Initial commitHEADmain

1 files changed, 481 insertions, 0 deletions

diff --git a/MIBS/fortinet/FORTINET-FORTIAUTHENTICATOR-MIB b/MIBS/fortinet/FORTINET-FORTIAUTHENTICATOR-MIB
new file mode 100644
index 0000000..31de7c4
--- /dev/null
+++ b/MIBS/fortinet/FORTINET-FORTIAUTHENTICATOR-MIB
@@ -0,0 +1,481 @@
+--
+-- MODULE-IDENTITY
+--  OrgName
+--    Fortinet, Inc.
+--  ContactInfo
+--     Technical Support
+--     e-mail: support@fortinet.com
+--     http://www.fortinet.com
+--
+FORTINET-FORTIAUTHENTICATOR-MIB DEFINITIONS ::= BEGIN
+
+IMPORTS
+	fnGenTrapMsg, FnIndex, fortinet
+		FROM FORTINET-CORE-MIB
+	MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
+		FROM SNMPv2-CONF
+	sysName
+		FROM SNMPv2-MIB
+	Gauge32, MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE
+		FROM SNMPv2-SMI
+	DisplayString, TEXTUAL-CONVENTION
+		FROM SNMPv2-TC;
+
+fnFortiAuthenticatorMib MODULE-IDENTITY
+	LAST-UPDATED "201901170000Z"
+	ORGANIZATION
+		"Fortinet Technologies, Inc."
+	CONTACT-INFO
+		"Technical Support
+		 email: support@fortinet.com
+		 http://www.fortinet.com
+		"
+	DESCRIPTION
+		"MIB module for Fortinet FortiAuthenticator devices"
+	REVISION	"202004160000Z"
+	DESCRIPTION
+		"Include RAID status"
+	REVISION	"201901170000Z"
+	DESCRIPTION
+		"Include Fsso user data and add facmodel information"
+	REVISION	"201506080000Z"
+	DESCRIPTION
+		"Include Radius proxy, high availability data"
+	REVISION	"201211050000Z"
+	DESCRIPTION
+		"Initial version of FORTINET-FORTIAUTHENTICATOR-MIB."
+	::= { fortinet 113 }
+
+
+--
+-- FortiAuthenticator MIB Textual Conventions (TC)
+--
+
+FacHaState ::= TEXTUAL-CONVENTION
+	STATUS  current
+	DESCRIPTION
+		"Enumerated type for FAC High Availability states"
+	SYNTAX  INTEGER {
+		unknownOrDetermining (1),
+		clusterPrimary (2),
+		clusterSecondary (3),
+		standalonePrimary (4),
+		loadBalancer (5),
+		disabled (255)
+	}
+
+
+--
+-- fortinet.fnFortiAuthenticatorMib
+--
+facTraps  OBJECT IDENTIFIER
+	::= { fnFortiAuthenticatorMib 0 }
+facSystem  OBJECT IDENTIFIER
+	::= { fnFortiAuthenticatorMib 1 }
+facHa  OBJECT IDENTIFIER
+	::= { facSystem 201 }
+facAuth  OBJECT IDENTIFIER
+	::= { facSystem 202 }
+
+facMIBConformance  OBJECT IDENTIFIER
+	::= { fnFortiAuthenticatorMib 600 }
+
+facModel OBJECT IDENTIFIER
+	::= { fnFortiAuthenticatorMib 100 }
+
+--
+-- fortinet.fnFortiAuthenticatorMib.facSystem
+--
+
+facSysModel  OBJECT-TYPE
+	SYNTAX          DisplayString
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "System model string"
+	::= { facSystem 1 }
+
+facSysSerial  OBJECT-TYPE
+	SYNTAX          DisplayString
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Device serial number"
+	::= { facSystem 2 }
+
+facSysVersion  OBJECT-TYPE
+	SYNTAX          DisplayString
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Device firmware version"
+	::= { facSystem 3 }
+
+facSysCpuUsage  OBJECT-TYPE
+	SYNTAX          Gauge32
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Instantaneous CPU usage"
+	::= { facSystem 4 }
+
+facSysMemUsage  OBJECT-TYPE
+	SYNTAX          Gauge32
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Instantaneous memory utilization"
+	::= { facSystem 5 }
+
+facSysLogDiskUsage  OBJECT-TYPE
+	SYNTAX          Gauge32
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Instantaneous log disk usage"
+	::= { facSystem 6 }
+
+
+-- fnFortiAuthenticatorMib.facSystem.facHa
+facHaCurrentStatus  OBJECT-TYPE
+	SYNTAX          FacHaState
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Instantaneous HA status for this node"
+	::= { facHa 1 }
+
+-- fnFortiAuthenticatorMib.facSystem.facAuth
+facAuthUserCount  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of local users"
+	::= { facAuth 1 }
+
+facAuthGroupCount  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of user groups"
+	::= { facAuth 2 }
+
+facFortiTokenCount  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of FortiTokens"
+	::= { facAuth 3 }
+
+facAuthUsersRemaining  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of local users that can still be added before reaching the table limit"
+	::= { facAuth 4 }
+
+facAuthGroupRemaining  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of user groups that can still be added before reaching the table limit"
+	::= { facAuth 5 }
+
+facFortiTokenRemaining  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of FortiTokens that can still be added before reaching the table limit"
+	::= { facAuth 6 }
+
+facRadiusNasCount  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius NAS"
+	::= { facAuth 7 }
+
