-- These MIBs were created on 05/027/2001
-- This module defines NetScreen private MIBs for Configuration monitoring
-- 
-- Copyright (c) 1999 - 2001 by NetScreen Technologies, Inc.
-- All rights reserved.
-- 

-- MODULE-IDENTITY
--  OrgName
--    Netscreen Technologies, Inc.
--  ContactInfo
--     Customer Support
--     
--     350 Oakmead Parkway
--     Sunnyvale, CA  94085
--     USA
--    
--     Tel: 1.877.NETSCREEN
--     E-mail: support@netscreen.com
--     Http://www.netscreen.com

--  Descr
--    This module defines the object that are used to monitor
--    all the configuration info  
--
--  Last modified date: 04/27/2002
--  More than one auth setting allowed in one system
--  Zhong Wang
--
--    

NETSCREEN-SET-AUTH-MIB DEFINITIONS ::= BEGIN
IMPORTS

    DisplayString 	FROM RFC1213-MIB 
    netscreenSetting FROM NETSCREEN-SMI;
             
    nsSetAuth OBJECT IDENTIFIER ::= { netscreenSetting 2 }
    nsSetAuthCfgTable OBJECT-TYPE 
    	SYNTAX SEQUENCE OF NsSetAuthCfgEntry
    	ACCESS not-accessible
    	STATUS mandatory
    	DESCRIPTION
    	        "The authentication configuration of NetScreen device."
    	::= { nsSetAuth 1 }
    	
    nsSetAuthCfgEntry OBJECT-TYPE
        SYNTAX  NsSetAuthCfgEntry
        ACCESS  not-accessible
        STATUS  mandatory
        DESCRIPTION
               "NetScreen admin user authentication setting table."
        INDEX   { nsSetAuthCfgIdx }
        ::= { nsSetAuthCfgTable 1 }

	NsSetAuthCfgEntry ::=
		SEQUENCE {
          nsSetAuthCfgIdx
          	  INTEGER,
          nsSetAuthCfgVsys
          	  INTEGER, 
          nsSetAuthCfgName
          	  DisplayString,
          nsSetAuthCfgPrimary
          	  DisplayString,
          nsSetAuthCfgBackup1
          	  DisplayString,
          nsSetAuthCfgBackup2
          	  DisplayString, 
          nsSetAuthCfgConnIdleTimeout
          	  INTEGER,
          nsSetAuthCfgAuthAccount
           	  INTEGER,
          nsSetAuthCfgIkeAccount
          	  INTEGER,
          nsSetAuthCfgL2tpAccount
              INTEGER,
          nsSetAuthCfgAdminAccount
          	  INTEGER,
          nsSetAuthCfgXauthAccount
          	  INTEGER,          	           	  
          nsSetAuthCfgPort
              INTEGER,
		  nsSetAuthCfgMethod
		      INTEGER,    
          nsSetAuthCfgSecCliRetry		           
              INTEGER,
	      nsSetAuthCfgSecCliTimeout
              INTEGER,
	      nsSetAuthCfgSecEncType
              INTEGER,
	      nsSetAuthCfgSecUseDuress
              INTEGER,
	      nsSetAuthCfgLDAPCni
              DisplayString,
	      nsSetAuthCfgLDAPDn
              DisplayString          
        }   
	nsSetAuthCfgIdx OBJECT-TYPE
        SYNTAX  INTEGER
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Authentiacation server config index."
        ::= { nsSetAuthCfgEntry 1 }

	nsSetAuthCfgVsys OBJECT-TYPE
        SYNTAX  INTEGER
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Virtural system the setting belongs to."
        ::= { nsSetAuthCfgEntry 2 }
        
	nsSetAuthCfgName OBJECT-TYPE
        SYNTAX  DisplayString (SIZE(0..32))
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Authentication server setting entry name."
        ::= { nsSetAuthCfgEntry 3 }

