diff options
Diffstat (limited to 'MIBS/linksys/LINKSYS-AAA')
| -rw-r--r-- | MIBS/linksys/LINKSYS-AAA | 3316 |
1 files changed, 3316 insertions, 0 deletions
diff --git a/MIBS/linksys/LINKSYS-AAA b/MIBS/linksys/LINKSYS-AAA new file mode 100644 index 0000000..a82e764 --- /dev/null +++ b/MIBS/linksys/LINKSYS-AAA @@ -0,0 +1,3316 @@ +LINKSYS-AAA DEFINITIONS ::= BEGIN
+
+-- Title: LINKSYS AAA Private Extension
+-- Version: 7.46
+-- Date: 01-Mar-2007
+-- 03-Jun-2003 Changed upper bound of rlRadiusGlobalDefaultDeadtime to 2000
+-- 31-Jul-2003 A new field rlRadiusServerUsage was added to rlRadiusServerEntry
+-- 31-Jul-2003 Group rlAAAEap was added
+-- 22-Sep-2003 Group rlTacacs was added
+-- 11-Nov-2004 Scalar rlAAAAuditingEnable
+-- 13-Dec-2004 MIBs for TIC support
+-- a. New fields were added:
+-- rlAAALineLockedState
+-- rlAAALineConsFailedLogins
+-- rlAAALinePasswordValidTime
+-- rlAAALinePasswordExpieryDate
+-- rlAAALocalLockedState
+-- rlAAALocalConsFailedLogins
+-- rlAAALocalPasswordValidTime
+-- rlAAALocalPasswordExpieryDate
+-- b. New scalars
+-- rlAAAMinPasswordLength
+-- rlAAAPasswordHistSize
+-- rlAAAPasswordHistHoldTime
+-- rlAAASuccLoginWriteToFile
+-- rlAAAUnlockUserName
+-- rlAAAUnlockSystemPassword
+-- c. New tables
+-- rlAAALocalLoginHistTable
+-- rlAAALinePassLoginHistTable
+-- rlAAASystemLoginHistTable
+-- rlAAASysPassStatTable
+-- rlAAALockedLineTable
+-- 07-Jul-2005 Added field rlAAALocalLoginMrid
+-- 30-Oct-2005 Added new table rlAAASystemPasswordVerificationAndSettingTable
+-- 14-Mar-2006 NimrodS Added fields rlAAAUserLoginDate And rlAAAUserLoginDurationMS
+-- to rlAAAUserTable
+-- 04-Jun-2006 Added new scalars
+-- rlAAAAccountingMngMethod
+-- rlAAAAccountingDot1xMethod
+--
+-- 11-Jan-2007 Added Inet support
+-- rlAAAUserTable
+-- rlAAALocalLoginHistTable
+-- rlAAALinePassLoginHistTable
+-- rlAAASystemLoginHistTable
+-- 10-Apr-2007 AlexeyK Added IPv6 support
+-- rlRadiusServerInetTable
+-- rlRadiusGlobalIPv6DefaultSource
+--
+-- 09-Aug-2009 vkuk : password complexity and local user password global aging
+-- Added:
+-- rlAAAPasswordComplexityEnabled
+-- rlAAAPasswordComplexityMinCharClasses
+-- rlAAAPasswordComplexityNotOldPasswordEnabled
+-- rlAAAPasswordComplexityCharRepeat
+-- rlAAAPasswordComplexityNotUserNameEnabled
+-- rlAAAPasswordComplexityNotManufacturerEnabled
+-- rlAAAPasswordGlobalAgingTime
+-- rlAAALocalUserPasswordVerificationAndSettingTable
+-- Changed rlAAALocalUserTable - added field :
+-- rlAAALocalPasswordCreationDate
+-- 21-Jun-2010 vkuk : system password global aging
+-- rlAAACreationDateSystemPasswordLevel15
+IMPORTS
+ rnd, rlRadius,rlAAAEap FROM LINKSYS-MIB
+ Unsigned32, IpAddress,Counter32,
+ MODULE-IDENTITY, OBJECT-TYPE FROM SNMPv2-SMI
+ TruthValue, RowStatus, DisplayString,
+ DateAndTime, TimeStamp,
+ TEXTUAL-CONVENTION FROM SNMPv2-TC
+ InetAddressType,InetAddress,InetAddressIPv6 FROM INET-ADDRESS-MIB; -- RFC2851
+
+rlAAA MODULE-IDENTITY
+ LAST-UPDATED "201006210000Z"
+ ORGANIZATION "Linksys LLC."
+ CONTACT-INFO
+ "www.linksys.com/business/support"
+ DESCRIPTION
+ "The private MIB module definition for Authentication, Authorization and Accounting
+ in Linksys devices."
+ REVISION "201006210000Z"
+ DESCRIPTION
+ "Added this MODULE-IDENTITY clause."
+ ::= { rnd 79 }
+
+RlAAAMethodtype ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION "Method list type."
+ SYNTAX INTEGER {
+ rlAAAMethodDeny(0),
+ rlAAAMethodLinePassword(1),
+ rlAAAMethodSystemPassword(2),
+ rlAAAMethodLocalUserTable(3),
+ rlAAAMethodRadius(4),
+ rlAAAMethodTacacs(5),
+ rlAAAMethodSucceed(6)
+}
+
+RlAAAServiceType ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION "Line service type.rlAAAServiceTypeDontCare must be the maximum value in the enum."
+ SYNTAX INTEGER {
+ rlAAAServiceTypeDontCare(0),
+ rlAAAServiceTypeTelnet(1),
+ rlAAAServiceTypeHttp(2),
+ rlAAAServiceTypeSsh(3),
+ rlAAAServiceTypeHttps(4),
+ rlAAAServiceTypeSnmp(5),
+ rlAAAServiceTypeSshPubkey(6)
+}
+
+RlAAALinePortType ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION "Line physical port type,the
+ rlAAAPortDontCare must be the maximum value in the enum."
+ SYNTAX INTEGER {
+ rlAAAPortDontCare(0),
+ rlAAAPortNetwork(1),
+ rlAAAPortConsole(2)
+}
+
+rlAAAMibVersion OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "MIB's version, the current version is 3. The difference in rlAAACreationDateSystemPasswordLevel15 and
+ rlAAALocalUserEntry."
+ ::= { rlAAA 1 }
+
+
+rlAAARetries OBJECT-TYPE
+ SYNTAX INTEGER (1..5)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Determines the number of retries for each method
+ (Radius, local passwords, local users table and
+ tacacs)."
+ ::= { rlAAA 2 }
+
+
+rlAAARadiusEnabled OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether AAA will use Radius. When to use
+ Radius exactly depends on its position in the
+ methods list. "
+ ::= { rlAAA 3 }
+
+rlAAATacacsEnabled OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether AAA will use Tacacs. When to use
+ Tacacs exactly depends on its position in the
+ methods list."
+ ::= { rlAAA 4 }
+
+rlAAALocalUserEnabled OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether AAA will use the local users table.
+ When to use the table exactly depends on its
+ position in the methods list. "
+ ::= { rlAAA 5 }
+
+rlAAASystemPasswordEnabled
+ OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether AAA will use the system password.
+ When to use the passwords exactly depends on its
+ position in the methods list. "
+ ::= { rlAAA 6 }
+
+rlAAALinePasswordEnabled OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether AAA will use the line password.
+ When to use the passwords exactly depends on its
+ position in the methods list. "
+ ::= { rlAAA 7 }
+
+rlAAAAlwaysSuccessEnabled OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether AAA will use the always success method.
+ When to use that method exactly depends on its
+ position in the methods list. "
+ ::= { rlAAA 8 }
+
+--
+-- suppoted methods
+--
+
+rlAAARadiusSupported OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "This mib show whether Radius is supported in AAA. If the
+ value is false Radius will not be used as an
+ authentication and accounting method. If the value
+ is true Radius will be used by AAA for authentication and
+ accounting if the the AAA was configured to do so
+ (by setting the appropriate mibs)."
+ ::= { rlAAA 9 }
+
+ rlAAATacacsSupported OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "This mib show whether Tacacs+ is supported in AAA. If the
+ value is false Tacacs+ will not be used as an
+ authentication and accounting method. If the value
+ is true Tacacs+ will be used by AAA for authentication and
+ accounting if the the AAA was configured to do so
+ (by setting the appropriate mibs)."
+ ::= { rlAAA 10 }
+
+rlAAALocalUserSupported OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "This mib show whether the local users db is supported in
+ AAA.If the value is false the local users db will not be
+ used as an authentication and accounting method. If the
+ value is true the local users db will be used by AAA for
+ authentication and accounting method if the the AAA was
+ configured to do so (by setting the appropriate mibs)."
+ ::= { rlAAA 11 }
+
+rlAAASystemPasswordSupported OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "This mib show whether system password is supported in AAA.
+ If the value is false system password will not be used as
+ an authentication and accounting method. If the value is
+ true the system password will be used by AAA for
+ authentication and accounting method if the the AAA was
+ configured to do so (by setting the appropriate mibs)."
+ ::= { rlAAA 12 }
+
+rlAAALinePasswordSupported OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "This mib show whether line password is supported in AAA.
+ If the value is false line password will not be used as an
+ authentication and accounting method. If the value is true
+ the line password will be used by AAA for authentication and
+ accounting method if the the AAA was configured
+ to do so (by setting the appropriate mibs)."
+ ::= { rlAAA 13 }
+
+rlAAALineAlwaysSuccessSupported OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "This mib show whether line always success method is
+ supported in AAA.If the value is false always success
+ method will not be used as an authentication and
+ accounting method. If the value is true the always
+ success method will be used by AAA for authentication and
+ accounting method if the the AAA was configured
+ to do so (by setting the appropriate mibs)."
+ ::= { rlAAA 14 }
+
+--
+-- method list table
+--
+
+
+rlAAAMethodListTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAAMethodListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table specifies all methods list per method name."
+ ::= { rlAAA 15 }
+
+rlAAAMethodListEntry OBJECT-TYPE
+ SYNTAX RlAAAMethodListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAAMethodListName}
+ ::= { rlAAAMethodListTable 1 }
+
+RlAAAMethodListEntry ::= SEQUENCE {
+ rlAAAMethodListName DisplayString,
+ rlAAAMethodType1 RlAAAMethodtype,
+ rlAAAMethodType2 RlAAAMethodtype,
+ rlAAAMethodType3 RlAAAMethodtype,
+ rlAAAMethodType4 RlAAAMethodtype,
+ rlAAAMethodType5 RlAAAMethodtype,
+ rlAAAMethodType6 RlAAAMethodtype,
+ rlAAAMethodType7 RlAAAMethodtype,
+ rlAAAMethodListStatus RowStatus
+}
+
+rlAAAMethodListName OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(3..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Line Method List Name"
+ ::= { rlAAAMethodListEntry 1 }
+
+rlAAAMethodType1 OBJECT-TYPE
+ SYNTAX RlAAAMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " first method type that will be used in the method
+ linked list."
