HUAWEI-SSH-MIB

All MIBs › HUAWEI-SSH-MIB

Organization: Huawei Technologies Co.,Ltd.

Last Updated: 2014-09-26

Category: Protocol: SSH, Vendor: Huawei

Description: Huawei SSH (Secure Shell) MIB for managing SSH server configuration, session limits, algorithm negotiation, and active connections.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-SSH-MIB?

HUAWEI-SSH-MIB is a Huawei enterprise MIB for managing the Secure Shell (SSH) server and client functionality on Huawei network devices. It exposes configuration objects covering SSH server enablement, session/connection limits, supported cryptographic algorithm negotiation, and a table of currently active SSH sessions. Its monitoring value centers on software/service status: it lets an administrator confirm the SSH service is enabled and healthy, see how many active management sessions exist against configured limits, and audit which algorithms are negotiated, which is useful for both operational health and security-compliance checks. It is a Huawei-specific module that parallels concepts in the IETF SSH protocol standards (RFC 4251 et al.) but is implemented independently as part of Huawei's device-management MIB family. It is deployed on Huawei routers and switches wherever SSH is used for secure remote CLI management. Engineers can download the HUAWEI-SSH-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-SSH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Huawei router
Huawei switch

Monitoring Examples

A realistic scenario involves polling an active-SSH-session table for connected-user count and per-session source address, comparable in spirit to hwSshSessionTable/Entry objects, alongside a scalar for the configured maximum session limit. An administrator would monitor active session count against the configured limit to catch either an unexpectedly high number of concurrent management sessions (possible unauthorized access) or a device rejecting new SSH connections because the limit was reached.

What Can Be Monitored

SSH server enabled status
active SSH session count
session/connection limits
negotiated algorithms
per-session connection details

