IBMIROCAUTH-MIB

All MIBs › IBMIROCAUTH-MIB

Category: Vendor: IBM

Description: IBM MIB for authentication management on IBM IROC devices including user access control and security configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is IBMIROCAUTH-MIB?

IBMIROCAUTH-MIB is an IBM vendor MIB that manages user authentication and tunnel/dial profiles on IBM IROC (remote-access router) devices, covering both security configuration and remote-access session parameters. It exposes user profile objects for authentication (username, password, encryption key), connection policy (max connect time, dialout permission), and callback configuration (callback type and number) used for dial-up/PPP-based remote access. Its monitoring value is centered on software/security configuration status, tracking each user profile's type, status (active/inactive), and connection limits, letting an administrator verify which accounts are enabled, detect unauthorized profile changes, or confirm callback settings are correctly enforcing dial-back security policy. It is closely tied to PPP-based remote-access conventions and complements general authentication frameworks (similar in spirit to RADIUS/TACACS+ profile concepts) rather than any single IETF MIB. It was deployed on IBM IROC remote-access routers providing dial-up/PPP connectivity for branch or remote users. Network engineers evaluating or troubleshooting this functionality can download the IBMIROCAUTH-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in IBMIROCAUTH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

IBM IROC remote-access router

Monitoring Examples

An administrator would poll authUserProfileTable/authUserProfileEntry to review each authUserProfileName and its authUserProfileStatus, confirming a user profile is active and that authUserProfileType and authUserProfileMaxConnectTime match policy. Checking authUserProfileCallbackType and authUserProfileCallbackNum would reveal whether dial-back security is properly configured for a given user, and an unexpected change to authUserProfileDialout or authUserProfileEncryptionKey would flag a potential unauthorized modification to that user's remote-access permissions.

What Can Be Monitored

user authentication profile status
user profile type and connect-time limit
dialout permission
callback type and number
encryption key configuration