+ ::= { rlAAAMethodListEntry 2 }
+
+rlAAAMethodType2 OBJECT-TYPE
+ SYNTAX RlAAAMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " second method type that will be used in the method
+ linked list."
+ ::= { rlAAAMethodListEntry 3 }
+
+
+rlAAAMethodType3 OBJECT-TYPE
+ SYNTAX RlAAAMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "3th method type that will be used in the method
+ linked list."
+ ::= { rlAAAMethodListEntry 4 }
+
+rlAAAMethodType4 OBJECT-TYPE
+ SYNTAX RlAAAMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " 4th method type that will be used in the method
+ linked list."
+ ::= { rlAAAMethodListEntry 5 }
+
+rlAAAMethodType5 OBJECT-TYPE
+ SYNTAX RlAAAMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "5th method type that will be used in the method
+ linked list."
+ ::= { rlAAAMethodListEntry 6 }
+
+
+rlAAAMethodType6 OBJECT-TYPE
+ SYNTAX RlAAAMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " 6th method type that will be used in the method
+ linked list."
+ ::= { rlAAAMethodListEntry 7 }
+
+
+rlAAAMethodType7 OBJECT-TYPE
+ SYNTAX RlAAAMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " 7th method type that will be used in the method
+ linked list."
+ ::= { rlAAAMethodListEntry 8 }
+
+rlAAAMethodListStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "method list status can be destroy or createAndGo"
+ ::= { rlAAAMethodListEntry 9 }
+
+
+
+--
+-- Line table
+--
+--- AAA MIBs for TIC support
+--- Added read only fields to show if a user is locked,
+--- password expiry date and number of consecutive failed logins.
+--- New read write field to set the expiry time for a password.
+--
+-- Line table
+--
+
+rlAAALineTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAALineEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table specifies all lines, their passwords and their
+ authorizations level .the table ordered lexicography by
+ the line name. when a new line is being authenticate the
+ search in line table is from the first entry in table
+ till it find the first entry that fit application input
+ line parameters ."
+ ::= { rlAAA 16 }
+
+rlAAALineEntry OBJECT-TYPE
+ SYNTAX RlAAALineEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAALinePortType,
+ rlAAAIfIndex,
+ rlAAAServiceType}
+::= { rlAAALineTable 1 }
+
+RlAAALineEntry ::= SEQUENCE {
+ rlAAALinePortType RlAAALinePortType,
+ rlAAAIfIndex Unsigned32,
+ rlAAAServiceType RlAAAServiceType,
+ rlAAALineMethodListNameLevel1 DisplayString,
+ rlAAALineMethodListNameLevel2 DisplayString,
+ rlAAALineMethodListNameLevel3 DisplayString,
+ rlAAALineMethodListNameLevel4 DisplayString,
+ rlAAALineMethodListNameLevel5 DisplayString,
+ rlAAALineMethodListNameLevel6 DisplayString,
+ rlAAALineMethodListNameLevel7 DisplayString,
+ rlAAALineMethodListNameLevel8 DisplayString,
+ rlAAALineMethodListNameLevel9 DisplayString,
+ rlAAALineMethodListNameLevel10 DisplayString,
+ rlAAALineMethodListNameLevel11 DisplayString,
+ rlAAALineMethodListNameLevel12 DisplayString,
+ rlAAALineMethodListNameLevel13 DisplayString,
+ rlAAALineMethodListNameLevel14 DisplayString,
+ rlAAALineMethodListNameLevel15 DisplayString,
+ rlAAALinePassword DisplayString,
+ rlAAALineStatus RowStatus,
+ rlAAALineLockedState INTEGER,
+ rlAAALineConsFailedLogins Counter32,
+ rlAAALinePasswordValidTime Unsigned32,
+ rlAAALinePasswordExpieryDate DisplayString
+}
+
+
+rlAAALinePortType OBJECT-TYPE
+ SYNTAX RlAAALinePortType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " the physical port type ."
+ ::= { rlAAALineEntry 1 }
+
+rlAAAIfIndex OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Identifies the ifindex for which this entry can be used.
+ If index 0 means don't care (can be used for all if indices).
+ For port type console the value could be only 0."
+ ::= { rlAAALineEntry 2}
+
+rlAAAServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "the service type"
+ ::= { rlAAALineEntry 3 }
+
+rlAAALineMethodListNameLevel1 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 1 .That name points to the method
+ list table .It is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 4 }
+
+rlAAALineMethodListNameLevel2 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 2 that name points to the method
+ list table it is the key in method list table .by that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 5 }
+
+rlAAALineMethodListNameLevel3 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 3 that name points to the method
+ list table it is the key in method list table .by that way
+ we can reach the methods list to be used for this line"
+ ::= { rlAAALineEntry 6}
+
+rlAAALineMethodListNameLevel4 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 4-that name points to the method
+ list table it is the key in method list table .by that way
+ we can reach the methods list to be used for this line"
+ ::= { rlAAALineEntry 7}
+
+rlAAALineMethodListNameLevel5 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 5 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 8}
+
+rlAAALineMethodListNameLevel6 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 6 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 9}
+
+rlAAALineMethodListNameLevel7 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 7 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 10}
+
+rlAAALineMethodListNameLevel8 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 8 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 11}
+
+rlAAALineMethodListNameLevel9 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 9 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 12}
+
+rlAAALineMethodListNameLevel10 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 10 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 13}
+
+rlAAALineMethodListNameLevel11 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 11 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 14}
+
+rlAAALineMethodListNameLevel12 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 12 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 15}
+
+rlAAALineMethodListNameLevel13 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 13 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 16}
+
+rlAAALineMethodListNameLevel14 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 14 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 17}
+
+ rlAAALineMethodListNameLevel15 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method list Name for level 15 that name points to the method
+ list table it is the key in method list table .in that way
+ we can reach the methods list to be used for that line"
+ ::= { rlAAALineEntry 18}
+
+rlAAALinePassword OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Line Password. Zero length password is considered as no
+ password. Password with zero length means that in case this
+ password is the method to be used a method fail is returned
+ and no other method is being used.
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAALineEntry 19 }
+
+rlAAALineStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Line status can be destroy or createAndGo"
+ ::= { rlAAALineEntry 20 }
+
+rlAAALineLockedState OBJECT-TYPE
+ SYNTAX INTEGER {
+ locked(0),
+ usable(1)
+ }
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Line locked status"
+ ::= { rlAAALineEntry 21 }
+
+rlAAALineConsFailedLogins OBJECT-TYPE
+ SYNTAX Counter32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Number of last consecutive failed logins"
+ ::= { rlAAALineEntry 22 }
+
+rlAAALinePasswordValidTime OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The period of time in days, during which the password,
+ is considered valid for login. Value of 0 means never expired.
+ The actual range is product specific.
+ After this time the system may allow limited number of logins
+ to change the password. "
+ DEFVAL { 0 }
+ ::= { rlAAALineEntry 23}
+
+rlAAALinePasswordExpieryDate OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "If Line password aging is active, the date on which
+ The current password will expire.
+ Otherwise zero size string"
+ ::= { rlAAALineEntry 24 }
+
+
+--
+-- local user db table
+--
+
+---_for rlAAALocalUserTable addition is in BOLD.
+--- Added read only fields to show if a user is locked,
+--- password expiry date and number of consecutive failed logins.
+--- New read write field to set the expiry time for a password.
+
+
+rlAAALocalUserTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAALocalUserEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table specifies all usernames, their passwords and
+ their authorizations."
+ ::= { rlAAA 17 }
+
+rlAAALocalUserEntry OBJECT-TYPE
+ SYNTAX RlAAALocalUserEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAALocalUserName}
+ ::= { rlAAALocalUserTable 1 }
+
+RlAAALocalUserEntry ::= SEQUENCE {
+ rlAAALocalUserName DisplayString,
+ rlAAALocalUserPassword DisplayString,
+ rlAAALocalUserPrivilage INTEGER,
+ rlAAALocalHostStatus RowStatus,
+ rlAAALocalLockedState INTEGER,
+ rlAAALocalConsFailedLogins Counter32,
+ rlAAALocalPasswordValidTime Unsigned32,
+ rlAAALocalPasswordExpieryDate DisplayString,
+ rlAAALocalPasswordCreationDate DisplayString
+}
+
+rlAAALocalUserName OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(1..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Local User Name"
+ ::= { rlAAALocalUserEntry 1 }
+
+rlAAALocalUserPassword OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Local User Password .The password can be null
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+
+ ::= { rlAAALocalUserEntry 2 }
+
+rlAAALocalUserPrivilage OBJECT-TYPE
+ SYNTAX INTEGER (1..15)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Local User Privilage"
+ ::= { rlAAALocalUserEntry 3 }
+
+rlAAALocalHostStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Local User status"
+ ::= { rlAAALocalUserEntry 4 }
+
+rlAAALocalLockedState OBJECT-TYPE
+ SYNTAX INTEGER {
+ locked(0),
+ usable(1)
+ }
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Local User locked status"
+ ::= { rlAAALocalUserEntry 5 }
+
+rlAAALocalConsFailedLogins OBJECT-TYPE
+ SYNTAX Counter32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Number of last consecutive failed logins"
+ ::= { rlAAALocalUserEntry 6 }
+
+rlAAALocalPasswordValidTime OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The period of time in days, during which the password,
+ is considered valid for login. Value of 0 means never expired.
+ The actual range is product specific.
+ After this time the system may allow limited number of logins
+ to change the password. "
+ DEFVAL { 0 }
+ ::= { rlAAALocalUserEntry 7 }
+
+rlAAALocalPasswordExpieryDate OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "If User password aging is active, the date on which
+ The current password will expire.
+ Otherwise zero size string"
+ ::= { rlAAALocalUserEntry 8 }
+
+rlAAALocalPasswordCreationDate OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The date on which the current password was created.
+ Otherwise zero size string"
+ ::= { rlAAALocalUserEntry 9 }
+
+--
+-- system password
+--
+
+rlAAASystemPasswordlevel1 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 1.
