CISCO-SECURE-SHELL-MIB
AI MIB Summary
The CISCO-SECURE-SHELL-MIB enables monitoring and configuration of Cisco IOS device SSH session states, authentication failures, and accounting records to enforce secure remote access policies. It provides granular visibility into active SSH connections, protocol version negotiation, and cryptographic key management parameters for audit and security compliance.
MIB module for displaying and configuring accounting and Secure Shell (SSH) related features in a device.
SSH is a program to log into another computer over a network, to execute commands in a remote machine and to move files from one machine to another. It provides strong authentication and secure communications over unsecure channels.
For more information on SSH, please refer to IETF draft, draft-ietf-tls-ssh-00.txt.
Main OID:
ciscoSecureShellMIB.1.3.6.1.4.1.9.9.339
28
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
28 total| Object Name |
|---|
ciscoSecureShellMIBMIB module for displaying and configuring
accounting and Secure Shell (SSH) related
features in a device.
SSH is a program to log into another computer over
a network, to execute commands in a remote machine
and to move files from one machine to another. It
provides strong authentication and secure communications
over unsecure channels.
For more information on SSH, please refer to IETF draft,
draft-ietf-tls-ssh-00.txt. MODULE-IDENTITY .1.3.6.1.4.1.9.9.339 |
ciscoSecureShellMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.339.1 |
cssConfiguration OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.339.1.1 |
cssServiceActivationEnables or disables the Secure Shell (SSH) service on
the device.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.339.1.1.1 |
cssKeyTablecssKeyTable is a table that lets the user configure
the SSH keys SEQUENCE OF CssKeyEntry .1.3.6.1.4.1.9.9.339.1.1.2 |
cssKeyEntryA SSH key table entry. The index specifies which
protocol the user wants to generate the key for.
To create the key for a protocol (for the first time),
following steps are to be taken by the Network
Management System.
1. Choose the Protocol, by specifying the cssKeyIndex
2. Choose nbits, by specifying the cssKeyNBits value
3. cssKeyRowStatus as createAndGo (4)
To delete the key for a protocol, following steps
are to be taken by the Network Management System
1. Choose the Protocol, by specifying the cssKeyIndex
2. cssKeyRowStatus as destroy (6)
To overwrite the existing key for a protocol
1. Choose the Protocol, by specifying the cssKeyIndex
2. Choose the nbits, by specifying the cssKeyNBits value
3. cssKeyOverWrite as true(1). CssKeyEntry .1.3.6.1.4.1.9.9.339.1.1.2.1 |
cssKeyIndexThe SSH Protocol Identifier for which this entry
pertains to. The protocol can be rsa1, dsa or rsa.
rsa - A public-key cryptosystem defined by Rivest,
Shamir and Adleman. This is used with version 2
of the SSH.
rsa1 - Same as rsa, but this is used with version 1 of
the SSH.
dsa - Digital Signature Algorithm, a public key
cipher used to generate digital signatures. Enumeration .1.3.6.1.4.1.9.9.339.1.1.2.1.1 |
cssKeyNBitsThe number of bits provided to generate the key.
This determines the length of the kestring
generated by the SSH.
This object cannot be modified while this row is
active, unless the associated cssKeyOverWrite
object is set to True in the same Set PDU.rw Integer32 .1.3.6.1.4.1.9.9.339.1.1.2.1.2 |
cssKeyOverWriteThis object specifies whether an existing key for
the protocol should be overwritten with a new key.
No action is taken if this object is set to 'false'.
The value of this object when read is always 'false'.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.339.1.1.2.1.3 |
cssKeyLastCreationTimeThe time of the last creation of the key.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.339.1.1.2.1.4 |
cssKeyRowStatusStatus of this row.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.339.1.1.2.1.5 |
cssKeyStringThe SSH public key string that is generated.ro DisplayString .1.3.6.1.4.1.9.9.339.1.1.2.1.6 |
cssServiceCapabilityThe object indicates which versions of Secure Shell protocol
are supported by the device.
If the bit 'v1' is set to 1, it indicates that the device
supports SSH protocol version 1.
If the bit 'v2' is set to 1, it indicates that the device
supports SSH protocol version 2.ro CssVersions .1.3.6.1.4.1.9.9.339.1.1.3 |
cssServiceModeThis object specifies which versions of Secure Shell
protocol connections that device will accept from
Secure Shell clients.
If the bit 'v1' is set to 1, the device will accept
SSH version 1 connections.
If the bit 'v2' is set to 1, the device will accept
SSH version 2 connections.
At least one of the version bits must be set to 1.rw CssVersions .1.3.6.1.4.1.9.9.339.1.1.4 |
cssKeyGenerationStatusThis object specifies the status of the last key
generation request.ro Enumeration .1.3.6.1.4.1.9.9.339.1.1.5 |
cssSessionInfo OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.339.1.2 |
cssSessionTableTable to list detailed information about existing
Secure Shell sessions on the device. SEQUENCE OF CssSessionEntry .1.3.6.1.4.1.9.9.339.1.2.1 |
cssSessionEntryAn entry in the cssSessionTable, that provides
detailed information about all the existing SSH sessions on
the device.
An entry will be created for every SSH session established
on the device. The entry will be removed upon termination
of the SSH session. CssSessionEntry .1.3.6.1.4.1.9.9.339.1.2.1.1 |
cssSessionIDAn arbitrary index that uniquely identifies a Secure Shell
Session Unsigned32 .1.3.6.1.4.1.9.9.339.1.2.1.1.1 |
cssSessionVersionThe object indicates the version of Secure Shell used by
this session.ro Enumeration .1.3.6.1.4.1.9.9.339.1.2.1.1.2 |
cssSessionStateThe object indicates the current state of Secure Shell
Session.
The state sshSessionVersionOk(1) indicates that server and
client versions of SSH are exchanged and are compatible.
The state sshSessionKeysExchanged(2) indicates that key
exchange has been completed.
The state sshSessionAuthenticated(3) indicates that the
client has been successfully authenticated.
The state sshSessionOpen(4) indicates that the session has
been successfully opened.
The state sshSessionDisconnecting(5) indicates that the
session disconnection has begun.
The state sshSessionDisconnected(6) indicates that the
session has been disconnected.
The state sshSessionClosed(7) indicates that the session
has closed.ro Enumeration .1.3.6.1.4.1.9.9.339.1.2.1.1.3 |
cssSessionPIDThe object indicates the process ID of the process
serving this SSH session on the device.ro Unsigned32 .1.3.6.1.4.1.9.9.339.1.2.1.1.4 |
cssSessionUserIDThe object indicates user name associated with this
SSH session.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.339.1.2.1.1.5 |
cssSessionHostAddrTypeThis object describes the type of Internet address used
by host associated with this SSH session.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.339.1.2.1.1.6 |
cssSessionHostAddrThe object indicates the Internet address of the host
associated with this SSH session.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.339.1.2.1.1.7 |
ciscoSecureShellMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.339.2 |
ciscoSecureShellMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.339.2.1 |
ciscoSecureShellMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.339.2.2 |