G6-ACCESS-MIB

All MIBs › G6-ACCESS-MIB

Organization: MICROSENS GmbH & Co. KG

Last Updated: 2018-02-12

Category: Vendor: MICROSENS

Description: MICROSENS G6 switch MIB for access control management including port-based authentication and user access policies.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is G6-ACCESS-MIB?

G6-ACCESS-MIB is a MICROSENS GmbH & Co. KG proprietary MIB (built on MICROSENS-G6-MIB) for Generation 6 Ethernet switches, managing local user access control. Its objects cover a user table (index), group table (index), view table (index), pattern table (index), RADIUS table (index), TACACS+ table (index), restrictions table (index), and a login-status table (index) tracking current login sessions. As a security/configuration MIB it lets an administrator confirm which users/groups have access and review active login sessions on a Microsens Generation 6 Ethernet switch. It is deployed on MICROSENS Generation 6 Ethernet switching equipment (access control). Engineers can download the G6-ACCESS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in G6-ACCESS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

MICROSENS Generation 6 Ethernet switching equipment (access control)

Monitoring Examples

An administrator checks loginStatusTable to review currently logged-in sessions on a Microsens Generation 6 Ethernet switch.

What Can Be Monitored

user/group access control and active login sessions

Imported Objects

From MICROSENS-G6-MIB

g6	OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32
enterprises

From SNMPv2-TC

DisplayString
MacAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
management	1.3.6.1.4.1.3181.10.6.3			Microsens private MIB for Generation 6 Ethernet Switches
access	1.3.6.1.4.1.3181.10.6.3.76
INT accessAuthenticationMode	1.3.6.1.4.1.3181.10.6.3.76.1	INTEGER	read-write	This parameter defines against which database incoming user and password are verified.
userTable	1.3.6.1.4.1.3181.10.6.3.76.2		not-accessible
userEntry	1.3.6.1.4.1.3181.10.6.3.76.2.1		not-accessible
INT userIndex	1.3.6.1.4.1.3181.10.6.3.76.2.1.1	INTEGER	not-accessible	Automatically generated
STR userName	1.3.6.1.4.1.3181.10.6.3.76.2.1.2	DisplayString	read-write	Unique name used to login to the system regardless of the management interface used. At least 3 character are required.
STR userAssociatedGroups	1.3.6.1.4.1.3181.10.6.3.76.2.1.3	DisplayString	read-write	A user must be part of a group and inherits the rights of the groups and their views.
INT userGeneralAccessRights	1.3.6.1.4.1.3181.10.6.3.76.2.1.4	INTEGER	read-write	Limited access rights here overrule rights granted by the associated groups and their views. Use NO_ACCESS to temporarily suspend a user account.
INT userEnableTelnetAccess	1.3.6.1.4.1.3181.10.6.3.76.2.1.5	INTEGER	read-write	Permit CLI user access via insecure telnet session or via local serial port.
INT userEnableSshAccess	1.3.6.1.4.1.3181.10.6.3.76.2.1.6	INTEGER	read-write	Permit CLI user access via secure shell.
INT userEnableWebAccess	1.3.6.1.4.1.3181.10.6.3.76.2.1.7	INTEGER	read-write	Permit user access via the web interface.
INT userEnableSnmpAccess	1.3.6.1.4.1.3181.10.6.3.76.2.1.8	INTEGER	read-write	Permit user access via SNMP of any version. Additionally use SNMP settings to restrict to only secure SNMP v3 if desired.
INT userEnableNmpAccess	1.3.6.1.4.1.3181.10.6.3.76.2.1.9	INTEGER	read-write	Permit user access via the nmp network management application.
INT userEnableFtpAccess	1.3.6.1.4.1.3181.10.6.3.76.2.1.10	INTEGER	read-write	Permit ftp access for file transfers.
STR userEnterPassword	1.3.6.1.4.1.3181.10.6.3.76.2.1.11	DisplayString	read-write	Set a new authentication password which replaces the previous one. This password applies to all user access methods except SNMP. For SNMP v3 a separate set of passwords is used. Note: trailing spaces or multiple spaces in the password are automatically removed.
STR userEncryptedAuthPassword	1.3.6.1.4.1.3181.10.6.3.76.2.1.12	DisplayString	read-write
INT userSnmpV3SecurityLevel	1.3.6.1.4.1.3181.10.6.3.76.2.1.13	INTEGER	read-write	Defines if login authorization and/or privacy are used.
