AAC-MIB

All MIBs › AAC-MIB

Organization: Working Group

Last Updated: 1999-11-22

Category: SNMP Framework

Description: Manages SNMP agent access control on network devices, defining community-based access lists and operation restrictions for MIB object access.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is AAC-MIB?

AAC-MIB (the Link AAC module MIB) is a small vendor MIB governing SNMP agent access control on a network device, letting an administrator define community-based access lists and restrict which operations (read, write, or both) are permitted against MIB objects. No sample objects were available for this module, but by its description it models access-control policy rather than device telemetry. Its monitoring relevance is indirect: it governs who can retrieve or modify the device's other monitoring and configuration MIBs, so verifying its settings is a security/configuration-integrity check rather than a hardware or performance check. It builds on the standard SNMP community-based access-control model (as in RFC 3584/SNMP-COMMUNITY-MIB) rather than introducing a new access paradigm. It is deployed on any network device using SNMPv1/v2c where administrators need to restrict management access by community string and operation type, and the AAC-MIB download is typically obtained directly from the device vendor to load into a MIB browser for review.

IPNetwork Monitor allows you to monitor SNMP objects defined in AAC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-adjacent access-control MIB, applicable to any SNMP-managed network device

Monitoring Examples

No sample objects were provided for this module; in general this type of MIB would be polled or audited to confirm which community strings are configured with which access lists and read/write permissions, which would reveal an overly permissive community string granting unintended write access to the device.

