ALTIGA-SSH-STATS-MIB

All MIBs › ALTIGA-SSH-STATS-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2002-09-05

Category: VPN and Security, Vendor: Altiga

Description: Altiga (Cisco VPN 3000) SSH statistics MIB for monitoring SSH management session establishment and activity.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ALTIGA-SSH-STATS-MIB?

ALTIGA-SSH-STATS-MIB is a vendor-specific MIB originally from Altiga Networks, whose VPN concentrator product line became the Cisco VPN 3000 Series after acquisition, and it tracks statistics for SSH-based management sessions to the device. It exposes global counters for SSH traffic (octets/packets sent and received), aggregate session counts (total, active, and maximum sessions), and a per-session table listing individual SSH session details. This MIB monitors a software/management-plane service rather than physical hardware, letting an operator confirm the health and load of the SSH management interface, such as whether active session count is approaching the configured maximum, which could indicate a management access exhaustion condition or a runaway script. It is a self-contained vendor MIB with no apparent dependency on standard MIBs, though conceptually parallel to generic session-tracking approaches. It is typically deployed on Cisco/Altiga VPN 3000 Series concentrators for auditing and capacity-monitoring of SSH-based administrative access. Network engineers evaluating or troubleshooting this functionality can download the ALTIGA-SSH-STATS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ALTIGA-SSH-STATS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco/Altiga VPN 3000 Series concentrator

Monitoring Examples

An operator would poll alSshStatsActiveSessions against alSshStatsMaxSessions to detect when SSH management sessions are near capacity, which could block legitimate administrative access. alSshStatsSessionTable/alSshStatsSessionEntry, indexed by alSshStatsSessionIndex, exposes alSshStatsSessionName and alSshStatsSessionIpAddr to identify which users/hosts hold active sessions, useful for spotting an unexpected or unauthorized SSH connection. alSshStatsOctetsSent/alSshStatsOctetsRcvd and alSshStatsTotalSessions provide cumulative traffic and session-count history for capacity trending.

What Can Be Monitored

active/total/max SSH sessions
per-session user name and source IP
SSH octets/packets sent and received
cumulative SSH session count

Imported Objects

From ALTIGA-GLOBAL-REG

alSshMibModule

OBJECT-IDENTITY

From ALTIGA-MIB

alSshGroup	OBJECT-IDENTITY
alStatsSsh	OBJECT-IDENTITY

From ALTIGA-SESSION-STATS-MIB

EncryptionAlgorithm

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using alSshStatsOctetsSent OID:

Select a Cisco (Altiga) VPN 3000 Series Concentrator (legacy) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type alSshStatsOctetsSent into the Find box to locate it in the OID tree, then select it and click OK. The number of octets sent. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
altigaSshStatsMibModule	1.3.6.1.4.1.3076.1.1.40.2			The Altiga SSH Statistics MIB models counters and objects that are of management interest for SSH. Acronyms The following acronyms are used in this document: MIB: Management Information Base SSH: Secure Shell
altigaSshStatsMibConformance	1.3.6.1.4.1.3076.1.1.40.2.1
altigaSshStatsMibCompliances	1.3.6.1.4.1.3076.1.1.40.2.1.1
altigaSshStatsMibCompliance	1.3.6.1.4.1.3076.1.1.40.2.1.1.1			The compliance statement for agents which implement the Altiga SSH Statistics MIB.
altigaSshStatsGroup	1.3.6.1.4.1.3076.2.1.1.1.35.2			The objects for SSH statistics.
alStatsSshGlobal	1.3.6.1.4.1.3076.2.1.2.35.1
C32 alSshStatsOctetsSentEx	1.3.6.1.4.1.3076.2.1.2.35.1.1	Counter32	read-only	The number of octets sent.
C32 alSshStatsOctetsRcvd	1.3.6.1.4.1.3076.2.1.2.35.1.2	Counter32	read-only	The number of octets received.
C32 alSshStatsPacketsSent	1.3.6.1.4.1.3076.2.1.2.35.1.3	Counter32	read-only	The number of packets.
C32 alSshStatsPacketsRcvd	1.3.6.1.4.1.3076.2.1.2.35.1.4	Counter32	read-only	The number of packets received.
C32 alSshStatsTotalSessions	1.3.6.1.4.1.3076.2.1.2.35.1.5	Counter32	read-only	The total number of SSH sessions established.
G32 alSshStatsActiveSessions	1.3.6.1.4.1.3076.2.1.2.35.1.6	Gauge32	read-only	The number of active sessions.
C32 alSshStatsMaxSessions	1.3.6.1.4.1.3076.2.1.2.35.1.7	Counter32	read-only	The maximum number of active sessions that existed at one any time.
alSshStatsSessionTable	1.3.6.1.4.1.3076.2.1.2.35.2		not-accessible	List of active HTTP sessions.
alSshStatsSessionEntry	1.3.6.1.4.1.3076.2.1.2.35.2.1		not-accessible	An entry in the alSshStatsSessionTable.
I32 alSshStatsSessionIndex	1.3.6.1.4.1.3076.2.1.2.35.2.1.1	Integer32	read-only	Index of this session.
STR alSshStatsSessionName	1.3.6.1.4.1.3076.2.1.2.35.2.1.2	DisplayString	read-only	Name of the administrator using this session.
IP alSshStatsSessionIpAddr	1.3.6.1.4.1.3076.2.1.2.35.2.1.3	IpAddress	read-only	Remote IP address of this session..
U32 alSshStatsSessionPort	1.3.6.1.4.1.3076.2.1.2.35.2.1.4	Unsigned32	read-only	Remote IP port address of this session..
TIK alSshStatsSessionStartTime	1.3.6.1.4.1.3076.2.1.2.35.2.1.5	TimeTicks	read-only	Login time of this session.
U32 alSshStatsSessionLoginTime	1.3.6.1.4.1.3076.2.1.2.35.2.1.6	Unsigned32	read-only	time_t value of the concentrator at the start of this session.
ENC alSshStatsSessionEncr	1.3.6.1.4.1.3076.2.1.2.35.2.1.7	EncryptionAlgorithm	read-only	The type of encryption algorithm used for this session.
C32 alSshStatsSessionOctetsSent	1.3.6.1.4.1.3076.2.1.2.35.2.1.8	Counter32	read-only	Number of octets sent during this session.
C32 alSshStatsSessionOctetsRcvd	1.3.6.1.4.1.3076.2.1.2.35.2.1.9	Counter32	read-only	Number of octets received during this session.
C32 alSshStatsSessionPacketsSent	1.3.6.1.4.1.3076.2.1.2.35.2.1.10	Counter32	read-only	Number of packets sent during this session.
C32 alSshStatsSessionPacketsRcvd	1.3.6.1.4.1.3076.2.1.2.35.2.1.11	Counter32	read-only	Number of packets received during this session.

RFC description

Altiga SSH Statistics MIB from Altiga Networks (acquired by Cisco) for monitoring SSH connections and statistics on Cisco VPN 3000 Series concentrators and remote access devices.

Start monitoring Cisco (Altiga) VPN 3000 Series Concentrators (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ALTIGA-SSH-STATS-MIB