XEDIA-SSHC-MIB DEFINITIONS ::= BEGIN

IMPORTS 
    RowStatus, DisplayString
        FROM SNMPv2-TC

    MODULE-IDENTITY, OBJECT-TYPE, IpAddress,  
    Integer32, Counter32, TimeTicks
        FROM SNMPv2-SMI

    MODULE-COMPLIANCE, OBJECT-GROUP
        FROM SNMPv2-CONF

    xediaMibs, LongDisplayString
        FROM XEDIA-REG
    ;    

xediaSshCMIB MODULE-IDENTITY
    LAST-UPDATED "9908142200Z" -- April 14, 1998   
    ORGANIZATION "Xedia Corp."
    CONTACT-INFO
        "support@xedia.com"
    DESCRIPTION
        "This module defines Secure Shell Client configuration and 
         statistics for Xedia AP devices."
    ::= { xediaMibs 45 }

-- SSHC-Top-level organization of the MIB

xSshCObjects          OBJECT IDENTIFIER ::= { xediaSshCMIB 1 }
xSshCConformance      OBJECT IDENTIFIER ::= { xediaSshCMIB 2 }

-- Secure Shell Daemon Objects

-- ********************************
-- * Top level breakdown of groups
-- ********************************
xSshCGlobal          OBJECT IDENTIFIER ::= { xSshCObjects 1 }
xSshCSession         OBJECT IDENTIFIER ::= { xSshCObjects 2 }
xSshCHostKeys        OBJECT IDENTIFIER ::= { xSshCObjects 3 }
xSshCPkiKeys         OBJECT IDENTIFIER ::= { xSshCObjects 4 }

-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-- ~ Global SSH Client
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xSshCGlobalCfg       OBJECT IDENTIFIER ::= { xSshCGlobal 1 }
xSshCGlobalOper      OBJECT IDENTIFIER ::= { xSshCGlobal 2 }
xSshCGlobalStats     OBJECT IDENTIFIER ::= { xSshCGlobal 3 }

-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-- ~ Individual Session info
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xSshCSessionOper     OBJECT IDENTIFIER ::= { xSshCSession 1 }

-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-- ~ Host key infor/config
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xSshCHostKeyStats  OBJECT IDENTIFIER ::= { xSshCHostKeys 1 }
xSshCHostKeyTable  OBJECT IDENTIFIER ::= { xSshCHostKeys 2 }

-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-- General PKI Key information
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xSshCPkiKeyTable  OBJECT IDENTIFIER ::= { xSshCPkiKeys 1 }

-- *************************************
-- * Secure Shell Client Global Config
-- *************************************
--
xsshcCfgKeyName OBJECT-TYPE
    SYNTAX      DisplayString 
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "The name of the PKI key-pair that is configured in the box
         for use by SSH.  It SHOULD be a DSA formatted key.  If this
         index is left blank, the first available key will be used."
    DEFVAL { "" }
    ::= { xSshCGlobalCfg 1 }

xsshcCfgSessionEvents OBJECT-TYPE
    SYNTAX      INTEGER { enabled(1), disabled(2) }
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "The overall control of session event generation that is used
         in conjuction with the normal system event filters.  If the session
         flag is 'disabled' no session events will be sent.  If the
         flag is 'enabled' the normal event filter mechanisms will
         still be used to customize input/output of the events."
    DEFVAL      { enabled }
    ::= { xSshCGlobalCfg 2 }

xsshcCfgIdleTimeOut OBJECT-TYPE
    SYNTAX      INTEGER(0..1440)
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "The number of minutes without any user input, that is 
	 allowed, before disconnecting a session.  Setting this value
	 to zero disables the idle-timeout feature."
    DEFVAL      { 2 }
    ::= { xSshCGlobalCfg 3 }

