LUM-SYSTEM-MIB: View SNMP OID List / Download MIB
VENDOR: LUMENTIS AB
| Home | MIB: LUM-SYSTEM-MIB | |||
|---|---|---|---|---|
| Download as: |
Download standard MIB format if you are planning to load a MIB file into some system (OS, Zabbix, PRTG ...) or view it with a MIB browser. CSV is more suitable for analyzing and viewing OID' and other MIB objects in excel. JSON and YAML formats are usually used in programing even though some systems can use MIB in YAML format (like Logstash).
|
|||
| Object Name | OID | Type | Access | Info |
| lumSystemMIBModule | 1.3.6.1.4.1.8708.1.1.4 | |||
| lumSystemConfs | 1.3.6.1.4.1.8708.2.2.1 | |||
| lumSystemGroups | 1.3.6.1.4.1.8708.2.2.1.1 | |||
| lumSystemCompl | 1.3.6.1.4.1.8708.2.2.1.2 | |||
| lumSystemMinimalGroups | 1.3.6.1.4.1.8708.2.2.1.3 | |||
| lumSystemMinimalCompl | 1.3.6.1.4.1.8708.2.2.1.4 | |||
| lumSystemMIBObjects | 1.3.6.1.4.1.8708.2.2.2 | |||
| sysGeneral | 1.3.6.1.4.1.8708.2.2.2.1 | |||
| sysGeneralTestAndIncr | 1.3.6.1.4.1.8708.2.2.2.1.1 |
Protection against simultaneous access from multiple managers. See SNMPv2-TC. |
||
| sysGeneralMibSpecVersion | 1.3.6.1.4.1.8708.2.2.2.1.2 |
The MIB specification version. |
||
| sysGeneralMibImplVersion | 1.3.6.1.4.1.8708.2.2.2.1.3 |
The MIB implementation version. |
||
| sysGeneralLastChangeTime | 1.3.6.1.4.1.8708.2.2.2.1.4 |
The time the state of MIB last changed. |
||
| sysGeneralTest | 1.3.6.1.4.1.8708.2.2.2.1.5 |
Object that can be used to verify write access (via SNMP). This attribute can be written via SNMP. |
||
| sysGeneralConfigLastChangeTime | 1.3.6.1.4.1.8708.2.2.2.1.6 |
The time the configuration of the MIB last changed. |
||
| sysGeneralLoginRecords | 1.3.6.1.4.1.8708.2.2.2.1.7 |
Enable/disable login records. The log can be viewed with the last command. off - Login records log disabled. on - Login records log enable. |
||
| sysGeneralUserTableSize | 1.3.6.1.4.1.8708.2.2.2.1.8 |
Number of rows available in the user table. |
||
| sysGeneralWriteTest | 1.3.6.1.4.1.8708.2.2.2.1.9 |
Object that can be used to verify write access (via SNMP). This attribute can be written via SNMP. |
||
| sysNode | 1.3.6.1.4.1.8708.2.2.2.2 | |||
| sysNodeName | 1.3.6.1.4.1.8708.2.2.2.2.1 |
An administratively-assigned name for this managed node. By convention, this is the nodes fully-qualified domain name. The node name may be composed of the following characters: A to Z ; uppercase characters a to z ; lower case characters 0 to 9 ; numeric characters - ; dash . ; dot, is used as a separator _ ; underscore, supported (but might not be supported by all DNS servers) A host name (label) can start or end with a letter or a number A host name (label) MUST NOT start or end with a - (dash) A host name (label) MUST NOT consist of all numeric values A host name (label) can be up to 63 characters |
||
| sysNodeContact | 1.3.6.1.4.1.8708.2.2.2.2.2 |
The textual identification of the contact person for this managed node, together with information on how to contact this person. Set to the empty string if not known. Example: Joe, e-mail: joe@localhost.localdomain |
||
| sysNodeLocation | 1.3.6.1.4.1.8708.2.2.2.2.3 |
The physical location of this node. Set to the empty string if not known. Example: Rack 5, in the system lab, third floor |
||
| sysNodeObjectId | 1.3.6.1.4.1.8708.2.2.2.2.4 |
The vendors authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determining what kind of box is being managed. |
||
| sysNodePrimaryNameServer | 1.3.6.1.4.1.8708.2.2.2.2.5 |
The name or IP address of the name server. Set to the empty string if not known. Example: dns.localdomain |
||
| sysNodeRunLevel | 1.3.6.1.4.1.8708.2.2.2.2.6 |
Note: This attribute is deprecated! Indicates the runlevel of the software. halt - Shutdown the entire node. single - Stop all applications and enter single user mode. normal - Normal operations. reboot - Restart the entire node. tbd: no network? tbd: restart with default configuration |
