All MIBs › RAISECOM-SSH-MIB
Organization: raisecom
Last Updated: 2000-09-21
Category: Raisecom Networks
Description:
Configures SSH server parameters for encrypted CLI management on Raisecom network devices.
Imported Objects
From RAISECOM-BASE-MIB
| raisecomAgent | OBJECT-IDENTITY |
From SNMPv2-SMI
| Gauge | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| RowStatus | |
| TruthValue |
From SWITCH-TC
| EnableVar |
What Is RAISECOM-SSH-MIB?
RAISECOM-SSH-MIB is a private enterprise MIB from Raisecom, a maker of access and transport network equipment, used to configure and monitor the SSH server component that provides encrypted command-line management access to Raisecom devices. It exposes configuration-oriented data such as SSH server enable/disable state and related service parameters under objects like raisecomSshSvrConfiguration. Rather than performance counters, its main monitoring value is confirming the software status of the management plane -- whether secure remote access is enabled and correctly configured -- which matters for both operational access and security posture. It also defines a notifications group (raisecomSshTraps) that can alert on SSH-related events. It depends on general SNMPv2-SMI/TC conventions and is typically deployed alongside other Raisecom device-management MIBs on carrier-access switches and media converters where secure CLI access needs to be centrally verified, making RAISECOM-SSH-MIB SNMP monitoring a routine part of security-posture checks on carrier-access equipment.
IPNetwork Monitor allows you to monitor SNMP objects defined in RAISECOM-SSH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- SSH server enabled/disabled status
- SSH server configuration parameters
- SSH-related trap/notification events
Supported Devices
- Raisecom access/transport network equipment (switches, media converters)
Monitoring Examples
An administrator would poll objects under raisecomSshSvrConfiguration to confirm the SSH server is enabled and check its listening/service parameters, verifying that a device hasn't inadvertently reverted to unencrypted Telnet access after a configuration reset. The raisecomSshTraps group could be watched for notifications tied to SSH service state changes, useful for auditing when secure management access was toggled on a given device.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| raisecomSsh | 1.3.6.1.4.1.8886.1.15 | |||
| raisecomSshObjects | 1.3.6.1.4.1.8886.1.15.1 | |||
| raisecomSshSvrConfiguration | 1.3.6.1.4.1.8886.1.15.1.1 | |||
| INT sshServerVersion | 1.3.6.1.4.1.8886.1.15.1.1.1 | INTEGER | read-write | This object specifies the Secure Shell server working version. In another words, it specifies which versions of Secure Shell protocol connections that device will accept from Secure Shell clients. |
| INT sshServerAuthenTimeout | 1.3.6.1.4.1.8886.1.15.1.1.2 | INTEGER | read-write | This object specifies time limit client takes to pass server authentication. The server will disconnect the client that can't pass authentication in the time this object specifies since its first request. |
| INT sshServerAuthenRetries | 1.3.6.1.4.1.8886.1.15.1.1.3 | INTEGER | read-write | This object specifies time limit client takes to pass server authentication. The server will disconnect the client that can't pass authentication in the time this object specifies since its first request. |
| OCT sshServerHostKeyName | 1.3.6.1.4.1.8886.1.15.1.1.4 | OCTET STRING | read-write | This object specifies the name of host key server uses. |
| ENA sshServerEnable | 1.3.6.1.4.1.8886.1.15.1.1.5 | EnableVar | read-write | Enables or disables the Secure Shell (SSH) server on the device. |
| raisecomSshKeyPairMgnt | 1.3.6.1.4.1.8886.1.15.1.2 | |||
| INT sshKeyPairGenerationStatus | 1.3.6.1.4.1.8886.1.15.1.2.1 | INTEGER | read-only | The object indicates the status of key generation. The keyGenerationSuccess indicates that key generation succeeded. The keyGenerationInvalidName indicates that the sshKeyPairName is invalid. The keyGenerationInvalidModulus indicates that the sshKeyPairModulusSz is invalid. The keyGenerationKeyPairExist indicates that there's key with the same name. The keyGenerationKeySavingError indicates that saving key failed. The keyGenerationNumLimit indicates that the number of keys reaches to limit. The keyGenerationInProgress indicates that the key is being generated. |