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 18 }
+
+rlAAASystemPasswordlevel2 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 2
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 19 }
+
+rlAAASystemPasswordlevel3 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 3
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 20 }
+
+rlAAASystemPasswordlevel4 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 4
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 21 }
+
+rlAAASystemPasswordlevel5 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 5
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 22 }
+
+rlAAASystemPasswordlevel6 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 6
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 23 }
+
+rlAAASystemPasswordlevel7 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 7
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 24 }
+
+rlAAASystemPasswordlevel8 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 8
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 25 }
+
+rlAAASystemPasswordlevel9 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 9
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 26 }
+
+rlAAASystemPasswordlevel10 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 10
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 27 }
+
+rlAAASystemPasswordlevel11 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 11
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 28 }
+
+rlAAASystemPasswordlevel12 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 12
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 29 }
+
+rlAAASystemPasswordlevel13 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 13
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 30 }
+
+rlAAASystemPasswordlevel14 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 14
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not not part of it"
+ ::= { rlAAA 31 }
+
+rlAAASystemPasswordlevel15 OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "system Password for level 15
+ allowed formats:
+ a. Display string starting with '$' for clear text
+ b. Encrypted password: starts with # sign followed by 32
+ octets representing Hex Decimal value(in the 0-9 a-f A-F
+ range)
+ the $ and # as first octet are a directive to indicate what
+ is the type of password and are not part of it"
+ ::= { rlAAA 32 }
+
+rlAAAUserTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAAUserEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table holds all current users that have been authenticated."
+ ::= { rlAAA 33 }
+
+rlAAAUserEntry OBJECT-TYPE
+ SYNTAX RlAAAUserEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAAUserIndex}
+ ::= { rlAAAUserTable 1 }
+
+RlAAAUserEntry ::= SEQUENCE {
+ rlAAAUserIndex Unsigned32,
+ rlAAAUserServiceType RlAAAServiceType,
+ rlAAAUserRemoteIpAddress IpAddress,
+ rlAAAUserName DisplayString,
+ rlAAAUserLevel Unsigned32,
+ rlAAAUserIfIndex Unsigned32,
+ rlAAAUserLoginDate DateAndTime,
+ rlAAAUserLoginDurationMS Unsigned32
+}
+
+rlAAAUserIndex OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "User Index"
+ ::= { rlAAAUserEntry 1 }
+
+rlAAAUserServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The service that the user uses. Service dont care is console
+ terminal."
+ ::= { rlAAAUserEntry 2 }
+
+rlAAAUserRemoteIpAddress OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address."
+ ::= { rlAAAUserEntry 3 }
+
+rlAAAUserName OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User Name"
+ ::= { rlAAAUserEntry 4 }
+
+rlAAAUserLevel OBJECT-TYPE
+ SYNTAX Unsigned32 (1..15)
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User level"
+ ::= { rlAAAUserEntry 5 }
+
+rlAAAUserIfIndex OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User if index."
+ ::= { rlAAAUserEntry 6 }
+
+rlAAAUserLoginDate OBJECT-TYPE
+ SYNTAX DateAndTime
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Date of use creation."
+ ::= { rlAAAUserEntry 7 }
+
+rlAAAUserLoginDurationMS OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Time in MS since user login."
+ ::= { rlAAAUserEntry 8 }
+
+rlAAATest OBJECT IDENTIFIER ::= { rlAAA 34 }
+
+rlAAATestPassword OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This variable enables the user supplying the correct code to use the
+ AAA test feature."
+ ::= {rlAAATest 1}
+
+rlAAATestUserTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAATestUserEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table enables a user to perform a simulation of authentiction."
+ ::= { rlAAATest 2 }
+
+rlAAATestUserEntry OBJECT-TYPE
+ SYNTAX RlAAATestUserEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "The row definition for this table."
+ INDEX { rlAAATestUserIndex}
+ ::= { rlAAATestUserTable 1 }
+
+RlAAATestUserEntry ::= SEQUENCE {
+ rlAAATestUserIndex Unsigned32,
+ rlAAATestPortType RlAAALinePortType,
+ rlAAATestIfIndex INTEGER,
+ rlAAATestServiceType RlAAAServiceType,
+ rlAAATestUserAuthenticationStatus INTEGER,
+ rlAAATestUserAuthenticationAction INTEGER,
+ rlAAATestUserInput DisplayString,
+ rlAAATestUserStatus RowStatus
+}
+
+rlAAATestUserIndex OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "User entry index (the number is used just to identify the user)."
+ ::= { rlAAATestUserEntry 1 }
+
+rlAAATestPortType OBJECT-TYPE
+ SYNTAX RlAAALinePortType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " the physical port type ."
+ ::= { rlAAATestUserEntry 2 }
+
+rlAAATestIfIndex OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " line ifIndex can configue to be zero witch means
+ Don't-care value"
+ ::= { rlAAATestUserEntry 3}
+
+rlAAATestServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "the service type"
+ ::= { rlAAATestUserEntry 4 }
+
+
+rlAAATestUserAuthenticationStatus OBJECT-TYPE
+ SYNTAX INTEGER {
+ needPassword(1),
+ needUsername(2),
+ success(3),
+ failure(4),
+ aborted(5),
+ deleted(6),
+ waiting(7),
+ usedNewMethod(8)
+ }
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "Shows the ststus of the operation and what is expected from the
+ 'user'."
+ ::= { rlAAATestUserEntry 5 }
+
+rlAAATestUserAuthenticationAction OBJECT-TYPE
+ SYNTAX INTEGER {
+ begin(1),
+ receivePassword(2),
+ receiveUsername(3),
+ abort(4),
+ delete(5),
+ continue(6)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "By setting this field the process moves from one state to another. On
+ creation the value must be begin.
+ When the value of rlAAATestUserAuthenticationStatus is needPassword
+ the value can be set to receivePassword or abort.
+ When the value of rlAAATestUserAuthenticationStatus is needUsername
+ the value can be set to receiveUsername or abort.
+ When the value of rlAAATestUserAuthenticationStatus is success or failure
+ the value can be set to delete or abort.
+ When the value of rlAAATestUserAuthenticationStatus is aborted the value
+ can be set to delete.
+ When the value of rlAAATestUserAuthenticationStatus is deleted the value
+ can not be set to any value.
+ When the value of rlAAATestUserAuthenticationStatus is waiting the value
+ can be set or abort."
+ ::= { rlAAATestUserEntry 6 }
+
+rlAAATestUserInput OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..160))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "If the acion was set to receivePassword than this field should hold
+ the value of the password.
+ If the action was set to receiveUsername than this field should hold
+ the value of the username. "
+ ::= { rlAAATestUserEntry 7 }
+
+rlAAATestUserStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Entry status. The entry can not be deleted. It will be deleted if
+ unchanged more than 2 minutes."
+ ::= { rlAAATestUserEntry 8 }
+
+---
+--- rlRadius
+---
+
+rlRadiusMibVersion OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "MIB's version, the current version is 2.
+ 1 - original version.
+ 2 - field rlRadiusServerUsage was added to rlRadiusServerEntry"
+ ::= { rlRadius 1 }
+
+rlRadiusGlobalDefaultTimeout OBJECT-TYPE
+ SYNTAX INTEGER (1..30)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum time (in seconds) to wait for this RADIUS
+ server to reply. This MIB is used if the value of the
+ field rlRadiusServerUseGlobalDefaultTimeout is false."
+ ::= { rlRadius 2 }
+
+rlRadiusGlobalDefaultRetries OBJECT-TYPE
+ SYNTAX INTEGER (1..15)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The number of times to try contacting this RADIUS server. This MIB
+ is used if the value of the field
+ rlRadiusServerUseGlobalDefaultRetries is false."
+ ::= { rlRadius 3 }
+
+
+rlRadiusGlobalDefaultDeadtime OBJECT-TYPE
+ SYNTAX INTEGER (0..2000)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Number of minutes that any RADIUS server is ignored after
+ it has failed. This MIB is used if the value of the field
+ rlRadiusServerUseGlobalDefaultDeadtime is false."
+ ::= { rlRadius 4 }
+
+rlRadiusGlobalDefaultKey OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..128))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Secret key to be shared with this RADIUS server. This MIB is
+ used if the value of the field rlRadiusServerUseGlobalDefaultKey
+ is false."
+ ::= { rlRadius 5 }
+
+
+rlRadiusGlobalDefaultSource OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "IPv4 address of the interface to use with this server.
+ A value of 0.0.0.0 for this object disables source
+ address specification. This MIB is used if the value of the
+ field rlRadiusServerUseGlobalDefaultSource is false."
+ ::= { rlRadius 6 }
+
+rlRadiusServerTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlRadiusServerEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "The (conceptual) table listing the RADIUS
+ servers with which the cliient shares a secret."
+ ::= { rlRadius 7 }
+
+rlRadiusServerEntry OBJECT-TYPE
+ SYNTAX RlRadiusServerEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry (conceptual row) representing a RADIUS
+ server with which the client shares
+ a secret."
+ INDEX { rlRadiusServerAddress,
+ rlRadiusServerAuthPortNumber,
+ rlRadiusServerAcctPortNumber}
+ ::= { rlRadiusServerTable 1 }
+
+RlRadiusServerEntry ::= SEQUENCE {
+ rlRadiusServerAddress IpAddress,
+ rlRadiusServerAuthPortNumber INTEGER,
+ rlRadiusServerAcctPortNumber INTEGER,
+ rlRadiusServerTimeout INTEGER,
+ rlRadiusServerRetries INTEGER,
+ rlRadiusServerDeadtime INTEGER,
+ rlRadiusServerUseGlobalDefaultKey TruthValue,
+ rlRadiusServerKey DisplayString,
+ rlRadiusServerSource IpAddress,
+ rlRadiusServerPriority INTEGER,
+ rlRadiusServerStatus RowStatus,
+ rlRadiusServerUsage INTEGER
+}
+
+rlRadiusServerAddress OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The IP address of the RADIUS server
+ referred to in this table entry."
+ ::= { rlRadiusServerEntry 1 }
+
+rlRadiusServerAuthPortNumber OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The UDP port the client is using to send authentication
+ requests to this server."
+ ::= { rlRadiusServerEntry 2 }
+
+rlRadiusServerAcctPortNumber OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The UDP port the client is using to send accounting
+ requests to this server."
+ ::= { rlRadiusServerEntry 3 }
+
+rlRadiusServerTimeout OBJECT-TYPE
+ SYNTAX INTEGER (0..30)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum time (in seconds) to wait for this RADIUS
+ server to reply. Value of 0 means that rlRadiusGlobalDefaultTimeout."
+ DEFVAL { 3 }
+ ::= { rlRadiusServerEntry 4 }
+
+rlRadiusServerRetries OBJECT-TYPE
+ SYNTAX INTEGER (0..15)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The number of times to try contacting this RADIUS server. Value of
+ 0 means that rlRadiusGlobalDefaultRetries."
+ DEFVAL { 3 }
+ ::= { rlRadiusServerEntry 5 }
+
+rlRadiusServerDeadtime OBJECT-TYPE
+ SYNTAX INTEGER (0..2001)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Number of minutes that any RADIUS server is ignored after
+ it has failed. Value of 2001 means that rlRadiusGlobalDefaultDeadtime
+ will be used."
