RADLAN-SSH-MIB

All MIBs › RADLAN-SSH-MIB

Last Updated: 2003--0-1-

Category: Security, Vendor: RADLAN/Cisco SB

Description: Manages SSH client and server configuration for encrypted remote management access.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RADLAN-SSH-MIB?

RADLAN-SSH-MIB is a RADlan (a chipset/software vendor whose 'rl' MIB prefix appears across many white-labeled switch platforms including Cisco Small Business) private MIB for managing SSH-based secure remote management access. It exposes SSH server host public key data (algorithm, key fragments, and fingerprints) and top-level configuration groups for the SSH server and client on the device. Its monitoring relevance is primarily security/software configuration status: verifying which host key algorithm and fingerprint the device is presenting, which is important for detecting an unexpected key change that could indicate a device replacement, firmware reset, or man-in-the-middle risk. It relies on general SNMPv2-SMI conventions and assumes an underlying SSH implementation on the device but does not itself depend on another SNMP MIB module. It is deployed on managed switches and routers (frequently RADlan-derived Cisco Small Business, Zyxel, or similar OEM platforms) wherever SSH is used for secure CLI access. Engineers can download the RADLAN-SSH-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in RADLAN-SSH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

RADlan-based managed switch/router (e.g. Cisco Small Business, Zyxel OEM platforms)

Monitoring Examples

An administrator would poll rlSshServerHostPublicKeyFingerprintTable/rlSshServerHostPublicKeyFingerprintTableEntry to retrieve the current rlSshServerHostPublicKeyFingerprint and confirm it matches the expected value recorded during initial device provisioning. The rlSshServerHostPublicKeyTable exposes the raw key material via rlSshServerHostPublicKeyFragmentText, reassembled using rlSshServerHostPublicKeyFragmentId for keys too long for a single varbind. An unexpected change in the fingerprint on a subsequent poll would indicate the SSH host key was regenerated, possibly due to a factory reset or configuration wipe.

What Can Be Monitored

SSH host public key fingerprint
SSH host key algorithm
SSH server/client configuration state

