DLINK-3100-SSH-MIB

All MIBs › DLINK-3100-SSH-MIB

Organization: DLINK-3100 Computer Communication Ltd.

Last Updated: 2003--0-1-

Category: Domain: Security, Protocol: SSH, Vendor: D-Link

Description: Manages Secure Shell (SSH) server configuration and active session monitoring on D-Link 3100 series switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DLINK-3100-SSH-MIB?

DLINK-3100-SSH-MIB is a proprietary D-Link MIB for the 3100 series switches covering the embedded SSH server: its host public keys, key fingerprints, and top-level server/client status used for secure remote management access. It exposes the server's host public key table (algorithm, key fragments) and a fingerprint table (algorithm, digest format, fingerprint value) alongside server and client enable status. From a software-health standpoint this MIB confirms the SSH service is running with the expected host key, detecting an unexpectedly regenerated key that would break client trust, rather than reporting hardware metrics. It is a self-contained private MIB, independent of IETF SSH drafts, tailored to D-Link's own SSH implementation. It is deployed on D-Link DES-3100 switches wherever SSH is the standard secure-management method and key/fingerprint continuity must be verified, and administrators can download the DLINK-3100-SSH-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DLINK-3100-SSH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link DES-3100 series switch

Monitoring Examples

A monitoring script would poll rlSshServerHostPublicKeyFingerprintTable/rlSshServerHostPublicKeyFingerprintTableEntry to read the current rlSshServerHostPublicKeyFingerprint for a given rlSshServerHostPublicKeyFingerprintAlgorithm and compare it to a known-good baseline. A changed fingerprint between polls, without an authorized key-regeneration event, indicates the SSH host key was reset or the switch was reflashed. rlSshServer and rlSshClient status objects additionally confirm whether SSH server or client functionality is currently enabled.

What Can Be Monitored

SSH server host key algorithm/fragments
SSH host key fingerprints
SSH server enable status
SSH client status

