ELTEX-MES-BRIDGE-SECURITY DEFINITIONS ::= BEGIN

-- Version:    2.2
-- Date:       3-Jul-2017

IMPORTS
    MODULE-IDENTITY, OBJECT-TYPE,
    Unsigned32, IpAddress, Counter32,
    NOTIFICATION-TYPE                               FROM SNMPv2-SMI
    InterfaceIndex, ifIndex                         FROM IF-MIB
    RowStatus, TEXTUAL-CONVENTION, MacAddress,
    DisplayString, TruthValue                       FROM SNMPv2-TC
    VlanId                                          FROM Q-BRIDGE-MIB
    eltMes, eltMesBridgeSecurity                    FROM ELTEX-MES
    rndErrorDesc, rndErrorSeverity                  FROM RADLAN-DEVICEPARAMS-MIB
    rlIpDhcpSnoopVLANTag,
    rlIpSourceGuardPortEntry,
    rlIpDhcpSnoopMACAddress                         FROM RADLAN-BRIDGE-SECURITY
    VlanList1, VlanList2, VlanList3, VlanList4      FROM RADLAN-BRIDGEMIBOBJECTS-MIB;

eltMesBridgeSecurityNotifications OBJECT IDENTIFIER ::= { eltMesBridgeSecurity 0 }

eltMesIpDhcpSnoop                 OBJECT IDENTIFIER ::= { eltMesBridgeSecurity 1 }

eltMesPppoeIa                     OBJECT IDENTIFIER ::= { eltMesBridgeSecurity 6 }

eltMesIpDhcpSnoopNotif            OBJECT IDENTIFIER ::= { eltMesIpDhcpSnoop 0}

eltMesIpSourceGuard               OBJECT IDENTIFIER ::= { eltMesBridgeSecurity 8 }

eltMesIpArpInspect                OBJECT IDENTIFIER ::= { eltMesBridgeSecurity 7 }

--
-- Common types
--

EltCircuitIdType  ::= TEXTUAL-CONVENTION
   STATUS current
   DESCRIPTION    "Curcuit-ID suboption of Option 82."
   SYNTAX DisplayString(SIZE(0..63))

EltRemoteIdType  ::= TEXTUAL-CONVENTION
   STATUS current
   DESCRIPTION    "Remote-ID suboption of Option 82."
   SYNTAX DisplayString(SIZE(0..63))

EltOpt82CombinationType ::= TEXTUAL-CONVENTION
    STATUS current
    DESCRIPTION    "Specifies circuit id suboption that will be inserted to a option 82."
    SYNTAX INTEGER{
       sp(1),
       sv(2),
       pv(3),
       spv(4),
       bin(5),
       user-defined(6)
    }

EltOpt82CombinationInterfaceType ::= TEXTUAL-CONVENTION
    STATUS current
    DESCRIPTION    "Specifies circuit id suboption that will be inserted to a option 82 on interface."
    SYNTAX INTEGER{
       sp(1),
       sv(2),
       pv(3),
       spv(4),
       bin(5),
       user-defined(6),
       global(7)
    }

EltOpt82DelimiterType ::= TEXTUAL-CONVENTION
    STATUS current
    DESCRIPTION    "Specifies circuit id suboption that will be inserted to a option 82."
    SYNTAX INTEGER{
       tr101(1),
       dot(2),
       comma(3),
       semicolon(4),
       hash(5),
       slash(6),
       space(7)
    }

EltOpt82SuboptionType ::= TEXTUAL-CONVENTION
    STATUS current
    DESCRIPTION    "Specifies global format of option 82 suboptions."
    SYNTAX INTEGER{
       tr101(1),
       custom(2)
    }

EltOpt82SuboptionInterfaceType ::= TEXTUAL-CONVENTION
    STATUS current
    DESCRIPTION    "Specifies per IfIndex format of option 82 suboptions."
    SYNTAX INTEGER{
       tr101(1),
       custom(2),
       global(3)
    }

EltOpt82PortInsertionType ::= TEXTUAL-CONVENTION
    STATUS current
    DESCRIPTION    "Specifies per IfIndex a DHCP option 82 insertion enable state."
    SYNTAX INTEGER{
       global(1),
       enable(2),
       disable(3)
    }

EltDHCPSnoopRateLimitType  ::= TEXTUAL-CONVENTION
   STATUS current
   DESCRIPTION    "DHCP Snooping limit rate type. 0 means rate limit is disabled."
   SYNTAX INTEGER(0..2048)