+facRadiusNasRemaining  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius NAS that can still be added before reaching the table limit"
+	::= { facAuth 8 }
+
+facUserCertificateCount  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of user certificates"
+	::= { facAuth 9 }
+
+facRadiusLoginsTotal  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius logins since startup"
+	::= { facAuth 10 }
+
+facRadiusLogins5Mins  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius logins in the last 5 minutes"
+	::= { facAuth 11 }
+
+facRadiusFailuresTotal  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius login failures since startup"
+	::= { facAuth 12 }
+
+facRadiusFailures5Mins  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius login failures in the last 5 minutes"
+	::= { facAuth 13 }
+
+facRadiusAccountingTotal  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius accounting records since startup"
+	::= { facAuth 14 }
+
+facRadiusAccounting5Mins  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius accounting records in the last 5 minutes"
+	::= { facAuth 15 }
+
+facLdapLoginsTotal  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Ldap logins since startup"
+	::= { facAuth 16 }
+
+facLdapLogins5Mins  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Ldap logins in the last 5 minutes"
+	::= { facAuth 17 }
+
+facLdapFailuresTotal  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Ldap login failures since startup"
+	::= { facAuth 18 }
+
+facLdapFailures5Mins  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Ldap login failures in the last 5 minutes"
+	::= { facAuth 19 }
+
+facAuthEventsTotal  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of authentication events since startup"
+	::= { facAuth 20 }
+
+facAuthEvents5Mins  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of authentication events in the last 5 minutes"
+	::= { facAuth 21 }
+
+facAuthFailuresTotal  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of authentication failures since startup"
+	::= { facAuth 22 }
+
+facAuthFailures5Mins  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of authentication failures in the last 5 minutes"
+	::= { facAuth 23 }
+
+facRadiusProxyInTotal  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius accounting proxy requests received since startup"
+	::= { facAuth 24 }
+
+facRadiusProxyOutTotal  OBJECT-TYPE
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of Radius accounting proxy requests sent since startup"
+	::= { facAuth 25 }
+
+facFssoUserCount  OBJECT-TYPE 
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of signed-in fsso users"
+	::= { facAuth 26 }
+
+facFssoUserRemaining  OBJECT-TYPE 
+	SYNTAX          FnIndex
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "Number of fsso users can still signed in before reaching the table limit"
+	::= { facAuth 27 }
+
+facRaidStatus  OBJECT-TYPE 
+	SYNTAX          INTEGER {
+	                    none(0),     -- no raid detected or status unknown
+	                    ok(1),
+	                    degraded(2), -- at least one failed disk, but raid is still functioning
+	                    failed(3),   -- raid does not work any more, has to be deleted and re-created
+	                    initializing(4),
+	                    verifying(5),
+	                    rebuilding(6)
+	                }
+	MAX-ACCESS      read-only
+	STATUS          current
+	DESCRIPTION     "RAID status"
+	::= { facAuth 28 }
+
+--
+-- fnFortiAuthenticatorMib.facTraps
+--
+facTrapAuthUsersThreshold  NOTIFICATION-TYPE
+	OBJECTS         { facSysSerial, facAuthUsersRemaining }
+	STATUS          current
+	DESCRIPTION
+	    "The user table is nearly full."
+	::= { facTraps 100 }
+
+facTrapAuthGroupThreshold NOTIFICATION-TYPE
+	OBJECTS         { facSysSerial, facAuthGroupRemaining }
+	STATUS          current
+	DESCRIPTION
+	    "The user group table is nearly full."
+	::= { facTraps 101 }
+
+facTrapRadiusNasThreshold  NOTIFICATION-TYPE
+	OBJECTS         { facSysSerial, facRadiusNasRemaining }
+	STATUS          current
+	DESCRIPTION
+	    "The Radius NAS table is nearly full."
+	::= { facTraps 102 }
+
+facTrapAuthEventsThreshold  NOTIFICATION-TYPE
+	OBJECTS         { facSysSerial, facAuthEvents5Mins }
+	STATUS          current
+	DESCRIPTION
+	    "The Authentication request rate has exceded the configured threshhold."
+	::= { facTraps 103 }
+
+facTrapAuthFailureThreshold  NOTIFICATION-TYPE
+	OBJECTS         { facSysSerial, facAuthFailures5Mins }
+	STATUS          current
+	DESCRIPTION
+	    "The Authentication failure rate has exceded the configured threshhold."
