356 lines
12 KiB
Plaintext
356 lines
12 KiB
Plaintext
-- *****************************************************************
|
|
-- DLINKSW-RA-GUARD-MIB: RA Guard MIB
|
|
--
|
|
-- Copyright (c) 2013 D-Link Corporation, all rights reserved.
|
|
--
|
|
-- *****************************************************************
|
|
|
|
DLINKSW-RA-GUARD-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY,
|
|
Unsigned32,
|
|
OBJECT-TYPE
|
|
FROM SNMPv2-SMI
|
|
|
|
MODULE-COMPLIANCE,
|
|
OBJECT-GROUP
|
|
FROM SNMPv2-CONF
|
|
|
|
TruthValue,
|
|
RowStatus,
|
|
DisplayString
|
|
FROM SNMPv2-TC
|
|
|
|
ifIndex
|
|
FROM IF-MIB
|
|
|
|
dlinkIndustrialCommon
|
|
FROM DLINK-ID-REC-MIB;
|
|
|
|
dlinkSwRaGuardMIB MODULE-IDENTITY
|
|
LAST-UPDATED "201307180000Z"
|
|
ORGANIZATION "D-Link Corp."
|
|
CONTACT-INFO
|
|
" D-Link Corporation
|
|
|
|
Postal: No. 289, Sinhu 3rd Rd., Neihu District,
|
|
Taipei City 114, Taiwan, R.O.C
|
|
Tel: +886-2-66000123
|
|
E-mail: tsd@dlink.com.tw
|
|
"
|
|
DESCRIPTION
|
|
"This MIB module defines objects for RA Guard."
|
|
REVISION "201307180000Z"
|
|
DESCRIPTION
|
|
"This is the first version of the MIB file.
|
|
"
|
|
::= { dlinkIndustrialCommon 141 }
|
|
|
|
--
|
|
-- Textual Conventions
|
|
--
|
|
|
|
|
|
-- -----------------------------------------------------------------------------
|
|
dRaGuardNotifications OBJECT IDENTIFIER ::= { dlinkSwRaGuardMIB 0 }
|
|
dRaGuardObjects OBJECT IDENTIFIER ::= { dlinkSwRaGuardMIB 1 }
|
|
dRaGuardConformance OBJECT IDENTIFIER ::= { dlinkSwRaGuardMIB 2 }
|
|
|
|
dRaGuardPolicy OBJECT IDENTIFIER ::= { dRaGuardObjects 1 }
|
|
dRaGuardInterface OBJECT IDENTIFIER ::= { dRaGuardObjects 2 }
|
|
|
|
-- -----------------------------------------------------------------------------
|
|
dRaGuardPolicyNumber OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates the number of entries present in RA Guard policy
|
|
table."
|
|
::= { dRaGuardPolicy 1 }
|
|
|
|
dRaGuardPolicyTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF DRaGuardPolicyEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The table contains information about RA Guard policies."
|
|
::= { dRaGuardPolicy 2 }
|
|
|
|
dRaGuardPolicyEntry OBJECT-TYPE
|
|
SYNTAX DRaGuardPolicyEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry defined in dRaGuardPolicyTable. An entry is
|
|
created/removed when a RA Guard policy is created/deleted."
|
|
INDEX { dRaGuardPolicyName }
|
|
::= { dRaGuardPolicyTable 1 }
|
|
|
|
DRaGuardPolicyEntry ::= SEQUENCE {
|
|
dRaGuardPolicyName DisplayString,
|
|
dRaGuardPolicyDeviceRole INTEGER,
|
|
dRaGuardPolicyRowStatus RowStatus
|
|
}
|
|
|
|
dRaGuardPolicyName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE (1..32))
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The name of the RA Guard policy."
|
|
::= { dRaGuardPolicyEntry 1 }
|
|
|
|
dRaGuardPolicyDeviceRole OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
host(1),
|
|
router(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates the role of the attached device.
|
|
host: all the inbound router advertisement
|
|
and redirect messages are blocked.
|
|
router: all messages (router solicitation [RS],
|
|
router advertisement [RA], or redirect)
|
|
are allowed on this port.
|
|
"
|
|
DEFVAL { host }
|
|
::= { dRaGuardPolicyEntry 2 }
|
|
|
|
dRaGuardPolicyRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object allows the dynamic creation and deletion of a RA Guard
|
|
policy.
|
|
"
|
|
::= { dRaGuardPolicyEntry 99 }
|
|
|
|
-- -----------------------------------------------------------------------------
|
|
dRaGuardMatchAclTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF DRaGuardMatchAclEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The table contains a list of IPv6 access list associations for
|
|
RA Guard policies.
|
|
The IPv6 access list is used to filter the RA messages based on
|
|
sender IPv6 address.
|
|
"
|
|
::= { dRaGuardPolicy 3 }
|
|
|
|
dRaGuardMatchAclEntry OBJECT-TYPE
|
|
SYNTAX DRaGuardMatchAclEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry is defined in dRaGuardMatchAclTable.
|
|
The first instance identifier index value identifies the
|
|
dRaGuardPolicyEntry that an IPv6 access list (dRaGuardMatchAclEntry)
|
|
belongs to. An entry is removed from this table when its
|
|
corresponding dRaGuardPolicyEntry is deleted."
|
|
INDEX {
|
|
dRaGuardPolicyName
|
|
}
|
|
::= { dRaGuardMatchAclTable 1 }
|
|
|
|
DRaGuardMatchAclEntry ::= SEQUENCE {
|
|
dRaGuardMatchAccessListName DisplayString,
|
|
dRaGuardMatchAclRowStatus RowStatus
|
|
}
|
|
|
|
dRaGuardMatchAccessListName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE (1..32))
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the name of the associated IPv6 access list
|
|
in a RA Guard policy.
