CM-SECURITY-MIB Table View

A list of entries corresponding to the security users. 
Entries cannot be created in this table by management
application action.

cmSecurityUserEntry row .1.3.6.1.4.1.2544.1.12.10.1.5.1

An entry containing information applicable to a particular
security user.

Indexes

cmSecurityUserName cmSecurityUserRemoteUser

Column	Syntax	OID
cmSecurityUserName Security User Name.	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.4.1.2544.1.12.10.1.5.1.1
cmSecurityUserComment Notes on Security User.	OctetStringr/w Constraints: range: 0-128	.1.3.6.1.4.1.2544.1.12.10.1.5.1.2
cmSecurityUserPrivLevel Security User Privilege Level.	CmSecurityPrivLevelr/w Type Values: 0 not-applicable 1 retrieve 2 maintenance 3 provisioning 4 superuser 5 testuser 6 cryptouser 7 netconf	.1.3.6.1.4.1.2544.1.12.10.1.5.1.3
cmSecurityUserLoginTimeout Security User Login Timeout.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2544.1.12.10.1.5.1.4
cmSecurityUserNumFailedLoginAttempts Security User Number of Failed Login Attempts.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2544.1.12.10.1.5.1.5
cmSecurityUserLastLoginTime Security User Last Login Time.	SNMPv2-TCDateAndTime Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.4.1.2544.1.12.10.1.5.1.6
cmSecurityUserLockedout Whether the security user has been locked out.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2544.1.12.10.1.5.1.7
cmSecurityUserLastLockedoutTime Security User Last Locked out Time.	SNMPv2-TCDateAndTime Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.4.1.2544.1.12.10.1.5.1.8
cmSecurityUserCliPagingEnable Whether the security user has CLI paging enabled.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2544.1.12.10.1.5.1.9
cmSecurityUserRemoteUser Whether the security user is a remote user.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2544.1.12.10.1.5.1.10
cmSecurityUserPassword Password of the security user. Note that this attribute is a SET only attribute.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2544.1.12.10.1.5.1.11
cmSecurityUserStorageType The type of storage configured for this entry.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.2544.1.12.10.1.5.1.12
cmSecurityUserRowStatus The status of this row. An entry MUST NOT exist in the active state unless all objects in the entry have an appropriate value, as described in the description clause for each writable object. The values o…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2544.1.12.10.1.5.1.13
cmSecurityUserAction This object provides ability to perform specific actions on security user. remove-lockout - this removes the locked out condition on the security user .	SecurityUserActionr/w Type Values: 0 not-applicable 1 remove-lockout	.1.3.6.1.4.1.2544.1.12.10.1.5.1.14
cmSecurityCryptoPassword Second level password used in connectguard configurations. This applies only to crypto users. Note that this attribute is a SET only attribute.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2544.1.12.10.1.5.1.15
cmSecurityUserRemoteCryptoUser Indicates if a security user is a remote crypto user.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2544.1.12.10.1.5.1.16

A list of entries corresponding to the remote authentication 
servers.
Entries cannot be created in this table by management
application action.

cmRemoteAuthServerEntry row .1.3.6.1.4.1.2544.1.12.10.1.6.1

An entry containing information applicable to a particular
remote authentication server.

Indexes

cmRemoteAuthServerIndex

Column	Syntax	OID
cmRemoteAuthServerIndex Unique index to address/configure a specific Remote Authentication Server.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2544.1.12.10.1.6.1.1
cmRemoteAuthServerEnabled This object allows enabling/disabling a Remote Authentication Server.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2544.1.12.10.1.6.1.2
cmRemoteAuthServerOrder This object determines the order in which the Remote Authentication Servers are accessed for security information.	CmRemoteAuthOrderr/w Type Values: 1 first 2 second 3 third	.1.3.6.1.4.1.2544.1.12.10.1.6.1.3
cmRemoteAuthServerIpAddress This object allows to specify an IP Address for the Remote Authentication Server.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2544.1.12.10.1.6.1.4
cmRemoteAuthServerPort This object allows to specify a Port for Remote Authentication Server.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2544.1.12.10.1.6.1.5
cmRemoteAuthServerNumRetries This object allows to specify the number of retries the Remote Authentication Server must be tried for security access before giving up.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2544.1.12.10.1.6.1.6
cmRemoteAuthServerTimeout This object allows to specify the timeout period for timing out a security access request to the Remote Authentication Server.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2544.1.12.10.1.6.1.7
cmRemoteAuthServerSecret This allows configuration of secret password for Remote Authentication Server request.	OctetStringr/w Constraints: range: 0-128	.1.3.6.1.4.1.2544.1.12.10.1.6.1.8
cmRemoteAuthServerAccountingPort This object allows to specify a Port for RADIUS Accounting.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2544.1.12.10.1.6.1.9
cmRemoteAuthServerIpVersion This object describe the Ip Version.	CM-COMMON-MIBIpVersionr/w Type Values: 1 ipv4 2 ipv6	.1.3.6.1.4.1.2544.1.12.10.1.6.1.10
cmRemoteAuthServerIpv6Addr This object describe the Ipv6 Address.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2544.1.12.10.1.6.1.11