||
| sysNodeSecondaryNameServer | 1.3.6.1.4.1.8708.2.2.2.2.7 |
The name or IP address of the name server. Set to the empty string if not known. Example: dns.lumentis.se, 192.168.1.200 |
||
| sysNodeUptime | 1.3.6.1.4.1.8708.2.2.2.2.8 |
The uptime in string format. |
||
| sysNodeNeType | 1.3.6.1.4.1.8708.2.2.2.2.9 |
User configurable identifier of the type of node. Included in performance measurements reports. |
||
| sysNodeNeUserName | 1.3.6.1.4.1.8708.2.2.2.2.10 |
User configurable network element name. Included in performance measurements reports. |
||
| sysNodeNeDistinguishedName | 1.3.6.1.4.1.8708.2.2.2.2.11 |
User configurable network element distinguished name. Included in performance measurements reports. |
||
| sysNodeBootTime | 1.3.6.1.4.1.8708.2.2.2.2.12 |
Application start time. |
||
| sysNodeLocale | 1.3.6.1.4.1.8708.2.2.2.2.13 |
Determines what rules should be used when formatting and display items that are affected by language and locality. The following is currently affected: Date and time Decimal character Unit used for temperatures If locale is set to US English temperatures are converted to degrees Fahrenheit. Note: Only the default locale, C, is supported at the moment. |
||
| sysNodeVersion | 1.3.6.1.4.1.8708.2.2.2.2.14 |
The build version. |
||
| sysNodeCLLI | 1.3.6.1.4.1.8708.2.2.2.2.15 |
Common Language Location Identifier of NE. Specifies the location and function of telecommunications equipment or of a relevant location such as international border or the location of a supporting equipment, such as a pole or a manhole. |
||
| sysNodeFIC | 1.3.6.1.4.1.8708.2.2.2.2.16 |
Frame Identifier Code or Facility Interface Code for NE. FIC identifies the type of interface that the terminal equipment requires for compatible interconnection with wireline carrier facilities. |
||
| sysNodeTID | 1.3.6.1.4.1.8708.2.2.2.2.17 |
Target ID of NE. A unique identifier which is a combination of the CLLI and FIC (Location+Frame). |
||
| sysNodeLatitude | 1.3.6.1.4.1.8708.2.2.2.2.18 |
Latitude of the NE. A geographic coordinate ranging from -90 to +90 degree specifying the north-south position of a node on the Earth surface. Decimal Degree Representation is used as the latitude format. |
||
| sysNodeLongitude | 1.3.6.1.4.1.8708.2.2.2.2.19 |
Longitude of the NE. A geographic coordinate ranging from -180 to +180 degree specifying the east-west position of the node on the Earth surface. Decimal Degree Representation is used as the longitude format. |
||
| sysHostList | 1.3.6.1.4.1.8708.2.2.2.3 | |||
| sysHostTable | 1.3.6.1.4.1.8708.2.2.2.3.1 |
The well known host names list. |
||
| 1.3.6.1.4.1.8708.2.2.2.3.1.1 |
An entry in well known host names list. |
|||
| sysHostIndex | 1.3.6.1.4.1.8708.2.2.2.3.1.1.1 |
An arbitrary index assigned to each host entry. |
||
| sysHostIpAddress | 1.3.6.1.4.1.8708.2.2.2.3.1.1.2 |
The IP address of a well known host. Example: 192.168.1.200 |
||
| sysHostNames | 1.3.6.1.4.1.8708.2.2.2.3.1.1.3 |
The name(s) of a well known host. Set to the empty string if not known. Example: dns.lumentis.se dns |
||
| sysHostRowStatus | 1.3.6.1.4.1.8708.2.2.2.3.1.1.4 |
Manages creation and deletion of conceptual rows. See also SNMPv2-TC. |
||
| sysTime | 1.3.6.1.4.1.8708.2.2.2.4 | |||
| sysTimeLocal | 1.3.6.1.4.1.8708.2.2.2.4.1 |
The local date and time. |
||
| sysTimeZone | 1.3.6.1.4.1.8708.2.2.2.4.2 |
The name of the time zone in which node is located. A few examples: CET EET Europe/Stockholm Europe/London Europe/Copenhagen Europe/Berlin America/Chicago America/Kentucky/Louisville Asia/Tokyo Note: The notation used for naming the timezones where the offset to Coordinated Universal Time (UTC) is explicitly included, i.e. GMT-2, may be confusing. The offset indicates the time value to be added to the local time to get UTC. This means that the the offset is positive for timezones west of UTC and and negative east of UTC. This is the opposite of how timezones are often described. For example standard time in Sweden is GMT-1. On timezone maps zones east of UTC are often given a positive offset so that the very same zone is called GMT+1. This attribute can be written via SNMP. |
