BIANCA-BRICK-CERT-MIB

All MIBs › BIANCA-BRICK-CERT-MIB

Category: VPN and Security, Vendor: bintec

Description: Manages X.509 digital certificate enrollment and storage for VPN authentication on bintec BIANCA/BRICK routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is BIANCA-BRICK-CERT-MIB?

BIANCA-BRICK-CERT-MIB is a bintec/BinTec (formerly Bianca) proprietary MIB for the BIANCA/BRICK family of VPN/ISDN routers, covering X.509 digital certificate management used for VPN and remote-access authentication. It exposes objects for enrolling, storing, and tracking certificates and certificate-related state on the router, supporting IPsec/VPN authentication workflows. Its monitoring value is chiefly software/security status: confirming certificates are present, valid, and not nearing expiration, since an expired or missing certificate would cause VPN tunnel authentication failures. It likely depends on general PKI/X.509 concepts and the router's own IPsec/VPN MIB objects for full context, though no other MIB is explicitly named in the available module text. It is deployed on bintec BIANCA/BRICK routers used by small-to-medium businesses for IPsec VPN connectivity requiring certificate-based authentication. Network engineers evaluating or troubleshooting this functionality can download the BIANCA-BRICK-CERT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in BIANCA-BRICK-CERT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

bintec/BIANCA BRICK VPN/ISDN routers

Monitoring Examples

No sample objects were provided for this MIB, but given its stated purpose, an operator would poll a certificate table (following a bibrCert*Table naming pattern) to check each installed certificate's validity period and enrollment status. A certificate nearing its expiration date, or one whose enrollment status shows a failed state, would explain upcoming or current VPN tunnel authentication failures for peers relying on that certificate. This is inferred from the module's stated purpose since no object names were supplied.

What Can Be Monitored

certificate validity/expiration
certificate enrollment status
installed certificate inventory

