LINKSYS-SSL
AI MIB Summary
The LINKSYS-SSL MIB module enables monitoring of Secure Sockets Layer (SSL) session states, handshake statistics, and certificate validity parameters on Linksys network appliances. It provides granular visibility into SSL/TLS encryption performance and security events for troubleshooting connection failures and verifying cryptographic compliance.
The private MIB module definition for SSL.
Main OID:
rlSsl.1.3.6.1.4.1.89.100
42
Objects
Active
Status
3
Dependencies
Imported Objects
Objects
42 total| Object Name |
|---|
rlSslThe private MIB module definition for SSL. MODULE-IDENTITY .1.3.6.1.4.1.89.100 |
rlSslCertificateGenerationTableThis table is used for :
1. generating keys and self signed certificate - saved in flash and RAM
(not in configuration file)
2. generating certificate requests - saved in RAM, can be read by
rlSslCertificateExportTable
3. generating self signed certificate - saved in flash and RAM (not in
configuraion file)
By setting rlSslCertificateGenerationAction to the appropriate
value this action takes place. The other fields of this table are used for
each of this actions SEQUENCE OF RlSslCertificateGenerationEntry .1.3.6.1.4.1.89.100.1 |
rlSslCertificateGenerationEntryThe row definition for this table. RlSslCertificateGenerationEntry .1.3.6.1.4.1.89.100.1.1 |
rlSslCertificateGenerationIndexThis index is always set to 1 no matter for which certificate or
certificate request the action refers to.rw INTEGER .1.3.6.1.4.1.89.100.1.1.1 |
rlSslCertificateGenerationIdThe device can hold a number of keys/certificates/certificate requests.
These certificates are always numbered from 1 to N (maximum number of
certificates in device). This field decides to which
keys/certificates/certificate requests the action refers.rw INTEGER .1.3.6.1.4.1.89.100.1.1.2 |
rlSslCertificateGenerationCountryNameValue of country name field that will appear when a new certificate
request or self signed certificate is generated.rw DisplayString .1.3.6.1.4.1.89.100.1.1.3 |
rlSslCertificateGenerationStateOrProvinceNameValue of state or province name field that will appear when a new
certificate or self signed certificate is generated.rw DisplayString .1.3.6.1.4.1.89.100.1.1.4 |
rlSslCertificateGenerationLocalityNameValue of locality field that will appear when a new certificate or
self signed certificate is generated.rw DisplayString .1.3.6.1.4.1.89.100.1.1.5 |
rlSslCertificateGenerationOrganizationNameValue of organization field that will appear when a new certificate or
self signed certificate is generated.rw DisplayString .1.3.6.1.4.1.89.100.1.1.6 |
rlSslCertificateGenerationOrganizationUnitNameValue of organization field that will appear when a new certificate or
self signed certificate is generated.rw DisplayString .1.3.6.1.4.1.89.100.1.1.7 |
rlSslCertificateGenerationCommonNameValue of common name field that will appear when a new certificate or
self signed certificate is generated.rw DisplayString .1.3.6.1.4.1.89.100.1.1.8 |
rlSslCertificateGenerationValidDaysWhen generating self signed certificate this field sets the valid fields.
