BRCM-SSH-MGMT-MIB
AI MIB Summary
The BRCM-SSH-MGMT-MIB enables monitoring and management of Secure Shell (SSH) service parameters and session states on Broadcom-based network devices. It provides visibility into active SSH connections, authentication events, and protocol configuration settings to facilitate remote access security auditing.
Broadcom SSH (Secure Shell) management MIB
Main OID:
sshMgmt.cableDataMgmtBase.4
20
Objects
Active
Status
4
Dependencies
Imported Objects
Objects
20 total| Object Name |
|---|
sshMgmtBroadcom SSH (Secure Shell) management MIB MODULE-IDENTITY .cableDataMgmtBase.4 |
sshIpStackInterfacesControls and reflects the IP stack interfaces on which a ssh server
is active.rw Bits .cableDataMgmtBase.4.1 |
sshUserNameControls and reflects the user name which will be allowed ssh
access.rw DisplayString .cableDataMgmtBase.4.2 |
sshPasswordControls and reflects the password which will be allowed ssh
access.rw DisplayString .cableDataMgmtBase.4.3 |
sshServerControlUsed to start or stop the ssh server. When read, indicates
the current state of the server.rw Enumeration .cableDataMgmtBase.4.4 |
sshSessionIpThis object gives the IP address of the most recently connected device.
If no session has taken place since the last reboot, this object will
read 0.0.0.0.rodeprecated IpAddress .cableDataMgmtBase.4.5 |
sshSessionInProgressIndicates whether or not a ssh session is currently in progress.ro TruthValue (SNMPv2-TC) .cableDataMgmtBase.4.6 |
sshForceUserLogoutIf a ssh session is currently in progress, setting this object
to true(1) will terminate the session. Setting to false(2) has
no effect. Always returns false(2) when read.rw TruthValue (SNMPv2-TC) .cableDataMgmtBase.4.7 |
sshSessionAddressTypeThe type of internet address used for sshSessionAddress.ro InetAddressType (INET-ADDRESS-MIB) .cableDataMgmtBase.4.8 |
sshSessionAddressThis object gives the address of the most recently connected device.
If no session has taken place since the last reboot, this object will
report an empty string.ro InetAddress (INET-ADDRESS-MIB) .cableDataMgmtBase.4.9 |
sshHackerTableA table of internet addresses which have been blacklisted from ssh
access on this station. Blacklisting occurs when a login attempt
fails a number of times from the given address. SEQUENCE OF SshHackerEntry .cableDataMgmtBase.4.10 |
sshHackerEntryAn entry representing a single blacklisted address. SshHackerEntry .cableDataMgmtBase.4.10.1 |
sshHackerAddressTypeThe type of internet address used for sshHackerAddress. InetAddressType (INET-ADDRESS-MIB) .cableDataMgmtBase.4.10.1.1 |
sshHackerAddressThe address of an device which has unsuccessfully attempted to log in
to this station enough times to be blacklisted as a hacker. InetAddress (INET-ADDRESS-MIB) .cableDataMgmtBase.4.10.1.2 |
sshHackerNumAttemptsThe number of times that the device represented by this entry has
attempted to log in to this station.ro Unsigned32 .cableDataMgmtBase.4.10.1.3 |
sshHackerLastTimeThe value of sysUpTime when this row was created, or when the value
of sshHackerNumAttempts was last incremented.ro TimeTicks (SNMPv2-SMI) .cableDataMgmtBase.4.10.1.4 |
sshSessionInactivityTimeoutThis object controls the length of time after which an ssh session
will be terminated if there is no activity. Note that if this object
is set to zero, the session will never be terminated due to
inactivity.rw INTEGER .cableDataMgmtBase.4.11 |
sshHackerInactivityTimeoutThis object controls the length of time after which an entry in the
sshHackerTable will be removed if there are no further attempts to
access the system from the corresponding sshHackerAddress. Note
that if this object is set to zero, the sshHackerTable will be
effectively disabled and no IP addresses will be blacklisted for
unauthorized access. If set to -1, entries in the sshHackerTable
will never be aged out and once blacklisted, only a system reboot
will allow another attempted login from the blacklisted address.rw INTEGER (-1..86400) UNITS "seconds" .cableDataMgmtBase.4.12 |
sshTraps OBJECT IDENTIFIER .cableDataMgmtBase.4.99 |
sshHackerTrapAn entry has been added to the sshHackerTable, indicating repeated
unauthorized login attempts by the device indicated. NOTIFICATION-TYPE .cableDataMgmtBase.4.99.1 |