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

Counter
IpAddress
TimeTicks

OIDs

OID symbolic	OID numeric	Type	Access	Description
org	1.3
dod	1.3.6
internet	1.3.6.1
private	1.3.6.1.4
enterprises	1.3.6.1.4.1
bintec	1.3.6.1.4.1.272
bibo	1.3.6.1.4.1.272.4
ipsec	1.3.6.1.4.1.272.4.26
cert	1.3.6.1.4.1.272.4.26.33
certGlobals	1.3.6.1.4.1.272.4.26.33.1
STR certGlobHttpProxy	1.3.6.1.4.1.272.4.26.33.1.1	DisplayString	read-write	This object specifies the HTTP proxy server which must be used to access the HTTP certificate servers defined. It takes either an IP-address or a fully qualified domain name.
STR certGlobSocksServer	1.3.6.1.4.1.272.4.26.33.1.2	DisplayString	read-write	This object specifies the SOCKS server which must be used to access the HTTP and LDAP certificate servers defined. It takes either an IP-address or a fully qualified domain name.
INT certGlobMaxCacheEntries	1.3.6.1.4.1.272.4.26.33.1.3	INTEGER	read-write	This object specifies the maximum number of certificate-cache entries allowed.
INT certGlobMaxPathLength	1.3.6.1.4.1.272.4.26.33.1.4	INTEGER	read-write	This object specifies the maximum number of intermediate CA certificates between a trusted root CA and a peer certificate accepted.
INT certGlobMaxRestarts	1.3.6.1.4.1.272.4.26.33.1.5	INTEGER	read-write	This object specifies the maximum number of restarts in one certificate search.
INT certGlobMaxCertValidity	1.3.6.1.4.1.272.4.26.33.1.6	INTEGER	read-write	This object specifies the maximum validity period of a certificate in seconds. A certificate will not be considered valid for a longer period of time even if its validity field specifies a longer period.
INT certGlobMaxCrlValidity	1.3.6.1.4.1.272.4.26.33.1.7	INTEGER	read-write	This object specifies the maximum validity period of a certificate revocation list in seconds. A crl will not be considered valid for a longer period of time even if its validity field specifies a longer period.
INT certGlobNegCachePeriod	1.3.6.1.4.1.272.4.26.33.1.8	INTEGER	read-write	This object specifies the period in seconds a certificate or crl search with a negative result will be remembered. Within this time, no new search will be performed for the same item.
certServerTable	1.3.6.1.4.1.272.4.26.33.2		not-accessible	The certServerTable contains the list of certificate servers used for certificate and crl requests.
certServerEntry	1.3.6.1.4.1.272.4.26.33.2.1		not-accessible	A certificate server entry defines the name of a certificate server together with the protocols used to access it.
STR certServerName	1.3.6.1.4.1.272.4.26.33.2.1.1	DisplayString	read-write	This object specifies the name of a certificate server.
STR certServerUrl	1.3.6.1.4.1.272.4.26.33.2.1.2	DisplayString	read-write	This object specifies the url used for accessing the certificate server. Syntax: [:][//[[:]@][:]]/[] example: ldap://myname:mypass@ldap.ca.com:389/ .
INT certServerPreference	1.3.6.1.4.1.272.4.26.33.2.1.3	INTEGER	read-write	This object specifies the preference of this server with respect to the others. Servers with lower priority are accessed prior to others.
INT certServerType	1.3.6.1.4.1.272.4.26.33.2.1.4	INTEGER	read-write	This object specifies the type of the entry and is used to delete it.
certTable	1.3.6.1.4.1.272.4.26.33.3		not-accessible	The certTable contains the list of certificates, including own certificates and those of the trusted certificate authorities.
certEntry	1.3.6.1.4.1.272.4.26.33.3.1		not-accessible	A certEntry contains either a peer's certificate, an own certficate or a certificate of a trusted certification authority, depending on the settings of the certFlags field.
INT certIndex	1.3.6.1.4.1.272.4.26.33.3.1.1	INTEGER	read-only	A unique index of this certificate entry.
STR certDescription	1.3.6.1.4.1.272.4.26.33.3.1.2	DisplayString	read-write	This object specifies the name of the X.509 Certificate.
INT certIsCA	1.3.6.1.4.1.272.4.26.33.3.1.3	INTEGER	read-write	This object specifies how the certificate is treated internally. Possible Values: true(1), -- A certificate of a trusted root CA false(2) -- An own or peer certificate.
INT certForceTrusted	1.3.6.1.4.1.272.4.26.33.3.1.4	INTEGER	read-write	This object specifies how the certificate is treated internally. Possible Values: true(1), -- Always trust this certificate without -- considering any CAs false(2) -- trust this certificate only, if there -- exists a valid trust path from a CA to it -- and it is not revoked.
INT certNoCrls	1.3.6.1.4.1.272.4.26.33.3.1.5	INTEGER	read-write	This object specifies how the certificate is treated internally. Possible Values: true(1), -- do not check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) false(2) -- check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates).
STR certSerialNumber	1.3.6.1.4.1.272.4.26.33.3.1.6	DisplayString	read-only	This object specifies the serial number of the certificate.
STR certSubjectName	1.3.6.1.4.1.272.4.26.33.3.1.7	DisplayString	read-only	The subject name of the certificate.
STR certSubjectAltNames	1.3.6.1.4.1.272.4.26.33.3.1.8	DisplayString	read-only	The subject alternative name of the certificate. For IPSec, this field (not the subject name) is taken by default as the peer id, if not otherwise specified.
STR certIssuerName	1.3.6.1.4.1.272.4.26.33.3.1.9	DisplayString	read-only	The name of the certificate authority which issued this certificate.
STR certIssuerAltNames	1.3.6.1.4.1.272.4.26.33.3.1.10	DisplayString	read-only	The alternative names of the certificate authority which issued this certificate.
STR certValidity	1.3.6.1.4.1.272.4.26.33.3.1.11	DisplayString	read-only	The validity period of this certificate in human readable form.
STR certPubKeyInfo	1.3.6.1.4.1.272.4.26.33.3.1.12	DisplayString	read-only	This string shows the properties of the public key certified in this certificate. These are the algorithm for which the key is used and its length.
OCT certKeyId	1.3.6.1.4.1.272.4.26.33.3.1.13	OCTET STRING	read-only	The key id as contained in the extensions of the certificate, if any.
INT certPrivateKey	1.3.6.1.4.1.272.4.26.33.3.1.14	INTEGER	read-write	The index of the private key from the ipsecPublicKeyTable corresponding to the public key in this certificate. Used only for own certificates.
OCT certMD5Fingerprint	1.3.6.1.4.1.272.4.26.33.3.1.24	OCTET STRING	read-only	The fingerprint of the certificate computed as an MD5 hash of the DER encoded binary certificate data.
OCT certSHA1Fingerprint	1.3.6.1.4.1.272.4.26.33.3.1.25	OCTET STRING	read-only	The fingerprint of the certificate computed as an SHA1 hash of the DER encoded binary certificate data.
certRevListTable	1.3.6.1.4.1.272.4.26.33.6		not-accessible	The certRevListTable contains the dynamic list of certificate revocation lists currently cached by the system.
certRevListEntry	1.3.6.1.4.1.272.4.26.33.6.1		not-accessible	This object describes a certificate revocation list (CRL) currently in the systems dynamic CRL cache.
INT certRevListIndex	1.3.6.1.4.1.272.4.26.33.6.1.1	INTEGER	read-only	A unique index of this CRL.
STR certRevListDescription	1.3.6.1.4.1.272.4.26.33.6.1.2	DisplayString	read-write	This object specifies the name of the certificate revocation list.
STR certRevListIssuerName	1.3.6.1.4.1.272.4.26.33.6.1.3	DisplayString	read-only	The name of the certificate authority which issued this CRL.
STR certRevListIssuerAltNames	1.3.6.1.4.1.272.4.26.33.6.1.4	DisplayString	read-only	The alternative names of the certificate authority which issued this CRL.
STR certRevListSerialNumber	1.3.6.1.4.1.272.4.26.33.6.1.5	DisplayString	read-only	The serial number of the CRL.
STR certRevListValidity	1.3.6.1.4.1.272.4.26.33.6.1.6	DisplayString	read-only	The issuing date of this CRL and the date the issuer is willing to issue the net update in human readable form.
INT certRevListNumCerts	1.3.6.1.4.1.272.4.26.33.6.1.7	INTEGER	read-only	The number of certificates contained in the CRL defined by this entry.

RFC description

Vendor-private MIB for Bianca Brick systems; manages certificate and security credential information.

Start monitoring bintec BIANCA/BRICK ISDN/VPN routers (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download BIANCA-BRICK-CERT-MIB

What Is BIANCA-BRICK-CERT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description