'Valid from' is current GMT and 'valid to' current GMT + the value of
this field.rw INTEGER .1.3.6.1.4.1.89.100.1.1.9 |
rlSslCertificateGenerationRsaKeyLengthSetting the RSA key size that will be created when a new key is generated -
generateRsaKeyAndSelfSignedCertificaterw INTEGER .1.3.6.1.4.1.89.100.1.1.10 |
rlSslCertificateGenerationPassphraseWhen a RSA key is generated (generateRsaKeyAndSelfSignedCertificate)
this passphrase is saved in flash and when the time comes and the
certificate and the key are exported in PKCS12 format this passphrase
is used to encrypt it. If the passphrase is empty the key and
certificate can not be exported. There is no method of obtaining this
passphrase once a key was generated.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.89.100.1.1.11 |
rlSslCertificateGenerationActionSetting to a regenerateCertificate causes a new certificate to be
generated and to be used for all new sessions.rw Enumeration .1.3.6.1.4.1.89.100.1.1.12 |
rlSslCertificateExportTableThis table is used for viewing saved data from RAM and flash. SEQUENCE OF RlSslCertificateExportEntry .1.3.6.1.4.1.89.100.2 |
rlSslCertificateExportEntryThe row definition for this table. RlSslCertificateExportEntry .1.3.6.1.4.1.89.100.2.1 |
rlSslCertificateExportIdIdentifies the index of this certficate / certificate request the table holds.ro INTEGER .1.3.6.1.4.1.89.100.2.1.1 |
rlSslCertificateExportTypeIdentifies the type of data the current entry shows.ro Enumeration .1.3.6.1.4.1.89.100.2.1.2 |
rlSslCertificateExportFragmentIdIdentifies the index of this fragment in the certificate request.ro INTEGER .1.3.6.1.4.1.89.100.2.1.3 |
rlSslCertificateExportFragmentTextA part of the readable text entry for the certificate request.ro OCTET STRING .1.3.6.1.4.1.89.100.2.1.4 |
rlSslCertificateSaveSaves data from rlSslCertificateImportTable to RAM and CDB. When
an external certificate should be copied to the device first we copy
it to rlSslCertificateImportTable and then this scalar is set to the
certificate id that we want to save -
1. All entries in rlSslCertificateImportTable that have this id and
their format is equal to the current value of rlSslCertificateSaveFormat
are concatenated.
2. If the imported certificate format is .. - section 1 result
is validated against the key with the same index. If validation fails
for any reason - the certificate is not saved and the setting this
scalar fails.]
This scalar is for certificate 1 only... for certificate 2 use
rlSslCertificateSave2rw INTEGER .1.3.6.1.4.1.89.100.3 |
rlSslCertificateSaveFormat.rw Enumeration .1.3.6.1.4.1.89.100.4 |
rlSslImportedPKCS12CertificatePassphrase.rw DisplayString .1.3.6.1.4.1.89.100.5 |
rlSslCertificateImportTableThis table is used for copying an external certificate to the device -
see rlSslCertificateSave SEQUENCE OF RlSslCertificateImportEntry .1.3.6.1.4.1.89.100.6 |
rlSslCertificateImportEntryThe row definition for this table. RlSslCertificateImportEntry .1.3.6.1.4.1.89.100.6.1 |
rlSslCertificateImportIdThe certificate ID.rw INTEGER .1.3.6.1.4.1.89.100.6.1.1 |
rlSslCertificateImportFormat.rw Enumeration .1.3.6.1.4.1.89.100.6.1.2 |
rlSslCertificateImportFragmentIdIdentifies the index of this fragment in the certificate.rw INTEGER .1.3.6.1.4.1.89.100.6.1.3 |
rlSslCertificateImportFragmentTextA part of the readable text entry for the certificate.rw OCTET STRING .1.3.6.1.4.1.89.100.6.1.4 |
rlSslCertificateImportFragmentStatusrw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.89.100.6.1.5 |
rlSslSSLv2Enableif enabled then SSLv2 will be supported , if disabled SSLv2 won't be supported.
only SSLV3 and TSL1.
Note: disabling SSLv2 is more secure.rw Enumeration .1.3.6.1.4.1.89.100.7 |
rlSslImportExportSelfKeyTableThis table can be used for 2 purposes:
1) Importing public/private key pair to serve as the device key when acting
as SSL server. This is done by setting entries to this table, according to
the specified format. When the last entry (footer) is set, the whole key
pair is checked and if valid, stored in CDB.
2) Exporting the device SSL server public/private key. This can be done by
performing GetNext operations on this table. SEQUENCE OF RlSslImportExportSelfKeyEntry .1.3.6.1.4.1.89.100.8 |
rlSslImportExportSelfKeyEntryThe row definition for this table. RlSslImportExportSelfKeyEntry .1.3.6.1.4.1.89.100.8.1 |
rlSslImportExportSelfKeyFormatSpecifies the format of public/key pair. The following formats are
supported for import/export:
1) uuencoded_format - in this format both private and public key are in
uu-encoded format, and are seperated from one another by header and footer.