||
| sysTimePrimaryServer | 1.3.6.1.4.1.8708.2.2.2.4.3 |
The IP address of the primary SNTP/NTP server. Set to the 0.0.0.0 or empty string if not used. Example: 192.36.143.150 (time1.stupi.se) |
||
| sysTimeSecondaryServer | 1.3.6.1.4.1.8708.2.2.2.4.4 |
The IP address of the secondary SNTP/NTP server. Set to the 0.0.0.0 or empty string if not used. Example: 192.36.143.151 (time2.stupi.se) |
||
| sysTimeChangeLocalTime | 1.3.6.1.4.1.8708.2.2.2.4.5 |
Change the local date and time. Year - If no century is input the current century is set by default. Month - 1 to 12 Day - 1 to 31 Hour - 0 to 23 Minute - 0 to 59 Second - 0 to 59 Note: Setting of the local time is disabled if either the primary or secondary time server is set. |
||
| sysTimePrimaryIpAddress | 1.3.6.1.4.1.8708.2.2.2.4.6 |
The IP address of the primary SNTP/NTP server. Set to 0.0.0.0 if not used. Example: 192.36.143.150 (time1.stupi.se) This attribute can be written via SNMP. |
||
| sysTimeSecondaryIpAddress | 1.3.6.1.4.1.8708.2.2.2.4.7 |
The IP address of the primary SNTP/NTP server. Set to 0.0.0.0 if not used. Example: 192.36.143.150 (time1.stupi.se) This attribute can be written via SNMP. |
||
| sysLogList | 1.3.6.1.4.1.8708.2.2.2.5 | |||
| sysLogTable | 1.3.6.1.4.1.8708.2.2.2.5.1 |
The syslog configuration directives list. |
||
| 1.3.6.1.4.1.8708.2.2.2.5.1.1 |
An entry in the syslog configuration directives list. |
|||
| sysLogIndex | 1.3.6.1.4.1.8708.2.2.2.5.1.1.1 |
An arbitrary index assigned to each syslog configuration directive. |
||
| sysLogSelection | 1.3.6.1.4.1.8708.2.2.2.5.1.1.2 |
tbd description tbd examples |
||
| sysLogAction | 1.3.6.1.4.1.8708.2.2.2.5.1.1.3 |
tbd description tbd examples |
||
| sysLogRowStatus | 1.3.6.1.4.1.8708.2.2.2.5.1.1.4 |
Manages creation and deletion of conceptual rows. See also SNMPv2-TC. |
||
| sysUserList | 1.3.6.1.4.1.8708.2.2.2.6 | |||
| sysUserTable | 1.3.6.1.4.1.8708.2.2.2.6.1 |
The local user list. |
||
| 1.3.6.1.4.1.8708.2.2.2.6.1.1 |
An entry in the local user list. Prompts for the following when creating a new user: Password for the current user (the user in question or an administrator). New password for the user. New password again. Profile for the new user (default operator). |
|||
| sysUserIndex | 1.3.6.1.4.1.8708.2.2.2.6.1.1.1 |
An arbitrary index assigned to each entry. |
||
| sysUserName | 1.3.6.1.4.1.8708.2.2.2.6.1.1.2 |
The username must start with a lowercase alphabetical character. The rest of the username should be lowercase letters (a-z), numbers(0-9) or any of the following characters: -._ It is also possible to add $ as the last character. |
||
| sysUserPasswd | 1.3.6.1.4.1.8708.2.2.2.6.1.1.3 |
tbd description tbd examples |
||
| sysUserDescr | 1.3.6.1.4.1.8708.2.2.2.6.1.1.4 |
User description string. |
||
| sysUserLastChangeTime | 1.3.6.1.4.1.8708.2.2.2.6.1.1.5 |
tbd description tbd examples |
||
| sysUserExpireTime | 1.3.6.1.4.1.8708.2.2.2.6.1.1.6 |
tbd description tbd examples |
||
| sysUserRowStatus | 1.3.6.1.4.1.8708.2.2.2.6.1.1.7 |
Manages creation and deletion of conceptual rows. See also SNMPv2-TC. |
||
| sysUserProfile | 1.3.6.1.4.1.8708.2.2.2.6.1.1.8 |
The user authority profile. administrator - No restrictions. operator - Restrictions on user operations and some systems management operations. Otherwise read/write access. readonly - Read only access. |
||
| sysUserUid | 1.3.6.1.4.1.8708.2.2.2.6.1.1.9 |
User id. |
||
| sysUserChangePassword | 1.3.6.1.4.1.8708.2.2.2.6.1.1.10 |
