SIAE-USER-MIB

MIB Reference — IPNetwork Monitor

All MIBsSIAE-USER-MIB

Organization: SIAE MICROELETTRONICA spa

Last Updated: 2016-09-17

Category: Microwave Radio - SIAE MICROELETTRONICA

Description:

Manages SIAE MICROELETTRONICA microwave radio user account credentials, roles, and session limits.

Imported Objects

From SIAE-TREE-MIB

siaeMibOBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus
StorageType

What Is SIAE-USER-MIB?

SIAE-USER-MIB is a management MIB from SIAE MICROELETTRONICA, an Italian manufacturer of microwave radio transmission equipment, covering user account credentials, roles, and session limits for device access control. It belongs to the microwave radio/telecom transport technology area, specifically the device security/access-management aspect. Its data centers on configuration objects — user accounts, assigned privilege roles, and limits on concurrent sessions — rather than hardware sensors or performance counters. Opening SIAE-USER-MIB in a MIB Browser reveals its user-account, role, and session-limit objects, though without live device access the exact table names remain unconfirmed. It supports monitoring of software/system status in the sense that session-limit and active-user tracking can reveal unauthorized access attempts or account lockout conditions on the radio equipment. It depends on SIAE's broader private enterprise MIB tree covering the radio's core transmission and hardware-status modules. It is deployed in telecom operator networks running SIAE MICROELETTRONICA microwave radio links, used by NOC/security staff to audit device access.

IPNetwork Monitor allows you to monitor SNMP objects defined in SIAE-USER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • SIAE Microelettronica microwave radio equipment, entire product line (user account/session access-control status)

Monitoring Examples

No sample objects were supplied for SIAE-USER-MIB, so specific table/object names cannot be confirmed; based on the description, an operator would likely poll a user-account or session table to check the number of active sessions against a configured limit, flagging a potential unauthorized access attempt, but this is inferred rather than object-verified.

