mibs/junos/JUNIPER-USER-AAA-MIB
-- *******************************************************************
-- Juniper User AAA objects MIB.
--
-- Copyright (c) 2001-2013, Juniper Networks, Inc.
-- All rights reserved.
--
-- The contents of this document are subject to change without notice.
-- *******************************************************************
JUNIPER-USER-AAA-MIB DEFINITIONS ::= BEGIN
IMPORTS
Counter64, IpAddress, Integer32, Counter32, Unsigned32,
NOTIFICATION-TYPE, MODULE-IDENTITY,
OBJECT-TYPE
FROM SNMPv2-SMI
TEXTUAL-CONVENTION, DisplayString, RowStatus, TruthValue
FROM SNMPv2-TC
Ipv6AddressPrefix, Ipv6AddressIfIdentifier, Ipv6Address
FROM IPV6-TC
EnabledStatus
FROM JUNIPER-MIMSTP-MIB
jnxUserAAAMibRoot
FROM JUNIPER-SMI
InetAddressType, InetAddress, InetAddressPrefixLength
FROM INET-ADDRESS-MIB;
jnxUserAAAMib MODULE-IDENTITY
LAST-UPDATED "201307100000Z"
ORGANIZATION "Juniper Networks, Inc."
CONTACT-INFO
"Juniper Technical Assistance Center
Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, CA 94089
E-mail: support@juniper.net
HTTP://www.juniper.net"
DESCRIPTION
"This module defines the objects pertaining to User authentication,
authorization and accounting"
REVISION "201307100000Z"
DESCRIPTION "Adding jnxUserAAADomainStripUsername and
jnxUserAAADomainOverridePassword to jnxUserAAADomain"
REVISION "201303180000Z"
DESCRIPTION "jnxAccessAuthServerEnabled, corrected description"
REVISION "201212290000Z"
DESCRIPTION "jnxUserAAADomainDynamicPorfile object has been
deprecated and replaced by jnxUserAAADomainDynamicProfile"
REVISION "201012080000Z"
DESCRIPTION "Updates related to adding address pool display"
REVISION "201011230000Z"
DESCRIPTION "Updates related to adding address pool traps"
REVISION "201002091110Z"
DESCRIPTION "Added jnxUserAAAAssignment, jnxUserAAAGeneral,
jnxUserAAADomainDelimiters,
jnxUserAAADomainParseDirection, jnxUserAAADomain,
jnxUserAAADomainTable, jnxUserAAADomainEntry,
jnxUserAAADomainName, jnxUserAAADomainStripDomain,
jnxUserAAADomainLogicalSystem,
jnxUserAAADomainRoutingInstance,
jnxUserAAADomainAddrPoolName,
jnxUserAAADomainDynamicPorfile,
jnxUserAAADomainTargetLogicalSystem,
jnxUserAAADomainTargetRoutingInstance,
jnxUserAAADomainTunnelProfile,
jnxUserAAADomainTunnelTable, jnxUserAAADomainTunnelEntry,
jnxUserAAADomainTunnelName, jnxUserAAADomainTunnelDefId,
jnxUserAAADomainTunnelPreference,
jnxUserAAADomainTunnelRemoteGwName,
jnxUserAAADomainTunnelRemoteGwAddress,
jnxUserAAADomainTunnelSourceGwName,
jnxUserAAADomainTunnelSourceGwAddress,
jnxUserAAADomainTunnelSecret,
jnxUserAAADomainTunnelLogicalSystems,
jnxUserAAADomainTunnelRoutingInstance,
jnxUserAAADomainTunnelMedium, jnxUserAAADomainTunnelType,
jnxUserAAADomainTunnelId,
jnxUserAAADomainTunnelMaxSessions,
jnxUserAAADomainPadnTable, jnxUserAAADomainPadnEntry,
jnxUserAAADomainPadnIpAddress,
jnxUserAAADomainPadnIpMask, jnxUserAAADomainPadnDistance,
jnxUserAAAAccessProfile, jnxUserAAAAccessProfileGeneral,
jnxUserAAAAccessProfileTable,
jnxUserAAAAccessProfileEntry,
jnxUserAAAAccessProfileName,
jnxUserAAAAccessProfileAuthenticationOrder,
jnxUserAAAAccessProfileAccountingOrder,
jnxUserAAAAccessProfileAuthorizationOrder,
jnxUserAAAAccessProfileProvisioningOrder,
jnxUserAAAAccessProfileAccStopOnFailure,
jnxUserAAAAccessProfileAccStopOnDeny,
jnxUserAAAAccessProfileImmediateUpdate,
jnxUserAAAAccessProfileCoaImmediateUpdate,
jnxUserAAAAccessProfileInterval,
jnxUserAAAAccessProfileStatType."
