EdgeSwitch-MGMT-SECURITY-MIB

All MIBs › EdgeSwitch-MGMT-SECURITY-MIB

Organization: Broadcom Inc

Last Updated: 2013-11-11

Category: Domain: Security, VPN and Security, Vendor: EdgeSwitch/Ubiquiti

Description: Ubiquiti EdgeSwitch management security MIB for controlling access to the management plane including ACLs and login policies.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is EdgeSwitch-MGMT-SECURITY-MIB?

EdgeSwitch-MGMT-SECURITY-MIB is a Ubiquiti Networks private ("FastPath Security") MIB for the EdgeSwitch platform, covering security controls on the switch's own management plane, such as management-access control lists (ACLs) and login/authentication policies. It exposes configuration data restricting which hosts, protocols, or interfaces may reach the switch's management interfaces, along with login-policy settings like password rules or lockout behavior. Its monitoring relevance is configuration/security-status oriented: an administrator can verify management ACLs are correctly restricting access and check login-policy enforcement, a software-configuration health check rather than physical hardware monitoring. It is a Ubiquiti-specific private MIB (inherited from the FastPath switch software lineage) rather than built on an external IETF management-security standard. It is typically deployed in security-conscious network environments where administrators use the EdgeSwitch-MGMT-SECURITY-MIB MIB to lock down out-of-band or in-band management access to EdgeSwitch hardware.

IPNetwork Monitor allows you to monitor SNMP objects defined in EdgeSwitch-MGMT-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ubiquiti EdgeSwitch managed Ethernet switch

Monitoring Examples

No specific object/table names were provided in the source extract for this MIB, so specific tables cannot be cited without invention. In general use, an administrator would review management-ACL entries and login-policy settings to confirm only authorized hosts/subnets can reach the switch's management interface, spotting misconfigurations that could leave management access overly permissive.

What Can Be Monitored

management access control list entries
login/authentication policy settings

Imported Objects

From EdgeSwitch-REF-MIB

fastPath

OBJECT-IDENTITY

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
fastPathMgmtSecurity	1.3.6.1.4.1.4413.1.1.11			The Ubiquiti Private MIB for FastPath Security
agentSSLConfigGroup	1.3.6.1.4.1.4413.1.1.11.1
INT agentSSLAdminMode	1.3.6.1.4.1.4413.1.1.11.1.1	INTEGER	read-write	Configures whether the SSL service is enabled on this switch. The default value is disable(2).
I32 agentSSLSecurePort	1.3.6.1.4.1.4413.1.1.11.1.2	Integer32	read-write	Configures the port the SSL service will respond on. The default value is 443.
INT agentSSLProtocolLevel	1.3.6.1.4.1.4413.1.1.11.1.3	INTEGER	read-write	Configures which protocol versions of SSL are enabled on this switch. The default value is both(3).
I32 agentSSLMaxSessions	1.3.6.1.4.1.4413.1.1.11.1.4	Integer32	read-write	Configures the maximum number of allowable SSL sessions. The default value is 16.
I32 agentSSLHardTimeout	1.3.6.1.4.1.4413.1.1.11.1.5	Integer32	read-write	Configures the hard timeout for SSL sessions in hours. The default value is 24 hours.
I32 agentSSLSoftTimeout	1.3.6.1.4.1.4413.1.1.11.1.6	Integer32	read-write	Configures the soft (activity) timeout for SSL sessions in minutes. The default value is 5 minutes.
T/F agentSSLCertificatePresent	1.3.6.1.4.1.4413.1.1.11.1.7	TruthValue	read-only	Boolean value indicating whether SSL certificate files exist on the device.
INT agentSSLCertificateControl	1.3.6.1.4.1.4413.1.1.11.1.8	INTEGER	read-write	Controls certificate generation and deletion. Always returns noop(1).
T/F agentSSLCertificateGenerationStatus	1.3.6.1.4.1.4413.1.1.11.1.9	TruthValue	read-only	Indicates whether certificate files are currently being generated.
agentSSHConfigGroup	1.3.6.1.4.1.4413.1.1.11.2
INT agentSSHAdminMode	1.3.6.1.4.1.4413.1.1.11.2.1	INTEGER	read-write	Configures whether the SSH service is enabled on this switch. The default value is disable(2).
INT agentSSHProtocolLevel	1.3.6.1.4.1.4413.1.1.11.2.2	INTEGER	read-write	Configures which protocol versions of SSH are enabled on this switch. The default value is both(3).
I32 agentSSHSessionsCount	1.3.6.1.4.1.4413.1.1.11.2.3	Integer32	read-only	Current number of active SSH sessions on this switch.
I32 agentSSHMaxSessionsCount	1.3.6.1.4.1.4413.1.1.11.2.4	Integer32	read-write	Max number of SSH sessions permitted on this switch.
I32 agentSSHSessionTimeout	1.3.6.1.4.1.4413.1.1.11.2.5	Integer32	read-write	ssh idle timeout value for this switch im minutes.
INT agentSSHKeysPresent	1.3.6.1.4.1.4413.1.1.11.2.6	INTEGER	read-only	Indicates what key files are present on the device, if any.
INT agentSSHKeyGenerationStatus	1.3.6.1.4.1.4413.1.1.11.2.7	INTEGER	read-only	Indicates what key files are currently being generated, if any.
INT agentSSHRSAKeyControl	1.3.6.1.4.1.4413.1.1.11.2.8	INTEGER	read-write	Controls RSA key generation and deletion. Always returns noop(1).
INT agentSSHDSAKeyControl	1.3.6.1.4.1.4413.1.1.11.2.9	INTEGER	read-write	Controls DSA key generation and deletion. Always returns noop(1).
I32 agentSSHMgmtPortNum	1.3.6.1.4.1.4413.1.1.11.2.10	Integer32	read-write	Get/Set the TCP port number that the SSH server listens to for incoming requests. The port number is an integer value from 1 to 65535. Before setting this object, check your system (e.g. using 'netstat') to make sure the desired port number is not currently being used by any other service. The default value for this object is 22. Note that existing SSH login sessions are not affected by a change in value of this object, although establishment of any new SSH sessions must use the new port number.

RFC description

Management security configuration for Ubiquiti EdgeSwitch including SSL and SSH access control.

Start monitoring Ubiquiti EdgeSwitch managed Ethernet switch (management-plane ACLs/login policy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download EdgeSwitch-MGMT-SECURITY-MIB

What Is EdgeSwitch-MGMT-SECURITY-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description