Imported Objects

From DLINK-ID-REC-MIB

dlink-common-mgmt

From RFC1155-SMI

IpAddress

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
swAACAPAuthMethodGroup	1.3.6.1.4.1.171.12.5.7
STR swAACAPConsoleEnableMethod	1.3.6.1.4.1.171.12.5.7.2.1	DisplayString	read-write	Specify the way which has to execute authentication while login the system and the method for authentication.Access system via local console.
STR swAACAPConsoleLoginMethod	1.3.6.1.4.1.171.12.5.7.1.1	DisplayString	read-write	Specify the way which has to execute authentication while login the system and the method for authentication.Access system via local console
swAACAPEnableMethod	1.3.6.1.4.1.171.12.5.7.2
STR swAACAPHttpEnableMethod	1.3.6.1.4.1.171.12.5.7.2.4	DisplayString	read-write	Specify the way which has to execute authentication while login the system and the method for authentication.Access system via HTTP.
STR swAACAPHttpLoginMethod	1.3.6.1.4.1.171.12.5.7.1.4	DisplayString	read-write	Specify the way which has to execute authentication while login the system and the method for authentication.Access system via HTTP.
swAACAPLoginMethod	1.3.6.1.4.1.171.12.5.7.1
STR swAACAPSSHEnableMethod	1.3.6.1.4.1.171.12.5.7.2.3	DisplayString	read-write	Specify the way which has to execute authentication while login the system and the method for authentication.Access system via SSH.
STR swAACAPSSHLoginMethod	1.3.6.1.4.1.171.12.5.7.1.3	DisplayString	read-write	Specify the way which has to execute authentication while login the system and the method for authentication.Access system via SSH.
STR swAACAPTelnetEnableMethod	1.3.6.1.4.1.171.12.5.7.2.2	DisplayString	read-write	Specify the way which has to execute authentication while login the system and the method for authentication.Access system via telnet.
STR swAACAPTelnetLoginMethod	1.3.6.1.4.1.171.12.5.7.1.2	DisplayString	read-write	Specify the way which has to execute authentication while login the system and the method for authentication.Access system via telnet.
INT swAACAuthenAdminState	1.3.6.1.4.1.171.12.5.1.1	INTEGER	read-write	This object indicates the Access Authentication is enable or disable.
INT swAACAuthParamAttempt	1.3.6.1.4.1.171.12.5.8.2	INTEGER	read-write	The amount for login authentication, if login failure exceed, connection or access would be locked.
swAACAuthParamGroup	1.3.6.1.4.1.171.12.5.8
INT swAACAuthParamResponseTimeout	1.3.6.1.4.1.171.12.5.8.1	INTEGER	read-write	Timeout in second for login authentication response.
swAACCtrl	1.3.6.1.4.1.171.12.5.1
INT swAACCtrlServerAuthProtocol	1.3.6.1.4.1.171.12.5.12.1.3	INTEGER	not-accessible	The authentication protocol provide by the Server.
STR swAACCtrlServerGroupName	1.3.6.1.4.1.171.12.5.12.1.1	DisplayString	not-accessible	A human-readable text string of the method group.
IP swAACCtrlServerIPAddr	1.3.6.1.4.1.171.12.5.12.1.2	IpAddress	not-accessible	The IP address of Server
INT swAACCtrlServerRowState	1.3.6.1.4.1.171.12.5.12.1.4	INTEGER	read-write	This object used to add or delete a entry from swAACServerGroupTable.
STR swAACEnableMethod1ServerGroup	1.3.6.1.4.1.171.12.5.4.1.3	DisplayString	read-create	A human-readable text string of the server group. It would be null as swAACEnableMethodListType is keyword type. And It is writeable, just as the swAACEnableMethodListType is server_group(3).
INT swAACEnableMethod1Type	1.3.6.1.4.1.171.12.5.4.1.2	INTEGER	read-create	The type of Enable method list. The group type includes tacas(1), xtacacs(2), tacacs-plus(3), radius(4) and server-group(5) for user specific. The keyword type includes local(6), local-enable(7), and none(8).
STR swAACEnableMethod2ServerGroup	1.3.6.1.4.1.171.12.5.4.1.5	DisplayString	read-create	A human-readable text string of the server group. It would be null as swAACEnableMethodListType is keyword type. And It is writeable, just as the swAACEnableMethodListType is server_group(3).
INT swAACEnableMethod2Type	1.3.6.1.4.1.171.12.5.4.1.4	INTEGER	read-create	The type of Enable method list. The group type includes tacas(1), xtacacs(2), tacacs-plus(3), radius(4) and server-group(5) for user specific. The keyword type includes local(6), local-enable(7), and none(8).
STR swAACEnableMethod3ServerGroup	1.3.6.1.4.1.171.12.5.4.1.7	DisplayString	read-create	A human-readable text string of the server group. It would be null as swAACEnableMethodListType is keyword type. And It is writeable, just as the swAACEnableMethodListType is server_group(3).
INT swAACEnableMethod3Type	1.3.6.1.4.1.171.12.5.4.1.6	INTEGER	read-create	The type of Enable method list. The group type includes tacas(1), xtacacs(2), tacacs-plus(3), radius(4) and server-group(5) for user specific. The keyword type includes local(6), local-enable(7), and none(8).