REVISION "200708210000Z"
DESCRIPTION "Updates related to SecurID authentication"
REVISION "200705140000Z"
DESCRIPTION "Creation Date"
::= { jnxUserAAAMibRoot 1 }
jnxUserAAANotifications OBJECT IDENTIFIER ::= { jnxUserAAAMib 0 }
jnxUserAAAObjects OBJECT IDENTIFIER ::= { jnxUserAAAMib 1 }
-- ***************************************************************
-- Next Branch node.
-- ***************************************************************
jnxUserAAAGlobalStats OBJECT IDENTIFIER ::= { jnxUserAAAObjects 1 }
jnxUserAAAAccessAuthStats OBJECT IDENTIFIER ::= { jnxUserAAAObjects 2 }
jnxUserAAATrapVars OBJECT IDENTIFIER ::= { jnxUserAAAObjects 3 }
jnxUserAAAAccessPool OBJECT IDENTIFIER ::= { jnxUserAAAObjects 4 }
jnxUserAAAAssignment OBJECT IDENTIFIER ::= { jnxUserAAAObjects 5 }
jnxUserAAAAccessProfile OBJECT IDENTIFIER ::= { jnxUserAAAObjects 6 }
-- ***************************************************************
-- Textual Conventions
-- ***************************************************************
JnxAuthenticateType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"There several way to authenticate a user, these are
the types:
radius - authentication via a radius server.
local - local authenticaiton.
ldap - authentication via a LDAP server.
securid- authentication via RSA's SecurID authentication server
jsrc - authentication via jsrc"
SYNTAX INTEGER {
none (0),
radius (1),
local (2),
ldap (3),
securid (4),
jsrc (5)
}
JnxAccountingType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"There several choices for accounting, these are
the types:
radius - accounting via a radius server.
local - local accounting.
ldap - accounting via a LDAP server.
securid- accounting via RSA's SecurID accounting server
jsrc - accounting via jsrc"
SYNTAX INTEGER {
none (0),
radius (1),
local (2),
ldap (3),
securid (4),
jsrc (5)
}
JnxAuthorizationType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"There several choices for authorization, these are
the types:
radius - authorization via a radius server.
local - local authorization.
ldap - authorization via a LDAP server.
securid- authorization via RSA's SecurID authorization server
jsrc - authorization via jsrc"
SYNTAX INTEGER {
none (0),
radius (1),
local (2),
ldap (3),
securid (4),
jsrc (5)
}
JnxProvisioningType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"There several choices for provisioning, these are
the types:
radius - provisioning via a radius server.
local - local provisioning.
ldap - provisioning via a LDAP server.
securid- provisioning via RSA's SecurID provisioning server
jsrc - provisioning via jsrc"
SYNTAX INTEGER {
none (0),
radius (1),
local (2),
ldap (3),
securid (4),
jsrc (5)
}
-- ***************************************************************
-- Statistic counters for related to access authentication.
-- ***************************************************************
jnxTotalAuthenticationRequests OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total authentication requests received."
::= { jnxUserAAAGlobalStats 1 }
jnxTotalAuthenticationResponses OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total authentication responses."
::= { jnxUserAAAGlobalStats 2 }
-- ***************************************************************
-- Authentication Statistic Table :
-- ***************************************************************
jnxUserAAAStatTable OBJECT-TYPE
SYNTAX SEQUENCE OF JnxAuthStatEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table exposes the user authentication statistics."
::= { jnxUserAAAAccessAuthStats 1 }
jnxUserAAAStatEntry OBJECT-TYPE
SYNTAX JnxAuthStatEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Statistic entry collects for authentication."