Imported Objects

From HUAWEI-MIB

hwDatacomm

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
OCT hwRSALocalHostPublicKeyCode	1.3.6.1.4.1.2011.5.25.118.5.1	OCTET STRING	read-only	The object specifies the local host RSA Public Key Code in the format of ber.
OCT hwRSALocalHostPublicKeyFingerprint	1.3.6.1.4.1.2011.5.25.118.5.2	OCTET STRING	read-only	The object specifies the fingerprint of the local host RSA Public Key Code, that including the public key algorithm, length and fingerprint.
hwRSALocalKeyTable	1.3.6.1.4.1.2011.5.25.118.5
OCT hwRSALocalServerPublicKeyCode	1.3.6.1.4.1.2011.5.25.118.5.3	OCTET STRING	read-only	The object specifies the local server RSA Public Key Code in the format of ber.
OCT hwRSALocalServerPublicKeyFingerprint	1.3.6.1.4.1.2011.5.25.118.5.4	OCTET STRING	read-only	The object specifies the fingerprint of the local server RSA Public Key Code, that including the public key algorithm, length and fingerprint.
OCT hwRSAPublicKeyCode	1.3.6.1.4.1.2011.5.25.118.1.13.1.2	OCTET STRING	read-create	The object specifies is RSA Public Key Code that in the format of ber, the maximum length of the node is 2048. When the RSA public key is created, the index value is the name of the public key, which uses the ASCII code. The public key value must be generated through a tool. Firstly, use the PUTTYGEN.EXE tool to generate the matching public key and private key. Then, use the sshkey.exe tool to convert the generated public key to the required public key value.
hwRSAPublicKeyEntry	1.3.6.1.4.1.2011.5.25.118.1.13.1		not-accessible	A table of configuration about RSA Public Key. The index of this entry is hwRSAPublicKeyName. hwRSAPublicKeyName is the name of RSA Public Key.
OCT hwRSAPublicKeyFingerprint	1.3.6.1.4.1.2011.5.25.118.1.13.1.4	OCTET STRING	read-only	The object specifies the fingerprint of RSA Public Key Code, that including the public key algorithm, length and fingerprint.
OCT hwRSAPublicKeyName	1.3.6.1.4.1.2011.5.25.118.1.13.1.1	OCTET STRING	not-accessible	The object specifies the name of RSA Public Key.
ROW hwRSAPublicKeyRowStatus	1.3.6.1.4.1.2011.5.25.118.1.13.1.3	RowStatus	read-create	The object specifies the status of this table entry. When the status is active(1), hwRSAPublicKeyName, hwRSAPublicKeyCode's value in the entry are allowed to be modified. createAndGo(4) is supplied to create a new instance of a conceptual row. destroy(6) is supplied to delete the instances associated with an existing conceptual row.
hwRSAPublicKeyTable	1.3.6.1.4.1.2011.5.25.118.1.13		not-accessible	A table of configuration about RSA Public Key. The index of this table is hwRSAPublicKeyName. hwRSAPublicKeyName is the name of RSA Public Key.
I32 hwSCPMaxUserNum	1.3.6.1.4.1.2011.5.25.118.1.18	Integer32	read-write	The object specifies the max number of SCP user that SCP Server supporting. The default is 2.
INT hwSCPServerEnable	1.3.6.1.4.1.2011.5.25.118.1.17	INTEGER	read-write	The object specifies whether the SSH SCP Server is enable. The default is 2.
I32 hwSftpMaxUserNum	1.3.6.1.4.1.2011.5.25.118.1.9	Integer32	read-write	The object specifies the max number of sftp user that sftp server supporting. The default is 5.
I32 hwSftpOnLineUserNum	1.3.6.1.4.1.2011.5.25.118.1.10	Integer32	read-only	The object specifies the number of sftp user that has been connected to sftp server currently.
INT hwSftpServerEnable	1.3.6.1.4.1.2011.5.25.118.1.2	INTEGER	read-write	The object specifies whether the sftp server is enable. Options: 1.enable(1) -the sftp server is enable 2.disable(2)-the sftp server is disable.
I32 hwSNetConfMaxUserNum	1.3.6.1.4.1.2011.5.25.118.1.14	Integer32	read-write	The object specifies the max number of SNetConf user that SNetConf Server supporting. The default is 5.
INT hwSNetConfServerEnable	1.3.6.1.4.1.2011.5.25.118.1.15	INTEGER	read-write	The object specifies whether the SSH SNetConf Server is enable. The default is 2.
hwSSH	1.3.6.1.4.1.2011.5.25.118			This mib which contains objects manages the SSH server and SSH client configuration.
hwSSHClient	1.3.6.1.4.1.2011.5.25.118.2
