| OID symbolic | OID numeric | Type | Access | Description |
|---|
| etsysTacacsClientMIB | 1.3.6.1.4.1.5624.1.2.58 | | | This MIB module defines a portion of the SNMP MIB under
the Enterasys Networks enterprise OID pertaining to
TACACS+ client configuration. |
| etsysTacacsClientObjects | 1.3.6.1.4.1.5624.1.2.58.1 | | | |
| etsysTacacsClientControl | 1.3.6.1.4.1.5624.1.2.58.1.1 | | | |
| ENA etsysTacacsClientSesnAuthEnabled | 1.3.6.1.4.1.5624.1.2.58.1.1.1 | EnabledStatus | read-write | Controls the operation of the TACACS+ client for session
authentication and authorization. |
| ENA etsysTacacsClientSesnAcctEnabled | 1.3.6.1.4.1.5624.1.2.58.1.1.2 | EnabledStatus | read-write | Controls the operation of the TACACS+ client for session
accounting. |
| ENA etsysTacacsClientCmdAuthEnabled | 1.3.6.1.4.1.5624.1.2.58.1.1.3 | EnabledStatus | read-write | Controls the operation of the TACACS+ client for command
level authorization. |
| ENA etsysTacacsClientCmdAcctEnabled | 1.3.6.1.4.1.5624.1.2.58.1.1.4 | EnabledStatus | read-write | Controls the operation of the TACACS+ client for command
accounting. |
| ENA etsysTacacsClientSingleConnection | 1.3.6.1.4.1.5624.1.2.58.1.1.5 | EnabledStatus | read-write | Allows the TACACS+ client to send multiple TACACS+ requests
on a single TCP connection. All configured TACACS+ servers
MUST allow this NAS to use single connection mode. |
| etsysTacacsClientSesnAuth | 1.3.6.1.4.1.5624.1.2.58.1.2 | | | |
| STR etsysTacacsClientSesnAuthService | 1.3.6.1.4.1.5624.1.2.58.1.2.1 | SnmpAdminString | read-write | The service to be requested for management session
authorization. |
| etsysTacacsClientSesnAuthTable | 1.3.6.1.4.1.5624.1.2.58.1.2.2 | | not-accessible | A list of TACACS+ servers that this client may attempt to use. |
| etsysTacacsClientSesnAuthEntry | 1.3.6.1.4.1.5624.1.2.58.1.2.2.1 | | not-accessible | A TACACS+ server that this client may attempt to use. |
| INT etsysTacacsClientSesnAuthLevel | 1.3.6.1.4.1.5624.1.2.58.1.2.2.1.1 | INTEGER | not-accessible | The authorization level for the corresponding attribute
value pair. Managed entities are not required to support
all authorization levels. |
| STR etsysTacacsClientSesnAuthAttribute | 1.3.6.1.4.1.5624.1.2.58.1.2.2.1.2 | SnmpAdminString | read-write | The attribute part of the attribute-value pair for this
access level. The default value 'priv-lvl' is normally
defined to have a corresponding value part with a value
between '0' and '15' inclusive. |
| STR etsysTacacsClientSesnAuthValue | 1.3.6.1.4.1.5624.1.2.58.1.2.2.1.3 | SnmpAdminString | read-write | The value part of the attribute-value pair for this access
level.
To allow the leveraging of existing Cisco 'enable' mode
configurations. When
1.) the etsysTacacsClientSesnAuthService object has the value
'enable',
2.) the attribute part of this attribute-value pair is
'priv-lvl',
and
3.) the value part of this attribute-value pair represents a
numeric value between 0 and 15, inclusive,
then the value part of this attribute-value pair specifies the
minimum value required for this access level.
If any of the above conditions are not met then this value
must be an exact match with the value returned from the TACACS+
server.
The default values for this object are '0' for read-only,
'1' for read-write, and '15' for superuser authorization. |
| etsysTacacsClientServer | 1.3.6.1.4.1.5624.1.2.58.1.3 | | | |
| etsysTacacsClientServerTable | 1.3.6.1.4.1.5624.1.2.58.1.3.1 | | not-accessible | A list of TACACS+ servers that this client may attempt to use. |
| etsysTacacsClientServerEntry | 1.3.6.1.4.1.5624.1.2.58.1.3.1.1 | | not-accessible | A TACACS+ server that this client may attempt to use. |
| I32 etsysTacacsClientServerIndex | 1.3.6.1.4.1.5624.1.2.58.1.3.1.1.1 | Integer32 | not-accessible | A number uniquely identifying each conceptual row
in the etsysTacacsClientServerTable.