EltDHCPSnoopClientLimitType  ::= TEXTUAL-CONVENTION
   STATUS current
   DESCRIPTION    "DHCP Snooping limit client type. 0 means client limit is disabled."
   SYNTAX INTEGER(0..2048)

--
-- DHCP Option 82
--

--
-- Scalars
--

eltIpDhcpOpt82AccessNodeIdentifier OBJECT-TYPE
    SYNTAX DisplayString(SIZE(0..48))
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies an access node identifier used by PPPoE IA."
    ::= { eltMesIpDhcpSnoop 14 }

eltIpDhcpOpt82CircuitIdSuboptionsCombination OBJECT-TYPE
    SYNTAX EltOpt82CombinationType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies circuit id suboption that will be inserted to a PPPoED client packet."
    ::= { eltMesIpDhcpSnoop 15 }

eltIpDhcpOpt82CircuitIdSuboptionsDelimeter OBJECT-TYPE
    SYNTAX EltOpt82DelimiterType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies a char symbol that will delimit circuit id suboption."
    ::= { eltMesIpDhcpSnoop 16 }

eltIpDhcpOpt82SuboptionType OBJECT-TYPE
    SYNTAX EltOpt82SuboptionType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies global format of option 82 suboptions."
    ::= { eltMesIpDhcpSnoop 18 }

eltIpDhcpOpt82RemoteIdentifier OBJECT-TYPE
    SYNTAX     DisplayString(SIZE(0..128))
    MAX-ACCESS read-write
    STATUS     current
    DESCRIPTION       "Specifies global Remote Identifier suboption template for Option 82."
    ::= { eltMesIpDhcpSnoop 19 }

--
--  eltIpDhcpOpt82PortTable
--

eltIpDhcpOpt82PortTable  OBJECT-TYPE
    SYNTAX  SEQUENCE OF EltIpDhcpOpt82PortEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION      "A DHCP interface configuration table."
    ::= { eltMesIpDhcpSnoop 17 }

eltIpDhcpOpt82PortEntry OBJECT-TYPE
   SYNTAX      EltIpDhcpOpt82PortEntry
   MAX-ACCESS  not-accessible
   STATUS      current
   DESCRIPTION        "A DHCP interface configuration entry."
   INDEX {ifIndex}
::= { eltIpDhcpOpt82PortTable 1 }

EltIpDhcpOpt82PortEntry ::= SEQUENCE {
   eltIpDhcpOpt82PortCircuitId                              EltCircuitIdType,
   eltIpDhcpOpt82PortRemoteId                               EltRemoteIdType,
   eltIpDhcpOpt82PortRowStatus                              RowStatus,
   eltIpDhcpOpt82PortAccessNodeIdentifier                   DisplayString,
   eltIpDhcpOpt82PortCircuitIdSuboptionsCombination         EltOpt82CombinationInterfaceType,
   eltIpDhcpOpt82PortCircuitIdSuboptionsDelimeter           EltOpt82DelimiterType,
   eltIpDhcpOpt82PortSuboptionType                          EltOpt82SuboptionInterfaceType,
   eltIpDhcpOpt82PortCircuitIdSuboptionsUserDefinedTemplate OCTET STRING,
   eltIpDhcpOpt82PortInsertion                              EltOpt82PortInsertionType
}

eltIpDhcpOpt82PortCircuitId OBJECT-TYPE
    SYNTAX      EltCircuitIdType
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "A DHCP interface entry curcuit id"
    ::= { eltIpDhcpOpt82PortEntry 2 }

eltIpDhcpOpt82PortRemoteId OBJECT-TYPE
    SYNTAX      EltRemoteIdType
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "A DHCP interface entry remote id"
    ::= { eltIpDhcpOpt82PortEntry 3 }

eltIpDhcpOpt82PortRowStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Session row status."
    ::= { eltIpDhcpOpt82PortEntry 4 }

eltIpDhcpOpt82PortAccessNodeIdentifier OBJECT-TYPE
    SYNTAX     DisplayString(SIZE(0..128))
    MAX-ACCESS read-write
    STATUS     current
    DESCRIPTION       "Specifies per ifIndex an access node identifier."
    ::= { eltIpDhcpOpt82PortEntry 5 }

