aaatpLevel

level of control to do on the user certificate.
certificate means that there is a valid chain of certificate between the user certificate and a root certificate known by the switch. The root certificates are managed using specific pki commands.
All certificates are valid and well signed.
not-revoked means that using CRL or other ways configuring using pki commands the non-revocation of the certificate is checked.
repository means that after the precedent control, there is a binary comparison of the certificate on the server and the one received during the authorization (instantaneous revocation possible)
This verification is only possible when the access handler is configured with certificateOnly

MIB

ALCATEL-IND1-AAA-MIB

OID

.1.3.6.1.4.1.6486.800.1.2.1.15.1.1.2.7.1.6

Type

column

Access

readwrite

Status

current

Parent

aaaPkiEntry