-- ================================================================================== -- Copyright (C) 2002 New H3C Tech. Co., Ltd. All rights reserved. -- -- Description: This file describes the MIB implementation of ndec -- Reference: -- Version: V1.6 -- History: -- for V1.0 -- Add MODULE-IDENTITY to mib -- V1.1 2004-9-9 lizhiyong -- add hh3chipsNDECSAListTable,hh3chikeSATable,hh3chipsIKEPolicyTable, -- hh3chipsStaticCryptomapTable,hh3chipsTransformNameSetTable,hh3chipsNDECLeaf, -- modify hh3chipsNDECInfoTable, -- V1.2 2004-9-14 lizhiyong -- delete useless comments -- modify the SYNTAX type of hh3chipsInPac,hh3chipsOutPac,hh3chipsInByte,hh3chipsOutByte -- and hh3chipsDropPac from Gauge to Counter32. -- delete the underscore character "_" which is note compliant with ASN.1 -- modify the whole file with SMIv2. -- V1.3 2004-10-12 updated by gaolong -- Remove variable value range from table SEQUENCE definition. -- V1.4 2004-10-21 lizhiyong -- modify hh3chipsStaticCryptomapMatchAddr range from 1..199 to 1..100000. -- update the description of hh3chipsNDECBackup node -- V1.5 2004-11-26 updated by gaolong -- File description updated -- V1.6 2007-1-29 updated by liukan -- Add a new value ealgXNsa in hh3chipsEncAlgorithm type. -- =================================================================================== HH3C-NDEC-MIB DEFINITIONS ::= BEGIN IMPORTS IpAddress, Counter32, Gauge32, Integer32 ,Unsigned32 ,NOTIFICATION-TYPE,MODULE-IDENTITY,OBJECT-TYPE FROM SNMPv2-SMI DisplayString, TruthValue FROM SNMPv2-TC hh3cmlsr FROM HH3C-OID-MIB; -- HH3C-NDEC-MIB definition hh3cNDEC MODULE-IDENTITY LAST-UPDATED "200409150000Z" -- August 15, 2004 GMT ORGANIZATION "New H3C Tech. Co., Ltd." CONTACT-INFO "Platform Team New H3C Tech. Co., Ltd. Hai-Dian District Beijing P.R. China http://www.h3c.com Zip:100085 " DESCRIPTION "This MIB contains objects to manage the NDEC device. " REVISION "200409151052Z" -- August 15, 2004 at 10:52 GMT DESCRIPTION "The initial version of this MIB module" ::= { hh3cmlsr 2 } --transform Set authentication/encryption method hh3chipsNDECSAListTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cHipsNDECSAListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table containing the list of all SA entries configured on NDEC by the operator." ::= { hh3cNDEC 1 } hh3chipsNDECSAListEntry OBJECT-TYPE SYNTAX Hh3cHipsNDECSAListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains the attributes associated with a single NDEC'S SA entry." INDEX { hh3chipsPeerIpAddr, hh3chipsProtocol, hh3chipsSPI } ::= { hh3chipsNDECSAListTable 1 } Hh3cHipsNDECSAListEntry ::= SEQUENCE { hh3chipsPeerIpAddr IpAddress, hh3chipsProtocol INTEGER, hh3chipsSPI Gauge32, hh3chipsEncAlgorithm INTEGER, hh3chipsAuthAlgorithm INTEGER, hh3chipsLocalIpAddr IpAddress, hh3chipsSaLifeKBytes Gauge32, hh3chipsSaLifeSecond Gauge32, hh3chipsByCard TruthValue, hh3chipsNegotiateSaMode INTEGER, hh3chipsExpBytes Gauge32, hh3chipsSoftBytes Gauge32, hh3chipsExpTimeout Gauge32, hh3chipsSoftTimeout Gauge32 } hh3chipsPeerIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The peer IP address of this SA entry. " ::= { hh3chipsNDECSAListEntry 1 } hh3chipsProtocol OBJECT-TYPE SYNTAX INTEGER { ipsecEsp(50), ipsecAh(51) } MAX-ACCESS read-only STATUS current DESCRIPTION "The Protocol of this SA entry. " ::= { hh3chipsNDECSAListEntry 2 } hh3chipsSPI OBJECT-TYPE SYNTAX Gauge32(256..4294967295) MAX-ACCESS read-only STATUS current DESCRIPTION "The SPI of this SA entry. " ::= { hh3chipsNDECSAListEntry 3 } hh3chipsEncAlgorithm OBJECT-TYPE SYNTAX INTEGER { ealgNone(1), ealgDescbc(2), ealg3desCbc(3), ealgXBlf(4), ealgXCast(5), ealgXSkipjack(6), ealgXAes(7), ealgXQc5(8), ealgXNsa(9) } MAX-ACCESS read-only STATUS current DESCRIPTION "The encrypt algorithm of this SA entry. " ::= { hh3chipsNDECSAListEntry 4 } hh3chipsAuthAlgorithm OBJECT-TYPE SYNTAX INTEGER { aalgNone(1), aalgMd5Hmac(2), aalgSha1Hmac(3), aalgMd5Hmac96(4), aalgSha1Hmac96(5), aalgXRipeMd160Hmac96(6), aalgXMd5(7), aalgXSha1(8) } MAX-ACCESS read-only STATUS current DESCRIPTION "The authentication algorithm of this SA entry. " ::= { hh3chipsNDECSAListEntry 5 } hh3chipsLocalIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The local IP address of this SA entry. " ::= { hh3chipsNDECSAListEntry 6 } hh3chipsSaLifeKBytes OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The lifetime of this SA entry in bytes. " ::= { hh3chipsNDECSAListEntry 7 } hh3chipsSaLifeSecond OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The lifetime of this SA entry in seconds. " ::= { hh3chipsNDECSAListEntry 8 } hh3chipsByCard OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The flag of this SA on NDEC or not. " ::= { hh3chipsNDECSAListEntry 9 } hh3chipsNegotiateSaMode OBJECT-TYPE SYNTAX INTEGER { none(1), isakmp(2), manual(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The type of key used by the IPSec Phase-2 Tunnel. " ::= { hh3chipsNDECSAListEntry 10 } hh3chipsExpBytes OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the lifetime in bytes of the tunnels generated using this policy specification." ::= { hh3chipsNDECSAListEntry 11 } hh3chipsSoftBytes OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the lifetime in bytes of the tunnels generated using this policy specification." ::= { hh3chipsNDECSAListEntry 12 } hh3chipsExpTimeout OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the lifetime in seconds of the tunnels generated using this policy specification." ::= { hh3chipsNDECSAListEntry 13 } hh3chipsSoftTimeout OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the lifetime in seconds of the tunnels generated using this policy specification." ::= { hh3chipsNDECSAListEntry 14 } hh3chikeSATable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cHikeSAEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table containing IKE SA entities configured on NDEC by the operator. " ::= { hh3cNDEC 2 } hh3chikeSAEntry OBJECT-TYPE SYNTAX Hh3cHikeSAEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains the attributes associated with a single IKE SA entity." INDEX { hh3chikeConnId } ::= { hh3chikeSATable 1 } Hh3cHikeSAEntry ::= SEQUENCE { hh3chikeConnId Integer32, hh3chikePeerIpAddr IpAddress, hh3chikeFlag DisplayString, hh3chikePhase INTEGER, hh3chikeDoi INTEGER, hh3chikeClearSA TruthValue } hh3chikeConnId OBJECT-TYPE SYNTAX Integer32(0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The identifier of IKE SA connection." ::= { hh3chikeSAEntry 1 } hh3chikePeerIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The peer IP address of this IKE SA. " ::= { hh3chikeSAEntry 2 } hh3chikeFlag OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The status of this IKE SA. " ::= { hh3chikeSAEntry 3 } hh3chikePhase OBJECT-TYPE SYNTAX INTEGER{ unkown(1), phase1(2), phase2(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The phase of this IKE SA. " ::= { hh3chikeSAEntry 4 } hh3chikeDoi OBJECT-TYPE SYNTAX INTEGER{ unkown(1), ipsec(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The domain of this IKE SA " ::= { hh3chikeSAEntry 5 } hh3chikeClearSA OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Clear this IKE SA or not. " ::= { hh3chikeSAEntry 6 } hh3chipsIKEPolicyTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cHipsIKEPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "List of all ISAKMP policy entries." ::= { hh3cNDEC 3 } hh3chipsIKEPolicyEntry OBJECT-TYPE SYNTAX Hh3cHipsIKEPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry includes the properties of a ISAKMP Policy entry." INDEX { hh3chipsIsakmpPolPriority } ::= { hh3chipsIKEPolicyTable 1 } Hh3cHipsIKEPolicyEntry ::= SEQUENCE { hh3chipsIsakmpPolPriority Integer32, hh3chipsIsakmpPolEncr INTEGER, hh3chipsIsakmpPolHash