All MIBs › REMOTE-LOGIN-TRAP-MIB
Category: Generic / Unclassified, Security / Access Control, Traps / Notifications
Description: Defines SNMP trap notifications for remote login authentication and session events.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is REMOTE-LOGIN-TRAP-MIB?
REMOTE-LOGIN-TRAP-MIB is a small enterprise/vendor SNMP module dedicated to defining trap notifications related to remote login (e.g. Telnet/SSH/console) authentication and session events on a managed device. Rather than exposing polled data objects, it defines NOTIFICATION-TYPE entries that a device's SNMP agent sends asynchronously when a remote login succeeds, fails, or a session starts/ends. Its monitoring value is security- and access-oriented rather than classic hardware/software health: these traps let an operator detect unauthorized or repeated failed login attempts against the device's management interface, or confirm when administrators log in and out, functioning as an audit trail for device access rather than a performance metric. As a trap-only module it typically depends on the vendor's base system/authentication MIB definitions for identifying which user or session triggered the event. It is deployed on network devices (routers, switches) wherever the vendor wants to alert a network management station about remote-access security events in real time. Engineers can download the REMOTE-LOGIN-TRAP-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in REMOTE-LOGIN-TRAP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- vendor-neutral/vendor-specific trap-only MIB, applicable to routers/switches with remote management access
Monitoring Examples
No object list was available for this module (sample_objects is empty) since it defines only trap/notification types rather than pollable objects. A network management station would instead configure itself as an SNMP trap receiver and alert whenever the device emits a remote-login-success, remote-login-failure, or session-terminated notification, which is useful for detecting brute-force login attempts or confirming administrative access.
Imported Objects
From RFC-1215
| TRAP-TYPE |
From S5-AGENT-MIB
| s5AgRemoteLoginIp | OBJECT-TYPE |
| s5AgRemoteLoginStatus | OBJECT-TYPE |
From S5-ROOT-MIB
| remoteLoginTrap | OBJECT-IDENTITY |
OIDs
RFC description
Defines trap notifications for remote login events; used to monitor authentication and access control activities.
Start monitoring vendor-neutral/vendor-specific trap-only MIB, routers/switches with remote management access (login event traps) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.