All MIBs › ENTERASYS-SECURE-SHELL-SERVER-MIB › etsysSecureShellServerHostKeyFingerprint
etsysSecureShellServerHostKeyFingerprint
Module: ENTERASYS-SECURE-SHELL-SERVER-MIB
OID (symbolic): ENTERASYS-SECURE-SHELL-SERVER-MIB::etsysSecureShellServerHostKeyFingerprint
OID (numeric): 1.3.6.1.4.1.5624.1.2.36.1.4.1.1.6
Node type: OBJECT-TYPE
Type: HexString
Access: read-only
Description: The RSA fingerprint of the public part of the host key pair. This value can be used with the SSH client to verify, on the initial connection, that the Secure Shell server responding to the request is the server running on the managed entity. This is the fingerprint of the operational host key pair. If the key pair represented by this row is not operational then sixteen null octets MUST be returned.
What is etsysSecureShellServerHostKeyFingerprint?
This value is the RSA fingerprint of the public part of the currently operational host key pair, used by an SSH client to verify on first connection that it's really talking to the expected server; if the key pair in this row isn't operational, sixteen null octets are returned instead. Admins share this fingerprint out-of-band with users so they can verify it against what their SSH client displays on first connect, guarding against a man-in-the-middle. Comparing a user's SSH client warning fingerprint against the value read from etsysSecureShellServerHostKeyFingerprint confirms whether the device's host key has genuinely changed or if something suspicious is happening.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.5624.1.2.36.1.4.1.1.6 snmpwalk -v2c -c public <target> ENTERASYS-SECURE-SHELL-SERVER-MIB::etsysSecureShellServerHostKeyFingerprint
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.5624.1.2.36.1.4.1.1.6.1 snmpget -v2c -c public <target> ENTERASYS-SECURE-SHELL-SERVER-MIB::etsysSecureShellServerHostKeyFingerprint.1
Start monitoring Enterasys Networks switch (legacy, later Extreme Networks)/router (embedded SSH server management) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ENTERASYS-SECURE-SHELL-SERVER-MIB::etsysSecureShellServerHostKeyFingerprint OID value, configure state conditions and alerts, and monitor any Enterasys Networks switch (legacy, later Extreme Networks)/router (embedded SSH server management) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.5624 | enterasys | ENTERASYS-MIB-NAMES |
| 1.3.6.1.4.1.5624.1 | etsysMibs | ENTERASYS-MIB-NAMES |
| 1.3.6.1.4.1.5624.1.2 | etsysModules | ENTERASYS-MIB-NAMES |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.5624.1.2.36 | etsysSecureShellServerMIB | ENTERASYS-SECURE-SHELL-SERVER-MIB |
| 1.3.6.1.4.1.5624.1.2.36.1 | etsysSecureShellServer | ENTERASYS-SECURE-SHELL-SERVER-MIB |
| 1.3.6.1.4.1.5624.1.2.36.1.4 | etsysSecureShellServerHostKey | ENTERASYS-SECURE-SHELL-SERVER-MIB |
| 1.3.6.1.4.1.5624.1.2.36.1.4.1 | etsysSecureShellServerHostKeyTable | ENTERASYS-SECURE-SHELL-SERVER-MIB |
| 1.3.6.1.4.1.5624.1.2.36.1.4.1.1 | etsysSecureShellServerHostKeyEntry | ENTERASYS-SECURE-SHELL-SERVER-MIB |
| 1.3.6.1.4.1.5624.1.2.36.1.4.1.1.6 | etsysSecureShellServerHostKeyFingerprint | ENTERASYS-SECURE-SHELL-SERVER-MIB |