+ DEFVAL { 0 }
+ ::= { rlRadiusServerEntry 6 }
+
+rlRadiusServerUseGlobalDefaultKey OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "If this field is set to true the value in field rlRadiusServerKey
+ is ignored and instead the value in the MIB
+ rlRadiusGlobalDefaultKey is used. Otherwise the value in
+ rlRadiusServerKey is used."
+ DEFVAL { false }
+ ::= { rlRadiusServerEntry 7 }
+
+rlRadiusServerKey OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..128))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Secret key to be shared with this RADIUS server."
+ DEFVAL { "" }
+ ::= { rlRadiusServerEntry 8 }
+
+rlRadiusServerSource OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "IP address of the interface to use with this server.
+ A value of 0.0.0.0 for this object disables source
+ address specification. Default value of 255.255.255.255
+ means that rlRadiusGlobalDefaultSource will be used."
+ ::= { rlRadiusServerEntry 9 }
+
+rlRadiusServerPriority OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Determines the order in which the servers will be used, when 0 is
+ the highest priority. If more than one server share the same
+ priority - they will be used in lexicgoraphic order
+ (the order of entries in this table)."
+ DEFVAL { 0 }
+ ::= { rlRadiusServerEntry 10 }
+
+rlRadiusServerStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION ""
+ ::= { rlRadiusServerEntry 11 }
+
+rlRadiusServerUsage OBJECT-TYPE
+ SYNTAX INTEGER {
+ userAuthentication(1),
+ portAuthentication(2),
+ all(3),
+ wirelessAuthentication (4)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Determines actions for which the radius server will be used."
+ DEFVAL { 3 }
+ ::= { rlRadiusServerEntry 12 }
+
+--
+-- IPv6 support
+--
+
+rlRadiusServerInetTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlRadiusServerInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "The (conceptual) table listing the RADIUS
+ servers with which the cliient shares a secret."
+ ::= { rlRadius 8 }
+
+rlRadiusServerInetEntry OBJECT-TYPE
+ SYNTAX RlRadiusServerInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry (conceptual row) representing a RADIUS
+ server with which the client shares
+ a secret."
+ INDEX { rlRadiusServerInetAddressType,
+ rlRadiusServerInetAddress,
+ rlRadiusServerInetAuthPortNumber,
+ rlRadiusServerInetAcctPortNumber}
+ ::= { rlRadiusServerInetTable 1 }
+
+RlRadiusServerInetEntry ::= SEQUENCE {
+ rlRadiusServerInetAddressType InetAddressType,
+ rlRadiusServerInetAddress InetAddress,
+ rlRadiusServerInetAuthPortNumber INTEGER,
+ rlRadiusServerInetAcctPortNumber INTEGER,
+ rlRadiusServerInetTimeout INTEGER,
+ rlRadiusServerInetRetries INTEGER,
+ rlRadiusServerInetDeadtime INTEGER,
+ rlRadiusServerInetUseGlobalDefaultKey TruthValue,
+ rlRadiusServerInetKey DisplayString,
+ rlRadiusServerInetSourceType InetAddressType,
+ rlRadiusServerInetSource InetAddress,
+ rlRadiusServerInetPriority INTEGER,
+ rlRadiusServerInetStatus RowStatus,
+ rlRadiusServerInetUsage INTEGER,
+ rlRadiusServerInetLastResponseTime TimeStamp
+}
+
+rlRadiusServerInetAddressType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The Inet address type of RADIUS server reffered to
+ in this table entry .IPv6Z type is not supported."
+ ::= { rlRadiusServerInetEntry 1}
+
+rlRadiusServerInetAddress OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The Inet address of the RADIUS server
+ referred to in this table entry.Only one instance
+ of specified address can be added at the same time."
+ ::= { rlRadiusServerInetEntry 2 }
+
+rlRadiusServerInetAuthPortNumber OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The UDP port the client is using to send authentication
+ requests to this server.The zero value can be used only
+ if rlRadiusServerInetAcctPortNumber value is not zero."
+ ::= { rlRadiusServerInetEntry 3 }
+
+rlRadiusServerInetAcctPortNumber OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The UDP port the client is using to send accounting
+ requests to this server.The zero value can be used only
+ if rlRadiusServerInetAuthPortNumber value is not zero."
+ ::= { rlRadiusServerInetEntry 4 }
+
+rlRadiusServerInetTimeout OBJECT-TYPE
+ SYNTAX INTEGER (0..30)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum time (in seconds) to wait for this RADIUS
+ server to reply. Value of 0 means that rlRadiusGlobalDefaultTimeout."
+ DEFVAL { 3 }
+ ::= { rlRadiusServerInetEntry 5 }
+
+rlRadiusServerInetRetries OBJECT-TYPE
+ SYNTAX INTEGER (0..15)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The number of times to try contacting this RADIUS server. Value of
+ 0 means that rlRadiusGlobalDefaultRetries."
+ DEFVAL { 3 }
+ ::= { rlRadiusServerInetEntry 6 }
+
+rlRadiusServerInetDeadtime OBJECT-TYPE
+ SYNTAX INTEGER (0..2001)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Number of minutes that any RADIUS server is ignored after
+ it has failed. Value of 2001 means that rlRadiusGlobalDefaultDeadtime
+ will be used."
+ DEFVAL { 0 }
+ ::= { rlRadiusServerInetEntry 7 }
+
+rlRadiusServerInetUseGlobalDefaultKey OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "If this field is set to true the value in field rlRadiusServerKey
+ is ignored and instead the value in the MIB
+ rlRadiusGlobalDefaultKey is used. Otherwise the value in
+ rlRadiusServerKey is used."
+ DEFVAL { false }
+ ::= { rlRadiusServerInetEntry 8 }
+
+rlRadiusServerInetKey OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..128))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Secret key to be shared with this RADIUS server."
+ DEFVAL { "" }
+ ::= { rlRadiusServerInetEntry 9 }
+
+rlRadiusServerInetSourceType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The rlRadiusServerInetSource address type.
+ IPv6Z type not supported"
+ ::= { rlRadiusServerInetEntry 10}
+
+rlRadiusServerInetSource OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Inet address of the interface to use with this server.
+ To provide backward compatibility the
+ value of 0.0.0.0 for this object will be used to
+ disables source address specification.
+ Default value of 255.255.255.255 means that
+ rlRadiusGlobalDefaultSource will be used for Ipv4
+ servers and rlRadiusIPv6GlobalDefaultSource
+ will be used for Ipv6 servers.IPv6Z type not supported.
+ Only valid IP address will be used.
+ Application will set default value."
+ ::= { rlRadiusServerInetEntry 11 }
+
+rlRadiusServerInetPriority OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Determines the order in which the servers will be used, when 0 is
+ the highest priority. If more than one server share the same
+ priority - they will be used in lexicgoraphic order
+ (the order of entries in this table)."
+ DEFVAL { 0 }
+ ::= { rlRadiusServerInetEntry 12 }
+
+rlRadiusServerInetStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION ""
+ ::= { rlRadiusServerInetEntry 13 }
+
+rlRadiusServerInetUsage OBJECT-TYPE
+ SYNTAX INTEGER {
+ userAuthentication(1),
+ portAuthentication(2),
+ all(3),
+ wirelessAuthentication (4)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Determines actions for which the radius server will be used.
+ WirelessAuthentication will be used if wireless is supported."
+ DEFVAL { 3 }
+ ::= { rlRadiusServerInetEntry 14 }
+
+rlRadiusServerInetLastResponseTime OBJECT-TYPE
+ SYNTAX TimeStamp
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "The value of sysUpTime at the time this server has response.
+ If there is no request to the server, this object contains a zero value."
+ ::= { rlRadiusServerInetEntry 15 }
+
+rlRadiusGlobalIPv6DefaultSource OBJECT-TYPE
+ SYNTAX InetAddressIPv6
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "IPv6 address of the interface to use with this server.
+ A NULL value for this object disables source
+ address specification. "
+ ::= { rlRadius 9 }
+
+--
+-- rlAAAEap
+--
+
+RlAAAEapMethodtype ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION "Method list type."
+ SYNTAX INTEGER {
+ rlAAAEapMethodDeny(0),
+ rlAAAEapMethodRadius(1),
+ rlAAAEapMethodSucceed(2)
+}
+
+rlAAAEapMethodListTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAAEapMethodListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table specifies all methods list per method name."
+ ::= { rlAAAEap 1 }
+
+rlAAAEapMethodListEntry OBJECT-TYPE
+ SYNTAX RlAAAEapMethodListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAAEapMethodListName}
+ ::= { rlAAAEapMethodListTable 1 }
+
+RlAAAEapMethodListEntry ::= SEQUENCE {
+ rlAAAEapMethodListName DisplayString,
+ rlAAAEapMethodType1 RlAAAEapMethodtype,
+ rlAAAEapMethodType2 RlAAAEapMethodtype,
+ rlAAAEapMethodType3 RlAAAEapMethodtype,
+ rlAAAEapMethodType4 RlAAAEapMethodtype,
+ rlAAAEapMethodType5 RlAAAEapMethodtype,
+ rlAAAEapMethodListStatus RowStatus
+}
+
+rlAAAEapMethodListName OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(3..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Line Method List Name"
+ ::= { rlAAAEapMethodListEntry 1 }
+
+rlAAAEapMethodType1 OBJECT-TYPE
+ SYNTAX RlAAAEapMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " first method type that will be used in the method
+ linked list."
+ ::= { rlAAAEapMethodListEntry 2 }
+
+rlAAAEapMethodType2 OBJECT-TYPE
+ SYNTAX RlAAAEapMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " second method type that will be used in the method
+ linked list."
+ ::= { rlAAAEapMethodListEntry 3 }
+
+rlAAAEapMethodType3 OBJECT-TYPE
+ SYNTAX RlAAAEapMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "3th method type that will be used in the method
+ linked list."
+ ::= { rlAAAEapMethodListEntry 4 }
+
+rlAAAEapMethodType4 OBJECT-TYPE
+ SYNTAX RlAAAEapMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " 4th method type that will be used in the method
+ linked list."
+ ::= { rlAAAEapMethodListEntry 5 }
+
+rlAAAEapMethodType5 OBJECT-TYPE
+ SYNTAX RlAAAEapMethodtype
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "5th method type that will be used in the method
+ linked list."
+ ::= { rlAAAEapMethodListEntry 6 }
+
+rlAAAEapMethodListStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "method list status can be destroy or createAndGo"
+ ::= { rlAAAEapMethodListEntry 7 }
+
+rlAAAEapCurrentMethodList OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(3..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies the method list that will be used for authentication."
+ ::= { rlAAAEap 2 }
+
+
+--- rlTacacs
+
+RlTacacsConnectionType ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION "Specifies TCP connection type between device and TACACS+ server"
+ SYNTAX INTEGER {
+ rlTacacsSingleConnection(0),
+ rlTacacsPerSessionConnection(1)
+}
+
+RlTacacsConnectionStatus ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION "Specifies the status of TCP connection
+ between device and TACACS+ server."
