SECURITY-MANAGEMENT-MIB

        Defines MIB objects related to device secured management.
    
secMngModule 1.3.6.1.4.1.6889.2.1.14.1
Imported Objects
AVAYA-ENTITY-MIB avEntPhySeverity
AVAYAGEN-MIB lsg
G700-MG-MIB cmgTrapLocation cmgTrapModule cmgTrapOnBoard cmgTrapOnIccMissing cmgTrapSubsystem
IF-MIB ifIndex ifName ifPhysAddress ifType
INET-ADDRESS-MIB InetAddress InetAddressType
LOAD-MIB genAppFileId genAppFileName genAppFileVersionNumber genOpLastFailureDisplay
RFC1213-MIB DisplayString
SNMPv2-CONF NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI Counter64 IpAddress MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-IDENTITY OBJECT-TYPE Unsigned32
SNMPv2-TC DateAndTime PhysAddress TEXTUAL-CONVENTION
Type Definitions (2)
OnOffType Enumeration
on(1)
off(2)
ServiceStateType Enumeration
on(1)
off(2)
notSupported(3)
Objects (58)
avayaSecurity .1.3.6.1.4.1.6889.2.1.14
secMngModule .1.3.6.1.4.1.6889.2.1.14.1
secMode OnOffType .1.3.6.1.4.1.6889.2.1.14.1.1
secMngNotifications .1.3.6.1.4.1.6889.2.1.14.1.10
secMngNotificationsPrefix .1.3.6.1.4.1.6889.2.1.14.1.10.0
secMngVarbinds .1.3.6.1.4.1.6889.2.1.14.1.10.1
secMngNumOfDays2Expire DaysUnsigned32 .1.3.6.1.4.1.6889.2.1.14.1.10.1.1
avUnauthInetAddress INET-ADDRESS-MIBInetAddress .1.3.6.1.4.1.6889.2.1.14.1.10.1.10
avDuplicatedInetAddressType INET-ADDRESS-MIBInetAddressType .1.3.6.1.4.1.6889.2.1.14.1.10.1.11
avDuplicatedInetAddress INET-ADDRESS-MIBInetAddress .1.3.6.1.4.1.6889.2.1.14.1.10.1.12
avDuplicatedMACAddress SNMPv2-TCPhysAddress .1.3.6.1.4.1.6889.2.1.14.1.10.1.13
avUnauthUserName OctetString .1.3.6.1.4.1.6889.2.1.14.1.10.1.3
avUnauthProtocol Enumeration .1.3.6.1.4.1.6889.2.1.14.1.10.1.5
avUnauthInetAddressType INET-ADDRESS-MIBInetAddressType .1.3.6.1.4.1.6889.2.1.14.1.10.1.9
avASGAuthenticationFiles .1.3.6.1.4.1.6889.2.1.14.1.12
avASGAuthFileHeader .1.3.6.1.4.1.6889.2.1.14.1.12.3
avASGAuthFileAFID OctetString .1.3.6.1.4.1.6889.2.1.14.1.12.3.1
avASGAuthFileGenDate YYYY/MM/DDRFC1213-MIBDisplayString .1.3.6.1.4.1.6889.2.1.14.1.12.3.2
avASGAuthFileGenTime HH:MM:SSOctetString .1.3.6.1.4.1.6889.2.1.14.1.12.3.3
avASGAuthFileRelease RFC1213-MIBDisplayString .1.3.6.1.4.1.6889.2.1.14.1.12.3.4
avASGNotifications .1.3.6.1.4.1.6889.2.1.14.1.12.3.5
avASGNotificationsPrefix .1.3.6.1.4.1.6889.2.1.14.1.12.3.5.0
avSecLocalDateAndTime r/w SNMPv2-TCDateAndTime .1.3.6.1.4.1.6889.2.1.14.1.13
secTcpSynCookies .1.3.6.1.4.1.6889.2.1.14.1.2
secTcpSynCkiOpState OnOffType .1.3.6.1.4.1.6889.2.1.14.1.2.1
secTcpSynCkiCfgState r/w OnOffType .1.3.6.1.4.1.6889.2.1.14.1.2.2
secMngProtoTable .1.3.6.1.4.1.6889.2.1.14.1.3
secMngProtoEntry secMngProtoId .1.3.6.1.4.1.6889.2.1.14.1.3.1
secMngProtoId Enumeration .1.3.6.1.4.1.6889.2.1.14.1.3.1.1
secMngProtoStatus ServiceStateType .1.3.6.1.4.1.6889.2.1.14.1.3.1.2
secMngConformance .1.3.6.1.4.1.6889.2.1.14.1.4
secMngGroups .1.3.6.1.4.1.6889.2.1.14.1.4.1
secMngCompliance .1.3.6.1.4.1.6889.2.1.14.1.4.2
lsgLicManagement .1.3.6.1.4.1.6889.2.1.14.1.5
lsgLicMngTable .1.3.6.1.4.1.6889.2.1.14.1.5.1
lsgLicMngEntry lsgLicMngFeatureKeyword .1.3.6.1.4.1.6889.2.1.14.1.5.1.1
lsgLicMngFeatureKeyword r/w OctetString .1.3.6.1.4.1.6889.2.1.14.1.5.1.1.1
lsgLicMngFeatureType Enumeration .1.3.6.1.4.1.6889.2.1.14.1.5.1.1.2
lsgLicMngAdminStatus OnOffType .1.3.6.1.4.1.6889.2.1.14.1.5.1.1.3
lsgLicMngOperStatus OnOffType .1.3.6.1.4.1.6889.2.1.14.1.5.1.1.4
lsgLicMngCountedValue Unsigned32 .1.3.6.1.4.1.6889.2.1.14.1.5.1.1.5
lsgLicMngLastError Enumeration .1.3.6.1.4.1.6889.2.1.14.1.5.1.1.6
lsgLicMngConformance .1.3.6.1.4.1.6889.2.1.14.1.5.20