hwSSHClientGroup	1.3.6.1.4.1.2011.5.25.118.4.2.4			The SSH client's attribute group.
INT hwSSHFirstTimeAuthEnable	1.3.6.1.4.1.2011.5.25.118.2.1	INTEGER	read-write	The object specifies whether the SSH client supports first-time-authentication. Options: 1.enable(1) -indicates the SSH client supports first-time-authentication. 2.disable(2)-indicates the SSH client does not support first-time-authentication.
INT hwSSHKeepAliveEnable	1.3.6.1.4.1.2011.5.25.118.1.16	INTEGER	read-write	The object specifies whether the KeepAlive functionality on SSH Server is enable. The default is 1.
I32 hwSSHKeepAliveInterval	1.3.6.1.4.1.2011.5.25.118.2.3	Integer32	read-write	The object specifies KeepAlive Timeout interval on SSH Client. The default is 0. 0 specify no KeepAlive packet should be sent to Server.
I32 hwSSHKeepAliveMaxCount	1.3.6.1.4.1.2011.5.25.118.2.4	Integer32	read-write	The object specifies maximum KeepAlive packet to send to SSH Server before disconnect. The default is 3.
hwSSHMIBCompliance	1.3.6.1.4.1.2011.5.25.118.4.1.1			The compliance statement for systems supporting the HUAWEI-SSH-MIB.
hwSSHMIBCompliances	1.3.6.1.4.1.2011.5.25.118.4.1
hwSSHMIBConformance	1.3.6.1.4.1.2011.5.25.118.4
hwSSHMIBGroups	1.3.6.1.4.1.2011.5.25.118.4.2
hwSSHNotificationGroup	1.3.6.1.4.1.2011.5.25.118.4.2.6			The SSH Notification group.
hwSSHNotifications	1.3.6.1.4.1.2011.5.25.118.3
hwSSHServer	1.3.6.1.4.1.2011.5.25.118.1
INT hwSSHServerAlarmEnable	1.3.6.1.4.1.2011.5.25.118.1.8	INTEGER	read-write	The object specifies whether send trap information to NMS. Options: 1.enable(1) -Only when its value enable, allowed to send trap informations to NMS. 2.disable(2)-Can not to send trap informations to NMS.
OCT hwSSHServerAssignDSAKey	1.3.6.1.4.1.2011.5.25.118.2.2.1.5	OCTET STRING	read-create	The object specifies a DSA peer public key for a SSH server.This peer public key must exist.
OCT hwSSHServerAssignECCKey	1.3.6.1.4.1.2011.5.25.118.2.2.1.6	OCTET STRING	read-create	The object specifies a ECC peer public key for a SSH server.This peer public key must exist.
OCT hwSSHServerAssignKey	1.3.6.1.4.1.2011.5.25.118.2.2.1.3	OCTET STRING	read-create	The object specifies a peer public key for a SSH server. This peer public key must exist.
INT hwSSHServerComp1x	1.3.6.1.4.1.2011.5.25.118.1.3	INTEGER	read-write	The object specifies whether the SSH server is compatible with SSH1.x. The default is 2. Options: 1. enable(1) -indicates that the version compatibility function of the SSH server is enabled so that the SSH server is compatible with the SSHv1.x client. 2. disable(2)-indicates that the version compatibility function of the SSH server is disabled and therefore the SSH server is incompatible with the SSHv1.x client.
hwSSHServerGroup	1.3.6.1.4.1.2011.5.25.118.4.2.1			The SSH server attribute group.
I32 hwSSHServerIndex	1.3.6.1.4.1.2011.5.25.118.2.2.1.1	Integer32	not-accessible	The object specifies the index of hwSSHServerInfoTable.
hwSSHServerInfoEntry	1.3.6.1.4.1.2011.5.25.118.2.2.1		not-accessible	A table of configuration about the relation between the SSH server and the rsa peerkey. The index of this entry is hwSSHServerIndex.
hwSSHServerInfoGroup	1.3.6.1.4.1.2011.5.25.118.4.2.5			The SSH serverInfo's group.
hwSSHServerInfoTable	1.3.6.1.4.1.2011.5.25.118.2.2		not-accessible	A table of configuration about the relation between the SSH server and the rsa peerkey. The index of this table is hwSSHServerIndex.
I32 hwSSHServerKeyTimeOut	1.3.6.1.4.1.2011.5.25.118.1.7	Integer32	read-write	The interval of updating the SSH server key pair. By default, value is 0 hour, which means server key can't be updated forever. Range: 0-24 Unit: hour
OCT hwSSHServerName	1.3.6.1.4.1.2011.5.25.118.2.2.1.2	OCTET STRING	read-create	The object specifies the name of a SSH server.
I32 hwSSHServerPort	1.3.6.1.4.1.2011.5.25.118.1.6	Integer32	read-write	The object specifies port number for SSH server supporting. The default value is 22.
I32 hwSSHServerRetry	1.3.6.1.4.1.2011.5.25.118.1.5	Integer32	read-write	The object specifies authentication-retry times for SSH user. Default: 3