This table is the extension of the F3 USM User Table.

f3UsmUserEntry row .1.3.6.1.4.1.2544.1.12.10.1.9.1

An entry in the F3 USM User Table.

Indexes

No indexes recorded

Column	Syntax	OID
f3UsmUserAccessType This indicates the type of USM User, read-only, read-write, trap-only.	UsmUserAccessType Type Values: 1 read-only 2 read-write 3 trap-only	.1.3.6.1.4.1.2544.1.12.10.1.9.1.1

This table is used for Restricted User Login via NMS.
This is for users with lower privileges to elevate them to higher ones for limited amount of time.

f3PrivilegeChangeEntry row .1.3.6.1.4.1.2544.1.12.10.1.15.1

Column for privilegeChangeTable.

Indexes

f3PrivilegeChangeId

Column	Syntax	OID
f3PrivilegeChangeId Unique index identifying a request.	Unsigned32 Constraints: range: 1-4294967295	.1.3.6.1.4.1.2544.1.12.10.1.15.1.1
f3PrivilegeChangeUserName The name string for user authentication purposes	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.2544.1.12.10.1.15.1.2
f3PrivilegeChangeIpv4Address IPv4 address of interface to which user's terminal is connected.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.2544.1.12.10.1.15.1.3
f3PrivilegeChangeIpv6Address IPv6 address of interface to which user's terminal is connected.	IPV6-TCIpv6Address Type Constraints: range: 16	.1.3.6.1.4.1.2544.1.12.10.1.15.1.4
f3PrivilegeChangeTerminalIpv4Address Source IPv4 address of connected terminal.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.2544.1.12.10.1.15.1.5
f3PrivilegeChangeTerminalIpv6Address Source IPv6 address of connected terminal.	IPV6-TCIpv6Address Type Constraints: range: 16	.1.3.6.1.4.1.2544.1.12.10.1.15.1.6
f3PrivilegeChangeInterface Interface used by the user	CM-COMMON-MIBUserInterfaceType Type Values: 1 cli 2 gui 3 netconf 4 snmp	.1.3.6.1.4.1.2544.1.12.10.1.15.1.7
f3PrivilegeChangeCurrentPrivilege Current privilege level of the user, who is requesting role upgrade.	CmSecurityPrivLevel Type Values: 0 not-applicable 1 retrieve 2 maintenance 3 provisioning 4 superuser 5 testuser 6 cryptouser 7 netconf	.1.3.6.1.4.1.2544.1.12.10.1.15.1.8
f3PrivilegeChangeRequestedPrivilege Privilege requested by user for session.	CmSecurityPrivLevel Type Values: 0 not-applicable 1 retrieve 2 maintenance 3 provisioning 4 superuser 5 testuser 6 cryptouser 7 netconf	.1.3.6.1.4.1.2544.1.12.10.1.15.1.9
f3PrivilegeChangeDuration Requested time period by user (in minutes).	minutesUnsigned32 Constraints: range: 1-480	.1.3.6.1.4.1.2544.1.12.10.1.15.1.10
f3PrivilegeChangeAction Privilege request action.	PrivilegeRequestActionr/w Type Values: 0 undefined 1 none 2 approve 3 deny 4 cancel	.1.3.6.1.4.1.2544.1.12.10.1.15.1.11
f3PrivilegeChangeState Privilege request state.	PrivilegeRequestState Type Values: 1 none 2 requestSent 3 requestCanceled 4 requestApproved 5 requestDenied 6 requestTimeout 7 accessExpired 8 accessCanceled	.1.3.6.1.4.1.2544.1.12.10.1.15.1.12
f3PrivilegeChangeRemainingTime Time remaining in session with upgrade user privilege (in seconds).	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2544.1.12.10.1.15.1.13
f3PrivilegeChangeRemoteName The name string for Radius/Tacacs authentication purposes.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.2544.1.12.10.1.15.1.14