From 98a672123c7872f6b9b75a9a2b6bb3aea504de6a Mon Sep 17 00:00:00 2001 From: David Leutgeb Date: Tue, 5 Dec 2023 12:25:34 +0100 Subject: Initial commit --- MIBS/infinera/LUM-SYSTEM-MIB | 3304 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 3304 insertions(+) create mode 100644 MIBS/infinera/LUM-SYSTEM-MIB (limited to 'MIBS/infinera/LUM-SYSTEM-MIB') diff --git a/MIBS/infinera/LUM-SYSTEM-MIB b/MIBS/infinera/LUM-SYSTEM-MIB new file mode 100644 index 0000000..69204ce --- /dev/null +++ b/MIBS/infinera/LUM-SYSTEM-MIB @@ -0,0 +1,3304 @@ +LUM-SYSTEM-MIB DEFINITIONS ::= BEGIN + +IMPORTS + MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Integer32, IpAddress + FROM SNMPv2-SMI + OBJECT-GROUP, MODULE-COMPLIANCE + FROM SNMPv2-CONF + RowStatus, DisplayString, TestAndIncr, DateAndTime + FROM SNMPv2-TC + lumModules, lumSystemMIB + FROM LUM-REG + CommandString, FaultStatus, EnableDisable, OnOff, Platform + FROM LUM-TC; + +lumSystemMIBModule MODULE-IDENTITY + LAST-UPDATED + "201903290000Z" -- March 29th 2019 + ORGANIZATION + "Infinera Corporation" + CONTACT-INFO + "techsupport@infinera.com" + DESCRIPTION + "The system MIB. + + - General + + - Node parameters + + - Date and time + + - License information + + - RADIUS and TACACS+ authentication configuration + + - User information + +" + REVISION + "201903290000Z" -- March 29th 2019 + DESCRIPTION + "Changes made for r32.1: + - Added sysLoginBanner table" + REVISION + "201812210000Z" -- Dec 21th 2018 + DESCRIPTION + "Changes made for r32.0: + - Improved the help text for sysSecurityAutoEnableBlockedMgmtPorts + - Added sysSecurityInstallCertificates + - Added sysSecurityInstallFactoryDefaultCertificates + - Added manager table" + REVISION + "201809280000Z" -- Sept 28th 2018 + DESCRIPTION + "Changes made for r31.1: + - Fix inconsistent use of lower case and + upper case in long alias in system-security + table" + REVISION + "201712080000Z" -- Dec 8th 2017 + DESCRIPTION + "Changes made for release r30.0: + - Added sysSecurityCUFrontICNPortAccess + sysSecurityChangeCUFrontICNPortAccess + sysSecuritySubrackICNPortAccess + sysSecurityChangeSubrackICNPortAccess, + sysSecurityMgmtAccessProofOfConnStatus, + sysSecurityMgmtAccessProofOfConnectivity, + sysSecurityAutoEnableBlockedMgmtPorts, + sysSecurityBlockedMgmtPortsUnblocked" + REVISION + "201706150000Z" -- June 15th 2017 + DESCRIPTION + "Changes made for release r29.0: + - Added attribute sysSecurityFileSystemAccessRestrictions + - Changed ORGANIZATION and CONTACT-INFO" + REVISION + "201611300000Z" -- November 30th 2016 + DESCRIPTION + "Changes made for release r28.0: + - Added extra attributes for sysNode group including + CLLI (Common Language Location Identifier), + FIC (Facility Interface Code), + TID (Target ID), + Latitude and Longitude." + REVISION + "201606140000Z" -- Jun 14th 2016 + DESCRIPTION + "Changes made for release r27: + - Added attribute sysSecurityLocalCraftAccess in group Security, to show the access + status to the local ETH-Craft port. + - Added attribute sysSecurityChangeLocalCraftAccess in group Security to be able to change the access + to the local ETH-Craft port on CU-SFP/III boards. + - Added attribute sysSecurityAuthenticationOrder in group Security, to show the authentication order + currently active in the node. + - Remove possibility of setting TACACS and RADIUS configurations via snmp." + REVISION + "201405160000Z" -- May 16th 2014 + DESCRIPTION + "Changes made for release r23: + - Added attribute sysGeneralWriteTest in group General, to be used when TNM connects + - Attribute sysGeneralTest in group General set to deprecated (prev used when TNM connects)" + REVISION + "201311150000Z" -- November 15th 2013 + DESCRIPTION + "Description for local console access is improved. Help text for user + name improved." + REVISION + "201008030000Z" -- August 3th 2010 + DESCRIPTION + "Change local console access and radius port numbers." + REVISION + "200808050000Z" -- August 5th 2008 + DESCRIPTION + "Added compliance to indicate web server less vulnerable to hanging." + REVISION + "200509140000Z" -- September 14th 2005 + DESCRIPTION + "Added minimal compliance groups." + REVISION + "200410010000Z" -- October 1st 2004 + DESCRIPTION + "Added table size variables." + REVISION + "200406300000Z" -- June 30th 2004 + DESCRIPTION + "Enabled user group, added wtmp-logging config.." + REVISION + "200405260000Z" -- May 26th 2004 + DESCRIPTION + "Added TACACS+ configuration." + REVISION + "200308030000Z" -- September 3rd 2003 + DESCRIPTION + "Added command for changing local time." + REVISION + "200212130000Z" -- December 13th 2002 + DESCRIPTION + "Added network element type, user name and distinguished name." + REVISION + "200204180000Z" -- April 18th 2002 + DESCRIPTION + "Added systemGeneralTest." + REVISION + "200201110000Z" -- January 11th 2002 + DESCRIPTION + "Added sysNodeUptime." + REVISION + "200108140000Z" -- August 14th 2001 + DESCRIPTION + "Cleaned up some tbd, removed unused definitions. + Fixed some defaults. + Added sysNodeRunLevel." + REVISION + "200107260000Z" -- July 26th 2001 + DESCRIPTION + "Added aliases and compliance groups." + REVISION + "200104260000Z" -- April 26th 2001 + DESCRIPTION + "The initial revision of this module." + ::= { lumModules 4 } + + +-- ---------------------------------------------------- +-- Conformance area, containing groups and complicance +-- specifications. +-- ---------------------------------------------------- + +lumSystemConfs OBJECT IDENTIFIER ::= { lumSystemMIB 1 } +lumSystemGroups OBJECT IDENTIFIER ::= { lumSystemConfs 1 } +lumSystemCompl OBJECT IDENTIFIER ::= { lumSystemConfs 2 } +lumSystemMinimalGroups OBJECT IDENTIFIER ::= { lumSystemConfs 3 } +lumSystemMinimalCompl OBJECT IDENTIFIER ::= { lumSystemConfs 4 } + + +-- ---------------------------------------------------- +-- Root for objects in the system MIB +-- ---------------------------------------------------- + +lumSystemMIBObjects OBJECT IDENTIFIER ::= { lumSystemMIB 2 } + + +-- ---------------------------------------------------- +-- This MIB contains the following groups: +-- ---------------------------------------------------- + +sysGeneral OBJECT IDENTIFIER ::= { lumSystemMIBObjects 1 } +sysNode OBJECT IDENTIFIER ::= { lumSystemMIBObjects 2 } +sysHostList OBJECT IDENTIFIER ::= { lumSystemMIBObjects 3 } +sysTime OBJECT IDENTIFIER ::= { lumSystemMIBObjects 4 } +sysLogList OBJECT IDENTIFIER ::= { lumSystemMIBObjects 5 } +sysUserList OBJECT IDENTIFIER ::= { lumSystemMIBObjects 6 } +sysRadius OBJECT IDENTIFIER ::= { lumSystemMIBObjects 7 } +sysLicense OBJECT IDENTIFIER ::= { lumSystemMIBObjects 8 } +sysTacacs OBJECT IDENTIFIER ::= { lumSystemMIBObjects 9 } +sysAudit OBJECT IDENTIFIER ::= { lumSystemMIBObjects 10 } +sysSecurity OBJECT IDENTIFIER ::= { lumSystemMIBObjects 11 } +sysManager OBJECT IDENTIFIER ::= { lumSystemMIBObjects 12 } +sysLoginBanner OBJECT IDENTIFIER ::= { lumSystemMIBObjects 13 } + + +-- ---------------------------------------------------- +-- Textual Conventions +-- ---------------------------------------------------- + +-- n/a + + +-- ---------------------------------------------------- +-- General group +-- ---------------------------------------------------- + +sysGeneralTestAndIncr OBJECT-TYPE + SYNTAX TestAndIncr + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Protection against simultaneous access from + multiple managers. See SNMPv2-TC. + +" + ::= { sysGeneral 1 } + +sysGeneralMibSpecVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The MIB specification version. + +" + DEFVAL { "" } + ::= { sysGeneral 2 } + +sysGeneralMibImplVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The MIB implementation version. + +" + DEFVAL { "" } + ::= { sysGeneral 3 } + +sysGeneralLastChangeTime OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time the state of MIB last changed. + +" + ::= { sysGeneral 4 } + +sysGeneralTest OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-write + STATUS deprecated + DESCRIPTION + "Object that can be used to verify write access + (via SNMP). + + This attribute can be written via SNMP. +" + DEFVAL { 0 } + ::= { sysGeneral 5 } + +sysGeneralConfigLastChangeTime OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time the configuration of the MIB last + changed. + +" + ::= { sysGeneral 6 } + +sysGeneralLoginRecords OBJECT-TYPE + SYNTAX INTEGER { + off (1), + on (2) } + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Enable/disable login records. + The log can be viewed with the 'last' + command. + + off - Login records log disabled. + + on - Login records log enable. + +" + DEFVAL { off } + ::= { sysGeneral 7 } + +sysGeneralUserTableSize OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of rows available in the + user table. + +" + ::= { sysGeneral 8 } + +sysGeneralWriteTest OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Object that can be used to verify write access + (via SNMP). + + This attribute can be written via SNMP. +" + DEFVAL { "" } + ::= { sysGeneral 9 } + + +-- ---------------------------------------------------- +-- Node