	nsSetAuthCfgPrimary OBJECT-TYPE
        SYNTAX  DisplayString (SIZE(0..32))
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Primary authentication server IP or domain name."
        ::= { nsSetAuthCfgEntry 4 }
	nsSetAuthCfgBackup1 OBJECT-TYPE
        SYNTAX  DisplayString (SIZE(0..32))
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Firsut backup authentication server IP or domain name.It's optional."
        ::= { nsSetAuthCfgEntry 5 }
	nsSetAuthCfgBackup2 OBJECT-TYPE
        SYNTAX  DisplayString (SIZE(0..32))
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Secondary backup authentication server IP or domain name.It's optional."
        ::= { nsSetAuthCfgEntry 6 }

	nsSetAuthCfgConnIdleTimeout OBJECT-TYPE
        SYNTAX  INTEGER 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "connection timeout threshold setting. 0 means no timeout setting."
        ::= { nsSetAuthCfgEntry 7 }

	nsSetAuthCfgAuthAccount OBJECT-TYPE
        SYNTAX  INTEGER {
        		no(0),
        		yes(1)
        } 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Allow authentiaction account."
        ::= { nsSetAuthCfgEntry 8 }

	nsSetAuthCfgIkeAccount OBJECT-TYPE
        SYNTAX  INTEGER {
        		no(0),
        		yes(1)
        } 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Allow IKE account."
        ::= { nsSetAuthCfgEntry 9 }
        
	nsSetAuthCfgL2tpAccount OBJECT-TYPE
        SYNTAX  INTEGER {
        		no(0),
        		yes(1)
        } 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Allow L2tp account."
        ::= { nsSetAuthCfgEntry 10 }

	nsSetAuthCfgAdminAccount OBJECT-TYPE
        SYNTAX  INTEGER {
        		no(0),
        		yes(1)
        } 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Allow administration account."
        ::= { nsSetAuthCfgEntry 11 }

	nsSetAuthCfgXauthAccount OBJECT-TYPE
        SYNTAX  INTEGER {
        		no(0),
        		yes(1)
        } 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Allow Xauth account."
        ::= { nsSetAuthCfgEntry 12 }

	nsSetAuthCfgMethod OBJECT-TYPE
        SYNTAX  INTEGER {
        		build-in-user-db(0),
        		radius-server(1),
        		secureId-server(2),
        		ldap-server(3)
        } 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "NetScreen device admin user authentication method."
        ::= { nsSetAuthCfgEntry 13 }
  
        
	nsSetAuthCfgPort OBJECT-TYPE
        SYNTAX  INTEGER 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Server listening port number."
        ::= { nsSetAuthCfgEntry 14 }
        
	nsSetAuthCfgSecCliRetry OBJECT-TYPE
        SYNTAX  INTEGER 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "SecureID client client retry times"
        ::= { nsSetAuthCfgEntry 15 }
        
	nsSetAuthCfgSecCliTimeout OBJECT-TYPE
        SYNTAX  INTEGER
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "SecureID client timeout threshold."
        ::= { nsSetAuthCfgEntry 16 }
        
	nsSetAuthCfgSecEncType OBJECT-TYPE
        SYNTAX  INTEGER {
        		sdi(0),
        		des(1)
        } 
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "SecureID traffic encryption type."
        ::= { nsSetAuthCfgEntry 17 }
        
	nsSetAuthCfgSecUseDuress OBJECT-TYPE
        SYNTAX  INTEGER {
        	no(0),
        	yes(1)
        }
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Use duress in SecureID authentication."
        ::= { nsSetAuthCfgEntry 18 }
        
	nsSetAuthCfgLDAPCni OBJECT-TYPE
        SYNTAX  DisplayString (SIZE(0..2))
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "LDAP server common name identifier"
        ::= { nsSetAuthCfgEntry 19 }
        
	nsSetAuthCfgLDAPDn OBJECT-TYPE
        SYNTAX  DisplayString (SIZE(0..32))
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "LDAP server distinguished name"
        ::= { nsSetAuthCfgEntry 20 }

END
