Standard view Table view

ENTERASYS-PKI-MIB

        This MIB module defines a portion of the SNMP enterprise
MIBs under Enterasys Networks' enterprise OID pertaining to
PKI notifications.
        
This MIB was designed to be used for monitoring PKI events
on the network management system by various remote monitoring
mechanisms.
Source file
ENTERASYS-PKI-MIB
Last revised
Identity
etsysPkiMIB
Base OID
1.3.6.1.4.1.5624.1.2.101
Imported Objects
ENTERASYS-MIB-NAMES etsysModules
SNMP-FRAMEWORK-MIB SnmpAdminString
SNMPv2-CONF MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE
SNMPv2-TC DateAndTime
Net-SNMP examples using the enterasys MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'ENTERASYS-PKI-MIB' -M '/opt/observium/mibs/enterasys:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'ENTERASYS-PKI-MIB::etsysPkiMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'ENTERASYS-PKI-MIB' -M '/opt/observium/mibs/enterasys:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'ENTERASYS-PKI-MIB::etsysPkiMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (13)
etsysPkiMIB
.1.3.6.1.4.1.5624.1.2.101
etsysPkiObjects
.1.3.6.1.4.1.5624.1.2.101.1
etsysPkiNotificationBranch
.1.3.6.1.4.1.5624.1.2.101.1.0
etsysPkiCertificateBranch
.1.3.6.1.4.1.5624.1.2.101.1.1
etsysPkiCertListName
OctetString
 .1.3.6.1.4.1.5624.1.2.101.1.1.1
etsysPkiCertFingerprint
OctetString
 .1.3.6.1.4.1.5624.1.2.101.1.1.2
etsysPkiCertIssuerName
OctetString
 .1.3.6.1.4.1.5624.1.2.101.1.1.3
etsysPkiCertSubjectName
OctetString
 .1.3.6.1.4.1.5624.1.2.101.1.1.4
etsysPkiCertStartDate
SNMPv2-TCDateAndTime
 .1.3.6.1.4.1.5624.1.2.101.1.1.5
etsysPkiCertEndDate
SNMPv2-TCDateAndTime
 .1.3.6.1.4.1.5624.1.2.101.1.1.6
etsysPkiConformance
.1.3.6.1.4.1.5624.1.2.101.2
etsysPkiGroups
.1.3.6.1.4.1.5624.1.2.101.2.1
etsysPkiCompliances
.1.3.6.1.4.1.5624.1.2.101.2.2
Dependencies (5) 5 direct Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. ENTERASYS-MIB-NAMESenterasys
  3. SNMPv2-CONFrfc
  4. SNMPv2-TCrfc
  5. SNMP-FRAMEWORK-MIBrfc
  6. ENTERASYS-PKI-MIBenterasysselected
Conformance Groups (2)
etsysPkiCertificateGroup
etsysPkiCertListName etsysPkiCertFingerprint etsysPkiCertIssuerName etsysPkiCertSubjectName etsysPkiCertStartDate etsysPkiCertEndDate
A collection of objects providing basic instrumentation of
PKI Certificate event notifications.
 .1.3.6.1.4.1.5624.1.2.101.2.1.1
etsysPkiNotificationGroup
etsysPkiCertNearingExpirationNotification
The PKI notifications.
 .1.3.6.1.4.1.5624.1.2.101.2.1.2
Compliance Statements (1)

OID .1.3.6.1.4.1.5624.1.2.101.2.2.1
The compliance statement for devices that support Enterasys PKI.
Required groups
mandatory etsysPkiCertificateGroup
mandatory etsysPkiNotificationGroup
Notifications / Traps (1)
NameOIDDescription
etsysPkiCertNearingExpirationNotification
etsysPkiCertListName etsysPkiCertFingerprint etsysPkiCertIssuerName etsysPkiCertSubjectName etsysPkiCertStartDate etsysPkiCertEndDate
.1.3.6.1.4.1.5624.1.2.101.1.0.1
Certificate nearing expiration.

The managed entity will send this notification when an
installed PKI Certificate is nearing expiration. The
entity will resend this notification periodically until
the certificate is removed from configuration.

Note that an expired certificate will be automatically
rejected by the PKI authentication process. If an
expired certificate is not replaced by a newer
certificate, then any authentication attempt which
uses the expired certificate will fail.