ME1200-ACCESS-MANAGEMENT-MIB

All MIBs › ME1200-ACCESS-MANAGEMENT-MIB

Organization: Cisco Systems, Inc

Last Updated: 2014-02-18

Category: Device Management, Vendor: Cisco

Description: Cisco ME1200 Metro Ethernet switch MIB for access management including SSH/Telnet/HTTP access control lists and restrictions.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ME1200-ACCESS-MANAGEMENT-MIB?

This is a Cisco ME1200 Metro Ethernet switch proprietary MIB implementing a private Access Management module that controls administrative access restrictions to the device itself. It exposes a global admin-state switch plus IPv4-based access-control-list-style tables defining VLAN, IP address range, and permitted management protocols (web/HTTP, SNMP, Telnet) with an allow/deny action per entry. It is used to monitor and verify security/software configuration status: whether management access restriction is globally enabled, and which IP ranges/VLANs are permitted (or denied) HTTP, SNMP, or Telnet access to the switch, important for auditing that only authorized management stations can reach the device. It complements standard management-access mechanisms and typically works alongside SNMP community/VACM-based access control and the switch's standard IF-MIB for VLAN/interface context. It is deployed on Cisco ME1200 Metro Ethernet switches in service-provider and enterprise networks where administrators need to restrict which hosts can manage the switch. Network engineers evaluating or troubleshooting this functionality can download the ME1200-ACCESS-MANAGEMENT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ME1200-ACCESS-MANAGEMENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco ME1200 Metro Ethernet switch

Monitoring Examples

Polling me1200AccessManagementGlobalsAdminState confirms whether access management restrictions are enabled switch-wide. Walking me1200AccessManagementIpv4Table by me1200AccessManagementIpv4AccessIndex exposes each rule's me1200AccessManagementIpv4VlanId, me1200AccessManagementIpv4StartAddress/EndAddress, and per-protocol flags (me1200AccessManagementIpv4WebServices, me1200AccessManagementIpv4SnmpServices, me1200AccessManagementIpv4TelnetServices) together with me1200AccessManagementIpv4Action, letting an auditor confirm that only an authorized management subnet is permitted SNMP/Telnet/HTTP access and flag any overly permissive rule.

What Can Be Monitored

access management global admin state
per-rule allowed IP/VLAN range
per-protocol (web/SNMP/Telnet) access permission
access rule allow/deny action

