ENTERASYS-CONFIGURATION-CHANGE-MIB

All MIBs › ENTERASYS-CONFIGURATION-CHANGE-MIB

Organization: Enterasys Networks

Last Updated: 2001-11-26

Category: Vendor: Enterasys/Cabletron

Description: Enterasys Networks MIB for monitoring configuration change counters across volatile, non-volatile, and firmware storage.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ENTERASYS-CONFIGURATION-CHANGE-MIB?

ENTERASYS-CONFIGURATION-CHANGE-MIB is an Enterasys Networks (a Cabletron successor, later part of Extreme Networks) proprietary MIB for tracking configuration-change activity across three storage domains on a device: volatile (running) configuration, non-volatile (saved) configuration, and firmware. It exposes, for each domain, a change counter, a timestamp of the last change, and a method indicator describing how the change was made (e.g., CLI, SNMP, console). Its monitoring purpose is explicitly configuration/software-integrity tracking: by polling etsysConfigChangeNonVolatileCount/Time/Method (and the parallel Volatile and Firmware objects), an operator can detect unexpected or unauthorized configuration changes, confirm when a firmware update last occurred, and audit whether changes were pushed via a specific management method, functioning as a lightweight change-audit trail rather than a performance or environmental MIB. It is a self-contained Enterasys enterprise-tree module with no apparent hard dependency on other MIBs beyond general SNMPv2 SMI conventions. It is deployed on Enterasys/Extreme Networks enterprise switches and routers where change-tracking and configuration audit compliance matter, typically beginning with an ENTERASYS-CONFIGURATION-CHANGE-MIB download to load its object definitions into a MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-CONFIGURATION-CHANGE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Enterasys/Extreme Networks enterprise switch
Enterasys/Extreme Networks router

Monitoring Examples

An administrator would poll etsysConfigChangeNonVolatileCount and etsysConfigChangeNonVolatileTime together to see how many times the saved configuration has changed and when the most recent change occurred, cross-checking etsysConfigChangeNonVolatileMethod to see if it happened via console, CLI, or SNMP. A sudden, unexplained increment in etsysConfigChangeFirmwareCount outside a scheduled maintenance window would flag a possible unauthorized firmware change. The parallel etsysConfigChangeVolatileCount/Time/Method objects do the same for the running (unsaved) configuration.

What Can Be Monitored

non-volatile (saved) config change count/time/method
volatile (running) config change count/time/method
firmware change count/time/method

Imported Objects

From ENTERASYS-MIB-NAMES

etsysModules

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DateAndTime

How to Use in IPNetwork Monitor

Example using etsysConfigChangeNonVolatileCount OID:

Select an Enterasys Networks switch (legacy, later Extreme Networks)/router (config-change audit tracking) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type etsysConfigChangeNonVolatileCount into the Find box to locate it in the OID tree, then select it and click OK. The number of successful non-volatile, or persistent, configuration changes. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
etsysConfigurationChangeMIB	1.3.6.1.4.1.5624.1.2.12			This MIB module defines a portion of the SNMP enterprise MIBs under the Enterasys enterprise OID pertaining to the monitoring of configuration changes for Enterasys products.
etsysConfigChangeNonVolatile	1.3.6.1.4.1.5624.1.2.12.1
C32 etsysConfigChangeNonVolatileCountEx	1.3.6.1.4.1.5624.1.2.12.1.1	Counter32	read-only	The number of successful non-volatile, or persistent, configuration changes.
DAT etsysConfigChangeNonVolatileTime	1.3.6.1.4.1.5624.1.2.12.1.2	DateAndTime	read-only	The date and time of the last successful non-volatile, or persistent, configuration change. Return an object of all zeros if this information is not available and the group is otherwise supported.
STR etsysConfigChangeNonVolatileMethod	1.3.6.1.4.1.5624.1.2.12.1.3	SnmpAdminString	read-only	The method that was used to make the last non-volatile change. i.e. SNMP, TELNET, LM, CLI. If the individual user login, or the source IP address, is available they should be included in this string. example format: Return a null byte if no information is available and the group is otherwise supported.
etsysConfigChangeVolatile	1.3.6.1.4.1.5624.1.2.12.2
C32 etsysConfigChangeVolatileCount	1.3.6.1.4.1.5624.1.2.12.2.1	Counter32	read-only	The number of successful volatile, or non-persistent, configuration changes.
DAT etsysConfigChangeVolatileTime	1.3.6.1.4.1.5624.1.2.12.2.2	DateAndTime	read-only	The date and time of the last successful volatile, or non-persistent, configuration change. Return an object of all zeros if this information is not available and the group is otherwise supported.
STR etsysConfigChangeVolatileMethod	1.3.6.1.4.1.5624.1.2.12.2.3	SnmpAdminString	read-only	The method that was used to make the last volatile change. i.e. SNMP, TELNET, LM, CLI. If the individual user login, or the source IP address, is available they should be included in this string. example format: Return a null byte if no information is available and the group is otherwise supported.
etsysConfigChangeFirmware	1.3.6.1.4.1.5624.1.2.12.3
C32 etsysConfigChangeFirmwareCount	1.3.6.1.4.1.5624.1.2.12.3.1	Counter32	read-only	The number of successful firmware image downloads.
DAT etsysConfigChangeFirmwareTime	1.3.6.1.4.1.5624.1.2.12.3.2	DateAndTime	read-only	The date and time of the last successful firmware image download. Return an object of all zeros if this information is not available and the group is otherwise supported.
STR etsysConfigChangeFirmwareMethod	1.3.6.1.4.1.5624.1.2.12.3.3	SnmpAdminString	read-only	The method that was used to cause the last firmware change. i.e. SNMP, TELNET, LM, CLI. If the individual user login, or the source IP address, is available they should be included in this string. example format: Return a null byte if no information is available and the group is otherwise supported.
etsysConfigChangeConformance	1.3.6.1.4.1.5624.1.2.12.4
etsysConfigChangeGroups	1.3.6.1.4.1.5624.1.2.12.4.1
etsysConfigChangeNonVolatileGroup	1.3.6.1.4.1.5624.1.2.12.4.1.1			A collection of objects providing non-volatile configuration change information.
etsysConfigChangeVolatileGroup	1.3.6.1.4.1.5624.1.2.12.4.1.2			A collection of objects providing volatile configuration change information.
etsysConfigChangeFirmwareGroup	1.3.6.1.4.1.5624.1.2.12.4.1.3			A collection of objects providing firmware change information.
etsysConfigChangeCompliances	1.3.6.1.4.1.5624.1.2.12.4.2
etsysConfigChangeCompliance	1.3.6.1.4.1.5624.1.2.12.4.2.1			The compliance statement for devices that are configurable.

RFC description

Tracks persistent and volatile configuration changes with timestamps on Enterasys network devices.

Start monitoring Enterasys Networks switch (legacy, later Extreme Networks)/router (config-change audit tracking) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ENTERASYS-CONFIGURATION-CHANGE-MIB