eltIpDhcpOpt82PortCircuitIdSuboptionsCombination OBJECT-TYPE
    SYNTAX EltOpt82CombinationInterfaceType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies per ifIndex circuit id suboption that will be inserted."
    DEFVAL{ 4 }
    ::= { eltIpDhcpOpt82PortEntry 6 }

eltIpDhcpOpt82PortCircuitIdSuboptionsDelimeter OBJECT-TYPE
    SYNTAX EltOpt82DelimiterType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies per ifIndex a char symbol that will delimit circuit id suboption."
    ::= { eltIpDhcpOpt82PortEntry 7 }

eltIpDhcpOpt82PortSuboptionType OBJECT-TYPE
    SYNTAX EltOpt82SuboptionInterfaceType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies per ifIndex format of option 82 suboptions."
    ::= { eltIpDhcpOpt82PortEntry 8 }

eltIpDhcpOpt82PortCircuitIdSuboptionsUserDefinedTemplate OBJECT-TYPE
    SYNTAX OCTET STRING (SIZE (0..128))
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "An octet string template per ifIndex for user-defined format of
        circuit id suboption that will be inserted to packet."
    ::= { eltIpDhcpOpt82PortEntry 9 }
    
eltIpDhcpOpt82PortInsertion OBJECT-TYPE
    SYNTAX      EltOpt82PortInsertionType
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "Specifies per IfIndex a DHCP option 82 insertion enable state."
    DEFVAL { global }
    ::= { eltIpDhcpOpt82PortEntry 10 }
    
--
-- DHCP Snooping port configuration table
--

eltIpDhcpSnoopPortTable  OBJECT-TYPE
    SYNTAX  SEQUENCE OF EltIpDhcpSnoopPortEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION      "A DHCP Snooping Client Limiting configuration table on L2 interfaces."
    ::= { eltMesIpDhcpSnoop 20 }

eltIpDhcpSnoopPortEntry OBJECT-TYPE
   SYNTAX      EltIpDhcpSnoopPortEntry
   MAX-ACCESS  not-accessible
   STATUS      current
   DESCRIPTION        "A DHCP interface configuration entry."
   INDEX {ifIndex}
::= { eltIpDhcpSnoopPortTable 1 }

EltIpDhcpSnoopPortEntry ::= SEQUENCE {
   eltIpDhcpSnoopPortRateLimit                          EltDHCPSnoopRateLimitType,
   eltIpDhcpSnoopPortRowStatus                          RowStatus,
   eltIpDhcpSnoopPortClientsLimit                       EltDHCPSnoopClientLimitType,
   eltIpDhcpSnoopPortEnabled                            TruthValue
}


eltIpDhcpSnoopPortRateLimit OBJECT-TYPE
    SYNTAX      EltDHCPSnoopRateLimitType
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "A DHCP Snooping Limit Rate."
    DEFVAL{ 0 }
    ::= { eltIpDhcpSnoopPortEntry 2 }

eltIpDhcpSnoopPortRowStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Session row status."
    ::= { eltIpDhcpSnoopPortEntry 3 }

eltIpDhcpSnoopPortClientsLimit OBJECT-TYPE
    SYNTAX      EltDHCPSnoopClientLimitType
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "A DHCP Snooping Limit of number of clients."
    DEFVAL{ 0 }
    ::= { eltIpDhcpSnoopPortEntry 4 }

eltIpDhcpSnoopPortEnabled OBJECT-TYPE
    SYNTAX      TruthValue
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "Indicate status of DHCP snooping per port."
    DEFVAL{ false }
    ::= { eltIpDhcpSnoopPortEntry 5 }

--
-- DHCP Option 82 UserDefined
--

eltIpDhcpOpt82CircuitIdSuboptionsUserDefinedTemplate OBJECT-TYPE
    SYNTAX OCTET STRING (SIZE (0..128))
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "An octet string template for user-defined format of
        circuit id suboption that will be inserted to packet."
    ::= { eltMesIpDhcpSnoop 21 }

--
-- DHCP Snooping enable trap scalars
--

eltIpDhcpSnoopClientsLimitNotificationsEnabled OBJECT-TYPE
     SYNTAX          TruthValue
     MAX-ACCESS      read-write
     STATUS          current
     DESCRIPTION
         "Specifies whether eltIpDhcpSnoopClientLimitTrap notifications
          will or will not be sent when number of clients reached
          configured limit on interface.

