module Cisco-IOS-XR-crypto-ssh-oper {

    yang-version 1;

    namespace
      "http://cisco.com/ns/yang/Cisco-IOS-XR-crypto-ssh-oper";

    prefix crypto-ssh-oper;

    import Cisco-IOS-XR-types {
      prefix xr;
    }
    import cisco-semver {
      prefix semver;
    }

    include Cisco-IOS-XR-crypto-ssh-oper-sub2 {
      revision-date "2021-06-04";
    }
    include Cisco-IOS-XR-crypto-ssh-oper-sub1 {
      revision-date "2021-06-04";
    }

    organization "Cisco Systems, Inc.";

    contact
      "Cisco Systems, Inc.
     Customer Service
     
     Postal: 170 West Tasman Drive
     San Jose, CA 95134
     
     Tel: +1 800 553-NETS
     
     E-mail: cs-yang@cisco.com";

    description
      "This module contains a collection of YANG definitions
     for Cisco IOS-XR crypto-ssh package operational data.
     
     This module contains definitions
     for the following management objects:
       ssh1: Crypto Secure Shell(SSH) data
       ssh: Crypto Secure Shell(SSH) data
     
     Copyright (c) 2013-2021 by Cisco Systems, Inc.
     All rights reserved.";

    revision "2021-06-04" {
      description
        "Default option for authentication.
       2021-05-10
         RSA keys allowed in FIPS mode
       2021-03-16
         Max auth limit and certificate username option added for show ssh server.
       2020-11-18
         Port forwarding options in oper data.
       2020-03-05
         Modified show ssh CLI.";
    }

    revision "2020-01-21" {
      description
        "Yang support to import pubkey for user in config mode";
    }

    revision "2019-07-08" {
      description
        "Introducing show ssh server CLI.";
    }

    revision "2019-04-05" {
      description
        "Establish semantic version baseline.";
    }

    revision "2017-08-25" {
      description
        "Introducing show ssh history CLI.";
    }

    revision "2017-05-01" {
      description
        "Fixing backward compatibility error in module.";
    }

    revision "2015-06-02" {
      description "IOS XR 5.3.2 revision.";
    }

    revision "2015-01-07" {
      description "IOS XR 5.3.1 revision.";
    }

    semver:module-version "2.0.0";
    semver:module-version "1.1.0";
    semver:module-version "1.0.1";

    container ssh1 {
      config false;
      description
        "Crypto Secure Shell(SSH) data";
      container kex {
        description
          "key exchange method data";
        container nodes {
          description
            "Node-specific ssh session details";
          list node {
            key "node-name";
            description
              "SSH session details for a particular node";
            leaf node-name {
              type xr:Node-id;
              description "Node name";
            }

            container incoming-sessions {
              description
                "List of incoming sessions";
              list session-detail-info {
                description
                  "session detail info";
                leaf session-id {
                  type uint32;
                  description "Session ID";
                }

                leaf key-exchange {
                  type Kex-name;
                  description
                    "Key exchange name";
                }

                leaf public-key {
                  type Hostkey;
                  description
                    "Host key algorithm";
                }

                leaf in-cipher {
                  type Cipher;
                  description
                    "In cipher algorithm";
                }

                leaf out-cipher {
                  type Cipher;
                  description
                    "Out cipher algorithm";
                }

                leaf in-mac {
                  type Mac;
                  description "In MAC";
                }

                leaf out-mac {
                  type Mac;
                  description "Out MAC";
                }

                leaf start-time {
                  type string;
                  description
                    "session start time";
                }

                leaf end-time {
                  type string;
                  description
                    "session end time";
                }
              }  // list session-detail-info
            }  // container incoming-sessions

            container outgoing-connections {
              description
                "List of outgoing connections";
              list session-detail-info {
                description
                  "session detail info";
                leaf session-id {
                  type uint32;
                  description "Session ID";
                }

                leaf key-exchange {
                  type Kex-name;
                  description
                    "Key exchange name";
                }

                leaf public-key {
                  type Hostkey;
                  description
                    "Host key algorithm";
                }

