJECT-TYPE
|
|
SYNTAX INTEGER (1..15)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "System password level"
|
|
::= { rlAAASysPassStatEntry 1 }
|
|
|
|
rlAAASysPassStatLockedState OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
locked(0),
|
|
usable(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "System password locked status"
|
|
::= { rlAAASysPassStatEntry 2 }
|
|
|
|
rlAAASysPassStatConsFailedLogins OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "Number of last consecutive failed logins"
|
|
::= { rlAAASysPassStatEntry 3 }
|
|
|
|
|
|
rlAAASysPassStatPasswordValidTime OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The period of time in days, during which the password,
|
|
is considered valid for login. Value of 0 means never expired.
|
|
The actual range is product specific.
|
|
After this time the system may allow limited number of logins
|
|
to change the password. "
|
|
DEFVAL { 0 }
|
|
::= { rlAAASysPassStatEntry 4 }
|
|
|
|
rlAAASysPassStatPasswordExpieryDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION "If System password aging is active, the date,
|
|
on which the current password will expire.
|
|
Otherwise zero size string"
|
|
::= { rlAAASysPassStatEntry 5 }
|
|
|
|
|
|
--- Number of failures before lock-out (1-5, 0 for disable)
|
|
|
|
|
|
rlAAAMaxNumLogAttmpts OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of consecutive unsuccessful login attempts
|
|
before user is locked. Value of 0 means no limit. The actual range is
|
|
product specific. TIC requirement is 3."
|
|
DEFVAL { 0 }
|
|
::= { rlAAA 50 }
|
|
|
|
|
|
--
|
|
-- Unlock user action scalar
|
|
--
|
|
|
|
rlAAAUnlockUserName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..20))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "An action MIB variable setting with value
|
|
of Local User Name will unlock this user.
|
|
The value of this variable is not saved to
|
|
non volatile storage. Read of this variable
|
|
always returns zero length display string."
|
|
::= { rlAAA 51 }
|
|
|
|
|
|
|
|
--
|
|
-- Unlock user system passwords
|
|
--
|
|
|
|
rlAAAUnlockSystemPassword OBJECT-TYPE
|
|
SYNTAX INTEGER (0..15)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "An action MIB variable setting with value
|
|
of Level will unlock the system password
|
|
for this level. The value of this variable
|
|
is not saved to non volatile storage.
|
|
Read of this variable always returns zero.
|
|
Zero (0) does no action."
|
|
::= { rlAAA 52 }
|
|
|
|
--
|
|
-- Locked lines table
|
|
--
|
|
|
|
rlAAALockedLineTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAALockedLineEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies lines statuses.
|
|
Users cannot access the product from
|
|
remote based on a password of the locked line.
|
|
This table enables to unlock lines."
|
|
::= { rlAAA 53 }
|
|
|
|
|
|
rlAAALockedLineEntry OBJECT-TYPE
|
|
SYNTAX RlAAALockedLineEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row definition for this table."
|
|
INDEX { rlAAALockedLinePortType,
|
|
rlAAALockedLineIfIndex,
|
|
rlAAALockedLineServiceType}
|
|
::= { rlAAALockedLineTable 1 }
|
|
|
|
RlAAALockedLineEntry ::= SEQUENCE {
|
|
rlAAALockedLinePortType RlAAALinePortType,
|
|
rlAAALockedLineIfIndex Unsigned32,
|
|
rlAAALockedLineServiceType RlAAAServiceType,
|
|
rlAAALockedLineStatus INTEGER
|
|
}
|
|
|
|
rlAAALockedLinePortType OBJECT-TYPE
|
|
SYNTAX RlAAALinePortType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION " the physical port type ."
|
|
::= { rlAAALockedLineEntry 1 }
|
|
|
|
rlAAALockedLineIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Identifies the ifindex for which this entry can be used.
|
|
If index 0 means don't care (can be used for all if indices).
|
|
For port type console the value could be only 0."
|
|
::= { rlAAALockedLineEntry 2}
|
|
|
|
rlAAALockedLineServiceType OBJECT-TYPE
|
|
SYNTAX RlAAAServiceType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "the service type"
|
|
::= { rlAAALockedLineEntry 3 }
|
|
|
|
rlAAALockedLineStatus OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
locked(0),
|
|
usable(1)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "The entry exists only if a line exist.
|
|
Setting this field to value usable results in
|
|
resetting the password failure counter,
|
|
and unlock a locked user."
|
|
::= { rlAAALockedLineEntry 4 }
|
|
|
|
--
|
|
-- SystemPasswordVerificationAndSetting Table
|
|
--
|
|
|
|
rlAAASystemPasswordVerificationAndSettingTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RlAAASystemPasswordVerificationAndSettingEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The table specifies per every system level, old and new passwords.
|
|
Serves for verification the old password and setting a new password."
|
|
::= { rlAAA 54 }
|
|
|
|
rlAAASystemPasswordVerificationAndSettingEntry OBJECT-TYPE
|
|
SYNTAX RlAAASystemPasswordVerificationAndSettingEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "The row of system password verification and setting table."
|
|
INDEX { rlAAASystemPasswordSettingPrivilegeLevel}
|
|
::= { rlAAASystemPasswordVerificationAndSettingTable 1 }
|
|
|
|
RlAAASystemPasswordVerificationAndSettingEntry ::= SEQUENCE {
|
|
rlAAASystemPasswordSettingPrivilegeLevel INTEGER,
|
|
rlAAASystemPasswordVerificationOldPassword DisplayString,
|
|
rlAAASystemPasswordSettingNewPassword DisplayString,
|
|
rlAAASystemPasswordConfirmNewPassword DisplayString
|
|
}
|
|
|
|
rlAAASystemPasswordSettingPrivilegeLevel OBJECT-TYPE
|
|
SYNTAX INTEGER (1..15)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "System password Privelege Level to be set."
|
|
::= { rlAAASystemPasswordVerificationAndSettingEntry 1 }
|
|
|
|
rlAAASystemPasswordVerificationOldPassword OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "Old system password to be verified."
|
|
|
|
::= { rlAAASystemPasswordVerificationAndSettingEntry 2 }
|
|
|
|
rlAAASystemPasswordSettingNewPassword OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "New system password to be set."
|
|
|
|
::= { rlAAASystemPasswordVerificationAndSettingEntry 3 }
|
|
|
|
rlAAASystemPasswordConfirmNewPassword OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION "New system password to be confirmed."
|
|
|
|
::= { rlAAASystemPasswordVerificationAndSettingEntry 4 }
|
|
|
|
END
|