XEDIA-SSHD-MIB

All MIBs › XEDIA-SSHD-MIB

Organization: Xedia Corp.

Last Updated: 1999-08-14

Description: Secure Shell Daemon configuration, session statistics, and client key management for Xedia AP access-point and router devices

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is XEDIA-SSHD-MIB?

The XEDIA-SSHD-MIB is a Xedia Corporation MIB for the SSH daemon running on Xedia AP access points and routers, covering SSHD configuration and session statistics. It exposes security-service configuration such as listen port, host/user authentication control, encryption/MAC/compression algorithm control, password retry limits, and authentication grace time, along with session-level statistics and events. Its monitoring emphasis is on software/service health: confirming the SSH daemon is administratively enabled, tracking active versus maximum allowed sessions, and reviewing session events to detect failed logins or possible brute-force attempts against the management interface. No dependency on other MIBs is apparent beyond the SSH protocol itself, this being a proprietary Xedia module. It was deployed on Xedia AP wireless access points and routers where administrators manage secure remote CLI access, often starting with an XEDIA-SSHD-MIB download to load into their SNMP management tools.

IPNetwork Monitor allows you to monitor SNMP objects defined in XEDIA-SSHD-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Xedia AP access point
Xedia router

Monitoring Examples

xsshdCfgAdminStatus and xsshdCfgListenPort confirm whether the SSH daemon is enabled and on which port, while xsshdCfgMaxSessions and xsshdCfgSessionEvents let an admin watch for a spike in concurrent sessions or authentication events that could indicate a brute-force attempt. xsshdCfgPasswordRetry and xsshdCfgAuthGraceTime show the configured lockout policy, useful for confirming the daemon is enforcing the expected security posture after repeated failed logins.

What Can Be Monitored

SSH daemon admin status
listening port
active/max session count
session/authentication events
password retry/lockout policy

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
RowStatus

From XEDIA-REG

LongDisplayString
xediaMibs	OBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using xsshdStatsTotalSessionCount OID:

