All MIBs › CME-MIB › accountSecurityLevel
accountSecurityLevel
Module: CME-MIB
OID (symbolic): CME-MIB::accountSecurityLevel
OID (numeric): 1.3.6.1.4.1.2.3.51.2.4.1.1.20.1
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: The level of security needed for local user login passwords. The legacy level: - no password required - no password expiration - no password re-use restrictions - no frequency of password change restrictions - account is locked for 2 minutes after 5 login failures - simple password rules - no account inactivity monitoring The high level: - password required - factory default 'USERID' account password must be changed on next login - force user to change password on first login - password expires in 90 days - password re-use checking enabled (last 5 passwords kept in history) - minimum 24 hours interval between password changes - account is locked for 60 minutes after 5 login failures - complex password rules with 2 degrees of difference from previous password - alert on account inactivity after 120 days - accounts disabled after 180 days of inactivity The custom level: - set the password settings individually under customSecuritySettings The default value is legacy.
What is accountSecurityLevel?
This read-write integer selects the overall password and login security posture for local accounts: legacy(0) applies minimal rules such as no required password and a 2-minute lockout after 5 failures, while high(1) and custom(2) apply stricter settings. An admin picks this to bring the chassis's login policy in line with organizational security requirements. For example, switching from legacy(0) to high(1) would immediately tighten password expiration, complexity, and lockout behavior for all local users.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2.3.51.2.4.1.1.20.1 snmpwalk -v2c -c public <target> CME-MIB::accountSecurityLevel
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2.3.51.2.4.1.1.20.1.1 snmpget -v2c -c public <target> CME-MIB::accountSecurityLevel.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.2.3.51.2.4.1.1.20.1.1 i <value>
Start monitoring Cisco Communications Manager Express (CME) router/gateway with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CME-MIB::accountSecurityLevel OID value, configure state conditions and alerts, and monitor any Cisco Communications Manager Express (CME) router/gateway from a single console.
OID Breakdown
Upper-level ancestors (13 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2 | ibm | BLADE-MIB |
| 1.3.6.1.4.1.2.3 | ibmAgents | BLADE-MIB |
| 1.3.6.1.4.1.2.3.51 | netfinitySupportProcessorAgent | BLADE-MIB |
| 1.3.6.1.4.1.2.3.51.2 | bladeCenterSnmpMIB | BLADE-MIB |
| 1.3.6.1.4.1.2.3.51.2.4 | configureSP | BLADE-MIB |
| 1.3.6.1.4.1.2.3.51.2.4.1 | remoteAccessConfig | BLADE-MIB |
| 1.3.6.1.4.1.2.3.51.2.4.1.1 | generalRemoteCfg | BLADE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2.3.51.2.4.1.1.20 | accountSecurityManagement | CME-MIB |
| 1.3.6.1.4.1.2.3.51.2.4.1.1.20.1 | accountSecurityLevel | CME-MIB |