          Setting this object to false(2) will not send the
          eltIpDhcpSnoopClientLimitTrap notifications.

          Setting this object to true(1) will send the
          eltIpDhcpSnoopClientLimitTrap notifications."
    DEFVAL { true }
    ::= { eltMesIpDhcpSnoop 23 }
    
--
-- DHCP Snooping action by link down on port
--

eltIpDhcpSnoopDynamicEntriesPortDownAction OBJECT-TYPE
     SYNTAX INTEGER  {
		retain(1),
		clear(2)
	 }
     MAX-ACCESS      read-write
     STATUS          current
     DESCRIPTION
         "The action that is applied for DHCP Snooping dynamic entries
          when a link down event occurred on the client's port."
    DEFVAL { retain }
    ::= { eltMesIpDhcpSnoop 24 } 

eltIpDhcpSnoopMacVerificationFailedNotificationsEnabled OBJECT-TYPE
     SYNTAX          TruthValue
     MAX-ACCESS      read-write
     STATUS          current
     DESCRIPTION
         "Specifies whether eltIpDhcpSnoopMacVerificationFailedTrap notifications
          will or will not be sent when MAC address in ethernet header differ from the DHCP header.

          Setting this object to false(2) will not send the
          eltIpDhcpSnoopMacVerificationFailedTrap notifications.

          Setting this object to true(1) will send the
          eltIpDhcpSnoopMacVerificationFailedTrap notifications."
    DEFVAL { false }
    ::= { eltMesIpDhcpSnoop 25 }

--
-- PPPoE Intermediate Agent
--

eltPppoeIaEnable OBJECT-TYPE
    SYNTAX INTEGER{
       enable(1),
       disable(2)
    }
   MAX-ACCESS read-write
   STATUS current
   DESCRIPTION       "Specifies a system PPPoE Intermediate Agent enable state."
   ::= { eltMesPppoeIa 1 }

eltPppoeIaAccessNodeIdentifier OBJECT-TYPE
   SYNTAX DisplayString(SIZE(1..48))
   MAX-ACCESS read-write
   STATUS current
   DESCRIPTION       "Specifies an access node identifier used by PPPoE IA."
   ::= { eltMesPppoeIa 2 }

eltPppoeIaCircuitIdSuboptionsCombination OBJECT-TYPE
    SYNTAX EltOpt82CombinationType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies circuit id suboption that will be inserted to a PPPoED client packet."
    ::= { eltMesPppoeIa 3 }

eltPppoeIaCircuitIdSuboptionsDelimeter OBJECT-TYPE
    SYNTAX EltOpt82DelimiterType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies a char symbol that will delimit circuit id suboption."
    ::= { eltMesPppoeIa 4 }

eltPppoeIaGenericErrorMessage OBJECT-TYPE
   SYNTAX DisplayString(SIZE(1..128))
   MAX-ACCESS read-write
   STATUS current
   DESCRIPTION       "Specifies a generic error message sent to client if packet is too large."
   ::= { eltMesPppoeIa 5 }

--
-- PPPoE Intermediate Agent configuration interface table
--
eltPppoeIaPortTable  OBJECT-TYPE
  SYNTAX  SEQUENCE OF EltPppoeIaPortEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION      "A PPPoE Intermediate Agent interface table."
  ::= { eltMesPppoeIa 6 }

eltPppoeIaPortEntry OBJECT-TYPE
   SYNTAX      EltPppoeIaPortEntry
   MAX-ACCESS  not-accessible
   STATUS      current
   DESCRIPTION        "A PPPoE Intermediate Agent interface entry."
   INDEX {ifIndex}
::= { eltPppoeIaPortTable 1 }

EltPppoeIaPortEntry ::= SEQUENCE {
   eltPppoeIaPortEnabled                            TruthValue,
   eltPppoeIaPortTrusted                            TruthValue,
   eltPppoeIaPortCircuitId                          EltCircuitIdType,
   eltPppoeIaPortRemoteId                           EltRemoteIdType,
   eltPppoeIaPortStripVendorTag                     TruthValue,
   eltPppoeIaPortStatsRxPADI                        Counter32,
   eltPppoeIaPortStatsRxPADO                        Counter32,
   eltPppoeIaPortStatsRxPADR                        Counter32,
   eltPppoeIaPortStatsRxPADS                        Counter32,
   eltPppoeIaPortStatsRxPADT                        Counter32,
   eltPppoeIaPortStatsTxGenError                    Counter32,
   eltPppoeIaPortStatsDroppedResponseFromUntrusted  Counter32,
   eltPppoeIaPortStatsDroppedRequestToUntrusted     Counter32,
   eltPppoeIaPortStatsDroppedMalformed              Counter32,
   eltPppoeIaPortStatsClearCountersAction           TruthValue,
   eltPppoeIaPortRowStatus                          RowStatus
}