Change user password. Permitted for the the user in question and administrators. Asks for the following: User database to update, Local or TACACS. The system supports update of either the local password or the TACACS password on a remote server. This choice is seen only when applicable. Password for the current user (the user in question or an administrator). New password for the user. New password again. Default password when a user is created is set to 1234567890. |
||
| sysUserClearPassword | 1.3.6.1.4.1.8708.2.2.2.6.1.1.11 |
Clear the user password. Only permitted for administrators. Asks for the following: Password for the current user. Note: Only changes the local password. If a RADIUS- or TACACS+-server is in use they may override the local configuration. |
||
| sysUserDisable | 1.3.6.1.4.1.8708.2.2.2.6.1.1.12 |
Disable the user. Clear or set the password to make the user available again. Only permitted for administrators. Asks for the following: Password for the current user. Note: Only disables the user locally. If a RADIUS- or TACACS+-server is in use they may override the local configuration. |
||
| sysUserEnable | 1.3.6.1.4.1.8708.2.2.2.6.1.1.13 |
Enable the user. Only permitted for administrators. Asks for the following: Password for the current user. Note: Only enables the user locally. If a RADIUS- or TACACS+-server is in use they may override the local configuration. |
||
| sysUserMode | 1.3.6.1.4.1.8708.2.2.2.6.1.1.14 |
Administrative status for the user. Note: Only shows the local user configuration. If a RADIUS- or TACACS+-server is in use they may override the local configuration. |
||
| sysRadius | 1.3.6.1.4.1.8708.2.2.2.7 | |||
| sysRadiusPrimaryServer | 1.3.6.1.4.1.8708.2.2.2.7.1 |
The IP address for the primary RADIUS-server. The port number used is 1812 (accounting, port 1813, is not enabled). Time-out is 3 seconds. Set to the 0.0.0.0 or empty string if not used. If either the server or the secret are not set the primary server is disabled. |
||
| sysRadiusPrimarySecret | 1.3.6.1.4.1.8708.2.2.2.7.2 |
The shared secret for the primary RADIUS-server. Set to empty string if not used. If either the server or the secret are not set the primary server is disabled. |
||
| sysRadiusSecondaryServer | 1.3.6.1.4.1.8708.2.2.2.7.3 |
The IP address for the secondary RADIUS-server. The port number used is 1812 (accounting, port 1813, is not enabled). Time-out is 3 seconds. Set to the 0.0.0.0 or empty string if not used. If either the server or the secret are not set the secondary server is disabled. |
||
| sysRadiusSecondarySecret | 1.3.6.1.4.1.8708.2.2.2.7.4 |
The shared secret for the secondary RADIUS-server. Set to empty string if not used. If either the server or the secret are not set the secondary server is disabled. |
||
| sysRadiusPrimaryIpAddress | 1.3.6.1.4.1.8708.2.2.2.7.5 |
The IP address for the primary RADIUS-server. The port number used is 1812 (accounting, port 1813, is not enabled). Time-out is 3 seconds. Set to 0.0.0.0 if not used. If either the server or the secret are not set the primary server is disabled. |
||
| sysRadiusSecondaryIpAddress | 1.3.6.1.4.1.8708.2.2.2.7.6 |
The IP address for the secondary RADIUS-server. The port number used is 1812 (accounting, port 1813, is not enabled). Time-out is 3 seconds. Set to 0.0.0.0 if not used. If either the server or the secret are not set the primary server is disabled. |
||
| sysRadiusPrimaryPort | 1.3.6.1.4.1.8708.2.2.2.7.7 |
The port number for the primary RADIUS server. |
||
| sysRadiusSecondaryPort | 1.3.6.1.4.1.8708.2.2.2.7.8 |
The port number used for the Secondary RADIUS server. |
||
| sysRadiusDefaultUserProfile | 1.3.6.1.4.1.8708.2.2.2.7.9 |