+ SYNTAX INTEGER {
+ rlTacacsConnected(0),
+ rlTacacsNotConnected(1)
+}
+
+rlTacacs OBJECT IDENTIFIER ::= { rlAAA 40 }
+
+rlTacacsMibVersion OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "MIB's version, the current version is 1."
+ ::= { rlTacacs 1 }
+
+rlTacacsGlobalDefaultTimeout OBJECT-TYPE
+ SYNTAX INTEGER (1..30)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum time (in seconds) to wait for TACACS+
+ server to reply. This MIB is used if the value of the
+ field rlTacacsServerTimeout is 0."
+ DEFVAL { 5 }
+ ::= { rlTacacs 2 }
+
+rlTacacsGlobalDefaultKey OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..128))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Secret key to be shared with TACACS+ server. This MIB is
+ used if the value of the field rlTacacsServerUseGlobalDefaultKey
+ is false."
+ DEFVAL { "" }
+ ::= { rlTacacs 3 }
+
+rlTacacsGlobalDefaultSourceIpInterface OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "IP address of the interface to use with TACACS+ server.
+ A value of 0.0.0.0 for this object disables source
+ address specification. This MIB is used if the value of the
+ field rlTacacsServerSource is 255.255.255.255."
+ DEFVAL { '00000000'H }
+ ::= { rlTacacs 6 }
+
+rlTacacsServerTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlTacacsServerEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "The (conceptual) table listing the TACACS+
+ servers with which the cliient shares a secret."
+ ::= { rlTacacs 7 }
+
+rlTacacsServerEntry OBJECT-TYPE
+ SYNTAX RlTacacsServerEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry (conceptual row) representing a TACACS+
+ server with which the client shares
+ a secret."
+ INDEX { rlTacacsServerAddress }
+ ::= { rlTacacsServerTable 1 }
+
+RlTacacsServerEntry ::= SEQUENCE {
+ rlTacacsServerAddress IpAddress,
+ rlTacacsServerPortNumber INTEGER,
+ rlTacacsServerConnectionType RlTacacsConnectionType,
+ rlTacacsServerConnectionStatus RlTacacsConnectionStatus,
+ rlTacacsServerTimeout INTEGER,
+ rlTacacsServerUseGlobalDefaultKey TruthValue,
+ rlTacacsServerKey DisplayString,
+ rlTacacsServerSourceIpInterface IpAddress,
+ rlTacacsServerPriority INTEGER,
+ rlTacacsServerRowStatus RowStatus
+}
+
+rlTacacsServerAddress OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The IP address of the TACACS+ server
+ referred to in this table entry."
+ ::= { rlTacacsServerEntry 1 }
+
+rlTacacsServerPortNumber OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The TCP port the client establishes connections with this server."
+ DEFVAL { 49 }
+ ::= { rlTacacsServerEntry 2 }
+
+rlTacacsServerConnectionType OBJECT-TYPE
+ SYNTAX RlTacacsConnectionType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Specifies TCP connection type between device and TACACS+ server.
+ Either a single open connection between device and server
+ (rlTacacsSingleConnection), or open/close connection per
+ communication session (rlTacacsPerSessionConnection)."
+ DEFVAL { rlTacacsPerSessionConnection }
+ ::= { rlTacacsServerEntry 3 }
+
+rlTacacsServerConnectionStatus OBJECT-TYPE
+ SYNTAX RlTacacsConnectionStatus
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "Specifies status TCP connection type between device and TACACS+ server."
+ DEFVAL { rlTacacsConnected }
+ ::= { rlTacacsServerEntry 4 }
+
+rlTacacsServerTimeout OBJECT-TYPE
+ SYNTAX INTEGER (0..30)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum time (in seconds) to wait for this TACACS+ server to reply.
+ Value of 0 means that rlTacacsGlobalDefaultTimeout value is used."
+ DEFVAL { 5 }
+ ::= { rlTacacsServerEntry 5 }
+
+rlTacacsServerUseGlobalDefaultKey OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "If this field is set to true the value in field rlTacacsServerKey
+ is ignored and instead the value in the MIB
+ rlTacacsGlobalDefaultKey is used. Otherwise the value in
+ rlTacacsServerKey is used."
+ DEFVAL { false }
+ ::= { rlTacacsServerEntry 6 }
+
+rlTacacsServerKey OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..128))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Secret key to be shared with this TACACS+ server."
+ DEFVAL { "" }
+ ::= { rlTacacsServerEntry 7 }
+
+rlTacacsServerSourceIpInterface OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "IP address of the interface to use with this server.
+ A value of 0.0.0.0 for this object disables source
+ address specification. Value of 255.255.255.255 means that
+ rlTacacsGlobalDefaultSourceIpInterface will be used."
+ DEFVAL { '00000000'H }
+ ::= { rlTacacsServerEntry 8 }
+
+rlTacacsServerPriority OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Determines the order in which the TACACS+ servers will be used,
+ when 0 is the highest priority. If more than one server share the
+ same priority - they will be used in lexicgoraphic order
+ (the order of entries in this table)."
+ DEFVAL { 0 }
+ ::= { rlTacacsServerEntry 9 }
+
+rlTacacsServerRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION ""
+ ::= { rlTacacsServerEntry 10 }
+
+
+rlTacacsGlobalDefaultSourceIPv6Interface OBJECT-TYPE
+ SYNTAX InetAddressIPv6
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "IP address of the interface to use with TACACS+ server.
+ A NULL for this object disables source
+ address specification. This MIB is used if the value of the
+ field rlTacacsServerInetSourceInterface is 255.255.255.255."
+ DEFVAL { '0000000000000000'H }
+ ::= { rlTacacs 8 }
+
+
+rlTacacsServerInetTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlTacacsServerInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "The (conceptual) table listing the TACACS+
+ servers with which the cliient shares a secret."
+ ::= { rlTacacs 9 }
+
+rlTacacsServerInetEntry OBJECT-TYPE
+ SYNTAX RlTacacsServerInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry (conceptual row) representing a TACACS+
+ server with which the client shares
+ a secret."
+ INDEX { rlTacacsServerInetAddressType, rlTacacsServerInetAddress }
+ ::= { rlTacacsServerInetTable 1 }
+
+RlTacacsServerInetEntry ::= SEQUENCE {
+ rlTacacsServerInetAddressType InetAddressType,
+ rlTacacsServerInetAddress InetAddress,
+ rlTacacsServerInetPortNumber INTEGER,
+ rlTacacsServerInetConnectionType RlTacacsConnectionType,
+ rlTacacsServerInetConnectionStatus RlTacacsConnectionStatus,
+ rlTacacsServerInetTimeout INTEGER,
+ rlTacacsServerInetUseGlobalDefaultKey TruthValue,
+ rlTacacsServerInetKey DisplayString,
+ rlTacacsServerInetSourceInterfaceType InetAddressType,
+ rlTacacsServerInetSourceInterface InetAddress,
+ rlTacacsServerInetPriority INTEGER,
+ rlTacacsServerInetRowStatus RowStatus
+}
+
+rlTacacsServerInetAddressType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The Inet address type of TACACS+ server reffered to
+ in this table entry .IPv6Z type is not supported."
+ ::= { rlTacacsServerInetEntry 1 }
+
+
+rlTacacsServerInetAddress OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The Inet Address address of the TACACS+ server
+ referred to in this table entry."
+ ::= { rlTacacsServerInetEntry 2 }
+
+rlTacacsServerInetPortNumber OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The TCP port the client establishes connections with this server."
+ DEFVAL { 49 }
+ ::= { rlTacacsServerInetEntry 3 }
+
+rlTacacsServerInetConnectionType OBJECT-TYPE
+ SYNTAX RlTacacsConnectionType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Specifies TCP connection type between device and TACACS+ server.
+ Either a single open connection between device and server
+ (rlTacacsSingleConnection), or open/close connection per
+ communication session (rlTacacsPerSessionConnection)."
+ DEFVAL { rlTacacsPerSessionConnection }
+ ::= { rlTacacsServerInetEntry 4 }
+
+rlTacacsServerInetConnectionStatus OBJECT-TYPE
+ SYNTAX RlTacacsConnectionStatus
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "Specifies status TCP connection type between device and TACACS+ server."
+ DEFVAL { rlTacacsConnected }
+ ::= { rlTacacsServerInetEntry 5 }
+
+rlTacacsServerInetTimeout OBJECT-TYPE
+ SYNTAX INTEGER (0..30)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum time (in seconds) to wait for this TACACS+ server to reply.
+ Value of 0 means that rlTacacsGlobalDefaultTimeout value is used."
+ DEFVAL { 5 }
+ ::= { rlTacacsServerInetEntry 6 }
+
+rlTacacsServerInetUseGlobalDefaultKey OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "If this field is set to true the value in field rlTacacsServerKey
+ is ignored and instead the value in the MIB
+ rlTacacsGlobalDefaultKey is used. Otherwise the value in
+ rlTacacsServerKey is used."
+ DEFVAL { false }
+ ::= { rlTacacsServerInetEntry 7 }
+
+rlTacacsServerInetKey OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..128))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Secret key to be shared with this TACACS+ server."
+ DEFVAL { "" }
+ ::= { rlTacacsServerInetEntry 8 }
+
+rlTacacsServerInetSourceInterfaceType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The Inet address type of the interface to use with this server."
+ ::= { rlTacacsServerInetEntry 9 }
+
+rlTacacsServerInetSourceInterface OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Inet address of the interface to use with this server.
+ A value of NULL for this object disables source
+ address specification for this server.
+ A value of 255.255.255.255 maens that the global default
+ rlTacacsGlobalDefaultSourceIpInterface or
+ rlTacacsGlobalDefaultSourceIPv6Interface values are used."
+ ::= { rlTacacsServerInetEntry 10 }
+
+rlTacacsServerInetPriority OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Determines the order in which the TACACS+ servers will be used,
+ when 0 is the highest priority. If more than one server share the
+ same priority - they will be used in lexicgoraphic order
+ (the order of entries in this table)."
+ DEFVAL { 0 }
+ ::= { rlTacacsServerInetEntry 11 }
+
+rlTacacsServerInetRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION ""
+ ::= { rlTacacsServerInetEntry 12 }
+
+
+--- AAA Login auditing control (SysLog)
+
+rlAAAAuditingEnable OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Controls whether SysLog messages
+ should be issued on login events"
+ DEFVAL { true }
+ ::= { rlAAA 41 }
+
+rlAAAMinPasswordLength OBJECT-TYPE
+ SYNTAX INTEGER (0..64)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The minimum length of password for local user authentication
+ defined in field rlAAALocalUserPassword in rlAAALocalUserTable.
+ The value applies only to new or updated user passwords.
