PDN-SECURITY-MIB
AI MIB Summary
Standard SNMP MIB module defining data structures for PDN-SECURITY-MIB.
24
Objects
Active
Status
4
Dependencies
Imported Objects
Objects
24 total| Object Name |
|---|
RFC1155-SMIThis object is used to either enable or disable
SNMP IP validation. When enabled the first check on any
incoming PDU is based on the IP address of the datagram.
If the IP address is configured in the
devSecurityMgrTable then the community name is checked.
If the community name is correct then the lowest access level
between the the Table and the community name is taken.rw Enumeration .pdn-security.1 |
devSecurityMgrMaxNumberMaximum number of managers allowed in the devSecurityMgrTable.ro INTEGER .pdn-security.2 |
devSecurityMgrCurrentNumberCurrent number of managers in the devSecurityMgrTable.ro INTEGER .pdn-security.3 |
devSecurityMgrTableA list of the security manager entries.
In order to add a new Security Manager the devSecurityMgrIpAddress
object must be created first by setting it to a valid IP Address.deprecated SEQUENCE OF DevSecurityMgrEntry .pdn-security.4 |
devSecurityMgrEntryThe SNMP IP Address configuration items.deprecated DevSecurityMgrEntry .pdn-security.4.1 |
devSecurityMgrIpAddressThis is used to specify the IP address that identifies the
SNMP manager(s) that are authorized to send SNMP messages.
An existing Security Manager may be deleted by setting the
devSecurityMgrIpAddress object to 0.0.0.0 or by setting the
devSecurityMgrIpAddress object to a new IP Address.
A new Security Manager may be added by setting
the devSecurityMgrIpAddress object of 0.0.0.0 to the new address
as long as there is still room for another Security Manager.
When ever a new Security Manager is added or an existing
Security Manager's IP Address is modified,
the devSecurityMgrAccess object is set to the default value
of read (1).rwdeprecated IpAddress .pdn-security.4.1.1 |
devSecurityMgrAccessThis field is used to specify the access allowed for an authorized
NMS when Manager Validation is performed.
If the IP address for the NMS sending an SNMP message is on the list
of allowed managers, this option along with the Community Name access
determine the type of access allowed for the that manager.
When ever a new Security Manager is added or an existing
Security Manager's IP Address is modified, the devSecurityMgrAccess
object is set to the default value of read (1).
If the index for this object is not in the existing table and if there
is room in the table then the index will be used to create a new
Security Manager and will be given the requested access level.rwdeprecated Enumeration .pdn-security.4.1.2 |
newSecurityMgrTableA list of the security manager entries. If an entry is not found
in this table, it is added to the table.deprecated SEQUENCE OF NewSecurityMgrEntry .pdn-security.5 |
newSecurityMgrEntryThe SNMP IP Address configuration items.deprecated NewSecurityMgrEntry .pdn-security.5.1 |
newSecurityMgrIpAddressThis is used to specify the IP address that identifies the
SNMP manager(s) that are authorized to send SNMP messages.
This object is the binary AND of SNMP or telnet source IP
address and its subnet mask if the subnet mask is available.
Subnet mask is assumed to be 255.255.255.255 when not availablerwdeprecated IpAddress .pdn-security.5.1.1 |
newSecurityMgrAccessThis field is used to specify the access allowed for an authorized
NMS when Manager Validation is performed.
If the IP address for the NMS sending an SNMP message is on the list
of allowed managers, this option along with the Community Name access
determine the type of access allowed for the that manager.
When ever a new Security Manager is added or an existing
Security Manager's IP Address is modified, the newSecurityMgrAccess
object is set to the default value of read (1).
If the index for this object is not in the existing table and if there
is room in the table then the index will be used to create a new
Security Manager and will be given the requested access level.
In addition changing an existing access permission to noAccess
invalidates the corresponding row of this table. It is upto
the implementation to decide whether to actually remove this
entry from the table or not.
read (1) ==> no telnet access and snmp read only access
readWrite (2) ==> no telnet access and snmp read-write access
noAccess (3) ==> no telnet access and no snmp read-write access
telnetNoAccess (4) ==> telnet access and no snmp access
telnetRead (5) ==> telnet access and snmp read only access
telnetReadWrite (6) ==> telnet access and snmp read-write access.rwdeprecated Enumeration .pdn-security.5.1.2 |
newSecurityMgrSubnetMaskThis object is used to specify the subnet maskrwdeprecated IpAddress .pdn-security.5.1.3 |
devSecurityTelnetSourceValidationThis object is used to either enable or disable
telnet source address screeningrw Enumeration .pdn-security.6 |
devSecurityFtpSourceValidationThis object is used to either enable or disable
ftp source address screeningrw Enumeration .pdn-security.7 |
securityMgrTableA list of the security manager entries. If an entry is not found
in this table, it is added to the table. SEQUENCE OF SecurityMgrEntry .pdn-security.8 |
securityMgrEntryThe device access security configuration items. SecurityMgrEntry .pdn-security.8.1 |
securityMgrIpAddressThis is used to specify the IP address that identifies the
SNMP manager(s) that are authorized to send SNMP messages.ro IpAddress .pdn-security.8.1.1 |
securityMgrSubnetMaskThis object is used to specify the subnet maskro IpAddress .pdn-security.8.1.2 |
securityMgrSnmpAccessThis is used to specify the snmp access to the device.rw Enumeration .pdn-security.8.1.3 |
securityMgrTelnetAccessThis is used to specify the telnet access to the device.rw Enumeration .pdn-security.8.1.4 |
securityMgrFtpAccessThis is used to specify the ftp access to the device.rw Enumeration .pdn-security.8.1.5 |
securityMgrTrapAccessThis is used to specify the trap access to the device.
NOTE: the pdnDevTrapMgrTable should be used instead.rwdeprecated Enumeration .pdn-security.8.1.6 |
securityMgrRowStatusThe status of this table entry.rw RowStatus (SNMPv2-TC) .pdn-security.8.1.7 |
devSecuritySNMPMgrAccessThis object is used to either enable or disable
SNMP access to the system. When disabled the first check on any
incoming PDU is based on the UPD type of the datagram.
If it is an SNMP manager trying to access SNMP agent on the system
the access will be denied.rw Enumeration .pdn-security.9 |