INDEX { jnxUserAAAStatAuthType }
::= { jnxUserAAAStatTable 1 }
JnxAuthStatEntry ::= SEQUENCE
{
jnxUserAAAStatAuthType JnxAuthenticateType,
jnxUserAAAStatRequestReceived Counter64,
jnxUserAAAStatAccessAccepted Counter64,
jnxUserAAAStatAccessRejected Counter64
}
jnxUserAAAStatAuthType OBJECT-TYPE
SYNTAX JnxAuthenticateType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entry indicates the authentication type. It
uniquely identifies the statistics counters related to
its authentication."
::= { jnxUserAAAStatEntry 1 }
jnxUserAAAStatRequestReceived OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of request received."
::= { jnxUserAAAStatEntry 2 }
jnxUserAAAStatAccessAccepted OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of access granted. It is an aggregated
statistics for this type of authenticaiton."
::= { jnxUserAAAStatEntry 3 }
jnxUserAAAStatAccessRejected OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This number of access request rejected. It is an aggregated
statistics for this type of authentication."
::= { jnxUserAAAStatEntry 4 }
-- ********************************************************************
-- Objects used for the traps
-- ********************************************************************
jnxUserAAAServerName OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The server name which identifies the authentication server."
::= { jnxUserAAATrapVars 1 }
jnxUserAAAAddressPoolName OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The address pool name which identifies the local address pool."
::= { jnxUserAAATrapVars 2 }
-- ***************************************************************
-- definition of access authentication related traps.
-- ***************************************************************
--
-- Authentication Service is up
--
jnxAccessAuthServiceUp NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"An access authentication trap signifies that the
specified service has started. "
::= { jnxUserAAANotifications 1 }
--
-- Authentication Service is down
--
jnxAccessAuthServiceDown NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"An access authentication trap signifies that the
specified service has been stopped."
::= { jnxUserAAANotifications 2 }
--
-- Authentication server is not accessible.
--
jnxAccessAuthServerDisabled NOTIFICATION-TYPE
OBJECTS { jnxUserAAAServerName }
STATUS current
DESCRIPTION
"An access authentication trap signifies that
the External authentication server is not responding."
::= { jnxUserAAANotifications 3 }
--
-- Authentication server state change to UP .
--
jnxAccessAuthServerEnabled NOTIFICATION-TYPE
OBJECTS { jnxUserAAAServerName }
STATUS current
DESCRIPTION
"An access authentication trap signifies that the
AAA client has changed the status of the External authentication server to UP."
::= { jnxUserAAANotifications 4 }
--
-- Address Pool or Linked Pool chain has reached its warning
-- threshold.
--
jnxAccessAuthAddressPoolHighThreshold NOTIFICATION-TYPE
OBJECTS { jnxUserAAAAddressPoolName }
STATUS current
DESCRIPTION
"An access authentication trap signifies that
the address pool has reached its high threshold."
::= { jnxUserAAANotifications 5 }
--
-- Address Pool or Linked Pool chain has reached its abate
-- threshold.
--
jnxAccessAuthAddressPoolAbateThreshold NOTIFICATION-TYPE
OBJECTS { jnxUserAAAAddressPoolName }
STATUS current
DESCRIPTION
"An access authentication trap signifies that
the address pool has reached its abate threshold"
::= { jnxUserAAANotifications 6 }
--
-- Address Pool or Linked Pool chain is completely used up.
--
jnxAccessAuthAddressPoolOutOfAddresses NOTIFICATION-TYPE
OBJECTS { jnxUserAAAAddressPoolName }
STATUS current
DESCRIPTION
"An access authentication trap signifies that
an Out Of Addresses event occured on the pool."
::= { jnxUserAAANotifications 7 }
--
-- Address Pool or Linked Pool chain is completely used up.
--
jnxAccessAuthAddressPoolOutOfMemory NOTIFICATION-TYPE
OBJECTS { jnxUserAAAAddressPoolName }
STATUS current
DESCRIPTION
"An access authentication trap signifies that
an Out Of Memory event occured on the pool."
::= { jnxUserAAANotifications 8 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Managed objects for Access profile
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
jnxUserAAAAccessPoolGeneral OBJECT IDENTIFIER ::= { jnxUserAAAAccessPool 1 }
jnxUserAAAAccessPoolTable OBJECT-TYPE
SYNTAX SEQUENCE OF JnxUserAAAAccessPool
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entries in this table specify the address pools."
