Commit version 24.12.13800

This commit is contained in:
2025-01-06 17:35:06 -05:00
parent b7f6a79c2c
commit 55d9218816
6133 changed files with 4239740 additions and 1374287 deletions

View File

@ -1,10 +1,10 @@
-- ====================================================================
-- Copyright (c) 2004-2013 New H3C Tech. Co., Ltd. All rights reserved.
-- Copyright (c) 2004-2021 New H3C Tech. Co., Ltd. All rights reserved.
--
-- Description: The MIB is designed to get IKE tunnels' statistic information.
--
-- Reference:
-- Version: 1.4
-- Version: 1.5
-- History:
-- V1.0: The initial version created by Caixiansen, Renweichun and Maoyu.
-- V1.1: modified by liguanmin.2005.1.19
@ -37,6 +37,15 @@
-- These nodes are hh3cIKETunLocalInetAddrType, hh3cIKETunLocalInetAddr,
-- hh3cIKETunRemoteInetAddrType and hh3cIKETunRemoteInetAddr.
-- 8) 'hh3cIKETunLocalAddr' and 'hh3cIKETunRemoteAddr' are deprecated.
-- V1.5: Modified by Yangbaotao and Zhaoming Apr.25 2021
-- 1) One value 'gmMainMode(128)' is added to data type 'Hh3cIKENegoMode'.
-- 2) Two values 'rsaDigitalEnvelope(5)' and 'sm2DigitalEnvelope(6)' are added
-- to data type 'Hh3cIKEAuthMethod'.
-- 3) Four values 'sm1Cbc128(128)','sm1Cbc192(129)','sm1Cbc256(130)' and 'sm4Cbc(131)'
-- are added to data type 'Hh3cEncryptAlgo'.
-- 4) One value 'sm3(128)' is added to data type 'Hh3cAuthAlgo'.
-- Deprecated hh3cIKETunLocalValue1 and hh3cIKETunRemoteValue1,
-- added hh3cIKETunLocalValue3 and hh3cIKETunRemoteValue3.
-- =====================================================================
HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
@ -54,7 +63,7 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
FROM HH3C-OID-MIB;
hh3cIKEMonitor MODULE-IDENTITY
LAST-UPDATED "201206280000Z" -- Jun. 28, 2012 GMT
LAST-UPDATED "202104241858Z" -- Apr. 25, 2021 GMT
ORGANIZATION
"New H3C Tech. Co., Ltd."
CONTACT-INFO
@ -66,6 +75,11 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
"The MIB is designed to get statistic information of
IKE tunnels. With this MIB, we can get information of a certain IKE tunnel
or all IKE tunnels"
REVISION "202104241858Z"
DESCRIPTION
"Data type Hh3cIKENegoMode,Hh3cIKEAuthMethod,Hh3cEncryptAlgo and Hh3cAuthAlgo are added.
Deprecate hh3cIKETunLocalValue1 and hh3cIKETunRemoteValue1,
add hh3cIKETunLocalValue3 and hh3cIKETunRemoteValue3."
::= { hh3cCommon 30 }
Hh3cIKENegoMode ::= TEXTUAL-CONVENTION
@ -75,7 +89,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
SYNTAX INTEGER {
mainMode(2),
aggressiveMode(4),
quickMode(32)
quickMode(32),
gmMainMode(128)
}
Hh3cIKEAuthMethod ::= TEXTUAL-CONVENTION
@ -85,7 +101,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
SYNTAX INTEGER {
preSharedKey(1),
dsaSignatures(2),
rsaSignatures(3)
rsaSignatures(3),
rsaDigitalEnvelope(5),
sm2DigitalEnvelope(6)
}
Hh3cDiffHellmanGrp ::= TEXTUAL-CONVENTION
@ -121,6 +139,10 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
aesCtr(11),
aesCamelliaCbc(12),
rc4(13),
sm1Cbc128(128),
sm1Cbc192(129),
sm1Cbc256(130),
sm4Cbc(131),
invalidAlg(2147483647)
}
@ -135,21 +157,10 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
sha256(3),
sha384(4),
sha512(5),
sm3(128),
invalidAlg(2147483647)
}
Hh3cSaProtocol ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The protocol of security association."
SYNTAX INTEGER {
reserved(0),
isakmp(1),
ah(2),
esp(3),
ipcomp(4)
}
Hh3cTrapStatus ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
@ -187,20 +198,6 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
-- mode negotiations.
}
Hh3cTrafficType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The type of the data flow."
SYNTAX INTEGER {
ipv4Addr(1),
ipv4AddrSubnet(4),
ipv6Addr(5),
ipv6AddrSubnet(6),
ipv4AddrRange(7),
ipv6AddrRange(8)
}
Hh3cIKETunnelState ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
@ -293,7 +290,11 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
hh3cIKETunRemoteInetAddrType
InetAddressType,
hh3cIKETunRemoteInetAddr
InetAddress
InetAddress,
hh3cIKETunLocalValue3
OCTET STRING,
hh3cIKETunRemoteValue3
OCTET STRING
}
hh3cIKETunIndex OBJECT-TYPE
@ -317,9 +318,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
::= { hh3cIKETunnelEntry 2 }
hh3cIKETunLocalValue1 OBJECT-TYPE
SYNTAX DisplayString
SYNTAX DisplayString(SIZE(0..255))
MAX-ACCESS read-only
STATUS current
STATUS deprecated
DESCRIPTION
"The value of the local peer identity.
@ -347,11 +348,14 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
If the local peer type is keyId, this is an opaque byte
stream which may be used to pass vendor-specific information
necessary to identify which pre-shared key should be used to
authenticate Aggressive mode negotiations."
authenticate Aggressive mode negotiations.
The local peer identity may not exceed 255 characters in length.
The complete value will be displayed by hh3cIKETunLocalValue3"
