SNMP-SSH-TM-MIB

All MIBs › SNMP-SSH-TM-MIB

Organization: ISMS Working Group

Last Updated: 2009-06-09

Category: SNMP Framework

Description: Defines objects for managing SNMP over SSH transport, enabling secure SNMP communication through SSH tunnels.

IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring SNMP-SSH-TM-MIB with a free 30-day trial of IPNetwork Monitor.

What Is SNMP-SSH-TM-MIB?

SNMP-SSH-TM-MIB is the standard IETF SNMP SSH Transport Model MIB (ISMS Working Group, RFC 5592), defining statistics objects for SNMP-over-SSH transport sessions. Its objects count session opens, closes, open errors, user-authentication failures, and cases where no channel/subsystem/session was available, plus a count of invalid-cache references. As a performance/protocol-status MIB it lets an administrator confirm SNMP-over-SSH sessions are establishing cleanly and spot a rising rate of authentication failures pointing to a credential or configuration problem. It is deployed on SNMP agents/managers implementing the SSH transport model. Engineers implementing or auditing this functionality typically reference the SNMP-SSH-TM-MIB RFC/standard documentation for the authoritative specification.

IPNetwork Monitor allows you to monitor SNMP objects defined in SNMP-SSH-TM-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

SNMP agents/managers implementing the SSH transport model (RFC 5592)

Monitoring Examples

An administrator monitors snmpSshtmSessionUserAuthFailures to catch a misconfigured SNMP manager repeatedly failing SSH authentication against a monitored device.

What Can Be Monitored

SNMP-over-SSH session establishment and authentication failures

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
OBJECT-IDENTITY
OBJECT-TYPE
mib-2
snmpDomains

From SNMPv2-TC

TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using snmpSshtmSessionOpens OID:

Select an SNMP agents/managers implementing the SSH transport model (RFC 5592) (session open/close/auth-failure statistics) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type snmpSshtmSessionOpens into the Find box to locate it in the OID tree, then select it and click OK. The number of times an openSession() request has been executed as an SSH client, whether it succeeded or failed. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
snmpSshtmMIB	1.3.6.1.2.1.189			The Secure Shell Transport Model MIB. Copyright (c) 2009 IETF Trust and the persons identified as authors of the code. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: - Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. - Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. - Neither the name of Internet Society, IETF or IETF Trust, nor the names of specific contributors, may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 'AS IS' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. This version of this MIB module is part of RFC 5592; see the RFC itself for full legal notices.
snmpSshtmNotifications	1.3.6.1.2.1.189.0
snmpSshtmObjects	1.3.6.1.2.1.189.1
snmpSshtmSession	1.3.6.1.2.1.189.1.1
C32 snmpSshtmSessionOpensEx	1.3.6.1.2.1.189.1.1.1	Counter32	read-only	The number of times an openSession() request has been executed as an SSH client, whether it succeeded or failed.
C32 snmpSshtmSessionCloses	1.3.6.1.2.1.189.1.1.2	Counter32	read-only	The number of times a closeSession() request has been executed as an SSH client, whether it succeeded or failed.
C32 snmpSshtmSessionOpenErrors	1.3.6.1.2.1.189.1.1.3	Counter32	read-only	The number of times an openSession() request failed to open a transport connection or failed to authenticate the server.
C32 snmpSshtmSessionUserAuthFailures	1.3.6.1.2.1.189.1.1.4	Counter32	read-only	The number of times an openSession() request failed to open a session as an SSH client due to user-authentication failures.
C32 snmpSshtmSessionNoChannels	1.3.6.1.2.1.189.1.1.5	Counter32	read-only	The number of times an openSession() request failed to open a session as an SSH client due to channel-open failures.
C32 snmpSshtmSessionNoSubsystems	1.3.6.1.2.1.189.1.1.6	Counter32	read-only	The number of times an openSession() request failed to open a session as an SSH client due to inability to connect to the requested subsystem.
C32 snmpSshtmSessionNoSessions	1.3.6.1.2.1.189.1.1.7	Counter32	read-only	The number of times an outgoing message was dropped because the same session was no longer available.
C32 snmpSshtmSessionInvalidCaches	1.3.6.1.2.1.189.1.1.8	Counter32	read-only	The number of outgoing messages dropped because the tmStateReference referred to an invalid cache.
snmpSshtmConformance	1.3.6.1.2.1.189.2
snmpSshtmCompliances	1.3.6.1.2.1.189.2.1
snmpSshtmCompliance	1.3.6.1.2.1.189.2.1.1			The compliance statement for SNMP engines that support the SNMP-SSH-TM-MIB.
snmpSshtmGroups	1.3.6.1.2.1.189.2.2
snmpSshtmGroup	1.3.6.1.2.1.189.2.2.2			A collection of objects for maintaining information of an SNMP engine that implements the SNMP Secure Shell Transport Model.
snmpSSHDomain	1.3.6.1.6.1.7			The SNMP-over-SSH transport domain. The corresponding transport address is of type SnmpSSHAddress. When an SNMP entity uses the snmpSSHDomain Transport Model, it must be capable of accepting messages up to and including 8192 octets in size. Implementation of larger values is encouraged whenever possible. The securityName prefix to be associated with the snmpSSHDomain is 'ssh'. This prefix may be used by Security Models or other components to identify which secure transport infrastructure authenticated a securityName.

RFC description

IETF standard transport mapping MIB (RFC 5539) for SNMP over SSH secure transport.

Start monitoring SNMP agents/managers implementing the SSH transport model (RFC 5592) (session open/close/auth-failure statistics) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download SNMP-SSH-TM-MIB