-- ***************************************************************** -- CISCO-SSG-MIB.my: MIB file for SSG Multi-service Gateway -- -- January 2002, Thamilarasu K, October 2003, Sheetal Tilve -- -- Copyright (c) 1996, 2002, 2003, 2005 by cisco Systems, Inc. -- All rights reserved. -- ***************************************************************** CISCO-SSG-MIB DEFINITIONS ::= BEGIN IMPORTS MODULE-IDENTITY, OBJECT-TYPE, Counter32, Gauge32, Unsigned32, NOTIFICATION-TYPE FROM SNMPv2-SMI MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP FROM SNMPv2-CONF TimeInterval, DateAndTime, TruthValue, DisplayString, RowStatus FROM SNMPv2-TC InetAddressType, InetAddress FROM INET-ADDRESS-MIB InterfaceIndex FROM IF-MIB CiscoPort FROM CISCO-TC ciscoMgmt FROM CISCO-SMI; ciscoSsgMIB MODULE-IDENTITY LAST-UPDATED "200512220000Z" ORGANIZATION "Cisco Systems, Inc." CONTACT-INFO " Cisco Systems Customer Service Postal: 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-ssg@cisco.com" DESCRIPTION "The MIB Module manages Service Selection Gateway(SSG) devices. Service Selection Gateway(SSG) is a switching solution for service providers who offer intranet,extranet, and Internet connections to subscribers using broadband access technology such as digital subscriber lines, cable modems, or wireless to allow simultaneous access to network services. Acronyms and terms: SSD Service Selection Dashboard SESM Subscriber Edge Service Manager GGSN Gateway GPRS Support Node APN Access Point Name" REVISION "200512220000Z" DESCRIPTION "Imported Unsigned32 from SNMPv2-SMI instead of CISCO-TC." REVISION "200310170000Z" DESCRIPTION "Added new objects for Transparent Auto-Logon feature." REVISION "200203250000Z" DESCRIPTION "Initial version of this MIB module." ::= { ciscoMgmt 260 } ciscoSsgMIBObjects OBJECT IDENTIFIER ::= { ciscoSsgMIB 1 } cssgCfgObjects OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 1 } cssgStatsObjects OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 2 } cssgService OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 3 } cssgExcludedAPN OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 4 } cssgExcludedDomain OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 5 } cssgTcpRedirect OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 6 } cssgServiceIfBinds OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 7 } cssgRadiusClients OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 8 } cssgPortMap OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 9 } cssgTal OBJECT IDENTIFIER ::= { ciscoSsgMIBObjects 10 } cssgCfgSsgEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether SSG Service is enabled." ::= { cssgCfgObjects 1 } cssgCfgAutoDomainMode OBJECT-TYPE SYNTAX INTEGER { disabled(1), basic(2), extended(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether Auto-Domain feature is enabled. This feature allows a user to be automatically connected to a service based on the APN or structured username." ::= { cssgCfgObjects 2 } cssgCfgLocalForwardingEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether Local Forwarding is enabled. This feature enables SSG to forward packets locally between connected subscribers." ::= { cssgCfgObjects 3 } cssgCfgAutoLogOffMode OBJECT-TYPE SYNTAX INTEGER { disabled(1), icmp(2), arp(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether Auto Logoff feature is enabled. This feature enables SSG to initiate logoff if connectivity to a host is lost. Connectivity to a host is checked using ARP or ICMP ping mechanisms." ::= { cssgCfgObjects 4 } cssgCfgRadiusProxyEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether Radius-Proxy feature is enabled. This feature allows SSG to act as a generic Radius Proxy for non-SSD clients such as GGSN." ::= { cssgCfgObjects 5 } cssgCfgTcpRedirectEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether TCP redirect is enabled. This feature redirects certain TCP packets to captive portals." ::= { cssgCfgObjects 6 } cssgCfgAutoDomainNatEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether NAT(Network Address Translation) is enabled for autodomain users. This feature determines whether the subscriber gets the autodomain service assigned IP Address." ::= { cssgCfgObjects 7 } cssgCfgPortBundleHostKeyEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether PortBundle-Host Key feature is enabled. This feature enables SESM to identify subscribers based on the PortBundle(combination of IP Address, and a range of ports) assigned by the SSG." ::= { cssgCfgObjects 8 } cssgCfgTransPassThroughEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether Transparent pass through feature is enabled. This feature allows an unauthenticated subscriber traffic to be routed through SSG in either direction." ::= { cssgCfgObjects 9 } cssgCfgAutoLogOffInterval OBJECT-TYPE SYNTAX TimeInterval MAX-ACCESS read-write STATUS current DESCRIPTION "The time-interval at which connectivity to a host is checked. If the host is not reachable, SSG logs off the host if auto-logff feature is enabled." ::= { cssgCfgObjects 10 } cssgCfgAutoLogOffIcmpRetries OBJECT-TYPE SYNTAX Unsigned32 (1..