configuration group +-- ---------------------------------------------------- + +sysNodeName OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..64)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "An administratively-assigned name for this + managed node. By convention, this is the nodes + fully-qualified domain name. + + The node name may be composed of the following + characters: + A to Z ; uppercase characters + a to z ; lower case characters + 0 to 9 ; numeric characters + - ; dash + . ; dot, is used as a separator + _ ; underscore, supported (but might not be supported by all DNS servers) + + A host name (label) can start or end with a letter or a number + A host name (label) MUST NOT start or end with a '-' (dash) + A host name (label) MUST NOT consist of all numeric values + A host name (label) can be up to 63 characters + +" + DEFVAL { "localhost.localdomain" } + ::= { sysNode 1 } + +sysNodeContact OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The textual identification of the contact person + for this managed node, together with information + on how to contact this person. Set to the empty + string if not known. + Example: 'Joe, e-mail: joe@localhost.localdomain' + +" + DEFVAL { "" } + ::= { sysNode 2 } + +sysNodeLocation OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The physical location of this node. Set to the + empty string if not known. + Example: 'Rack 5, in the system lab, third floor' + +" + DEFVAL { "" } + ::= { sysNode 3 } + +sysNodeObjectId OBJECT-TYPE + SYNTAX OBJECT IDENTIFIER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The vendors authoritative identification of the + network management subsystem contained in the + entity. This value is allocated within the SMI + enterprises subtree (1.3.6.1.4.1) and provides an + easy and unambiguous means for determining + 'what kind of box' is being managed. + +" + ::= { sysNode 4 } + +sysNodePrimaryNameServer OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The name or IP address of the name server. + Set to the empty string if not known. + Example: 'dns.localdomain' + +" + DEFVAL { "" } + ::= { sysNode 5 } + +sysNodeRunLevel OBJECT-TYPE + SYNTAX INTEGER { + undefined (0), + halt (1), + single (2), + normal (3), + reboot (4) } + MAX-ACCESS read-write + STATUS deprecated + DESCRIPTION + "Note: This attribute is deprecated! + + Indicates the runlevel of the software. + + halt - Shutdown the entire node. + + single - Stop all applications and enter + single user mode. + + normal - Normal operations. + + reboot - Restart the entire node. + + tbd: no network? + tbd: restart with default configuration +" + DEFVAL { normal } + ::= { sysNode 6 } + +sysNodeSecondaryNameServer OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The name or IP address of the name server. + Set to the empty string if not known. + Example: 'dns.lumentis.se', '192.168.1.200' + +" + DEFVAL { "" } + ::= { sysNode 7 } + +sysNodeUptime OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The uptime in string format. + +" + ::= { sysNode 8 } + +sysNodeNeType OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "User configurable identifier of the type of node. + Included in performance measurements reports. + +" + DEFVAL { "" } + ::= { sysNode 9 } + +sysNodeNeUserName OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "User configurable network element name. + Included in performance measurements reports. + +" + DEFVAL { "" } + ::= { sysNode 10 } + +sysNodeNeDistinguishedName OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "User configurable network element distinguished + name. Included in performance measurements + reports. + +" + DEFVAL { "" } + ::= { sysNode 11 } + +sysNodeBootTime OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Application start time. + +" + ::= { sysNode 12 } + +sysNodeLocale OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Determines what rules should be used when formatting + and display items that are affected by language and + locality. + + The following is currently affected: + + Date and time + + Decimal character + + Unit used for temperatures + + If locale is set to US English temperatures are + converted to degrees Fahrenheit. + + Note: Only the default locale, 'C', is supported at + the moment. + +" + DEFVAL { "C" } + ::= { sysNode 13 } + +sysNodeVersion OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The build version. + +" + DEFVAL { "" } + ::= { sysNode 14 } + +sysNodeCLLI OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Common Language Location Identifier of NE. + Specifies the location + and function of telecommunications equipment or + of a relevant location such as international + border or the location of a supporting equipment, + such as a pole or a manhole. + +" + DEFVAL { "" } + ::= { sysNode 15 } + +sysNodeFIC OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Frame Identifier Code or + Facility Interface Code for NE. + FIC identifies the type of interface that + the terminal equipment requires for compatible + interconnection with wireline carrier facilities. + +" + DEFVAL { "" } + ::= { sysNode 16 } + +sysNodeTID OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Target ID of NE. A unique + identifier which is a combination of the + CLLI and FIC (Location+Frame). + +" + DEFVAL { "" } + ::= { sysNode 17 } + +sysNodeLatitude OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Latitude of the NE. A geographic coordinate + ranging from -90 to +90 degree specifying + the north-south position of a node + on the Earth surface. + Decimal Degree Representation is used as + the latitude format. + +" + DEFVAL { "" } + ::= { sysNode 18 } + +sysNodeLongitude OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Longitude of the NE. A geographic + coordinate ranging from -180 to +180 + degree specifying the east-west position + of the node on the Earth surface. + Decimal Degree Representation is used + as the longitude format. + + +" + DEFVAL { "" } + ::= { sysNode 19 } + +-- ---------------------------------------------------- +-- Host names configuration group +-- ---------------------------------------------------- + +sysHostTable OBJECT-TYPE + SYNTAX SEQUENCE OF SysHostEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The well known host names list. + +" + ::= { sysHostList 1 } + +sysHostEntry OBJECT-TYPE + SYNTAX SysHostEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An entry in well known host names list. + +" + INDEX { sysHostIndex } + ::= { sysHostTable 1 } + +SysHostEntry ::= + SEQUENCE { + sysHostIndex Unsigned32, + sysHostIpAddress DisplayString, + sysHostNames DisplayString, + sysHostRowStatus RowStatus } + +sysHostIndex OBJECT-TYPE + SYNTAX Unsigned32 (1..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "An arbitrary index assigned to each host + entry. + +" + ::= { sysHostEntry 1 } + +sysHostIpAddress OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "The IP address of a well known host. + Example: '192.168.1.200' + +" + ::= { sysHostEntry 2 } + +sysHostNames OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "The name(s) of a well known host. Set to the + empty string if not known. + Example: 'dns.lumentis.se dns' + +" + ::= { sysHostEntry 3 } + +sysHostRowStatus OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "Manages creation and deletion of conceptual rows. + See also SNMPv2-TC. + +" + ::= { sysHostEntry 4 } + + +-- ---------------------------------------------------- +-- Local users configuration group +-- ---------------------------------------------------- + +sysUserTable OBJECT-TYPE + SYNTAX SEQUENCE OF SysUserEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The local user list." + ::= { sysUserList 1 } + +sysUserEntry OBJECT-TYPE + SYNTAX SysUserEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An entry in the local user list. + Prompts for the following when + creating a new user: + + Password for the current user (the user + in question or an administrator). + + New password for the user. + + New password again. + + Profile for the new user + (default operator). + +" + INDEX { sysUserIndex } + ::= { sysUserTable 1 } + +SysUserEntry ::= + SEQUENCE { + sysUserIndex Unsigned32, + sysUserName DisplayString, + sysUserPasswd DisplayString, + sysUserDescr DisplayString, + sysUserLastChangeTime DateAndTime, + sysUserExpireTime DateAndTime, + sysUserRowStatus RowStatus, + sysUserProfile DisplayString, + sysUserUid Unsigned32, + sysUserChangePassword CommandString, + sysUserClearPassword CommandString, + sysUserDisable CommandString, + sysUserEnable CommandString, + sysUserMode INTEGER } + +sysUserIndex OBJECT-TYPE + SYNTAX Unsigned32 (1..