+	::= { facTraps 104 }
+
+facTrapUserLockout  NOTIFICATION-TYPE
+	OBJECTS         { facSysSerial, sysName, fnGenTrapMsg }
+	STATUS          current
+	DESCRIPTION
+	    "A user has been locked out for repeated login failures."
+	::= { facTraps 105 }
+
+facTrapHAStatusChange  NOTIFICATION-TYPE
+	OBJECTS         { facSysSerial, sysName, facHaCurrentStatus, fnGenTrapMsg }
+	STATUS          current
+	DESCRIPTION
+	    "The FAC device's HA status has changed."
+	::= { facTraps 106 }
+
+facTrapHASyncActivityLow  NOTIFICATION-TYPE
+	OBJECTS         { facSysSerial, sysName, fnGenTrapMsg }
+	STATUS          current
+	DESCRIPTION
+	    "There has been low HA sync activity recently."
+	::= { facTraps 107 }
+
+facTrapRaidStatusChange  NOTIFICATION-TYPE
+	OBJECTS         { facSysSerial, facRaidStatus }
+	STATUS          current
+	DESCRIPTION
+	    "The FAC device's RAID status has changed."
+	::= { facTraps 108 }
+
+--
+-- fnFortiAuthenticatorMib.facMIBConformance
+--
+facSystemConformanceGroup  OBJECT-GROUP
+	OBJECTS         { facSysModel, facSysSerial, facSysVersion,
+	                  facSysCpuUsage, facSysMemUsage, facSysLogDiskUsage,
+	                  facAuthUserCount, facAuthGroupCount, facFortiTokenCount,
+	                  facAuthUsersRemaining, facAuthGroupRemaining, facFortiTokenRemaining,
+	                  facRadiusNasCount, facRadiusNasRemaining, facUserCertificateCount,
+	                  facRadiusLoginsTotal, facRadiusLogins5Mins, facRadiusFailuresTotal, 
+	                  facRadiusFailures5Mins, facRadiusAccountingTotal, facRadiusAccounting5Mins,
+	                  facLdapLoginsTotal, facLdapLogins5Mins, facLdapFailuresTotal,
+	                  facLdapFailures5Mins, facAuthEventsTotal, facAuthEvents5Mins,
+	                  facAuthFailuresTotal, facAuthFailures5Mins, facHaCurrentStatus,
+	                  facRadiusProxyInTotal, facRadiusProxyOutTotal,
+	                  facFssoUserCount, facFssoUserRemaining, facRaidStatus
+                          }
+	STATUS          current
+	DESCRIPTION     "Basic FortiAuthenticator system information"
+	::= { facMIBConformance 1 }
+
+facTrapsConformanceGroup  NOTIFICATION-GROUP
+	NOTIFICATIONS   { facTrapAuthUsersThreshold, facTrapAuthGroupThreshold,
+	                  facTrapRadiusNasThreshold, facTrapAuthEventsThreshold,
+	                  facTrapAuthFailureThreshold, facTrapUserLockout,
+	                  facTrapHAStatusChange, facTrapHASyncActivityLow,
+	                  facTrapRaidStatusChange }
+	STATUS          current
+	DESCRIPTION     "Event notifications."
+	::= { facMIBConformance 2 }
+
+facMIBCompliance  MODULE-COMPLIANCE
+	STATUS          current
+	DESCRIPTION     "Compliance statement for FortiAuthenticator MIB"
+	MODULE
+		GROUP   facSystemConformanceGroup
+		DESCRIPTION
+		    "This group is mandatory for all FortiAuthenticator appliances
+		    supporting this MIB."
+		GROUP   facTrapsConformanceGroup
+		DESCRIPTION
+		    "Traps are optional and may not be implemented on some
+		    devices."
+	::= { facMIBConformance 100 }
+
+-- facModel start
+
+facvm            OBJECT IDENTIFIER ::= { facModel  101 }
+facvmhv          OBJECT IDENTIFIER ::= { facModel  102 }
+facvmxen         OBJECT IDENTIFIER ::= { facModel  103 }
+facvmkvm         OBJECT IDENTIFIER ::= { facModel  104 }
+facdocker        OBJECT IDENTIFIER ::= { facModel  105 }
+fac2hd           OBJECT IDENTIFIER ::= { facModel  204 }
+fac2he           OBJECT IDENTIFIER ::= { facModel  205 }
+fac4hc           OBJECT IDENTIFIER ::= { facModel  303 }
+fac4he           OBJECT IDENTIFIER ::= { facModel  305 }
+fac1kc           OBJECT IDENTIFIER ::= { facModel  403 }
+fac1kd           OBJECT IDENTIFIER ::= { facModel  404 }
+fac2ke           OBJECT IDENTIFIER ::= { facModel  505 }
+fac3kd           OBJECT IDENTIFIER ::= { facModel  604 }
+fac3ke           OBJECT IDENTIFIER ::= { facModel  605 }
+fac3hf           OBJECT IDENTIFIER ::= { facModel  706 }
+fac8hf           OBJECT IDENTIFIER ::= { facModel  806 }
+
+
+-- facModel end
+
+
+END
+