                leaf in-cipher {
                  type Cipher;
                  description
                    "In cipher algorithm";
                }

                leaf out-cipher {
                  type Cipher;
                  description
                    "Out cipher algorithm";
                }

                leaf in-mac {
                  type Mac;
                  description "In MAC";
                }

                leaf out-mac {
                  type Mac;
                  description "Out MAC";
                }

                leaf start-time {
                  type string;
                  description
                    "session start time";
                }

                leaf end-time {
                  type string;
                  description
                    "session end time";
                }
              }  // list session-detail-info
            }  // container outgoing-connections
          }  // list node
        }  // container nodes
      }  // container kex
    }  // container ssh1

    container ssh {
      config false;
      description
        "Crypto Secure Shell(SSH) data";
      container session {
        description "Crypto SSH session";
        container rekey {
          description
            "SSH session rekey information";
          container incoming-sessions {
            description
              "List of incoming sessions";
            list session-rekey-info {
              description
                "session rekey info";
              leaf session-id {
                type uint32;
                description "Session ID";
              }

              leaf session-rekey-count {
                type uint32;
                description
                  "Session Rekey Count";
              }

              leaf time-to-rekey {
                type string;
                description "Time To Rekey";
              }

              leaf volume-to-rekey {
                type string;
                description
                  "Volume To Rekey";
              }
            }  // list session-rekey-info
          }  // container incoming-sessions

          container outgoing-connections {
            description
              "List of outgoing connections";
            list session-rekey-info {
              description
                "session rekey info";
              leaf session-id {
                type uint32;
                description "Session ID";
              }

              leaf session-rekey-count {
                type uint32;
                description
                  "Session Rekey Count";
              }

              leaf time-to-rekey {
                type string;
                description "Time To Rekey";
              }

              leaf volume-to-rekey {
                type string;
                description
                  "Volume To Rekey";
              }
            }  // list session-rekey-info
          }  // container outgoing-connections
        }  // container rekey

        container history-detail {
          description
            "SSH session history detail information";
          container incoming-sessions {
            description
              "List of incoming sessions";
            list session-detail-info {
              description
                "session detail info";
              leaf session-id {
                type uint32;
                description "Session ID";
              }

              leaf key-exchange {
                type Kex-name;
                description
                  "Key exchange name";
              }

              leaf public-key {
                type Hostkey;
                description
                  "Host key algorithm";
              }

              leaf in-cipher {
                type Cipher;
                description
                  "In cipher algorithm";
              }

              leaf out-cipher {
                type Cipher;
                description
                  "Out cipher algorithm";
              }

              leaf in-mac {
                type Mac;
                description "In MAC";
              }

              leaf out-mac {
                type Mac;
                description "Out MAC";
              }

              leaf start-time {
                type string;
                description
                  "session start time";
              }

              leaf end-time {
                type string;
                description
                  "session end time";
              }
            }  // list session-detail-info
          }  // container incoming-sessions

          container outgoing-connections {
            description
              "List of outgoing connections";
            list session-detail-info {
              description
                "session detail info";
              leaf session-id {
                type uint32;
                description "Session ID";
              }

              leaf key-exchange {
                type Kex-name;
                description
                  "Key exchange name";
              }

              leaf public-key {
                type Hostkey;
                description
                  "Host key algorithm";
              }

              leaf in-cipher {
                type Cipher;
                description
                  "In cipher algorithm";
              }

              leaf out-cipher {
                type Cipher;
                description
                  "Out cipher algorithm";
              }

              leaf in-mac {
                type Mac;
                description "In MAC";
              }

              leaf out-mac {
                type Mac;
                description "Out MAC";
              }

              leaf start-time {
                type string;
                description
                  "session start time";
              }

              leaf end-time {
                type string;
                description
                  "session end time";
              }
            }  // list session-detail-info
          }  // container outgoing-connections
        }  // container history-detail

        container brief {
          description
            "SSH session brief information";
          container incoming-sessions {
            description
              "List of incoming sessions";
            list session-brief-info {
              description
                "session brief info";
              leaf session-id {
                type uint32;
                description "Session ID";
              }

