Secure Shell (SSH) is a network security protocol. Using encryption and authentication, SSH can implement secure remote access and file transfer over an insecure network.

SSH uses the typical client-server model to establish a channel for secure data transfer based on TCP.

SSH includes two versions: SSH1.x and SSH2.0 (hereinafter referred to as SSH1 and SSH2), which are not compatible. SSH2 is better than SSH1 in performance and security.

Use this MIB to configure the SSH service.

MIB file name

hh3c-ssh.mib

Root object

iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).hh3c(25506).hh3cCommon(2).hh3cSSH(22)

Scalar objects

hh3cSSHServerVersion (1.3.6.1.4.1.25506.2.22.1.1.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cSSHServerVersion (1.3.6.1.4.1.25506.2.22.1.1.1.1)	read-only	DisplayString	Standard MIB values.	The SSH protocol version of the SSH server.	The default value is 2.00. It is not compatible with SSH 1.x versions.

hh3cSSHServerCompatibleSSH1x (1.3.6.1.4.1.25506.2.22.1.1.1.2)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSSHServerCompatibleSSH1x (1.3.6.1.4.1.25506.2.22.1.1.1.2)

read-write

INTEGER

enableCompatibleSSH1x(1),

disableCompatibleSSH1x(2)

Compatibility with SSH 1.x versions.

The default value is disableCompatibleSSH1x(2).

hh3cSSHServerRekeyInterval (1.3.6.1.4.1.25506.2.22.1.1.1.3)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSSHServerRekeyInterval (1.3.6.1.4.1.25506.2.22.1.1.1.3)

read-write

Integer32

Standard MIB values.

Time interval at which the SSH server key is regenerated.

Value range: 0 to 24.

The default value is 0, meaning that the key will not be refreshed.

hh3cSSHServerAuthRetries (1.3.6.1.4.1.25506.2.22.1.1.1.4)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSSHServerAuthRetries (1.3.6.1.4.1.25506.2.22.1.1.1.4)

read-write

Integer32

Standard MIB values.

Maximum number of SSH server authentication retries.

Range from 1 to 5.

The default value is 3.

hh3cSSHServerAuthTimeout (1.3.6.1.4.1.25506.2.22.1.1.1.5)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSSHServerAuthTimeout (1.3.6.1.4.1.25506.2.22.1.1.1.5)

read-write

Integer32

Standard MIB values.

SSH server authentication timeout time.

Range from 1 to 120.

The default value is 60.

hh3cSFTPServerIdleTimeout (1.3.6.1.4.1.25506.2.22.1.1.1.6)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSFTPServerIdleTimeout (1.3.6.1.4.1.25506.2.22.1.1.1.6)

read-write

Integer32

Standard MIB values.

SFTP connection idle timeout time.

Range from 1 to 35791.

The default value is 10.

hh3cSSHServerEnable (1.3.6.1.4.1.25506.2.22.1.1.1.7)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSSHServerEnable (1.3.6.1.4.1.25506.2.22.1.1.1.7)

read-write

INTEGER

enableSSHServer(1),

disableSSHServer(2)

Enable or disable the SSH server.

The default value is disableSSHServer(2).

hh3cSFTPServerEnable (1.3.6.1.4.1.25506.2.22.1.1.1.8)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSFTPServerEnable (1.3.6.1.4.1.25506.2.22.1.1.1.8)

read-write

INTEGER

enableSFTPService(1),

disableSFTPService(2)

Enable or disable the SFTP server.

The default value is disableSFTPService(2).

hh3cSTelnetServerEnable (1.3.6.1.4.1.25506.2.22.1.1.1.9)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSTelnetServerEnable (1.3.6.1.4.1.25506.2.22.1.1.1.9)

read-write

INTEGER

enableSTelnetService(1),

disableSTelnetService(2)

Enable or disable Stelnet server.

As per the MIB.

hh3cSCPServerEnable (1.3.6.1.4.1.25506.2.22.1.1.1.10)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSCPServerEnable (1.3.6.1.4.1.25506.2.22.1.1.1.10)

read-write

INTEGER

enableSCPServer(1),

disableSCPServer(2)

Enable or disable SCP server.

As per the MIB.

hh3cSSHAttemptUserName (1.3.6.1.4.1.25506.2.22.1.2.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cSSHAttemptUserName (1.3.6.1.4.1.25506.2.22.1.2.1)	accessible-for-notify	DisplayString	Standard MIB values.	Name of the user who failed to connect to the server.	Length: 1 to 255 characters.

hh3cSSHAttemptIpAddrType (1.3.6.1.4.1.25506.2.22.1.2.2)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSSHAttemptIpAddrType (1.3.6.1.4.1.25506.2.22.1.2.2)

accessible-for-notify

InetAddressType

INTEGER{

unknown(0),

ipv4(1),

ipv6(2),

dns(16)

}

Address type of the user who failed to connect to the server.