Select a Xedia AP access point, Xedia router (SSHD session-count/failed-login-event status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type xsshdStatsTotalSessionCount into the Find box to locate it in the OID tree, then select it and click OK. The total number of SSH session requests. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
xediaSshDMIB	1.3.6.1.4.1.838.3.35			This module defines Secure Shell Daemon configuration and statistics for Xedia AP devices.
xSshDObjects	1.3.6.1.4.1.838.3.35.1
xSshDGlobal	1.3.6.1.4.1.838.3.35.1.1
xSshDGlobalCfg	1.3.6.1.4.1.838.3.35.1.1.1
INT xsshdCfgAdminStatus	1.3.6.1.4.1.838.3.35.1.1.1.1	INTEGER	read-write	The administrative status of Secure Shell in the router. The value of: 'enabled' - indicates that the ssh daemon will process requests from clients. If there are enough node resources, and the host/user pass authentication, then the user will be allowed to log into the CL.I 'disable' - indicates that the ssh daemon will not process requests from clients. Existing sessions will not be torn down. 'testing' - will process requests from clients, and periodically output a test pattern if the client is authenticated. 'disabledDown' - indicates that the ssh daemon will not process requests from clients, and, at system initialization, the ssh daemon will NOT be started. This can be used to free up node resources if ssh is not going to be used. Existing sessions will not be torn down. The ssh daemon can only be started at intialization time. So, if it was set to 'disabledDown' and the daemon never started, a full node boot will be required to enable the ssh daemon.
INT xsshdCfgListenPort	1.3.6.1.4.1.838.3.35.1.1.1.2	INTEGER	read-write	The tcp port number that will be used to listen for requests. Changing this parameter will require a node boot to take affect.
STR xsshdCfgKeyName	1.3.6.1.4.1.838.3.35.1.1.1.3	DisplayString	read-write	The name of the PKI key-pair that is configured in the box for use by SSH. It SHOULD be a DSA formatted key. If this index is left blank, the first available key will be used.
INT xsshdCfgMaxSessions	1.3.6.1.4.1.838.3.35.1.1.1.4	INTEGER	read-write	The maximum number of SSH sessions allowed at one time.
INT xsshdCfgSessionEvents	1.3.6.1.4.1.838.3.35.1.1.1.5	INTEGER	read-write	The overall control of session event generation that is used in conjuction with the normal system event filters. If the session flag is 'disabled' no session events will be sent. If the flag is 'enabled' the normal event filter mechanisms will still be used to customize input/output of the events.
INT xsshdCfgUserAuthControl	1.3.6.1.4.1.838.3.35.1.1.1.6	INTEGER	read-write	The method of authentication for users. If 'password' is used, then the user will be looked up and authenticated using the general 'authentication user table'. If 'publicKey' is used, then the client/user public key will be looked up in the SSH Client-Key table.
INT xsshdCfgHostAuthControl	1.3.6.1.4.1.838.3.35.1.1.1.7	INTEGER	read-write	The method of authentication for client machines. If 'list' is used, then the client address is validated against the accept/deny list of clients.
BIT xsshdCfgEncryptionControl	1.3.6.1.4.1.838.3.35.1.1.1.8	Bits	read-write	This object controls the ciphers that are allowed to be used during negotiation with a client.
BIT xsshdCfgMacControl	1.3.6.1.4.1.838.3.35.1.1.1.9	Bits	read-write	This object controls the hmac algorithms are allowed to be used during negotiation with a client.
BIT xsshdCfgCompressionControl	1.3.6.1.4.1.838.3.35.1.1.1.10	Bits	read-write	The methods of compression that can be negotiated.
INT xsshdCfgPasswordRetry	1.3.6.1.4.1.838.3.35.1.1.1.11	INTEGER	read-write	The number of times a user can re-enter a password before the user is considered to be invalid.
INT xsshdCfgAuthGraceTime	1.3.6.1.4.1.838.3.35.1.1.1.12	INTEGER	read-write	The total number of seconds allowd for host/user authentication. In most cases only a few seconds is needed. But, in the case of user/password authentication, the user may 'stall' the session by not supplying a password in a timely manner. This object roughly defines the number of seconds to wait for the entire authentication process to complete. It is NOT an exact number of seconds. The authentication status is checked as a background task (specific timer interval) for each session thread. Therefore, it MAY take a few seconds beyond the configured value for the connection to be terminated.
