EdgeSwitch-KEYING-PRIVATE-MIB

All MIBs › EdgeSwitch-KEYING-PRIVATE-MIB

Organization: Broadcom Inc

Last Updated: 2011-01-26

Category: Domain: Security, VPN and Security, Vendor: EdgeSwitch/Ubiquiti

Description: Ubiquiti EdgeSwitch keying MIB for managing cryptographic key configuration and security credential settings.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is EdgeSwitch-KEYING-PRIVATE-MIB?

EdgeSwitch-KEYING-PRIVATE-MIB is a Ubiquiti private MIB for the EdgeSwitch line that manages the device's cryptographic "keying" utility, used to configure and control security credential/key settings such as those used for MACsec or routing-protocol authentication keys. It exposes objects to enable and disable the keying feature via specific key values, plus a table listing configured keying entries. From a hardware/software status standpoint this is primarily a security-configuration MIB rather than a fault/performance MIB: it reflects whether the keying feature is administratively enabled and what key entries are currently configured, which is important to confirming that authenticated/secured links or protocols are properly keyed. No explicit external MIB dependency is apparent. It is deployed on Ubiquiti EdgeSwitch devices in networks requiring authenticated control-plane or link-layer security via configured keys, and administrators can download the EdgeSwitch-KEYING-PRIVATE-MIB file to load into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in EdgeSwitch-KEYING-PRIVATE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ubiquiti EdgeSwitch

Monitoring Examples

An operator would check agentFeatureKeyingEnableKey/agentFeatureKeyingDisableKey to confirm whether the keying feature is currently active, and walk agentFeatureKeyingTable/agentFeatureKeyingEntry to enumerate configured key entries. An unexpectedly disabled keying feature, or a missing expected entry in agentFeatureKeyingTable, would indicate that a protocol or link relying on that key is not properly secured.

What Can Be Monitored

keying feature enabled/disabled state
configured keying table entries

Imported Objects

From EdgeSwitch-REF-MIB

fastPath

OBJECT-IDENTITY

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowPointer
RowStatus
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using agentFeatureKeyingStatus OID:

Select an Ubiquiti EdgeSwitch (cryptographic keying utility) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type agentFeatureKeyingStatus into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. Returns a value of (1) if the feature is enabled for management, (2) if disabled. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the value is anything other than 'enabled', since that indicates the condition this object reports has changed to one worth investigating. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
fastPathKeyingPrivate	1.3.6.1.4.1.4413.1.1.24			The Ubiquiti Private MIB for EdgeSwitch Keying Utility
agentFeatureKeyingGroup	1.3.6.1.4.1.4413.1.1.24.1
STR agentFeatureKeyingEnableKey	1.3.6.1.4.1.4413.1.1.24.1.1	DisplayString	read-write	Hexadecimal Key-string entered to enable an advance functionality.
STR agentFeatureKeyingDisableKey	1.3.6.1.4.1.4413.1.1.24.1.2	DisplayString	read-write	Hexadecimal Key-string entered to disable an advance functionality.
agentFeatureKeyingTable	1.3.6.1.4.1.4413.1.1.24.1.3		not-accessible	A table for license key and associated functionality.
agentFeatureKeyingEntry	1.3.6.1.4.1.4413.1.1.24.1.3.1		not-accessible	Represents entry for key table
U32 agentFeatureKeyingIndex	1.3.6.1.4.1.4413.1.1.24.1.3.1.1	Unsigned32	not-accessible	A value corresponding to a keyable feature.When this table is walked, only values associated with keyable features are returned.This value must be equivalent to valid value of agentFeatureKeyingIndex.
STR agentFeatureKeyingName	1.3.6.1.4.1.4413.1.1.24.1.3.1.2	DisplayString	read-only	The abbreviated name of this component.This is also equivalent to agentFeatureKeyingName
INT agentFeatureKeyingStatusEx	1.3.6.1.4.1.4413.1.1.24.1.3.1.3	INTEGER	read-only	Returns a value of (1) if the feature is enabled for management, (2) if disabled.

RFC description

Feature keying utility MIB for EdgeSwitch, managing license keys to enable or disable advanced functionality.

Start monitoring Ubiquiti EdgeSwitch (cryptographic keying utility) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download EdgeSwitch-KEYING-PRIVATE-MIB