xsshcCfgHostAuthControl OBJECT-TYPE
    SYNTAX      INTEGER { none(1), easyHostKeyCheck(2), strictHostKeyCheck(3) }
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "The type of host key checking that will be performed on the ssh server
         key from the client.  The value 'none' always accepts the host key
         as presented.  The value of 'easyHostKeyCheck' will do a host key
         compare if the host key is already known.  If it is not known, it 
         will accept the key and add it to the client configuration.  The
         value of 'strictHostKeyCheck' always performs a host key compare.
         If the entry does not exist, it is considered to be an invalid
         key."
    DEFVAL      { none }
    ::= { xSshCGlobalCfg 4 }

xsshcCfgDbgTraceLevel OBJECT-TYPE
    SYNTAX      Integer32
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "The numeric value that is used to apply 'trace-levels' of the 
         debug events.  It's intended to be used by Xedia Support
         only when normal events and statistics are not able to 
         provide enough information to properly debug problems
         in the field.  This value is NOT saved in nvram."
    DEFVAL      { 0 }
    ::= { xSshCGlobalCfg 5 }

-- *************************************
-- * General SSH Operation status
-- *************************************
--
xsshcOperKeyName OBJECT-TYPE
    SYNTAX      DisplayString 
    MAX-ACCESS  read-only 
    STATUS      current
    DESCRIPTION
        "The operational PKI key name index being used."
    ::= { xSshCGlobalOper 1 }

xsshcOperCiphers OBJECT-TYPE
    SYNTAX      DisplayString 
    MAX-ACCESS  read-only 
    STATUS      current
    DESCRIPTION
        "The list of Ciphers that can be negotiated base on 
         what functions are available with the current version of software." 
    ::= { xSshCGlobalOper 2 }

xsshcOperMacs OBJECT-TYPE
    SYNTAX      DisplayString 
    MAX-ACCESS  read-only 
    STATUS      current
    DESCRIPTION
        "The list of MAC algorithms that can be negotiated based on
         what functions are available with the current version of software." 
    ::= { xSshCGlobalOper 3 }

xsshcOperCompressions OBJECT-TYPE
    SYNTAX      DisplayString 
    MAX-ACCESS  read-only 
    STATUS      current
    DESCRIPTION
        "The list of Compression algorithms that can be negotiated based on
         what functions are available with the current version of software." 
    ::= { xSshCGlobalOper 4 }

-- *************************************
-- * Session Operational/Stats Info
-- *************************************
--
xsshcSessionTable OBJECT-TYPE
    SYNTAX      SEQUENCE OF XsshcSessionEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "A list of active SSH sessions entries"
    ::= { xSshCSessionOper 1 }
 
xsshcSessionEntry     OBJECT-TYPE
    SYNTAX      XsshcSessionEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "An entry containing information about an SSH session"
    INDEX    { xsshcSessionIndex }
    ::= { xsshcSessionTable 1 }

XsshcSessionEntry ::=
    SEQUENCE {
      -- 
      -- Status
      -- 
      xsshcSessionIndex              INTEGER,
      xsshcSessionRemoteIpAddress    IpAddress,
      xsshcSessionRemoteNode         DisplayString,
      xsshcSessionRemoteUser         DisplayString,
      xsshcSessionNegotiation        DisplayString,
      xsshcSessionTime               TimeTicks,
      xsshcSessionUiBytesIn          Counter32,
      xsshcSessionUiBytesOut         Counter32,
      xsshcSessionSftpBytesIn        Counter32,
      xsshcSessionSftpBytesOut       Counter32,
      xsshcSessionRowStatus          INTEGER
    }

xsshcSessionIndex OBJECT-TYPE
    SYNTAX      INTEGER (1..10) 
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
        "The index of the session."
    ::= { xsshcSessionEntry 1 }

xsshcSessionRemoteIpAddress OBJECT-TYPE
    SYNTAX      IpAddress 
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The ip address of the connected client."
    ::= { xsshcSessionEntry 2 }

