accountSecurityLevel

CME-MIB · .1.3.6.1.4.1.2.3.51.2.4.1.1.20.1

Object

scalar mandatory r/w Enumeration
The level of security needed for local user login passwords.
The legacy level:
    - no password required
    - no password expiration
    - no password re-use restrictions
    - no frequency of password change restrictions
    - account is locked for 2 minutes after 5 login failures
    - simple password rules
    - no account inactivity monitoring
The high level:
    - password required
    - factory default 'USERID' account password must be changed on next login
    - force user to change password on first login
    - password expires in 90 days
    - password re-use checking enabled (last 5 passwords kept in history)
    - minimum 24 hours interval between password changes
    - account is locked for 60 minutes after 5 login failures
    - complex password rules with 2 degrees of difference from previous password
    - alert on account inactivity after 120 days
    - accounts disabled after 180 days of inactivity
The custom level:
    - set the password settings individually under customSecuritySettings
The default value is legacy.

Context

MIB
CME-MIB
OID
.1.3.6.1.4.1.2.3.51.2.4.1.1.20.1
Type
scalar
Access
readwrite
Status
mandatory
Parent
accountSecurityManagement

Scalars have one instance, identified by the .0 suffix.

Read the scalar instance
/usr/bin/snmpget -v2c -c '<community>' -Pud -Ir -OQUv -m 'CME-MIB' -M '/opt/observium/mibs/ibm:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CME-MIB::accountSecurityLevel.0'
More examples
Translate to a numeric OID
/usr/bin/snmptranslate -Pud -Ir -On -m 'CME-MIB' -M '/opt/observium/mibs/ibm:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CME-MIB::accountSecurityLevel'

Syntax

Enumeration

Values & Constraints

Enumerated Values
0legacy
1high
2custom