Imported Objects

From DLINK-3100-MIB

rnd	MODULE-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
rlSsh	1.3.6.1.4.1.171.10.94.89.89.78			The MIB module describes the private MIB for SSH supported by DLINK-3100's software and products.
INT rlSshMibVersion	1.3.6.1.4.1.171.10.94.89.89.78.1	INTEGER	read-only	The MIB version. The current version is 2
rlSshServer	1.3.6.1.4.1.171.10.94.89.89.78.2
rlSshServerHostPublicKeyTable	1.3.6.1.4.1.171.10.94.89.89.78.2.1		not-accessible	This table contains the router's public key. Each row in this table contains a fragment of the key, in printable binhex format. There may be up to 160 characters in every fragment, and they are all combined to form one key. The key is generated by writing to rlSshServerRegenerateHostKey. To cause clients to connect to this router without printing warning messages (and also prevent active man-in-the-middle), the router's public key must printed out and inserted into the client's authorized_keys file
rlSshServerHostPublicKeyTableEntry	1.3.6.1.4.1.171.10.94.89.89.78.2.1.1		not-accessible	The row definition for this table.
RLS rlSshServerHostPublicKeyAlgorithm	1.3.6.1.4.1.171.10.94.89.89.78.2.1.1.1	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
U32 rlSshServerHostPublicKeyFragmentId	1.3.6.1.4.1.171.10.94.89.89.78.2.1.1.2	Unsigned32	read-only	Identifies the index of this fragment in the final key. All segments must be combined to form one big key.
STR rlSshServerHostPublicKeyFragmentText	1.3.6.1.4.1.171.10.94.89.89.78.2.1.1.3	DisplayString	read-only	A part of the readable text entry for the server's public authorzation key.
rlSshServerHostPublicKeyFingerprintTable	1.3.6.1.4.1.171.10.94.89.89.78.2.2		not-accessible	This table contains the fingerprint for the router's public key.
rlSshServerHostPublicKeyFingerprintTableEntry	1.3.6.1.4.1.171.10.94.89.89.78.2.2.1		not-accessible	The row definition for this table.
RLS rlSshServerHostPublicKeyFingerprintAlgorithm	1.3.6.1.4.1.171.10.94.89.89.78.2.2.1.1	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
RLS rlSshServerHostPublicKeyFingerprintDigestFormat	1.3.6.1.4.1.171.10.94.89.89.78.2.2.1.2	RlSshPublicKeyDigestFormat	read-only	Format of the digest to be displayed (OpenSSH or SSH.com).
STR rlSshServerHostPublicKeyFingerprint	1.3.6.1.4.1.171.10.94.89.89.78.2.2.1.3	DisplayString	read-only	SECSH format fingerprint of the server's public key. To prevent man in the middle attacks, users should make sure the ssh Server's fingerprint, as printed in the connection process, is similar to the one printed here.
rlSshServerAuthorizedUsersPublicKeyTable	1.3.6.1.4.1.171.10.94.89.89.78.2.3		not-accessible	This table contains public keys for all users who are authorized to access the router. For a user to be able to log in using SSH, the user name must appear in this table, and the user's public key must match the one found here.
rlSshServerAuthorizedUsersPublicKeyTableEntry	1.3.6.1.4.1.171.10.94.89.89.78.2.3.1		not-accessible	The row definition for this table.
STR rlSshServerAuthorizedUserName	1.3.6.1.4.1.171.10.94.89.89.78.2.3.1.1	DisplayString	read-write	Name of the user who owns this public key. Both the user name and the key bytes must match before a user is authenticated using this key.
U32 rlSshServerAuthorizedUserPublicKeyFragmentId	1.3.6.1.4.1.171.10.94.89.89.78.2.3.1.2	Unsigned32	read-write	Identifies the index of this fragment in the final key. All segments must be combined to form one big key.
STR rlSshServerAuthorizedUserPublicKeyFragmentText	1.3.6.1.4.1.171.10.94.89.89.78.2.3.1.3	DisplayString	read-write	A part of the readable text entry for the user's public authorzation key.
ROW rlSshServerAuthorizedUserPublicKeyFragmentStatus	1.3.6.1.4.1.171.10.94.89.89.78.2.3.1.4	RowStatus	read-write	Create or delete a fragment of the user's public key. A user is deleted if it has no remaining fragments.
rlSshServerAuthorizedUsersPublicKeyFingerprintTable	1.3.6.1.4.1.171.10.94.89.89.78.2.5		not-accessible	This table contains the fingerprints of the public keys for all users who are authorized to access the router. To prevent man in the middle attacks, users should make sure the user's fingerprint, as printed in the connection process, is similar to the one printed here.
