IPS-AUTH-MIB
AI MIB Summary
The IPS-AUTH-MIB module facilitates the monitoring and management of IP Storage (iSCSI) authorization policies and session states on network storage gateways and initiators. It exposes specific metrics including active authentication sessions, authorized target initiators, and access control list enforcement status to ensure secure storage network connectivity.
The IP Storage Authorization MIB module. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC 4545; see the RFC itself for full legal notices.
Main OID:
ipsAuthMibModule.1.3.6.1.2.1.141
75
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
75 total| Object Name |
|---|
ipsAuthMibModuleThe IP Storage Authorization MIB module. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC 4545; see the RFC itself for full legal notices. MODULE-IDENTITY .1.3.6.1.2.1.141 |
ipsAuthNotifications OBJECT IDENTIFIER .1.3.6.1.2.1.141.0 |
ipsAuthObjects OBJECT IDENTIFIER .1.3.6.1.2.1.141.1 |
ipsAuthDescriptors OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.1 |
ipsAuthMethodTypesRegistration point for Authentication Method Types. OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.1.1 |
ipsAuthMethodNoneThe authoritative identifier when no authentication method is used. OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.1.1.1 |
ipsAuthMethodSrpThe authoritative identifier when the authentication method is SRP. OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.1.1.2 |
ipsAuthMethodChapThe authoritative identifier when the authentication method is CHAP. OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.1.1.3 |
ipsAuthMethodKerberosThe authoritative identifier when the authentication method is Kerberos. OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.1.1.4 |
ipsAuthInstance OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.2 |
ipsAuthInstanceAttributesTableA list of Authorization instances present on the system. SEQUENCE OF IpsAuthInstanceAttributesEntry .1.3.6.1.2.1.141.1.2.2 |
ipsAuthInstanceAttributesEntryAn entry (row) containing management information applicable to a particular Authorization instance. IpsAuthInstanceAttributesEntry .1.3.6.1.2.1.141.1.2.2.1 |
ipsAuthInstIndexAn arbitrary integer used to uniquely identify a particular authorization instance. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots. Unsigned32 .1.3.6.1.2.1.141.1.2.2.1.1 |
ipsAuthInstDescrA character string, determined by the implementation to describe the authorization instance. When only a single instance is present, this object may be set to the zero-length string; with multiple authorization instances, it must be set to a unique value in an implementation-dependent manner to describe the purpose of the respective instance. If this is deployed in a master agent with more than one subagent implementing this MIB module, the master agent is responsible for ensuring that this object is unique across all subagents.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.2.1.141.1.2.2.1.2 |
ipsAuthInstStorageTypeThe storage type for all read-write objects within this row. Rows in this table are always created via an external process, and may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row. If this object has the value 'volatile', modifications to read-write objects in this row are not persistent across reboots. If this object has the value 'nonVolatile', modifications to objects in this row are persistent. An implementation may choose to allow this object to be set to either 'nonVolatile' or 'volatile', allowing the management application to choose this behavior.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.141.1.2.2.1.3 |
ipsAuthIdentity OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.3 |
ipsAuthIdentAttributesTableA list of user identities, each belonging to a particular ipsAuthInstance. SEQUENCE OF IpsAuthIdentAttributesEntry .1.3.6.1.2.1.141.1.3.1 |
ipsAuthIdentAttributesEntryAn entry (row) containing management information describing a user identity within an authorization instance on this node. IpsAuthIdentAttributesEntry .1.3.6.1.2.1.141.1.3.1.1 |
ipsAuthIdentIndexAn arbitrary integer used to uniquely identify a particular identity instance within an authorization instance present on the node. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots. Unsigned32 .1.3.6.1.2.1.141.1.3.1.1.1 |
ipsAuthIdentDescriptionA character string describing this particular identity.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.2.1.141.1.3.1.1.2 |
ipsAuthIdentRowStatusThis field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthIdentDescription may be set while ipsAuthIdentRowStatus is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.141.1.3.1.1.3 |
ipsAuthIdentStorageTypeThe storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.141.1.3.1.1.4 |
ipsAuthIdentityName OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.4 |
ipsAuthIdentNameAttributesTableA list of unique names that can be used to positively identify a particular user identity. SEQUENCE OF IpsAuthIdentNameAttributesEntry .1.3.6.1.2.1.141.1.4.1 |
ipsAuthIdentNameAttributesEntryAn entry (row) containing management information applicable to a unique identity name, which can be used to identify a user identity within a particular authorization instance. IpsAuthIdentNameAttributesEntry .1.3.6.1.2.1.141.1.4.1.1 |
ipsAuthIdentNameIndexAn arbitrary integer used to uniquely identify a particular identity name instance within an ipsAuthIdentity within an authorization instance. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots. Unsigned32 .1.3.6.1.2.1.141.1.4.1.1.1 |