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The number of ICMP ping retries SSG does to check connectivity to a host." DEFVAL { 2 } ::= { cssgCfgObjects 11 } cssgCfgMaxServicesPerUser OBJECT-TYPE SYNTAX Unsigned32 (1..20) MAX-ACCESS read-write STATUS current DESCRIPTION "The maximum number of services allowed per user." ::= { cssgCfgObjects 12 } cssgCfgAccountingEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether Acccounting is enabled in SSG. If enabled, SSG generates Accounting Records and sends to AAA Server." ::= { cssgCfgObjects 13 } cssgCfgDefaultNetworkType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-write STATUS current DESCRIPTION "A value that represents the type of the IP Address stored in the object cssgCfgDefaultNetwork." ::= { cssgCfgObjects 14 } cssgCfgDefaultNetwork OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The IP Address or subnet that users will be able to access without authentication. This is the address where the Cisco SSD/SESM resides." ::= { cssgCfgObjects 15 } cssgCfgRadiusAuthenPort OBJECT-TYPE SYNTAX CiscoPort MAX-ACCESS read-write STATUS current DESCRIPTION "The port on which SSG receives access request packets from Radius clients." ::= { cssgCfgObjects 16 } cssgCfgRadiusAccountingPort OBJECT-TYPE SYNTAX CiscoPort MAX-ACCESS read-write STATUS current DESCRIPTION "The port on which SSG receives accounting packets from Radius clients." ::= { cssgCfgObjects 17 } cssgCfgRadiusFwdAcctPktsEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether SSG forwards Accounting Packets received from Radius Clients to AAA Server." ::= { cssgCfgObjects 18 } cssgCfgAccountingInterval OBJECT-TYPE SYNTAX Unsigned32 (60..2147483647) UNITS "seconds" MAX-ACCESS read-write STATUS current DESCRIPTION "The interval at which Accounting records are sent to AAA Server." ::= { cssgCfgObjects 19 } cssgCfgTCPRedirGrpForUnAuthUsers OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-write STATUS current DESCRIPTION "The TCP Redirect Group to which Unauthenticated users are directed." ::= { cssgCfgObjects 20 } cssgCfgTCPRedirGrpForUnAuthServ OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-write STATUS current DESCRIPTION "The TCP Redirect Group to which unauthorized service access users are directed." ::= { cssgCfgObjects 21 } cssgCfgTcpRedirGrpForSMTP OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-write STATUS current DESCRIPTION "TCP Redirect Group to which SMTP traffic is redirected." ::= { cssgCfgObjects 22 } cssgCfgTcpRedirGrpForInitialCapt OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-write STATUS current DESCRIPTION "The TCP Redirect Group for initial captivation." ::= { cssgCfgObjects 23 } cssgCfgTcpRedirGrpForAdvCapt OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-write STATUS current DESCRIPTION "The TCP Redirect Group for advertising captivation." ::= { cssgCfgObjects 24 } cssgCfgRadiusClntRbtNotifEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether SSG generates notification if a Radius Client reboots." DEFVAL { false } ::= { cssgCfgObjects 25 } cssgCfgAAAServerDownNotifEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether SSG generates notification if connectivity to AAA is lost or if it goes down." DEFVAL { false } ::= { cssgCfgObjects 26 } cssgCfgTalEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "An indication of whether Transparent Auto Logon feature is enabled on SSG." DEFVAL { false } ::= { cssgCfgObjects 27 } cssgStatsLoginAttempts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of login attempts onto SSG." ::= { cssgStatsObjects 1 } cssgStatsLoginsSuccessful OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of successful logins onto SSG." ::= { cssgStatsObjects 2 } cssgStatsActiveSessions OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current number of active connections on SSG." ::= { cssgStatsObjects 3 } cssgStatsActiveHosts OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current number of active Hosts on SSG." ::= { cssgStatsObjects 4 } cssgStatsActiveServices OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current number of active services on SSG." ::= { cssgStatsObjects 5 } cssgStatsPODs OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of Packets of Death sent to Radius Client." ::= { cssgStatsObjects 6 } cssgServiceTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgServiceEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of SSG Services which subscribers have logged onto. A Service entry in this table is transient data and gets removed when the last subscriber using this Service logs off." ::= { cssgService 1 } cssgServiceEntry OBJECT-TYPE SYNTAX CssgServiceEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Detailed information concerning a Service." INDEX { cssgServiceName } ::= { cssgServiceTable 1 } CssgServiceEntry ::= SEQUENCE { cssgServiceName DisplayString, cssgServiceMode INTEGER, cssgServiceType INTEGER, cssgServiceIdleTimeout Unsigned32, cssgServiceSessionTimeout Unsigned32, cssgServiceActiveSessions Gauge32, cssgServiceDNSPrimaryIpType InetAddressType, cssgServiceDNSPrimary InetAddress, cssgServiceDNSSecondaryIpType InetAddressType, cssgServiceDNSSecondary InetAddress, cssgServiceUpstreamQOSEnabled TruthValue, cssgServiceDownStreamQOSEnabled TruthValue, cssgServiceOpenGarden TruthValue, cssgServicePrepaid TruthValue } cssgServiceName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The name of the service profile." ::= { cssgServiceEntry 1 } cssgServiceMode OBJECT-TYPE SYNTAX INTEGER { unknown(1), concurrent(2), sequential(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "An optional attribute which defines whether the user is able to log in to a service while simultaneously connected to other services (concurrent) or cannot access any other services while using this service (sequential). The default is concurrent." DEFVAL { concurrent } ::= { cssgServiceEntry 2 } cssgServiceType OBJECT-TYPE SYNTAX INTEGER { unknown(1), passthrough(2), tunnel(3), proxy(4) } MAX-ACCESS read-only STATUS current DESCRIPTION "This attribute indicates the type of service. pass-through - Indicates that the user authentication is not done during logon to this service. This is the default. tunnel - Indicates that this is a L2TP tunneled service. proxy - Indicates that the SSG performs user authentication during logon to this service." ::= { cssgServiceEntry 3 } cssgServiceIdleTimeout OBJECT-TYPE SYNTAX Unsigned32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The idle timeout of a session in seconds. A value of 0 indicates that there is no timeout." ::= { cssgServiceEntry 4 } cssgServiceSessionTimeout OBJECT-TYPE SYNTAX Unsigned32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum length of a session in seconds. A value of 0 indicates that there is no timeout." ::= { cssgServiceEntry 5 } cssgServiceActiveSessions OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The active number of connections to this service." ::= { cssgServiceEntry 6 } cssgServiceDNSPrimaryIpType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The IP address type of Primary DNS Server for this service." ::= { cssgServiceEntry 7 } cssgServiceDNSPrimary OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The primary DNS server for this service." ::= { cssgServiceEntry 8 } cssgServiceDNSSecondaryIpType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The IP Address type of Secondary DNS Server for this service." ::= { cssgServiceEntry 9 } cssgServiceDNSSecondary OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The Secondary DNS Server for this service." ::= { cssgServiceEntry 10 } cssgServiceUpstreamQOSEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "An indication of whether upstream policing is enabled for this service." REFERENCE "The rate-limit features of Committed Access Rate(CAR)." ::= { cssgServiceEntry 11 } cssgServiceDownStreamQOSEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "An indication of whether downstream policing is enabled for this service." REFERENCE "The rate-limit features of Committed Access Rate(CAR)." ::= { cssgServiceEntry 12 } cssgServiceOpenGarden OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "An indication of whether this is a Open Garden service. An Open Garden Service is a service that can be accessed without authentication." ::= { cssgServiceEntry 13 } cssgServicePrepaid OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "An indication of whether this service is a prepaid service." ::= { cssgServiceEntry 14 } cssgServiceRouteTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgServiceRouteEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of route entries that belong to a particular service." ::= { cssgService 2 } cssgServiceRouteEntry OBJECT-TYPE SYNTAX CssgServiceRouteEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry in Services Route Table." INDEX { cssgServiceName, cssgServiceRouteType, cssgServiceRouteAddr, cssgServiceRouteMaskType, cssgServiceRouteMask } ::= { cssgServiceRouteTable 1 } CssgServiceRouteEntry ::= SEQUENCE { cssgServiceRouteType InetAddressType, cssgServiceRouteAddr InetAddress, cssgServiceRouteMaskType InetAddressType, cssgServiceRouteMask InetAddress, cssgServiceRoutePermission INTEGER } cssgServiceRouteType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS not-accessible STATUS current DESCRIPTION "A value that represents the type of the address stored in cssgServiceServRouteAddr." ::= { cssgServiceRouteEntry 1 } cssgServiceRouteAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IP Address of the networks available to the user of this service." ::= { cssgServiceRouteEntry 2 } cssgServiceRouteMaskType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS not-accessible STATUS current DESCRIPTION "A value that represents the type of the address stored in cssgServiceServRouteMask." ::= { cssgServiceRouteEntry 3 } cssgServiceRouteMask OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Indicate the mask to be ANDed with the destination address before being compared to the value in cssgServiceRouteAddr." ::= { cssgServiceRouteEntry 4 } cssgServiceRoutePermission OBJECT-TYPE SYNTAX INTEGER { permit(1), deny(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "Indicates the action on packets, when the destination address matches with the cssgServiceRouteAddr." ::= { cssgServiceRouteEntry 5 } cssgExcludedAPNTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgExcludedAPNEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of APNs excluded from using auto-main feature of SSG." ::= { cssgExcludedAPN 1 } cssgExcludedAPNEntry OBJECT-TYPE SYNTAX CssgExcludedAPNEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Information concerning an APN." INDEX { cssgExcludedAPNName } ::= { cssgExcludedAPNTable 1 } CssgExcludedAPNEntry ::= SEQUENCE { cssgExcludedAPNName DisplayString, cssgExcludedAPNRowStatus RowStatus } cssgExcludedAPNName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The name of the excluded APN." ::= { cssgExcludedAPNEntry 1 } cssgExcludedAPNRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. There are no mandatory objects in a create request. To delete a row, set this object to 'destroy'." ::= { cssgExcludedAPNEntry 2 } cssgExcludedDomainTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgExcludedDomainEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of Domain names excluded from using auto-domain feature of SSG." ::= { cssgExcludedDomain 1 } cssgExcludedDomainEntry OBJECT-TYPE SYNTAX CssgExcludedDomainEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Information concerning an excluded Domain." INDEX { cssgExcludedDomainName } ::= { cssgExcludedDomainTable 1 } CssgExcludedDomainEntry ::= SEQUENCE { cssgExcludedDomainName DisplayString, cssgExcludedDomainRowStatus RowStatus } cssgExcludedDomainName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The name of the excluded Domain." ::= { cssgExcludedDomainEntry 1 } cssgExcludedDomainRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. There are no mandatory objects in a create request. To delete a row, set this object to 'destroy'." ::= { cssgExcludedDomainEntry 2 } cssgServiceIfBindTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgServiceIfBindEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "In SSG, a Service can be configured to use a particular interface/ip address. This table is a list of services and the interface to which they are bound." ::= { cssgServiceIfBinds 1 } cssgServiceIfBindEntry OBJECT-TYPE SYNTAX CssgServiceIfBindEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A Interface-Service Bind entry." INDEX { cssgServiceName } ::= { cssgServiceIfBindTable 1 } CssgServiceIfBindEntry ::= SEQUENCE { cssgServiceIfIndex InterfaceIndex, cssgServiceIfRowStatus RowStatus } cssgServiceIfIndex OBJECT-TYPE SYNTAX InterfaceIndex MAX-ACCESS read-create STATUS current DESCRIPTION "The interface index to which the Service is bound." ::= { cssgServiceIfBindEntry 1 } cssgServiceIfRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. cssgServiceIfIndex is a mandatory object for a create request. To delete a row, set this object to 'destroy'." ::= { cssgServiceIfBindEntry 2 } cssgTcpRedirectGrpTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgTcpRedirectGrpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of TCP Redirect group. A TCP Redirect group is a list of one more servers that make up a captive portal group." ::= { cssgTcpRedirect 1 } cssgTcpRedirectGrpEntry OBJECT-TYPE SYNTAX CssgTcpRedirectGrpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Detailed information concerning a TCP Redirect group." INDEX { cssgTcpRedirectGrpName, cssgTcpRedirectGrpServerAddrType, cssgTcpRedirectGrpServerAddr, cssgTcpRedirectGrpServerPort } ::= { cssgTcpRedirectGrpTable 1 } CssgTcpRedirectGrpEntry ::= SEQUENCE { cssgTcpRedirectGrpName DisplayString, cssgTcpRedirectGrpServerAddrType InetAddressType, cssgTcpRedirectGrpServerAddr InetAddress, cssgTcpRedirectGrpServerPort CiscoPort, cssgTcpRedirectGrpRowStatus RowStatus } cssgTcpRedirectGrpName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The name of the redirect-group." ::= { cssgTcpRedirectGrpEntry 1 } cssgTcpRedirectGrpServerAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS not-accessible STATUS current DESCRIPTION "A value that represents the typeof the address stored in cssgTcpRedirectGrpServerAddr object." ::= { cssgTcpRedirectGrpEntry 2 } cssgTcpRedirectGrpServerAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IP address of the server in the server-group." ::= { cssgTcpRedirectGrpEntry 3 } cssgTcpRedirectGrpServerPort OBJECT-TYPE SYNTAX CiscoPort MAX-ACCESS not-accessible STATUS current DESCRIPTION "The port of the server to which TCP traffic to be redirected." ::= { cssgTcpRedirectGrpEntry 4 } cssgTcpRedirectGrpRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. There are no mandatory objects in a create request. To delete a row, set this object to 'destroy'." ::= { cssgTcpRedirectGrpEntry 5 } cssgNetworkGrpTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgNetworkGrpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of network groups. When a network-group, a list of networks, associated with a TCP Redirect group, subscribers attempting to connect to these networks will be redirected to the TCP redirect group." ::= { cssgTcpRedirect 2 } cssgNetworkGrpEntry OBJECT-TYPE SYNTAX CssgNetworkGrpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Detailed information concerning a network group entry." INDEX { cssgNetworkGrpName, cssgNetworkGrpNetIpType, cssgNetworkGrpNetIpAddr, cssgNetworkGrpNetMaskType, cssgNetworkGrpNetMask } ::= { cssgNetworkGrpTable 1 } CssgNetworkGrpEntry ::= SEQUENCE { cssgNetworkGrpName DisplayString, cssgNetworkGrpNetIpType InetAddressType, cssgNetworkGrpNetIpAddr InetAddress, cssgNetworkGrpNetMaskType InetAddressType, cssgNetworkGrpNetMask InetAddress, cssgNetworkGrpNetRowStatus RowStatus } cssgNetworkGrpName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The name of the network group. A network group, which is a group of networks, is