mibs/fortinet/FORTINET-FORTIAUTHENTICATOR-MIB
--
-- MODULE-IDENTITY
-- OrgName
-- Fortinet, Inc.
-- ContactInfo
-- Technical Support
-- e-mail: support@fortinet.com
-- http://www.fortinet.com
--
FORTINET-FORTIAUTHENTICATOR-MIB DEFINITIONS ::= BEGIN
IMPORTS
fnGenTrapMsg, FnIndex, fortinet
FROM FORTINET-CORE-MIB
MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
FROM SNMPv2-CONF
sysName
FROM SNMPv2-MIB
Gauge32, MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE
FROM SNMPv2-SMI
DisplayString, TEXTUAL-CONVENTION
FROM SNMPv2-TC;
fnFortiAuthenticatorMib MODULE-IDENTITY
LAST-UPDATED "201901170000Z"
ORGANIZATION
"Fortinet Technologies, Inc."
CONTACT-INFO
"Technical Support
email: support@fortinet.com
http://www.fortinet.com
"
DESCRIPTION
"MIB module for Fortinet FortiAuthenticator devices"
REVISION "202004160000Z"
DESCRIPTION
"Include RAID status"
REVISION "201901170000Z"
DESCRIPTION
"Include Fsso user data and add facmodel information"
REVISION "201506080000Z"
DESCRIPTION
"Include Radius proxy, high availability data"
REVISION "201211050000Z"
DESCRIPTION
"Initial version of FORTINET-FORTIAUTHENTICATOR-MIB."
::= { fortinet 113 }
--
-- FortiAuthenticator MIB Textual Conventions (TC)
--
FacHaState ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"Enumerated type for FAC High Availability states"
SYNTAX INTEGER {
unknownOrDetermining (1),
clusterPrimary (2),
clusterSecondary (3),
standalonePrimary (4),
loadBalancer (5),
disabled (255)
}
--
-- fortinet.fnFortiAuthenticatorMib
--
facTraps OBJECT IDENTIFIER
::= { fnFortiAuthenticatorMib 0 }
facSystem OBJECT IDENTIFIER
::= { fnFortiAuthenticatorMib 1 }
facHa OBJECT IDENTIFIER
::= { facSystem 201 }
facAuth OBJECT IDENTIFIER
::= { facSystem 202 }
facMIBConformance OBJECT IDENTIFIER
::= { fnFortiAuthenticatorMib 600 }
facModel OBJECT IDENTIFIER
::= { fnFortiAuthenticatorMib 100 }
--
-- fortinet.fnFortiAuthenticatorMib.facSystem
--
facSysModel OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION "System model string"
::= { facSystem 1 }
facSysSerial OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Device serial number"
::= { facSystem 2 }
facSysVersion OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Device firmware version"
::= { facSystem 3 }
facSysCpuUsage OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Instantaneous CPU usage"
::= { facSystem 4 }
facSysMemUsage OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Instantaneous memory utilization"
::= { facSystem 5 }
facSysLogDiskUsage OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Instantaneous log disk usage"
::= { facSystem 6 }
-- fnFortiAuthenticatorMib.facSystem.facHa
facHaCurrentStatus OBJECT-TYPE
SYNTAX FacHaState
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Instantaneous HA status for this node"
::= { facHa 1 }
-- fnFortiAuthenticatorMib.facSystem.facAuth
facAuthUserCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of local users"
::= { facAuth 1 }
facAuthGroupCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of user groups"
::= { facAuth 2 }
facFortiTokenCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of FortiTokens"
::= { facAuth 3 }
facAuthUsersRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of local users that can still be added before reaching the table limit"
::= { facAuth 4 }
facAuthGroupRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of user groups that can still be added before reaching the table limit"
::= { facAuth 5 }
facFortiTokenRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of FortiTokens that can still be added before reaching the table limit"
::= { facAuth 6 }
facRadiusNasCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius NAS"
::= { facAuth 7 }
facRadiusNasRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius NAS that can still be added before reaching the table limit"
::= { facAuth 8 }
facUserCertificateCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of user certificates"
::= { facAuth 9 }
facRadiusLoginsTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius logins since startup"
::= { facAuth 10 }
facRadiusLogins5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius logins in the last 5 minutes"
::= { facAuth 11 }
facRadiusFailuresTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius login failures since startup"
::= { facAuth 12 }
facRadiusFailures5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius login failures in the last 5 minutes"
::= { facAuth 13 }
facRadiusAccountingTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius accounting records since startup"
::= { facAuth 14 }
facRadiusAccounting5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius accounting records in the last 5 minutes"
::= { facAuth 15 }
facLdapLoginsTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Ldap logins since startup"
::= { facAuth 16 }
facLdapLogins5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Ldap logins in the last 5 minutes"
::= { facAuth 17 }
facLdapFailuresTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Ldap login failures since startup"
::= { facAuth 18 }
facLdapFailures5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Ldap login failures in the last 5 minutes"
::= { facAuth 19 }
facAuthEventsTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of authentication events since startup"
::= { facAuth 20 }
facAuthEvents5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of authentication events in the last 5 minutes"
::= { facAuth 21 }
facAuthFailuresTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of authentication failures since startup"
::= { facAuth 22 }
facAuthFailures5Mins OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of authentication failures in the last 5 minutes"
::= { facAuth 23 }
facRadiusProxyInTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius accounting proxy requests received since startup"
::= { facAuth 24 }
facRadiusProxyOutTotal OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of Radius accounting proxy requests sent since startup"
::= { facAuth 25 }
facFssoUserCount OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of signed-in fsso users"
::= { facAuth 26 }
facFssoUserRemaining OBJECT-TYPE
SYNTAX FnIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Number of fsso users can still signed in before reaching the table limit"
::= { facAuth 27 }
facRaidStatus OBJECT-TYPE
SYNTAX INTEGER {
none(0), -- no raid detected or status unknown
ok(1),
degraded(2), -- at least one failed disk, but raid is still functioning
failed(3), -- raid does not work any more, has to be deleted and re-created
initializing(4),
verifying(5),
rebuilding(6)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION "RAID status"
::= { facAuth 28 }
--
-- fnFortiAuthenticatorMib.facTraps
--
facTrapAuthUsersThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facAuthUsersRemaining }
STATUS current
DESCRIPTION
"The user table is nearly full."
