1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
|
-- This module defines enterprise MIBs for VPN User
--
-- Copyright (c) 1999-2004, Juniper Networks, Inc.
-- All rights reserved.
NETSCREEN-VPN-USER-MIB DEFINITIONS ::= BEGIN
IMPORTS
netscreenVpn, netscreenVpnMibModule
FROM NETSCREEN-SMI
Integer32, IpAddress, MODULE-IDENTITY, OBJECT-TYPE
FROM SNMPv2-SMI
DisplayString
FROM SNMPv2-TC
;
netscreenUserMibModule MODULE-IDENTITY
LAST-UPDATED "200405032022Z" -- May 03, 2004
ORGANIZATION
"Juniper Networks, Inc."
CONTACT-INFO
"Customer Support
1194 North Mathilda Avenue
Sunnyvale, California 94089-1206
USA
Tel: 1-800-638-8296
E-mail: customerservice@juniper.net
HTTP://www.juniper.net"
DESCRIPTION
"This module defines NetScreen private MIBs for VPN User"
REVISION "200405030000Z" -- May 03, 2004
DESCRIPTION
"Modified copyright and contact information"
REVISION "200403030000Z" -- March 03, 2004
DESCRIPTION
"Converted to SMIv2 by Longview Software"
REVISION "200311130000Z" -- November 13, 2003
DESCRIPTION
"Correct spelling mistake"
REVISION "200205050000Z" -- May 05, 2002
DESCRIPTION
"Add dial-up group type"
REVISION "200105140000Z" -- May 14, 2001
DESCRIPTION
"Creation Date"
::= { netscreenVpnMibModule 10 }
NsVpnAILUsrEntry ::= SEQUENCE
{
nsVpnAILUsrIndex Integer32,
nsVpnAILUsrName DisplayString,
nsVpnAILUsrGrp DisplayString,
nsVpnAILUsrStatus INTEGER,
nsVpnAILUsrIKE INTEGER,
nsVpnAILUsrIKEIdType INTEGER,
nsVpnAILUsrIKEId DisplayString,
nsVpnAILUsrAuth INTEGER,
nsVpnAILUsrL2TP INTEGER,
nsVpnAILUsrL2tpRemoteIp IpAddress,
nsVpnAILUsrL2tpIpPool DisplayString,
nsVpnAILUsrL2tpIp IpAddress,
nsVpnAILUsrL2tpPriDnsIp IpAddress,
nsVpnAILUsrL2tpSecDnsIp IpAddress,
nsVpnAILUsrL2tpPriWinsIp IpAddress,
nsVpnAILUsrL2tpSecWinsIp IpAddress,
nsVpnAILUsrVsys Integer32
}
NsVpnManualKeyUsrEntry ::= SEQUENCE
{
nsVpnManualKeyUsrIndex Integer32,
nsVpnManualKeyUsrName DisplayString,
nsVpnManualKeyUsrGrp DisplayString,
nsVpnManualKeyUsrSILocal Integer32,
nsVpnManualKeyUsrSIRemote Integer32,
nsVpnManualKeyUsrTunnelType INTEGER,
nsVpnManualKeyUsrEspEncAlg INTEGER,
nsVpnManualKeyUsrEspAuthAlg INTEGER,
nsVpnManualKeyUsrAhHash INTEGER,
nsVpnManualKeyUsrVsys Integer32
}
NsVpnUsrDialupGrpEntry ::= SEQUENCE
{
nsVpnUsrDialupGrpIndex Integer32,
nsVpnUsrDialupGrpName DisplayString,
nsVpnUsrDialupGrpType INTEGER,
nsVpnUsrDialupGrpVsys Integer32
}
nsVpnUser OBJECT IDENTIFIER ::= { netscreenVpn 10 }
nsVpnUsrDialupGrpTable OBJECT-TYPE
SYNTAX SEQUENCE OF NsVpnUsrDialupGrpEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"NetScreen supports using dialup group to organize vpn
user.This table collects the information of dialup group in
NetScreen device."
::= { nsVpnUser 1 }
nsVpnUsrDialupGrpEntry OBJECT-TYPE
SYNTAX NsVpnUsrDialupGrpEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in this table holds a set of configuration
information about dialup group."
INDEX
{ nsVpnUsrDialupGrpIndex }
::= { nsVpnUsrDialupGrpTable 1 }
nsVpnUsrDialupGrpIndex OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A unique value for schedule. Its value ranges between 0 and
65535 and may not be contiguous."
::= { nsVpnUsrDialupGrpEntry 1 }
nsVpnUsrDialupGrpName OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"dialup user group name."
::= { nsVpnUsrDialupGrpEntry 2 }
nsVpnUsrDialupGrpType OBJECT-TYPE
SYNTAX INTEGER {
undefined(0),
manual(1),
ike(2),
l2tp(3),
xauth(4),
auth(5),
external(6)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"dial up group type."
::= { nsVpnUsrDialupGrpEntry 3 }
nsVpnUsrDialupGrpVsys OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"vsys this group belongs to."
::= { nsVpnUsrDialupGrpEntry 4 }
nsVpnManualKeyUsrTable OBJECT-TYPE
SYNTAX SEQUENCE OF NsVpnManualKeyUsrEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table specifies the configuration attributes for manual
key user."
::= { nsVpnUser 2 }
nsVpnManualKeyUsrEntry OBJECT-TYPE
SYNTAX NsVpnManualKeyUsrEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in the nsVpnManualkeyUsrTable holds a set of
configuration parameters associated with an instance of manual
key user."