rlSshServerAuthorizedUsersPublicKeyFingerprintTableEntry	1.3.6.1.4.1.171.10.94.89.89.78.2.5.1		not-accessible	The row definition for this table.
STR rlSshServerAuthorizedUserFingerprintName	1.3.6.1.4.1.171.10.94.89.89.78.2.5.1.1	DisplayString	read-write	Name of the user who owns this public key. Both the user name and the key bytes must match before a user is authenticated using this key.
RLS rlSshServerAuthorizedUserPublicKeyFingerprintAlgorithm	1.3.6.1.4.1.171.10.94.89.89.78.2.5.1.2	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
RLS rlSshServerAuthorizedUserPublicKeyFingerprintDigestFormat	1.3.6.1.4.1.171.10.94.89.89.78.2.5.1.3	RlSshPublicKeyDigestFormat	read-only	Format of the digest to be displayed (OpenSSH or SSH.com).
STR rlSshServerAuthorizedUserPublicKeyFingerprint	1.3.6.1.4.1.171.10.94.89.89.78.2.5.1.4	DisplayString	read-only	SECSH format fingerprint of the user's public key. To prevent man in the middle attacks, users should make sure their ssh fingerprint, as printed in the connection process, is similar to the one printed here.
rlSshServerSessionTable	1.3.6.1.4.1.171.10.94.89.89.78.2.6		not-accessible	Each row in this table corresponds to an active SSH session with the server
rlSshServerSessionTableEntry	1.3.6.1.4.1.171.10.94.89.89.78.2.6.1		not-accessible	The row definition for this table.
U32 rlSshServerSessionIdentifier	1.3.6.1.4.1.171.10.94.89.89.78.2.6.1.1	Unsigned32	read-only	Identifies the connection to which this row corresponds.
IP rlSshServerSessionPeerAddress	1.3.6.1.4.1.171.10.94.89.89.78.2.6.1.2	IpAddress	read-only	The network address of the remote host connected to the server.
U32 rlSshServerSessionPeerPort	1.3.6.1.4.1.171.10.94.89.89.78.2.6.1.3	Unsigned32	read-only	The source network port of the remote host connected to the server.
STR rlSshServerSessionPeerVersion	1.3.6.1.4.1.171.10.94.89.89.78.2.6.1.4	DisplayString	read-only	The client version of the remote host connected to the server.
STR rlSshServerSessionUsername	1.3.6.1.4.1.171.10.94.89.89.78.2.6.1.5	DisplayString	read-only	SSH authenticated name of user connected to the server.
STR rlSshServerSessionCipher	1.3.6.1.4.1.171.10.94.89.89.78.2.6.1.6	DisplayString	read-only	Data encryption cipher used in this connection.
STR rlSshServerSessionHMAC	1.3.6.1.4.1.171.10.94.89.89.78.2.6.1.7	DisplayString	read-only	Message authentication code used in this connection.
rlSshServerSessionInetTable	1.3.6.1.4.1.171.10.94.89.89.78.2.7		not-accessible	Each row in this table corresponds to an active SSH session with the server
rlSshServerSessionInetTableEntry	1.3.6.1.4.1.171.10.94.89.89.78.2.7.1		not-accessible	The row definition for this table.
U32 rlSshServerSessionInetIdentifier	1.3.6.1.4.1.171.10.94.89.89.78.2.7.1.1	Unsigned32	read-only	Identifies the connection to which this row corresponds.
IPt rlSshServerSessionInetPeerAddressType	1.3.6.1.4.1.171.10.94.89.89.78.2.7.1.2	InetAddressType	read-only	The network address of the remote host connected to the server.
IP rlSshServerSessionInetPeerAddress	1.3.6.1.4.1.171.10.94.89.89.78.2.7.1.3	InetAddress	read-only	The network address of the remote host connected to the server.
U32 rlSshServerSessionInetPeerPort	1.3.6.1.4.1.171.10.94.89.89.78.2.7.1.4	Unsigned32	read-only	The source network port of the remote host connected to the server.
STR rlSshServerSessionInetPeerVersion	1.3.6.1.4.1.171.10.94.89.89.78.2.7.1.5	DisplayString	read-only	The client version of the remote host connected to the server.
STR rlSshServerSessionInetUsername	1.3.6.1.4.1.171.10.94.89.89.78.2.7.1.6	DisplayString	read-only	SSH authenticated name of user connected to the server.
STR rlSshServerSessionInetCipher	1.3.6.1.4.1.171.10.94.89.89.78.2.7.1.7	DisplayString	read-only	Data encryption cipher used in this connection.
STR rlSshServerSessionInetHMAC	1.3.6.1.4.1.171.10.94.89.89.78.2.7.1.8	DisplayString	read-only	Message authentication code used in this connection.