An example of the concateneation of all fragments in this format is:
-BEGIN RSA PRIVATE KEY-
tDaNkZZoCxXfkLLsLDlZ6T9H8U4Gz637eRV7BYBpapkidAxY1UG0/qgfKLPkbId4wzht6ArV9bE4fMtX
wSMOxL3q31pOmUdVhjbWYcgZQBDy1DjFSbuIEdP85c96B9bBE2nPv90mSvb/6j8R2NItT/KJeiYMtLtI
N3m6/zESKJGIrX0jP1RFDjVZSS5chSAFgB0egsLZEyOQn7jAqpX/x/easD2J6F/OjPXlJ9Hff2tMb3NU
QYyBoWH2J9IxhWB6Vo66R9Y04JGR18uL/rV2sMCtpg5ppkVTEpNTp9qE1yXocR2NmzUfNFap+GJ4IHj8
CzkVfmJM/kEWaJsYgHbAgLyRg4QVyelfobv1B71aQ+u1z9KGu/QajkWdR04OQfsGOL1CvU2LGYDcRjfH
jv+jl/UkDRRjoD9kt2WvouT+OL6esvKl0OJBqWbGNXg9TWv/VLtJIwgUno+MLaJuOM4Fh44+wpnqUXwQ
TFtBFc8pzt5BoOwbv9gXpicTkq4/+GhwXWXxSVFebKhnHAvKSLT+Ba7K7ZeR8EIIxbXdDNFOiS45R2KI
jxxXLXK44u6KGl5MygCKXUOFlJ+Zhgrq6ZH17z/RVJQ2CWqb5Ekn9GY3kH9QZ3mb4MDPfriWi2lHGXHY
JmJd4SLQhpBdnOS5tu84QmyU3dNbAdzghDsR+dEY/6g7Cn0kcVkeHNZ0H+mCZik5f6XBD8eplkk43bdR
FrkwTeAjwurGcKwdiKkR4DlfSq3DKssVBucTqUpqsKqPXLwTIL44rWKhEPXgGPB2XDG0VLvIRKkAgEGI
LNTwOm091Ro=
-END RSA PRIVATE KEY-
-BEGIN RSA PUBLIC KEY-
MIGHAoGBAOeIC9gRg3YaEGGMp3C00qNwLINAEDZV/J4BWM5WnWwCWZyHXDs2XiEmFu0ZONAD4gcT2f2f
NNfCBPye39VVuOkKQuSV0MLLX5800LZ4y1BNcPzPZHpnGaCzl7iAjhfj9MolzAh5VRjeiYt0t1um4dm+
q9A4BtfpJqDYxCW9uxd/AgEj
-END RSA PUBLIC KEY- Enumeration .1.3.6.1.4.1.89.100.8.1.1 |
rlSslImportExportSelfKeyIndexIdentifies the SSL server key index (there can be more than one key). INTEGER .1.3.6.1.4.1.89.100.8.1.2 |
rlSslImportExportSelfKeyFragmentIdIdentifies the index of this fragment in the key pair input/output. INTEGER .1.3.6.1.4.1.89.100.8.1.3 |
rlSslImportExportSelfKeyAlgorithmIdentifies the type of key pair.rw RlSslPublicKeyAlgorithm .1.3.6.1.4.1.89.100.8.1.4 |
rlSslImportExportSelfKeyFragmentTextA part of the readable text entry for the key pair input/output.rw OCTET STRING .1.3.6.1.4.1.89.100.8.1.5 |
rlSslCertificateSave2Saves data from rlSslCertificateImportTable to RAM and CDB. When
an external certificate should be copied to the device first we copy
it to rlSslCertificateImportTable and then this scalar is set to the
certificate id that we want to save -
1. All entries in rlSslCertificateImportTable that have this id and
their format is equal to the current value of rlSslCertificateSaveFormat
are concatenated.
2. If the imported certificate format is .. - section 1 result
is validated against the key with the same index. If validation fails
for any reason - the certificate is not saved and the setting this
scalar fails.]
This scalar is for certificate 2 only... for certificate 1 use
rlSslCertificateSaverw INTEGER .1.3.6.1.4.1.89.100.9 |
rlSslisCertificate1Defaultif set to true then this is the default key , will be configured
when auto generation is done , will set to try , all other cases will
be set to false.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.89.100.10 |
rlSslisCertificate2Defaultif set to true then this is the default key , will be configured
when auto generation is done , will set to try , all other cases will
be set to false.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.89.100.11 |