CISCO-AAA-CLIENT-MIB
AI MIB Summary
Standard SNMP MIB module defining data structures for CISCO-AAA-CLIENT-MIB.
27
Objects
Active
Status
3
Dependencies
Imported Objects
Objects
27 total| Object Name |
|---|
ciscoAAAClientMIB OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158 |
CISCO-SMI Unknown .1.3.6.1.4.1.9.9.158 |
cacMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.1 |
cacPriority OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.1.1 |
cacPriorityTableThis table contains entries for AAA authentication
methods configured in the system. At startup, agent
set up all the entries of the table. All authentication
methods will be disabled except local authentication will
be enabled for each session type and login mode. Users
later can enable/disable a specific authentication method
through cacEnable object.
The following table describes the startup state of each
authentication method and session type in normal login
mode and enable login mode.
AuthenMethod Console Session Telnet Session Http Session
tacacs disabled disabled disabled
radius disabled disabled disabled
kerberos disabled disabled disabled
local enabled(*) enabled(*) enabled(*)
(*) denotes primary method. SEQUENCE OF CacPriorityEntry .1.3.6.1.4.1.9.9.158.1.1.1 |
cacPriorityEntryAn entry containing the priority number of an authentication
method used in a session. CacPriorityEntry .1.3.6.1.4.1.9.9.158.1.1.1.1 |
cacSessionThis is the session type used to connect to the network
device. SessionType -- Rsyntax INTEGER { -- telnet(1), -- console(2), -- http(3) -- } .1.3.6.1.4.1.9.9.158.1.1.1.1.1 |
cacAuthenThis is the authentication method used to authenticate
users. AuthenMethod -- Rsyntax INTEGER { -- tacacs(1), -- radius(2), -- kerberos(3), -- local(4) -- } .1.3.6.1.4.1.9.9.158.1.1.1.1.2 |
cacLoginModeThis is the login mode user used to login to the network
device. LoginMode -- Rsyntax INTEGER { -- login(1), -- enable(2) -- } .1.3.6.1.4.1.9.9.158.1.1.1.1.3 |
cacEnableIt indicates whether the authentication method denoted by
cacAuthen is enabled or not.
When this object is true(1), the authentication method denoted
by cacAuthen is enabled.
When this object is false(2), the authentication method denoted
by cacAuthen is disabled.
If the value of cacAuthen is local, the value of this
object cannot be set to false(2).rw TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } .1.3.6.1.4.1.9.9.158.1.1.1.1.4 |
cacPriorityNumberThis is the priority number of an authentication method to
be used in user authentication for a session. This value is
automatically assigned and reflects the relative priority
of the authentication method denoted by cacAuthen with
respected to already configured authentication methods.
It is assigned in the order in which the authentication
method is enabled by the user through cacEnable.
The higher value has the higher priority. This object
is used to determine the fallback order in case the
primary authentication method indicated by cacPrimaryMethod
failed.
If the authentication method denoted by cacAuthen is disabled
for the type of session denoted by cacSession, the value
of this object is equal to 0.ro INTEGER .1.3.6.1.4.1.9.9.158.1.1.1.1.5 |
cacPrimaryMethodIt indicates whether the authentication method denoted by
cacAuthen is the primary (first one to be tried) method
when there are multiple authentication method configured.
Setting this object to true(1) will make the authentication
method denoted by cacAuthen to be the primary authentication
method for the session denoted by cacSession. The previously
configured primary method will be changed to false(2).
Setting this object to false(2) is not allowed.rw TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } .1.3.6.1.4.1.9.9.158.1.1.1.1.6 |
cacLoginConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.1.2 |
cacLoginConfigTableA table that contains login configuration
which is associated with this system. SEQUENCE OF CacLoginConfigEntry .1.3.6.1.4.1.9.9.158.1.2.1 |
cacLoginConfigEntryAn entry containing the configuration of the login. CacLoginConfigEntry .1.3.6.1.4.1.9.9.158.1.2.1.1 |
cacMaxLoginAttemptIndicates the maximum number of login attempts allowed.
Setting this variable to 0 will disable the attempt
limit checking.
If the login session type does not support this attempt
limit checking, the value of this object can only be set
to 0.rw INTEGER(0|3..10) .1.3.6.1.4.1.9.9.158.1.2.1.1.1 |
cacLockoutPeriodIndicates the lockout period after the maximum number
of login attempt is met. For console, the console input
will be frozen during this period. For remote logins, the
connection will be closed and any subsequent access
from that station will be closed during the lockout time.
Setting this variable to 0 will disable the lockout.
If the login session type does not support this lockout
period, the value of this object can only be set to 0.
If the lockout period is greater than the maximum value
reportable by this object then this object should report
its maximum value (600) and cacLockoutPeriodExt must be
used to report the lockout period.rwdeprecated INTEGER(0|30..600) -- Units -- seconds .1.3.6.1.4.1.9.9.158.1.2.1.1.2 |
cacLockoutPeriodExtSpecifies the lockout period after the maximum number
of login attempt is met. For console, the console input
will be frozen during this period. For remote logins, the
connection will be closed and any subsequent access
from that station will be closed during the lockout time.
Setting this variable to 0 will disable the lockout.
If the login session type does not support this lockout
period, the value of this object can only be set to 0.rw INTEGER(0|30..43200) -- Units -- seconds .1.3.6.1.4.1.9.9.158.1.2.1.1.3 |
cacMIBNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.2 |
cacMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.3 |
cacMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.3.1 |
cacMIBCompliance OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.3.1.1 |
cacMIBCompliance2 OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.3.1.2 |
cacMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.3.2 |
cacPriorityGroup OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.3.2.1 |
cacLoginConfigGroup OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.3.2.2 |
cacLoginConfigGroupRev1 OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.158.3.2.3 |