CISCOSB-MNGINF-MIB

All MIBs › CISCOSB-MNGINF-MIB

Organization: Cisco Small Business

Last Updated: 2003-09-21

Category: Device Management, Vendor: RADLAN/Cisco SB

Description: Manages Cisco Small Business management interface configuration for in-band and out-of-band access.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCOSB-MNGINF-MIB?

CISCOSB-MNGINF-MIB is a Cisco Small Business private MIB that controls which interfaces and IP addresses are permitted to manage the device, implementing an in-band/out-of-band management access-control list. It exposes a global enable flag, an active list name, and a table of prioritized access rules keyed by interface, source IP address/mask, service, and permit/deny action. This is a configuration/security-status MIB rather than a hardware-health one: it lets an administrator audit which management access rules are currently active and in what priority order, helping confirm management access is properly locked down or diagnose why a legitimate management station is being denied. It has no notable dependency on other MIBs beyond the shared CISCOSB private-enterprise structure. It is used on small-business switches/routers to restrict SNMP, web, and CLI management access to trusted networks, a common use case documented in the CISCOSB-MNGINF-MIB MIB definition.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCOSB-MNGINF-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Small Business switches and routers

Monitoring Examples

An auditor would poll rlMngInfListTable/rlMngInfListEntry to review each rule's rlMngInfListIpAddr, rlMngInfListIpNetMask, rlMngInfListService, and rlMngInfListAction, confirming that only expected subnets are granted access to a given rlMngInfListService like SNMP or HTTP. Checking rlMngInfEnable and rlMngInfActiveListName verifies whether access-list enforcement is currently turned on and which list is in effect. A management station suddenly unable to reach a device's web UI often traces back to an rlMngInfListAction of deny newly added at a higher rlMngInfListPriority than the expected allow rule.

What Can Be Monitored

management access enable status
active management access list
per-rule source IP/mask
per-rule permitted service
per-rule permit/deny action and priority

Imported Objects

From CISCOSB-MIB

switch001

MODULE-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
rlMngInf	1.3.6.1.4.1.9.6.1.101.89			The private MIB module definition for management access control.
INT rlMngInfMibVersion	1.3.6.1.4.1.9.6.1.101.89.1	INTEGER	read-only	MIB's version, the current version is 1.
T/F rlMngInfEnable	1.3.6.1.4.1.9.6.1.101.89.2	TruthValue	read-write	The variable specifies if Management ACL functionality is enabled.
STR rlMngInfActiveListName	1.3.6.1.4.1.9.6.1.101.89.3	DisplayString	read-write	The currently activated Management ACL name
rlMngInfListTable	1.3.6.1.4.1.9.6.1.101.89.4		not-accessible	The table specifies all defined Access Lists definitions for IPv4 addresses. Provide backward compatibility for previous versions.
rlMngInfListEntry	1.3.6.1.4.1.9.6.1.101.89.4.1		not-accessible	Row definition for this table.
STR rlMngInfListName	1.3.6.1.4.1.9.6.1.101.89.4.1.1	DisplayString	read-only	The Name of the Access List.
U32 rlMngInfListPriority	1.3.6.1.4.1.9.6.1.101.89.4.1.2	Unsigned32	read-only	The Priority value.
U32 rlMngInfListIfIndex	1.3.6.1.4.1.9.6.1.101.89.4.1.3	Unsigned32	read-write	The IfIndex value. The IfIndex can be configured to be 0, which means don't care value.
IP rlMngInfListIpAddr	1.3.6.1.4.1.9.6.1.101.89.4.1.4	IpAddress	read-write	The IP address. The IP address can be configured to be 0, which means don't care value.
IP rlMngInfListIpNetMask	1.3.6.1.4.1.9.6.1.101.89.4.1.5	IpAddress	read-write	The subnet mask associated with the IP address of this entry. The value of the mask is an IP address with all the network bits set to 1 and all the hosts bits set to 0.
RLM rlMngInfListService	1.3.6.1.4.1.9.6.1.101.89.4.1.6	RlMngInfServiceType	read-write	Service type. The Service type address can be configured to be 0, which means any of Telnet, SNMP, HTTP, HTTPS, SSH.
RLM rlMngInfListAction	1.3.6.1.4.1.9.6.1.101.89.4.1.7	RlMngInfActionType	read-write	Action type. Can be permit or deny.
ROW rlMngInfListRowStatus	1.3.6.1.4.1.9.6.1.101.89.4.1.8	RowStatus	read-write	The row status variable, used according to row installation and removal conventions.
T/F rlMngInfAuditingEnable	1.3.6.1.4.1.9.6.1.101.89.5	TruthValue	read-write	Controls whether SysLog messages should be issued on reject by rule
rlMngInfListInetTable	1.3.6.1.4.1.9.6.1.101.89.6		not-accessible	The table specifies all defined Access Lists definitions definitions for both IPv4 and IPv6 addresses.
rlMngInfListInetEntry	1.3.6.1.4.1.9.6.1.101.89.6.1		not-accessible	Row definition for this table.
STR rlMngInfListInetName	1.3.6.1.4.1.9.6.1.101.89.6.1.1	DisplayString	read-only	The Name of the Access List.
U32 rlMngInfListInetPriority	1.3.6.1.4.1.9.6.1.101.89.6.1.2	Unsigned32	read-only	The Priority value.
U32 rlMngInfListInetIfIndex	1.3.6.1.4.1.9.6.1.101.89.6.1.3	Unsigned32	read-write	The IfIndex value. The IfIndex can be configured to be 0, which means don't care value.
IPt rlMngInfListInetIpAddrType	1.3.6.1.4.1.9.6.1.101.89.6.1.4	InetAddressType	read-write	The Inet address type.
IP rlMngInfListInetIpAddr	1.3.6.1.4.1.9.6.1.101.89.6.1.5	InetAddress	read-write	The Inet address.Used for both IPv4 and IPv6 addresses. The InetIpAddress can be configured to be 0.0.0.0 and address type IPv4 , which means ignored value.
IP rlMngInfListInetIpNetMask	1.3.6.1.4.1.9.6.1.101.89.6.1.6	IpAddress	read-write	This field will used in case of IPv4 addresses . For IPv6 this field ignored. Default value 255.255.255.255.
RLM rlMngInfListInetService	1.3.6.1.4.1.9.6.1.101.89.6.1.7	RlMngInfServiceType	read-write	Service type. The Service type address can be configured to be 0, which means any of Telnet, SNMP, HTTP, HTTPS, SSH.
RLM rlMngInfListInetAction	1.3.6.1.4.1.9.6.1.101.89.6.1.8	RlMngInfActionType	read-write	Action type. Can be permit or deny.
ROW rlMngInfListInetRowStatus	1.3.6.1.4.1.9.6.1.101.89.6.1.9	RowStatus	read-write	The row status variable, used according to row installation and removal conventions.
INT rlMngInfListInetIPv6PrefixLength	1.3.6.1.4.1.9.6.1.101.89.6.1.10	INTEGER	read-write	IPv6 prefix length.This field provide IPv6 prefix length (mask) for IPv6 only.In case of IPv4 this field will ignored

RFC description

Configures management access control lists (ACL) for Telnet, SNMP, HTTP, and SSH on Cisco Small Business switches.

Start monitoring Cisco Small Business switches and routers with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCOSB-MNGINF-MIB

What Is CISCOSB-MNGINF-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description