INT userSnmpV3AuthAlgorithm	1.3.6.1.4.1.3181.10.6.3.76.2.1.14	INTEGER	read-write	Defines with which algorithm the authorization key is created and decoded.
INT userSnmpV3PrivacyAlgorithm	1.3.6.1.4.1.3181.10.6.3.76.2.1.15	INTEGER	read-write	Defines which encryption method is used security level includes privacy.
STR userEnterSnmpV3AuthPassword	1.3.6.1.4.1.3181.10.6.3.76.2.1.16	DisplayString	read-write	Set a new SNMP v3 authentication password. This parameter only is required when SNMP v3 is used. This value correlates to the authorization key. No spaces are permitted and at least 8 character are required.
STR userEncryptedSnmpAuthPassword	1.3.6.1.4.1.3181.10.6.3.76.2.1.17	DisplayString	read-write
STR userEnterSnmpV3PrivacyPassword	1.3.6.1.4.1.3181.10.6.3.76.2.1.18	DisplayString	read-write	Set a new encryption password. This parameter only is required when SNMP v3 user based privacy is used. If left empty, the SNMP v3 authentication password is also used for SNMP v3 privacy. No spaces are permitted and at least 8 character are required. IMPORTANT: This password must be different to the authentication password !
STR userEncryptedSnmpPrivacyPassword	1.3.6.1.4.1.3181.10.6.3.76.2.1.19	DisplayString	read-write
groupTable	1.3.6.1.4.1.3181.10.6.3.76.3		not-accessible
groupEntry	1.3.6.1.4.1.3181.10.6.3.76.3.1		not-accessible
INT groupIndex	1.3.6.1.4.1.3181.10.6.3.76.3.1.1	INTEGER	not-accessible	Automatically generated
STR groupName	1.3.6.1.4.1.3181.10.6.3.76.3.1.2	DisplayString	read-write	Enter a unique and descriptive name that identifies the group. At least 3 character are required.
STR groupAssociatedViews	1.3.6.1.4.1.3181.10.6.3.76.3.1.3	DisplayString	read-write	A list which may point to one or several views that make up this group.
viewTable	1.3.6.1.4.1.3181.10.6.3.76.4		not-accessible
viewEntry	1.3.6.1.4.1.3181.10.6.3.76.4.1		not-accessible
INT viewIndex	1.3.6.1.4.1.3181.10.6.3.76.4.1.1	INTEGER	not-accessible	Automatically generated
STR viewName	1.3.6.1.4.1.3181.10.6.3.76.4.1.2	DisplayString	read-write	Enter a unique and descriptive name that identifies the view. At least 3 character are required.
STR viewAssociatedPattern	1.3.6.1.4.1.3181.10.6.3.76.4.1.3	DisplayString	read-write	A list which may point to one or several pattern that make up this view.
patternTable	1.3.6.1.4.1.3181.10.6.3.76.5		not-accessible
patternEntry	1.3.6.1.4.1.3181.10.6.3.76.5.1		not-accessible
INT patternIndex	1.3.6.1.4.1.3181.10.6.3.76.5.1.1	INTEGER	not-accessible	Automatically generated
STR patternName	1.3.6.1.4.1.3181.10.6.3.76.5.1.2	DisplayString	read-write	Enter a unique and descriptive name that identifies the pattern. At least 3 character are required.
STR patternDotstring	1.3.6.1.4.1.3181.10.6.3.76.5.1.3	DisplayString	read-write	A dotstring or partical dotstring can be defined here. Example: device.port
INT patternAccessRights	1.3.6.1.4.1.3181.10.6.3.76.5.1.4	INTEGER	read-write	This defines in which way the dotstring is to be treated.
radiusTable	1.3.6.1.4.1.3181.10.6.3.76.6		not-accessible
radiusEntry	1.3.6.1.4.1.3181.10.6.3.76.6.1		not-accessible
INT radiusIndex	1.3.6.1.4.1.3181.10.6.3.76.6.1.1	INTEGER	not-accessible	Automatically generated
STR radiusPrimaryAuthServerName	1.3.6.1.4.1.3181.10.6.3.76.6.1.2	DisplayString	read-write	Symbolic name of the RADIUS server used for authentication.
STR radiusFallbackAuthServerName	1.3.6.1.4.1.3181.10.6.3.76.6.1.3	DisplayString	read-write	Symbolic name of the RADIUS server used for authentication if the primary server is down. Leave empty when no fallback is required.
tacacsTable	1.3.6.1.4.1.3181.10.6.3.76.7		not-accessible
tacacsEntry	1.3.6.1.4.1.3181.10.6.3.76.7.1		not-accessible
INT tacacsIndex	1.3.6.1.4.1.3181.10.6.3.76.7.1.1	INTEGER	not-accessible	Automatically generated
STR tacacsPrimaryAuthServerName	1.3.6.1.4.1.3181.10.6.3.76.7.1.2	DisplayString	read-write	Symbolic name of the TACACS+ server used for authentication.
STR tacacsFallbackAuthServerName	1.3.6.1.4.1.3181.10.6.3.76.7.1.3	DisplayString	read-write	Symbolic name of the TACACS+ server used for authentication if the primary server is down. Leave empty when no fallback is required.