INT xsshdCfgIdleTimeOut	1.3.6.1.4.1.838.3.35.1.1.1.13	INTEGER	read-write	The number of minutes without any user input, that is allowed, before disconnecting a session. Setting this value to zero disables the idle-timeout feature.
STR xsshdCfgHostAcceptList	1.3.6.1.4.1.838.3.35.1.1.1.14	DisplayString	read-write	The list of clients that are allowed to connect to the server. This list is only used if the host control is set. The list can be made up of individual addresses separated or address ranges, with each component being separated by a comma. ie '1.2.3.4, 1.2.5.0-1.2.5.30'
STR xsshdCfgHostDenyList	1.3.6.1.4.1.838.3.35.1.1.1.15	DisplayString	read-write	The list of clients that are not allowed to connect to the server. This list is only used if the host control is set. The list can be made up of individual addresses separated or address ranges, with each component being separated by a comma. ie '1.2.3.4, 1.2.5.0-1.2.5.30'
I32 xsshdCfgDbgTraceLevel	1.3.6.1.4.1.838.3.35.1.1.1.16	Integer32	read-write	The numeric value that is used to apply 'trace-levels' of the debug events. It's intended to be used by Xedia Support only when normal events and statistics are not able to provide enough information to properly debug problems in the field.
INT xsshdCfgPresentedKeyTypes	1.3.6.1.4.1.838.3.35.1.1.1.17	INTEGER	read-write	This object controls which ssh key types will be presented to the client during negotiation. Since 'dsa' support is mandatiory, and 'rsa' support is optional, the administrator will have some control over what is presented to the clients. If 'dsa' is chosen, only 'ssh-dss' will be presented to the client for negotiation. If 'dsaAndRsa' is selected, both formats will be presented to the client 'ssh-rsa,ssh-dss'. But, when 'dsaAllowRsa' is used, ssh-rsa will only be presented to the client when the ssh daemon is using an rsa formatted key.
xSshDGlobalOper	1.3.6.1.4.1.838.3.35.1.1.2
INT xsshdOperStatus	1.3.6.1.4.1.838.3.35.1.1.2.1	INTEGER	read-only	The operational status of Secure Shell in the router.
STR xsshdOperCipherList	1.3.6.1.4.1.838.3.35.1.1.2.2	DisplayString	read-only	The list of Ciphers configured.
STR xsshdOperCiphers	1.3.6.1.4.1.838.3.35.1.1.2.3	DisplayString	read-only	The list of Ciphers that can be negotiated base on what functions are available with the current version of software.
STR xsshdOperMacList	1.3.6.1.4.1.838.3.35.1.1.2.4	DisplayString	read-only	The list of MAC algorithms configured.
STR xsshdOperMacs	1.3.6.1.4.1.838.3.35.1.1.2.5	DisplayString	read-only	The list of MAC algorithms that can be negotiated based on what functions are available with the current version of software.
STR xsshdOperCompressionList	1.3.6.1.4.1.838.3.35.1.1.2.6	DisplayString	read-only	The list of Compression algorithms configured.
STR xsshdOperCompressions	1.3.6.1.4.1.838.3.35.1.1.2.7	DisplayString	read-only	The list of Compression algorithms that can be negotiated based on what functions are available with the current version of software.
STR xsshdOperHostAcceptList	1.3.6.1.4.1.838.3.35.1.1.2.8	DisplayString	read-only	The operational list of clients that are allowed to connect to the server.
STR xsshdOperHostDenyList	1.3.6.1.4.1.838.3.35.1.1.2.9	DisplayString	read-only	The operational list of clients that are not allowed to connect to the server.
STR xsshdOperPresentedKeyTypes	1.3.6.1.4.1.838.3.35.1.1.2.10	DisplayString	read-only	The operational list of key types presented to the client for negotiation.
xSshDGlobalStats	1.3.6.1.4.1.838.3.35.1.1.3
I32 xsshdStatsCurrentSessionCount	1.3.6.1.4.1.838.3.35.1.1.3.1	Integer32	read-only	The number of current SSH sessions in progress.
C32 xsshdStatsTotalSessionCountEx	1.3.6.1.4.1.838.3.35.1.1.3.2	Counter32	read-only	The total number of SSH session requests.