Imported Objects

From CISCOME1200-MIB

me1200SwitchMgmt

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddressIPv6

From ME1200-TC

ME1200RowEditorState
ME1200Unsigned16

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
me1200AccessManagementMib	1.3.6.1.4.1.9.9.815.1.51			This is a private version of the Access Management MIB
me1200AccessManagementMIBObjects	1.3.6.1.4.1.9.9.815.1.51.1
me1200AccessManagementConfig	1.3.6.1.4.1.9.9.815.1.51.1.2
me1200AccessManagementGlobals	1.3.6.1.4.1.9.9.815.1.51.1.2.1
T/F me1200AccessManagementGlobalsAdminState	1.3.6.1.4.1.9.9.815.1.51.1.2.1.1	TruthValue	read-write	Enable/Disable the Access Management global functionality.
me1200AccessManagementIpv4Table	1.3.6.1.4.1.9.9.815.1.51.1.2.2		not-accessible	This is a table for managing Access Management per IPv4 basis
me1200AccessManagementIpv4Entry	1.3.6.1.4.1.9.9.815.1.51.1.2.2.1		not-accessible	Each entry has a set of parameters
I32 me1200AccessManagementIpv4AccessIndex	1.3.6.1.4.1.9.9.815.1.51.1.2.2.1.1	Integer32	not-accessible	Index for Access Management IPv4/IPv6 table.
ME1 me1200AccessManagementIpv4VlanId	1.3.6.1.4.1.9.9.815.1.51.1.2.2.1.2	ME1200Unsigned16	read-write	The ID of specific VLAN interface that Access Management should take effect for IPv4.
IP me1200AccessManagementIpv4StartAddress	1.3.6.1.4.1.9.9.815.1.51.1.2.2.1.3	IpAddress	read-write	The starting IPv4 address of the range that Access Management performs checking.
IP me1200AccessManagementIpv4EndAddress	1.3.6.1.4.1.9.9.815.1.51.1.2.2.1.4	IpAddress	read-write	The ending IPv4 address of the range that Access Management performs checking.
T/F me1200AccessManagementIpv4WebServices	1.3.6.1.4.1.9.9.815.1.51.1.2.2.1.5	TruthValue	read-write	Enable/Disable HTTP and HTTPS functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv4 table.
T/F me1200AccessManagementIpv4SnmpServices	1.3.6.1.4.1.9.9.815.1.51.1.2.2.1.6	TruthValue	read-write	Enable/Disable SNMP functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv4 table.
T/F me1200AccessManagementIpv4TelnetServices	1.3.6.1.4.1.9.9.815.1.51.1.2.2.1.7	TruthValue	read-write	Enable/Disable TELNET/SSH functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv4 table.
ME1 me1200AccessManagementIpv4Action	1.3.6.1.4.1.9.9.815.1.51.1.2.2.1.100	ME1200RowEditorState	read-write	Action
me1200AccessManagementIpv4TableRowEditor	1.3.6.1.4.1.9.9.815.1.51.1.2.3
I32 me1200AccessManagementIpv4TableRowEditorAccessIndex	1.3.6.1.4.1.9.9.815.1.51.1.2.3.1	Integer32	read-write	Index for Access Management IPv4/IPv6 table.
ME1 me1200AccessManagementIpv4TableRowEditorVlanId	1.3.6.1.4.1.9.9.815.1.51.1.2.3.2	ME1200Unsigned16	read-write	The ID of specific VLAN interface that Access Management should take effect for IPv4.
IP me1200AccessManagementIpv4TableRowEditorStartAddress	1.3.6.1.4.1.9.9.815.1.51.1.2.3.3	IpAddress	read-write	The starting IPv4 address of the range that Access Management performs checking.
IP me1200AccessManagementIpv4TableRowEditorEndAddress	1.3.6.1.4.1.9.9.815.1.51.1.2.3.4	IpAddress	read-write	The ending IPv4 address of the range that Access Management performs checking.
T/F me1200AccessManagementIpv4TableRowEditorWebServices	1.3.6.1.4.1.9.9.815.1.51.1.2.3.5	TruthValue	read-write	Enable/Disable HTTP and HTTPS functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv4 table.
T/F me1200AccessManagementIpv4TableRowEditorSnmpServices	1.3.6.1.4.1.9.9.815.1.51.1.2.3.6	TruthValue	read-write	Enable/Disable SNMP functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv4 table.
T/F me1200AccessManagementIpv4TableRowEditorTelnetServices	1.3.6.1.4.1.9.9.815.1.51.1.2.3.7	TruthValue	read-write	Enable/Disable TELNET/SSH functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv4 table.
ME1 me1200AccessManagementIpv4TableRowEditorAction	1.3.6.1.4.1.9.9.815.1.51.1.2.3.100	ME1200RowEditorState	read-write	Action
