SIAE-RADIO-ENCRYPTION-MIB

All MIBs › SIAE-RADIO-ENCRYPTION-MIB

Organization: SIAE MICROELETTRONICA spa

Last Updated: 2015-07-20

Category: Microwave Radio - SIAE MICROELETTRONICA, Security and Access Control

Description: Manages SIAE MICROELETTRONICA microwave radio link AES encryption key provisioning and cipher status.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is SIAE-RADIO-ENCRYPTION-MIB?

SIAE-RADIO-ENCRYPTION-MIB is a SIAE MICROELETTRONICA vendor MIB for managing AES-based encryption on point-to-point microwave radio links. It exposes configuration and status data related to encryption key provisioning and cipher operating mode on each radio hop. Its principal monitoring use is software/security status rather than physical hardware health: administrators use it to confirm that encryption is active, keys are correctly provisioned, and the cipher state matches policy on every link, rather than to check temperature or power. It likely depends on companion SIAE microwave MIBs (e.g., unit-type and radio configuration modules) for identifying which physical unit a given encryption instance belongs to. It is deployed on SIAE microwave backhaul links carrying sensitive traffic where link-layer encryption is mandated, such as government, utility, or carrier microwave networks that rely on SIAE-RADIO-ENCRYPTION-MIB SNMP monitoring to verify encryption compliance.

IPNetwork Monitor allows you to monitor SNMP objects defined in SIAE-RADIO-ENCRYPTION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

SIAE Microelettronica microwave radio link equipment

Monitoring Examples

The sample data did not include specific object names for this MIB, so a grounded object-level walkthrough is not possible; conceptually it would expose per-link key-provisioning status and cipher/encryption-enabled indicators. An operator would poll such objects to verify that AES encryption remains enabled and correctly keyed on every hop, flagging any link that has silently reverted to unencrypted or misconfigured cipher state.

What Can Be Monitored

AES encryption enable/disable status
cipher/encryption operating mode
encryption key provisioning state
per-link security configuration

Imported Objects

From IF-MIB

InterfaceIndex

From SIAE-ALARM-MIB

AlarmSeverityCode
AlarmStatus

From SIAE-TREE-MIB

siaeMib

OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
radioEncrypt	1.3.6.1.4.1.3373.1103.96			SIAE's radio encryption MIB.
INT rdEncryptMibVersion	1.3.6.1.4.1.3373.1103.96.1	INTEGER	read-only	Numerical version of this module. The string version of this MIB have the following format: XX.YY.ZZ so, for example, the value 1 should be interpreted as 00.00.01 and the value 10001 should be interpreted as 01.00.01.
rdEncryptTable	1.3.6.1.4.1.3373.1103.96.2		not-accessible	Table with SIAE's ENCRYPT entries.
rdEncryptTableEntry	1.3.6.1.4.1.3373.1103.96.2.1		not-accessible	SIAE's ENCRYPT entry. An ENCRYPT instance have the same index of the relative radio link index. A row in this table is created by the SNMP agent for each instance of radio link.
NUM rdEncryptIfIndex	1.3.6.1.4.1.3373.1103.96.2.1.1	InterfaceIndex	not-accessible	A unique value, greater than zero, for each ENCRYPT interface. This object is identical to the ifIndex of the standard MIB-2 ifTable. SNMP agent accepts the value of this objects only if the capability ifextCapabilityEncrypt is shown in ifextCapabilities for the same ifIndex.
ROW rdEncryptRowStatus	1.3.6.1.4.1.3373.1103.96.2.1.2	RowStatus	read-create	Status of this row of rdEncryptTable. A manager must set this object in order to create an instance of ENCRYPT.
INT rdEncryptAdminStatus	1.3.6.1.4.1.3373.1103.96.2.1.3	INTEGER	read-create	The desired state of the ENCRYPT. This object can be set only when the rdEncryptRowStatus of the ENCRYPT is active. When a managed system initializes, all ENCRYPT instance start with rdEncryptAdminStatus in the disable(2) state, it's a default state also. As a result of either explicit management action or per configuration information retained by the managed system, rdEncryptAdminStatus is then changed to the enable (1) state (or remains in the disable(2) state). In order to use ENCRYPT, also rdEncryptSystemControl must be set to start.
INT rdEncryptAlgo	1.3.6.1.4.1.3373.1103.96.2.1.4	INTEGER	read-create	The encryption algorithm. The key length depends on the choosen algorithm.
INT rdEncryptAlgoMode	1.3.6.1.4.1.3373.1103.96.2.1.5	INTEGER	read-create	AES encryption/decryption algorithm can be implemented in five modes. The modes may be used in conjunction with any symmetric key block cipher algorithm that is approved by a Federal Information Processing Standard (FIPS). The five modes are: - Electronic Codebook (ECB) - Cipher Block Chaining (CBC) - Cipher Feedback (CFB), - Output Feedback (OFB), - and Counter (CTR) Agents can accept only a subset of AES modes.
INT rdEncryptKeyMode	1.3.6.1.4.1.3373.1103.96.2.1.6	INTEGER	read-create	This object select between the Manually-entered key mode and auto-generated key mode. Agent could not accept the value automaticKeyGeneration if it don't support the automatic key generation.
OCT rdEncryptKey	1.3.6.1.4.1.3373.1103.96.2.1.7	OCTET STRING	read-create	The key used for encryption. The length of the key depends on rdEncryptAlgo.
I32 rdEncryptKeyLifeTime	1.3.6.1.4.1.3373.1103.96.2.1.8	Integer32	read-create	The life time in day of the automatically generated key. The range goes from one day to three years (considering one leap year).
ALA rdEncryptMismatchAlarm	1.3.6.1.4.1.3373.1103.96.2.1.9	AlarmStatus	read-only	This alarm is raised when local and remote configuration does not match.
INT rdEncryptSystemControl	1.3.6.1.4.1.3373.1103.96.3	INTEGER	read-write	The administrative system control status requested by management for the ENCRYPT feature. The value 'start'(1) indicates that all resources required by ENCRYPT should be allocated and ENCRYPT should be supported in the device on ports which shown the specific capability. The value shutdown(2) indicates that ENCRYPT should be shutdown in the device on all ports and all allocated memory must be released.
ALA rdEncryptMismatchAlarmSeverityCode	1.3.6.1.4.1.3373.1103.96.4	AlarmSeverityCode	read-write	Defines the severity associated to the rdEncryptMismatchAlarm and enables/disables the trap generation on status change event.

RFC description

Management and monitoring of radio link encryption functionality on SIAE microwave transmission equipment.

Start monitoring SIAE Microelettronica microwave radio link equipment (AES encryption key/cipher status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download SIAE-RADIO-ENCRYPTION-MIB

What Is SIAE-RADIO-ENCRYPTION-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description