Standard view Table view

CIENA-CES-SECURITY-MIB

        This module defines the security configuration objects and also the objects required for
any security related notifications.
Source file
CIENA-CES-SECURITY-MIB
Last revised
Identity
cienaCesSecurityMIB
Base OID
1.3.6.1.4.1.1271.2.1.44
Imported Objects
CIENA-GLOBAL-MIB cienaGlobalMacAddress cienaGlobalSeverity
CIENA-SMI cienaCesConfig cienaCesNotifications
SNMPv2-CONF NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE
SNMPv2-TC DisplayString
Net-SNMP examples using the ciena MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'CIENA-CES-SECURITY-MIB' -M '/opt/observium/mibs/ciena:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CIENA-CES-SECURITY-MIB::cienaCesSecurityMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CIENA-CES-SECURITY-MIB' -M '/opt/observium/mibs/ciena:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CIENA-CES-SECURITY-MIB::cienaCesSecurityMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (16)
cienaCesSecurityMIB
.1.3.6.1.4.1.1271.2.1.44
cienaCesSecurityMIBObjects
.1.3.6.1.4.1.1271.2.1.44.1
cienaCesSecurityCertExpiry
.1.3.6.1.4.1.1271.2.1.44.1.1
cienaCesSecurityCertType
Enumeration
 .1.3.6.1.4.1.1271.2.1.44.1.1.1
cienaCesSecurityCertName
SNMPv2-TCDisplayString
 .1.3.6.1.4.1.1271.2.1.44.1.1.2
cienaCesSecurityCertValidTo
SNMPv2-TCDisplayString
 .1.3.6.1.4.1.1271.2.1.44.1.1.3
cienaCesSecurityCertCrl
.1.3.6.1.4.1.1271.2.1.44.1.2
cienaCesSecurityCaCrlType
SNMPv2-TCDisplayString
 .1.3.6.1.4.1.1271.2.1.44.1.2.1
cienaCesSecurityCertCrlOperation
SNMPv2-TCDisplayString
 .1.3.6.1.4.1.1271.2.1.44.1.2.2
cienaCesSecurityCaCrlInvalidCaReason
SNMPv2-TCDisplayString
 .1.3.6.1.4.1.1271.2.1.44.1.2.3
cienaCesSecurityCertKeyOperation
SNMPv2-TCDisplayString
 .1.3.6.1.4.1.1271.2.1.44.1.2.4
cienaCesSecurityMIBConformance
.1.3.6.1.4.1.1271.2.1.44.2
cienaCesSecurityMIBCompliances
.1.3.6.1.4.1.1271.2.1.44.2.1
cienaCesSecurityMIBGroups
.1.3.6.1.4.1.1271.2.1.44.2.2
cienaCesSecurityMIBNotificationPrefix
.1.3.6.1.4.1.1271.2.2.43
cienaCesSecurityMIBNotifications
.1.3.6.1.4.1.1271.2.2.43.0
Dependencies (6) 5 direct · 1 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. CIENA-SMIciena
  3. SNMPv2-TCrfc
  4. CIENA-TCciena
  5. CIENA-GLOBAL-MIBciena
  6. SNMPv2-CONFrfc
  7. CIENA-CES-SECURITY-MIBcienaselected
Conformance Groups (2)
cienaCesSecurityCertExpiryGroup
cienaCesSecurityCertExpiryWarningNotification cienaCesSecurityCertExpiryExpiredNotification
A collection of objects providing information
about security certificate expiry notifications.
 .1.3.6.1.4.1.1271.2.1.44.2.2.1
cienaCesSecurityCertCrlGroup
cienaCesSecurityCaCrlInstallNotification cienaCesSecurityCaCrlInvalidCaNotification cienaCesSecurityDevCertInstallNotification cienaCesSecurityDevCertKeyCreateNotification
A collection of objects providing information
about certificate and certificate revocation
list notifications.
 .1.3.6.1.4.1.1271.2.1.44.2.2.2
Notifications / Traps (6)
NameOIDDescription
cienaCesSecurityCertExpiryWarningNotification
CIENA-GLOBAL-MIBcienaGlobalSeverity CIENA-GLOBAL-MIBcienaGlobalMacAddress cienaCesSecurityCertType cienaCesSecurityCertName cienaCesSecurityCertValidTo
.1.3.6.1.4.1.1271.2.2.43.0.1
A cienaCesSecurityCertExpiryWarningNotification is sent if
the current time is greater than or equal to (the expiry time
minus the initial warning interval), but less than the expiry
time. They are sent at configured intervals.
To enable the device to send this trap:
cienaCesSecurityCertExpiryWarningTrapState needs to be set to enabled.
cienaCesSecurityCertExpiryExpiredNotification
CIENA-GLOBAL-MIBcienaGlobalSeverity CIENA-GLOBAL-MIBcienaGlobalMacAddress cienaCesSecurityCertType cienaCesSecurityCertName cienaCesSecurityCertValidTo
.1.3.6.1.4.1.1271.2.2.43.0.2
A cienaCesSecurityCertExpiryExpiredNotification is sent if
the current time is greater than or equal to the expiry time.
They are sent at configured intervals.
To enable the device to send this trap:
cienaCesSecurityCertExpiryExpiredTrapState needs to be set to enabled.
cienaCesSecurityCaCrlInstallNotification
CIENA-GLOBAL-MIBcienaGlobalSeverity CIENA-GLOBAL-MIBcienaGlobalMacAddress cienaCesSecurityCaCrlType cienaCesSecurityCertName cienaCesSecurityCertCrlOperation
.1.3.6.1.4.1.1271.2.2.43.0.3
A cienaCesSecurityCaCrlInstallNotification is sent if
a CA certificate has been successfully installed.
To enable the device to send this trap:
cienaCesSecurityCaCrlInstallTrapState needs to be set to enabled.
cienaCesSecurityCaCrlInvalidCaNotification
CIENA-GLOBAL-MIBcienaGlobalSeverity CIENA-GLOBAL-MIBcienaGlobalMacAddress cienaCesSecurityCaCrlInvalidCaReason
.1.3.6.1.4.1.1271.2.2.43.0.4
A cienaCesSecurityCaCrlInvalidCaNotification is sent if
during an attempted installation, the CA certificate
is found to be invalid.
To enable the device to send this trap:
cienaCesSecurityCaCrlInvalidCaTrapState needs to be set to enabled.
cienaCesSecurityDevCertInstallNotification
CIENA-GLOBAL-MIBcienaGlobalSeverity CIENA-GLOBAL-MIBcienaGlobalMacAddress cienaCesSecurityCertName cienaCesSecurityCertCrlOperation
.1.3.6.1.4.1.1271.2.2.43.0.5
A cienaCesSecurityDevCertInstallNotification is sent if
a device certificate has been successfully installed or uninstalled.
To enable the device to send this trap:
cienaCesSecurityDevCertInstallTrapState needs to be set to enabled.
cienaCesSecurityDevCertKeyCreateNotification
CIENA-GLOBAL-MIBcienaGlobalSeverity CIENA-GLOBAL-MIBcienaGlobalMacAddress cienaCesSecurityCertName cienaCesSecurityCertKeyOperation
.1.3.6.1.4.1.1271.2.2.43.0.6
A cienaCesSecurityDevCertKeyCreateNotification is sent if
a device certificate key has been successfully created.
To enable the device to send this trap:
cienaCesSecurityDevCertKeyCreateTrapState needs to be set to enabled.