+ In actual implementation the range may be reduced to (0 | N-64),
+ where N is a platform dependent (for TIC compatibility N=8) "
+ DEFVAL { 0 }
+ ::= { rlAAA 42 }
+
+--- Password history size
+rlAAAPasswordHistSize OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The number of most recent password,
+ previously defined for Local User Table, Line Table,
+ System Password Table for specific entity.
+ This list used for password reusing prevention.
+ Value of 0 means none. Changing the value
+ does not cause the loss of history.
+ History Max size is product specific."
+ DEFVAL { 0 }
+ ::= { rlAAA 43 }
+
+--- Password history hold time
+
+rlAAAPasswordHistHoldTime OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The time in day, which an old password
+ may be used in password history check.
+ Changing the value does not cause the
+ loss of history."
+
+ DEFVAL { 0 }
+ ::= { rlAAA 44 }
+
+--- controls wether successful logins are written to file
+
+rlAAASuccLoginWriteToFile OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Controls whether successful logins are
+ written to login file"
+ DEFVAL { true }
+ ::= { rlAAA 45 }
+
+
+--- Read-only table for successful login history - Local Users
+
+rlAAALocalLoginHistTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAALocalLoginHistEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table holds successful login history
+ for all users. This table is read-only."
+ ::= { rlAAA 46 }
+
+rlAAALocalLoginHistEntry OBJECT-TYPE
+ SYNTAX RlAAALocalLoginHistEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAALocalLoginHistName,
+ rlAAALocalLoginHistIndex}
+ ::= { rlAAALocalLoginHistTable 1 }
+
+RlAAALocalLoginHistEntry ::= SEQUENCE {
+ rlAAALocalLoginHistName DisplayString,
+ rlAAALocalLoginHistIndex Unsigned32,
+ rlAAALocalLoginHistServiceType RlAAAServiceType,
+ rlAAALocalLoginHistRemoteIpAddress IpAddress,
+ rlAAALocalLoginHistLocalIpAddress IpAddress,
+ rlAAALocalLoginDateTime DisplayString,
+ rlAAALocalLoginMrid Unsigned32
+}
+
+rlAAALocalLoginHistName OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User Name"
+ ::= { rlAAALocalLoginHistEntry 1 }
+
+rlAAALocalLoginHistIndex OBJECT-TYPE
+ SYNTAX Unsigned32 (1..10)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "Index in History for specific user.
+ Lower number means more recent login."
+ ::= { rlAAALocalLoginHistEntry 2 }
+
+rlAAALocalLoginHistServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The service that the user uses.
+ Service don't care is console terminal."
+ ::= { rlAAALocalLoginHistEntry 3 }
+
+rlAAALocalLoginHistRemoteIpAddress OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address."
+ ::= { rlAAALocalLoginHistEntry 4 }
+
+rlAAALocalLoginHistLocalIpAddress OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "local Ip Address on login."
+ ::= { rlAAALocalLoginHistEntry 5 }
+
+rlAAALocalLoginDateTime OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Date and time in the SysLog Format:
+ DD-MMM-YYYY HH:MM:SS"
+ ::= { rlAAALocalLoginHistEntry 6 }
+
+ rlAAALocalLoginMrid OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Mrid - indicates to which instance the connection was established "
+ ::= { rlAAALocalLoginHistEntry 7 }
+
+
+--- Read-only table for successful login history - Line passwords
+
+rlAAALinePassLoginHistTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAALinePassLoginHistEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table holds successful login history
+ for Line passwords. This table is read-only."
+ ::= { rlAAA 47 }
+
+rlAAALinePassLoginHistEntry OBJECT-TYPE
+ SYNTAX RlAAALinePassLoginHistEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX {rlAAALinePassLoginHistPortType,
+ rlAAALinePassLoginHistIfIndex,
+ rlAAALinePassLoginHistServiceType,
+ rlAAALinePassLoginHistIndex }
+ ::= { rlAAALinePassLoginHistTable 1 }
+
+RlAAALinePassLoginHistEntry ::= SEQUENCE {
+ rlAAALinePassLoginHistPortType RlAAALinePortType,
+ rlAAALinePassLoginHistIfIndex Unsigned32,
+ rlAAALinePassLoginHistServiceType RlAAAServiceType,
+ rlAAALinePassLoginHistIndex Unsigned32,
+ rlAAALinePassLoginHistActServiceType RlAAAServiceType,
+ rlAAALinePassLoginHistRemoteIpAddress IpAddress,
+ rlAAALinePassLoginHistLocalIpAddress IpAddress,
+ rlAAALinePassLoginDateTime DisplayString ,
+ rlAAALinePassLoginMrid Unsigned32
+}
+
+
+rlAAALinePassLoginHistPortType OBJECT-TYPE
+ SYNTAX RlAAALinePortType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " the physical port type."
+ ::= { rlAAALinePassLoginHistEntry 1 }
+
+rlAAALinePassLoginHistIfIndex OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Identifies the ifindex for which this entry can be used.
+ If index 0 means don't care
+ (can be used for all if indices).
+ For port type console the value could be only 0."
+ ::= { rlAAALinePassLoginHistEntry 2}
+
+rlAAALinePassLoginHistServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "the service type"
+ ::= { rlAAALinePassLoginHistEntry 3 }
+
+rlAAALinePassLoginHistIndex OBJECT-TYPE
+ SYNTAX Unsigned32 (1..10)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "Index in History for specific user.
+ Lower number means more recent login."
+ ::= { rlAAALinePassLoginHistEntry 4 }
+
+rlAAALinePassLoginHistActServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The service that the user uses.
+ Service don't care is console terminal."
+ ::= { rlAAALinePassLoginHistEntry 5 }
+
+rlAAALinePassLoginHistRemoteIpAddress OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address."
+ ::= { rlAAALinePassLoginHistEntry 6 }
+
+rlAAALinePassLoginHistLocalIpAddress OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "local Ip Address on login."
+ ::= { rlAAALinePassLoginHistEntry 7 }
+
+rlAAALinePassLoginDateTime OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Date and time in the SysLog Format:
+ DD-MMM-YYYY HH:MM:SS"
+ ::= { rlAAALinePassLoginHistEntry 8 }
+
+
+rlAAALinePassLoginMrid OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Mrid - indicates to which instance the connection was established "
+ ::= { rlAAALinePassLoginHistEntry 9 }
+
+--- Read-only table for successful login history - System Passwords
+
+rlAAASystemLoginHistTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAASystemLoginHistEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table holds successful login history
+ for system passwords. This table is read-only."
+ ::= { rlAAA 48 }
+
+rlAAASystemLoginHistEntry OBJECT-TYPE
+ SYNTAX RlAAASystemLoginHistEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAASystemLoginHistLevel,
+ rlAAASystemLoginHistIndex}
+ ::= { rlAAASystemLoginHistTable 1 }
+
+RlAAASystemLoginHistEntry ::= SEQUENCE {
+ rlAAASystemLoginHistLevel INTEGER,
+ rlAAASystemLoginHistIndex Unsigned32,
+ rlAAASystemLoginHistServiceType RlAAAServiceType,
+ rlAAASystemLoginHistRemoteIpAddress IpAddress,
+ rlAAASystemLoginHistLocalIpAddress IpAddress,
+ rlAAASystemLoginDateTime DisplayString,
+ rlAAASystemLoginMrid Unsigned32
+}
+
+rlAAASystemLoginHistLevel OBJECT-TYPE
+ SYNTAX INTEGER (1..15)
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User Name"
+ ::= { rlAAASystemLoginHistEntry 1 }
+
+rlAAASystemLoginHistIndex OBJECT-TYPE
+ SYNTAX Unsigned32 (1..10)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "Index in History for specific user.
+ Lower number means more recent login."
+ ::= { rlAAASystemLoginHistEntry 2 }
+
+rlAAASystemLoginHistServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The service that the user uses.
+ Service don't care is console terminal."
+ ::= { rlAAASystemLoginHistEntry 3 }
+
+rlAAASystemLoginHistRemoteIpAddress OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address."
+ ::= { rlAAASystemLoginHistEntry 4 }
+
+rlAAASystemLoginHistLocalIpAddress OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "local Ip Address on login."
+ ::= { rlAAASystemLoginHistEntry 5 }
+
+rlAAASystemLoginDateTime OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Date and time in the SysLog Format:
+ DD-MMM-YYYY HH:MM:SS"
+ ::= { rlAAASystemLoginHistEntry 6 }
+
+rlAAASystemLoginMrid OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Mrid - indicates to which instance the connection was established "
+ ::= { rlAAASystemLoginHistEntry 7 }
+
+
+--
+-- System Passwords status table
+--
+rlAAASysPassStatTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAASysPassStatEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table specifies all system password and
+ their security properties: is password locked
+ due to wrong password, when and how it was locked
+ or last unsuccessful login information, expiry date
+ of the password."
+ ::= { rlAAA 49 }
+
+rlAAASysPassStatEntry OBJECT-TYPE
+ SYNTAX RlAAASysPassStatEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAASysPassStatLevel}
+::= { rlAAASysPassStatTable 1 }
+
+RlAAASysPassStatEntry ::= SEQUENCE {
+ rlAAASysPassStatLevel INTEGER,
+ rlAAASysPassStatLockedState INTEGER,
+ rlAAASysPassStatConsFailedLogins Counter32,
+ rlAAASysPassStatPasswordValidTime Unsigned32,
+ rlAAASysPassStatPasswordExpieryDate DisplayString
+}
+
+rlAAASysPassStatLevel OBJECT-TYPE
+ SYNTAX INTEGER (1..15)
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "System password level"
+ ::= { rlAAASysPassStatEntry 1 }
+
+rlAAASysPassStatLockedState OBJECT-TYPE
+ SYNTAX INTEGER {
+ locked(0),
+ usable(1)
+ }
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "System password locked status"
+ ::= { rlAAASysPassStatEntry 2 }
+
+rlAAASysPassStatConsFailedLogins OBJECT-TYPE
+ SYNTAX Counter32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Number of last consecutive failed logins"
+ ::= { rlAAASysPassStatEntry 3 }
+
+
+rlAAASysPassStatPasswordValidTime OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The period of time in days, during which the password,
+ is considered valid for login. Value of 0 means never expired.
+ The actual range is product specific.
+ After this time the system may allow limited number of logins
+ to change the password. "
+ DEFVAL { 0 }
+ ::= { rlAAASysPassStatEntry 4 }
+
+rlAAASysPassStatPasswordExpieryDate OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "If System password aging is active, the date,
+ on which the current password will expire.
+ Otherwise zero size string"
+ ::= { rlAAASysPassStatEntry 5 }
+
+--- Number of failures before lock-out (1-5, 0 for disable)
+
+
+rlAAAMaxNumLogAttmpts OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The number of consecutive unsuccessful login attempts
+ before user is locked. Value of 0 means no limit. The actual range is
+ product specific. TIC requirement is 3."