ipsAuthIdentNameA character string that is the unique name of an identity that may be used to identify this ipsAuthIdent entry.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.2.1.141.1.4.1.1.2 |
ipsAuthIdentNameRowStatusThis field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthIdentName may be set when this value is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.141.1.4.1.1.3 |
ipsAuthIdentNameStorageTypeThe storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.141.1.4.1.1.4 |
ipsAuthIdentityAddress OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.5 |
ipsAuthIdentAddrAttributesTableA list of address ranges that are allowed to serve as the endpoint addresses of a particular identity. An address range includes a starting and ending address and an optional netmask, and an address type indicator, which can specify whether the address is IPv4, IPv6, FC-WWPN, or FC-WWNN. SEQUENCE OF IpsAuthIdentAddrAttributesEntry .1.3.6.1.2.1.141.1.5.1 |
ipsAuthIdentAddrAttributesEntryAn entry (row) containing management information applicable to an address range that is used as part of the authorization of an identity within an authorization instance on this node. IpsAuthIdentAddrAttributesEntry .1.3.6.1.2.1.141.1.5.1.1 |
ipsAuthIdentAddrIndexAn arbitrary integer used to uniquely identify a particular ipsAuthIdentAddress instance within an ipsAuthIdentity within an authorization instance present on the node. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots. Unsigned32 .1.3.6.1.2.1.141.1.5.1.1.1 |
ipsAuthIdentAddrTypeThe address types used in the ipsAuthIdentAddrStart and ipsAuthAddrEnd objects. This type is taken from the IANA address family types.rw AddressFamilyNumbers (IANA-ADDRESS-FAMILY-NUMBERS-MIB) .1.3.6.1.2.1.141.1.5.1.1.2 |
ipsAuthIdentAddrStartThe starting address of the allowed address range. The format of this object is determined by ipsAuthIdentAddrType.rw IpsAuthAddress .1.3.6.1.2.1.141.1.5.1.1.3 |
ipsAuthIdentAddrEndThe ending address of the allowed address range. If the ipsAuthIdentAddrEntry specifies a single address, this shall match the ipsAuthIdentAddrStart. The format of this object is determined by ipsAuthIdentAddrType.rw IpsAuthAddress .1.3.6.1.2.1.141.1.5.1.1.4 |
ipsAuthIdentAddrRowStatusThis field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The values of ipsAuthIdentAddrStart and ipsAuthIdentAddrEnd may be set when this value is 'active'. The value of ipsAuthIdentAddrType may not be set when this value is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.141.1.5.1.1.5 |
ipsAuthIdentAddrStorageTypeThe storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.141.1.5.1.1.6 |
ipsAuthCredential OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.6 |
ipsAuthCredentialAttributesTableA list of credentials related to user identities that are allowed as valid authenticators of the particular identity. SEQUENCE OF IpsAuthCredentialAttributesEntry .1.3.6.1.2.1.141.1.6.1 |
ipsAuthCredentialAttributesEntryAn entry (row) containing management information applicable to a credential that verifies a user identity within an authorization instance. To provide complete information in this MIB for a credential, the management station must not only create the row in this table but must also create a row in another table, where the other table is determined by the value of ipsAuthCredAuthMethod, e.g., if ipsAuthCredAuthMethod has the value ipsAuthMethodChap, a row must be created in the ipsAuthCredChapAttributesTable. IpsAuthCredentialAttributesEntry .1.3.6.1.2.1.141.1.6.1.1 |
ipsAuthCredIndexAn arbitrary integer used to uniquely identify a particular Credential instance within an instance present on the node. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots. Unsigned32 .1.3.6.1.2.1.141.1.6.1.1.1 |
ipsAuthCredAuthMethodThis object contains an OBJECT IDENTIFIER that identifies the authentication method used with this credential. When a row is created in this table, a corresponding row must be created by the management station in a corresponding table specified by this value. When a row is deleted from this table, the corresponding row must be automatically deleted by the agent in the corresponding table specified by this value. If the value of this object is ipsAuthMethodNone, no corresponding rows are created or deleted from other tables. Some standardized values for this object are defined within the ipsAuthMethodTypes subtree.rw AutonomousType (SNMPv2-TC) .1.3.6.1.2.1.141.1.6.1.1.2 |
ipsAuthCredRowStatusThis field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthCredAuthMethod must not be changed while this row is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.141.1.6.1.1.3 |
ipsAuthCredStorageTypeThe storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.141.1.6.1.1.4 |
ipsAuthCredChap OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.7 |
ipsAuthCredChapAttributesTableA list of CHAP attributes for credentials that use ipsAuthMethodChap as their ipsAuthCredAuthMethod. A row in this table can only exist when an instance of the ipsAuthCredAuthMethod object exists (or is created simultaneously) having the same instance identifiers and a value of 'ipsAuthMethodChap'. SEQUENCE OF IpsAuthCredChapAttributesEntry .1.3.6.1.2.1.141.1.7.1 |
ipsAuthCredChapAttributesEntryAn entry (row) containing management information applicable to a credential that uses ipsAuthMethodChap as their ipsAuthCredAuthMethod. When a row is created in ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredChap, the management station must create a corresponding row in this table. When a row is deleted from ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredChap, the agent must delete the corresponding row (if any) in this table. IpsAuthCredChapAttributesEntry .1.3.6.1.2.1.141.1.7.1.1 |