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "An arbitrary index assigned to each entry. + +" + ::= { sysUserEntry 1 } + +sysUserName OBJECT-TYPE + SYNTAX DisplayString (SIZE (1..32)) + MAX-ACCESS read-create + STATUS current + DESCRIPTION + "The username must start with a lowercase alphabetical + character. The rest of the username should be lowercase + letters (a-z), numbers(0-9) or any of the following + characters: -._ + It is also possible to add $ as the last character. + +" + ::= { sysUserEntry 2 } + +sysUserPasswd OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS deprecated + DESCRIPTION + "tbd description + tbd examples + +" + DEFVAL { "1234567890" } + ::= { sysUserEntry 3 } + +sysUserDescr OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "User description string. + +" + DEFVAL { "" } + ::= { sysUserEntry 4 } + +sysUserLastChangeTime OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "tbd description + tbd examples + +" + ::= { sysUserEntry 5 } + +sysUserExpireTime OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "tbd description + tbd examples + +" + ::= { sysUserEntry 6 } + +sysUserRowStatus OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-create + STATUS deprecated + DESCRIPTION + "Manages creation and deletion of conceptual rows. + See also SNMPv2-TC. + +" + ::= { sysUserEntry 7 } + +sysUserProfile OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The user authority profile. + + 'administrator' - No restrictions. + + 'operator' - Restrictions on user operations + and some systems management operations. + Otherwise read/write access. + + 'readonly' - Read only access. + +" + DEFVAL { "operator" } + ::= { sysUserEntry 8 } + +sysUserUid OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "User id. + +" + ::= { sysUserEntry 9 } + +sysUserChangePassword OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Change user password. + Permitted for the the user in question + and administrators. + Asks for the following: + + User database to update, Local or TACACS. + The system supports update of either the + local password or the TACACS password on + a remote server. This choice is seen only + when applicable. + + Password for the current user (the user + in question or an administrator). + + New password for the user. + + New password again. + + Password can consist of any printable ASCII character + except for '&' and whitespace. There are no restrictions + on upper or lower case characters. + + Password length: 1 - 40 character(s). + + Default password is set when new user is created. + +" + DEFVAL { "1234567890" } + ::= { sysUserEntry 10 } + +sysUserClearPassword OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Clear the user password. + Only permitted for administrators. + Asks for the following: + + Password for the current user. + + Note: Only changes the local password. + If a RADIUS- or TACACS+-server is in use + they may override the local configuration. + +" + ::= { sysUserEntry 11 } + +sysUserDisable OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Disable the user. + Clear or set the password to make the user + available again. + Only permitted for administrators. + Asks for the following: + + Password for the current user. + + Note: Only disables the user locally. + If a RADIUS- or TACACS+-server is in use + they may override the local configuration. + +" + ::= { sysUserEntry 12 } + +sysUserEnable OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Enable the user. + Only permitted for administrators. + Asks for the following: + + Password for the current user. + + Note: Only enables the user locally. + If a RADIUS- or TACACS+-server is in use + they may override the local configuration. + +" + ::= { sysUserEntry 13 } + +sysUserMode OBJECT-TYPE + SYNTAX INTEGER { + disabled (1), + enabled (2) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Administrative status for the user. + + Note: Only shows the local user configuration. + If a RADIUS- or TACACS+-server is in use + they may override the local configuration. +" + DEFVAL { enabled } + ::= { sysUserEntry 14 } + + +-- ---------------------------------------------------- +-- Date and time group +-- ---------------------------------------------------- + +sysTimeLocal OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The local date and time. + +" + ::= { sysTime 1 } + +sysTimeZone OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The name of the time zone in which node + is located. + + A few examples: + + 'CET' + + 'EET' + + 'Europe/Stockholm' + + 'Europe/London' + + 'Europe/Copenhagen' + + 'Europe/Berlin' + + 'America/Chicago' + + 'America/Kentucky/Louisville' + + 'Asia/Tokyo' + + Note: The notation used for naming the + timezones where the offset to Coordinated + Universal Time (UTC) is explicitly included, + i.e. 'GMT-2', may be confusing. + The offset indicates the time value + to be added to the local time to get UTC. + + This means that the the offset is positive + for timezones west of UTC and and negative + east of UTC. This is the opposite of how + timezones are often described. + For example standard time in Sweden is + 'GMT-1'. On timezone maps zones east of + UTC are often given a positive offset + so that the very same zone is called 'GMT+1'. + + This attribute can be written via SNMP. +" + DEFVAL { "CET" } + ::= { sysTime 2 } + +sysTimePrimaryServer OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS deprecated + DESCRIPTION + "The IP address of the primary SNTP/NTP server. + + Set to the 0.0.0.0 or empty string if not used. + + Example: '192.36.143.150' (time1.stupi.se) + +" + ::= { sysTime 3 } + +sysTimeSecondaryServer OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS deprecated + DESCRIPTION + "The IP address of the secondary SNTP/NTP server. + + Set to the 0.0.0.0 or empty string if not used. + + Example: '192.36.143.151' (time2.stupi.se) + +" + DEFVAL { "" } + ::= { sysTime 4 } + +sysTimeChangeLocalTime OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Change the local date and time. + + Year - If no century is input the + current century is set by default. + + Month - 1 to 12 + + Day - 1 to 31 + + Hour - 0 to 23 + + Minute - 0 to 59 + + Second - 0 to 59 + + Note: Setting of the local time is disabled if + either the primary or secondary time server + is set. + +" + ::= { sysTime 5 } + +sysTimePrimaryIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The IP address of the primary SNTP/NTP server. + + Set to 0.0.0.0 if not used. + + Example: '192.36.143.150' (time1.stupi.se) + + This attribute can be written via SNMP. +" + DEFVAL { "0.0.0.0" } + ::= { sysTime 6 } + +sysTimeSecondaryIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The IP address of the primary SNTP/NTP server. + + Set to 0.0.0.0 if not used. + + Example: '192.36.143.150' (time1.stupi.se) + + This attribute can be written via SNMP. +" + DEFVAL { "0.0.0.0" } + ::= { sysTime 7 } + +-- ---------------------------------------------------- +-- Syslog configuration directives group +-- ---------------------------------------------------- + +sysLogTable OBJECT-TYPE + SYNTAX SEQUENCE OF SysLogEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "The syslog configuration directives list. + +" + ::= { sysLogList 1 } + +sysLogEntry OBJECT-TYPE + SYNTAX SysLogEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "An entry in the syslog configuration + directives list. + +" + INDEX { sysLogIndex } + ::= { sysLogTable 1 } + +SysLogEntry ::= + SEQUENCE { + sysLogIndex Unsigned32, + sysLogSelection DisplayString, + sysLogAction DisplayString, + sysLogRowStatus RowStatus + } + +sysLogIndex OBJECT-TYPE + SYNTAX Unsigned32 (1..2147483647) + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "An arbitrary index assigned to each syslog + configuration directive. + +" + ::= { sysLogEntry 1 } + +sysLogSelection OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS deprecated + DESCRIPTION + "tbd description + tbd examples + +" + ::= { sysLogEntry 2 } + +sysLogAction OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS deprecated + DESCRIPTION + "tbd description + tbd examples + +" + ::= { sysLogEntry 3 } + +sysLogRowStatus OBJECT-TYPE + SYNTAX RowStatus + MAX-ACCESS read-write + STATUS deprecated + DESCRIPTION + "Manages creation and deletion of conceptual rows. + See also SNMPv2-TC. + +" + ::= { sysLogEntry 4 } + + +-- ---------------------------------------------------- +-- Radius group +-- ---------------------------------------------------- + +sysRadiusPrimaryServer OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The IP address for the primary RADIUS-server. + The port number used is 1812 (accounting, + port 1813, is not enabled). + Time-out is 3 seconds. + + Set to the 0.0.0.0 or empty string if not used. + + If either the server or the secret are not set + the primary server is disabled. + +" + DEFVAL { "" } + ::= { sysRadius 1 } + +sysRadiusPrimarySecret OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The shared secret for the primary RADIUS-server. + + Set to empty string if not used. + + If either the server or the secret are not set + the primary server is disabled. + +" + DEFVAL { "1234567890" } + ::= { sysRadius 2 } + +sysRadiusSecondaryServer OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The IP address for the secondary RADIUS-server. + The port number used is 1812 (accounting, + port 1813, is not enabled). + Time-out is 3 