::= { jnxUserAAAAccessPoolGeneral 1 }
jnxUserAAAAccessPoolEntry OBJECT-TYPE
SYNTAX JnxUserAAAAccessPool
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A read-only description of the local address pools."
INDEX { jnxUserAAAAccessPoolIdent }
::= { jnxUserAAAAccessPoolTable 1 }
JnxUserAAAAccessPool ::= SEQUENCE {
jnxUserAAAAccessPoolIdent Unsigned32,
jnxUserAAAAccessPoolRoutingInstance DisplayString,
jnxUserAAAAccessPoolName DisplayString,
jnxUserAAAAccessPoolLinkName DisplayString,
jnxUserAAAAccessPoolFamilyType InetAddressType,
jnxUserAAAAccessPoolInetNetwork InetAddress,
jnxUserAAAAccessPoolInetPrefixLength InetAddressPrefixLength,
jnxUserAAAAccessPoolOutOfMemory Counter64,
jnxUserAAAAccessPoolOutOfAddresses Counter64,
jnxUserAAAAccessPoolAddressTotal Counter64,
jnxUserAAAAccessPoolAddressesInUse Counter64,
jnxUserAAAAccessPoolAddressUsage INTEGER,
jnxUserAAAAccessPoolAddressUsageHigh INTEGER,
jnxUserAAAAccessPoolAddressUsageAbate INTEGER
}
jnxUserAAAAccessPoolIdent OBJECT-TYPE
SYNTAX Unsigned32 (1..4294967295)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The address identifier key."
::= { jnxUserAAAAccessPoolEntry 1 }
jnxUserAAAAccessPoolRoutingInstance OBJECT-TYPE
SYNTAX DisplayString (SIZE(1..63))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The routing instance of the address pool."
::= { jnxUserAAAAccessPoolEntry 2 }
jnxUserAAAAccessPoolName OBJECT-TYPE
SYNTAX DisplayString (SIZE(1..63))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The address pool name."
::= { jnxUserAAAAccessPoolEntry 3 }
jnxUserAAAAccessPoolLinkName OBJECT-TYPE
SYNTAX DisplayString (SIZE(1..63))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The address pool link name."
::= { jnxUserAAAAccessPoolEntry 4 }
jnxUserAAAAccessPoolFamilyType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The family type of this pool."
::= { jnxUserAAAAccessPoolEntry 5 }
jnxUserAAAAccessPoolInetNetwork OBJECT-TYPE
SYNTAX InetAddress (SIZE(2..48))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The Match criteria for this pool. Network or Prefix"
::= { jnxUserAAAAccessPoolEntry 6 }
jnxUserAAAAccessPoolInetPrefixLength OBJECT-TYPE
SYNTAX InetAddressPrefixLength
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The Prefix Length for an IPv6 pool"
::= { jnxUserAAAAccessPoolEntry 7 }
jnxUserAAAAccessPoolOutOfMemory OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The Number of times this pool has flagged an Out of Memory condition."
::= { jnxUserAAAAccessPoolEntry 8 }
jnxUserAAAAccessPoolOutOfAddresses OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The Number of times this pool has flagged an Out of Address condition."
::= { jnxUserAAAAccessPoolEntry 9 }
jnxUserAAAAccessPoolAddressTotal OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of Addresses or prefixes in this pool."
::= { jnxUserAAAAccessPoolEntry 10 }
jnxUserAAAAccessPoolAddressesInUse OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of Addresses or prefixes given out from this pool."
::= { jnxUserAAAAccessPoolEntry 11 }
jnxUserAAAAccessPoolAddressUsage OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The percentage of addresses used in this pool or linked pool.
If this pool is the head of a linked chain of pools, this number
reflects the Usage for the whole chain. Conversely, if this pool
it part of a linked chain of pools but not the head of the chain,
the value will not be used."
::= { jnxUserAAAAccessPoolEntry 12 }
jnxUserAAAAccessPoolAddressUsageHigh OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The configured high percentage threshold of addresses used in this
pool or linked pool. An SNMP trap is generated when this threshold
is exceeded. This trap will only be generated for unlinked pools or
pools that are the head of a linked chain of pools Conversely, if
this pool it part of a linked chain of pools but not the head of the
chain, then no traps will be generated."