associated with a Server group for traffic redirection i.e., packets to the networks in the network group will be directed to the servers in the server group." ::= { cssgNetworkGrpEntry 1 } cssgNetworkGrpNetIpType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS not-accessible STATUS current DESCRIPTION "A value that represents the type of the IP Address in the object cssgNetworkGrpNetIpAddr." ::= { cssgNetworkGrpEntry 2 } cssgNetworkGrpNetIpAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IP address of a network in this network group." ::= { cssgNetworkGrpEntry 3 } cssgNetworkGrpNetMaskType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS not-accessible STATUS current DESCRIPTION "A value that represents the type of the address stored in cssgNetworkGrpNetMask." ::= { cssgNetworkGrpEntry 4 } cssgNetworkGrpNetMask OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Indicate the mask to be ANDed with the destination address before being compared to the value in cssgNetworkGrpNetIpAddr." ::= { cssgNetworkGrpEntry 5 } cssgNetworkGrpNetRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. There are no mandatory objects in a create request. To delete a row, set this object to 'destroy'." ::= { cssgNetworkGrpEntry 6 } cssgPortGrpTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgPortGrpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of port groups." ::= { cssgTcpRedirect 3 } cssgPortGrpEntry OBJECT-TYPE SYNTAX CssgPortGrpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A Port group entry." INDEX { cssgPortGrpName, cssgPortGrpPortNo } ::= { cssgPortGrpTable 1 } CssgPortGrpEntry ::= SEQUENCE { cssgPortGrpName DisplayString, cssgPortGrpPortNo CiscoPort, cssgPortGrpPortRowStatus RowStatus } cssgPortGrpName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The name of the port group. The port group defines a list of ports traffic to whom can be redirected to a TCP Redirect group." ::= { cssgPortGrpEntry 1 } cssgPortGrpPortNo OBJECT-TYPE SYNTAX CiscoPort MAX-ACCESS not-accessible STATUS current DESCRIPTION "A port in the port group." ::= { cssgPortGrpEntry 2 } cssgPortGrpPortRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. To delete a row, set this object to 'destroy'." ::= { cssgPortGrpEntry 3 } cssgTcpRedirNetworkGrpMapTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgTcpRedirNetworkGrpMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of Network and Server Group associations." ::= { cssgTcpRedirect 4 } cssgTcpRedirNetworkGrpMapEntry OBJECT-TYPE SYNTAX CssgTcpRedirNetworkGrpMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Detailed information concerning a Server and Network group association." INDEX { cssgTcpRedirectGrpName } ::= { cssgTcpRedirNetworkGrpMapTable 1 } CssgTcpRedirNetworkGrpMapEntry ::= SEQUENCE { cssgTcpRedirNetworkMapGrpName DisplayString, cssgTcpRedirNetworkGrpMapRowStat RowStatus } cssgTcpRedirNetworkMapGrpName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "A network group name. A network group is a set of network groups that can be associated with TCP Redirect for traffic redirection." ::= { cssgTcpRedirNetworkGrpMapEntry 1 } cssgTcpRedirNetworkGrpMapRowStat OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. There are no mandatory objects in a create request. To delete a row, set this object to 'destroy'." ::= { cssgTcpRedirNetworkGrpMapEntry 2 } cssgTcpRedirPortGrpMapTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgTcpRedirPortGrpMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of Server and Port Group associations." ::= { cssgTcpRedirect 5 } cssgTcpRedirPortGrpMapEntry OBJECT-TYPE SYNTAX CssgTcpRedirPortGrpMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An instance of Server and Port group association." INDEX { cssgTcpRedirectGrpName } ::= { cssgTcpRedirPortGrpMapTable 1 } CssgTcpRedirPortGrpMapEntry ::= SEQUENCE { cssgTcpRedirPortMapGrpName DisplayString, cssgTcpRedirPortGrpMapRowStat RowStatus } cssgTcpRedirPortMapGrpName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The name of the Port Group. A Port Group is a set of ports that can be associated with a TCP Redirect Group for traffic redirection." ::= { cssgTcpRedirPortGrpMapEntry 1 } cssgTcpRedirPortGrpMapRowStat OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. There are no mandatory objects in a create request. To delete a row, set this object to 'destroy'." ::= { cssgTcpRedirPortGrpMapEntry 2 } cssgTcpRedirPortNoMapTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgTcpRedirPortNoMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of Ports nos and the corresponding Server group which they are associated with." ::= { cssgTcpRedirect 6 } cssgTcpRedirPortNoMapEntry OBJECT-TYPE SYNTAX CssgTcpRedirPortNoMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An instance of a Server group and Port association." INDEX { cssgTcpRedirectGrpName } ::= { cssgTcpRedirPortNoMapTable 1 } CssgTcpRedirPortNoMapEntry ::= SEQUENCE { cssgTcpRedirPortNo CiscoPort, cssgTcpRedirPortNoMapRowStat RowStatus } cssgTcpRedirPortNo OBJECT-TYPE SYNTAX CiscoPort MAX-ACCESS read-create STATUS current DESCRIPTION "The Port No associated with the Service Group name." ::= { cssgTcpRedirPortNoMapEntry 1 } cssgTcpRedirPortNoMapRowStat OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. cssgTcpRedirPortNo