Imported Objects

From RADLAN-MIB

rnd	OBJECT-IDENTITY

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
rlSsh	1.3.6.1.4.1.89.78			The MIB module describes the private MIB for SSH supported by the product.
INT rlSshMibVersion	1.3.6.1.4.1.89.78.1	INTEGER	read-only	The MIB version. The current version is 2
rlSshServer	1.3.6.1.4.1.89.78.2
rlSshServerHostPublicKeyTable	1.3.6.1.4.1.89.78.2.1		not-accessible	This table contains the router's public key. Each row in this table contains a fragment of the key, in printable binhex format. There may be up to 160 characters in every fragment, and they are all combined to form one key. The key is generated by writing to rlSshServerRegenerateHostKey. To cause clients to connect to this router without printing warning messages (and also prevent active man-in-the-middle), the router's public key must printed out and inserted into the client's authorized_keys file
rlSshServerHostPublicKeyTableEntry	1.3.6.1.4.1.89.78.2.1.1		not-accessible	The row definition for this table.
RLS rlSshServerHostPublicKeyAlgorithm	1.3.6.1.4.1.89.78.2.1.1.1	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
U32 rlSshServerHostPublicKeyFragmentId	1.3.6.1.4.1.89.78.2.1.1.2	Unsigned32	read-only	Identifies the index of this fragment in the final key. All segments must be combined to form one big key.
STR rlSshServerHostPublicKeyFragmentText	1.3.6.1.4.1.89.78.2.1.1.3	DisplayString	read-only	A part of the readable text entry for the server's public authorzation key.
rlSshServerHostPublicKeyFingerprintTable	1.3.6.1.4.1.89.78.2.2		not-accessible	This table contains the fingerprint for the router's public key.
rlSshServerHostPublicKeyFingerprintTableEntry	1.3.6.1.4.1.89.78.2.2.1		not-accessible	The row definition for this table.
RLS rlSshServerHostPublicKeyFingerprintAlgorithm	1.3.6.1.4.1.89.78.2.2.1.1	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
RLS rlSshServerHostPublicKeyFingerprintDigestFormat	1.3.6.1.4.1.89.78.2.2.1.2	RlSshPublicKeyDigestFormat	read-only	Format of the digest to be displayed (OpenSSH or SSH.com).
STR rlSshServerHostPublicKeyFingerprint	1.3.6.1.4.1.89.78.2.2.1.3	DisplayString	read-only	SECSH format fingerprint of the server's public key. To prevent man in the middle attacks, users should make sure the ssh Server's fingerprint, as printed in the connection process, is similar to the one printed here.
rlSshServerAuthorizedUsersPublicKeyTable	1.3.6.1.4.1.89.78.2.3		not-accessible	This table contains public keys for all users who are authorized to access the router. For a user to be able to log in using SSH, the user name must appear in this table, and the user's public key must match the one found here.
rlSshServerAuthorizedUsersPublicKeyTableEntry	1.3.6.1.4.1.89.78.2.3.1		not-accessible	The row definition for this table.
STR rlSshServerAuthorizedUserName	1.3.6.1.4.1.89.78.2.3.1.1	DisplayString	read-write	Name of the user who owns this public key. Both the user name and the key bytes must match before a user is authenticated using this key.
U32 rlSshServerAuthorizedUserPublicKeyFragmentId	1.3.6.1.4.1.89.78.2.3.1.2	Unsigned32	read-write	Identifies the index of this fragment in the final key. All segments must be combined to form one big key.
STR rlSshServerAuthorizedUserPublicKeyFragmentText	1.3.6.1.4.1.89.78.2.3.1.3	DisplayString	read-write	A part of the readable text entry for the user's public authorzation key.
ROW rlSshServerAuthorizedUserPublicKeyFragmentStatus	1.3.6.1.4.1.89.78.2.3.1.4	RowStatus	read-write	Create or delete a fragment of the user's public key. A user is deleted if it has no remaining fragments.
rlSshServerAuthorizedUsersPublicKeyFingerprintTable	1.3.6.1.4.1.89.78.2.5		not-accessible	This table contains the fingerprints of the public keys for all users who are authorized to access the router. To prevent man in the middle attacks, users should make sure the user's fingerprint, as printed in the connection process, is similar to the one printed here.
rlSshServerAuthorizedUsersPublicKeyFingerprintTableEntry	1.3.6.1.4.1.89.78.2.5.1		not-accessible	The row definition for this table.
STR rlSshServerAuthorizedUserFingerprintName	1.3.6.1.4.1.89.78.2.5.1.1	DisplayString	read-write	Name of the user who owns this public key. Both the user name and the key bytes must match before a user is authenticated using this key.
RLS rlSshServerAuthorizedUserPublicKeyFingerprintAlgorithm	1.3.6.1.4.1.89.78.2.5.1.2	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
RLS rlSshServerAuthorizedUserPublicKeyFingerprintDigestFormat	1.3.6.1.4.1.89.78.2.5.1.3	RlSshPublicKeyDigestFormat	read-only	Format of the digest to be displayed (OpenSSH or SSH.com).
STR rlSshServerAuthorizedUserPublicKeyFingerprint	1.3.6.1.4.1.89.78.2.5.1.4	DisplayString	read-only	SECSH format fingerprint of the user's public key. To prevent man in the middle attacks, users should make sure their ssh fingerprint, as printed in the connection process, is similar to the one printed here.