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC-1215

TRAP-TYPE

From RFC1155-SMI

enterprises

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
TimeTicks

From SNMPv2-TC

AutonomousType
DisplayString
PhysAddress
RowStatus
TestAndIncr
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
ibm	1.3.6.1.4.1.2
ibmProd	1.3.6.1.4.1.2.6
ibm2210	1.3.6.1.4.1.2.6.72
ibmIROC	1.3.6.1.4.1.2.6.119
ibmIROCconfig	1.3.6.1.4.1.2.6.119.7
ibmIROCconfigAuth	1.3.6.1.4.1.2.6.119.7.2
ibmAuthTraps	1.3.6.1.4.1.2.6.119.7.2.0
ibmAuthMIB	1.3.6.1.4.1.2.6.119.7.2.1
ibmAuthGeneral	1.3.6.1.4.1.2.6.119.7.2.1.1
authUserProfileTable	1.3.6.1.4.1.2.6.119.7.2.1.2		not-accessible	Table of named profiles. Used to collect information about tunnel profiles and user, e.g., PPP, related information.
authUserProfileEntry	1.3.6.1.4.1.2.6.119.7.2.1.2.1		not-accessible	Each entry is a separate profile with associated attributes.
STR authUserProfileName	1.3.6.1.4.1.2.6.119.7.2.1.2.1.1	DisplayString	not-accessible	For ppp user, it is the name of the user. For tunnel connection definition, it is the host name of the remote tunnel end point.
SEC authUserProfileRowDefinition	1.3.6.1.4.1.2.6.119.7.2.1.2.1.2	SecureRowDefinition	read-write	The status of the row.
STR authUserProfilePassword	1.3.6.1.4.1.2.6.119.7.2.1.2.1.3	SecureDisplayString	read-write	The password for this user. It is used for PPP and SNMP users but not tunnel profiles.
OCT authUserProfileType	1.3.6.1.4.1.2.6.119.7.2.1.2.1.4	OCTET STRING	read-write	The profile type. '80'H represents login. '40'H represents tunnel, and '20'H represents ppp, '10'H represents snmp. It is implementation choice to restrict to one type per entry (i.e., can't be combination of these types) or not support certain types of users.
INT authUserProfileMaxConnectTime	1.3.6.1.4.1.2.6.119.7.2.1.2.1.5	INTEGER	read-write	The max connection allowed per connection. A value of zero is using the interface default, and negative one (-1) indicates no limits.
INT authUserProfileCallbackType	1.3.6.1.4.1.2.6.119.7.2.1.2.1.6	INTEGER	read-write	The type of callback.
STR authUserProfileCallbackNum	1.3.6.1.4.1.2.6.119.7.2.1.2.1.7	DisplayString	read-write	The dial back phone number when callback type is required. An octet string of length zero indicates the dial back phone number is not set.
ENA authUserProfileDialout	1.3.6.1.4.1.2.6.119.7.2.1.2.1.8	Enabled	read-write	A user on the network may be requesting permission to use dialout function. This flag attached to the user profile determines whether the user is able to dialout.
STR authUserProfileEncryptionKey	1.3.6.1.4.1.2.6.119.7.2.1.2.1.9	SecureOctetString	read-write	The encryption key. An octet string of length zero indicates the encryption key is not set. The key is used when ECP is negotiated for this user.
INT authUserProfileStatus	1.3.6.1.4.1.2.6.119.7.2.1.2.1.10	INTEGER	read-write	The status of the user profile entry. By setting the value to 'enabled' from a non-enabled status will reset the following statistics: authUserProfileGLoginsAttempts, authUserProfileLoginAttempts, authUserProfileLoginFails, authUserProfileLoginLock.
DAT authUserProfileExpirationDate	1.3.6.1.4.1.2.6.119.7.2.1.2.1.11	DateAndTime2	read-write	The date and time when the password will be expired. That is, the user will no longer be allowed to dial in after this time. A value of zero length indicates no expiration.
INT authUserProfileGLoginAllowed	1.3.6.1.4.1.2.6.119.7.2.1.2.1.12	INTEGER	read-write	Number of grace logins is allowed after expiration Some local maximum may apply.
INT authUserProfileGLoginsAttempts	1.3.6.1.4.1.2.6.119.7.2.1.2.1.13	INTEGER	read-only	Number of grace login attempted is attempted after the expiration of this user profile. Some local maximum may apply.
INT authUserProfileLoginAttempts	1.3.6.1.4.1.2.6.119.7.2.1.2.1.14	INTEGER	read-only	Total number of login attempted, sucessfully or not.
INT authUserProfileLoginFails	1.3.6.1.4.1.2.6.119.7.2.1.2.1.15	INTEGER	read-only	Total number of login failed.
INT authUserProfileLoginLock	1.3.6.1.4.1.2.6.119.7.2.1.2.1.16	INTEGER	read-only	Number of consecutive failed logins attempted. The number is reset to zero after a successful login.
INT authUserProfileIpType	1.3.6.1.4.1.2.6.119.7.2.1.2.1.17	INTEGER	read-write	The Ip network type of Dials.
IP authUserProfileIpAddr	1.3.6.1.4.1.2.6.119.7.2.1.2.1.18	IpAddress	read-write	IP address for this user.
IP authUserProfileIpMask	1.3.6.1.4.1.2.6.119.7.2.1.2.1.19	IpAddress	read-write	IP mask for this user.
STR authUserProfileHostName	1.3.6.1.4.1.2.6.119.7.2.1.2.1.20	DisplayString	read-write	The host name for this user.
STR authUserProfileSharedSecurity	1.3.6.1.4.1.2.6.119.7.2.1.2.1.21	SecureDisplayString	read-write	The shared security between two L2TP Peers.
ENA authUserProfileTunneled	1.3.6.1.4.1.2.6.119.7.2.1.2.1.22	Enabled	read-write	The value of enabled means this PPP user profile is a tunneled user.
INT authUserProfileTunnelType	1.3.6.1.4.1.2.6.119.7.2.1.2.1.23	INTEGER	read-write	Tunneling Protocol.
INT authUserProfileTunnelMediumType	1.3.6.1.4.1.2.6.119.7.2.1.2.1.24	INTEGER	read-write	Tunneling Medium.
STR authUserProfileTunnelServer	1.3.6.1.4.1.2.6.119.7.2.1.2.1.25	DisplayString	read-write	Tunnel-Server endpoint address. For IP protocol, it is the server IP address in dotted notation.
ENA authUserProfileVcEnabled	1.3.6.1.4.1.2.6.119.7.2.1.2.1.26	Enabled	read-write	The value of enabled means this PPP user profile is a virtual connection user.
INT authUserProfileVcMaxSuspendTime	1.3.6.1.4.1.2.6.119.7.2.1.2.1.27	INTEGER	read-write	The maximum amount of time (in hours) that the device will allow a virtual connection in suspend mode. After that, the device will remove the all states of the virtual connection. A value of -1 means use the box default value, 0 means no limits. It is device choice to provide reasonable minimum and maximum suspend time values.
INT authUserProfileVcIdleTime	1.3.6.1.4.1.2.6.119.7.2.1.2.1.28	INTEGER	read-write	The device will instruct the dial-in station to suspend the real connection after the inactivity for this amount of time. A value of -1 means use the box default value, 0 means no limits. It is device choice to support 0, and provide reasonable minimum and maximum idle time values.
ibmAuthDomains	1.3.6.1.4.1.2.6.119.7.2.2
ibmAuthConformance	1.3.6.1.4.1.2.6.119.7.2.3
authCompliances	1.3.6.1.4.1.2.6.119.7.2.3.1
authUserProfileCompliance	1.3.6.1.4.1.2.6.119.7.2.3.1.1
authGroups	1.3.6.1.4.1.2.6.119.7.2.3.2
authUserProfileGroup	1.3.6.1.4.1.2.6.119.7.2.3.2.1

RFC description

IBM IROC authentication MIB providing configuration and management of authentication and virtual connection parameters.

Start monitoring IBM IROC remote-access router (dial-up/PPP authentication) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download IBMIROCAUTH-MIB

What Is IBMIROCAUTH-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description