| sshKeyPairTable | 1.3.6.1.4.1.8886.1.15.1.2.2 | not-accessible | ||
| sshKeyPairEntry | 1.3.6.1.4.1.8886.1.15.1.2.2.1 | not-accessible | ||
| OCT sshKeyPairName | 1.3.6.1.4.1.8886.1.15.1.2.2.1.1 | OCTET STRING | read-only | This object specifies the key unique name which used by server to determine host key. |
| INT sshKeyPairType | 1.3.6.1.4.1.8886.1.15.1.2.2.1.2 | INTEGER | read-create | Key type which specifies the generation algorithm. |
| INT sshKeyPairModulusSz | 1.3.6.1.4.1.8886.1.15.1.2.2.1.3 | INTEGER | read-create | This object specifies modulus size used to generate key. |
| OCT sshKeyPairComment | 1.3.6.1.4.1.8886.1.15.1.2.2.1.4 | OCTET STRING | read-create | Comment for this key. |
| T/F sshKeyPairTrapOnComplete | 1.3.6.1.4.1.8886.1.15.1.2.2.1.5 | TruthValue | read-create | This object specifies whether the device should send a trap or not when finishing key generation. |
| OCT sshKeyPairPubData | 1.3.6.1.4.1.8886.1.15.1.2.2.1.6 | OCTET STRING | read-only | Public key data of the key in the file format defined in RFC 4716. |
| ROW sshKeyPairStatus | 1.3.6.1.4.1.8886.1.15.1.2.2.1.7 | RowStatus | read-create | This object only includes three valid values: createAndGo, notInService, active and destroy. It will be set to notInService when generation is being process and active when generation succeed, otherwise the associated row will be removed. |
| raisecomSshSessionInfo | 1.3.6.1.4.1.8886.1.15.1.3 | |||
| sshSessionTable | 1.3.6.1.4.1.8886.1.15.1.3.1 | not-accessible | ||
| sshSessionEntry | 1.3.6.1.4.1.8886.1.15.1.3.1.1 | not-accessible | ||
| GAU sshSessionId | 1.3.6.1.4.1.8886.1.15.1.3.1.1.1 | Gauge | not-accessible | An arbitrary index that uniquely identifies a Secure Shell Session, but not the session ID generated resulting from key exchange. |
| INT sshSessionVersion | 1.3.6.1.4.1.8886.1.15.1.3.1.1.2 | INTEGER | read-only | The object indicates the SSH version used by this session. |
| INT sshSessionState | 1.3.6.1.4.1.8886.1.15.1.3.1.1.3 | INTEGER | read-only | The object indicates the current state of Secure Shell Session. The state sessionVersionOk(1) indicates that server and client versions of SSH are exchanged and are compatible. The state sessionKeysExchanged(2) indicates that key exchange has been completed. The state sessionAuthenticated(3) indicates that the client has been successfully authenticated. The state sessionOpen(4) indicates that the session has been successfully opened. The state sessionDisconnecting(5) indicates that the session disconnection has begun. The state sessionDisconnected(6)indicates that the session has been disconnected. The state sessionClosed(7) indicates that the session has closed. |
| OCT sshSessionUserId | 1.3.6.1.4.1.8886.1.15.1.3.1.1.4 | OCTET STRING | read-only | The object indicates user name associated with this session. |
| IP sshSessionHostAddr | 1.3.6.1.4.1.8886.1.15.1.3.1.1.5 | IpAddress | read-only | The object indicates IP address of host associated with this session. |
| OCT sshSessionInEncrypt | 1.3.6.1.4.1.8886.1.15.1.3.1.1.6 | OCTET STRING | read-only | The object indicates the ingress encryption algorithm of this session. |
| OCT sshSessionOutEncrypt | 1.3.6.1.4.1.8886.1.15.1.3.1.1.7 | OCTET STRING | read-only | The object indicates the egress encryption algorithm of this session. If the session version is SSH-1, it is always the same as sshSessionInEncrypt. |
| OCT sshSessionInHmac | 1.3.6.1.4.1.8886.1.15.1.3.1.1.8 | OCTET STRING | read-only | The object indicates the ingress HMAC algorithm used in this session. |
| OCT sshSessionOutHmac | 1.3.6.1.4.1.8886.1.15.1.3.1.1.9 | OCTET STRING | read-only | The object indicates the egress HMAC algorithm used in this session. |
| raisecomSshTraps | 1.3.6.1.4.1.8886.1.15.2 | |||
| sshKeyPairGenerationCompletion | 1.3.6.1.4.1.8886.1.15.2.1 | Key pair generation is completed. |
RFC description
Manages Secure Shell server configuration on Raisecom devices including protocol versions, authentication timeouts, and host key settings.
Start monitoring Raisecom access/transport network equipment, switches and media converters (SSH server) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.