Commit version 24.12.13800
This commit is contained in:
@ -1,10 +1,10 @@
|
||||
-- ====================================================================
|
||||
-- Copyright (c) 2004-2013 New H3C Tech. Co., Ltd. All rights reserved.
|
||||
-- Copyright (c) 2004-2021 New H3C Tech. Co., Ltd. All rights reserved.
|
||||
--
|
||||
-- Description: The MIB is designed to get IKE tunnels' statistic information.
|
||||
--
|
||||
-- Reference:
|
||||
-- Version: 1.4
|
||||
-- Version: 1.5
|
||||
-- History:
|
||||
-- V1.0: The initial version created by Caixiansen, Renweichun and Maoyu.
|
||||
-- V1.1: modified by liguanmin.2005.1.19
|
||||
@ -37,6 +37,15 @@
|
||||
-- These nodes are hh3cIKETunLocalInetAddrType, hh3cIKETunLocalInetAddr,
|
||||
-- hh3cIKETunRemoteInetAddrType and hh3cIKETunRemoteInetAddr.
|
||||
-- 8) 'hh3cIKETunLocalAddr' and 'hh3cIKETunRemoteAddr' are deprecated.
|
||||
-- V1.5: Modified by Yangbaotao and Zhaoming Apr.25 2021
|
||||
-- 1) One value 'gmMainMode(128)' is added to data type 'Hh3cIKENegoMode'.
|
||||
-- 2) Two values 'rsaDigitalEnvelope(5)' and 'sm2DigitalEnvelope(6)' are added
|
||||
-- to data type 'Hh3cIKEAuthMethod'.
|
||||
-- 3) Four values 'sm1Cbc128(128)','sm1Cbc192(129)','sm1Cbc256(130)' and 'sm4Cbc(131)'
|
||||
-- are added to data type 'Hh3cEncryptAlgo'.
|
||||
-- 4) One value 'sm3(128)' is added to data type 'Hh3cAuthAlgo'.
|
||||
-- Deprecated hh3cIKETunLocalValue1 and hh3cIKETunRemoteValue1,
|
||||
-- added hh3cIKETunLocalValue3 and hh3cIKETunRemoteValue3.
|
||||
-- =====================================================================
|
||||
HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
|
||||
@ -54,7 +63,7 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
FROM HH3C-OID-MIB;
|
||||
|
||||
hh3cIKEMonitor MODULE-IDENTITY
|
||||
LAST-UPDATED "201206280000Z" -- Jun. 28, 2012 GMT
|
||||
LAST-UPDATED "202104241858Z" -- Apr. 25, 2021 GMT
|
||||
ORGANIZATION
|
||||
"New H3C Tech. Co., Ltd."
|
||||
CONTACT-INFO
|
||||
@ -66,6 +75,11 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
"The MIB is designed to get statistic information of
|
||||
IKE tunnels. With this MIB, we can get information of a certain IKE tunnel
|
||||
or all IKE tunnels"
|
||||
REVISION "202104241858Z"
|
||||
DESCRIPTION
|
||||
"Data type Hh3cIKENegoMode,Hh3cIKEAuthMethod,Hh3cEncryptAlgo and Hh3cAuthAlgo are added.
|
||||
Deprecate hh3cIKETunLocalValue1 and hh3cIKETunRemoteValue1,
|
||||
add hh3cIKETunLocalValue3 and hh3cIKETunRemoteValue3."