::= { hh3cIKETunnelEntry 3 }
hh3cIKETunLocalValue2 OBJECT-TYPE
SYNTAX DisplayString
SYNTAX DisplayString(SIZE(0..255))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
@ -384,9 +388,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
::= { hh3cIKETunnelEntry 6 }
hh3cIKETunRemoteValue1 OBJECT-TYPE
SYNTAX DisplayString
SYNTAX DisplayString(SIZE(0..255))
MAX-ACCESS read-only
STATUS current
STATUS deprecated
DESCRIPTION
"The value of the remote peer identity.
@ -414,11 +418,14 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
If the remote peer type is keyId, this is an opaque byte
stream which may be used to pass vendor-specific information
necessary to identify which pre-shared key should be used to
authenticate Aggressive mode negotiations."
authenticate Aggressive mode negotiations.
The remote peer identity may not exceed 255 characters in length.
The complete value will be displayed by hh3cIKETunRemoteValue3"
::= { hh3cIKETunnelEntry 7 }
hh3cIKETunRemoteValue2 OBJECT-TYPE
SYNTAX DisplayString
SYNTAX DisplayString(SIZE(0..255))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
@ -600,6 +607,73 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
"The IP address of the remote peer for the IPsec Phase-1 IKE Tunnel."
::= { hh3cIKETunnelEntry 26 }
hh3cIKETunLocalValue3 OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..2047))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The value of the local peer identity.
If the local peer type is ipv4Addr/ipv6Addr, this is the IP address
used to identify the local peer.
If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
the subnet address.
If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
the beginning IP address of the range.
If the local peer type is fqdn/userFqdn, this is the host name
used to identify the local peer.
If the local peer type is derAsn1Dn, this is the binary DER
encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
principal whose certificates are being exchanged to establish
the SA.
If the local peer type is derAsn1Gn, this is the binary DER
encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
whose certificates are being exchanged to establish the SA.
If the local peer type is keyId, this is an opaque byte
stream which may be used to pass vendor-specific information
necessary to identify which pre-shared key should be used to
authenticate Aggressive mode negotiations."
::= { hh3cIKETunnelEntry 27 }
hh3cIKETunRemoteValue3 OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..2047))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The value of the remote peer identity.
If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address
used to identify the remote peer.
If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
the subnet address.
If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
the beginning IP address of the range.
If the remote peer type is fqdn/userFqdn, this is the host name
used to identify the remote peer.
If the remote peer type is derAsn1Dn, this is the binary DER
encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
principal whose certificates are being exchanged to establish
the SA.
If the remote peer type is derAsn1Gn, this is the binary DER
encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
whose certificates are being exchanged to establish the SA.
If the remote peer type is keyId, this is an opaque byte
stream which may be used to pass vendor-specific information
necessary to identify which pre-shared key should be used to
authenticate Aggressive mode negotiations."
::= { hh3cIKETunnelEntry 28 }
-- =======================================
-- begin the table of hh3cIKETunnelStatTable.
-- =======================================
@ -1130,7 +1204,7 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
::= { hh3cIKETrapObject 2 }
hh3cIKEIdInformation OBJECT-TYPE
SYNTAX DisplayString
SYNTAX DisplayString(SIZE(0..255))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
@ -1146,7 +1220,7 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
::= { hh3cIKETrapObject 4 }
hh3cIKECertInformation OBJECT-TYPE
SYNTAX DisplayString
SYNTAX DisplayString(SIZE(0..255))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
@ -1616,7 +1690,7 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
hh3cIKEScalarObjects OBJECT IDENTIFIER ::= { hh3cIKEObjects 7 }
hh3cIKEMIBVersion OBJECT-TYPE
SYNTAX DisplayString
SYNTAX DisplayString(SIZE(0..255))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
@ -1679,7 +1753,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
hh3cIKETunLocalInetAddrType,
hh3cIKETunLocalInetAddr,
hh3cIKETunRemoteInetAddrType,
hh3cIKETunRemoteInetAddr
hh3cIKETunRemoteInetAddr,
hh3cIKETunLocalValue3,
hh3cIKETunRemoteValue3
}
STATUS current
DESCRIPTION