All MIBs › SECURITY-MANAGEMENT-MIB › avUnAuthAccessEvent

avUnAuthAccessEvent

OID (symbolic): SECURITY-MANAGEMENT-MIB::avUnAuthAccessEvent

OID (numeric): 1.3.6.1.4.1.6889.2.1.14.1.10.0.200

Node type: NOTIFICATION-TYPE

Description: Notification on unauthorized login attempts. o For CLI and SNMP login failures: Both SNMP SSH and WEB management interfaces shall identify situation and alert. The reported information should include wrong user name, host name and IP address of remote host. Passwords is not reported because of the possibility to reveal password. o For pre-shared-key (PSK) authentication failure in IKE: * lntUnauthUserName - - In IKE AM: the ID sent by the remote peer in the ID payload. - In IKE MM: the ID associated with the remote peer IP in the running configuration. * avUnauthInetAddressType and avUnauthInetAddress - represents the source IP of the packet sent by the remote peer. * avUnauthProtocol - lntIKEAccess(500)

Examples

Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):

snmptrap -v2c -c public <manager> '' SECURITY-MANAGEMENT-MIB::avUnAuthAccessEvent
snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.6889.2.1.14.1.10.0.200

Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):

snmptrapd -f -Lo -c /dev/null authCommunity log public

Example snmptrapd log entry:

zoo11-linux.zoo [UDP: [192.168.30.111]:50349->[192.168.30.10]:162]:
  DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (42207917) 4 days, 21:14:39.17
  SNMPv2-MIB::snmpTrapOID.0 = OID: SECURITY-MANAGEMENT-MIB::avUnAuthAccessEvent

Start monitoring Avaya media gateways/switches, e.g. G450/G700 series (secured-mode/management-protocol/DoS-defense status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the SECURITY-MANAGEMENT-MIB::avUnAuthAccessEvent OID value, configure state conditions and alerts, and monitor any Avaya media gateways/switches, e.g. G450/G700 series (secured-mode/management-protocol/DoS-defense status) from a single console.

OID Breakdown

Upper-level ancestors (9 from the standard OID tree / other modules)

Numeric OID	Name	Module
1	iso	LANART-AGENT
1.3	org	AirPair-MIB
1.3.6	dod	AirPair-MIB
1.3.6.1	internet	AirPair-MIB
1.3.6.1.4	private	AirPair-MIB
1.3.6.1.4.1	enterprises	AirPair-MIB
1.3.6.1.4.1.6889	avaya	AV-APPLICATION-ENABLEMENT-SERVICES-MIB
1.3.6.1.4.1.6889.2	mibs	AV-APPLICATION-ENABLEMENT-SERVICES-MIB
1.3.6.1.4.1.6889.2.1	lsg	AVAYAGEN-MIB

Numeric OID	Name	Module
1.3.6.1.4.1.6889.2.1.14	avayaSecurity	SECURITY-MANAGEMENT-MIB
1.3.6.1.4.1.6889.2.1.14.1	secMngModule	SECURITY-MANAGEMENT-MIB
1.3.6.1.4.1.6889.2.1.14.1.10	secMngNotifications	SECURITY-MANAGEMENT-MIB
1.3.6.1.4.1.6889.2.1.14.1.10.0	secMngNotificationsPrefix	SECURITY-MANAGEMENT-MIB
1.3.6.1.4.1.6889.2.1.14.1.10.0.200	avUnAuthAccessEvent	SECURITY-MANAGEMENT-MIB

SECURITY-MANAGEMENT-MIB :: avUnAuthAccessEvent

avUnAuthAccessEvent

Module

This MIB depends on