INTEGER, hh3chipsIsakmpPolAuth INTEGER, hh3chipsIsakmpPolGroup INTEGER, hh3chipsIsakmpPolLifetime Gauge32 } hh3chipsIsakmpPolPriority OBJECT-TYPE SYNTAX Integer32(0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "ISAKMP Policy entry's priority." ::= { hh3chipsIKEPolicyEntry 1 } hh3chipsIsakmpPolEncr OBJECT-TYPE SYNTAX INTEGER { ikeEncryptNone(1), ikeEncryptDesCbc(2), ikeEncryptIdeaCbc(3), ikeEncryptBlowfishcbc(4), ikeEncryptRc5R16B64cbc(5), ikeEncrypt3DesCbc(6), ikeEncryptCastCbc(7) } MAX-ACCESS read-only STATUS current DESCRIPTION "The specified encryption transform. It is used by Internet Key Exchange(IKE) tunnels to protect the ISAKMP PDUs." ::= { hh3chipsIKEPolicyEntry 2 } hh3chipsIsakmpPolHash OBJECT-TYPE SYNTAX INTEGER { ikeHashNone(1), ikeHashMd5(2), ikeHashSha(3), ikeHashTiger(4) } MAX-ACCESS read-only STATUS current DESCRIPTION "The specified hash transform. It is used by Internet Key Exchange(IKE) tunnels to protect the ISAKMP PDUs." ::= { hh3chipsIKEPolicyEntry 3 } hh3chipsIsakmpPolAuth OBJECT-TYPE SYNTAX INTEGER { ikeAuthPreNone(1), ikeAuthPreShared(2) , ikeAuthDss(3), ikeAuthRsaSig(4), ikeAuthRsaEnc(5), ikeAuthRsaEncRev(6) } MAX-ACCESS read-only STATUS current DESCRIPTION "The specified peer authentication method. The local entity would authenticate the peer using the method specified by this object when this policy entity is selected to negotiate with a peer." ::= { hh3chipsIKEPolicyEntry 4 } hh3chipsIsakmpPolGroup OBJECT-TYPE SYNTAX INTEGER { none(1), dhGroup1(2), dhGroup2(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object is used to specify the Oakley group which is used for Diffie Hellman exchange in the Main Mode. The local entity selects the group specified by this object to perform Diffie Hellman exchange with the peer when this policy item is chosen to negotiate the Main Mode with an IKE peer." ::= { hh3chipsIKEPolicyEntry 5 } hh3chipsIsakmpPolLifetime OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the lifetime of the IKE tunnels in seconds." ::= { hh3chipsIKEPolicyEntry 6 } hh3chipsStaticCryptomapTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cHipsStaticCryptomapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table includes the list of the member cryptomaps of the cryptomap sets which are set on the specific entity." ::= { hh3cNDEC 4 } hh3chipsStaticCryptomapEntry OBJECT-TYPE SYNTAX Hh3cHipsStaticCryptomapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains properites of a single static cryptomap entry. The members of dynamic cryptomap sets, which may be linked with the parent static cryptomap set, are not included in this table." INDEX { hh3chipsStaticCryptomapName,hh3chipsStaticCryptomapSN } ::= { hh3chipsStaticCryptomapTable 1 } Hh3cHipsStaticCryptomapEntry ::= SEQUENCE { hh3chipsStaticCryptomapName DisplayString, hh3chipsStaticCryptomapSN Integer32, hh3chipsStaticCryptomapNegMode INTEGER, hh3chipsStaticCryptomapMatchAddr INTEGER, hh3chipsStaticCryptomapPeerIpAddr IpAddress, hh3chipsStaticCryptomapTransforName DisplayString, hh3chipsStaticCryptomapLifetime Gauge32, hh3chipsStaticCryptomapLifesize Gauge32, hh3chipsStaticCryptomapLocalIpAddr IpAddress, hh3chipsIfNameUsed DisplayString, hh3chipsInAHSPI Gauge32, hh3chipsInESPSPI Gauge32, hh3chipsOutAHSPI Gauge32, hh3chipsOutESPSPI Gauge32, hh3chipsInAhHexKeyString DisplayString, hh3chipsInEspCipherHexKeyString DisplayString, hh3chipsInEspAuthenHexKeyString DisplayString, hh3chipsInAhStringKeyString DisplayString, hh3chipsInEspStringKeyString DisplayString, hh3chipsOutAhHexKeyString DisplayString, hh3chipsOutEspCipherHexKeyString DisplayString, hh3chipsOutEspAuthenHexKeyString DisplayString, hh3chipsOutAhStringKeyString DisplayString, hh3chipsOutEspStringKeyString DisplayString } hh3chipsStaticCryptomapName OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The name of the cryptomap entry