::= { jnxUserAAAAccessPoolEntry 13 }
jnxUserAAAAccessPoolAddressUsageAbate OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The configured abate percentage threshold of addresses used in this
pool or linked pool. An SNMP trap clear is generated when address use
falls below this threshold percentage. This trap will only be generated
for unlinked pools or pools that are the head of a linked chain of
pools Conversely, if this pool it part of a linked chain of pools but
not the head of the chain, then no traps will be generated."
::= { jnxUserAAAAccessPoolEntry 14 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Managed objects for Assignment functions
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
jnxUserAAAGeneral OBJECT IDENTIFIER ::= { jnxUserAAAAssignment 1 }
jnxUserAAADomainDelimiters OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..8))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The list of delimiters used to separate the user's name from the
user's domain in the username field. The default is '@'."
::= { jnxUserAAAGeneral 1 }
jnxUserAAADomainParseDirection OBJECT-TYPE
SYNTAX INTEGER {
rightToLeft(1),
leftToRight(2) }
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The direction in which the user's name is parsed: either search
for domain delimiter from left to right or right to left; first
delimiter marks boundry. The default is right to left."
DEFVAL { rightToLeft }
::= { jnxUserAAAGeneral 2 }
jnxUserAAADomain OBJECT IDENTIFIER ::= { jnxUserAAAAssignment 2 }
jnxUserAAADomainTable OBJECT-TYPE
SYNTAX SEQUENCE OF JnxUserAAADomainEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entries in this table specify the assignment of a remote access
user to a logical system, based on the user's domain."
::= { jnxUserAAADomain 1 }
jnxUserAAADomainEntry OBJECT-TYPE
SYNTAX JnxUserAAADomainEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A specification of the logical system to which users on a specified
domain should be assigned."
INDEX { IMPLIED jnxUserAAADomainName }
::= { jnxUserAAADomainTable 1 }
JnxUserAAADomainEntry ::= SEQUENCE {
jnxUserAAADomainName DisplayString,
jnxUserAAADomainStripDomain TruthValue,
jnxUserAAADomainLogicalSystem DisplayString,
jnxUserAAADomainRoutingInstance DisplayString,
jnxUserAAADomainAddrPoolName DisplayString,
jnxUserAAADomainDynamicPorfile DisplayString,
jnxUserAAADomainTargetLogicalSystem DisplayString,
jnxUserAAADomainTargetRoutingInstance DisplayString,
jnxUserAAADomainTunnelProfile DisplayString,
jnxUserAAADomainDynamicProfile DisplayString,
jnxUserAAADomainStripUsername INTEGER,
jnxUserAAADomainOverridePassword TruthValue }
jnxUserAAADomainName OBJECT-TYPE
SYNTAX DisplayString (SIZE(1..63))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The domain name uniquely identifying this entry."
::= { jnxUserAAADomainEntry 1 }
jnxUserAAADomainStripDomain OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Enables/disables the domain name stripping feature, which causes
the system to strip the domain name before sending the
access-request to RADIUS for authentication."
DEFVAL { false }
::= { jnxUserAAADomainEntry 2 }
jnxUserAAADomainLogicalSystem OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The name of the logical system, which will be used by the AAA
subsystem for this session. If not specified, will be mapped to
default."
DEFVAL { "" }
::= { jnxUserAAADomainEntry 3 }
jnxUserAAADomainRoutingInstance OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The name of the routing instance, which will be used by the AAA
subsystem for this session. If not specified, will be mapped to
default."
DEFVAL { "" }
::= { jnxUserAAADomainEntry 4 }
jnxUserAAADomainAddrPoolName OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..63))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The configured the address-pool-name for the domain name."
DEFVAL { "" }
::= { jnxUserAAADomainEntry 5 }
jnxUserAAADomainDynamicPorfile OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The configured dynamic-profile which will be used for this session
upon succeeding validation."
DEFVAL { "" }
::= { jnxUserAAADomainEntry 6 }
jnxUserAAADomainTargetLogicalSystem OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The configured target logical-system that this session will need to
be mapped to. If not specified, will be mapped to default."