is a mandatory object for a create request. To delete a row, set this object to 'destroy'." ::= { cssgTcpRedirPortNoMapEntry 2 } cssgRadiusClientTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgRadiusClientEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of non-SSD clients to which SSG act as Radius proxy." ::= { cssgRadiusClients 1 } cssgRadiusClientEntry OBJECT-TYPE SYNTAX CssgRadiusClientEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Detailed information concerning a Radius client entry." INDEX { cssgRadiusClientAddrType, cssgRadiusClientAddr } ::= { cssgRadiusClientTable 1 } CssgRadiusClientEntry ::= SEQUENCE { cssgRadiusClientAddrType InetAddressType, cssgRadiusClientAddr InetAddress, cssgRadiusClientRowStatus RowStatus } cssgRadiusClientAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The type of the address stored in cssgRadiusClientAddr." ::= { cssgRadiusClientEntry 1 } cssgRadiusClientAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The network layer address of the Radius client to which SSG acts as Radius Proxy." ::= { cssgRadiusClientEntry 2 } cssgRadiusClientRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. There are no mandatory objects in a create request. To delete a row, set this object to 'destroy'." ::= { cssgRadiusClientEntry 3 } cssgPortMapLength OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-write STATUS current DESCRIPTION "The length of the port-bundle i.e, no of ports in a bundle." ::= { cssgPortMap 1 } cssgPortMapTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgPortMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The list of TCP Port-maps." ::= { cssgPortMap 2 } cssgPortMapEntry OBJECT-TYPE SYNTAX CssgPortMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry in the cssgPortMapTable." INDEX { cssgPortMapSourceIpType, cssgPortMapSourceIp } ::= { cssgPortMapTable 1 } CssgPortMapEntry ::= SEQUENCE { cssgPortMapSourceIpType InetAddressType, cssgPortMapSourceIp InetAddress, cssgPortMapPortRangeFrom CiscoPort, cssgPortMapPortRangeTo CiscoPort, cssgPortMapRowStatus RowStatus } cssgPortMapSourceIpType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS not-accessible STATUS current DESCRIPTION "A value that represents the type of the IP address stored in cssgPortMapSourceIP object." ::= { cssgPortMapEntry 1 } cssgPortMapSourceIp OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifies SSG source IP addresses to be used while NATting packets from downstream traffic i.e., traffic from Subscriber to SSG." ::= { cssgPortMapEntry 2 } cssgPortMapPortRangeFrom OBJECT-TYPE SYNTAX CiscoPort MAX-ACCESS read-create STATUS current DESCRIPTION "The lower limit of the range ports in the Port Map." ::= { cssgPortMapEntry 3 } cssgPortMapPortRangeTo OBJECT-TYPE SYNTAX CiscoPort MAX-ACCESS read-create STATUS current DESCRIPTION "The upper limit of the range ports in the Port Map." ::= { cssgPortMapEntry 4 } cssgPortMapRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry. This object can also be used to create or delete conceptual row in this table. To create a row, set this object to 'createAndGo'. cssgPortMapPortRangeFrom and cssgPortMapPortRangeTo are mandatory objects in a create request. To delete a row, set this object to 'destroy'." ::= { cssgPortMapEntry 5 } cssgTalWaitingForAuthUsers OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of currently existing users waiting for authorization." ::= { cssgTal 1 } cssgTalUnidentifiedUsers OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of currently existing unidentified users. These are users for which there was no response received from AAA and hence it is not clear if they are valid users." ::= { cssgTal 2 } cssgTalSuspectUsers OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of currently existing Suspect Users." ::= { cssgTal 3 } cssgTalPassthroughUsers OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of currently existing transparent pass-through users." ::= { cssgTal 4 } cssgTalMaxAuthRate OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "Maximum rate of authorization requests per second. At a given time, the maximum rate of authorization requests will overwrite the previous value." ::= { cssgTal 5 } cssgTalMaxAuthRateTimestamp OBJECT-TYPE SYNTAX DateAndTime MAX-ACCESS read-only STATUS current DESCRIPTION "This is the local time on the SSG when the Maximum rate of authorization requests per second, indicated by cssgTalMaxAuthRate, was recorded." ::= { cssgTal 6 } cssgTalMinAuthRate OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "Minimum rate of authorization requests per second. At a given time, the minimum rate of authorization requests will overwrite the previous value." ::= { cssgTal 7 } cssgTalMinAuthRateTimestamp OBJECT-TYPE SYNTAX DateAndTime MAX-ACCESS read-only STATUS current DESCRIPTION "This is the local time on the SSG when the Minimum rate of authorization requests per second, indicated by cssgTalMinAuthRate, was recorded." ::= { cssgTal 8 } cssgTalCurrentAuthRate OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The last recorded rate of authorization requests per second, on SSG." ::= { cssgTal 9 } cssgTalCurrentAuthRateTimestamp OBJECT-TYPE SYNTAX DateAndTime MAX-ACCESS read-only STATUS current DESCRIPTION "This is the local time on the SSG when cssgTalCurrentAuthRate, was