+ DEFVAL { 0 }
+ ::= { rlAAA 50 }
+
+
+--
+-- Unlock user action scalar
+--
+
+rlAAAUnlockUserName OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(0..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "An action MIB variable setting with value
+ of Local User Name will unlock this user.
+ The value of this variable is not saved to
+ non volatile storage. Read of this variable
+ always returns zero length display string."
+ ::= { rlAAA 51 }
+
+
+
+--
+-- Unlock user system passwords
+--
+
+rlAAAUnlockSystemPassword OBJECT-TYPE
+ SYNTAX INTEGER (0..15)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "An action MIB variable setting with value
+ of Level will unlock the system password
+ for this level. The value of this variable
+ is not saved to non volatile storage.
+ Read of this variable always returns zero.
+ Zero (0) does no action."
+ ::= { rlAAA 52 }
+
+--
+-- Locked lines table
+--
+
+rlAAALockedLineTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAALockedLineEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table specifies lines statuses.
+ Users cannot access the product from
+ remote based on a password of the locked line.
+ This table enables to unlock lines."
+ ::= { rlAAA 53 }
+
+
+rlAAALockedLineEntry OBJECT-TYPE
+ SYNTAX RlAAALockedLineEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAALockedLinePortType,
+ rlAAALockedLineIfIndex,
+ rlAAALockedLineServiceType}
+::= { rlAAALockedLineTable 1 }
+
+RlAAALockedLineEntry ::= SEQUENCE {
+ rlAAALockedLinePortType RlAAALinePortType,
+ rlAAALockedLineIfIndex Unsigned32,
+ rlAAALockedLineServiceType RlAAAServiceType,
+ rlAAALockedLineStatus INTEGER
+}
+
+rlAAALockedLinePortType OBJECT-TYPE
+ SYNTAX RlAAALinePortType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " the physical port type ."
+ ::= { rlAAALockedLineEntry 1 }
+
+rlAAALockedLineIfIndex OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Identifies the ifindex for which this entry can be used.
+ If index 0 means don't care (can be used for all if indices).
+ For port type console the value could be only 0."
+ ::= { rlAAALockedLineEntry 2}
+
+rlAAALockedLineServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "the service type"
+ ::= { rlAAALockedLineEntry 3 }
+
+rlAAALockedLineStatus OBJECT-TYPE
+ SYNTAX INTEGER {
+ locked(0),
+ usable(1)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "The entry exists only if a line exist.
+ Setting this field to value usable results in
+ resetting the password failure counter,
+ and unlock a locked user."
+ ::= { rlAAALockedLineEntry 4 }
+
+--
+-- SystemPasswordVerificationAndSetting Table
+--
+
+rlAAASystemPasswordVerificationAndSettingTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAASystemPasswordVerificationAndSettingEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table specifies per every system level, old and new passwords.
+ Serves for verification the old password and setting a new password."
+ ::= { rlAAA 54 }
+
+rlAAASystemPasswordVerificationAndSettingEntry OBJECT-TYPE
+ SYNTAX RlAAASystemPasswordVerificationAndSettingEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row of system password verification and setting table."
+ INDEX { rlAAASystemPasswordSettingPrivilegeLevel}
+ ::= { rlAAASystemPasswordVerificationAndSettingTable 1 }
+
+RlAAASystemPasswordVerificationAndSettingEntry ::= SEQUENCE {
+ rlAAASystemPasswordSettingPrivilegeLevel INTEGER,
+ rlAAASystemPasswordVerificationOldPassword DisplayString,
+ rlAAASystemPasswordSettingNewPassword DisplayString,
+ rlAAASystemPasswordConfirmNewPassword DisplayString
+}
+
+rlAAASystemPasswordSettingPrivilegeLevel OBJECT-TYPE
+ SYNTAX INTEGER (1..15)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "System password Privelege Level to be set."
+ ::= { rlAAASystemPasswordVerificationAndSettingEntry 1 }
+
+rlAAASystemPasswordVerificationOldPassword OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Old system password to be verified."
+
+ ::= { rlAAASystemPasswordVerificationAndSettingEntry 2 }
+
+rlAAASystemPasswordSettingNewPassword OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "New system password to be set."
+
+ ::= { rlAAASystemPasswordVerificationAndSettingEntry 3 }
+
+rlAAASystemPasswordConfirmNewPassword OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "New system password to be confirmed."
+
+ ::= { rlAAASystemPasswordVerificationAndSettingEntry 4 }
+
+
+--
+-- Accounting
+--
+
+RlAAAAccountingMethod ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION "Protocols, used for accounting."
+ SYNTAX INTEGER {
+ none(1),
+ radius(2),
+ tacacs(3)
+}
+
+rlAAAAccountingMngMethod OBJECT-TYPE
+ SYNTAX RlAAAAccountingMethod
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method, used for accounting of management sessions,
+ none denotes Accounting is disabled."
+ ::= { rlAAA 55 }
+
+rlAAAAccountingDot1xMethod OBJECT-TYPE
+ SYNTAX RlAAAAccountingMethod
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Method, used for accounting of 802.1x sessions,
+ none denotes Accounting is disabled."
+ ::= { rlAAA 56 }
+
+-- INET support MIBS
+
+rlAAAUserInetTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAAUserInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table holds all current users that have been authenticated.
+ it coexist with rlAAAUserTable to support IPv4 and IPv6"
+ ::= { rlAAA 57 }
+
+rlAAAUserInetEntry OBJECT-TYPE
+ SYNTAX RlAAAUserInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAAUserInetIndex}
+ ::= { rlAAAUserInetTable 1 }
+
+RlAAAUserInetEntry ::= SEQUENCE {
+ rlAAAUserInetIndex Unsigned32,
+ rlAAAUserInetServiceType RlAAAServiceType,
+ rlAAAUserInetRemoteIpAddressType InetAddressType,
+ rlAAAUserInetRemoteIpAddress InetAddress,
+ rlAAAUserInetName DisplayString,
+ rlAAAUserInetLevel Unsigned32,
+ rlAAAUserInetIfIndex Unsigned32,
+ rlAAAUserInetLoginDate DateAndTime,
+ rlAAAUserInetLoginDurationMS Unsigned32
+}
+
+rlAAAUserInetIndex OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "User Index"
+ ::= { rlAAAUserInetEntry 1 }
+
+rlAAAUserInetServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The service that the user uses. Service dont care is console
+ terminal."
+ ::= { rlAAAUserInetEntry 2 }
+
+rlAAAUserInetRemoteIpAddressType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote INET address Type."
+ ::= { rlAAAUserInetEntry 3 }
+
+rlAAAUserInetRemoteIpAddress OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote INET address."
+ ::= { rlAAAUserInetEntry 4 }
+
+rlAAAUserInetName OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User Name"
+ ::= { rlAAAUserInetEntry 5 }
+
+rlAAAUserInetLevel OBJECT-TYPE
+ SYNTAX Unsigned32 (1..15)
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User level"
+ ::= { rlAAAUserInetEntry 6 }
+
+rlAAAUserInetIfIndex OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User if index."
+ ::= { rlAAAUserInetEntry 7 }
+
+rlAAAUserInetLoginDate OBJECT-TYPE
+ SYNTAX DateAndTime
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Date of use creation."
+ ::= { rlAAAUserInetEntry 8 }
+
+rlAAAUserInetLoginDurationMS OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Time in MS since user login."
+ ::= { rlAAAUserInetEntry 9 }
+
+--- Read-only table for successful login history - Local Users
+
+rlAAALocalLoginHistInetTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAALocalLoginHistInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table holds successful login history
+ for all users. This table is read-only.
+ it coexist with rlAAALocalLoginHistTable to support IPv4 and IPv6"
+ ::= { rlAAA 58 }
+
+rlAAALocalLoginHistInetEntry OBJECT-TYPE
+ SYNTAX RlAAALocalLoginHistInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAALocalLoginHistInetName,
+ rlAAALocalLoginHistInetIndex}
+ ::= { rlAAALocalLoginHistInetTable 1 }
+
+RlAAALocalLoginHistInetEntry ::= SEQUENCE {
+ rlAAALocalLoginHistInetName DisplayString,
+ rlAAALocalLoginHistInetIndex Unsigned32,
+ rlAAALocalLoginHistInetServiceType RlAAAServiceType,
+ rlAAALocalLoginHistInetRemoteIpAddressType InetAddressType,
+ rlAAALocalLoginHistInetRemoteIpAddress InetAddress,
+ rlAAALocalLoginHistInetLocalIpAddressType InetAddressType,
+ rlAAALocalLoginHistInetLocalIpAddress InetAddress,
+ rlAAALocalLoginHistInetDateTime DisplayString,
+ rlAAALocalLoginHistInetMrid Unsigned32
+}
+
+rlAAALocalLoginHistInetName OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User Name"
+ ::= { rlAAALocalLoginHistInetEntry 1 }
+
+rlAAALocalLoginHistInetIndex OBJECT-TYPE
+ SYNTAX Unsigned32 (1..10)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "Index in History for specific user.
+ Lower number means more recent login."
+ ::= { rlAAALocalLoginHistInetEntry 2 }
+
+rlAAALocalLoginHistInetServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The service that the user uses.
+ Service don't care is console terminal."
+ ::= { rlAAALocalLoginHistInetEntry 3 }
+
+rlAAALocalLoginHistInetRemoteIpAddressType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address Type."
+ ::= { rlAAALocalLoginHistInetEntry 4 }
+
+rlAAALocalLoginHistInetRemoteIpAddress OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address."
+ ::= { rlAAALocalLoginHistInetEntry 5 }
+
+rlAAALocalLoginHistInetLocalIpAddressType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "local Ip Address Type on login."
+ ::= { rlAAALocalLoginHistInetEntry 6 }
+
+rlAAALocalLoginHistInetLocalIpAddress OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "local Ip Address on login."
+ ::= { rlAAALocalLoginHistInetEntry 7 }
+
+rlAAALocalLoginHistInetDateTime OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Date and time in the SysLog Format:
+ DD-MMM-YYYY HH:MM:SS"
+ ::= { rlAAALocalLoginHistInetEntry 8 }
+
+ rlAAALocalLoginHistInetMrid OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Mrid - indicates to which instance the connection was established "
+ ::= { rlAAALocalLoginHistInetEntry 9 }
+
+
+--- Read-only table for successful login history - Line passwords
+
+rlAAALinePassLoginHistInetTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAALinePassLoginHistInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table holds successful login history
+ for Line passwords. This table is read-only.