in the cryptomap set. This is the first index component of this table." ::= { hh3chipsStaticCryptomapEntry 1 } hh3chipsStaticCryptomapSN OBJECT-TYPE SYNTAX Integer32(0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The sequence number of the cryptomap entry in the cryptomap set. This is the second index component of this table." ::= { hh3chipsStaticCryptomapEntry 2 } hh3chipsStaticCryptomapNegMode OBJECT-TYPE SYNTAX INTEGER { none(1), isakmp(2), manual(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "Type of the cryptomap entry. This object may be an ISAKMP cryptomap or manual." ::= { hh3chipsStaticCryptomapEntry 3 } hh3chipsStaticCryptomapMatchAddr OBJECT-TYPE SYNTAX INTEGER(1..100000) MAX-ACCESS read-only STATUS current DESCRIPTION "The access list number entered by the operatoir while creating this cryptomap. " ::= { hh3chipsStaticCryptomapEntry 4 } hh3chipsStaticCryptomapPeerIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The IP address of the current peer. Traffic protected by this cryptomap is protected by a tunnel terminating at the device whose IP address is the value of this object." ::= { hh3chipsStaticCryptomapEntry 5 } hh3chipsStaticCryptomapTransforName OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The transform associated with this cryptomap entry." ::= { hh3chipsStaticCryptomapEntry 6 } hh3chipsStaticCryptomapLifetime OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the lifetime of the IPSec SA which is created using this IPSec policy entry." ::= { hh3chipsStaticCryptomapEntry 7 } hh3chipsStaticCryptomapLifesize OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object identifies the lifesize of the IPSec SAs generated using this IPSec policy entry. Lifesize means maximum traffic in bytes that may be carried. " ::= { hh3chipsStaticCryptomapEntry 8 } hh3chipsStaticCryptomapLocalIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The value of this object is the local IP address of the IPSec SAs generated using this IPSec policy entry. " ::= { hh3chipsStaticCryptomapEntry 9 } hh3chipsIfNameUsed OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the name of the interface which uses this IPSec policy entry. " ::= { hh3chipsStaticCryptomapEntry 10 } hh3chipsInAHSPI OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the inbound AH SPI IPSec SAs generated using this IPSec policy entry." ::= { hh3chipsStaticCryptomapEntry 11 } hh3chipsInESPSPI OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the inbound ESP SPI IPSec SAs generated using this IPSec policy entry. " ::= { hh3chipsStaticCryptomapEntry 12 } hh3chipsOutAHSPI OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the outbound AH SPI IPSec SAs generated using this IPSec policy entry. " ::= { hh3chipsStaticCryptomapEntry 13 } hh3chipsOutESPSPI OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the outbound ESP SPI IPSec SAs generated using this IPSec policy entry. " ::= { hh3chipsStaticCryptomapEntry 14 } hh3chipsInAhHexKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the inbound AH authentication key IPSec SAs generated using this IPSec policy entry. The AH authentication key is in hex. " ::= { hh3chipsStaticCryptomapEntry 15 } hh3chipsInEspCipherHexKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the inbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The ESP authentication key is hex. " ::= { hh3chipsStaticCryptomapEntry 16 } hh3chipsInEspAuthenHexKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the inbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The ESP authentication key is hex. " ::= { hh3chipsStaticCryptomapEntry 17 } hh3chipsInAhStringKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the inbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in string. " ::= { hh3chipsStaticCryptomapEntry 18 } hh3chipsInEspStringKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the inbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in string. " ::= { hh3chipsStaticCryptomapEntry 19 } hh3chipsOutAhHexKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the outbound AH authentication key IPSec SAs generated using this IPSec policy entry. The key is in hex. " ::= { hh3chipsStaticCryptomapEntry 20 } hh3chipsOutEspCipherHexKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the outbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in hex. " ::= { hh3chipsStaticCryptomapEntry 21 } hh3chipsOutEspAuthenHexKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the outbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in hex. " ::= { hh3chipsStaticCryptomapEntry 22 } hh3chipsOutAhStringKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the outbound AH authentication key IPSec SAs generated using this IPSec policy entry. The key is in string. " ::= { hh3chipsStaticCryptomapEntry 23 } hh3chipsOutEspStringKeyString OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the outbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in string. " ::= { hh3chipsStaticCryptomapEntry 24 } hh3chipsTransformNameSetTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cHipsTransformNameSetEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Transform set table." ::= { hh3cNDEC 5 } hh3chipsTransformNameSetEntry OBJECT-TYPE SYNTAX Hh3cHipsTransformNameSetEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry refers to properties of a transform." INDEX { hh3chipsTransformName } ::= { hh3chipsTransformNameSetTable 1 } Hh3cHipsTransformNameSetEntry ::= SEQUENCE { hh3chipsTransformName DisplayString, hh3chipsTransformMode INTEGER, hh3chipsTransformProtocol INTEGER, hh3chipsAH INTEGER, hh3chipsEespEn INTEGER, hh3chipsEspAu INTEGER, hh3chipsIsCardTransform TruthValue } hh3chipsTransformName OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "Name of the transform entry." ::= { hh3chipsTransformNameSetEntry 1 } hh3chipsTransformMode OBJECT-TYPE SYNTAX INTEGER { tunnel(1), transport(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "Mode of the transform entry." ::= { hh3chipsTransformNameSetEntry 2 } hh3chipsTransformProtocol OBJECT-TYPE SYNTAX INTEGER { ipsecNone(1), ipsecAhNew(2), ipsecAhEspNew(3), ipsecAhEspOld(4), ipsecAhOld(5), ipsecEspNew(6), ipsecEspAhNew(7), ipsecEspAhOld(8), ipsecEspOld(9) } MAX-ACCESS read-only STATUS current DESCRIPTION "Transform protocol." ::= { hh3chipsTransformNameSetEntry 3 } hh3chipsAH OBJECT-TYPE SYNTAX INTEGER { aalgNone(1), aalgMd5Hmac(2), aalgSha1Hmac(3), aalgMd5Hmac96(4), aalgSha1Hmac96(5), aalgXRipeMd160Hmac96(6), aalgXMd5(7), aalgXSha1(8) } MAX-ACCESS read-only STATUS current DESCRIPTION "Algorithm of AH protocol." ::= { hh3chipsTransformNameSetEntry 4 } hh3chipsEespEn OBJECT-TYPE SYNTAX INTEGER { ealgNone(1), ealgDescbc(2), ealg3desCbc(3), ealgXBlf(4), ealgXCast(5), ealgXSkipjack(6), ealgXAes(7), ealgXQc5(8) } MAX-ACCESS read-only STATUS current DESCRIPTION "Encryption algorithm of ESP protocol." ::= { hh3chipsTransformNameSetEntry 5 } hh3chipsEspAu OBJECT-TYPE SYNTAX INTEGER { aalgNone(1), aalgMd5Hmac(2), aalgSha1Hmac(3), aalgMd5Hmac96(4), aalgSha1Hmac96(5), aalgXRipeMd160Hmac96(6), aalgXMd5(7), aalgXSha1(8) } MAX-ACCESS read-only STATUS current DESCRIPTION "Authentication algorithm of ESP protocol." ::= { hh3chipsTransformNameSetEntry 6 } hh3chipsIsCardTransform OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates the flag of the NDEC is used for IPSec SAs generated using this IPSec policy entry. " ::= { hh3chipsTransformNameSetEntry 7 } hh3chipsNDECInfoTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cHipsNDECInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Table of NDEC set." ::= { hh3cNDEC 6 } hh3chipsNDECInfoEntry OBJECT-TYPE SYNTAX Hh3cHipsNDECInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Properties