|
||||
::= { hh3cCommon 30 }
|
||||
|
||||
Hh3cIKENegoMode ::= TEXTUAL-CONVENTION
|
||||
@ -75,7 +89,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
SYNTAX INTEGER {
|
||||
mainMode(2),
|
||||
aggressiveMode(4),
|
||||
quickMode(32)
|
||||
quickMode(32),
|
||||
gmMainMode(128)
|
||||
|
||||
}
|
||||
|
||||
Hh3cIKEAuthMethod ::= TEXTUAL-CONVENTION
|
||||
@ -85,7 +101,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
SYNTAX INTEGER {
|
||||
preSharedKey(1),
|
||||
dsaSignatures(2),
|
||||
rsaSignatures(3)
|
||||
rsaSignatures(3),
|
||||
rsaDigitalEnvelope(5),
|
||||
sm2DigitalEnvelope(6)
|
||||
}
|
||||
|
||||
Hh3cDiffHellmanGrp ::= TEXTUAL-CONVENTION
|
||||
@ -121,6 +139,10 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
aesCtr(11),
|
||||
aesCamelliaCbc(12),
|
||||
rc4(13),
|
||||
sm1Cbc128(128),
|
||||
sm1Cbc192(129),
|
||||
sm1Cbc256(130),
|
||||
sm4Cbc(131),
|
||||
invalidAlg(2147483647)
|
||||
}
|
||||
|
||||
@ -135,21 +157,10 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
sha256(3),
|
||||
sha384(4),
|
||||
sha512(5),
|
||||
sm3(128),
|
||||
invalidAlg(2147483647)
|
||||
}
|
||||
|
||||
Hh3cSaProtocol ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The protocol of security association."
|
||||
SYNTAX INTEGER {
|
||||
reserved(0),
|
||||
isakmp(1),
|
||||
ah(2),
|
||||
esp(3),
|
||||
ipcomp(4)
|
||||
}
|
||||
|
||||
Hh3cTrapStatus ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
@ -187,20 +198,6 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
-- mode negotiations.
|
||||
}
|
||||
|
||||
Hh3cTrafficType ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The type of the data flow."
|
||||
SYNTAX INTEGER {
|
||||
ipv4Addr(1),
|
||||
ipv4AddrSubnet(4),
|
||||
ipv6Addr(5),
|
||||
ipv6AddrSubnet(6),
|
||||
ipv4AddrRange(7),
|
||||
ipv6AddrRange(8)
|
||||
}
|
||||
|
||||
|
||||
Hh3cIKETunnelState ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
@ -293,7 +290,11 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
hh3cIKETunRemoteInetAddrType
|
||||
InetAddressType,
|
||||
hh3cIKETunRemoteInetAddr
|
||||
InetAddress
|
||||
InetAddress,
|
||||
hh3cIKETunLocalValue3
|
||||
OCTET STRING,
|
||||
hh3cIKETunRemoteValue3
|
||||
OCTET STRING
|
||||
}
|
||||
|
||||
hh3cIKETunIndex OBJECT-TYPE
|
||||
@ -317,9 +318,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
::= { hh3cIKETunnelEntry 2 }
|
||||
|
||||
hh3cIKETunLocalValue1 OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
SYNTAX DisplayString(SIZE(0..255))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
STATUS deprecated
|
||||
DESCRIPTION
|
||||
"The value of the local peer identity.
|
||||
|
||||
@ -347,11 +348,14 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
If the local peer type is keyId, this is an opaque byte
|
||||
stream which may be used to pass vendor-specific information
|
||||
necessary to identify which pre-shared key should be used to
|
||||
authenticate Aggressive mode negotiations."
|
||||
authenticate Aggressive mode negotiations.
|
||||
|
||||
The local peer identity may not exceed 255 characters in length.
|
||||
The complete value will be displayed by hh3cIKETunLocalValue3"
|
||||
::= { hh3cIKETunnelEntry 3 }
|
||||
|
||||
hh3cIKETunLocalValue2 OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
SYNTAX DisplayString(SIZE(0..255))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
@ -384,9 +388,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
::= { hh3cIKETunnelEntry 6 }
|
||||
|
||||
hh3cIKETunRemoteValue1 OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
SYNTAX DisplayString(SIZE(0..255))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
STATUS deprecated
|
||||
DESCRIPTION
|
||||
"The value of the remote peer identity.
|
||||
|
||||
@ -414,11 +418,14 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
If the remote peer type is keyId, this is an opaque byte
|
||||
stream which may be used to pass vendor-specific information
|
||||
necessary to identify which pre-shared key should be used to
|
||||
authenticate Aggressive mode negotiations."
|
||||
authenticate Aggressive mode negotiations.
|
||||
|
||||
The remote peer identity may not exceed 255 characters in length.