::= { jnxUserAAADomainEntry 7 }
jnxUserAAADomainTargetRoutingInstance OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The configured routing-instance that this session will need to be
mapped to."
::= { jnxUserAAADomainEntry 8 }
jnxUserAAADomainTunnelProfile OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The associated tunnel profile."
::= { jnxUserAAADomainEntry 9 }
jnxUserAAADomainDynamicProfile OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The configured dynamic-profile to be used for this session."
DEFVAL { "" }
::= { jnxUserAAADomainEntry 10 }
jnxUserAAADomainStripUsername OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
leftToRight(1),
rightToLeft(2) }
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Displays the strip-username configuration."
DEFVAL { 0 }
::= { jnxUserAAADomainEntry 11 }
jnxUserAAADomainOverridePassword OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Displays the override-password configuration."
DEFVAL { false }
::= { jnxUserAAADomainEntry 12 }
jnxUserAAADomainTunnelTable OBJECT-TYPE
SYNTAX SEQUENCE OF JnxUserAAADomainTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entries in this table specify the tunnels associated with a
domain."
::= { jnxUserAAADomain 2 }
jnxUserAAADomainTunnelEntry OBJECT-TYPE
SYNTAX JnxUserAAADomainTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A specification of the tunnels associated with a domain."
INDEX { jnxUserAAADomainTunnelName,
jnxUserAAADomainTunnelDefId }
::= { jnxUserAAADomainTunnelTable 1 }
JnxUserAAADomainTunnelEntry ::= SEQUENCE {
jnxUserAAADomainTunnelName OCTET STRING,
jnxUserAAADomainTunnelDefId Integer32,
jnxUserAAADomainTunnelPreference Integer32,
jnxUserAAADomainTunnelRemoteGwName DisplayString,
jnxUserAAADomainTunnelRemoteGwAddress IpAddress,
jnxUserAAADomainTunnelSourceGwName DisplayString,
jnxUserAAADomainTunnelSourceGwAddress IpAddress,
jnxUserAAADomainTunnelSecret DisplayString,
jnxUserAAADomainTunnelLogicalSystems DisplayString,
jnxUserAAADomainTunnelRoutingInstance DisplayString,
jnxUserAAADomainTunnelMedium INTEGER,
jnxUserAAADomainTunnelType INTEGER,
jnxUserAAADomainTunnelId DisplayString,
jnxUserAAADomainTunnelMaxSessions Unsigned32}
jnxUserAAADomainTunnelName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(1..63))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The domain name associated with this entry."
::= { jnxUserAAADomainTunnelEntry 1 }
jnxUserAAADomainTunnelDefId OBJECT-TYPE
SYNTAX Integer32 (1..31)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The tunnel definition id value associated with this entry."
::= { jnxUserAAADomainTunnelEntry 2 }
jnxUserAAADomainTunnelPreference OBJECT-TYPE
SYNTAX Integer32 (1..31)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel's preference value associated with this entry. "
::= { jnxUserAAADomainTunnelEntry 3 }
jnxUserAAADomainTunnelRemoteGwName OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This name specifies the hostname expected from the peer (the LNS)
when a tunnel is setup."
::= { jnxUserAAADomainTunnelEntry 4 }
jnxUserAAADomainTunnelRemoteGwAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"IP address of LNS tunnel endpoint"
::= { jnxUserAAADomainTunnelEntry 5 }
jnxUserAAADomainTunnelSourceGwName OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This name specifies the hostname expected from the peer (the LNS)
when a tunnel is setup."
::= { jnxUserAAADomainTunnelEntry 6 }
jnxUserAAADomainTunnelSourceGwAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The source address of the tunnel (overrides the default address for
this LS/RI.) "
::= { jnxUserAAADomainTunnelEntry 7 }
jnxUserAAADomainTunnelSecret OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel password associated with this entry."
::= { jnxUserAAADomainTunnelEntry 8 }
jnxUserAAADomainTunnelLogicalSystems OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The logical systems associated with this entty."
::= { jnxUserAAADomainTunnelEntry 9 }
jnxUserAAADomainTunnelRoutingInstance OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The routing instance associated with this entty."