eltPppoeIaPortEnabled OBJECT-TYPE
  SYNTAX        TruthValue
  MAX-ACCESS    read-write
  STATUS        current
  DESCRIPTION
    "A PPPoE Intermediate Agent interface entry enabled state."
  ::= { eltPppoeIaPortEntry 2 }

eltPppoeIaPortTrusted OBJECT-TYPE
  SYNTAX        TruthValue
  MAX-ACCESS    read-write
  STATUS        current
  DESCRIPTION
    "A PPPoE Intermediate Agent interface entry trusted state."
  ::= { eltPppoeIaPortEntry 3 }

eltPppoeIaPortCircuitId OBJECT-TYPE
    SYNTAX      EltCircuitIdType
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
      "A PPPoE Intermediate Agent interface entry curcuit id."
    ::= { eltPppoeIaPortEntry 4 }

eltPppoeIaPortRemoteId OBJECT-TYPE
  SYNTAX        EltRemoteIdType
  MAX-ACCESS    read-write
  STATUS        current
  DESCRIPTION
    "A PPPoE Intermediate Agent interface entry remote id."
  ::= { eltPppoeIaPortEntry 5 }

eltPppoeIaPortStripVendorTag OBJECT-TYPE
  SYNTAX        TruthValue
  MAX-ACCESS    read-write
  STATUS        current
  DESCRIPTION
    "A PPPoE Intermediate Agent interface entry enable stripping vendor tag."
  ::= { eltPppoeIaPortEntry 6 }

eltPppoeIaPortStatsRxPADI OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Total number of received PADI packets."
    ::= { eltPppoeIaPortEntry 7 }

eltPppoeIaPortStatsRxPADO OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Total number of received PADO packets."
    ::= { eltPppoeIaPortEntry 8 }

eltPppoeIaPortStatsRxPADR OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Total number of received PADR packets."
    ::= { eltPppoeIaPortEntry 9 }

eltPppoeIaPortStatsRxPADS OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Total number of received PADS packets."
    ::= { eltPppoeIaPortEntry 10 }

eltPppoeIaPortStatsRxPADT OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Total number of received PADT packets."
    ::= { eltPppoeIaPortEntry 11 }

eltPppoeIaPortStatsTxGenError OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Total number of transmitted PPPoED generic error messages."
    ::= { eltPppoeIaPortEntry 12 }

eltPppoeIaPortStatsDroppedResponseFromUntrusted OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Total number of dropped server PPPoED packets from untrusted ports."
    ::= { eltPppoeIaPortEntry 13 }

eltPppoeIaPortStatsDroppedRequestToUntrusted OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Total number of dropped client PPPoED packets from trusted ports."
    ::= { eltPppoeIaPortEntry 14 }

eltPppoeIaPortStatsDroppedMalformed OBJECT-TYPE
    SYNTAX      Counter32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Total number of dropped malformed PPPoED packets."
    ::= { eltPppoeIaPortEntry 15 }

eltPppoeIaPortStatsClearCountersAction OBJECT-TYPE
    SYNTAX       TruthValue
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "If true, clear (set to zero) all PPPoE Intermediate Agent interface counters."
    DEFVAL{ false }
    ::= { eltPppoeIaPortEntry 16 }

eltPppoeIaPortRowStatus OBJECT-TYPE
  SYNTAX        RowStatus
  MAX-ACCESS    read-write
  STATUS        current
  DESCRIPTION
    "A PPPoE Intermediate Agent interface entry row status."
  ::= { eltPppoeIaPortEntry 17 }

--
-- PPPoE Intermediate Agent clear all statistics
--
eltPppoeIaClearCountersAction OBJECT-TYPE
    SYNTAX      TruthValue
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "If true, clear (set to zero) counters on all ports."
    DEFVAL{ false }
    ::= { eltMesPppoeIa 7 }