|
||||
The complete value will be displayed by hh3cIKETunRemoteValue3"
|
||||
::= { hh3cIKETunnelEntry 7 }
|
||||
|
||||
hh3cIKETunRemoteValue2 OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
SYNTAX DisplayString(SIZE(0..255))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
@ -600,6 +607,73 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
"The IP address of the remote peer for the IPsec Phase-1 IKE Tunnel."
|
||||
::= { hh3cIKETunnelEntry 26 }
|
||||
|
||||
hh3cIKETunLocalValue3 OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(0..2047))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The value of the local peer identity.
|
||||
|
||||
If the local peer type is ipv4Addr/ipv6Addr, this is the IP address
|
||||
used to identify the local peer.
|
||||
|
||||
If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
|
||||
the subnet address.
|
||||
|
||||
If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
|
||||
the beginning IP address of the range.
|
||||
|
||||
If the local peer type is fqdn/userFqdn, this is the host name
|
||||
used to identify the local peer.
|
||||
|
||||
If the local peer type is derAsn1Dn, this is the binary DER
|
||||
encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
|
||||
principal whose certificates are being exchanged to establish
|
||||
the SA.
|
||||
|
||||
If the local peer type is derAsn1Gn, this is the binary DER
|
||||
encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
|
||||
whose certificates are being exchanged to establish the SA.
|
||||
|
||||
If the local peer type is keyId, this is an opaque byte
|
||||
stream which may be used to pass vendor-specific information
|
||||
necessary to identify which pre-shared key should be used to
|
||||
authenticate Aggressive mode negotiations."
|
||||
::= { hh3cIKETunnelEntry 27 }
|
||||
|
||||
hh3cIKETunRemoteValue3 OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(0..2047))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The value of the remote peer identity.
|
||||
|
||||
If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address
|
||||
used to identify the remote peer.
|
||||
|
||||
If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
|
||||
the subnet address.
|
||||
|
||||
If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
|
||||
the beginning IP address of the range.
|
||||
|
||||
If the remote peer type is fqdn/userFqdn, this is the host name
|
||||
used to identify the remote peer.
|
||||
|
||||
If the remote peer type is derAsn1Dn, this is the binary DER
|
||||
encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
|
||||
principal whose certificates are being exchanged to establish
|
||||
the SA.
|
||||
|
||||
If the remote peer type is derAsn1Gn, this is the binary DER
|
||||
encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
|
||||
whose certificates are being exchanged to establish the SA.
|
||||
|
||||
If the remote peer type is keyId, this is an opaque byte
|
||||
stream which may be used to pass vendor-specific information
|
||||
necessary to identify which pre-shared key should be used to
|
||||
authenticate Aggressive mode negotiations."
|
||||
::= { hh3cIKETunnelEntry 28 }
|
||||
-- =======================================
|
||||
-- begin the table of hh3cIKETunnelStatTable.
|
||||
-- =======================================
|
||||
@ -1130,7 +1204,7 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
::= { hh3cIKETrapObject 2 }
|
||||
|
||||
hh3cIKEIdInformation OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
SYNTAX DisplayString(SIZE(0..255))
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
@ -1146,7 +1220,7 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
::= { hh3cIKETrapObject 4 }
|
||||
|
||||
hh3cIKECertInformation OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
SYNTAX DisplayString(SIZE(0..255))
|
||||
MAX-ACCESS accessible-for-notify
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
@ -1616,7 +1690,7 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
hh3cIKEScalarObjects OBJECT IDENTIFIER ::= { hh3cIKEObjects 7 }
|
||||
|
||||
hh3cIKEMIBVersion OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
SYNTAX DisplayString(SIZE(0..255))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
@ -1679,7 +1753,9 @@ HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN
|
||||
hh3cIKETunLocalInetAddrType,
|
||||
hh3cIKETunLocalInetAddr,
|
||||
hh3cIKETunRemoteInetAddrType,
|
||||
hh3cIKETunRemoteInetAddr
|
||||
hh3cIKETunRemoteInetAddr,
|
||||
hh3cIKETunLocalValue3,
|
||||
hh3cIKETunRemoteValue3
|
||||
}
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
|
Reference in New Issue
Block a user