xsshcSessionRemoteNode OBJECT-TYPE
    SYNTAX      DisplayString
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The node identifier of the connected client."
    ::= { xsshcSessionEntry 3 }

xsshcSessionRemoteUser OBJECT-TYPE
    SYNTAX      DisplayString
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The remote user of the session."
    ::= { xsshcSessionEntry 4 }

xsshcSessionNegotiation OBJECT-TYPE
    SYNTAX      DisplayString
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The negotiated results of the session."
    ::= { xsshcSessionEntry 5 }

xsshcSessionTime OBJECT-TYPE
    SYNTAX      TimeTicks 
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The number of 1/100 seconds that the session has been connected."
    ::= { xsshcSessionEntry 6 }

xsshcSessionUiBytesIn OBJECT-TYPE
    SYNTAX      Counter32 
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The number of data bytes passed to the internal user interface
	 up from the Secure Shell layer."
    ::= { xsshcSessionEntry 7 }

xsshcSessionUiBytesOut OBJECT-TYPE
    SYNTAX      Counter32 
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The number of data bytes passed from the internal user interface
	 down to the Secure Shell layer."
    ::= { xsshcSessionEntry 8 }

xsshcSessionSftpBytesIn OBJECT-TYPE
    SYNTAX      Counter32 
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The number of data bytes passed to the internal sftp interface
	 up from the Secure Shell layer."
    ::= { xsshcSessionEntry 9 }

xsshcSessionSftpBytesOut OBJECT-TYPE
    SYNTAX      Counter32 
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The number of data bytes passed from the internal sftp interface
	 down to the Secure Shell layer."
    ::= { xsshcSessionEntry 10 }

xsshcSessionRowStatus OBJECT-TYPE
    SYNTAX      INTEGER { active(1), destroy(6) }
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "The status of the entry.  The only operations that are allowed
         are 'active' and 'destroy'.  Existing sessions can be set to
         'active' which causes no change.  And, existing sessions can
         be set to 'destroy' to abort the particular session."
    ::= { xsshcSessionEntry 11 }

-- ****************************************************************
-- * Host Key Information
-- ****************************************************************
--
-- Statistics
--
xsshcHostKeyCountTotal OBJECT-TYPE
    SYNTAX      Integer32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The number of configured SSH Host keys."
    ::= { xSshCHostKeyStats 1 }

xsshcHostKeyCountActive OBJECT-TYPE
    SYNTAX      Integer32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The number of active SSH Host keys."
    ::= { xSshCHostKeyStats 2 }

--
-- Key Table
--
xsshcHostKeyTable OBJECT-TYPE
    SYNTAX      SEQUENCE OF XsshcHostKeyEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "A list of active SSH sessions host key entries"
    ::= { xSshCHostKeyTable 1 }

xsshcHostKeyEntry     OBJECT-TYPE
    SYNTAX      XsshcHostKeyEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "An entry containing information about an SSH session"
    INDEX    { xsshcHostKeyIpAddress, xsshcHostKeyUser }
    ::= { xsshcHostKeyTable 1 }

XsshcHostKeyEntry ::=
    SEQUENCE {
      xsshcHostKeyIpAddress        IpAddress,
      xsshcHostKeyUser             DisplayString,
      xsshcHostKeyData             LongDisplayString,
      xsshcHostKeyRowStatus        RowStatus
    }

xsshcHostKeyIpAddress OBJECT-TYPE
    SYNTAX      IpAddress
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
        "The ip address of the host associated with the key entry."
    ::= { xsshcHostKeyEntry 1 }

xsshcHostKeyUser OBJECT-TYPE
    SYNTAX      DisplayString(SIZE (1..32))
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
        "The name of the user associated with the key entry."
    ::= { xsshcHostKeyEntry 2 }

xsshcHostKeyData OBJECT-TYPE
    SYNTAX      LongDisplayString(SIZE (0..2048))
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
        "The key data for the associated host/user."
    DEFVAL      { "" }
    ::= { xsshcHostKeyEntry 3 }

xsshcHostKeyRowStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
        "The status of the entry. "
    DEFVAL      { active }
    ::= { xsshcHostKeyEntry 4 }