ROW hwSSHServerRowStatus	1.3.6.1.4.1.2011.5.25.118.2.2.1.4	RowStatus	read-create	The object specifies the status of this entry. When the status is active, hwSSHServerAssignKey's value in the entry is allowed to be modified.
hwSSHServerSessionEntry	1.3.6.1.4.1.2011.5.25.118.1.12.1		not-accessible	The object shows current session information of the SSH server which includes username, version information, retry times of online users currently. The index of this entry is hwSSHSessionIndex.
hwSSHServerSessionGroup	1.3.6.1.4.1.2011.5.25.118.4.2.3			The SSH server's session group.
hwSSHServerSessionTable	1.3.6.1.4.1.2011.5.25.118.1.12		not-accessible	The object shows current session information of the SSH server which includes username, version information, retry times of online users currently. The index of this table is hwSSHSessionIndex.
I32 hwSSHServerTimeOut	1.3.6.1.4.1.2011.5.25.118.1.4	Integer32	read-write	The object specifies the time when SSH authentication times out. The unit is the second and the default is 60 seconds.
STR hwSSHSessionAuthType	1.3.6.1.4.1.2011.5.25.118.1.12.1.12	DisplayString	read-only	The object specifies the authentication type of SSH session.
I32 hwSSHSessionConnectionIndex	1.3.6.1.4.1.2011.5.25.118.1.12.1.15	Integer32	read-only	The object specifies the line number supports a connection of SSH user which is in connection with SSH(STelnet/Sftp/SNetConf) server.
INT hwSSHSessionConnectType	1.3.6.1.4.1.2011.5.25.118.1.12.1.3	INTEGER	read-only	The object specifies the line number supports a connection of SSH user which is in connection with SSH server.
STR hwSSHSessionCtosCipher	1.3.6.1.4.1.2011.5.25.118.1.12.1.7	DisplayString	read-only	The object specifies the cipher of custom to server.
STR hwSSHSessionCtosCompress	1.3.6.1.4.1.2011.5.25.118.1.12.1.16	DisplayString	read-only	The object specifies the Compression algorithm of SSH client to server.
STR hwSSHSessionCtosHmac	1.3.6.1.4.1.2011.5.25.118.1.12.1.9	DisplayString	read-only	The object specifies the hmac of custom to server.
I32 hwSSHSessionIndex	1.3.6.1.4.1.2011.5.25.118.1.12.1.1	Integer32	not-accessible	The object specifies the index of hwSSHServerSessionTable.
STR hwSSHSessionKex	1.3.6.1.4.1.2011.5.25.118.1.12.1.11	DisplayString	read-only	The object specifies the key exchange.
INT hwSSHSessionKeyType	1.3.6.1.4.1.2011.5.25.118.1.12.1.14	INTEGER	read-only	The object specifies the public key type of SSH session.
I32 hwSSHSessionRetry	1.3.6.1.4.1.2011.5.25.118.1.12.1.6	Integer32	read-only	The object specifies SSH user's retrying times in authentications.
STR hwSSHSessionServiceType	1.3.6.1.4.1.2011.5.25.118.1.12.1.13	DisplayString	read-only	The object specifies the service type of SSH session.
INT hwSSHSessionState	1.3.6.1.4.1.2011.5.25.118.1.12.1.5	INTEGER	read-only	The object specifies the state of a SSH user which is in connection with SSH server. Options: 1.started(1)-indicates the state is start.
STR hwSSHSessionStocCipher	1.3.6.1.4.1.2011.5.25.118.1.12.1.8	DisplayString	read-only	The object specifies the cipher of server to custom.
STR hwSSHSessionStocCompress	1.3.6.1.4.1.2011.5.25.118.1.12.1.17	DisplayString	read-only	The object specifies the Compression algorithm of SSH Server to client.
STR hwSSHSessionStocHmac	1.3.6.1.4.1.2011.5.25.118.1.12.1.10	DisplayString	read-only	The object specifies the hmac of server to custom.
STR hwSSHSessionUserName	1.3.6.1.4.1.2011.5.25.118.1.12.1.2	DisplayString	read-only	The object specifies the name of a SSH user, which has started a session.
STR hwSSHSessionVer	1.3.6.1.4.1.2011.5.25.118.1.12.1.4	DisplayString	read-only	The object specifies the version information of a SSH user which is in connection with SSH server.
NTF hwSSHSftpUserNumExceedMax	1.3.6.1.4.1.2011.5.25.118.3.1			This notification was sent when the total number of sftp users requesting sftp service exceeds max user number configured.
OCT hwSSHUserAssignKey	1.3.6.1.4.1.2011.5.25.118.1.11.1.3	OCTET STRING	read-create	The object specifies is a peer public key for a SSH user. This peer public key on the SSH server must exist and associate with hwRSAPublicKeyName.