The user authority profile. administrator - No restrictions. operator - Restrictions on user operations and some systems management operations. Otherwise read/write access. readonly - Read only access. no radius template - The user radius is used as template. It should be created if RADIUS server is used. Otherwise both primary and secondary servers are disabled. |
||
| sysLicense | 1.3.6.1.4.1.8708.2.2.2.8 | |||
| sysLicenseExpireDate | 1.3.6.1.4.1.8708.2.2.2.8.1 |
Shows the date when the license will expire. |
||
| sysLicenseCustomer | 1.3.6.1.4.1.8708.2.2.2.8.2 |
Shows the name of the customer that holds the license. |
||
| sysLicenseExpiresSoon | 1.3.6.1.4.1.8708.2.2.2.8.3 |
Warns that the license will expire in 7 days, or less. |
||
| sysLicenseExpired | 1.3.6.1.4.1.8708.2.2.2.8.4 |
Indicates that the license has expired, or the license file is missing. |
||
| sysLicenseExpiredCause | 1.3.6.1.4.1.8708.2.2.2.8.5 |
Describes why the license expired alarm is raised. none - file is ok, no alarm. missing - the license file is missing. invalid - it is not a valid XML file, or some tags are missing. corrupt - the encryption key does not match the content of the file. expired - the license has expired. |
||
| sysLicenseFeatureEws | 1.3.6.1.4.1.8708.2.2.2.8.6 |
disabled - the feature ENM can not be used. enabled - the feature ENM can be used. demo - the feature is only for demo use. corrupt - the encryption key does not match. expired - the feature has expired. |
||
| sysLicenseFeatureOspf | 1.3.6.1.4.1.8708.2.2.2.8.7 |
disabled - the feature OSPF can not be used. enabled - the feature OSPF can be used. demo - the feature is only for demo use. corrupt - the encryption key does not match. expired - the feature has expired. |
||
| sysLicenseFeatureSnmp | 1.3.6.1.4.1.8708.2.2.2.8.8 |
disabled - the feature SNMP can not be used. enabled - the feature SNMP can be used. demo - the feature is only for demo use. corrupt - the encryption key does not match. expired - the feature has expired. |
||
| sysLicenseFeatureGmpls | 1.3.6.1.4.1.8708.2.2.2.8.9 |
disabled - the feature GMPLS can not be used. enabled - the feature GMPLS can be used. demo - the feature is only for demo use. corrupt - the encryption key does not match. expired - the feature has expired. |
||
| sysLicenseFeatureRudb | 1.3.6.1.4.1.8708.2.2.2.8.10 |
disabled - the feature RUDB can not be used. enabled - the feature RUDB can be used. demo - the feature is only for demo use. corrupt - the encryption key does not match. expired - the feature has expired. RUDB means remote used database and include TACACS and RADIUS. |
||
| sysLicenseInstallLicenseFile | 1.3.6.1.4.1.8708.2.2.2.8.11 |
Install a new license file. The license file can either be fetched from a remote server or installed from local directory. There are 3 cases: 1. Remote server. Give server addr and full path installLicenseFile <ip-addr>/<full path> installLicenseFile 192.168.10.27/tftp/license.xml 2. From a local directory installLicenseFile <full path> installLicenseFile /root/license.xml 3. From the local download directory /tftpboot/downloaded installLicenseFile <file name> installLicenseFile license.xml Regardless of the name of the file it will be installed as /etc/lumentis/license.xml |
||
| sysTacacs | 1.3.6.1.4.1.8708.2.2.2.9 | |||
| sysTacacsPrimaryServer | 1.3.6.1.4.1.8708.2.2.2.9.1 |
The IP address for the primary TACACS+-server. The port number used is 49. Time-out is 3 seconds. Set to the 0.0.0.0 or empty string if not used. |
||
| sysTacacsSecondaryServer | 1.3.6.1.4.1.8708.2.2.2.9.2 |
The IP address for the secondary TACACS+-server. The port number used is 49. Time-out is 3 seconds. Set to the 0.0.0.0 or empty string if not used. |
||
| sysTacacsSecret | 1.3.6.1.4.1.8708.2.2.2.9.3 |
The shared secret for the primary TACACS+-server. Set to empty string if not used. |
||
| sysTacacsSecondarySecret | 1.3.6.1.4.1.8708.2.2.2.9.4 |
The shared secret for the secondary TACACS+-server. Set to empty string if not used. |
||
