ELTEX-MES-SSH-MIB DEFINITIONS ::= BEGIN

-- Title:      Eltex MES SSH configuration
-- Version:    1.0
-- Date:       13-Jul-2018

IMPORTS
    MODULE-IDENTITY, OBJECT-TYPE                FROM SNMPv2-SMI
    TruthValue                                  FROM SNMPv2-TC
    ifIndex                                     FROM IF-MIB
    eltMes                                      FROM ELTEX-MES;

eltMesSsh MODULE-IDENTITY
                LAST-UPDATED "201709070000Z"
                ORGANIZATION "Eltex Enterprise Co, Ltd."
                CONTACT-INFO
                      "www.eltex-co.ru"
                DESCRIPTION
                      "Initial revision."
        ::= { eltMes 15 }

--
-- MIB Groups
--

eltMesSshServer OBJECT IDENTIFIER ::= { eltMesSsh 1 }
eltMesSshClient OBJECT IDENTIFIER ::= { eltMesSsh 2 }
eltMesScpServer OBJECT IDENTIFIER ::= { eltMesSsh 3 }

eltMesSshServerNotifications OBJECT IDENTIFIER ::= { eltMesSshServer 0 }
eltMesSshServerConfig        OBJECT IDENTIFIER ::= { eltMesSshServer 1 }
eltMesSshServerStatus        OBJECT IDENTIFIER ::= { eltMesSshServer 2 }

eltMesScpServerConfig        OBJECT IDENTIFIER ::= { eltMesScpServer 1 }

eltSshServerCipherList OBJECT-TYPE
    SYNTAX             BITS {
                           triple-des(0),
                           aes128(1),
                           aes192(2),
                           aes256(3),
                           arcfour(4),
                           none(5),
                           aes128-ctr(6),
                           aes192-ctr(7),
                           aes256-ctr(8),
                           aes128-gcm-openssh(9),
                           aes256-gcm-openssh(10),
                           chacha20-poly1305-openssh(11)
                       }
    MAX-ACCESS         read-write
    STATUS             current
    DEFVAL             { { triple-des, aes128, aes192, aes256, arcfour, aes128-ctr, 
                           aes192-ctr, aes256-ctr, aes128-gcm-openssh, aes256-gcm-openssh, 
                           chacha20-poly1305-openssh } }
    DESCRIPTION
        "Indicates cipher algorithms that allowed
        to use for connection by SSH." 
    ::= { eltMesSshServerConfig 1 }

eltSshServerKexList OBJECT-TYPE
    SYNTAX          BITS {
                        dh-group-exchange-sha1(0),
                        dh-group1-sha1(1),
                        curve25519-sha256-libssh(2),
                        diffie-hellman-group-exchange-sha256(3),
                        diffie-hellman-group16-sha512(4),
                        diffie-hellman-group18-sha512(5),
                        diffie-hellman-group14-sha256(6),
                        diffie-hellman-group14-sha1(7)
                    }
    MAX-ACCESS      read-write
    STATUS          current
    DEFVAL          { { dh-group-exchange-sha1, dh-group1-sha1, curve25519-sha256-libssh,
                        diffie-hellman-group-exchange-sha256, diffie-hellman-group16-sha512,
                        diffie-hellman-group18-sha512, diffie-hellman-group14-sha256,
                        diffie-hellman-group14-sha1 } }
    DESCRIPTION
        "Indicates key exchange algorithms that allowed
        to use for connection by SSH." 
    ::= { eltMesSshServerConfig 2 }

eltSshServerRegenerateHostKeySize OBJECT-TYPE
    SYNTAX      INTEGER (1024..2048)
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "Specifies the size of Server (Host) key regenerated by 
         the rlSshServerRegenerateHostKey scalar. To generate
         a key with custom size, specify it before setting a value
         to the rlSshServerRegenerateHostKey.
    
         The key size can be set only for RSA key algorithm.
         If 'DSA' value is set to the rlSshServerRegenerateHostKey,
         a key with the default key size (1024 bits) will be generated."
    DEFVAL  { 1024 }
    ::= { eltMesSshServerConfig 3 }

eltSshServerMacList OBJECT-TYPE
    SYNTAX             BITS {
                           hmac-sha2-256(0),
                           hmac-sha2-512(1),
                           hmac-sha1(2),
                           umac-64-etm-openssh(3),
                           hmac-sha2-256-etm-openssh(4),
                           hmac-sha2-512-etm-openssh(5),
                           hmac-sha1-etm-openssh(6),
                           umac-64-openssh(7)
                       }
    MAX-ACCESS         read-write
    STATUS             current
    DEFVAL             { { umac-64-etm-openssh, hmac-sha2-256-etm-openssh, hmac-sha2-512-etm-openssh,
                           hmac-sha1-etm-openssh, umac-64-openssh, hmac-sha2-256, hmac-sha2-512, hmac-sha1 } }
    DESCRIPTION
        "Indicates MAC algorithms that allowed
        to use for connection by SSH." 
    ::= { eltMesSshServerConfig 5 }

eltScpServerEnable OBJECT-TYPE
   SYNTAX       TruthValue
   MAX-ACCESS   read-write
   STATUS       current
   DESCRIPTION
       "Specifies whether Secure Copy Server enabled."
   DEFVAL  { false }
   ::= { eltMesScpServerConfig 1 }

END
