All MIBs › ENTERASYS-SSH-SERVER-MIB › etsysSshMACs
etsysSshMACs
Module: ENTERASYS-SSH-SERVER-MIB
OID (symbolic): ENTERASYS-SSH-SERVER-MIB::etsysSshMACs
OID (numeric): 1.3.6.1.4.1.5624.1.2.26.1.3.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Specifies the MAC (Message Authentication Code) algorithm to use for data integrity verification. Currently enumerated types, hmacSha1, hmacSha1Dash96, hmacMd5, hmacMd5Dash96, hmacRipemd160, and hmacRipemd160Dash96 are supported, of which hmacSha1, hmacSha1Dash96, hmacMd5, and hmacMd5Dash96 are included in all distributions. Special values to this option are anyStdMac, that allows only standard (see below) MACs, and anyMac that allows either any available MAC or excludes none but allows all others. AnyStdMac is the same as above, but includes only those MACs mentioned in the IETF-SecSH-draft (excluding none).
What is etsysSshMACs?
This deprecated, read-write INTEGER selects the MAC (Message Authentication Code) algorithm used for SSH data integrity verification, choosing among hmacSha1, hmacSha1-96, hmacMd5, hmacMd5-96, hmacRipemd160, and hmacRipemd160-96, or the special anyStdMac/anyMac values for broader sets. Admins select a stronger algorithm like hmacSha1 over hmacMd5 when hardening the SSH configuration against known MD5 weaknesses. For example, changing this from the anyStdMac default to hmacSha1(3) would pin the server to a single, stronger integrity algorithm.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.5624.1.2.26.1.3.2 snmpwalk -v2c -c public <target> ENTERASYS-SSH-SERVER-MIB::etsysSshMACs
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.5624.1.2.26.1.3.2.1 snmpget -v2c -c public <target> ENTERASYS-SSH-SERVER-MIB::etsysSshMACs.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.5624.1.2.26.1.3.2.1 i <value>
Start monitoring Enterasys/Extreme Networks wireless switch/controller (embedded SSH server, session limits) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ENTERASYS-SSH-SERVER-MIB::etsysSshMACs OID value, configure state conditions and alerts, and monitor any Enterasys/Extreme Networks wireless switch/controller (embedded SSH server, session limits) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.5624 | enterasys | ENTERASYS-MIB-NAMES |
| 1.3.6.1.4.1.5624.1 | etsysMibs | ENTERASYS-MIB-NAMES |
| 1.3.6.1.4.1.5624.1.2 | etsysModules | ENTERASYS-MIB-NAMES |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.5624.1.2.26 | etsysSshServerMIB | ENTERASYS-SSH-SERVER-MIB |
| 1.3.6.1.4.1.5624.1.2.26.1 | etsysSshObjects | ENTERASYS-SSH-SERVER-MIB |
| 1.3.6.1.4.1.5624.1.2.26.1.3 | etsysSshCryptoBranch | ENTERASYS-SSH-SERVER-MIB |
| 1.3.6.1.4.1.5624.1.2.26.1.3.2 | etsysSshMACs | ENTERASYS-SSH-SERVER-MIB |