SSH-MIB

All MIBs › SSH-MIB

Organization: Working Group

Last Updated: 1999-11-22

Category: Security / Access Control

Description: Manages SSH protocol server configuration, active sessions, and cryptographic algorithm negotiation per IETF standards.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is SSH-MIB?

SSH-MIB is a switch-vendor proprietary MIB (built on SWPRIMGMT-MIB, a common FastPath-family base) configuring the SSH (Secure Shell) server on the switch. Its objects cover an SSH admin enable, max connections, connection timeout, max authentication-failure attempts, session-key rekeying, port number, a regenerate-host-key action, per-cipher admin enable flags (3DES, Blowfish, AES-128/192/256, Arcfour, CAST-128, Twofish-128/192/256), authentication-method enable flags (password, public key, host-based), integrity-algorithm enables (SHA1, MD5), public-key algorithm enables (DSA, RSA), and a user-control table. As a configuration/security MIB it lets an administrator confirm which SSH ciphers and authentication methods are permitted on the switch. It is deployed on FastPath-family managed switches with SSH management access. Engineers can download the SSH-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in SSH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

FastPath-family managed switches (SSH management access)

Monitoring Examples

An administrator checks swSSHEncryptAlgAES256Admin and swSSHAuthenMethodPubKeyAdmin to confirm strong ciphers and key-based auth are enabled for SSH management access on a FastPath-family switch.