INDEX
{ nsVpnManualKeyUsrIndex }
::= { nsVpnManualKeyUsrTable 1 }
nsVpnManualKeyUsrIndex OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A unique value for manual key user table. Its value ranges
between 0 and 65535 and may not be contiguous."
::= { nsVpnManualKeyUsrEntry 1 }
nsVpnManualKeyUsrName OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"User name."
::= { nsVpnManualKeyUsrEntry 2 }
nsVpnManualKeyUsrGrp OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"group this user belongs to."
::= { nsVpnManualKeyUsrEntry 3 }
nsVpnManualKeyUsrSILocal OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Local Security Index"
::= { nsVpnManualKeyUsrEntry 4 }
nsVpnManualKeyUsrSIRemote OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Remote Security Index"
::= { nsVpnManualKeyUsrEntry 5 }
nsVpnManualKeyUsrTunnelType OBJECT-TYPE
SYNTAX INTEGER {
esp(0),
ah(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"vpn tunnel type."
::= { nsVpnManualKeyUsrEntry 6 }
nsVpnManualKeyUsrEspEncAlg OBJECT-TYPE
SYNTAX INTEGER {
null(0),
des-cbc(1),
triple-des-cbc(2),
aes(3),
aes-192(4),
aes-256(5)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ESP Encryption Algorithm."
::= { nsVpnManualKeyUsrEntry 7 }
nsVpnManualKeyUsrEspAuthAlg OBJECT-TYPE
SYNTAX INTEGER {
null(0),
md5(1),
sha(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ESP Authentication Algorithm."
::= { nsVpnManualKeyUsrEntry 8 }
nsVpnManualKeyUsrAhHash OBJECT-TYPE
SYNTAX INTEGER {
null(0),
md5(1),
sha(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"AH Hash Algorithm."
::= { nsVpnManualKeyUsrEntry 9 }
nsVpnManualKeyUsrVsys OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"vsys this user belongs to."
::= { nsVpnManualKeyUsrEntry 10 }
nsVpnAILUsrTable OBJECT-TYPE
SYNTAX SEQUENCE OF NsVpnAILUsrEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table specifies the configuration attributes for
AUTH/IKE/L2TP user."
::= { nsVpnUser 3 }
nsVpnAILUsrEntry OBJECT-TYPE
SYNTAX NsVpnAILUsrEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in the nsVpnManualkeyUsrTable holds a set of
configuration parameters associated with an instance of
AUTH/IKE/L2TP user."
INDEX
{ nsVpnAILUsrIndex }
::= { nsVpnAILUsrTable 1 }
nsVpnAILUsrIndex OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A unique value for Auth/Ike/l2tp user table. Its value ranges
between 1 and 65535 and may not be contiguous."
::= { nsVpnAILUsrEntry 1 }
nsVpnAILUsrName OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"User name."
::= { nsVpnAILUsrEntry 2 }
nsVpnAILUsrGrp OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"group this user belongs to."
::= { nsVpnAILUsrEntry 3 }
nsVpnAILUsrStatus OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"User status"
::= { nsVpnAILUsrEntry 4 }
nsVpnAILUsrIKE OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Since Authentication, IKE L2TP can be combined together. This
attribute is used to indicate if this user is an IKE user."
::= { nsVpnAILUsrEntry 5 }
nsVpnAILUsrIKEIdType OBJECT-TYPE
SYNTAX INTEGER {
not-set(0),
ipv4-addr(1),
fqdn(2),
usr-fqdn(3),
ipv4-addr-subnet(4),
ipv6-addr(5),
ipv6-addr-subnet(6),
ipv4-addr-addr-range(7),
ipv6-addr-addr-range(8),
der-asn1-dn(9),
der-asn1-gn(10)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"IKE user type 1 means auto, other values are undefined."
::= { nsVpnAILUsrEntry 6 }
nsVpnAILUsrIKEId OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"IKE id."
::= { nsVpnAILUsrEntry 7 }
nsVpnAILUsrAuth OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Since Authentication, IKE L2TP can be combined together. This
attribute is used to indicate if this user is an Authentication
user."
::= { nsVpnAILUsrEntry 8 }
nsVpnAILUsrL2TP OBJECT-TYPE
SYNTAX INTEGER {
no(0),
yes(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Since Authentication, IKE L2TP can be combined together. This
attribute is used to indicate if this user is a L2TP user. The
NetScreen-1000 does not support L2TP."
::= { nsVpnAILUsrEntry 9 }
nsVpnAILUsrL2tpRemoteIp OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"L2TP remote peer ip address."
::= { nsVpnAILUsrEntry 10 }
nsVpnAILUsrL2tpIpPool OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ip pool entity name."
::= { nsVpnAILUsrEntry 11 }
nsVpnAILUsrL2tpIp OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"L2TP local ip address."
::= { nsVpnAILUsrEntry 12 }
nsVpnAILUsrL2tpPriDnsIp OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"primary DNS server IP address for L2TP user."
::= { nsVpnAILUsrEntry 13 }
nsVpnAILUsrL2tpSecDnsIp OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"secondary DNS server IP address for L2TP user."
::= { nsVpnAILUsrEntry 14 }
nsVpnAILUsrL2tpPriWinsIp OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"primary WINS server IP address for L2TP user."
::= { nsVpnAILUsrEntry 15 }
nsVpnAILUsrL2tpSecWinsIp OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"secondary WINS server IP address for L2TP user."
::= { nsVpnAILUsrEntry 16 }
nsVpnAILUsrVsys OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"vsys this user belongs to."
::= { nsVpnAILUsrEntry 17 }
END
|