rlSshServerSessionTable	1.3.6.1.4.1.89.78.2.6		not-accessible	Each row in this table corresponds to an active SSH session with the server
rlSshServerSessionTableEntry	1.3.6.1.4.1.89.78.2.6.1		not-accessible	The row definition for this table.
U32 rlSshServerSessionIdentifier	1.3.6.1.4.1.89.78.2.6.1.1	Unsigned32	read-only	Identifies the connection to which this row corresponds.
IP rlSshServerSessionPeerAddress	1.3.6.1.4.1.89.78.2.6.1.2	IpAddress	read-only	The network address of the remote host connected to the server.
U32 rlSshServerSessionPeerPort	1.3.6.1.4.1.89.78.2.6.1.3	Unsigned32	read-only	The source network port of the remote host connected to the server.
STR rlSshServerSessionPeerVersion	1.3.6.1.4.1.89.78.2.6.1.4	DisplayString	read-only	The client version of the remote host connected to the server.
STR rlSshServerSessionUsername	1.3.6.1.4.1.89.78.2.6.1.5	DisplayString	read-only	SSH authenticated name of user connected to the server.
STR rlSshServerSessionCipher	1.3.6.1.4.1.89.78.2.6.1.6	DisplayString	read-only	Data encryption cipher used in this connection.
STR rlSshServerSessionHMAC	1.3.6.1.4.1.89.78.2.6.1.7	DisplayString	read-only	Message authentication code used in this connection.
U32 rlSshServerPort	1.3.6.1.4.1.89.78.2.101	Unsigned32	read-write	Specifies the TCP port used by the SSH 2 Server to listen for incoming connections.
INT rlSshServerEnable	1.3.6.1.4.1.89.78.2.102	INTEGER	read-write	Enables listening for incoming SSH2 connections on the port defined in rlSshServerPort.
INT rlSshServerEnablePublicKeyAuthentication	1.3.6.1.4.1.89.78.2.103	INTEGER	read-write	If PK authentication is enabled, incoming SSH connections are authenticated using public key authentication (using rlSshServerAuthorizedUsersPublicKeyTable), before authenticating using the router's standard AAA. If disabled, SSH connections are only authorized by the router's AAA component.
RLS rlSshServerRegenerateHostKey	1.3.6.1.4.1.89.78.2.104	RlSshPublicKeyAlgorithm	read-write	Setting to a value other than none results in the Server (Host) Key being regenerated. The key size is host-specific.
rlSshClient	1.3.6.1.4.1.89.78.3
STR rlSshClientUserName	1.3.6.1.4.1.89.78.3.1	DisplayString	read-write	Specifies the default user name the ssh client will use when authenticating to a remote server.
RLS rlSshClientRegenerateSelfKey	1.3.6.1.4.1.89.78.3.2	RlSshPublicKeyAlgorithm	read-write	Setting to a value other than none results in the client self key being regenerated. The key size is host-specific.
rlSshClientSelfPublicKeyTable	1.3.6.1.4.1.89.78.3.3		not-accessible	This table contains the router's client self public key. Each row in this table contains a fragment of the key, in printable binhex format. There may be up to 160 characters in every fragment, and they are all combined to form one key. The key is generated by writing to rlSshClientRegenerateSelfKey. To cause clients to connect to this router without printing warning messages (and also prevent active man-in-the-middle), the router's public key must printed out and inserted into the client's authorized_keys file
rlSshClientSelfPublicKeyTableEntry	1.3.6.1.4.1.89.78.3.3.1		not-accessible	The row definition for this table.
U32 rlSshClientSelfPublicKeyFragmentId	1.3.6.1.4.1.89.78.3.3.1.1	Unsigned32	read-only	Identifies the index of this fragment in the final key. All segments must be combined to form one big key.
RLS rlSshClientSelfPublicKeyAlgorithm	1.3.6.1.4.1.89.78.3.3.1.2	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
STR rlSshClientSelfPublicKeyFragmentText	1.3.6.1.4.1.89.78.3.3.1.3	DisplayString	read-write	A part of the readable text entry for the router's client public authorization key.
rlSshClientSelfPublicKeyFingerprintTable	1.3.6.1.4.1.89.78.3.4		not-accessible	This table contains the fingerprint for the client's self key.
rlSshClientSelfPublicKeyFingerprintTableEntry	1.3.6.1.4.1.89.78.3.4.1		not-accessible	The row definition for this table.
RLS rlSshClientSelfPublicKeyFingerprintAlgorithm	1.3.6.1.4.1.89.78.3.4.1.1	RlSshPublicKeyAlgorithm	read-only	Identifies the type of public key to be displayed.
RLS rlSshClientSelfPublicKeyFingerprintDigestFormat	1.3.6.1.4.1.89.78.3.4.1.2	RlSshPublicKeyDigestFormat	read-only	Format of the digest to be displayed (OpenSSH or SSH.com).
STR rlSshClientSelfPublicKeyFingerprint	1.3.6.1.4.1.89.78.3.4.1.3	DisplayString	read-only	SECSH format fingerprint of the client's self key. To prevent man in the middle attacks, users should make sure the ssh Server's fingerprint, as printed in the connection process, is similar to the one printed here.

RFC description

SSH configuration and key management MIB for Radlan network devices.

Start monitoring RADlan-based managed switch/router, e.g. Cisco Small Business, Zyxel OEM platforms (SSH server host key) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RADLAN-SSH-MIB

What Is RADLAN-SSH-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description