What Can Be Monitored

SSH cipher and authentication-method configuration

Imported Objects

From RFC1155-SMI

IpAddress

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus

From SWPRIMGMT-MIB

privateMgmt

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
swSSHMIB	1.3.6.1.4.1.2272.1.201.1.5			The Secure Shell module MIB.
swSSHMgmt	1.3.6.1.4.1.2272.1.201.1.5.1
INT swSSHAdmin	1.3.6.1.4.1.2272.1.201.1.5.1.1	INTEGER	read-write	This object indicates the Secure Shell is enable or disable.
INT swSSHMaxConnections	1.3.6.1.4.1.2272.1.201.1.5.1.2	INTEGER	read-write	This object indicates the tolerance of connections at the same time.
INT swSSHConnectionTimeout	1.3.6.1.4.1.2272.1.201.1.5.1.3	INTEGER	read-write	This object indicates the value of connection timeout. This value is in units of seconds.
INT swSSHMaxAuthFailAttempts	1.3.6.1.4.1.2272.1.201.1.5.1.4	INTEGER	read-write	This object indicates the tolerance in times of Authentication failure.
INT swSSHSessionKeyRekeying	1.3.6.1.4.1.2272.1.201.1.5.1.5	INTEGER	read-write	This object indicates the time interval in minutes to negotiate new session key for client and server.
INT swSSHPortNumber	1.3.6.1.4.1.2272.1.201.1.5.1.6	INTEGER	read-write	This object indicates the listened tcp port number.
INT swSSHRegenerateHostKey	1.3.6.1.4.1.2272.1.201.1.5.1.7	INTEGER	read-write	As the object is set to active means to regenerate hostkey in SSH server. If set to normal, do nothing.
swSSHCtrlAlgGroup	1.3.6.1.4.1.2272.1.201.1.5.2
swSSHEncryptAlgCtrl	1.3.6.1.4.1.2272.1.201.1.5.2.1
INT swSSHEncryptAlg3DESAdmin	1.3.6.1.4.1.2272.1.201.1.5.2.1.1	INTEGER	read-write	This object indicates the TDES encryption algorithm is enable or disable.
INT swSSHEncryptAlgBlowfishAdmin	1.3.6.1.4.1.2272.1.201.1.5.2.1.2	INTEGER	read-write	This object indicates the Blowfish encryption algorithm is enable or disable.
INT swSSHEncryptAlgAES128Admin	1.3.6.1.4.1.2272.1.201.1.5.2.1.3	INTEGER	read-write	This object indicates the AES128 encryption algorithm is enable or disable.
INT swSSHEncryptAlgAES192Admin	1.3.6.1.4.1.2272.1.201.1.5.2.1.4	INTEGER	read-write	This object indicates the AES192 encryption algorithm is enable or disable.
INT swSSHEncryptAlgAES256Admin	1.3.6.1.4.1.2272.1.201.1.5.2.1.5	INTEGER	read-write	This object indicates the AES256 encryption algorithm is enable or disable.
INT swSSHEncryptAlgArcfourAdmin	1.3.6.1.4.1.2272.1.201.1.5.2.1.6	INTEGER	read-write	This object indicates the Arcfour encryption algorithm is enable or disable.
INT swSSHEncryptAlgCAST128Admin	1.3.6.1.4.1.2272.1.201.1.5.2.1.7	INTEGER	read-write	This object indicates the CAST128 encryption algorithm is enable or disable.
INT swSSHEncryptAlgTwofish128Admin	1.3.6.1.4.1.2272.1.201.1.5.2.1.8	INTEGER	read-write	This object indicates the Twofish128 encryption algorithm is enable or disable.
INT swSSHEncryptAlgTwofish192Admin	1.3.6.1.4.1.2272.1.201.1.5.2.1.9	INTEGER	read-write	This object indicates the Twofish192 encryption algorithm is enable or disable.
INT swSSHEncryptAlgTwofish256Admin	1.3.6.1.4.1.2272.1.201.1.5.2.1.10	INTEGER	read-write	This object indicates the Twofish256 encryption algorithm is enable or disable.
swSSHAuthenMethodCtrl	1.3.6.1.4.1.2272.1.201.1.5.2.2
INT swSSHAuthenMethodPasswdAdmin	1.3.6.1.4.1.2272.1.201.1.5.2.2.1	INTEGER	read-write	This object indicates password authentication enable or disable.
INT swSSHAuthenMethodPubKeyAdmin	1.3.6.1.4.1.2272.1.201.1.5.2.2.2	INTEGER	read-write	This object indicates Public Key authentication enable or disable.
INT swSSHAuthenMethodHostBaseAdmin	1.3.6.1.4.1.2272.1.201.1.5.2.2.3	INTEGER	read-write	This object indicates Host Base authentication enable or disable.
swSSHInteAlgCtrl	1.3.6.1.4.1.2272.1.201.1.5.2.3
INT swSSHInteAlgSHA1Admin	1.3.6.1.4.1.2272.1.201.1.5.2.3.1	INTEGER	read-write	This object indicates HMAC-SHA1 algorithm enable or disable .
INT swSSHInteAlgMD5Admin	1.3.6.1.4.1.2272.1.201.1.5.2.3.2	INTEGER	read-write	This object indicates HMAC-MD5 algorithm enable or disable .
swSSHPubKeyAlgCtrl	1.3.6.1.4.1.2272.1.201.1.5.2.4
INT swSSHPubKeyAlgDSAAdmin	1.3.6.1.4.1.2272.1.201.1.5.2.4.1	INTEGER	read-write	This object indicates DSA algorithm enable or disable .
INT swSSHPubKeyAlgRSAAdmin	1.3.6.1.4.1.2272.1.201.1.5.2.4.2	INTEGER	read-write	This object indicates RSA algorithm enable or disable .
swSSHUserCtrlTable	1.3.6.1.4.1.2272.1.201.1.5.3		not-accessible	A table that contains information about authentication method lists..
swSSHUserCtrlEntry	1.3.6.1.4.1.2272.1.201.1.5.3.1		not-accessible	A list of the Authentication methods.
STR swSSHUserCtrlUserName	1.3.6.1.4.1.2272.1.201.1.5.3.1.1	DisplayString	read-only	This object indicates the user name.
INT swSSHUserCtrlAuthMode	1.3.6.1.4.1.2272.1.201.1.5.3.1.2	INTEGER	read-write	This object indicates user authentication method.
STR swSSHUserCtrlHostName	1.3.6.1.4.1.2272.1.201.1.5.3.1.3	DisplayString	read-write	This object indicates the host domain name. If the swSSHUserCtrlAuthMode is not hostbased(4), it must be NULL.
IP swSSHUserCtrlHostIp	1.3.6.1.4.1.2272.1.201.1.5.3.1.4	IpAddress	read-write	This object indicates the host IP address. If the swSSHUserCtrlAuthMode is not hostbased(4), it must be 0.0.0.0.

RFC description

Manages Secure Shell (SSH) access control configuration including enable status, connection limits, timeouts, and authentication settings.

Start monitoring FastPath-family managed switch (SSH server/cipher configuration) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download SSH-MIB

What Is SSH-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description