me1200AccessManagementIpv6Table	1.3.6.1.4.1.9.9.815.1.51.1.2.4		not-accessible	This is a table for managing Access Management per IPv6 basis
me1200AccessManagementIpv6Entry	1.3.6.1.4.1.9.9.815.1.51.1.2.4.1		not-accessible	Each entry has a set of parameters
I32 me1200AccessManagementIpv6AccessIndex	1.3.6.1.4.1.9.9.815.1.51.1.2.4.1.1	Integer32	not-accessible	Index for Access Management IPv4/IPv6 table.
ME1 me1200AccessManagementIpv6VlanId	1.3.6.1.4.1.9.9.815.1.51.1.2.4.1.2	ME1200Unsigned16	read-write	The ID of specific VLAN interface that Access Management should take effect for IPv6.
ADR me1200AccessManagementIpv6StartAddress	1.3.6.1.4.1.9.9.815.1.51.1.2.4.1.3	InetAddressIPv6	read-write	The starting IPv6 address of the range that Access Management performs checking.
ADR me1200AccessManagementIpv6EndAddress	1.3.6.1.4.1.9.9.815.1.51.1.2.4.1.4	InetAddressIPv6	read-write	The ending IPv6 address of the range that Access Management performs checking.
T/F me1200AccessManagementIpv6WebServices	1.3.6.1.4.1.9.9.815.1.51.1.2.4.1.5	TruthValue	read-write	Enable/Disable HTTP and HTTPS functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv6 table.
T/F me1200AccessManagementIpv6SnmpServices	1.3.6.1.4.1.9.9.815.1.51.1.2.4.1.6	TruthValue	read-write	Enable/Disable SNMP functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv6 table.
T/F me1200AccessManagementIpv6TelnetServices	1.3.6.1.4.1.9.9.815.1.51.1.2.4.1.7	TruthValue	read-write	Enable/Disable TELNET/SSH functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv6 table.
ME1 me1200AccessManagementIpv6Action	1.3.6.1.4.1.9.9.815.1.51.1.2.4.1.100	ME1200RowEditorState	read-write	Action
me1200AccessManagementIpv6TableRowEditor	1.3.6.1.4.1.9.9.815.1.51.1.2.5
I32 me1200AccessManagementIpv6TableRowEditorAccessIndex	1.3.6.1.4.1.9.9.815.1.51.1.2.5.1	Integer32	read-write	Index for Access Management IPv4/IPv6 table.
ME1 me1200AccessManagementIpv6TableRowEditorVlanId	1.3.6.1.4.1.9.9.815.1.51.1.2.5.2	ME1200Unsigned16	read-write	The ID of specific VLAN interface that Access Management should take effect for IPv6.
ADR me1200AccessManagementIpv6TableRowEditorStartAddress	1.3.6.1.4.1.9.9.815.1.51.1.2.5.3	InetAddressIPv6	read-write	The starting IPv6 address of the range that Access Management performs checking.
ADR me1200AccessManagementIpv6TableRowEditorEndAddress	1.3.6.1.4.1.9.9.815.1.51.1.2.5.4	InetAddressIPv6	read-write	The ending IPv6 address of the range that Access Management performs checking.
T/F me1200AccessManagementIpv6TableRowEditorWebServices	1.3.6.1.4.1.9.9.815.1.51.1.2.5.5	TruthValue	read-write	Enable/Disable HTTP and HTTPS functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv6 table.
T/F me1200AccessManagementIpv6TableRowEditorSnmpServices	1.3.6.1.4.1.9.9.815.1.51.1.2.5.6	TruthValue	read-write	Enable/Disable SNMP functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv6 table.
T/F me1200AccessManagementIpv6TableRowEditorTelnetServices	1.3.6.1.4.1.9.9.815.1.51.1.2.5.7	TruthValue	read-write	Enable/Disable TELNET/SSH functionality via Access Management. At least one of WebServices/SnmpServices/TelnetServices has to be enabled for a specific AccessIndex in Access Management IPv6 table.
ME1 me1200AccessManagementIpv6TableRowEditorAction	1.3.6.1.4.1.9.9.815.1.51.1.2.5.100	ME1200RowEditorState	read-write	Action
me1200AccessManagementStatus	1.3.6.1.4.1.9.9.815.1.51.1.3
me1200AccessManagementStatistics	1.3.6.1.4.1.9.9.815.1.51.1.3.1
U32 me1200AccessManagementStatisticsHttpReceivedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.1	Unsigned32	read-only	Received count of frames via HTTP.
U32 me1200AccessManagementStatisticsHttpAllowedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.2	Unsigned32	read-only	Permit count of frames via HTTP.
U32 me1200AccessManagementStatisticsHttpDiscardedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.3	Unsigned32	read-only	Drop count of frames via HTTP.
