430 lines
15 KiB
Plaintext
430 lines
15 KiB
Plaintext
SNMP-COMMUNITY-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
IpAddress,
|
|
MODULE-IDENTITY,
|
|
OBJECT-TYPE,
|
|
Integer32,
|
|
snmpModules
|
|
FROM SNMPv2-SMI
|
|
RowStatus,
|
|
StorageType
|
|
FROM SNMPv2-TC
|
|
SnmpAdminString,
|
|
SnmpEngineID
|
|
FROM SNMP-FRAMEWORK-MIB
|
|
SnmpTagValue,
|
|
snmpTargetAddrEntry
|
|
FROM SNMP-TARGET-MIB
|
|
MODULE-COMPLIANCE,
|
|
OBJECT-GROUP
|
|
FROM SNMPv2-CONF;
|
|
|
|
snmpCommunityMIB MODULE-IDENTITY
|
|
LAST-UPDATED "200003060000Z" -- 6 Mar 2000, midnight
|
|
ORGANIZATION "SNMPv3 Working Group"
|
|
CONTACT-INFO "WG-email: snmpv3@lists.tislabs.com
|
|
Subscribe: majordomo@lists.tislabs.com
|
|
In msg body: subscribe snmpv3
|
|
|
|
Chair: Russ Mundy
|
|
TIS Labs at Network Associates
|
|
Postal: 3060 Washington Rd
|
|
Glenwood MD 21738
|
|
USA
|
|
Email: mundy@tislabs.com
|
|
Phone: +1-301-854-6889
|
|
|
|
Co-editor: Rob Frye
|
|
CoSine Communications
|
|
Postal: 1200 Bridge Parkway
|
|
Redwood City, CA 94065
|
|
USA
|
|
E-mail: rfrye@cosinecom.com
|
|
Phone: +1 703 725 1130
|
|
|
|
Co-editor: David B. Levi
|
|
Nortel Networks
|
|
Postal: 3505 Kesterwood Drive
|
|
Knoxville, TN 37918
|
|
E-mail: dlevi@nortelnetworks.com
|
|
Phone: +1 423 686 0432
|
|
|
|
Co-editor: Shawn A. Routhier
|
|
Integrated Systems Inc.
|
|
Postal: 333 North Ave 4th Floor
|
|
Wakefield, MA 01880
|
|
E-mail: sar@epilogue.com
|
|
Phone: +1 781 245 0804
|
|
|
|
Co-editor: Bert Wijnen
|
|
Lucent Technologies
|
|
Postal: Schagen 33
|
|
3461 GL Linschoten
|
|
Netherlands
|
|
Email: bwijnen@lucent.com
|
|
Phone: +31-348-407-775
|
|
"
|
|
DESCRIPTION
|
|
"This MIB module defines objects to help support coexistence
|
|
between SNMPv1, SNMPv2c, and SNMPv3."
|
|
REVISION "200003060000Z" -- 6 Mar 2000
|
|
DESCRIPTION "This version published as RFC 2576."
|
|
REVISION "199905130000Z" -- 13 May 1999
|
|
DESCRIPTION "The Initial Revision"
|
|
::= { snmpModules 18 }
|
|
|
|
-- Administrative assignments ****************************************
|
|
|
|
snmpCommunityMIBObjects OBJECT IDENTIFIER ::= { snmpCommunityMIB 1 }
|
|
snmpCommunityMIBConformance OBJECT IDENTIFIER ::= { snmpCommunityMIB 2 }
|
|
|
|
--
|
|
-- The snmpCommunityTable contains a database of community strings.
|
|
-- This table provides mappings between community strings, and the
|
|
|
|
-- parameters required for View-based Access Control.
|
|
--
|
|
|
|
snmpCommunityTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF SnmpCommunityEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The table of community strings configured in the SNMP
|
|
engine's Local Configuration Datastore (LCD)."
|
|
::= { snmpCommunityMIBObjects 1 }
|
|
|
|
snmpCommunityEntry OBJECT-TYPE
|
|
SYNTAX SnmpCommunityEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Information about a particular community string."
|
|
INDEX { IMPLIED snmpCommunityIndex }
|
|
::= { snmpCommunityTable 1 }
|
|
|
|
SnmpCommunityEntry ::= SEQUENCE {
|
|
snmpCommunityIndex SnmpAdminString,
|
|
snmpCommunityName OCTET STRING,
|
|
snmpCommunitySecurityName SnmpAdminString,
|
|
snmpCommunityContextEngineID SnmpEngineID,
|
|
snmpCommunityContextName SnmpAdminString,
|
|
snmpCommunityTransportTag SnmpTagValue,
|
|
snmpCommunityStorageType StorageType,
|
|
snmpCommunityStatus RowStatus
|
|
}
|
|
|
|
snmpCommunityIndex OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE(1..32))
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The unique index value of a row in this table."
|
|
::= { snmpCommunityEntry 1 }
|
|
|
|
snmpCommunityName OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The community string for which a row in this table
|
|
represents a configuration."
