All MIBs › AT-TTY-MIB
Organization: Allied Telesis, Inc
Last Updated: 2006-06-28
Category: Vendor: Allied Telesis
Description: Manages TTY/terminal line configuration and session statistics for console and auxiliary ports on Allied Telesis devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is AT-TTY-MIB?
AT-TTY-MIB is a vendor-specific MIB from Allied Telesis covering the console (TTY) and auxiliary terminal line subsystem on its switches and routers. It exposes configuration and session objects for serial/console line settings along with security-relevant tracking of failed login attempts, including the offending username, source IP address, and attempt count. Its monitoring value is squarely software/access-security status: administrators use it to detect brute-force or unauthorized login attempts against the device's console/CLI, and the accompanying ttyTraps notification lets a management station be alerted in near real time rather than having to poll. It is a self-contained vendor MIB relying only on standard SNMPv2-SMI/notification conventions. It is deployed on Allied Telesis switches and routers wherever console/terminal access security auditing is required, typically in enterprise and service-provider network operations, and administrators can download the AT-TTY-MIB file to enable this auditing capability in their monitoring systems.
IPNetwork Monitor allows you to monitor SNMP objects defined in AT-TTY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Allied Telesis switch/router (console/terminal management interface)
Monitoring Examples
An administrator would monitor loginFailureUser, loginFailureIPAddress, and loginFailureAttempts to see which account and source address is repeatedly failing to authenticate on the console or VTY line, and subscribe to ttyTraps to get an immediate notification rather than waiting for a poll cycle. A rapidly incrementing loginFailureAttempts counter from a single loginFailureIPAddress would reveal an active brute-force login attack against the device's management interface.
What Can Be Monitored
- failed login username
- failed login source IP address
- failed login attempt count
- TTY/console line configuration
- login-failure trap events
Imported Objects
From AT-SMI-MIB
| DisplayStringUnsized | |
| modules | OBJECT-IDENTITY |
From IF-MIB
| ifIndex | OBJECT-TYPE |
From SNMPv2-SMI
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString | |
| TruthValue |
OIDs
RFC description
Monitors TTY (terminal) login attempts and failures on Allied Telesis network devices.
Start monitoring Allied Telesis switches/routers with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.