| sysTacacsPrimaryIpAddress | 1.3.6.1.4.1.8708.2.2.2.9.5 |
The IP address for the primary TACACS+-server. The port number used is 49. Time-out is 3 seconds. Set to 0.0.0.0 if not used. |
||
| sysTacacsSecondaryIpAddress | 1.3.6.1.4.1.8708.2.2.2.9.6 |
The IP address for the secondary TACACS+-server. The port number used is 49. Time-out is 3 seconds. Set to 0.0.0.0 if not used. |
||
| sysAudit | 1.3.6.1.4.1.8708.2.2.2.10 | |||
| sysSecurity | 1.3.6.1.4.1.8708.2.2.2.11 | |||
| sysSecurityLocalConsoleAccess | 1.3.6.1.4.1.8708.2.2.2.11.1 |
When this parameter is disabled there is no way to access the board via RS-232. Note, the setting applies to all boards in all chassis. enabled - Access is allowed disabled - No access is allowed. The boot monitor and LINUX login are blocked. bootdisabled - The boot monitor is blocked while LINUX login is allowed. Only administrator can change the local console access settings. |
||
| sysSecurityChangeLocalConsoleAccess | 1.3.6.1.4.1.8708.2.2.2.11.2 |
Procedure to change Local Console Access |
||
| sysSecurityIpTablesStatus | 1.3.6.1.4.1.8708.2.2.2.11.3 |
This parameter shows if a system function is enabled in the node. unavailable - package not installed unsecure - package installed but not in use secure - package installed and in use |
||
| sysSecurityLocalCraftAccess | 1.3.6.1.4.1.8708.2.2.2.11.4 |
The local craft ETH access is used for connecting a PC which runs DHCP (Dynamic Host Control Protocol) for accessing the web (GUI) interface. Use lc in the address bar of the browser. The IP address of the DCN also works. When this parameter is disabled there is no way to access the board via Craft ETH port. enabled - Access is allowed disabled - No access is allowed. Only administrator can change the local craft ETH access settings. The Local Craft ETH runs in 1000Base-T mode (1G Eth) or lower speed depending on the auto negotiation. |
||
| sysSecurityChangeLocalCraftAccess | 1.3.6.1.4.1.8708.2.2.2.11.5 |
Procedure to change Local Craft ETH Access |
||
| sysSecurityAuthenticationOrder | 1.3.6.1.4.1.8708.2.2.2.11.6 |
This parameter shows the authentication order which is used by the system. localFirst - First authenticate with respect to local user database. If it fails, try remote server(s). If no remote servers are configured, the authentication will be Local-Only. remoteFirst - First authenticate with respect to the remote servers. If all remote servers are unreachable, try the local user database. If the remote authentication is denied, try the local user database. strictRemoteFirst - First authenticate with respect to the remote servers. If all remote servers are unreachable, try the local user database. If the remote authentication is denied, stop, access is denied. Only administrator can change the authenticate order settings. |
||
| sysSecurityFileSystemAccessRestrictions | 1.3.6.1.4.1.8708.2.2.2.11.7 |
Access rights to the file system of the node element. When restricted, restrictions to the file system are activated, these restrictions depends on the user authority profile. disabled - Default access rights: 1. Administrators (including root) and operators can execute CLI commands bash and telnet. 2. All users have full file system access using SFTP or FTP (if enabled). enabled - Restricted access rights to the file system. The following restrictions are applied: 1. Only administrator users (including root) can execute CLI commands bash and telnet. 2. When using SFTP: Readonly and operator users can only access /tftpboot/ and its subdirectories. Administrator users (including root) have full file system access. 3. When using FTP (if enabled): Readonly, operator and all administrator users except root can only access /tftpboot/ and its subdirectories. The root user have full file system access. When changed, the updated restrictions will be used at following FTP/SFTP sessions. On CU-SFP/III, active FTP sessions will be aborted at the point when file system access is changed. Only administrator can change the file system access restriction settings. |