seconds. + + Set to the 0.0.0.0 or empty string if not used. + + If either the server or the secret are not set + the secondary server is disabled. + +" + DEFVAL { "" } + ::= { sysRadius 3 } + +sysRadiusSecondarySecret OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The shared secret for the secondary RADIUS-server. + + Set to empty string if not used. + + If either the server or the secret are not set + the secondary server is disabled. + +" + DEFVAL { "1234567890" } + ::= { sysRadius 4 } + +sysRadiusPrimaryIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address for the primary RADIUS-server. + The port number used is 1812 (accounting, + port 1813, is not enabled). + Time-out is 3 seconds. + + Set to 0.0.0.0 if not used. + + If either the server or the secret are not set + the primary server is disabled. + +" + DEFVAL { "0.0.0.0" } + ::= { sysRadius 5 } + +sysRadiusSecondaryIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address for the secondary RADIUS-server. + The port number used is 1812 (accounting, + port 1813, is not enabled). + Time-out is 3 seconds. + + Set to 0.0.0.0 if not used. + + If either the server or the secret are not set + the primary server is disabled. + +" + DEFVAL { "0.0.0.0" } + ::= { sysRadius 6 } + +sysRadiusPrimaryPort OBJECT-TYPE + SYNTAX Unsigned32 (0..4294967295) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The port number for the primary RADIUS server. +" + DEFVAL { 1812 } + ::= { sysRadius 7 } + +sysRadiusSecondaryPort OBJECT-TYPE + SYNTAX Unsigned32 (0..4294967295) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The port number used for the Secondary RADIUS server. +" + DEFVAL { 1812 } + ::= { sysRadius 8 } + +sysRadiusDefaultUserProfile OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The user authority profile. + + 'administrator' - No restrictions. + + 'operator' - Restrictions on user operations + and some systems management operations. + Otherwise read/write access. + + 'readonly' - Read only access. + + 'no radius template' - The user 'radius' is used as template. + It should be created if RADIUS server is used. + Otherwise both primary and secondary servers are disabled. + +" + ::= { sysRadius 9 } + + +-- ---------------------------------------------------- +-- License group +-- ---------------------------------------------------- + +sysLicenseExpireDate OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Shows the date when the license will expire. + +" + ::= { sysLicense 1 } + +sysLicenseCustomer OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Shows the name of the customer that holds the license. + +" + ::= { sysLicense 2 } + +sysLicenseExpiresSoon OBJECT-TYPE + SYNTAX FaultStatus + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Warns that the license will expire in 7 days, + or less. + +" + ::= { sysLicense 3 } + +sysLicenseExpired OBJECT-TYPE + SYNTAX FaultStatus + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Indicates that the license has expired, or the + license file is missing. + +" + ::= { sysLicense 4 } + +sysLicenseExpiredCause OBJECT-TYPE + SYNTAX INTEGER { + none (0), + missing (1), + invalid (2), + corrupt (3), + expired (4) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Describes why the license expired alarm is + raised. + + none - file is ok, no alarm. + + missing - the license file is missing. + + invalid - it is not a valid XML file, or + some tags are missing. + + corrupt - the encryption key does not match + the content of the file. + + expired - the license has expired. + +" + ::= { sysLicense 5 } + +sysLicenseFeatureEws OBJECT-TYPE + SYNTAX INTEGER { + disabled (1), + enabled (2), + demo (3), + corrupt (4), + expired (5) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "disabled - the feature ENM can not be used. + + enabled - the feature ENM can be used. + + demo - the feature is only for demo use. + + corrupt - the encryption key does not match. + + expired - the feature has expired. + +" + ::= { sysLicense 6 } + +sysLicenseFeatureOspf OBJECT-TYPE + SYNTAX INTEGER { + disabled (1), + enabled (2), + demo (3), + corrupt (4), + expired (5) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "disabled - the feature OSPF can not be used. + + enabled - the feature OSPF can be used. + + demo - the feature is only for demo use. + + corrupt - the encryption key does not match. + + expired - the feature has expired. + +" + ::= { sysLicense 7 } + +sysLicenseFeatureSnmp OBJECT-TYPE + SYNTAX INTEGER { + disabled (1), + enabled (2), + demo (3), + corrupt (4), + expired (5) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "disabled - the feature SNMP can not be used. + + enabled - the feature SNMP can be used. + + demo - the feature is only for demo use. + + corrupt - the encryption key does not match. + + expired - the feature has expired. + +" + ::= { sysLicense 8 } + +sysLicenseFeatureGmpls OBJECT-TYPE + SYNTAX INTEGER { + disabled (1), + enabled (2), + demo (3), + corrupt (4), + expired (5) } + + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "disabled - the feature GMPLS can not be used. + + enabled - the feature GMPLS can be used. + + demo - the feature is only for demo use. + + corrupt - the encryption key does not match. + + expired - the feature has expired. + +" + ::= { sysLicense 9 } + +sysLicenseFeatureRudb OBJECT-TYPE + SYNTAX INTEGER { + disabled (1), + enabled (2), + demo (3), + corrupt (4), + expired (5) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "disabled - the feature RUDB can not be used. + + enabled - the feature RUDB can be used. + + demo - the feature is only for demo use. + + corrupt - the encryption key does not match. + + expired - the feature has expired. + + RUDB means 'remote used database' and include + TACACS and RADIUS. + +" + ::= { sysLicense 10 } + +sysLicenseInstallLicenseFile OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Install a new license file. + + The license file can either be fetched from a + remote server or installed from local + directory. + + There are 3 cases: + + 1. Remote server. Give server addr and full path + + installLicenseFile / + + installLicenseFile 192.168.10.27/tftp/license.xml + + 2. From a local directory + + installLicenseFile + + installLicenseFile /root/license.xml + + 3. From the local download directory + /tftpboot/downloaded + + installLicenseFile + + installLicenseFile license.xml + + Regardless of the name of the file it will be + installed as + + /etc/lumentis/license.xml + +" + ::= { sysLicense 11 } + + +-- ---------------------------------------------------- +-- Tacacs group +-- ---------------------------------------------------- + +sysTacacsPrimaryServer OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The IP address for the primary TACACS+-server. + The port number used is 49. + Time-out is 3 seconds. + + Set to the 0.0.0.0 or empty string if not used. + +" + DEFVAL { "" } + ::= { sysTacacs 1 } + +sysTacacsSecondaryServer OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The IP address for the secondary TACACS+-server. + The port number used is 49. + Time-out is 3 seconds. + + Set to the 0.0.0.0 or empty string if not used. + +" + DEFVAL { "" } + ::= { sysTacacs 2 } + +sysTacacsSecret OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The shared secret for the primary TACACS+-server. + + Set to empty string if not used. + +" + DEFVAL { "1234567890" } + ::= { sysTacacs 3 } + +sysTacacsSecondarySecret OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The shared secret for the secondary TACACS+-server. + + Set to empty string if not used. + +" + DEFVAL { "1234567890" } + ::= { sysTacacs 4 } + +sysTacacsPrimaryIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address for the primary TACACS+-server. + The port number used is 49. + Time-out is 3 seconds. + + Set to 0.0.0.0 if not used. + +" + DEFVAL { "0.0.0.0" } + ::= { sysTacacs 5 } + +sysTacacsSecondaryIpAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address for the secondary TACACS+-server. + The port number used is 49. + Time-out is 3 seconds. + + Set to 0.0.0.0 if not used. + +" + DEFVAL { "0.0.0.0" } + ::= { sysTacacs 6 } + +-- ---------------------------------------------------- +-- Security group +-- ---------------------------------------------------- + +sysSecurityLocalConsoleAccess OBJECT-TYPE + SYNTAX INTEGER { + disabled (1), + enabled (2), + bootdisabled (3) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "When this parameter is 'disabled' there + is no way to access the board via RS-232. + + Note, the setting applies to all boards in all chassis. + + enabled - Access is allowed + disabled - No access is allowed. + The boot monitor and LINUX login are blocked. + bootdisabled - The boot monitor is blocked while LINUX login is allowed. + + Only administrator can change the local console access settings. + +" + DEFVAL { enabled } + ::= { sysSecurity 1 } + +sysSecurityChangeLocalConsoleAccess OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Procedure to change 'Local Console Access' + +" + ::= { sysSecurity 