-- ****************************************************************
-- General Pki Key Information
-- ****************************************************************
--
-- Key Table
-- 
xsshcPkiKeyTable OBJECT-TYPE
    SYNTAX      SEQUENCE OF XsshcPkiKeyEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "A list of active SSH sessions entries"
    ::= { xSshCPkiKeyTable 1 }
 
xsshcPkiKeyEntry     OBJECT-TYPE
    SYNTAX      XsshcPkiKeyEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "An entry containing information about an SSH session"
    INDEX    { xsshcPkiKeyName }
    ::= { xsshcPkiKeyTable 1 }

XsshcPkiKeyEntry ::=
    SEQUENCE {
      xsshcPkiKeyName              DisplayString,
      xsshcPkiKeyPublicData    LongDisplayString
    }

xsshcPkiKeyName OBJECT-TYPE
    SYNTAX      DisplayString(SIZE (1..32))
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
        "The name of the user associated with the key entry."
    ::= { xsshcPkiKeyEntry 1 }

xsshcPkiKeyPublicData OBJECT-TYPE
    SYNTAX      LongDisplayString(SIZE (0..2048)) 
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The key data for the associated host/user."
    DEFVAL      { "" }
    ::= { xsshcPkiKeyEntry 2 }

-- ****************************************************************
-- Conformance Information
-- ****************************************************************

xsshcCompliances OBJECT IDENTIFIER ::= { xSshCConformance 1 }
xsshcGroups      OBJECT IDENTIFIER ::= { xSshCConformance 2 }

--
-- Compliance Statements
--
xsshcCompliance MODULE-COMPLIANCE
    STATUS      current
    DESCRIPTION
        "The compliance statement for all agents that support this
        MIB. A compliant agent implements all objects defined in this
        MIB."
    MODULE  -- this module
    MANDATORY-GROUPS {
        xsshcAllGroup
    }
    ::= { xsshcCompliances 1 }

--
-- All Object Groups
--
xsshcAllGroup OBJECT-GROUP
    OBJECTS {
       -- ******************************
       -- SSH Global info
       -- ******************************
       --
       -- Global configuration 
       --
       xsshcCfgKeyName, 
       xsshcCfgSessionEvents,
       xsshcCfgIdleTimeOut,
       xsshcCfgHostAuthControl,
       xsshcCfgDbgTraceLevel,
       --
       -- Global Operational
       --
       xsshcOperKeyName,
       xsshcOperCiphers,
       xsshcOperMacs,
       xsshcOperCompressions,

       -- ******************************
       -- SSH Session info
       -- ******************************
       -- 
       -- Server Operational 
       -- 
       -- xsshcSessionIndex,
       xsshcSessionRemoteIpAddress,
       xsshcSessionRemoteNode,
       xsshcSessionRemoteUser,
       xsshcSessionNegotiation,
       xsshcSessionTime,
       xsshcSessionUiBytesIn,
       xsshcSessionUiBytesOut,
       xsshcSessionSftpBytesIn, 
       xsshcSessionSftpBytesOut,
       xsshcSessionRowStatus,

       -- ******************************
       -- SSH Host Key info 
       -- ******************************
       --
       -- Host Key Stats
       --
       xsshcHostKeyCountTotal, 
       xsshcHostKeyCountActive,
       --
       -- Host Key Table 
       --
       xsshcHostKeyData,
       xsshcHostKeyRowStatus,

       -- ******************************
       -- SSH Pki Key info 
       -- ******************************
       --
       -- Pki Key Table 
       --
       -- xsshcPkiKeyUser,
       xsshcPkiKeyPublicData
    }
    STATUS      current
    DESCRIPTION
        "The set of all accessible objects in this MIB."
    ::= { xsshcGroups 1 }

END