U32 rlSshServerPort	1.3.6.1.4.1.171.10.94.89.89.78.2.101	Unsigned32	read-write	Specifies the TCP port used by the SSH 2 Server to listen for incoming connections.
INT rlSshServerEnable	1.3.6.1.4.1.171.10.94.89.89.78.2.102	INTEGER	read-write	Enables listening for incoming SSH2 connections on the port defined in rlSshServerPort.
INT rlSshServerEnablePublicKeyAuthentication	1.3.6.1.4.1.171.10.94.89.89.78.2.103	INTEGER	read-write	If PK authentication is enabled, incoming SSH connections are authenticated using public key authentication (using rlSshServerAuthorizedUsersPublicKeyTable), before authenticating using the router's standard AAA. If disabled, SSH connections are only authorized by the router's AAA component.
RLS rlSshServerRegenerateHostKey	1.3.6.1.4.1.171.10.94.89.89.78.2.104	RlSshPublicKeyAlgorithm	read-write	Setting to a value other than none results in the Server (Host) Key being regenerated. The key size is host-specific.
rlSshClient	1.3.6.1.4.1.171.10.94.89.89.78.3
STR rlSshClientUserName	1.3.6.1.4.1.171.10.94.89.89.78.3.1	DisplayString	read-write	Specifies the default user name the ssh client will use when authenticating to a remote server.
RLS rlSshClientRegenerateSelfKey	1.3.6.1.4.1.171.10.94.89.89.78.3.2	RlSshPublicKeyAlgorithm	read-write	Setting to a value other than none results in the client self key being regenerated. The key size is host-specific.
rlSshClientSelfPublicKeyTable	1.3.6.1.4.1.171.10.94.89.89.78.3.3		not-accessible	This table contains the router's client self public key. Each row in this table contains a fragment of the key, in printable binhex format. There may be up to 160 characters in every fragment, and they are all combined to form one key. The key is generated by writing to rlSshClientRegenerateSelfKey. To cause clients to connect to this router without printing warning messages (and also prevent active man-in-the-middle), the router's public key must printed out and inserted into the client's authorized_keys file
rlSshClientSelfPublicKeyTableEntry	1.3.6.1.4.1.171.10.94.89.89.78.3.3.1		not-accessible	The row definition for this table.
U32 rlSshClientSelfPublicKeyFragmentId	1.3.6.1.4.1.171.10.94.89.89.78.3.3.1.1	Unsigned32	read-only	Identifies the index of this fragment in the final key. All segments must be combined to form one big key.
RLS rlSshClientSelfPublicKeyAlgorithm	1.3.6.1.4.1.171.10.94.89.89.78.3.3.1.2	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
STR rlSshClientSelfPublicKeyFragmentText	1.3.6.1.4.1.171.10.94.89.89.78.3.3.1.3	DisplayString	read-write	A part of the readable text entry for the router's client public authorization key.
rlSshClientSelfPublicKeyFingerprintTable	1.3.6.1.4.1.171.10.94.89.89.78.3.4		not-accessible	This table contains the fingerprint for the client's self key.
rlSshClientSelfPublicKeyFingerprintTableEntry	1.3.6.1.4.1.171.10.94.89.89.78.3.4.1		not-accessible	The row definition for this table.
RLS rlSshClientSelfPublicKeyFingerprintAlgorithm	1.3.6.1.4.1.171.10.94.89.89.78.3.4.1.1	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
RLS rlSshClientSelfPublicKeyFingerprintDigestFormat	1.3.6.1.4.1.171.10.94.89.89.78.3.4.1.2	RlSshPublicKeyDigestFormat	read-only	Format of the digest to be displayed (OpenSSH or SSH.com).
STR rlSshClientSelfPublicKeyFingerprint	1.3.6.1.4.1.171.10.94.89.89.78.3.4.1.3	DisplayString	read-only	SECSH format fingerprint of the client's self key. To prevent man in the middle attacks, users should make sure the ssh Server's fingerprint, as printed in the connection process, is similar to the one printed here.

RFC description

D-Link DGS-3100 series managed switch MIB for SSH (Secure Shell) configuration and monitoring. Provides management objects for SSH security settings and secure terminal access on D-Link gigabit stackable managed switches.

Start monitoring D-Link DES-3100 series switch (embedded SSH server) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DLINK-3100-SSH-MIB

What Is DLINK-3100-SSH-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description