::= { jnxUserAAADomainTunnelEntry 10 }
jnxUserAAADomainTunnelMedium OBJECT-TYPE
SYNTAX INTEGER {
tunnelMediumIPv4(1),
tunnelMediumUnknown(2) }
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel medium associated with this entry. The medium dictates
the format of the tunnel address."
::= { jnxUserAAADomainTunnelEntry 11 }
jnxUserAAADomainTunnelType OBJECT-TYPE
SYNTAX INTEGER {
tunnelL2tp(1),
tunnelUnknown(2),
tunnelL2f(3) }
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel type associated with this entry."
::= { jnxUserAAADomainTunnelEntry 12 }
jnxUserAAADomainTunnelId OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel identifier associated with this entry."
::= { jnxUserAAADomainTunnelEntry 13 }
jnxUserAAADomainTunnelMaxSessions OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum number of tunnel sessions allowed in this tunnel
entry."
::= { jnxUserAAADomainTunnelEntry 14 }
jnxUserAAADomainPadnTable OBJECT-TYPE
SYNTAX SEQUENCE OF JnxUserAAADomainPadnEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entries in this table specify the PPPoE active discovery
network (PADN) parameters associated with a domain."
::= { jnxUserAAADomain 3 }
jnxUserAAADomainPadnEntry OBJECT-TYPE
SYNTAX JnxUserAAADomainPadnEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A specification of the PPPoE active discovery network parameters
associated with a domain."
INDEX { jnxUserAAADomainName,
jnxUserAAADomainPadnIpAddress,
jnxUserAAADomainPadnIpMask }
::= { jnxUserAAADomainPadnTable 1 }
JnxUserAAADomainPadnEntry ::= SEQUENCE {
jnxUserAAADomainPadnIpAddress IpAddress,
jnxUserAAADomainPadnIpMask IpAddress,
jnxUserAAADomainPadnDistance Integer32 }
jnxUserAAADomainPadnIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The IP address of this entry."
::= { jnxUserAAADomainPadnEntry 1 }
jnxUserAAADomainPadnIpMask OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The IP mask of this entry."
::= { jnxUserAAADomainPadnEntry 2 }
jnxUserAAADomainPadnDistance OBJECT-TYPE
SYNTAX Integer32 (0..255)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The administrative distance metric of this entry."
::= { jnxUserAAADomainPadnEntry 3 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Managed objects for Access profile
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
jnxUserAAAAccessProfileGeneral OBJECT IDENTIFIER ::= { jnxUserAAAAccessProfile 1 }
jnxUserAAAAccessProfileTable OBJECT-TYPE
SYNTAX SEQUENCE OF JnxUserAAAAccessProfileEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entries in this table specify the assignment of authentication
methods for a particular subscriber type."
::= { jnxUserAAAAccessProfileGeneral 1 }
jnxUserAAAAccessProfileEntry OBJECT-TYPE
SYNTAX JnxUserAAAAccessProfileEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A specification of the authentication methods for a particular
subscriber type."
INDEX { IMPLIED jnxUserAAAAccessProfileName }
::= { jnxUserAAAAccessProfileTable 1 }
JnxUserAAAAccessProfileEntry ::= SEQUENCE {
jnxUserAAAAccessProfileName DisplayString,
jnxUserAAAAccessProfileAuthenticationOrder OCTET STRING,
jnxUserAAAAccessProfileAccountingOrder OCTET STRING,
jnxUserAAAAccessProfileAuthorizationOrder OCTET STRING,
jnxUserAAAAccessProfileProvisioningOrder OCTET STRING,
jnxUserAAAAccessProfileAccStopOnFailure TruthValue,
jnxUserAAAAccessProfileAccStopOnDeny TruthValue,
jnxUserAAAAccessProfileImmediateUpdate TruthValue,
jnxUserAAAAccessProfileCoaImmediateUpdate TruthValue,
jnxUserAAAAccessProfileInterval Integer32,
jnxUserAAAAccessProfileStatType INTEGER
}
jnxUserAAAAccessProfileName OBJECT-TYPE
SYNTAX DisplayString (SIZE(1..63))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The access profile name."