--
-- PPPoE Intermediate Agent sessions table
--

EltPppoeIaSessionIDType  ::= TEXTUAL-CONVENTION
   STATUS current
   DESCRIPTION    "PPPoE Intermediate Agent session ID type."
   SYNTAX INTEGER(0..65535)

eltPppoeIaSessionTable  OBJECT-TYPE
  SYNTAX  SEQUENCE OF EltPppoeIaSessionEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION      "A PPPoE Intermediate Agent sessions table."
  ::= { eltMesPppoeIa 8 }

eltPppoeIaSessionEntry OBJECT-TYPE
   SYNTAX      EltPppoeIaSessionEntry
   MAX-ACCESS  not-accessible
   STATUS      current
   DESCRIPTION        "A PPPoE Intermediate Agent session entry."
   INDEX { eltPppoeIaSessionVLANTag, eltPppoeIaSessionMACAddress }
::= { eltPppoeIaSessionTable 1 }

EltPppoeIaSessionEntry ::= SEQUENCE {
   eltPppoeIaSessionVLANTag          VlanId,
   eltPppoeIaSessionMACAddress       MacAddress,
   eltPppoeIaSessionPort             InterfaceIndex,
   eltPppoeIaSessionID               EltPppoeIaSessionIDType,
   eltPppoeIaSessionTimer            Unsigned32,
   eltPppoeIaSessionRowStatus        RowStatus
}

eltPppoeIaSessionVLANTag OBJECT-TYPE
    SYNTAX      VlanId
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Session VLAN ID."
    ::= { eltPppoeIaSessionEntry 1 }

eltPppoeIaSessionMACAddress OBJECT-TYPE
    SYNTAX      MacAddress
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Session MAC address."
    ::= { eltPppoeIaSessionEntry 2 }

eltPppoeIaSessionPort OBJECT-TYPE
    SYNTAX      InterfaceIndex
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Session interface index."
    ::= { eltPppoeIaSessionEntry 3 }

eltPppoeIaSessionID OBJECT-TYPE
    SYNTAX      EltPppoeIaSessionIDType
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Session ID."
    ::= { eltPppoeIaSessionEntry 4 }

eltPppoeIaSessionTimer OBJECT-TYPE
    SYNTAX      Unsigned32
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Session timer."
    ::= { eltPppoeIaSessionEntry 5 }

eltPppoeIaSessionRowStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Session row status."
    ::= { eltPppoeIaSessionEntry 6 }

--
-- PPPoE Intermediate Agent clear sessions
--
eltPppoeIaClearSessionsAction OBJECT-TYPE
    SYNTAX      MacAddress
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "The MAC address of PPPoE session that need to be deleted (set to 00:00:00:00:00:00 to clear all sessions)."
    ::= { eltMesPppoeIa 9 }
    
--
-- PPPoE Intermediate Agent session timeout
--
eltPppoeIaSessionTimeout OBJECT-TYPE
    SYNTAX      INTEGER(0..600)
    MAX-ACCESS  read-write
    STATUS      current
    DEFVAL     { 300 }
    DESCRIPTION
        "The PPPoE session timeout in seconds (set to zero to disable timeout)."
    ::= { eltMesPppoeIa 10 }

--
-- PPPoE Intermediate Agent Option 82 UserDefined
--
eltPppoeIaCircuitIdSuboptionsUserDefinedTemplate OBJECT-TYPE
    SYNTAX OCTET STRING (SIZE (0..128))
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "An octet string template for user-defined format of
        circuit id suboption that will be inserted to packet."
    ::= { eltMesPppoeIa 11 }

--
-- PPPoE Intermediate Agent Option 82 Remote-ID
--
eltPppoeIaRemoteIdSuboptionsTemplate OBJECT-TYPE
    SYNTAX     DisplayString (SIZE (1..128))
    MAX-ACCESS read-write
    STATUS     current
    DEFVAL     { "%M" }
    DESCRIPTION
        "An octet string template for remote id suboption that will be inserted
        to packet."
    ::= { eltMesPppoeIa 12 }