              leaf node-name {
                type xr:Node-id;
                description "Node name";
              }

              leaf session-state {
                type States;
                description
                  "SSH session state";
              }

              leaf user-id {
                type string;
                description "User ID";
              }

              leaf host-address {
                type string;
                description "Host address";
              }

              leaf version {
                type Version;
                description
                  "SSH state version";
              }

              leaf authentication-type {
                type Authen;
                description
                  "Authentication method";
              }

              list mc-info {
                description
                  "List of channel info";
                leaf channel-id {
                  type uint32;
                  description "Channel ID";
                }

                leaf connection-type {
                  type Connection;
                  description
                    "Channel Connection Type";
                }

                leaf vty-line-number {
                  type uint32;
                  description
                    "VTY line number";
                }

                leaf vty-assigned {
                  type boolean;
                  description
                    "Boolean indicating whether line VTY line number
is valid";
                }
              }  // list mc-info
            }  // list session-brief-info
          }  // container incoming-sessions

          container outgoing-sessions {
            description
              "List of outgoing sessions";
            list session-brief-info {
              description
                "session brief info";
              leaf session-id {
                type uint32;
                description "Session ID";
              }

              leaf node-name {
                type xr:Node-id;
                description "Node name";
              }

              leaf session-state {
                type States;
                description
                  "SSH session state";
              }

              leaf user-id {
                type string;
                description "User ID";
              }

              leaf host-address {
                type string;
                description "Host address";
              }

              leaf version {
                type Version;
                description
                  "SSH state version";
              }

              leaf authentication-type {
                type Authen;
                description
                  "Authentication method";
              }

              list mc-info {
                description
                  "List of channel info";
                leaf channel-id {
                  type uint32;
                  description "Channel ID";
                }

                leaf connection-type {
                  type Connection;
                  description
                    "Channel Connection Type";
                }

                leaf vty-line-number {
                  type uint32;
                  description
                    "VTY line number";
                }

                leaf vty-assigned {
                  type boolean;
                  description
                    "Boolean indicating whether line VTY line number
is valid";
                }
              }  // list mc-info
            }  // list session-brief-info
          }  // container outgoing-sessions
        }  // container brief

        container history {
          description
            "SSH session history information";
          container incoming-sessions {
            description
              "List of incoming sessions";
            list session-history-info {
              description
                "session history info";
              leaf session-id {
                type uint32;
                description "Session ID";
              }

              leaf node-name {
                type xr:Node-id;
                description "Node name";
              }

              leaf user-id {
                type string;
                description "User ID";
              }

              leaf host-address {
                type string;
                description "Host address";
              }

              leaf version {
                type Version;
                description
                  "SSH state version";
              }

              leaf authentication-type {
                type Authen;
                description
                  "Authentication method";
              }

              list mc-info {
                description
                  "List of channel info";
                leaf channel-id {
                  type uint32;
                  description "Channel ID";
                }

                leaf connection-type {
                  type Connection;
                  description
                    "Channel Connection Type";
                }

                leaf vty-line-number {
                  type uint32;
                  description
                    "VTY line number";
                }

                leaf vty-assigned {
                  type boolean;
                  description
                    "Boolean indicating whether line VTY line number
is valid";
                }
              }  // list mc-info
            }  // list session-history-info
          }  // container incoming-sessions
        }  // container history

        container detail {
          description
            "SSH session detail information";
          container incoming-sessions {
            description
              "List of incoming sessions";
            list session-detail-info {
              description
                "session detail info";
              leaf session-id {
                type uint32;
                description "Session ID";
              }

              leaf key-exchange {
                type Kex-name;
                description
                  "Key exchange name";
              }

              leaf public-key {
                type Hostkey;
                description
                  "Host key algorithm";
              }

              leaf in-cipher {
                type Cipher;
                description
                  "In cipher algorithm";
              }

              leaf out-cipher {
                type Cipher;
                description
                  "Out cipher algorithm";
              }