STR tacacsPrivilegeLevel0User	1.3.6.1.4.1.3181.10.6.3.76.7.1.4	DisplayString	read-write	This maps TACACS+ privilege levels to internal access model. Level 0 is lowest privilege level. Make sure the name entered here exists as local user name.
STR tacacsPrivilegeLevel1User	1.3.6.1.4.1.3181.10.6.3.76.7.1.5	DisplayString	read-write	This maps TACACS+ privilege levels to internal access model. Level 1 is a basic privilege level. Make sure the name entered here exists as local user name.
STR tacacsPrivilegeLevel15User	1.3.6.1.4.1.3181.10.6.3.76.7.1.6	DisplayString	read-write	This maps TACACS+ privilege levels to internal access model. Level 15 is higest privilege level and would usually be mapped to the admin user.
restrictionsTable	1.3.6.1.4.1.3181.10.6.3.76.8		not-accessible	This table may be used to restrict access to the management system. Be careful not to lock your self out.
restrictionsEntry	1.3.6.1.4.1.3181.10.6.3.76.8.1		not-accessible
INT restrictionsIndex	1.3.6.1.4.1.3181.10.6.3.76.8.1.1	INTEGER	not-accessible	Automatically generated
STR restrictionsName	1.3.6.1.4.1.3181.10.6.3.76.8.1.2	DisplayString	read-write	Enter a unique and descriptive name that identifies the ip_address. At least 3 character are required.
INT restrictionsMode	1.3.6.1.4.1.3181.10.6.3.76.8.1.3	INTEGER	read-write	The associated ip address may be permitted or denied. Use UNUSED to temporarily suspend an entry.
STR restrictionsIpAddress	1.3.6.1.4.1.3181.10.6.3.76.8.1.4	DisplayString	read-write	Enter an IP address or address range which is denied or permitted. For example, to describe a range of IP addresses from 192.168.0.1 to 192.168.255.255 you use: 192.168.0.0/16. Where 16 describes the number of bits in the IP address that are used for comparison (here192.168).
U32 accessNumberOfLogins	1.3.6.1.4.1.3181.10.6.3.76.100	Unsigned32	read-only	This value is incremented for each successful login.
loginStatusTable	1.3.6.1.4.1.3181.10.6.3.76.101		not-accessible	This table displays data which are read from the inserted SFPs.
loginStatusEntry	1.3.6.1.4.1.3181.10.6.3.76.101.1		not-accessible
INT loginStatusIndex	1.3.6.1.4.1.3181.10.6.3.76.101.1.1	INTEGER	not-accessible	Automatically generated
INT loginStatusState	1.3.6.1.4.1.3181.10.6.3.76.101.1.2	INTEGER	read-only	Indicates if this login record displays a currently active login or a history entry of a previous login which is logged off by now.
STR loginStatusUserName	1.3.6.1.4.1.3181.10.6.3.76.101.1.3	DisplayString	read-only	User name for which this record applies.
STR loginStatusAuthName	1.3.6.1.4.1.3181.10.6.3.76.101.1.4	DisplayString	read-only	Authorization name which maps to the local user names to define the actual access rights. For local authentication this value mirrors the user name. When RADIUS authentication is used, this reflects the name provided by the RADIUS server.
U32 loginStatusLoginId	1.3.6.1.4.1.3181.10.6.3.76.101.1.5	Unsigned32	read-only	Unique value to reference this login operation
STR loginStatusLoginTimeStamp	1.3.6.1.4.1.3181.10.6.3.76.101.1.6	DisplayString	read-only	Indicated the time when this user has connected to this service.
U32 loginStatusLoginEpoch	1.3.6.1.4.1.3181.10.6.3.76.101.1.7	Unsigned32	read-only	Login time stamp in Linux time since the epoch format.
C32 loginStatusConnectTime	1.3.6.1.4.1.3181.10.6.3.76.101.1.8	Counter32	read-only	Indicated since how long the connection is established. For logged off entries this indicates the connect time of entry.
STR loginStatusService	1.3.6.1.4.1.3181.10.6.3.76.101.1.9	DisplayString	read-only	Displays which service was used to perform the login.
STR loginStatusRemoteHost	1.3.6.1.4.1.3181.10.6.3.76.101.1.10	DisplayString	read-only	Displays from which remote host the login was performed. Details depend on the chosen interface.

RFC description

Manages user authentication and access control for Microsens Generation 6 Ethernet switches.

Start monitoring MICROSENS Generation 6 (G6) managed Ethernet switch (local user/RADIUS/TACACS+ access control) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download G6-ACCESS-MIB

What Is G6-ACCESS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description