C32 xsshdStatsSessionSuccessCount	1.3.6.1.4.1.838.3.35.1.1.3.3	Counter32	read-only	The total number of SSH sessions that were able to to obtain all necessary resources, and authenticate the user and host. (basically, allowed to initiate a CLI session)
C32 xsshdStatsSessionAuthFails	1.3.6.1.4.1.838.3.35.1.1.3.4	Counter32	read-only	The number of session authentication failures.
C32 xsshdStatsSessionResourceFails	1.3.6.1.4.1.838.3.35.1.1.3.5	Counter32	read-only	The number of session resource failures. This statistic is incremented for memory and system resource failures as well as when the maximum number of SSH sessions prohibits a session from being established.
xSshDSession	1.3.6.1.4.1.838.3.35.1.2
xSshDSessionOper	1.3.6.1.4.1.838.3.35.1.2.1
xsshdSessionTable	1.3.6.1.4.1.838.3.35.1.2.1.1		not-accessible	A list of active SSH sessions entries
xsshdSessionEntry	1.3.6.1.4.1.838.3.35.1.2.1.1.1		not-accessible	An entry containing information about an SSH session
INT xsshdSessionIndex	1.3.6.1.4.1.838.3.35.1.2.1.1.1.1	INTEGER	not-accessible	The index of the session.
IP xsshdSessionRemoteIpAddress	1.3.6.1.4.1.838.3.35.1.2.1.1.1.2	IpAddress	read-only	The ip address of the connected client.
STR xsshdSessionRemoteNode	1.3.6.1.4.1.838.3.35.1.2.1.1.1.3	DisplayString	read-only	The node identifier of the connected client.
STR xsshdSessionRemoteUser	1.3.6.1.4.1.838.3.35.1.2.1.1.1.4	DisplayString	read-only	The remote user of the session.
STR xsshdSessionNegotiation	1.3.6.1.4.1.838.3.35.1.2.1.1.1.5	DisplayString	read-only	The negotiated results of the session.
TIK xsshdSessionTime	1.3.6.1.4.1.838.3.35.1.2.1.1.1.6	TimeTicks	read-only	The number of 1/100 seconds that the session has been connected.
C32 xsshdSessionUiBytesIn	1.3.6.1.4.1.838.3.35.1.2.1.1.1.7	Counter32	read-only	The number of data bytes passed to the internal user interface up from the Secure Shell layer.
C32 xsshdSessionUiBytesOut	1.3.6.1.4.1.838.3.35.1.2.1.1.1.8	Counter32	read-only	The number of data bytes passed from the internal user interface down to the Secure Shell layer.
INT xsshdSessionRowStatus	1.3.6.1.4.1.838.3.35.1.2.1.1.1.9	INTEGER	read-write	The status of the entry. The only operations that are allowed are 'active' and 'destroy'. Existing sessions can be set to 'active' which causes no change. And, existing sessions can be set to 'destroy' to abort the particular session.
xSshDClientKeys	1.3.6.1.4.1.838.3.35.1.3
xSshDClientKeyStats	1.3.6.1.4.1.838.3.35.1.3.1
I32 xsshdClientKeyCountTotal	1.3.6.1.4.1.838.3.35.1.3.1.1	Integer32	read-only	The number of configured SSH Client keys.
I32 xsshdClientKeyCountActive	1.3.6.1.4.1.838.3.35.1.3.1.2	Integer32	read-only	The number of active SSH Client keys.
xSshDClientKeyTable	1.3.6.1.4.1.838.3.35.1.3.2.1		not-accessible	A list of active SSH sessions entries
xsshdClientKeyEntry	1.3.6.1.4.1.838.3.35.1.3.2.1.1		not-accessible	An entry containing information about an SSH session
IP xsshdClientKeyIpAddress	1.3.6.1.4.1.838.3.35.1.3.2.1.1.1	IpAddress	not-accessible	The ip address of the client associated with the key entry.
STR xsshdClientKeyUser	1.3.6.1.4.1.838.3.35.1.3.2.1.1.2	DisplayString	not-accessible	The name of the user associated with the key entry.
STR xsshdClientKeyData	1.3.6.1.4.1.838.3.35.1.3.2.1.1.3	LongDisplayString	read-create	The key data for the associated host/user.
ROW xsshdClientKeyRowStatus	1.3.6.1.4.1.838.3.35.1.3.2.1.1.4	RowStatus	read-create	The status of the entry.
xSshDConformance	1.3.6.1.4.1.838.3.35.2
xsshdCompliances	1.3.6.1.4.1.838.3.35.2.1
xsshdCompliance	1.3.6.1.4.1.838.3.35.2.1.1			The compliance statement for all agents that support this MIB. A compliant agent implements all objects defined in this MIB.
xsshdGroups	1.3.6.1.4.1.838.3.35.2.2
xsshdAllGroup	1.3.6.1.4.1.838.3.35.2.2.1			The set of all accessible objects in this MIB.

RFC description

Secure Shell Daemon configuration and statistics for Xedia access point devices including session and key management.

Start monitoring Xedia AP access point, Xedia router (SSHD session-count/failed-login-event status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download XEDIA-SSHD-MIB