              leaf in-mac {
                type Mac;
                description "In MAC";
              }

              leaf out-mac {
                type Mac;
                description "Out MAC";
              }

              leaf start-time {
                type string;
                description
                  "session start time";
              }

              leaf end-time {
                type string;
                description
                  "session end time";
              }
            }  // list session-detail-info
          }  // container incoming-sessions

          container outgoing-connections {
            description
              "List of outgoing connections";
            list session-detail-info {
              description
                "session detail info";
              leaf session-id {
                type uint32;
                description "Session ID";
              }

              leaf key-exchange {
                type Kex-name;
                description
                  "Key exchange name";
              }

              leaf public-key {
                type Hostkey;
                description
                  "Host key algorithm";
              }

              leaf in-cipher {
                type Cipher;
                description
                  "In cipher algorithm";
              }

              leaf out-cipher {
                type Cipher;
                description
                  "Out cipher algorithm";
              }

              leaf in-mac {
                type Mac;
                description "In MAC";
              }

              leaf out-mac {
                type Mac;
                description "Out MAC";
              }

              leaf start-time {
                type string;
                description
                  "session start time";
              }

              leaf end-time {
                type string;
                description
                  "session end time";
              }
            }  // list session-detail-info
          }  // container outgoing-connections
        }  // container detail
      }  // container session

      container server {
        description "SSH server parameters";
        leaf version {
          type string {
            length "0..10";
          }
          description "Version";
        }

        leaf port {
          type uint32;
          description "SSH Port";
        }

        leaf vrf {
          type string {
            length "0..2000";
          }
          description "Vrfs and acls";
        }

        leaf netconfport {
          type uint32;
          description "Netconf Port";
        }

        leaf netconfvrf {
          type string {
            length "0..2000";
          }
          description
            "Netconf vrfs and acls";
        }

        leaf netconfver {
          type string {
            length "0..10";
          }
          description "Netconf Version";
        }

        leaf hostkeyalgo {
          type string {
            length "0..230";
          }
          description "Hostkey algorithms";
        }

        leaf kexalgo {
          type string {
            length "0..230";
          }
          description
            "Key exchange algorithms";
        }

        leaf cipheralgo {
          type string {
            length "0..230";
          }
          description
            "Encryption algorithms";
        }

        leaf macalgo {
          type string {
            length "0..230";
          }
          description "Mac algorithms";
        }

        leaf backupserver {
          type string {
            length "0..100";
          }
          description "Backup SSH server";
        }

        leaf trustpointhost {
          type string {
            length "0..128";
          }
          description "Trustpoint for host";
        }

        leaf trustpointuser {
          type string {
            length "0..1289";
          }
          description "Trustpoint for user";
        }

        leaf dscp {
          type uint32;
          description "Dscp";
        }

        leaf ratelimit {
          type uint32;
          description "ratelimit";
        }

        leaf sessionlimit {
          type uint32;
          description "session limit";
        }

        leaf rekeytime {
          type uint32;
          description "Rekey Time";
        }

        leaf rekeyvolume {
          type uint32;
          description "Rekey Volume";
        }

        leaf windowscalefactor {
          type uint32;
          description "Window scale factor";
        }

        leaf passwordauthen {
          type boolean;
          description
            "Password Authentication support";
        }

        leaf keyboardinteractiveauthen {
          type boolean;
          description
            "Pubkey Authentication support";
        }

        leaf pubkeyauthen {
          type boolean;
          description
            "Pubkey Authentication support";
        }

        leaf certificateauthen {
          type boolean;
          description
            "Certificate based Authentication support";
        }

        leaf portforwarding {
          type string {
            length "0..10";
          }
          description
            "port forwarding for ssh server";
        }

        leaf maxauthlimit {
          type uint32;
          description "Max Auth limit";
        }

        leaf certificate-username {
          type string {
            length "0..50";
          }
          description
            "SSHD certificate username";
        }
      }  // container server
    }  // container ssh
  }  // module Cisco-IOS-XR-crypto-ssh-oper