All MIBs › CME-MIB › mmSshClientAuthPubKeyAcceptFrom
mmSshClientAuthPubKeyAcceptFrom
Module: CME-MIB
OID (symbolic): CME-MIB::mmSshClientAuthPubKeyAcceptFrom
OID (numeric): 1.3.6.1.4.1.2.3.51.2.4.1.6.1.1.6
Node type: OBJECT-TYPE
Type: OCTET STRING
Access: read-write
Description: This is a filter that describes the set of SSH client IP addresses and host names that can establish SSH connections to the MM authenticated by the public key represented by this entry of the table. The filter is a comma-separated list of IP addresses and/or hostnames. A question mark may be used to match any single character. An asterisk may be used to match multiple characters. An exclamation point may preceed an IP address or hostname to deny acccess from that IP address or hostname.
The format of the Accept From specification is: from=PATTERN-LIST PATTERN-LIST is the filter, which must be enclosed in double quotation marks.
NOTE:This MIB object can be manipulated after the corresponding SSH public key is installed.
What is mmSshClientAuthPubKeyAcceptFrom?
This read-write octet string filters which SSH client IP addresses or hostnames are allowed to authenticate using this public key, as a comma-separated list supporting wildcards (? and *) and exclusion prefixes (!). An admin uses this to restrict a given key to only be usable from specific known management workstations, limiting the blast radius if the private key is ever stolen. For example, setting AcceptFrom to '10.1.1.*' would let this key authenticate only from hosts on that particular subnet.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2.3.51.2.4.1.6.1.1.6 snmpwalk -v2c -c public <target> CME-MIB::mmSshClientAuthPubKeyAcceptFrom
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2.3.51.2.4.1.6.1.1.6.1 snmpget -v2c -c public <target> CME-MIB::mmSshClientAuthPubKeyAcceptFrom.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.2.3.51.2.4.1.6.1.1.6.1 s <value>
Start monitoring Cisco Communications Manager Express (CME) router/gateway with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CME-MIB::mmSshClientAuthPubKeyAcceptFrom OID value, configure state conditions and alerts, and monitor any Cisco Communications Manager Express (CME) router/gateway from a single console.
OID Breakdown
Upper-level ancestors (12 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2 | ibm | BLADE-MIB |
| 1.3.6.1.4.1.2.3 | ibmAgents | BLADE-MIB |
| 1.3.6.1.4.1.2.3.51 | netfinitySupportProcessorAgent | BLADE-MIB |
| 1.3.6.1.4.1.2.3.51.2 | bladeCenterSnmpMIB | BLADE-MIB |
| 1.3.6.1.4.1.2.3.51.2.4 | configureSP | BLADE-MIB |
| 1.3.6.1.4.1.2.3.51.2.4.1 | remoteAccessConfig | BLADE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2.3.51.2.4.1.6 | mmSshClientAuth | CME-MIB |
| 1.3.6.1.4.1.2.3.51.2.4.1.6.1 | mmSshClientAuthPubKeyTable | CME-MIB |
| 1.3.6.1.4.1.2.3.51.2.4.1.6.1.1 | mmSshClientAuthPubKeyEntry | CME-MIB |
| 1.3.6.1.4.1.2.3.51.2.4.1.6.1.1.6 | mmSshClientAuthPubKeyAcceptFrom | CME-MIB |