--
-- Notifications
--

eltIpDhcpSnoopClientLimitTrap NOTIFICATION-TYPE
    OBJECTS {
        ifIndex,
        eltIpDhcpSnoopPortClientsLimit,
        rndErrorDesc
    }
    STATUS current
    DESCRIPTION
        "A eltIpDhcpSnoopClientLimitTrap is generated when number of
         clients reached configured limit on interface."
    ::= { eltMesIpDhcpSnoopNotif 2 }

eltIpDhcpSnoopMacVerificationFailedTrap NOTIFICATION-TYPE
    OBJECTS {
        ifIndex,
        rlIpDhcpSnoopVLANTag,
        rlIpDhcpSnoopMACAddress,
        rndErrorDesc
    }
    STATUS current
    DESCRIPTION
        "A eltIpDhcpSnoopMacVerificationFailedTrap is genered when
         MAC address in Ether-header differ from the DHCP-header."
    ::= { eltMesIpDhcpSnoopNotif 3 }
--
-- DHCPv6 LDRA/RelayAgent options
--

eltMesIpv6DhcpRelayAgent OBJECT IDENTIFIER ::= { eltMesBridgeSecurity  5 }
eltMesIpv6DhcpRelayAgentOpt OBJECT IDENTIFIER ::= { eltMesIpv6DhcpRelayAgent  1}

eltIpv6DhcpRelayAgentOptRemoteIdentifier OBJECT-TYPE
    SYNTAX DisplayString(SIZE(1..63))
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies global Remote Identifier (Option 37)."
    ::= { eltMesIpv6DhcpRelayAgentOpt 1 }

eltIpv6DhcpRelayAgentOptPortTable OBJECT-TYPE
    SYNTAX  SEQUENCE OF EltIpv6DhcpRelayAgentOptPortEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION      "A DHCPv6 interface configuration table."
    ::= { eltMesIpv6DhcpRelayAgentOpt 2 }

eltIpv6DhcpRelayAgentOptInterfaceIdentifier OBJECT-TYPE
    SYNTAX DisplayString(SIZE(1..63))
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION       "Specifies global Interface Identifier (Option 18)."
    ::= { eltMesIpv6DhcpRelayAgentOpt 3 }
    
eltIpv6DhcpRelayAgentOptPortEntry OBJECT-TYPE
   SYNTAX      EltIpv6DhcpRelayAgentOptPortEntry
   MAX-ACCESS  not-accessible
   STATUS      current
   DESCRIPTION        "A DHCPv6 interface configuration entry."
   INDEX {ifIndex}
::= { eltIpv6DhcpRelayAgentOptPortTable 1 }

EltIpv6DhcpRelayAgentOptPortEntry ::= SEQUENCE {
    eltIpv6DhcpRelayAgentOptPortInterfaceId               EltCircuitIdType,
    eltIpv6DhcpRelayAgentOptPortRemoteId                  EltRemoteIdType,
    eltIpv6DhcpRelayAgentOptPortRowStatus                 RowStatus
}

eltIpv6DhcpRelayAgentOptPortInterfaceId OBJECT-TYPE
    SYNTAX      EltCircuitIdType
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "DHCPv6 Interface-ID option on interface entry"
    ::= { eltIpv6DhcpRelayAgentOptPortEntry 2 }

eltIpv6DhcpRelayAgentOptPortRemoteId OBJECT-TYPE
    SYNTAX      EltRemoteIdType
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "DHCPv6 Remote-ID option on interface entry"
    ::= { eltIpv6DhcpRelayAgentOptPortEntry 3 }

eltIpv6DhcpRelayAgentOptPortRowStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "Session row status."
    ::= { eltIpv6DhcpRelayAgentOptPortEntry 4 }

eltMesIpv6DhcpLdra OBJECT IDENTIFIER ::= { eltMesIpv6DhcpRelayAgent  2}

eltIpv6DhcpLdraConfTable OBJECT-TYPE
    SYNTAX  SEQUENCE OF EltIpv6DhcpLdraConfEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION      "DHCPv6 LDRA interface configuration table."
    ::= { eltMesIpv6DhcpLdra  1 }

eltIpv6DhcpLdraConfEntry OBJECT-TYPE
    SYNTAX      EltIpv6DhcpLdraConfEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION        "DHCPv6 LDRA interface configuration entry."
    INDEX {ifIndex}
::= { eltIpv6DhcpLdraConfTable 1 }