ipsAuthCredChapUserNameA character string containing the CHAP user name for this credential.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.2.1.141.1.7.1.1.1 |
ipsAuthCredChapRowStatusThis field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthCredChapUserName may be changed while this row is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.141.1.7.1.1.2 |
ipsAuthCredChapStorageTypeThe storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.141.1.7.1.1.3 |
ipsAuthCredSrp OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.8 |
ipsAuthCredSrpAttributesTableA list of SRP attributes for credentials that use ipsAuthMethodSrp as its ipsAuthCredAuthMethod. A row in this table can only exist when an instance of the ipsAuthCredAuthMethod object exists (or is created simultaneously) having the same instance identifiers and a value of 'ipsAuthMethodSrp'. SEQUENCE OF IpsAuthCredSrpAttributesEntry .1.3.6.1.2.1.141.1.8.1 |
ipsAuthCredSrpAttributesEntryAn entry (row) containing management information applicable to a credential that uses ipsAuthMethodSrp as their ipsAuthCredAuthMethod. When a row is created in ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredSrp, the management station must create a corresponding row in this table. When a row is deleted from ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredSrp, the agent must delete the corresponding row (if any) in this table. IpsAuthCredSrpAttributesEntry .1.3.6.1.2.1.141.1.8.1.1 |
ipsAuthCredSrpUserNameA character string containing the SRP user name for this credential.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.2.1.141.1.8.1.1.1 |
ipsAuthCredSrpRowStatusThis field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthCredSrpUserName may be changed while the status of this row is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.141.1.8.1.1.2 |
ipsAuthCredSrpStorageTypeThe storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.141.1.8.1.1.3 |
ipsAuthCredKerberos OBJECT IDENTIFIER .1.3.6.1.2.1.141.1.9 |
ipsAuthCredKerbAttributesTableA list of Kerberos attributes for credentials that use ipsAuthMethodKerberos as their ipsAuthCredAuthMethod. A row in this table can only exist when an instance of the ipsAuthCredAuthMethod object exists (or is created simultaneously) having the same instance identifiers and a value of 'ipsAuthMethodKerb'. SEQUENCE OF IpsAuthCredKerbAttributesEntry .1.3.6.1.2.1.141.1.9.1 |
ipsAuthCredKerbAttributesEntryAn entry (row) containing management information applicable to a credential that uses ipsAuthMethodKerberos as its ipsAuthCredAuthMethod. When a row is created in ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredKerberos, the management station must create a corresponding row in this table. When a row is deleted from ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredKerberos, the agent must delete the corresponding row (if any) in this table. IpsAuthCredKerbAttributesEntry .1.3.6.1.2.1.141.1.9.1.1 |
ipsAuthCredKerbPrincipalA character string containing a Kerberos principal for this credential.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.2.1.141.1.9.1.1.1 |
ipsAuthCredKerbRowStatusThis field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthCredKerbPrincipal may be changed while this row is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.141.1.9.1.1.2 |
ipsAuthCredKerbStorageTypeThe storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.141.1.9.1.1.3 |
ipsAuthConformance OBJECT IDENTIFIER .1.3.6.1.2.1.141.2 |
ipsAuthCompliances OBJECT IDENTIFIER .1.3.6.1.2.1.141.2.1 |
ipsAuthComplianceV1Initial version of compliance statement based on initial version of this MIB module. The Instance and Identity groups are mandatory; at least one of the other groups (Name, Address, Credential, Certificate) is also mandatory for any given implementation. Unknown .1.3.6.1.2.1.141.2.1.1 |
ipsAuthGroups OBJECT IDENTIFIER .1.3.6.1.2.1.141.2.2 |
ipsAuthInstanceAttributesGroupA collection of objects providing information about authorization instances. Unknown .1.3.6.1.2.1.141.2.2.1 |
ipsAuthIdentAttributesGroupA collection of objects providing information about user identities within an authorization instance. Unknown .1.3.6.1.2.1.141.2.2.2 |
ipsAuthIdentNameAttributesGroupA collection of objects providing information about user names within user identities within an authorization instance. Unknown .1.3.6.1.2.1.141.2.2.3 |
ipsAuthIdentAddrAttributesGroupA collection of objects providing information about address ranges within user identities within an authorization instance. Unknown .1.3.6.1.2.1.141.2.2.4 |
ipsAuthIdentCredAttributesGroupA collection of objects providing information about credentials within user identities within an authorization instance. Unknown .1.3.6.1.2.1.141.2.2.5 |
ipsAuthIdentChapAttrGroupA collection of objects providing information about CHAP credentials within user identities within an authorization instance. Unknown .1.3.6.1.2.1.141.2.2.6 |
ipsAuthIdentSrpAttrGroupA collection of objects providing information about SRP credentials within user identities within an authorization instance. Unknown .1.3.6.1.2.1.141.2.2.7 |
ipsAuthIdentKerberosAttrGroupA collection of objects providing information about Kerberos credentials within user identities within an authorization instance. Unknown .1.3.6.1.2.1.141.2.2.8 |