|
|
::= { snmpCommunityEntry 2 }
|
|
|
|
snmpCommunitySecurityName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE(1..32))
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A human readable string representing the corresponding
|
|
value of snmpCommunityName in a Security Model
|
|
independent format."
|
|
::= { snmpCommunityEntry 3 }
|
|
|
|
snmpCommunityContextEngineID OBJECT-TYPE
|
|
SYNTAX SnmpEngineID
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The contextEngineID indicating the location of the
|
|
context in which management information is accessed
|
|
when using the community string specified by the
|
|
corresponding instance of snmpCommunityName.
|
|
|
|
The default value is the snmpEngineID of the entity in
|
|
which this object is instantiated."
|
|
::= { snmpCommunityEntry 4 }
|
|
|
|
snmpCommunityContextName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE(0..32))
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The context in which management information is accessed
|
|
when using the community string specified by the corresponding
|
|
instance of snmpCommunityName."
|
|
DEFVAL { ''H } -- the empty string
|
|
::= { snmpCommunityEntry 5 }
|
|
|
|
snmpCommunityTransportTag OBJECT-TYPE
|
|
SYNTAX SnmpTagValue
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object specifies a set of transport endpoints
|
|
from which a command responder application will accept
|
|
management requests. If a management request containing
|
|
this community is received on a transport endpoint other
|
|
than the transport endpoints identified by this object,
|
|
the request is deemed unauthentic.
|
|
|
|
The transports identified by this object are specified
|
|
|
|
in the snmpTargetAddrTable. Entries in that table
|
|
whose snmpTargetAddrTagList contains this tag value
|
|
are identified.
|
|
|
|
If the value of this object has zero-length, transport
|
|
endpoints are not checked when authenticating messages
|
|
containing this community string."
|
|
DEFVAL { ''H } -- the empty string
|
|
::= { snmpCommunityEntry 6 }
|
|
|
|
snmpCommunityStorageType OBJECT-TYPE
|
|
SYNTAX StorageType
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The storage type for this conceptual row in the
|
|
snmpCommunityTable. Conceptual rows having the value
|
|
'permanent' need not allow write-access to any
|
|
columnar object in the row."
|
|
::= { snmpCommunityEntry 7 }
|
|
|
|
snmpCommunityStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this conceptual row in the snmpCommunityTable.
|
|
|
|
An entry in this table is not qualified for activation
|
|
until instances of all corresponding columns have been
|
|
initialized, either through default values, or through
|
|
Set operations. The snmpCommunityName and
|
|
snmpCommunitySecurityName objects must be explicitly set.
|
|
|
|
There is no restriction on setting columns in this table
|
|
when the value of snmpCommunityStatus is active(1)."
|
|
::= { snmpCommunityEntry 8 }
|
|
|
|
--
|
|
-- The snmpTargetAddrExtTable
|
|
--
|
|
|
|
snmpTargetAddrExtTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF SnmpTargetAddrExtEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The table of mask and mms values associated with the
|
|
|
|
snmpTargetAddrTable.
|
|
|
|
The snmpTargetAddrExtTable augments the
|
|
snmpTargetAddrTable with a transport address mask value
|
|
and a maximum message size value. The transport address
|
|
mask allows entries in the snmpTargetAddrTable to define
|
|
a set of addresses instead of just a single address.
|
|
The maximum message size value allows the maximum
|
|
message size of another SNMP entity to be configured for
|
|
use in SNMPv1 (and SNMPv2c) transactions, where the
|
|
message format does not specify a maximum message size."
|
|
::= { snmpCommunityMIBObjects 2 }
|
|
|
|
snmpTargetAddrExtEntry OBJECT-TYPE
|
|
SYNTAX SnmpTargetAddrExtEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Information about a particular mask and mms value."
|
|
AUGMENTS { snmpTargetAddrEntry }
|
|
::= { snmpTargetAddrExtTable 1 }
|
|
|
|
SnmpTargetAddrExtEntry ::= SEQUENCE {
|
|
snmpTargetAddrTMask OCTET STRING,
|
|
snmpTargetAddrMMS Integer32
|
|
}
|
|
|
|
snmpTargetAddrTMask OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (0..255))
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The mask value associated with an entry in the
|
|
snmpTargetAddrTable. The value of this object must
|
|
have the same length as the corresponding instance of
|
|
snmpTargetAddrTAddress, or must have length 0. An
|
|
attempt to set it to any other value will result in
|
|
an inconsistentValue error.
|
|
|
|
The value of this object allows an entry in the
|
|
snmpTargetAddrTable to specify multiple addresses.
|
|
The mask value is used to select which bits of
|
|
a transport address must match bits of the corresponding
|
|
instance of snmpTargetAddrTAddress, in order for the
|
|
transport address to match a particular entry in the
|
|
snmpTargetAddrTable. Bits which are 1 in the mask
|
|
value indicate bits in the transport address which
|
|
must match bits in the snmpTargetAddrTAddress value.
|
|
|
|
Bits which are 0 in the mask indicate bits in the
|
|
transport address which need not match. If the
|
|
length of the mask is 0, the mask should be treated
|
|
as if all its bits were 1 and its length were equal
|
|
to the length of the corresponding value of
|
|
snmpTargetAddrTable.