lsgLicMngGroups .1.3.6.1.4.1.6889.2.1.14.1.5.20.1
fips140 .1.3.6.1.4.1.6889.2.1.14.1.6
fipsEnhancedSecurityFlg OnOffType .1.3.6.1.4.1.6889.2.1.14.1.6.1
avMssNotifications .1.3.6.1.4.1.6889.2.1.14.1.7
avMssNotificationPrefix .1.3.6.1.4.1.6889.2.1.14.1.7.0
avMSSNotificationRate r/w SecondInteger32 .1.3.6.1.4.1.6889.2.1.14.1.7.2
avMSSVarbinds .1.3.6.1.4.1.6889.2.1.14.1.7.4
avMSSVarbindsDoSType Enumeration .1.3.6.1.4.1.6889.2.1.14.1.7.4.1
avMSSVarbindsDescription RFC1213-MIBDisplayString .1.3.6.1.4.1.6889.2.1.14.1.7.4.2
avMSSVarbindsSrcAddr SNMPv2-SMIIpAddress .1.3.6.1.4.1.6889.2.1.14.1.7.4.3
avMSSVarbindsDstAddr SNMPv2-SMIIpAddress .1.3.6.1.4.1.6889.2.1.14.1.7.4.4
avMSSVarbindsDstPort Integer32 .1.3.6.1.4.1.6889.2.1.14.1.7.4.5
avMSSVarbindsIpProtocol Integer32 .1.3.6.1.4.1.6889.2.1.14.1.7.4.6
avMSSVarbindsCount SNMPv2-SMICounter64 .1.3.6.1.4.1.6889.2.1.14.1.7.4.7
avMSSVarbindsSrcMACAddr SNMPv2-TCPhysAddress .1.3.6.1.4.1.6889.2.1.14.1.7.4.8
Notifications / Traps (9)
NameOIDDescription
avConfigurationEncKeyMismatchFault
G700-MG-MIBcmgTrapSubsystem G700-MG-MIBcmgTrapOnBoard G700-MG-MIBcmgTrapLocation LOAD-MIBgenAppFileId LOAD-MIBgenAppFileName LOAD-MIBgenAppFileVersionNumber LOAD-MIBgenOpLastFailureDisplay
.1.3.6.1.4.1.6889.2.1.14.1.10.0.1
Encryption keys mismatch error. Configuration download 
operation is aborted
avConfigurationMasterKeyChange
G700-MG-MIBcmgTrapSubsystem G700-MG-MIBcmgTrapOnBoard G700-MG-MIBcmgTrapLocation
.1.3.6.1.4.1.6889.2.1.14.1.10.0.2
Configuration Master key was changed
avUnAuthAccessEvent .1.3.6.1.4.1.6889.2.1.14.1.10.0.200
Notification on unauthorized login attempts. 
o For CLI and SNMP login failures:
  Both SNMP SSH and WEB management interfaces shall identify 
  situation and alert. 
  The reported information should include wrong user name,  
  host name and IP address of remote host. Passwords is not 
  reported because of the possibility to reveal password.
o For pre-shared-key (PSK) authentication failure in IKE:
  *	lntUnauthUserName - 
    - In IKE AM: the ID sent by the remote peer in the ID
      payload.
    - In IKE MM: the ID associated with the remote peer IP 
      in the running configuration.
  * avUnauthInetAddressType and avUnauthInetAddress - represents
  the source IP of the packet sent by the remote peer.
  * avUnauthProtocol - lntIKEAccess(500)
avAccountLockoutEvent .1.3.6.1.4.1.6889.2.1.14.1.10.0.201
After configurable number of failed attempts to authenticate a user, device 
penalized by locking them out for a pre-specified amount of time.
avIPv6AddressDuplicationEvent .1.3.6.1.4.1.6889.2.1.14.1.10.0.202
The trap is generated whenever there is a detection of IPv6 address 
(link-local or global IPv6 address) duplication as part of DAD.
avPasswordToExpireAlert
G700-MG-MIBcmgTrapSubsystem G700-MG-MIBcmgTrapOnBoard G700-MG-MIBcmgTrapLocation secMngNumOfDays2Expire
.1.3.6.1.4.1.6889.2.1.14.1.10.0.3
User password is about to expire in n days
avASGAFDownloadSuccess
G700-MG-MIBcmgTrapSubsystem G700-MG-MIBcmgTrapOnBoard G700-MG-MIBcmgTrapLocation LOAD-MIBgenAppFileId LOAD-MIBgenAppFileName LOAD-MIBgenAppFileVersionNumber avASGAuthFileAFID
.1.3.6.1.4.1.6889.2.1.14.1.12.3.5.0.1
AF download successfully accomplished
avASGAFDownloadFailure
G700-MG-MIBcmgTrapSubsystem G700-MG-MIBcmgTrapOnBoard G700-MG-MIBcmgTrapLocation LOAD-MIBgenAppFileId LOAD-MIBgenAppFileName LOAD-MIBgenAppFileVersionNumber LOAD-MIBgenOpLastFailureDisplay avASGAuthFileAFID
.1.3.6.1.4.1.6889.2.1.14.1.12.3.5.0.2
AF download Failed
avMSSDenialOfService .1.3.6.1.4.1.6889.2.1.14.1.7.0.1
The MSS notification sent on DoS attack