::= { facTraps 100 }
facTrapAuthGroupThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facAuthGroupRemaining }
STATUS current
DESCRIPTION
"The user group table is nearly full."
::= { facTraps 101 }
facTrapRadiusNasThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facRadiusNasRemaining }
STATUS current
DESCRIPTION
"The Radius NAS table is nearly full."
::= { facTraps 102 }
facTrapAuthEventsThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facAuthEvents5Mins }
STATUS current
DESCRIPTION
"The Authentication request rate has exceded the configured threshhold."
::= { facTraps 103 }
facTrapAuthFailureThreshold NOTIFICATION-TYPE
OBJECTS { facSysSerial, facAuthFailures5Mins }
STATUS current
DESCRIPTION
"The Authentication failure rate has exceded the configured threshhold."
::= { facTraps 104 }
facTrapUserLockout NOTIFICATION-TYPE
OBJECTS { facSysSerial, sysName, fnGenTrapMsg }
STATUS current
DESCRIPTION
"A user has been locked out for repeated login failures."
::= { facTraps 105 }
facTrapHAStatusChange NOTIFICATION-TYPE
OBJECTS { facSysSerial, sysName, facHaCurrentStatus, fnGenTrapMsg }
STATUS current
DESCRIPTION
"The FAC device's HA status has changed."
::= { facTraps 106 }
facTrapHASyncActivityLow NOTIFICATION-TYPE
OBJECTS { facSysSerial, sysName, fnGenTrapMsg }
STATUS current
DESCRIPTION
"There has been low HA sync activity recently."
::= { facTraps 107 }
facTrapRaidStatusChange NOTIFICATION-TYPE
OBJECTS { facSysSerial, facRaidStatus }
STATUS current
DESCRIPTION
"The FAC device's RAID status has changed."
::= { facTraps 108 }
--
-- fnFortiAuthenticatorMib.facMIBConformance
--
facSystemConformanceGroup OBJECT-GROUP
OBJECTS { facSysModel, facSysSerial, facSysVersion,
facSysCpuUsage, facSysMemUsage, facSysLogDiskUsage,
facAuthUserCount, facAuthGroupCount, facFortiTokenCount,
facAuthUsersRemaining, facAuthGroupRemaining, facFortiTokenRemaining,
facRadiusNasCount, facRadiusNasRemaining, facUserCertificateCount,
facRadiusLoginsTotal, facRadiusLogins5Mins, facRadiusFailuresTotal,
facRadiusFailures5Mins, facRadiusAccountingTotal, facRadiusAccounting5Mins,
facLdapLoginsTotal, facLdapLogins5Mins, facLdapFailuresTotal,
facLdapFailures5Mins, facAuthEventsTotal, facAuthEvents5Mins,
facAuthFailuresTotal, facAuthFailures5Mins, facHaCurrentStatus,
facRadiusProxyInTotal, facRadiusProxyOutTotal,
facFssoUserCount, facFssoUserRemaining, facRaidStatus
}
STATUS current
DESCRIPTION "Basic FortiAuthenticator system information"
::= { facMIBConformance 1 }
facTrapsConformanceGroup NOTIFICATION-GROUP
NOTIFICATIONS { facTrapAuthUsersThreshold, facTrapAuthGroupThreshold,
facTrapRadiusNasThreshold, facTrapAuthEventsThreshold,
facTrapAuthFailureThreshold, facTrapUserLockout,
facTrapHAStatusChange, facTrapHASyncActivityLow,
facTrapRaidStatusChange }
STATUS current
DESCRIPTION "Event notifications."
::= { facMIBConformance 2 }
facMIBCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION "Compliance statement for FortiAuthenticator MIB"
MODULE
GROUP facSystemConformanceGroup
DESCRIPTION
"This group is mandatory for all FortiAuthenticator appliances
supporting this MIB."
GROUP facTrapsConformanceGroup
DESCRIPTION
"Traps are optional and may not be implemented on some
devices."
::= { facMIBConformance 100 }
-- facModel start
facvm OBJECT IDENTIFIER ::= { facModel 101 }
facvmhv OBJECT IDENTIFIER ::= { facModel 102 }
facvmxen OBJECT IDENTIFIER ::= { facModel 103 }
facvmkvm OBJECT IDENTIFIER ::= { facModel 104 }
facdocker OBJECT IDENTIFIER ::= { facModel 105 }
fac2hd OBJECT IDENTIFIER ::= { facModel 204 }
fac2he OBJECT IDENTIFIER ::= { facModel 205 }
fac4hc OBJECT IDENTIFIER ::= { facModel 303 }
fac4he OBJECT IDENTIFIER ::= { facModel 305 }
fac1kc OBJECT IDENTIFIER ::= { facModel 403 }
fac1kd OBJECT IDENTIFIER ::= { facModel 404 }
fac2ke OBJECT IDENTIFIER ::= { facModel 505 }
fac3kd OBJECT IDENTIFIER ::= { facModel 604 }
fac3ke OBJECT IDENTIFIER ::= { facModel 605 }
fac3hf OBJECT IDENTIFIER ::= { facModel 706 }
fac8hf OBJECT IDENTIFIER ::= { facModel 806 }
-- facModel end
END