|
|
|
|
This object may not be modified while the value of the
|
|
corresponding instance of snmpTargetAddrRowStatus is
|
|
active(1). An attempt to set this object in this case
|
|
will result in an inconsistentValue error."
|
|
DEFVAL { ''H }
|
|
::= { snmpTargetAddrExtEntry 1 }
|
|
|
|
snmpTargetAddrMMS OBJECT-TYPE
|
|
SYNTAX Integer32 (0|484..2147483647)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum message size value associated with an entry
|
|
in the snmpTargetAddrTable."
|
|
DEFVAL { 484 }
|
|
::= { snmpTargetAddrExtEntry 2 }
|
|
|
|
--
|
|
-- The snmpTrapAddress and snmpTrapCommunity objects are included
|
|
-- in notifications that are forwarded by a proxy, which were
|
|
-- originally received as SNMPv1 Trap messages.
|
|
--
|
|
|
|
snmpTrapAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The value of the agent-addr field of a Trap PDU which
|
|
is forwarded by a proxy forwarder application using
|
|
an SNMP version other than SNMPv1. The value of this
|
|
object SHOULD contain the value of the agent-addr field
|
|
from the original Trap PDU as generated by an SNMPv1
|
|
agent."
|
|
::= { snmpCommunityMIBObjects 3 }
|
|
|
|
snmpTrapCommunity OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The value of the community string field of an SNMPv1
|
|
message containing a Trap PDU which is forwarded by a
|
|
a proxy forwarder application using an SNMP version
|
|
other than SNMPv1. The value of this object SHOULD
|
|
contain the value of the community string field from
|
|
the original SNMPv1 message containing a Trap PDU as
|
|
generated by an SNMPv1 agent."
|
|
::= { snmpCommunityMIBObjects 4 }
|
|
|
|
-- Conformance Information *******************************************
|
|
|
|
snmpCommunityMIBCompliances OBJECT IDENTIFIER
|
|
::= { snmpCommunityMIBConformance 1 }
|
|
snmpCommunityMIBGroups OBJECT IDENTIFIER
|
|
::= { snmpCommunityMIBConformance 2 }
|
|
|
|
-- Compliance statements
|
|
|
|
snmpCommunityMIBCompliance MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The compliance statement for SNMP engines which
|
|
implement the SNMP-COMMUNITY-MIB."
|
|
|
|
MODULE -- this module
|
|
MANDATORY-GROUPS { snmpCommunityGroup }
|
|
|
|
OBJECT snmpCommunityName
|
|
MIN-ACCESS read-only
|
|
DESCRIPTION "Write access is not required."
|
|
|
|
OBJECT snmpCommunitySecurityName
|
|
MIN-ACCESS read-only
|
|
DESCRIPTION "Write access is not required."
|
|
|
|
OBJECT snmpCommunityContextEngineID
|
|
MIN-ACCESS read-only
|
|
DESCRIPTION "Write access is not required."
|
|
|
|
OBJECT snmpCommunityContextName
|
|
MIN-ACCESS read-only
|
|
DESCRIPTION "Write access is not required."
|
|
|
|
OBJECT snmpCommunityTransportTag
|
|
MIN-ACCESS read-only
|
|
DESCRIPTION "Write access is not required."
|
|
|
|
OBJECT snmpCommunityStorageType
|
|
MIN-ACCESS read-only
|
|
DESCRIPTION "Write access is not required."
|
|
|
|
OBJECT snmpCommunityStatus
|
|
MIN-ACCESS read-only
|
|
DESCRIPTION "Write access is not required."
|
|
::= { snmpCommunityMIBCompliances 1 }
|
|
|
|
snmpProxyTrapForwardCompliance MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The compliance statement for SNMP engines which
|
|
contain a proxy forwarding application which is
|
|
capable of forwarding SNMPv1 traps using SNMPv2c
|
|
or SNMPv3."
|
|
MODULE -- this module
|
|
MANDATORY-GROUPS { snmpProxyTrapForwardGroup }
|
|
::= { snmpCommunityMIBCompliances 2 }
|
|
|
|
snmpCommunityGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
snmpCommunityName,
|
|
snmpCommunitySecurityName,
|
|
snmpCommunityContextEngineID,
|
|
snmpCommunityContextName,
|
|
snmpCommunityTransportTag,
|
|
snmpCommunityStorageType,
|
|
snmpCommunityStatus,
|
|
snmpTargetAddrTMask,
|
|
snmpTargetAddrMMS
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects providing for configuration
|
|
of community strings for SNMPv1 (and SNMPv2c) usage."
|
|
::= { snmpCommunityMIBGroups 1 }
|
|
|
|
snmpProxyTrapForwardGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
snmpTrapAddress,
|
|
snmpTrapCommunity
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Objects which are used by proxy forwarding applications
|
|
when translating traps between SNMP versions. These are
|
|
used to preserve SNMPv1-specific information when
|
|
|
|
translating to SNMPv2c or SNMPv3."
|
|
::= { snmpCommunityMIBGroups 3 }
|
|
|
|
END
|