As per the MIB.

hh3cSSHAttemptIpAddr (1.3.6.1.4.1.25506.2.22.1.2.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cSSHAttemptIpAddr (1.3.6.1.4.1.25506.2.22.1.2.3)	accessible-for-notify	InetAddress	OCTET STRING (0..255)	Address of user who failed to connect to the server.	As per the MIB.

hh3cSSHUserAuthFailureReason (1.3.6.1.4.1.25506.2.22.1.2.4)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cSSHUserAuthFailureReason (1.3.6.1.4.1.25506.2.22.1.2.4)

accessible-for-notify

INTEGER

exceedRetries(1),

authTimeout(2),

otherReason(3)

Reason for the connection failure.

As per the MIB.

Tabular objects

hh3cSSHUserConfigTable

About this table

Use this table to configure or obtain SSH user information.

Support for operations

Create	Edit/Modify	Delete	Read
Supported	Supported	Supported	Supported

Columns

The table index is hh3cSSHUserName.

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cSSHUserName (1.3.6.1.4.1.25506.2.22.1.1.2.1.1.1)	not-accessible	DisplayString	Standard MIB values.	Name of an SSH user.	Length: 1 to 255 characters.
hh3cSSHUserServiceType (1.3.6.1.4.1.25506.2.22.1.1.2.1.1.2)	read-create	INTEGER	invalid(1), all(2), stelnet(3), sftp(4), scp(5), netconf(6)	Service type of the SSH user.	The default value is invalid(1).
hh3cSSHUserAuthType (1.3.6.1.4.1.25506.2.22.1.1.2.1.1.3)	read-create	INTEGER	invalid(1), password(2), publicKey(3), any(4), publicKeyPassword(5), keyboardInteractive(6)	Authentication type for the SSH user.	The default value is invalid(1). If the value is password, the user must pass password authentication of AAA. If the value is publicKey, the user must pass the public key authentication of PKEY module. If the value is any, the user must pass password or public key authentication. If the value is publicKeyPassword, the user must pass both public key authentication and password authentication.
hh3cSSHUserPublicKeyName (1.3.6.1.4.1.25506.2.22.1.1.2.1.1.4)	read-create	DisplayString	Standard MIB values.	Name of the public key used for authentication of the SSH user.	Length: 1 to 64 characters. The default value is a zero-length string. The value for this object is obtained from the public key generated in the PKEY module.
hh3cSSHUserRowStatus (1.3.6.1.4.1.25506.2.22.1.1.2.1.1.6)	read-create	RowStatus	active(1), notInService(2), notReady(3), createAndGo(4), createAndWait(5), destroy(6)	Row status.	When the hh3cSSHUserRowStatus is set to active(1), no objects in the conceptual row can be modified. In particular, a newly created user row which uses public key authentication cannot be made active(1) until the corresponding instance of `hh3cSSHUserAuthType' is 'publicKey' or 'publicKeyPassword', and the 'hh3cSSHUserPublicKeyName' or at least one of the 'hh3cSSHUserPublicKeyName[2-6]' is configured appropriately.

hh3cSSHSessionInfoTable

About this table

This table contains SSH session information.

Support for operations

Create	Edit/Modify	Delete	Read
Not supported	Not supported	Not supported	Supported

Columns

The table index is hh3cSSHSessionID.

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cSSHSessionID (1.3.6.1.4.1.25506.2.22.1.1.3.1.1)	not-accessible	Integer32	Standard MIB values.	VTY number of an SSH session.	As per the MIB.
hh3cSSHSessionUserName (1.3.6.1.4.1.25506.2.22.1.1.3.1.2)	read-only	DisplayString	Standard MIB values.	User name of the SSH session.	Length: 1 to 255 characters.
hh3cSSHSessionUserIpAddrType (1.3.6.1.4.1.25506.2.22.1.1.3.1.3)	read-only	InetAddressType	INTEGER{ unknown(0), ipv4(1), ipv6(2), dns(16) }	User IP address type of the SSH session.	As per the MIB.
hh3cSSHSessionUserIpAddr (1.3.6.1.4.1.25506.2.22.1.1.3.1.4)	read-only	InetAddress	OCTET STRING (0..255)	User IP address of the SSH session.	As per the MIB.
hh3cSSHSessionClientVersion (1.3.6.1.4.1.25506.2.22.1.1.3.1.5)	read-only	DisplayString	Standard MIB values.	Client protocol version of the SSH session.	As per the MIB.
hh3cSSHSessionServiceType (1.3.6.1.4.1.25506.2.22.1.1.3.1.6)	read-only	INTEGER	invalid(1), stelnet(2), sftp(3), scp(4), netconf(5)	Service type of the SSH session.	As per the MIB.
hh3cSSHSessionEncry (1.3.6.1.4.1.25506.2.22.1.1.3.1.7)	read-only	INTEGER	invalid(1), aes128CBC(2), desCBC(3), des3CBC(4), aes128CTR(5), aes192CTR(6), aes256CTR(7), aes128GCM(8), aes256GCM(9), aes256CBC(10), other(11)	Encryption algorithm of the SSH session.	As per the MIB.
hh3cSSHSessionState (1.3.6.1.4.1.25506.2.22.1.1.3.1.8)	read-only	INTEGER	init(1), verExchange(2), keysExchange(3), authRequest(4), serviceRequest(5), established(6), disconnect(7)	Status of the SSH session.	As per the MIB.

17-Security

About this table

Support for operations

Columns

About this table

Support for operations

Columns

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

News & Events

Contact Us