||
| sysSecurityCUFrontICNPortAccess | 1.3.6.1.4.1.8708.2.2.2.11.8 |
The CU front ICN port access is used for internal connection between subracks. When this parameter is disabled there is no way to access next node via ICN1 or ICN2. enabled - Access is allowed disabled - No access is allowed. Only administrator can change the CU front ICN port access settings. |
||
| sysSecurityChangeCUFrontICNPortAccess | 1.3.6.1.4.1.8708.2.2.2.11.9 |
Procedure to change CU front ICN port access |
||
| sysSecuritySubrackICNPortAccess | 1.3.6.1.4.1.8708.2.2.2.11.10 |
The Subrack ICN port access is used for internal connection between subracks. When this parameter is disabled there is no way to access next subrack via ICN3 or ICN4. enabled - Access is allowed disabled - No access is allowed. Only administrator can change the Subrack ICN port access settings. |
||
| sysSecurityChangeSubrackICNPortAccess | 1.3.6.1.4.1.8708.2.2.2.11.11 |
Procedure to change Subrack ICN port access |
||
| sysSecurityMgmtAccessProofOfConnStatus | 1.3.6.1.4.1.8708.2.2.2.11.12 |
This parameter shows if the NE has lost the signal or not. The SNMP agent is regularly polling the NE and if the NE is not polled within a certain time period (set in parameter MgmtAccessProofOfConnectivity) we have proof of connectivity loss, and this parameter is set to disconnected. undefined - NE connectivity status not determined disconnected - NE lost connection connected - NE is connected |
||
| sysSecurityMgmtAccessProofOfConnectivity | 1.3.6.1.4.1.8708.2.2.2.11.13 |
Number of minutes that has to pass with no SNMP agent polls before the NE assumes that connectivity is lost. Only administrator can change the proof of connectivity settings. |
||
| sysSecurityAutoEnableBlockedMgmtPorts | 1.3.6.1.4.1.8708.2.2.2.11.14 |
A setting to turn off/on auto enabling of blocked management ports. Management ports in this context means DCN and Local craft ETH (Local craft ETH does not exist on all platforms). If the network element has not been polled by the SNMP agent (DNA-M) within the time that is set by the attribute Proof of Connectivity, the blocked management ports are automatically enabled (deblocked/unblocked). If SNMP polling is detected again by the network element (after a discontinuity) the ports will revert to their blocked state. on - The function to auto enable blocked ports is turned on. off - The function to auto enable blocked ports is turned off. Only administrator can change the auto enable blocked management ports settings. |
||
| sysSecurityBlockedMgmtPortsUnblocked | 1.3.6.1.4.1.8708.2.2.2.11.15 |
Blocked management ports (i.e. local craft and DCN ports) are unblocked. |
||
| sysManager | 1.3.6.1.4.1.8708.2.2.2.12 | |||
| sysManagerName | 1.3.6.1.4.1.8708.2.2.2.12.1 |
The name of Centralized Security Manager (DNA-M). This attribute shall NOT be set locally. The DNA-M managing the security features of the NE will set this. Requires administrator privileges to change. |
||
| sysManagerIPAddress | 1.3.6.1.4.1.8708.2.2.2.12.2 |
The address of Centralized Security Manager (DNA-M). This attribute shall NOT be set locally. The DNA-M managing the security features of the NE will set this. Requires administrator privileges to change. |
||
| sysManagerPolicyName | 1.3.6.1.4.1.8708.2.2.2.12.3 |
The name of the Security Policy, defined in DNA-M, that is assigned to this NE. This attribute shall NOT be set locally. The DNA-M managing the security features of the NE will set this. Requires administrator privileges to change. |
||
| sysManagerPlatform | 1.3.6.1.4.1.8708.2.2.2.12.4 |
NE platform information. Used by Centralized Security Manager (DNA-M). |
||