2 } + +sysSecurityIpTablesStatus OBJECT-TYPE + SYNTAX INTEGER { + unavailable (1), + unsecure (2), + secure (3) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This parameter shows if a system + function is enabled in the node. + + unavailable - package not installed + unsecure - package installed but not in use + secure - package installed and in use + +" + DEFVAL { unavailable } + ::= { sysSecurity 3 } + +sysSecurityLocalCraftAccess OBJECT-TYPE + SYNTAX EnableDisable + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The local craft ETH access is used for + connecting a PC which runs DHCP (Dynamic Host Control Protocol) + for accessing the web (GUI) interface. + Use lc in the address bar of the browser. + The IP address of the DCN also works. + + When this parameter is 'disabled' there + is no way to access the board via Craft ETH port. + + enabled - Access is allowed + disabled - No access is allowed. + + Only administrator can change the local craft ETH access settings. + + The Local Craft ETH runs in 1000Base-T mode (1G Eth) or lower speed + depending on the auto negotiation. + +" + DEFVAL { enabled } + ::= { sysSecurity 4 } + +sysSecurityChangeLocalCraftAccess OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Procedure to change 'Local Craft ETH Access' + +" + ::= { sysSecurity 5 } + +sysSecurityAuthenticationOrder OBJECT-TYPE + SYNTAX INTEGER { + localFirst (1), + remoteFirst (2), + strictRemoteFirst (3) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This parameter shows the authentication order which is + used by the system. + + localFirst - First authenticate with respect to local user database. If it fails, try remote server(s). + If no remote servers are configured, the authentication will be Local-Only. + remoteFirst - First authenticate with respect to the remote servers. If all remote servers are unreachable, try the local user database. + If the remote authentication is denied, try the local user database. + strictRemoteFirst - First authenticate with respect to the remote servers. If all remote servers are unreachable, try the local user database. + If the remote authentication is denied, stop, access is denied. + + Only administrator can change the authenticate order settings. + +" + DEFVAL { strictRemoteFirst } + ::= { sysSecurity 6 } + +sysSecurityFileSystemAccessRestrictions OBJECT-TYPE + SYNTAX EnableDisable + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Access rights to the file system of the node element. When 'restricted', + restrictions to the file system are activated, these restrictions depends + on the user authority profile. + + disabled - Default access rights: + 1. Administrators (including root) and operators can execute + CLI commands bash and telnet. + 2. All users have full file system access using SFTP or + FTP (if enabled). + + enabled - Restricted access rights to the file system. The following + restrictions are applied: + 1. Only administrator users (including root) can execute + CLI commands bash and telnet. + 2. When using SFTP: + Readonly and operator users can only access /tftpboot/ and + its subdirectories. + Administrator users (including root) have full file system + access. + 3. When using FTP (if enabled): + Readonly, operator and all administrator users except root + can only access /tftpboot/ and its subdirectories. + The root user have full file system access. + + When changed, the updated restrictions will be used at following FTP/SFTP + sessions. + On CU-SFP/III, active FTP sessions will be aborted at the point when file + system access is changed. + + Only administrator can change the file system access restriction settings. + +" + DEFVAL { disabled } + ::= { sysSecurity 7 } + +sysSecurityCUFrontICNPortAccess OBJECT-TYPE + SYNTAX EnableDisable + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The CU front ICN port access is used for + internal connection between subracks. + + When this parameter is 'disabled' there + is no way to access next node via ICN1 or ICN2. + + enabled - Access is allowed + disabled - No access is allowed. + + Only administrator can change the CU front ICN port access settings. + +" + DEFVAL { enabled } + ::= { sysSecurity 8 } + +sysSecurityChangeCUFrontICNPortAccess OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Procedure to change 'CU front ICN port access' + +" + ::= { sysSecurity 9 } + +sysSecuritySubrackICNPortAccess OBJECT-TYPE + SYNTAX EnableDisable + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The Subrack ICN port access is used for + internal connection between subracks. + + When this parameter is 'disabled' there + is no way to access next subrack via ICN3 or ICN4. + + enabled - Access is allowed + disabled - No access is allowed. + + Only administrator can change the Subrack ICN port access settings. + +" + DEFVAL { enabled } + ::= { sysSecurity 10 } + +sysSecurityChangeSubrackICNPortAccess OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Procedure to change 'Subrack ICN port access' + +" + ::= { sysSecurity 11 } + +sysSecurityMgmtAccessProofOfConnStatus OBJECT-TYPE + SYNTAX INTEGER { + undefined (0), + connected (1), + disconnected (2) } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This parameter shows if the NE has lost the signal + or not. The SNMP agent is regularly polling the NE + and if the NE is not polled within a certain time period + (set in parameter MgmtAccessProofOfConnectivity) + we have proof of connectivity loss, and this parameter + is set to disconnected. + + undefined - NE connectivity status not determined + disconnected - NE lost connection + connected - NE is connected + +" + DEFVAL { undefined } + ::= { sysSecurity 12 } + +sysSecurityMgmtAccessProofOfConnectivity OBJECT-TYPE + SYNTAX Integer32 (1..720) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of minutes that has to pass with no SNMP agent polls + before the NE assumes that connectivity is lost. + + Only administrator can change the proof of connectivity settings. + +" + DEFVAL { 120 } + ::= { sysSecurity 13 } + + sysSecurityAutoEnableBlockedMgmtPorts OBJECT-TYPE + SYNTAX OnOff + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A setting to turn off/on auto enabling of blocked management ports. + Management ports in this context means DCN and Local craft ETH (Local craft ETH + does not exist on all platforms). If the network element has not been polled by the SNMP agent + (DNA-M) within the time that is set by the attribute Proof of Connectivity, the + blocked management ports are automatically enabled (deblocked/unblocked). + If SNMP polling is detected again by the network element (after a discontinuity) the ports will + revert to their blocked state. + + on - The function to auto enable blocked ports is turned on. + + off - The function to auto enable blocked ports is turned off. + + Only administrator can change the auto enable blocked management ports settings. + +" + DEFVAL { on } + ::= { sysSecurity 14 } + +sysSecurityBlockedMgmtPortsUnblocked OBJECT-TYPE + SYNTAX FaultStatus + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Blocked management ports (i.e. local craft and DCN ports) are unblocked. + The blocking is overridden due to loss of management connectivity (SNMP). + +" + ::= { sysSecurity 15 } + +sysSecurityInstallCertificates OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Procedure to install certificates + installCertificates + Each is absolute (starting with '/'). + After this command, the files are automatically deleted. + +" + ::= { sysSecurity 16 } + +sysSecurityInstallFactoryDefaultCertificates OBJECT-TYPE + SYNTAX CommandString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Procedure to install factory default certificates. + +" + ::= { sysSecurity 17 } + +-- ---------------------------------------------------- +-- Manager group +-- ---------------------------------------------------- + +sysManagerName OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..64)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The name of Centralized Security Manager (DNA-M). + This attribute shall NOT be set locally. + The DNA-M managing the security features of the NE will set this. + Requires administrator privileges to change. + +" + DEFVAL { "" } + ::= { sysManager 1 } + +sysManagerIPAddress OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..255)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The address of Centralized Security Manager (DNA-M). + This attribute shall NOT be set locally. + The DNA-M managing the security features of the NE will set this. + Requires administrator privileges to change. + +" + ::= { sysManager 2 } + +sysManagerPolicyName OBJECT-TYPE + SYNTAX DisplayString (SIZE (0..64)) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The name of the Security Policy, defined in DNA-M, that is assigned to + this NE. + This attribute shall NOT be set locally. + The DNA-M managing the security features of the NE will set this. + Requires administrator privileges to change. + +" + DEFVAL { "" } + ::= { sysManager 3 } + +sysManagerPlatform OBJECT-TYPE + SYNTAX Platform + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "NE platform information. + Used by Centralized Security Manager (DNA-M). + +" + DEFVAL { unknown } + ::= { sysManager 4 } + +sysManagerFcmComplianceVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Feature Capability Matrix Compliance version. + Used by Centralized Security Manager (DNA-M). + +" + DEFVAL { "" } + ::= { sysManager 5 } + +-- ---------------------------------------------------- +-- loginBanner group +-- ---------------------------------------------------- + +sysLoginBannerContent OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The login banner can be used to display pre-login + information such as system information or a warning. + The login banner requires administrator privileges + to change and can be set through CLI, GUI or DNA-M. + Characters 0x20 to 0x25 and 0x27 to 0x7E in + ISO/IEC 8859-1 are accepted/valid. Ampersand ('&') + 0x26 is not allowed (this is a general XTM restriction + for text fields). New-line shall be encoded as '\\n' if + the message is set through CLI. + + Min length: 0 character. + + Max length: 1020 characters. + + Although formal SNMP type is restricted to 128 + characters, the system can cope with 1020 characters + when managed from CLI/GUI or DNA-M. + +" + DEFVAL { "" } + ::= { sysLoginBanner 1 } + +-- ---------------------------------------------------- +-- Notifications +-- ---------------------------------------------------- + +-- n/a + + +-- ---------------------------------------------------- +-- Object and event groups +-- ---------------------------------------------------- + +sysGeneralGroup OBJECT-GROUP + OBJECTS { + sysGeneralTestAndIncr, + sysGeneralMibSpecVersion, + sysGeneralMibImplVersion + } + STATUS deprecated + DESCRIPTION + "The general system MIB objects." + ::= { lumSystemGroups 1 } + +sysNodeGroup OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeContact, + sysNodeLocation, + sysNodeObjectId, + sysNodePrimaryNameServer, + sysNodeRunLevel } + STATUS deprecated + DESCRIPTION + "The node properties objects." + ::= { lumSystemGroups 2 } + +sysHostListGroup OBJECT-GROUP + OBJECTS { + sysHostIndex, + sysHostIpAddress, + sysHostNames, + sysHostRowStatus } + STATUS current + DESCRIPTION + "The host name table." + ::= { lumSystemGroups 3 } + +sysTimeGroup OBJECT-GROUP + OBJECTS { + sysTimeLocal, + sysTimeZone, + sysTimePrimaryServer, + sysTimeSecondaryServer } + STATUS deprecated + DESCRIPTION + "The node time properties." + ::= { lumSystemGroups 4 } + +sysLogListGroup OBJECT-GROUP + OBJECTS { + sysLogIndex, + sysLogSelection, + sysLogAction, + sysLogRowStatus } + STATUS deprecated + DESCRIPTION + "Log configuration directives." + ::= { lumSystemGroups 5 } + +sysGeneralGroupV2 OBJECT-GROUP + OBJECTS { + sysGeneralLastChangeTime + } + STATUS deprecated + DESCRIPTION + "The general system MIB objects v2." + ::= { lumSystemGroups 6 } + +sysNodeGroupV2 OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeContact, + sysNodeLocation, + sysNodeObjectId, + sysNodePrimaryNameServer, + sysNodeRunLevel, + sysNodeSecondaryNameServer } + STATUS deprecated + DESCRIPTION + "The node properties objects V2." + ::= { lumSystemGroups 7 } + +sysUserGroup OBJECT-GROUP + OBJECTS { + sysUserIndex, + sysUserName, + sysUserPasswd, + sysUserDescr, + sysUserLastChangeTime, + sysUserExpireTime, + sysUserRowStatus } + STATUS deprecated + DESCRIPTION + "The user table objects." + ::= { lumSystemGroups 8 } + +sysNodeGroupV3 OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeContact, + sysNodeLocation, + sysNodeObjectId, + sysNodePrimaryNameServer, + sysNodeRunLevel, + sysNodeSecondaryNameServer, + sysNodeUptime } + STATUS deprecated + DESCRIPTION + "The node properties objects V3." + ::= { lumSystemGroups 9 } + +sysGeneralGroupV3 OBJECT-GROUP + OBJECTS { + sysGeneralLastChangeTime, + sysGeneralTest + } + STATUS current + DESCRIPTION + "The general system MIB objects v3." + ::= { lumSystemGroups 10 } + +sysNodeGroupV4 OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeContact, + sysNodeLocation, + sysNodeObjectId, + sysNodePrimaryNameServer, + sysNodeRunLevel, + sysNodeSecondaryNameServer, + sysNodeUptime, + sysNodeNeDistinguishedName, + sysNodeNeUserName, + sysNodeNeType } + STATUS deprecated + DESCRIPTION + "The node properties objects V4." + ::= { lumSystemGroups 11 } + +sysGeneralGroupV4 OBJECT-GROUP + OBJECTS { + sysGeneralLastChangeTime, + sysGeneralTest, + sysGeneralConfigLastChangeTime + } + STATUS deprecated + DESCRIPTION + "The general system MIB objects v4." + ::= { lumSystemGroups 12 } + +sysNodeGroupV5 OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeContact, + sysNodeLocation, + sysNodeObjectId, + sysNodePrimaryNameServer, + sysNodeSecondaryNameServer, + sysNodeUptime, + sysNodeNeDistinguishedName, + sysNodeNeUserName, + sysNodeNeType, + sysNodeBootTime } + STATUS deprecated + DESCRIPTION + "The node properties objects V5." + ::= { lumSystemGroups 15 } + +sysRadiusGroup OBJECT-GROUP + OBJECTS { + sysRadiusPrimaryServer, + sysRadiusPrimarySecret, + sysRadiusSecondaryServer, + sysRadiusSecondarySecret } + STATUS deprecated + DESCRIPTION + "The RADIUS MIB objects." + ::= { lumSystemGroups 16 } + +sysNodeGroupV6 OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeContact, + sysNodeLocation, + sysNodeObjectId, + sysNodePrimaryNameServer, + sysNodeSecondaryNameServer, + sysNodeUptime, + sysNodeNeDistinguishedName, + sysNodeNeUserName, + sysNodeNeType, + sysNodeBootTime, + sysNodeLocale } + STATUS deprecated + DESCRIPTION + "The node properties objects V6." + ::= { lumSystemGroups 17 } + +sysTimeGroupV2 OBJECT-GROUP + OBJECTS { + sysTimeLocal, + sysTimeZone, + sysTimePrimaryServer, + sysTimeSecondaryServer, + sysTimeChangeLocalTime } + STATUS deprecated + DESCRIPTION + "The node time properties V2." + ::= { lumSystemGroups 18 } + +sysLicenseGroup OBJECT-GROUP + OBJECTS { + sysLicenseExpireDate, + sysLicenseCustomer, + sysLicenseExpiresSoon, + sysLicenseExpired, + sysLicenseExpiredCause, + sysLicenseFeatureEws, + sysLicenseFeatureEws, + sysLicenseFeatureOspf, + sysLicenseFeatureSnmp, + sysLicenseFeatureGmpls, + sysLicenseFeatureRudb, + sysLicenseInstallLicenseFile } + STATUS current + DESCRIPTION + "The node license properties V1." + ::= { lumSystemGroups 19 } + +sysTacacsGroup OBJECT-GROUP + OBJECTS { + sysTacacsPrimaryServer, + sysTacacsSecondaryServer, + sysTacacsSecret } + STATUS deprecated + DESCRIPTION + "The TACACS+ MIB objects." + ::= { lumSystemGroups 20 } + +sysUserGroupV2 OBJECT-GROUP + OBJECTS { + sysUserIndex, + sysUserName, + sysUserDescr, + sysUserProfile, + sysUserUid } + STATUS current + DESCRIPTION + "The user table objects v2." + ::= { lumSystemGroups 21 } + +sysGeneralGroupV5 OBJECT-GROUP + OBJECTS { + sysGeneralLastChangeTime, + sysGeneralTest, + sysGeneralConfigLastChangeTime, + sysGeneralLoginRecords + } + STATUS deprecated + DESCRIPTION + "The general system MIB objects v5." + ::= { lumSystemGroups 22 } + +sysUserGroupV3 OBJECT-GROUP + OBJECTS { + sysUserIndex, + sysUserName, + sysUserDescr, + sysUserProfile, + sysUserUid, + sysUserChangePassword, + sysUserClearPassword, + sysUserDisable } + STATUS deprecated + DESCRIPTION + "The user table objects v3." + ::= { lumSystemGroups 23 } + +sysTacacsGroupV2 OBJECT-GROUP + OBJECTS { + sysTacacsPrimaryServer, + sysTacacsSecondaryServer, + sysTacacsSecret, + sysTacacsSecondarySecret } + STATUS deprecated + DESCRIPTION + "The TACACS+ MIB objects v2." + ::= { lumSystemGroups 24 } + +sysGeneralGroupV6 OBJECT-GROUP + OBJECTS { + sysGeneralLastChangeTime, + sysGeneralTest, + sysGeneralConfigLastChangeTime, + sysGeneralLoginRecords, + sysGeneralUserTableSize } + STATUS deprecated + DESCRIPTION + "The general system MIB objects v6." + ::= { lumSystemGroups 25 } + +sysUserGroupV4 OBJECT-GROUP + OBJECTS { + sysUserIndex, + sysUserName, + sysUserDescr, + sysUserProfile, + sysUserUid, + sysUserChangePassword, + sysUserClearPassword, + sysUserDisable, + sysUserMode, + sysUserEnable } + STATUS current + DESCRIPTION + "The user table objects v4." + ::= { lumSystemGroups 26 } + +sysSecurityGroupV1 OBJECT-GROUP + OBJECTS { + sysSecurityLocalConsoleAccess, + sysSecurityChangeLocalConsoleAccess } + STATUS deprecated + DESCRIPTION + "The security group objects v1 (7.0)." + ::= { lumSystemGroups 27 } + +sysNodeGroupV7 OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeContact, + sysNodeLocation, + sysNodeObjectId, + sysNodePrimaryNameServer, + sysNodeSecondaryNameServer, + sysNodeUptime, + sysNodeNeDistinguishedName, + sysNodeNeUserName, + sysNodeNeType, + sysNodeBootTime, + sysNodeLocale, + sysNodeVersion } + STATUS deprecated + DESCRIPTION + "The node properties objects V7." + ::= { lumSystemGroups 28 } + +sysTacacsGroupV3 OBJECT-GROUP + OBJECTS { + sysTacacsSecret, + sysTacacsSecondarySecret, + sysTacacsPrimaryIpAddress, + sysTacacsSecondaryIpAddress } + STATUS current + DESCRIPTION + "The TACACS+ MIB objects v3." + ::= { lumSystemGroups 29 } + +sysRadiusGroupV2 OBJECT-GROUP + OBJECTS { + sysRadiusPrimarySecret, + sysRadiusSecondarySecret, + sysRadiusPrimaryIpAddress, + sysRadiusSecondaryIpAddress } + STATUS deprecated + DESCRIPTION + "The RADIUS MIB objects." + ::= { lumSystemGroups 30 } + +sysTimeGroupV3 OBJECT-GROUP + OBJECTS { + sysTimeLocal, + sysTimeZone, + sysTimeChangeLocalTime, + sysTimePrimaryIpAddress, + sysTimeSecondaryIpAddress} + STATUS current + DESCRIPTION + "The node time properties V3." + ::= { lumSystemGroups 31 } + +sysSecurityGroupV2 OBJECT-GROUP + OBJECTS { + sysSecurityLocalConsoleAccess, + sysSecurityChangeLocalConsoleAccess, + sysSecurityIpTablesStatus } + STATUS deprecated + DESCRIPTION + "The security group objects v2 (12.0)." + ::= { lumSystemGroups 32 } + +sysRadiusGroupV3 OBJECT-GROUP + OBJECTS { + sysRadiusPrimarySecret, + sysRadiusSecondarySecret, + sysRadiusPrimaryIpAddress, + sysRadiusSecondaryIpAddress, + sysRadiusPrimaryPort, + sysRadiusSecondaryPort } + STATUS deprecated + DESCRIPTION + "The RADIUS MIB objects V3." + ::= { lumSystemGroups 33 } + +sysRadiusGroupV4 OBJECT-GROUP + OBJECTS { + sysRadiusPrimarySecret, + sysRadiusSecondarySecret, + sysRadiusPrimaryIpAddress, + sysRadiusSecondaryIpAddress, + sysRadiusPrimaryPort, + sysRadiusSecondaryPort, + sysRadiusDefaultUserProfile} + STATUS current + DESCRIPTION + "The RADIUS MIB objects V4." + ::= { lumSystemGroups 34 } + +sysGeneralGroupV7 OBJECT-GROUP + OBJECTS { + sysGeneralLastChangeTime, + sysGeneralConfigLastChangeTime, + sysGeneralLoginRecords, + sysGeneralUserTableSize, + sysGeneralWriteTest } + STATUS current + DESCRIPTION + "The general system MIB objects v7." + ::= { lumSystemGroups 35 } + +sysSecurityGroupV3 OBJECT-GROUP + OBJECTS { + sysSecurityLocalConsoleAccess, + sysSecurityChangeLocalConsoleAccess, + sysSecurityLocalCraftAccess, + sysSecurityChangeLocalCraftAccess, + sysSecurityIpTablesStatus, + sysSecurityAuthenticationOrder} + STATUS deprecated + DESCRIPTION + "The security group objects v3 (27.0)." + ::= { lumSystemGroups 36 } + +sysNodeGroupV8 OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeContact, + sysNodeLocation, + sysNodeObjectId, + sysNodePrimaryNameServer, + sysNodeSecondaryNameServer, + sysNodeUptime, + sysNodeNeDistinguishedName, + sysNodeNeUserName, + sysNodeNeType, + sysNodeBootTime, + sysNodeLocale, + sysNodeVersion, + sysNodeCLLI, + sysNodeFIC, + sysNodeTID, + sysNodeLatitude, + sysNodeLongitude} + STATUS current + DESCRIPTION + "The node properties objects V8 (28.0)." + ::= { lumSystemGroups 37 } + +sysSecurityGroupV4 OBJECT-GROUP + OBJECTS { + sysSecurityLocalConsoleAccess, + sysSecurityChangeLocalConsoleAccess, + sysSecurityLocalCraftAccess, + sysSecurityChangeLocalCraftAccess, + sysSecurityIpTablesStatus, + sysSecurityAuthenticationOrder, + sysSecurityFileSystemAccessRestrictions} + STATUS deprecated + DESCRIPTION + "The security group objects v4 (29.0)." + ::= { lumSystemGroups 38 } + +sysSecurityGroupV5 OBJECT-GROUP + OBJECTS { + sysSecurityLocalConsoleAccess, + sysSecurityChangeLocalConsoleAccess, + sysSecurityLocalCraftAccess, + sysSecurityChangeLocalCraftAccess, + sysSecurityIpTablesStatus, + sysSecurityAuthenticationOrder, + sysSecurityFileSystemAccessRestrictions, + sysSecurityCUFrontICNPortAccess, + sysSecurityChangeCUFrontICNPortAccess, + sysSecuritySubrackICNPortAccess, + sysSecurityChangeSubrackICNPortAccess, + sysSecurityMgmtAccessProofOfConnStatus, + sysSecurityMgmtAccessProofOfConnectivity, + sysSecurityAutoEnableBlockedMgmtPorts, + sysSecurityBlockedMgmtPortsUnblocked } + STATUS deprecated + DESCRIPTION + "The security group objects v5 (30.0)." + ::= { lumSystemGroups 39 } + +sysSecurityGroupV6 OBJECT-GROUP + OBJECTS { + sysSecurityLocalConsoleAccess, + sysSecurityChangeLocalConsoleAccess, + sysSecurityLocalCraftAccess, + sysSecurityChangeLocalCraftAccess, + sysSecurityIpTablesStatus, + sysSecurityAuthenticationOrder, + sysSecurityFileSystemAccessRestrictions, + sysSecurityCUFrontICNPortAccess, + sysSecurityChangeCUFrontICNPortAccess, + sysSecuritySubrackICNPortAccess, + sysSecurityChangeSubrackICNPortAccess, + sysSecurityMgmtAccessProofOfConnStatus, + sysSecurityMgmtAccessProofOfConnectivity, + sysSecurityAutoEnableBlockedMgmtPorts, + sysSecurityBlockedMgmtPortsUnblocked, + sysSecurityInstallCertificates, + sysSecurityInstallFactoryDefaultCertificates } + STATUS current + DESCRIPTION + "The security group objects v6 (32.0)." + ::= { lumSystemGroups 40 } + +sysManagerGroupV1 OBJECT-GROUP + OBJECTS { + sysManagerName, + sysManagerIPAddress, + sysManagerPolicyName, + sysManagerPlatform } + STATUS deprecated + DESCRIPTION + "The manager group objects v1 (32.0)." + ::= { lumSystemGroups 41 } + +sysLoginBannerGroupV1 OBJECT-GROUP + OBJECTS { + sysLoginBannerContent } + STATUS current + DESCRIPTION + "The loginBanner group objects v1 (32.1)." + ::= { lumSystemGroups 42 } + +sysManagerGroupV2 OBJECT-GROUP + OBJECTS { + sysManagerName, + sysManagerIPAddress, + sysManagerPolicyName, + sysManagerPlatform, + sysManagerFcmComplianceVersion} + STATUS current + DESCRIPTION + "The manager group objects v2 (32.1)." + ::= { lumSystemGroups 43 } + +-- ---------------------------------------------------- +-- Compliance +-- ---------------------------------------------------- + +lumSystemBasicComplV1 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V1." + MODULE + MANDATORY-GROUPS { + sysGeneralGroup, + sysNodeGroup, + sysTimeGroup, + sysLogListGroup, + sysHostListGroup + } + ::= { lumSystemCompl 1 } + +lumSystemBasicComplV2 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V2." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV2, + sysTimeGroup, + sysNodeGroup } + ::= { lumSystemCompl 2 } + +lumSystemBasicComplV3 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V3." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV2, + sysTimeGroup, + sysNodeGroupV2, + sysUserGroup } + ::= { lumSystemCompl 3 } + +lumSystemBasicComplV4 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V4." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV2, + sysTimeGroup, + sysNodeGroupV3, + sysUserGroup } + ::= { lumSystemCompl 4 } + +lumSystemBasicComplV5 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V5." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV3, + sysTimeGroup, + sysNodeGroupV3, + sysUserGroup } + ::= { lumSystemCompl 5 } + +lumSystemBasicComplV6 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V6." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV3, + sysTimeGroup, + sysNodeGroupV4, + sysUserGroup } + ::= { lumSystemCompl 6 } + +lumSystemBasicComplV7 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V7." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV4, + sysTimeGroup, + sysNodeGroupV5, + sysUserGroup } + ::= { lumSystemCompl 7 } + +lumSystemBasicComplV8 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V8." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV4, + sysTimeGroup, + sysNodeGroupV5, + sysUserGroup, + sysRadiusGroup } + ::= { lumSystemCompl 8 } + +lumSystemBasicComplV9 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V9." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV4, + sysTimeGroup, + sysNodeGroupV6, + sysUserGroup, + sysRadiusGroup } + ::= { lumSystemCompl 9 } + +lumSystemBasicComplV10 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V10 (2.2)." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV4, + sysTimeGroupV2, + sysNodeGroupV6, + sysRadiusGroup, + sysLicenseGroup } + ::= { lumSystemCompl 10 } + +lumSystemBasicComplV11 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V11." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV4, + sysTimeGroupV2, + sysNodeGroupV6, + sysRadiusGroup, + sysLicenseGroup, + sysTacacsGroup } + ::= { lumSystemCompl 11 } + +lumSystemBasicComplV12 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V12." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV4, + sysTimeGroupV2, + sysNodeGroupV6, + sysRadiusGroup, + sysLicenseGroup, + sysTacacsGroup, + sysUserGroupV2 } + ::= { lumSystemCompl 12 } + +lumSystemBasicComplV13 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V13." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV5, + sysTimeGroupV2, + sysNodeGroupV6, + sysRadiusGroup, + sysLicenseGroup, + sysTacacsGroup, + sysUserGroupV2 } + ::= { lumSystemCompl 13 } + +lumSystemBasicComplV14 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V14." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV6, + sysTimeGroupV2, + sysNodeGroupV6, + sysRadiusGroup, + sysLicenseGroup, + sysTacacsGroupV2, + sysUserGroupV3 } + ::= { lumSystemCompl 14 } + +lumSystemBasicComplV15 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V15 (4.0)." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV6, + sysTimeGroupV2, + sysNodeGroupV6, + sysRadiusGroup, + sysLicenseGroup, + sysTacacsGroupV2, + sysUserGroupV4 } + ::= { lumSystemCompl 15 } + +lumSystemBasicComplV16 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V16 (7.0)." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV6, + sysTimeGroupV2, + sysNodeGroupV6, + sysRadiusGroup, + sysLicenseGroup, + sysTacacsGroupV2, + sysUserGroupV4, + sysSecurityGroupV1 } + ::= { lumSystemCompl 16 } + +lumSystemBasicComplV17 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V17 (10.0)." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV6, + sysTimeGroupV2, + sysNodeGroupV7, + sysRadiusGroup, + sysLicenseGroup, + sysTacacsGroupV2, + sysUserGroupV4, + sysSecurityGroupV1 } + ::= { lumSystemCompl 17 } + +lumSystemBasicComplV18 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V18 (11.0)." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV6, + sysTimeGroupV3, + sysNodeGroupV7, + sysRadiusGroupV2, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV1 } + ::= { lumSystemCompl 18 } + +lumSystemBasicComplV19 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V19 (12.0). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV6, + sysTimeGroupV3, + sysNodeGroupV7, + sysRadiusGroupV2, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV2 } + ::= { lumSystemCompl 19 } + +lumSystemBasicComplV20 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V20 (13.0). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV6, + sysTimeGroupV3, + sysNodeGroupV7, + sysRadiusGroupV3, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV2 } + ::= { lumSystemCompl 20 } + +lumSystemBasicComplV21 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V21 (13.0). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV6, + sysTimeGroupV3, + sysNodeGroupV7, + sysRadiusGroupV4, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV2 } + ::= { lumSystemCompl 21 } + + +lumSystemBasicComplV22 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V22 (23.0). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV7, + sysTimeGroupV3, + sysNodeGroupV7, + sysRadiusGroupV4, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV2 } + ::= { lumSystemCompl 22 } + +lumSystemBasicComplV23 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V23 (28.0). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV7, + sysTimeGroupV3, + sysNodeGroupV8, + sysRadiusGroupV4, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV2 } + ::= { lumSystemCompl 23 } + +lumSystemBasicComplV24 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V24 (29.0). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV7, + sysTimeGroupV3, + sysNodeGroupV8, + sysRadiusGroupV4, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV4 } + ::= { lumSystemCompl 24 } + +lumSystemBasicComplV25 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V25 (30.0). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV7, + sysTimeGroupV3, + sysNodeGroupV8, + sysRadiusGroupV4, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV5 } + ::= { lumSystemCompl 25 } + +lumSystemBasicComplV26 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V26 (30.1). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV7, + sysTimeGroupV3, + sysNodeGroupV8, + sysRadiusGroupV4, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV5 } + ::= { lumSystemCompl 26 } + +lumSystemBasicComplV27 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V27 (32.0). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV7, + sysTimeGroupV3, + sysNodeGroupV8, + sysRadiusGroupV4, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV6 } + ::= { lumSystemCompl 27 } + +lumSystemBasicComplV28 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Basic implementation requirements for the system MIB V28 (32.0). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV7, + sysTimeGroupV3, + sysNodeGroupV8, + sysRadiusGroupV4, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV6, + sysManagerGroupV1 } + ::= { lumSystemCompl 28 } + +lumSystemBasicComplV29 MODULE-COMPLIANCE + STATUS current + DESCRIPTION + "Basic implementation requirements for the system MIB V29 (32.1). + Used to indicate web-server less vulnerable to hanging." + MODULE + MANDATORY-GROUPS { + sysGeneralGroupV7, + sysTimeGroupV3, + sysNodeGroupV8, + sysRadiusGroupV4, + sysLicenseGroup, + sysTacacsGroupV3, + sysUserGroupV4, + sysSecurityGroupV6, + sysManagerGroupV2, + sysLoginBannerGroupV1 } + ::= { lumSystemCompl 29 } + +-- ---------------------------------------------------- +-- Object and event groups +-- ---------------------------------------------------- + +sysGeneralMinimalGroupV1 OBJECT-GROUP + OBJECTS { + sysGeneralLastChangeTime, + sysGeneralConfigLastChangeTime } + STATUS current + DESCRIPTION + "The minimal general system MIB objects v1." + ::= { lumSystemMinimalGroups 1 } + +sysNodeMinimalGroupV1 OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeNeUserName, + sysNodeBootTime } + STATUS deprecated + DESCRIPTION + "The minimal node properties objects v1." + ::= { lumSystemMinimalGroups 2 } + +sysTimeMinimalGroupV1 OBJECT-GROUP + OBJECTS { + sysTimeLocal } + STATUS deprecated + DESCRIPTION + "The minimal node time properties v1." + ::= { lumSystemMinimalGroups 3 } + +sysNodeMinimalGroupV2 OBJECT-GROUP + OBJECTS { + sysNodeName, + sysNodeNeUserName, + sysNodeLocation, + sysNodeContact, + sysNodeBootTime } + STATUS current + DESCRIPTION + "The minimal node properties objects v2." + ::= { lumSystemMinimalGroups 4 } + +sysTimeMinimalGroupV2 OBJECT-GROUP + OBJECTS { + sysTimeLocal, + sysTimeZone, + sysTimePrimaryServer } + STATUS deprecated + DESCRIPTION + "The minimal node time properties v2." + ::= { lumSystemMinimalGroups 5 } + +sysRadiusMinimalGroupV1 OBJECT-GROUP + OBJECTS { + sysRadiusPrimaryServer, + sysRadiusPrimarySecret, + sysRadiusSecondaryServer, + sysRadiusSecondarySecret } + STATUS deprecated + DESCRIPTION + "The minimal node RADIUS MIB objects v1." + ::= { lumSystemMinimalGroups 6 } + + +sysTimeMinimalGroupV3 OBJECT-GROUP + OBJECTS { + sysTimeLocal, + sysTimeZone, + sysTimePrimaryIpAddress } + STATUS current + DESCRIPTION + "The minimal node time properties v3." + ::= { lumSystemMinimalGroups 7 } + +sysRadiusMinimalGroupV2 OBJECT-GROUP + OBJECTS { + sysRadiusPrimarySecret, + sysRadiusSecondarySecret, + sysRadiusPrimaryIpAddress, + sysRadiusSecondaryIpAddress } + STATUS deprecated + DESCRIPTION + "The minimal node RADIUS MIB objects v2." + ::= { lumSystemMinimalGroups 8 } + +sysRadiusMinimalGroupV3 OBJECT-GROUP + OBJECTS { + sysRadiusPrimarySecret, + sysRadiusSecondarySecret, + sysRadiusPrimaryIpAddress, + sysRadiusSecondaryIpAddress, + sysRadiusPrimaryPort, + sysRadiusSecondaryPort } + STATUS deprecated + DESCRIPTION + "The minimal node RADIUS MIB objects v3." + ::= { lumSystemMinimalGroups 9 } + +sysRadiusMinimalGroupV4 OBJECT-GROUP + OBJECTS { + sysRadiusPrimarySecret, + sysRadiusSecondarySecret, + sysRadiusPrimaryIpAddress, + sysRadiusSecondaryIpAddress, + sysRadiusPrimaryPort, + sysRadiusSecondaryPort, + sysRadiusDefaultUserProfile} + STATUS current + DESCRIPTION + "The minimal node RADIUS MIB objects v4." + ::= { lumSystemMinimalGroups 10 } + + +-- ---------------------------------------------------- +-- Minimal Compliance +-- ---------------------------------------------------- + +lumSystemMinimalComplV1 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Minimal implementation requirements for the system MIB V1." + MODULE + MANDATORY-GROUPS { + sysGeneralMinimalGroupV1, + sysTimeMinimalGroupV1, + sysNodeMinimalGroupV1 } + ::= { lumSystemMinimalCompl 1 } + +lumSystemMinimalComplV2 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Minimal implementation requirements for the system MIB V2." + MODULE + MANDATORY-GROUPS { + sysGeneralMinimalGroupV1, + sysTimeMinimalGroupV1, + sysNodeMinimalGroupV2 } + ::= { lumSystemMinimalCompl 2 } + +lumSystemMinimalComplV3 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Minimal implementation requirements for the system MIB V3." + MODULE + MANDATORY-GROUPS { + sysGeneralMinimalGroupV1, + sysTimeMinimalGroupV2, + sysNodeMinimalGroupV2, + sysRadiusMinimalGroupV1 } + ::= { lumSystemMinimalCompl 3 } + +lumSystemMinimalComplV4 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Minimal implementation requirements for the system MIB V4." + MODULE + MANDATORY-GROUPS { + sysGeneralMinimalGroupV1, + sysTimeMinimalGroupV3, + sysNodeMinimalGroupV2, + sysRadiusMinimalGroupV2 } + ::= { lumSystemMinimalCompl 4 } + +lumSystemMinimalComplV5 MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "Minimal implementation requirements for the system MIB V5." + MODULE + MANDATORY-GROUPS { + sysGeneralMinimalGroupV1, + sysTimeMinimalGroupV3, + sysNodeMinimalGroupV2, + sysRadiusMinimalGroupV3 } + ::= { lumSystemMinimalCompl 5 } + +lumSystemMinimalComplV6 MODULE-COMPLIANCE + STATUS current + DESCRIPTION + "Minimal implementation requirements for the system MIB V6." + MODULE + MANDATORY-GROUPS { + sysGeneralMinimalGroupV1, + sysTimeMinimalGroupV3, + sysNodeMinimalGroupV2, + sysRadiusMinimalGroupV4 } + ::= { lumSystemMinimalCompl 6} + + +lumSystemMinimalComplV7 MODULE-COMPLIANCE + STATUS current + DESCRIPTION + "Minimal implementation requirements for the system MIB V7 (30.1)." + MODULE + MANDATORY-GROUPS { + sysGeneralMinimalGroupV1, + sysTimeMinimalGroupV3, + sysNodeMinimalGroupV2, + sysRadiusMinimalGroupV4 } + ::= { lumSystemMinimalCompl 7} + +END + -- cgit v1.2.3