STR swAACEnableMethod4ServerGroup	1.3.6.1.4.1.171.12.5.4.1.9	DisplayString	read-create	A human-readable text string of the server group. It would be null as swAACEnableMethodListType is keyword type. And It is writeable, just as the swAACEnableMethodListType is server_group(3).
INT swAACEnableMethod4Type	1.3.6.1.4.1.171.12.5.4.1.8	INTEGER	read-create	The type of Enable method list. The group type includes tacas(1), xtacacs(2), tacacs-plus(3), radius(4) and server-group(5) for user specific. The keyword type includes local(6), local-enable(7), and none(8).
swAACEnableMethodListEntry	1.3.6.1.4.1.171.12.5.4.1		not-accessible	A list of the Authentication methods.
STR swAACEnableMethodListName	1.3.6.1.4.1.171.12.5.4.1.1	DisplayString	read-only	A human-readable text string of the method list. The string is the same with swAACEnableMethodName.
ROW swAACEnableMethodListRowStatus	1.3.6.1.4.1.171.12.5.4.1.10	RowStatus	read-create	This object indicates the status of this entry. A set request with RowStatus is 'CreateAndGo' will be fail while the current entry of the table is equal to the maximum number of swAACEnableMethodListIndex.
swAACEnableMethodListTable	1.3.6.1.4.1.171.12.5.4		not-accessible	A table that contains information about Enable authentication method lists.
swAACInfo	1.3.6.1.4.1.171.12.5.2
STR swAACLoginMethod1ServerGroup	1.3.6.1.4.1.171.12.5.3.1.3	DisplayString	read-create	A human-readable text string of the server group. It would be null as swAACLoginMethodListType is keyword type. And It is writeable, just as the swAACLoginMethodListType is server_group(3).
INT swAACLoginMethod1Type	1.3.6.1.4.1.171.12.5.3.1.2	INTEGER	read-create	The type of Login method list. The group type includes tacas(1), xtacacs(2), tacacs-plus(3), radius(4) and server-group(5) for user specific. The keyword type includes local(6), local-enable(7), and none(8).
STR swAACLoginMethod2ServerGroup	1.3.6.1.4.1.171.12.5.3.1.5	DisplayString	read-create	A human-readable text string of the server group. It would be null as swAACLoginMethodListType is keyword type. And It is writeable, just as the swAACLoginMethodListType is server_group(3).
INT swAACLoginMethod2Type	1.3.6.1.4.1.171.12.5.3.1.4	INTEGER	read-create	The type of Login method list. The group type includes tacas(1), xtacacs(2), tacacs-plus(3), radius(4) and server-group(5) for user specific. The keyword type includes local(6), local-enable(7), and none(8).
STR swAACLoginMethod3ServerGroup	1.3.6.1.4.1.171.12.5.3.1.7	DisplayString	read-create	A human-readable text string of the server group. It would be null as swAACLoginMethodListType is keyword type. And It is writeable, just as the swAACLoginMethodListType is server_group(3).
INT swAACLoginMethod3Type	1.3.6.1.4.1.171.12.5.3.1.6	INTEGER	read-create	The type of Login method list. The group type includes tacas(1), xtacacs(2), tacacs-plus(3), radius(4) and server-group(5) for user specific. The keyword type includes local(6), local-enable(7), and none(8).
STR swAACLoginMethod4ServerGroup	1.3.6.1.4.1.171.12.5.3.1.9	DisplayString	read-create	A human-readable text string of the server group. It would be null as swAACLoginMethodListType is keyword type. And It is writeable, just as the swAACLoginMethodListType is server_group(3).
INT swAACLoginMethod4Type	1.3.6.1.4.1.171.12.5.3.1.8	INTEGER	read-create	The type of Login method list. The group type includes tacas(1), xtacacs(2), tacacs-plus(3), radius(4) and server-group(5) for user specific. The keyword type includes local(6), local-enable(7), and none(8).
swAACLoginMethodListEntry	1.3.6.1.4.1.171.12.5.3.1		not-accessible	A list of the Authentication methods.
STR swAACLoginMethodListName	1.3.6.1.4.1.171.12.5.3.1.1	DisplayString	read-only	A human-readable text string of the method list. The string is the same with swAACLoginMethodName.
ROW swAACLoginMethodListRowStatus	1.3.6.1.4.1.171.12.5.3.1.10	RowStatus	read-create	This object indicates the status of this entry. A set request with RowStatus is 'CreateAndGo' will be fail while the current entry of the table is equal to the maximum number of swAACLoginMethodListIndex.
swAACLoginMethodListTable	1.3.6.1.4.1.171.12.5.3		not-accessible	A table that contains information about Login authentication method lists.
INT swAACMaxEnableMethodList	1.3.6.1.4.1.171.12.5.2.2	INTEGER	read-only	The max number of Enable method list supported by the system .
INT swAACMaxLoginMethodList	1.3.6.1.4.1.171.12.5.2.1	INTEGER	read-only	The max number of Login method list supported by the system .