::= { jnxUserAAAAccessProfileEntry 1 }
jnxUserAAAAccessProfileAuthenticationOrder OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..5))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The set of authentication mechanisms configured on this system. Each
octet in this object contains one of the values defined in the
JnxAuthenticateType TEXTUAL-CONVENTION.
The system will sequence through each octet of this object starting at
octet 1 and attempt to use the corresponding authentication protocol
defined by JnxAuthenticateType.
If an authentication protocol is configured and attempts to reach the
authentication server fail, the system will move to the next octet in
this object and retry the authentication in the form dictated by the
corresponding authentication protocoltype. The process of sequencing
thru each octet will stop if the authentication server is successfully
contacted, or there are no more configured octets in this object."
::= { jnxUserAAAAccessProfileEntry 2 }
jnxUserAAAAccessProfileAccountingOrder OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..5))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The set of accounting mechanisms configured on this system. Each
octet in this object contains one of the values defined in the
JnxAccountingType TEXTUAL-CONVENTION.
The system will sequence through each octet of this object starting at
octet 1 and attempt to use the corresponding accounting protocol
defined by JnxAccountingType.
If an accounting protocol is configured and attempts to reach the
accounting server fail, the system will move to the next octet in
this object and retry the accounting in the form dictated by the
corresponding accounting protocoltype. The process of sequencing
thru each octet will stop if the accounting server is successfully
contacted, or there are no more configured octets in this object."
::= { jnxUserAAAAccessProfileEntry 3 }
jnxUserAAAAccessProfileAuthorizationOrder OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..5))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The set of accounting mechanisms configured on this system. Each
octet in this object contains one of the values defined in the
JnxAuthorizationType TEXTUAL-CONVENTION.
The system will sequence through each octet of this object starting at
octet 1 and attempt to use the corresponding accounting protocol
defined by JnxAuthorizationType.
If an accounting protocol is configured and attempts to reach the
accounting server fail, the system will move to the next octet in
this object and retry the accounting in the form dictated by the
corresponding accounting protocoltype. The process of sequencing
thru each octet will stop if the accounting server is successfully
contacted, or there are no more configured octets in this object."
::= { jnxUserAAAAccessProfileEntry 4 }
jnxUserAAAAccessProfileProvisioningOrder OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..5))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The set of provisioning mechanisms configured on this system. Each
octet in this object contains one of the values defined in the
JnxProvisioningType TEXTUAL-CONVENTION.
The system will sequence through each octet of this object starting at
octet 1 and attempt to use the corresponding accounting protocol
defined by JnxProvisioningType.
If an accounting protocol is configured and attempts to reach the
accounting server fail, the system will move to the next octet in
this object and retry the accounting in the form dictated by the
corresponding accounting protocoltype. The process of sequencing
thru each octet will stop if the accounting server is successfully
contacted, or there are no more configured octets in this object."
::= { jnxUserAAAAccessProfileEntry 5 }
jnxUserAAAAccessProfileAccStopOnFailure OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Enables/disables the Acct-Stop message if a user fails
authentication, but AAA-server grants access."
::= { jnxUserAAAAccessProfileEntry 6 }
jnxUserAAAAccessProfileAccStopOnDeny OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Enables/disables the Acct-Stop message if AAA-server denies
access."
::= { jnxUserAAAAccessProfileEntry 7 }
jnxUserAAAAccessProfileImmediateUpdate OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Enables/disables the Acct-Update message on receipt of a
Acct-response for the Acct-Start message."
::= { jnxUserAAAAccessProfileEntry 8 }
jnxUserAAAAccessProfileCoaImmediateUpdate OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Enables/disables the Acct-Update message on completion of
processing a change of authorization."
::= { jnxUserAAAAccessProfileEntry 9 }
jnxUserAAAAccessProfileInterval OBJECT-TYPE
SYNTAX Integer32
UNITS "minutes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The interval in minutes between accounting updates(Interim-stats
off, if not specified)."
::= { jnxUserAAAAccessProfileEntry 10 }
jnxUserAAAAccessProfileStatType OBJECT-TYPE
SYNTAX INTEGER {
time(0),
volume-time(1) }
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of statistics are collected. These are the configured
types:
time - the option to report only uptime
volume-time - the option to report both volume and uptime"
::= { jnxUserAAAAccessProfileEntry 11 }
END