recorded." ::= { cssgTal 10 } cssgTalResetAuthRates OBJECT-TYPE SYNTAX INTEGER { unknown(1), reset(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this variable to 'reset' indicates that the Minimum and Maximum rates of authorization would be reset to the last recorded rate of authorization requests per second. Setting it to 'unknown' will not result in any changes. An snmp-get on this value will always return 'unknown'." ::= { cssgTal 11 } cssgTalMaxPendingAuthReqs OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-write STATUS current DESCRIPTION "The maximum number of outstanding TAL authorization requests allowed on SSG. If the number of authorization requests goes beyond this value, SSG does a SYS log message and any packets received that would result in SSG sending a new radius request will be dropped at the CEF path itself. When this value is set, it will be applicable from that point onwards. If the number of existing requests exceeds the new values, these requests will not be discarded." ::= { cssgTal 12 } cssgTalMaxAuthReqsRate OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-write STATUS current DESCRIPTION "The maximum number of authorization requests per second allowed on SSG. If this value is set, SSG throttles the authorization requests sent per second as per this value." ::= { cssgTal 13 } cssgTalDropPakDuringAuthorization OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "The value 'true' indicates that any packets that are received from the user during user authorization would be dropped. The value 'false' indicates that the packets will not be dropped." DEFVAL { false } ::= { cssgTal 14 } cssgTalUnidentifiedUserAllowTraff OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "The value 'true' indicates that traffic from/to unidentified users would be allowed. A value of 'false' indicates that traffic from/to unidentified users will not be allowed." DEFVAL { false } ::= { cssgTal 15 } cssgTalMaxSuspectUsers OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-write STATUS current DESCRIPTION "The maximum number of suspect users allowed." DEFVAL { 5000 } ::= { cssgTal 16 } cssgTalSuspectUserTimeout OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-write STATUS current DESCRIPTION "The timeout value for a suspect user in minutes. If a packet is received for a suspect user, then packets from/to this user will be dropped/tcp-redirected, until a value of cssgTalSuspectUserTimeout is reached. After this timeout, any new traffic received by SSG from the suspect user will trigger the TAL procedure all over again." DEFVAL { 60 } ::= { cssgTal 17 } cssgTalUnidentifiedUserTimeout OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-write STATUS current DESCRIPTION "The timeout value for an unidentified user in minutes. After this time expiry, authorization will be done again when a packet is received from this user." DEFVAL { 10 } ::= { cssgTal 18 } cssgTalUserInfoTable OBJECT-TYPE SYNTAX SEQUENCE OF CssgTalUserInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of all the transparent users, along with their user-state." ::= { cssgTal 19 } cssgTalUserInfoEntry OBJECT-TYPE SYNTAX CssgTalUserInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A conceptual row in the TAL user info table." INDEX { cssgTalUserIPAddressType, cssgTalUserIPAddress } ::= { cssgTalUserInfoTable 1 } CssgTalUserInfoEntry ::= SEQUENCE { cssgTalUserIPAddressType InetAddressType, cssgTalUserIPAddress InetAddress, cssgTalUserState INTEGER } cssgTalUserIPAddressType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS not-accessible STATUS current DESCRIPTION "This is the IP address type of a particular transparent user and is used as index (together with cssgTalUserIPAddress) to identify a unique entry in the Tal User Info table." ::= { cssgTalUserInfoEntry 1 } cssgTalUserIPAddress OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "IP Address of the transparent user." ::= { cssgTalUserInfoEntry 2 } cssgTalUserState OBJECT-TYPE SYNTAX INTEGER { other(1), authorizing(2), unidentified(3), suspect(4), passthrough(5) } MAX-ACCESS read-only STATUS current DESCRIPTION "The state of the transparent user." ::= { cssgTalUserInfoEntry 3 } -- Notifications ciscoSsgMIBNotifications OBJECT IDENTIFIER ::= { ciscoSsgMIB 0 } ciscoSsgRadiusClientReboot NOTIFICATION-TYPE STATUS current DESCRIPTION "The notification is sent when the connectivity to GGSN is lost." ::= { ciscoSsgMIBNotifications 1 } ciscoSsgRadiusAAAServerDown NOTIFICATION-TYPE STATUS current DESCRIPTION "The notification is sent when the connectivity to AAA is lost or when AAA Server is down." ::= { ciscoSsgMIBNotifications 2 } ciscoSsgMIBConformance OBJECT IDENTIFIER ::= { ciscoSsgMIB 3 } ciscoSsgMIBCompliances OBJECT IDENTIFIER ::= { ciscoSsgMIBConformance 1} ciscoSsgMIBGroups OBJECT IDENTIFIER ::= { ciscoSsgMIBConformance 2} -- Conformance ciscoSsgMIBCompliance MODULE-COMPLIANCE STATUS deprecated -- superceded by ciscoSsgMIBComplianceRev1 DESCRIPTION "The compliance statement for entities which implement CISCO-SSG-MIB." MODULE MANDATORY-GROUPS { ciscoSsgCfgGroup, ciscoSsgStatsGroup, ciscoSsgServicesGroup, ciscoSsgExclusionsGroup, ciscoSsgTcpRedirectGroup, ciscoSsgServiceInterfaceGroup, ciscoSsgRadiusClientsGroup, ciscoSsgPortMapGroup, ciscoSsgNotificationGroup } ::= { ciscoSsgMIBCompliances 1 } ciscoSsgMIBComplianceRev1 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for entities which implement CISCO-SSG-MIB." MODULE MANDATORY-GROUPS { ciscoSsgCfgGroupRev1, ciscoSsgStatsGroup, ciscoSsgServicesGroup, ciscoSsgExclusionsGroup, ciscoSsgTcpRedirectGroup, ciscoSsgServiceInterfaceGroup, ciscoSsgRadiusClientsGroup, ciscoSsgPortMapGroup, ciscoSsgNotificationGroup, ciscoSsgTalUserInfoGroup } ::= { ciscoSsgMIBCompliances 2 } -- Units of Conformance ciscoSsgCfgGroup OBJECT-GROUP OBJECTS { cssgCfgSsgEnabled, cssgCfgAutoDomainMode, cssgCfgLocalForwardingEnabled, cssgCfgAutoLogOffMode, cssgCfgRadiusProxyEnabled, cssgCfgTcpRedirectEnabled, cssgCfgAutoDomainNatEnabled, cssgCfgPortBundleHostKeyEnabled, cssgCfgTransPassThroughEnabled, cssgCfgAutoLogOffInterval, cssgCfgAutoLogOffIcmpRetries, cssgCfgMaxServicesPerUser, cssgCfgAccountingEnabled, cssgCfgDefaultNetworkType, cssgCfgDefaultNetwork, cssgCfgRadiusAuthenPort, cssgCfgRadiusAccountingPort, cssgCfgRadiusFwdAcctPktsEnabled, cssgCfgAccountingInterval, cssgCfgTCPRedirGrpForUnAuthUsers, cssgCfgTCPRedirGrpForUnAuthServ, cssgCfgTcpRedirGrpForSMTP, cssgCfgTcpRedirGrpForInitialCapt, cssgCfgTcpRedirGrpForAdvCapt, cssgCfgRadiusClntRbtNotifEnabled, cssgCfgAAAServerDownNotifEnabled } STATUS deprecated -- superceded by ciscoSsgCfgGroupRev1 DESCRIPTION "A collection of configurable parameters in SSG MIB." ::= { ciscoSsgMIBGroups 1 } ciscoSsgStatsGroup OBJECT-GROUP OBJECTS { cssgStatsLoginAttempts, cssgStatsLoginsSuccessful, cssgStatsActiveSessions, cssgStatsActiveHosts, cssgStatsActiveServices, cssgStatsPODs } STATUS current DESCRIPTION "A collection of statistics objects for SSG MIB." ::= { ciscoSsgMIBGroups 2 } ciscoSsgServicesGroup OBJECT-GROUP OBJECTS { cssgServiceMode, cssgServiceType, cssgServiceIdleTimeout, cssgServiceSessionTimeout, cssgServiceActiveSessions, cssgServiceDNSPrimaryIpType, cssgServiceDNSPrimary, cssgServiceDNSSecondaryIpType, cssgServiceDNSSecondary, cssgServiceUpstreamQOSEnabled, cssgServiceDownStreamQOSEnabled, cssgServiceOpenGarden, cssgServicePrepaid, cssgServiceRoutePermission } STATUS current DESCRIPTION "A collection of objects pertaining to Services." ::= { ciscoSsgMIBGroups 3 } ciscoSsgExclusionsGroup OBJECT-GROUP OBJECTS { cssgExcludedAPNRowStatus, cssgExcludedDomainRowStatus } STATUS current DESCRIPTION "A collection of objects pertaining to excluded APN/Domain." ::= { ciscoSsgMIBGroups 4 } ciscoSsgTcpRedirectGroup OBJECT-GROUP OBJECTS { cssgTcpRedirectGrpRowStatus, cssgNetworkGrpNetRowStatus, cssgPortGrpPortRowStatus, cssgTcpRedirNetworkMapGrpName, cssgTcpRedirNetworkGrpMapRowStat, cssgTcpRedirPortMapGrpName, cssgTcpRedirPortGrpMapRowStat, cssgTcpRedirPortNo, cssgTcpRedirPortNoMapRowStat } STATUS current DESCRIPTION "A collection of objects pertaining to TCP Redirect." ::= { ciscoSsgMIBGroups 5 } ciscoSsgServiceInterfaceGroup OBJECT-GROUP OBJECTS { cssgServiceIfIndex, cssgServiceIfRowStatus } STATUS current DESCRIPTION "A collection of objects pertaining to Service-Interface bind." ::= { ciscoSsgMIBGroups 6 } ciscoSsgRadiusClientsGroup OBJECT-GROUP OBJECTS { cssgRadiusClientRowStatus } STATUS current DESCRIPTION "A collection of objects pertaining to Radius Client." ::= { ciscoSsgMIBGroups 7 } ciscoSsgPortMapGroup OBJECT-GROUP OBJECTS { cssgPortMapLength, cssgPortMapPortRangeFrom, cssgPortMapPortRangeTo, cssgPortMapRowStatus } STATUS current DESCRIPTION "A collection of objects pertaining to Port Map Group." ::= { ciscoSsgMIBGroups 8 } ciscoSsgNotificationGroup NOTIFICATION-GROUP NOTIFICATIONS { ciscoSsgRadiusClientReboot, ciscoSsgRadiusAAAServerDown } STATUS current DESCRIPTION "A collection of notifications generated by SSG." ::= { ciscoSsgMIBGroups 9 } ciscoSsgCfgGroupRev1 OBJECT-GROUP OBJECTS { cssgCfgSsgEnabled, cssgCfgAutoDomainMode, cssgCfgLocalForwardingEnabled, cssgCfgAutoLogOffMode, cssgCfgRadiusProxyEnabled, cssgCfgTcpRedirectEnabled, cssgCfgAutoDomainNatEnabled, cssgCfgPortBundleHostKeyEnabled, cssgCfgTransPassThroughEnabled, cssgCfgAutoLogOffInterval, cssgCfgAutoLogOffIcmpRetries, cssgCfgMaxServicesPerUser, cssgCfgAccountingEnabled, cssgCfgDefaultNetworkType, cssgCfgDefaultNetwork, cssgCfgRadiusAuthenPort, cssgCfgRadiusAccountingPort, cssgCfgRadiusFwdAcctPktsEnabled, cssgCfgAccountingInterval, cssgCfgTCPRedirGrpForUnAuthUsers, cssgCfgTCPRedirGrpForUnAuthServ, cssgCfgTcpRedirGrpForSMTP, cssgCfgTcpRedirGrpForInitialCapt, cssgCfgTcpRedirGrpForAdvCapt, cssgCfgRadiusClntRbtNotifEnabled, cssgCfgAAAServerDownNotifEnabled, cssgCfgTalEnabled } STATUS current DESCRIPTION "A collection of configurable parameters in SSG MIB." ::= { ciscoSsgMIBGroups 10 } ciscoSsgTalUserInfoGroup OBJECT-GROUP OBJECTS { cssgTalWaitingForAuthUsers, cssgTalUnidentifiedUsers, cssgTalSuspectUsers, cssgTalPassthroughUsers, cssgTalMaxAuthRate, cssgTalMaxAuthRateTimestamp, cssgTalMinAuthRate, cssgTalMinAuthRateTimestamp, cssgTalCurrentAuthRate, cssgTalCurrentAuthRateTimestamp, cssgTalResetAuthRates, cssgTalMaxPendingAuthReqs, cssgTalMaxAuthReqsRate, cssgTalDropPakDuringAuthorization, cssgTalUnidentifiedUserAllowTraff, cssgTalMaxSuspectUsers, cssgTalSuspectUserTimeout, cssgTalUnidentifiedUserTimeout, cssgTalUserState } STATUS current DESCRIPTION "A collection of objects pertaining to Transparent Auto-Logon Group." ::= { ciscoSsgMIBGroups 11 } END