ENTERASYS-PKI-MIB

All MIBs › ENTERASYS-PKI-MIB

Organization: Enterasys Networks, Inc

Last Updated: 2013-03-27

Category: Domain: Security, VPN and Security, Vendor: Enterasys/Cabletron

Description: Enterasys Networks MIB for monitoring PKI certificate events and expiration notifications on Enterasys network devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ENTERASYS-PKI-MIB?

ENTERASYS-PKI-MIB is an Enterasys Networks proprietary MIB defining PKI (Public Key Infrastructure) certificate notifications for network-management monitoring. Its objects cover a certificate's list name, fingerprint, issuer name, subject name, and validity start/end dates, alongside a nearing-expiration notification. As a status/notification MIB it lets a management system get alerted before an installed certificate expires, avoiding an unplanned authentication outage. It is deployed on Enterasys Networks switches using certificate-based authentication. Engineers can download the ENTERASYS-PKI-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-PKI-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Enterasys Networks switches (certificate-based authentication)

Monitoring Examples

A management system subscribes to etsysPkiCertNearingExpirationNotification to get an early warning before a certificate used for switch authentication expires unexpectedly.

What Can Be Monitored

certificate expiration notifications

Imported Objects

From ENTERASYS-MIB-NAMES

etsysModules

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DateAndTime

OIDs

OID symbolic	OID numeric	Type	Access	Description
etsysPkiMIB	1.3.6.1.4.1.5624.1.2.101			This MIB module defines a portion of the SNMP enterprise MIBs under Enterasys Networks' enterprise OID pertaining to PKI notifications. This MIB was designed to be used for monitoring PKI events on the network management system by various remote monitoring mechanisms.
etsysPkiObjects	1.3.6.1.4.1.5624.1.2.101.1
etsysPkiNotificationBranch	1.3.6.1.4.1.5624.1.2.101.1.0
NTF etsysPkiCertNearingExpirationNotification	1.3.6.1.4.1.5624.1.2.101.1.0.1			Certificate nearing expiration. The managed entity will send this notification when an installed PKI Certificate is nearing expiration. The entity will resend this notification periodically until the certificate is removed from configuration. Note that an expired certificate will be automatically rejected by the PKI authentication process. If an expired certificate is not replaced by a newer certificate, then any authentication attempt which uses the expired certificate will fail.
etsysPkiCertificateBranch	1.3.6.1.4.1.5624.1.2.101.1.1
STR etsysPkiCertListName	1.3.6.1.4.1.5624.1.2.101.1.1.1	SnmpAdminString	accessible-for-notify	The certificate list name to which the certificate belongs. If the list name is not known, then an empty string will be returned.
OCT etsysPkiCertFingerprint	1.3.6.1.4.1.5624.1.2.101.1.1.2	OCTET STRING	accessible-for-notify	The SHA1 Hash of the certificate.
STR etsysPkiCertIssuerName	1.3.6.1.4.1.5624.1.2.101.1.1.3	SnmpAdminString	accessible-for-notify	The Issuer field of the certificate, which contains a distinguished name (DN). If the length of the actual DN exceeds the maximum length of this object, then this object will contain a truncated version of the DN.
STR etsysPkiCertSubjectName	1.3.6.1.4.1.5624.1.2.101.1.1.4	SnmpAdminString	accessible-for-notify	The Subject field of the certificate, which contains a distinguished name (DN). If the length of the actual DN exceeds the maximum length of this object, then this object will contain a truncated version of the DN.
DAT etsysPkiCertStartDate	1.3.6.1.4.1.5624.1.2.101.1.1.5	DateAndTime	accessible-for-notify	The time when the certificate validity period begins, as defined by the notBefore value in certificate's validity field.
DAT etsysPkiCertEndDate	1.3.6.1.4.1.5624.1.2.101.1.1.6	DateAndTime	accessible-for-notify	The time when the certificate validity period ends, as defined by the notAfter value in certificate's validity field.
etsysPkiConformance	1.3.6.1.4.1.5624.1.2.101.2
etsysPkiGroups	1.3.6.1.4.1.5624.1.2.101.2.1
etsysPkiCertificateGroup	1.3.6.1.4.1.5624.1.2.101.2.1.1			A collection of objects providing basic instrumentation of PKI Certificate event notifications.
etsysPkiNotificationGroup	1.3.6.1.4.1.5624.1.2.101.2.1.2			The PKI notifications.
etsysPkiCompliances	1.3.6.1.4.1.5624.1.2.101.2.2
etsysPkiCompliance	1.3.6.1.4.1.5624.1.2.101.2.2.1			The compliance statement for devices that support Enterasys PKI.

RFC description

Monitors Public Key Infrastructure (PKI) events and notifications on Enterasys network devices.

Start monitoring Enterasys Networks switch (legacy, later Extreme Networks) (certificate-based authentication, PKI expiration notifications) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ENTERASYS-PKI-MIB

What Is ENTERASYS-PKI-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description