U32 me1200AccessManagementStatisticsHttpsReceivedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.4	Unsigned32	read-only	Received count of frames via HTTPS.
U32 me1200AccessManagementStatisticsHttpsAllowedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.5	Unsigned32	read-only	Permit count of frames via HTTPS.
U32 me1200AccessManagementStatisticsHttpsDiscardedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.6	Unsigned32	read-only	Drop count of frames via HTTPS.
U32 me1200AccessManagementStatisticsSnmpReceivedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.7	Unsigned32	read-only	Received count of frames via SNMP.
U32 me1200AccessManagementStatisticsSnmpAllowedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.8	Unsigned32	read-only	Permit count of frames via SNMP.
U32 me1200AccessManagementStatisticsSnmpDiscardedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.9	Unsigned32	read-only	Drop count of frames via SNMP.
U32 me1200AccessManagementStatisticsTelnetReceivedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.10	Unsigned32	read-only	Received count of frames via TELNET.
U32 me1200AccessManagementStatisticsTelnetAllowedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.11	Unsigned32	read-only	Permit count of frames via TELNET.
U32 me1200AccessManagementStatisticsTelnetDiscardedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.12	Unsigned32	read-only	Drop count of frames via TELNET.
U32 me1200AccessManagementStatisticsSshReceivedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.13	Unsigned32	read-only	Received count of frames via SSH.
U32 me1200AccessManagementStatisticsSshAllowedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.14	Unsigned32	read-only	Permit count of frames via SSH.
U32 me1200AccessManagementStatisticsSshDiscardedPkts	1.3.6.1.4.1.9.9.815.1.51.1.3.1.15	Unsigned32	read-only	Drop count of frames via SSH.
me1200AccessManagementControl	1.3.6.1.4.1.9.9.815.1.51.1.4
me1200AccessManagementControlStatistics	1.3.6.1.4.1.9.9.815.1.51.1.4.1
T/F me1200AccessManagementControlStatisticsClear	1.3.6.1.4.1.9.9.815.1.51.1.4.1.1	TruthValue	read-write	To trigger the control action (only) when TRUE.
me1200AccessManagementMIBConformance	1.3.6.1.4.1.9.9.815.1.51.2
me1200AccessManagementMIBCompliances	1.3.6.1.4.1.9.9.815.1.51.2.1
me1200AccessManagementMibCompliance	1.3.6.1.4.1.9.9.815.1.51.2.1.1			The compliance statement for the implementation.
me1200AccessManagementMIBGroups	1.3.6.1.4.1.9.9.815.1.51.2.2
me1200AccessManagementGlobalsInfoGroup	1.3.6.1.4.1.9.9.815.1.51.2.2.1			A collection of objects suitable for bulk operations.
me1200AccessManagementIpv4TableInfoGroup	1.3.6.1.4.1.9.9.815.1.51.2.2.2			A collection of objects suitable for bulk operations.
me1200AccessManagementIpv4TableRowEditorInfoGroup	1.3.6.1.4.1.9.9.815.1.51.2.2.3			A collection of objects suitable for bulk operations.
me1200AccessManagementIpv6TableInfoGroup	1.3.6.1.4.1.9.9.815.1.51.2.2.4			A collection of objects suitable for bulk operations.
me1200AccessManagementIpv6TableRowEditorInfoGroup	1.3.6.1.4.1.9.9.815.1.51.2.2.5			A collection of objects suitable for bulk operations.
me1200AccessManagementStatisticsInfoGroup	1.3.6.1.4.1.9.9.815.1.51.2.2.6			A collection of objects suitable for bulk operations.
me1200AccessManagementControlStatisticsInfoGroup	1.3.6.1.4.1.9.9.815.1.51.2.2.7			A collection of objects suitable for bulk operations.

RFC description

Access management controls for Cisco ME1200 switches including IPv4 and IPv6 configurations.

Start monitoring Cisco ME1200 Metro Ethernet switch (management access restriction) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ME1200-ACCESS-MANAGEMENT-MIB

What Is ME1200-ACCESS-MANAGEMENT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description