BRCM-TELNET-MGMT-MIB

All MIBs › BRCM-TELNET-MGMT-MIB

Organization: Broadcom Corporation

Last Updated: 2006-02-02

Category: Broadcom DOCSIS / Cable Modem, Management & Admin Interfaces

Description: Manages Telnet server access settings and session parameters on Broadcom cable modem platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is BRCM-TELNET-MGMT-MIB?

BRCM-TELNET-MGMT-MIB is a Broadcom vendor-specific MIB that manages and monitors Telnet-based remote management access on Broadcom cable modem/gateway platforms. It exposes configuration objects for enabling or disabling the Telnet server and setting credentials, alongside runtime status objects for the current management session and a security-oriented table tracking suspicious login attempts (the "hacker" table). It is used to monitor the software/service status of the device's remote-management interface — whether Telnet is enabled, whether a session is currently active, and from where — as well as to detect potential unauthorized access attempts via the intrusion-tracking table and associated traps. As a management/security MIB it has no significant dependency on other MIBs beyond standard SNMPv2 conventions, though it complements other Broadcom cable-modem management MIBs. It's typically deployed in DOCSIS cable modems and residential gateways built on Broadcom chipsets, used by ISPs for remote CPE diagnostics and security auditing, and the BRCM-TELNET-MGMT-MIB download is available for ISPs to load into their MIB browser for this purpose.

IPNetwork Monitor allows you to monitor SNMP objects defined in BRCM-TELNET-MGMT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Broadcom-based DOCSIS cable modem/residential gateway

Monitoring Examples

An operator would check telnetServerControl to confirm whether Telnet management is enabled or disabled on a subscriber's cable modem, and poll telnetSessionInProgress along with telnetSessionIp/telnetSessionAddress to see if a management session is currently active and from which address. telnetHackerTable entries, keyed by telnetHackerAddressType, log addresses that triggered failed-login/intrusion detection, and combined with telnetTraps notifications alert an operator to a brute-force attempt against the device's Telnet interface. telnetForceUserLogout lets an administrator remotely terminate a stuck or unauthorized session.

What Can Be Monitored

Telnet server enabled/disabled state
active management session address and in-progress status
failed/suspicious login attempts ('hacker' table)
telnet security trap notifications

Imported Objects

From BRCM-CABLEDATA-MGMT-MIB

cableDataMgmtBase

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

DisplayString
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
telnetMgmt	1.3.6.1.4.1.4413.50.1.1.2.1.1.1			Broadcom telnet management MIB
BIT telnetIpStackInterfaces	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.1	Bits	read-write	Controls and reflects the IP stack interfaces on which a telnet server is active.
STR telnetUserName	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.2	DisplayString	read-write	Controls and reflects the user name which will be allowed telnet access.
STR telnetPassword	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.3	DisplayString	read-write	Controls and reflects the password which will be allowed telnet access.
INT telnetServerControl	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.4	INTEGER	read-write	Used to start or stop the telnet server. When read, indicates the current state of the server.
IP telnetSessionIp	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.5	IpAddress	read-only	This object gives the IP address of the most recently connected device. If no session has taken place since the last reboot, this object will read 0.0.0.0.
T/F telnetSessionInProgress	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.6	TruthValue	read-only	Indicates whether or not a telnet session is currently in progress.
T/F telnetForceUserLogout	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.7	TruthValue	read-write	If a telnet session is currently in progress, setting this object to true(1) will terminate the session. Setting to false(2) has no effect. Always returns false(2) when read.
IPt telnetSessionAddressType	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.8	InetAddressType	read-only	The type of internet address used for telnetSessionAddress.
IP telnetSessionAddress	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.9	InetAddress	read-only	This object gives the address of the most recently connected device. If no session has taken place since the last reboot, this object will report an empty string.
telnetHackerTable	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.10		not-accessible	A table of internet addresses which have been blacklisted from telnet access on this station. Blacklisting occurs when a login attempt fails a number of times from the given address.
telnetHackerEntry	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.10.1		not-accessible	An entry representing a single blacklisted address.
IPt telnetHackerAddressType	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.10.1.1	InetAddressType	not-accessible	The type of internet address used for telnetHackerAddress.
IP telnetHackerAddress	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.10.1.2	InetAddress	not-accessible	The address of an device which has unsuccessfully attempted to log in to this station enough times to be blacklisted as a hacker.
U32 telnetHackerNumAttempts	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.10.1.3	Unsigned32	read-only	The number of times that the device represented by this entry has attempted to log in to this station.
TIK telnetHackerLastTime	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.10.1.4	TimeTicks	read-only	The value of sysUpTime when this row was created, or when the value of telnetHackerNumAttempts was last incremented.
INT telnetSessionInactivityTimeout	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.11	INTEGER	read-write	This object controls the length of time after which a telnet session will be terminated if there is no activity. Note that if this object is set to zero, the session will never be terminated due to inactivity.
INT telnetHackerInactivityTimeout	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.12	INTEGER	read-write	This object controls the length of time after which an entry in the telnetHackerTable will be removed if there are no further attempts to access the system from the corresponding telnetHackerAddress. Note that if this object is set to zero, the telnetHackerTable will be effectively disabled and no IP addresses will be blacklisted for unauthorized access. If set to -1, entries in the telnetHackerTable will never be aged out and once blacklisted, only a system reboot will allow another attempted login from the blacklisted address.
telnetTraps	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.99
NTF telnetHackerTrap	1.3.6.1.4.1.4413.50.1.1.2.1.1.1.99.1			An entry has been added to the telnetHackerTable, indicating repeated unauthorized login attempts by the device indicated.

RFC description

Vendor-private MIB for Broadcom network devices; manages Telnet service configuration, authentication, and remote management access.

Start monitoring Broadcom-chipset DOCSIS cable modems/gateways with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download BRCM-TELNET-MGMT-MIB

What Is BRCM-TELNET-MGMT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description