INT swAACMaxServer	1.3.6.1.4.1.171.12.5.2.4	INTEGER	read-only	The max number of AAC server supported by the system .
INT swAACMaxServerGroup	1.3.6.1.4.1.171.12.5.2.3	INTEGER	read-only	The max number of Server Group supported by the system .
STR swAACServerAuthKey	1.3.6.1.4.1.171.12.5.10.1.4	DisplayString	read-create	The key used while authentication process .It is write-only.
INT swAACServerAuthPort	1.3.6.1.4.1.171.12.5.10.1.3	INTEGER	read-create	The TCP/IP port .The default authentication port is 49 ,and port 5001 to 65535 are valid setting in the system , other value except 49,5001-65535 will work while set this object.
INT swAACServerAuthProtocol	1.3.6.1.4.1.171.12.5.10.1.2	INTEGER	read-only	The authentication protocol provide by the Server.
swAACServerCtrlEntry	1.3.6.1.4.1.171.12.5.12.1		not-accessible	A table that use to add/delete server from group.
swAACServerCtrlTable	1.3.6.1.4.1.171.12.5.12		not-accessible	A table that use to add/delete server from group.
INT swAACServerGroupAuthProtocol1	1.3.6.1.4.1.171.12.5.9.1.3	INTEGER	read-only	The authentication protocol provided by the Server.
INT swAACServerGroupAuthProtocol2	1.3.6.1.4.1.171.12.5.9.1.5	INTEGER	read-only	The authentication protocol provided by the Server.
INT swAACServerGroupAuthProtocol3	1.3.6.1.4.1.171.12.5.9.1.7	INTEGER	read-only	The authentication protocol provided by the Server.
INT swAACServerGroupAuthProtocol4	1.3.6.1.4.1.171.12.5.9.1.9	INTEGER	read-only	The authentication protocol provided by the Server.
INT swAACServerGroupAuthProtocol5	1.3.6.1.4.1.171.12.5.9.1.11	INTEGER	read-only	The authentication protocol provided by the Server.
INT swAACServerGroupAuthProtocol6	1.3.6.1.4.1.171.12.5.9.1.13	INTEGER	read-only	The authentication protocol provided by the Server.
INT swAACServerGroupAuthProtocol7	1.3.6.1.4.1.171.12.5.9.1.15	INTEGER	read-only	The authentication protocol provided by the Server.
INT swAACServerGroupAuthProtocol8	1.3.6.1.4.1.171.12.5.9.1.17	INTEGER	read-only	The authentication protocol provided by the Server.
swAACServerGroupEntry	1.3.6.1.4.1.171.12.5.9.1		not-accessible	A list of the group including servers.
IP swAACServerGroupIPAddr1	1.3.6.1.4.1.171.12.5.9.1.2	IpAddress	read-only	The IP address of Server
IP swAACServerGroupIPAddr2	1.3.6.1.4.1.171.12.5.9.1.4	IpAddress	read-only	The IP address of Server
IP swAACServerGroupIPAddr3	1.3.6.1.4.1.171.12.5.9.1.6	IpAddress	read-only	The IP address of Server
IP swAACServerGroupIPAddr4	1.3.6.1.4.1.171.12.5.9.1.8	IpAddress	read-only	The IP address of Server
IP swAACServerGroupIPAddr5	1.3.6.1.4.1.171.12.5.9.1.10	IpAddress	read-only	The IP address of Server
IP swAACServerGroupIPAddr6	1.3.6.1.4.1.171.12.5.9.1.12	IpAddress	read-only	The IP address of Server
IP swAACServerGroupIPAddr7	1.3.6.1.4.1.171.12.5.9.1.14	IpAddress	read-only	The IP address of Server
IP swAACServerGroupIPAddr8	1.3.6.1.4.1.171.12.5.9.1.16	IpAddress	read-only	The IP address of Server
STR swAACServerGroupName	1.3.6.1.4.1.171.12.5.9.1.1	DisplayString	read-only	A human-readable text string of the method group.
ROW swAACServerGroupRowStatus	1.3.6.1.4.1.171.12.5.9.1.18	RowStatus	read-create	This object indicates the status of this entry. A set request with RowStatus is 'CreateAndGo' will be fail while the current entry of the table is equal to swAACMaxServerGroup.
swAACServerGroupTable	1.3.6.1.4.1.171.12.5.9		not-accessible	A table that contains informations about server group.
swAACServerInfoEntry	1.3.6.1.4.1.171.12.5.10.1		not-accessible	A list of the information of server .
swAACServerInfoTable	1.3.6.1.4.1.171.12.5.10		not-accessible	A table that contains information about severs.
IP swAACServerIPAddr	1.3.6.1.4.1.171.12.5.10.1.1	IpAddress	read-only	The IP address of Server
INT swAACServerRetryCount	1.3.6.1.4.1.171.12.5.10.1.6	INTEGER	read-create	The client retry count .
ROW swAACServerRowStatus	1.3.6.1.4.1.171.12.5.10.1.7	RowStatus	read-create	This object indicates the status of this entry. A set request with RowStatus is 'CreateAndGo' will be fail while the current entry of the table is equal to swAACMaxServer.
INT swAACServerTimeout	1.3.6.1.4.1.171.12.5.10.1.5	INTEGER	read-create	Server response timeout .
swDlinkAACMIB	1.3.6.1.4.1.171.12.5			The Link AAC module MIB.

RFC description

D-Link Access Authentication Control (AAC) MIB for managing system authentication and authorization.

Start monitoring Networking equipment with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download AAC-MIB

What Is AAC-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description