+ it coexist with rlAAALinePassLoginHistTable to support IPv4 and IPv6"
+ ::= { rlAAA 59 }
+
+rlAAALinePassLoginHistInetEntry OBJECT-TYPE
+ SYNTAX RlAAALinePassLoginHistInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX {rlAAALinePassLoginHistInetPortType,
+ rlAAALinePassLoginHistInetIfIndex,
+ rlAAALinePassLoginHistInetServiceType,
+ rlAAALinePassLoginHistInetIndex }
+ ::= { rlAAALinePassLoginHistInetTable 1 }
+
+RlAAALinePassLoginHistInetEntry ::= SEQUENCE {
+ rlAAALinePassLoginHistInetPortType RlAAALinePortType,
+ rlAAALinePassLoginHistInetIfIndex Unsigned32,
+ rlAAALinePassLoginHistInetServiceType RlAAAServiceType,
+ rlAAALinePassLoginHistInetIndex Unsigned32,
+ rlAAALinePassLoginHistInetActServiceType RlAAAServiceType,
+ rlAAALinePassLoginHistInetRemoteInetAddressType InetAddressType,
+ rlAAALinePassLoginHistInetRemoteInetAddress InetAddress,
+ rlAAALinePassLoginHistInetLocalInetAddressType InetAddressType,
+ rlAAALinePassLoginHistInetLocalInetAddress InetAddress,
+ rlAAALinePassLoginHistInetDateTime DisplayString ,
+ rlAAALinePassLoginHistInetMrid Unsigned32
+}
+
+
+rlAAALinePassLoginHistInetPortType OBJECT-TYPE
+ SYNTAX RlAAALinePortType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION " the physical port type."
+ ::= { rlAAALinePassLoginHistInetEntry 1 }
+
+rlAAALinePassLoginHistInetIfIndex OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Identifies the ifindex for which this entry can be used.
+ If index 0 means don't care
+ (can be used for all if indices).
+ For port type console the value could be only 0."
+ ::= { rlAAALinePassLoginHistInetEntry 2}
+
+rlAAALinePassLoginHistInetServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "the service type"
+ ::= { rlAAALinePassLoginHistInetEntry 3 }
+
+rlAAALinePassLoginHistInetIndex OBJECT-TYPE
+ SYNTAX Unsigned32 (1..10)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "Index in HistInetory for specific user.
+ Lower number means more recent login."
+ ::= { rlAAALinePassLoginHistInetEntry 4 }
+
+rlAAALinePassLoginHistInetActServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The service that the user uses.
+ Service don't care is console terminal."
+ ::= { rlAAALinePassLoginHistInetEntry 5 }
+
+rlAAALinePassLoginHistInetRemoteInetAddressType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address Type."
+ ::= { rlAAALinePassLoginHistInetEntry 6 }
+
+rlAAALinePassLoginHistInetRemoteInetAddress OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address."
+ ::= { rlAAALinePassLoginHistInetEntry 7 }
+
+
+rlAAALinePassLoginHistInetLocalInetAddressType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "local Ip Address Type on login."
+ ::= { rlAAALinePassLoginHistInetEntry 8 }
+
+rlAAALinePassLoginHistInetLocalInetAddress OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "local Ip Address on login."
+ ::= { rlAAALinePassLoginHistInetEntry 9 }
+
+rlAAALinePassLoginHistInetDateTime OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Date and time in the SysLog Format:
+ DD-MMM-YYYY HH:MM:SS"
+ ::= { rlAAALinePassLoginHistInetEntry 10 }
+
+
+rlAAALinePassLoginHistInetMrid OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Mrid - indicates to which instance the connection was established "
+ ::= { rlAAALinePassLoginHistInetEntry 11 }
+
+--- Read-only table for successful login history - System Passwords
+
+rlAAASystemLoginHistInetTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAASystemLoginHistInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table holds successful login history
+ for system passwords. This table is read-only.
+ it coexist with rlAAASystemLoginHistTable to support IPv4 and IPv6"
+ ::= { rlAAA 60 }
+
+rlAAASystemLoginHistInetEntry OBJECT-TYPE
+ SYNTAX RlAAASystemLoginHistInetEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row definition for this table."
+ INDEX { rlAAASystemLoginHistInetLevel,
+ rlAAASystemLoginHistInetIndex}
+ ::= { rlAAASystemLoginHistInetTable 1 }
+
+RlAAASystemLoginHistInetEntry ::= SEQUENCE {
+ rlAAASystemLoginHistInetLevel INTEGER,
+ rlAAASystemLoginHistInetIndex Unsigned32,
+ rlAAASystemLoginHistInetServiceType RlAAAServiceType,
+ rlAAASystemLoginHistInetRemoteInetAddressType InetAddressType,
+ rlAAASystemLoginHistInetRemoteInetAddress InetAddress,
+ rlAAASystemLoginHistInetLocalInetAddressType InetAddressType,
+ rlAAASystemLoginHistInetLocalInetAddress InetAddress,
+ rlAAASystemLoginHistInetDateTime DisplayString,
+ rlAAASystemLoginHistInetMrid Unsigned32
+}
+
+rlAAASystemLoginHistInetLevel OBJECT-TYPE
+ SYNTAX INTEGER (1..15)
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User Name"
+ ::= { rlAAASystemLoginHistInetEntry 1 }
+
+rlAAASystemLoginHistInetIndex OBJECT-TYPE
+ SYNTAX Unsigned32 (1..10)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "Index in History for specific user.
+ Lower number means more recent login."
+ ::= { rlAAASystemLoginHistInetEntry 2 }
+
+rlAAASystemLoginHistInetServiceType OBJECT-TYPE
+ SYNTAX RlAAAServiceType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The service that the user uses.
+ Service don't care is console terminal."
+ ::= { rlAAASystemLoginHistInetEntry 3 }
+
+rlAAASystemLoginHistInetRemoteInetAddressType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address Type."
+ ::= { rlAAASystemLoginHistInetEntry 4 }
+
+rlAAASystemLoginHistInetRemoteInetAddress OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "User remote IP address."
+ ::= { rlAAASystemLoginHistInetEntry 5 }
+
+rlAAASystemLoginHistInetLocalInetAddressType OBJECT-TYPE
+ SYNTAX InetAddressType
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "local Ip Address Type on login."
+ ::= { rlAAASystemLoginHistInetEntry 6 }
+
+rlAAASystemLoginHistInetLocalInetAddress OBJECT-TYPE
+ SYNTAX InetAddress
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "local Ip Address on login."
+ ::= { rlAAASystemLoginHistInetEntry 7 }
+
+rlAAASystemLoginHistInetDateTime OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Date and time in the SysLog Format:
+ DD-MMM-YYYY HH:MM:SS"
+ ::= { rlAAASystemLoginHistInetEntry 8 }
+
+rlAAASystemLoginHistInetMrid OBJECT-TYPE
+ SYNTAX Unsigned32
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "Mrid - indicates to which instance the connection was established "
+ ::= { rlAAASystemLoginHistInetEntry 9 }
+
+--
+-- Password complexity
+--
+
+rlAAAPasswordComplexityEnabled OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether password complexity rules
+ must be applied."
+ ::= { rlAAA 61 }
+
+rlAAAPasswordComplexityMinCharClasses OBJECT-TYPE
+ SYNTAX INTEGER (0..4)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Indicates minimal number of character classes
+ from which the password should contain characters
+ if password complexity enabled.
+ charater classes are : lower case, upper case,
+ digits, special characters."
+ ::= { rlAAA 62 }
+
+rlAAAPasswordComplexityNotOldPasswordEnabled OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether new password can be as
+ same as old password if password complexity enabled."
+ ::= { rlAAA 63 }
+
+rlAAAPasswordComplexityCharRepeat OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Indicates that no character in new password can't be
+ repeated more than 3 times if password complexity enabled."
+ ::= { rlAAA 64 }
+
+rlAAAPasswordComplexityNotUserNameEnabled OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether new password can be as
+ same as user name if password complexity enabled."
+ ::= { rlAAA 65 }
+
+rlAAAPasswordComplexityNotManufacturerEnabled OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Specifies whether new password can be as
+ same as manufacturer name if password complexity enabled."
+ ::= { rlAAA 66 }
+
+--
+-- Password Global Aging
+--
+
+rlAAAPasswordGlobalAgingTime OBJECT-TYPE
+ SYNTAX INTEGER (0..365)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Determines whether password aging should be applied.
+ Tic doesn't have to be enabled.
+ If == 0 then aging is disabled.
+ Note: Actual aging will not be enabled if system
+ doesn't have real time clock until, clock is
+ set either by user or SNTP."
+ ::= { rlAAA 67 }
+
+
+--
+-- rlAAALocalUserVerificationAndSettingTable Table
+--
+
+rlAAALocalUserPasswordVerificationAndSettingTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF RlAAALocalUserPasswordVerificationAndSettingEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The table specifies per every local user, old and new passwords.
+ Serves for verification the old password and setting a new password."
+ ::= { rlAAA 68 }
+
+rlAAALocalUserPasswordVerificationAndSettingEntry OBJECT-TYPE
+ SYNTAX RlAAALocalUserPasswordVerificationAndSettingEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION "The row of local user password verification and setting table."
+ INDEX { rlAAALocalUserNameString }
+ ::= { rlAAALocalUserPasswordVerificationAndSettingTable 1 }
+
+RlAAALocalUserPasswordVerificationAndSettingEntry ::= SEQUENCE {
+ rlAAALocalUserNameString DisplayString,
+ rlAAALocalUserVerificationOldPassword DisplayString,
+ rlAAALocalUserSettingNewPassword DisplayString,
+ rlAAALocalUserConfirmNewPassword DisplayString
+}
+
+rlAAALocalUserNameString OBJECT-TYPE
+ SYNTAX DisplayString (SIZE(1..20))
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Local user name."
+ ::= { rlAAALocalUserPasswordVerificationAndSettingEntry 1 }
+
+rlAAALocalUserVerificationOldPassword OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Local user old password to be verified."
+
+ ::= { rlAAALocalUserPasswordVerificationAndSettingEntry 2 }
+
+rlAAALocalUserSettingNewPassword OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Local user new password to be set."
+
+ ::= { rlAAALocalUserPasswordVerificationAndSettingEntry 3 }
+
+rlAAALocalUserConfirmNewPassword OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "Local user new password for confirmation."
+
+ ::= { rlAAALocalUserPasswordVerificationAndSettingEntry 4 }
+
+
+---
+--- level 15 system password creation date
+---
+rlAAACreationDateSystemPasswordLevel15 OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION "The date on which the system Password for level 15 was created.
+ Otherwise zero size string"
+ ::= { rlAAA 69 }
+
+---
+--- level 15 system password creation date
+---
+rlAAAPasswordRecoveryDisable OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION "if this MIB is set to TRUE then when user will use 'password Recovery'
+ to the device , the configuration will automatically be erased."
+ DEFVAL { false }
+ ::= { rlAAA 70 }
+
+
+
+END
|