INT hwSSHUserAssignKeyType	1.3.6.1.4.1.2011.5.25.118.1.11.1.9	INTEGER	read-create	The object specifies the public key type of SSH user.
INT hwSSHUserAuthorizationCMD	1.3.6.1.4.1.2011.5.25.118.1.11.1.7	INTEGER	read-create	The object specifies the authorization type of SSH user. When authorizationAAA is specified, the SSH user will be authorizated by HWTACACS server. The default authorization is authorizationNULL, indicating SSH user doesn't need to be authorizated by HWTACACS server. Options: 1.authorizationNULL(1)-The default authorization is authorizationNULL,indicating SSH user doesn't need to be authorizated by HWTACACS server. 2.authorizationAAA(2) -When authorizationAAA is specified,the SSH user will be authorizated by HWTACACS server.
INT hwSSHUserAuthType	1.3.6.1.4.1.2011.5.25.118.1.11.1.4	INTEGER	read-create	The object specifies the authentication type of SSH user. The default authentication type is authPASSWORD. Options: 1. authNULL(1) -No authenticate. 2. authPASSWORD(2) -Password authentication. 3. authRSA(3) -RSA key authentication. 4. authRSAorPASSWORD(4) -Password or RSA key authentication. 5. authRSAandPASSWORD(5) -Password and RSA key authentication. 6. authDSA(6), -DSA key authentication. 7. authDSAandPASSWORD(7), -Password or DSA key authentication. 8. authAny(8), -Any authentication. 9. authECC(9), -ECC key authentication. 10.authECCandPASSWORD(10) -Password and ECC key authentication.
hwSSHUserEntry	1.3.6.1.4.1.2011.5.25.118.1.11.1		not-accessible	This table is used for querying and setting the information about SSH user. The index of this entry is hwSSHUserIndex.
hwSSHUserGroup	1.3.6.1.4.1.2011.5.25.118.4.2.2			The SSH user's group.
I32 hwSSHUserIndex	1.3.6.1.4.1.2011.5.25.118.1.11.1.1	Integer32	not-accessible	The object specifies the index of hwSSHUserTable.
OCT hwSSHUserName	1.3.6.1.4.1.2011.5.25.118.1.11.1.2	OCTET STRING	read-create	The object specifies the name of a SSH user. The maximum length of the node is 85.
ROW hwSSHUserRowStatus	1.3.6.1.4.1.2011.5.25.118.1.11.1.8	RowStatus	read-create	The object specifies the status of this entry. When the status is active(1), hwSSHUserAssignKey, hwSSHUserAuthType, hwSSHUserServiceType, hwSSHUserSftpDirectory, and hwSSHUserAuthorizationCMD's value in the entry are allowed to be modified.
INT hwSSHUserServiceType	1.3.6.1.4.1.2011.5.25.118.1.11.1.5	INTEGER	read-create	The object specifies the service type of SSH user. Options: 1. servicetypeNULL(1) -default service type. 2. servicetypeSTELNET(2) -The service type of the SSH user is STELNET. 3. servicetypeSFTP(3) -The service type of the SSH user is SFTP. 4. servicetypeALL(4) -The service type of the SSH user is all. 5. servicetypeSNetConf(5), -The service type of the SSH user is SNetConf. 6. servicetypeSftpSNetConf(6), -The service type of the SSH user is Sftp and SNetConf. 7. servicetypeSTelnetSftp(7), -The service type of the SSH user is STelnet and Sftp. 8. servicetypeSTelnetSNetConf(8) -The service type of the SSH user is STelnet and SNetConf.
OCT hwSSHUserSftpDirectory	1.3.6.1.4.1.2011.5.25.118.1.11.1.6	OCTET STRING	read-create	The object specifies the working directory for the sftp user. The total length of absolute path is 128,the length of single directory is 128.
hwSSHUserTable	1.3.6.1.4.1.2011.5.25.118.1.11		not-accessible	This table is used for querying and setting the information about SSH user. The index of this table is hwSSHUserIndex.
INT hwStelnetServerEnable	1.3.6.1.4.1.2011.5.25.118.1.1	INTEGER	read-write	The object specifies whether the SSH stelnet server is enable. Options: 1. enable(1) -The SSH stelnet server is enable. 2. disable(2)-The SSH stelnet server is disable.

RFC description

Manages SSH server and client configuration including user authentication on Huawei devices.

Start monitoring Huawei router or switch (SSH server/client management) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-SSH-MIB

What Is HUAWEI-SSH-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description