of each NDEC. " INDEX { hh3chipsCardSlot } ::= { hh3chipsNDECInfoTable 1 } Hh3cHipsNDECInfoEntry ::= SEQUENCE { hh3chipsCardSlot INTEGER, hh3chipsInPac Counter32, hh3chipsOutPac Counter32, hh3chipsInByte Counter32, hh3chipsOutByte Counter32, hh3chipsDropPac Counter32, hh3chipsCardStatus INTEGER, hh3chipsCardHardVer DisplayString, hh3chipsCardSoftVer DisplayString, hh3chipsCardCPLDVer DisplayString, hh3chipsCardOperate INTEGER, hh3chipsDropPacInUnitTime Gauge32 } hh3chipsCardSlot OBJECT-TYPE SYNTAX INTEGER(0..7) MAX-ACCESS read-only STATUS current DESCRIPTION "Slot number of NDEC ." ::= { hh3chipsNDECInfoEntry 1 } hh3chipsInPac OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Total packets of the NDEC recieved." ::= { hh3chipsNDECInfoEntry 2 } hh3chipsOutPac OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Total packets of the NDEC sent." ::= { hh3chipsNDECInfoEntry 3 } hh3chipsInByte OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Total bytes of the NDEC sent." ::= { hh3chipsNDECInfoEntry 4 } hh3chipsOutByte OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Total bytes of the NDEC sent." ::= { hh3chipsNDECInfoEntry 5 } hh3chipsDropPac OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Total packets of the NDEC dropped ." ::= { hh3chipsNDECInfoEntry 6 } hh3chipsCardStatus OBJECT-TYPE SYNTAX INTEGER{ ecStateInvalid(1), -- status exeception ecStateReady(2), -- status normal ecStateResetting(3) , -- card is reseting ecStateProgramUpdating(4), --card is loading ecStateDisable(5) -- card is forbidden } MAX-ACCESS read-only STATUS current DESCRIPTION "State of the NDEC." ::= { hh3chipsNDECInfoEntry 7 } hh3chipsCardHardVer OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "Hardware version of the NDEC." ::= { hh3chipsNDECInfoEntry 8 } hh3chipsCardSoftVer OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "Software version of the NDEC." ::= { hh3chipsNDECInfoEntry 9 } hh3chipsCardCPLDVer OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "CPLD version of the NDEC." ::= { hh3chipsNDECInfoEntry 10 } hh3chipsCardOperate OBJECT-TYPE SYNTAX INTEGER { cardClearStatic(1), cardReset(2), cardSynTime(3), cardSysLogOn(4), cardSysLogOff(5), cardSysLogClear(6) } MAX-ACCESS read-write STATUS current DESCRIPTION "The version of the NDEC's CPLD. cardClearStatic(1): clear the statistics of the card cardReset(2): rest the card cardSynTime(3): synchoronize the clock of the card cardSysLogOn(4):turn on the log of the card cardSysLogOff(5):turn off the log of the card cardSysLogClear(6):clear the log of the card" ::= { hh3chipsNDECInfoEntry 11 } hh3chipsDropPacInUnitTime OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "Dropped packets in unit interval." ::= { hh3chipsNDECInfoEntry 12 } hh3chipsNDECLeaf OBJECT IDENTIFIER ::= { hh3cNDEC 7 } hh3chipsNDECConnections OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "Total connections of the system at this time." ::= { hh3chipsNDECLeaf 1 } hh3chipsNDECBackup OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The flag that NDEC using backup. The value 1 represents using backup The value 0 represents not using backup" ::= { hh3chipsNDECLeaf 2 } hh3chipsTraps OBJECT IDENTIFIER ::= { hh3cNDEC 8 } hh3chipsNDECNormalResetTrap NOTIFICATION-TYPE OBJECTS { hh3chipsCardSlot,hh3chipsCardHardVer, hh3chipsCardSoftVer,hh3chipsCardCPLDVer } STATUS current DESCRIPTION "This trap is generated when the NDEC card is reset." ::= { hh3chipsTraps 1 } hh3chipsNDECStateChangeTrap NOTIFICATION-TYPE OBJECTS { hh3chipsCardSlot,hh3chipsCardStatus } STATUS current DESCRIPTION "This trap is generated when the NDEC card's state changes." ::= { hh3chipsTraps 2 } hh3chipsNDECFlowTrap NOTIFICATION-TYPE OBJECTS { hh3chipsCardSlot,hh3chipsDropPacInUnitTime } STATUS current DESCRIPTION "This trap is generated when a NDEC card is overloaded." ::= { hh3chipsTraps 3 } END