|
|
The IPv6 access list is used to filter RA messages based on sender
|
|
IPv6 address when the corresponding dRaGuardPolicyDeviceRole is
|
|
'router'.
|
|
If the IPv6 access list is not configured, all RA messages are
|
|
bypassed."
|
|
::= { dRaGuardMatchAclEntry 1 }
|
|
|
|
dRaGuardMatchAclRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The row status variable, used according to installation
|
|
and removal conventions for conceptual rows."
|
|
::= { dRaGuardMatchAclEntry 99 }
|
|
|
|
-- -----------------------------------------------------------------------------
|
|
dRaGuardIfConfigTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF DRaGuardIfConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table provides the mechanism to configure the RA Guard
|
|
state at every interface capable of this feature.
|
|
"
|
|
::= { dRaGuardInterface 1 }
|
|
|
|
dRaGuardIfConfigEntry OBJECT-TYPE
|
|
SYNTAX DRaGuardIfConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A row instance contains the configuration to enable or
|
|
disable RA Guard on an interface.
|
|
"
|
|
INDEX { ifIndex }
|
|
::= { dRaGuardIfConfigTable 1 }
|
|
|
|
DRaGuardIfConfigEntry ::= SEQUENCE {
|
|
dRaGuardIfEnabled TruthValue
|
|
}
|
|
|
|
dRaGuardIfEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object enables RA Guard on the interface, if set this
|
|
object to 'true'.
|
|
Setting this object to 'false' disables the RA Guard on the
|
|
interface.
|
|
"
|
|
::= { dRaGuardIfConfigEntry 1 }
|
|
|
|
-- -----------------------------------------------------------------------------
|
|
dRaGuardIfAttachTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF DRaGuardIfAttachEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table provides the mechanism to attach a RA Guard policy on
|
|
a physical port or port-channel interface.
|
|
"
|
|
::= { dRaGuardInterface 2 }
|
|
|
|
dRaGuardIfAttachEntry OBJECT-TYPE
|
|
SYNTAX DRaGuardIfAttachEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A row instance contains the configuration to attach a RA Guard
|
|
policy on a physical port or port-channel interface.
|
|
"
|
|
INDEX { ifIndex }
|
|
::= { dRaGuardIfAttachTable 1 }
|
|
|
|
DRaGuardIfAttachEntry ::= SEQUENCE {
|
|
dRaGuardIfAttachPolicy DisplayString,
|
|
dRaGuardIfAttachRowStatus RowStatus
|
|
}
|
|
|
|
dRaGuardIfAttachPolicy OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE (1..32))
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the name of the attached RA Guard
|
|
policy.
|
|
"
|
|
::= { dRaGuardIfAttachEntry 1 }
|
|
|
|
dRaGuardIfAttachRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The row status variable, used according to installation
|
|
and removal conventions for conceptual rows."
|
|
::= { dRaGuardIfAttachEntry 99 }
|
|
|
|
-- Conformance
|
|
|
|
dRaGuardMIBCompliances OBJECT IDENTIFIER ::= { dRaGuardConformance 1 }
|
|
|
|
dRaGuardMIBGroups OBJECT IDENTIFIER ::= { dRaGuardConformance 2 }
|
|
|
|
dRaGuardMIBCompliance MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The compliance statement for DLINKSW-RA-GUARD-MIB"
|
|
MODULE
|
|
MANDATORY-GROUPS {
|
|
dRaGuardIfConfigGroup
|
|
}
|
|
|
|
GROUP dRaGuardPolicyGroup
|
|
DESCRIPTION
|
|
"This group is mandatory only for the platform which supports
|
|
configuration of RA Guard policy."
|
|
|
|
GROUP dRaGuardIfAttachGroup
|
|
DESCRIPTION
|
|
"This group is mandatory only for the platform which supports
|
|
interface-specific configuration of attaching RA Guard policy."
|
|
|
|
GROUP dRaGuardMatchAclGroup
|
|
DESCRIPTION
|
|
"This group is mandatory only for the platform which supports
|
|
filtering IPv6 RA message by IPv6 access list."
|
|
::= { dRaGuardMIBCompliances 1 }
|
|
|
|
-- Units of Conformance
|
|
|
|
dRaGuardIfConfigGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
dRaGuardIfEnabled
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects which are used to configure as
|
|
well as show information regarding the RA Guard feature
|
|
per interface."
|
|
::= { dRaGuardMIBGroups 1 }
|
|
|
|
dRaGuardPolicyGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
dRaGuardPolicyNumber,
|
|
dRaGuardPolicyDeviceRole,
|
|
dRaGuardPolicyRowStatus
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects which are used to configure as
|
|
well as show information regarding the RA Guard policy."
|
|
::= { dRaGuardMIBGroups 2 }
|
|
|
|
dRaGuardMatchAclGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
dRaGuardMatchAccessListName,
|
|
dRaGuardMatchAclRowStatus
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects which are used to configure as
|
|
well as show information regarding the IPv6 access list
|
|
in RA Guard policy."
|
|
::= { dRaGuardMIBGroups 3 }
|
|
|
|
dRaGuardIfAttachGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
dRaGuardIfAttachPolicy,
|
|
dRaGuardIfAttachRowStatus
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of object which are used to configure as
|
|
well as show information regarding the attaching policy
|
|
per interface."
|
|
::= { dRaGuardMIBGroups 4 }
|
|
|
|
END
|
|
|
|
|