OIDs
OID symbolicOID numericTypeAccessDescription
accessControl1.3.6.1.4.1.3373.1103.5User privileges and credentials for SIAE equipment access control.
INT accessControlMibVersion1.3.6.1.4.1.3373.1103.5.1INTEGERread-onlyNumerical version of this module. The string version of this MIB have the following format: XX.YY.ZZ so, for example, the value 1 should be interpreted as 00.00.01 and the value 10001 should be interpreted as 01.00.01.
accessControlGroupTable1.3.6.1.4.1.3373.1103.5.2not-accessibleTable with Group records.
accessControlGroupRecord1.3.6.1.4.1.3373.1103.5.2.1not-accessibleGroup record. At most 10 records can be present in accessControlGroupTable.
STR accessControlGroupName1.3.6.1.4.1.3373.1103.5.2.1.1SnmpAdminStringread-createASCII string identifying the Group, used as index for the table.
INT accessControlGroupProfile1.3.6.1.4.1.3373.1103.5.2.1.2INTEGERread-createThis object defines the group access privileges. 'Admin' profile can read and write all MIB, 'readwrite' profile can write all MIB leaves but it can not manage users, 'maintenance' profile can do only manual operations, while 'readonly' can only perform get operations.
INT accessControlGroupHttp1.3.6.1.4.1.3373.1103.5.2.1.3INTEGERread-createThis object allows or denies a given group using http protocol for WebLct to access equipment.
INT accessControlGroupHttps1.3.6.1.4.1.3373.1103.5.2.1.4INTEGERread-createThis object allows or denies a given group using https protocol for WebLct to access equipment.
INT accessControlGroupSnmp1.3.6.1.4.1.3373.1103.5.2.1.5INTEGERread-createThis object allows or denies a given group using snmp protocol to access network equipment. If snmp protocol is enabled, it is possible to choose between V1, V2c and V3 versions of snmp.
INT accessControlGroupFtp1.3.6.1.4.1.3373.1103.5.2.1.6INTEGERread-createThis object allows or denies a given group using ftp protocol.
INT accessControlGroupSftp1.3.6.1.4.1.3373.1103.5.2.1.7INTEGERread-createThis object allows or denies a given group using sftp protocol.
INT accessControlGroupSsh1.3.6.1.4.1.3373.1103.5.2.1.8INTEGERread-createThis object allows or denies a given group using ssh protocol.
ROW accessControlGroupRowStatus1.3.6.1.4.1.3373.1103.5.2.1.9RowStatusread-createThis object is used to manage a row in accessControlGroupTable.
INT accessControlGroupCli1.3.6.1.4.1.3373.1103.5.2.1.10INTEGERread-onlyThis object allows or denies a given group using both cli through serial port and remote cli (telnet). Only 'admin' profile is allowed to use cli and can execute all commands.
accessControlUserTable1.3.6.1.4.1.3373.1103.5.3not-accessibleTable with User records. At most 10 records can be present in accessControlUserTable.
accessControlUserRecord1.3.6.1.4.1.3373.1103.5.3.1not-accessibleUser record.
STR accessControlUserName1.3.6.1.4.1.3373.1103.5.3.1.1SnmpAdminStringread-createASCII string identifying the user.
STR accessControlUserGroupName1.3.6.1.4.1.3373.1103.5.3.1.2SnmpAdminStringread-createThis object specifies which group this user belongs to. It must refers to an entry of accessControlGroupTable.
STR accessControlUserPwd1.3.6.1.4.1.3373.1103.5.3.1.3DisplayStringread-createThis object specifies the login password of the specified user.
INT accessControlUserSnmpAuthProt1.3.6.1.4.1.3373.1103.5.3.1.4INTEGERread-createThis object is used to set the user authentication protocol if the related group can use snmp protocol.
OCT accessControlUserSnmpAuthKey1.3.6.1.4.1.3373.1103.5.3.1.5OCTET STRINGread-createThis object specifies the user authentication key if the related group can use snmpv3 protocol.
INT accessControlUserSnmpPrivProt1.3.6.1.4.1.3373.1103.5.3.1.6INTEGERread-createThis object is used to set the user cipher protocol if the related group can use snmp protocol.
OCT accessControlUserSnmpPrivKey1.3.6.1.4.1.3373.1103.5.3.1.7OCTET STRINGread-createThis object specifies the user cipher key if the related group can use snmpv3 protocol.
INT accessControlUserTimeout1.3.6.1.4.1.3373.1103.5.3.1.8INTEGERread-createThis object defines the user timeout after login operation. Zero timeout means no timeout.
ROW accessControlUserRowStatus1.3.6.1.4.1.3373.1103.5.3.1.9RowStatusread-createThis object is used to manage an instance in accessControlUserTable.
accessControlLoginTable1.3.6.1.4.1.3373.1103.5.4not-accessibleTable with Login records. At most 4 users via WebLct, 10 users via snmp and 10 users via cli can be logged at the same time in the equipment.
accessControlLoginRecord1.3.6.1.4.1.3373.1103.5.4.1not-accessibleLogin record. The create operation is performed by setting accessControlLoginPwd object.
STR accessControlLoginUserName1.3.6.1.4.1.3373.1103.5.4.1.1SnmpAdminStringread-onlyThis object defines the name of the logged user.
IP accessControlLoginIpAddress1.3.6.1.4.1.3373.1103.5.4.1.2IpAddressread-onlyThis object defines the IP address of the logged user.
INT accessControlLoginRequest1.3.6.1.4.1.3373.1103.5.4.1.3INTEGERread-writeThis object is used to do logout or to force logout of other users. Only users with 'admin' profile can force logout.
INT accessControlLoginTrapEnable1.3.6.1.4.1.3373.1103.5.4.1.4INTEGERread-writeThis object enables/disables trap receiver for a given user.
INT accessControlLoginType1.3.6.1.4.1.3373.1103.5.4.1.5INTEGERread-onlyThis object identifies login type.
OCT accessControlLoginPwd1.3.6.1.4.1.3373.1103.5.4.1.6OCTET STRINGread-writeThis object is used to create a row in the table. It must correspond to the user password defined in accessControlUserTable.
INT accessControlLoginPolling1.3.6.1.4.1.3373.1103.5.4.1.7INTEGERread-onlyThis object is used to refresh the timeout of the related instance of the table. To keep user logged in, manager must read this object before the end of accessControlUserTimeout. For cli users execution of cli commands refreshes timeout.
accessControlClientTable1.3.6.1.4.1.3373.1103.5.5not-accessibleTable with records that show client credentials to access FTP and SFTP services.
accessControlClientRecord1.3.6.1.4.1.3373.1103.5.5.1not-accessibleClient credentials record for a given user.
INT accessControlClientService1.3.6.1.4.1.3373.1103.5.5.1.1INTEGERread-createThis object is used to identify the service that a given user can access as client.
INT accessControlClientServiceStatus1.3.6.1.4.1.3373.1103.5.5.1.2INTEGERread-createThis object is used to enable/disable the FTP/SFTP client on the equipment. If both clients are enabled, SFTP client is adopted.
STR accessControlClientName1.3.6.1.4.1.3373.1103.5.5.1.3SnmpAdminStringread-createASCII string identifying the client name.
STR accessControlClientPwd1.3.6.1.4.1.3373.1103.5.5.1.4SnmpAdminStringread-createASCII string identifying the client password.
STO accessControlClientStorageType1.3.6.1.4.1.3373.1103.5.5.1.5StorageTyperead-createThe storage type for this conceptual row.
ROW accessControlClientRowStatus1.3.6.1.4.1.3373.1103.5.5.1.6RowStatusread-createThe status of this conceptual row.
accessControlExtLoginTable1.3.6.1.4.1.3373.1103.5.6not-accessibleA table that contains additional information about every user that is logged into the equipment.
accessControlExtLoginRecord1.3.6.1.4.1.3373.1103.5.6.1not-accessibleAdditional information record for a given logged user.
INT accessControlExtLoginProfile1.3.6.1.4.1.3373.1103.5.6.1.1INTEGERread-onlyThis object defines the access privileges associated to logged user. 'Admin' profile can read and write all MIB, 'readwrite' profile can write all MIB leaves but it can not manage users, 'maintenance' can do only manual operations, while 'readonly' can only perform get operations. In case of local authentication, the user profile is found in local database, while, if authentication is remote, the profile is assigned by remote server.
INT accessControlExtLoginAuthMode1.3.6.1.4.1.3373.1103.5.6.1.2INTEGERread-onlyThis object shows if logged user has been authenticated locally or by remote server (i.e RADIUS, TACACS, etc...).

RFC description

Manages user authentication, privileges, and access control for SIAE Microelectronica microwave equipment.

Start monitoring SIAE Microelettronica microwave radio equipment, entire product line (user account/session access-control status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download SIAE-USER-MIB