In the event of an agent restart, the same value of
etsysTacacsClientServerIndex must be used to identify
each conceptual row in etsysTacacsClientServerTable
as prior to the restart. |
| IPt etsysTacacsClientServerAddressType | 1.3.6.1.4.1.5624.1.2.58.1.3.1.1.2 | InetAddressType | read-create | The type of Internet address by which this TACACS+ server
is reachable. |
| IP etsysTacacsClientServerAddress | 1.3.6.1.4.1.5624.1.2.58.1.3.1.1.3 | InetAddress | read-create | The Internet address for the TACACS+ server.
The etsysTacacsClientServerAddress may not be
empty due to the SIZE restriction. Also the size of
a DNS name is limited to 64 characters.
If a row is created administratively by an SNMP
operation and the address type value is dns(16), then
the agent stores the DNS name internally. A DNS name
lookup must be performed on the internally stored DNS
name whenever it is being used to contact the peer.
If a row is created by the managed entity itself and
the address type value is dns(16), then the agent
stores the IP address internally. A DNS reverse lookup
must be performed on the internally stored IP address
whenever the value is retrieved via SNMP. |
| INE etsysTacacsClientServerPortNumber | 1.3.6.1.4.1.5624.1.2.58.1.3.1.1.4 | InetPortNumber | read-create | The TCP port number (0-65535) the client is using
to send requests to this server. |
| I32 etsysTacacsClientServerTimeout | 1.3.6.1.4.1.5624.1.2.58.1.3.1.1.5 | Integer32 | read-write | The number of seconds to wait for a TACACS+ server to
respond to a request. |
| OCT etsysTacacsClientServerSecret | 1.3.6.1.4.1.5624.1.2.58.1.3.1.1.6 | OCTET STRING | read-create | This object is the secret shared between the TACACS+
server and TACACS+ client. |
| T/F etsysTacacsClientServerSecretEntered | 1.3.6.1.4.1.5624.1.2.58.1.3.1.1.7 | TruthValue | read-only | This indicates the existence of a shared secret. |
| ROW etsysTacacsClientServerStatus | 1.3.6.1.4.1.5624.1.2.58.1.3.1.1.8 | RowStatus | read-create | Lets users create and delete TACACS+ server entries on
systems that support this capability.
Rules
1. When creating a TACACS+ client, it is up to the
management station to determine a suitable
etsysTacacsClientServerIndex. To facilitate
interoperability, agents should not put any
restrictions on the etsysTacacsClientServerIndex
beyond the obvious ones that it be valid and unused.
2. Before a new row can become 'active', values must
be supplied for the columnar objects
etsysTacacsClientServerAddress and
etsysTacacsClientServerSecret.
3. The value of etsysTacacsClientServerStatus MAY
need to be set to 'notInService' in order to modify
a writable object in the same conceptual row.
4. etsysTacacsClientServer entries whose
status is 'notReady' or 'notInService' will
not be used for authentication. |
| etsysTacacsClientConformance | 1.3.6.1.4.1.5624.1.2.58.2 | | | |
| etsysTacacsClientCompliances | 1.3.6.1.4.1.5624.1.2.58.2.1 | | | |
| etsysTacacsClientCompliance | 1.3.6.1.4.1.5624.1.2.58.2.1.1 | | | The compliance statement for clients implementing the
TACACS+ Client MIB. |
| etsysTacacsClientGroups | 1.3.6.1.4.1.5624.1.2.58.2.2 | | | |
| etsysTacacsClientSessionGroup | 1.3.6.1.4.1.5624.1.2.58.2.2.1 | | | The collection of objects required to do TACACS+
authentication, authorization, and accounting for
management sessions. |
| etsysTacacsClientCmdAuthGroup | 1.3.6.1.4.1.5624.1.2.58.2.2.2 | | | Additional objects for TACACS+ command authorization. |
| etsysTacacsClientCmdAcctGroup | 1.3.6.1.4.1.5624.1.2.58.2.2.3 | | | Additional objects for TACACS+ command accounting. |
| etsysTacacsClientSesnAuthGroup | 1.3.6.1.4.1.5624.1.2.58.2.2.4 | | | Additional objects to map read-only, read-write, superuser,
and debug authorization level into a service level and
respective attribute-value pairs. |