EltIpv6DhcpLdraConfEntry ::= SEQUENCE {
    eltIpv6DhcpLdraConfRowStatus       RowStatus,
    eltIpv6DhcpLdraConfEnabled         TruthValue
}

eltIpv6DhcpLdraConfRowStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "Session row status."
    ::= { eltIpv6DhcpLdraConfEntry 1 }
    
eltIpv6DhcpLdraConfEnabled OBJECT-TYPE
    SYNTAX      TruthValue
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "Indicate status of DHCP LDRA per port."
    DEFVAL{ false }
    ::= { eltIpv6DhcpLdraConfEntry 2 }

--------------------------------------------------------------
 -- Notifications
 --------------------------------------------------------------

eltIpv6DhcpLdraMessageDropTrap NOTIFICATION-TYPE
    OBJECTS   {rndErrorDesc, rndErrorSeverity}
    STATUS  current
    DESCRIPTION
        "Warning trap indicating that IPv6 LDRA has dropped a message."
    ::=  { eltMesBridgeSecurityNotifications 1 }


--
-- eltMesIpSourceGuard
--

eltIpSourceGuardPortTable OBJECT-TYPE
    SYNTAX      SEQUENCE OF EltIpSourceGuardPortEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
        "IP Source Guard ports entry per vlan."
    ::= { eltMesIpSourceGuard 1 }

eltIpSourceGuardPortEntry OBJECT-TYPE
    SYNTAX      EltIpSourceGuardPortEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
        "A Source Guard entry "
    AUGMENTS   { rlIpSourceGuardPortEntry }
    ::= { eltIpSourceGuardPortTable 1 }

EltIpSourceGuardPortEntry ::= SEQUENCE {
    eltIpSourceGuardPortVlanList1to1024              VlanList1,
    eltIpSourceGuardPortVlanList1025to2048           VlanList2,
    eltIpSourceGuardPortVlanList2049to3072           VlanList3,
    eltIpSourceGuardPortVlanList3073to4094           VlanList4
    }

eltIpSourceGuardPortVlanList1to1024 OBJECT-TYPE
   SYNTAX      VlanList1
   MAX-ACCESS  read-write
   STATUS      current
   DESCRIPTION
     "The Ip Source Guard port vlan list 1. Default value is {0}"
   DEFVAL {'00'H}
   ::= { eltIpSourceGuardPortEntry 1 }

eltIpSourceGuardPortVlanList1025to2048 OBJECT-TYPE
   SYNTAX      VlanList2
   MAX-ACCESS  read-write
   STATUS      current
   DESCRIPTION
     "The Ip Source Guard port vlan list 2. Default value is {0}"
   DEFVAL {'00'H}
   ::= { eltIpSourceGuardPortEntry 2 }

eltIpSourceGuardPortVlanList2049to3072 OBJECT-TYPE
   SYNTAX      VlanList3
   MAX-ACCESS  read-write
   STATUS      current
   DESCRIPTION
     "The Ip Source Guard port vlan list 3. Default value is {0}"
   DEFVAL {'00'H}
   ::= { eltIpSourceGuardPortEntry 3 }

eltIpSourceGuardPortVlanList3073to4094 OBJECT-TYPE
   SYNTAX      VlanList4
   MAX-ACCESS  read-write
   STATUS      current
   DESCRIPTION
     "The Ip Source Guard port vlan list 4. Default value is {0}"
   DEFVAL {'00'H}
   ::= { eltIpSourceGuardPortEntry 4 }


--
-- ARP Inspection ports configurations table
--

eltIpArpInspectPortConfigTable OBJECT-TYPE
    SYNTAX       SEQUENCE OF EltIpArpInspectPortConfigEntry
    MAX-ACCESS   not-accessible
    STATUS       current
    DESCRIPTION
        "A table contain the configuration of Dynamic ARP 
        Inspection at each interface capable of this feature." 
    ::= { eltMesIpArpInspect 4 }
 
eltIpArpInspectPortConfigEntry OBJECT-TYPE
    SYNTAX       EltIpArpInspectPortConfigEntry
    MAX-ACCESS   not-accessible
    STATUS       current
    DESCRIPTION
        "A row instance contains the configuration of Dynamic ARP 
        Inspection at each interface capable of this feature." 
    INDEX { ifIndex }
    ::= { eltIpArpInspectPortConfigTable 1 }

EltIpArpInspectPortConfigEntry ::= SEQUENCE {  
    eltIpArpInspectPortRateLimit INTEGER 
}
 
eltIpArpInspectPortRateLimit OBJECT-TYPE
    SYNTAX      INTEGER (0..2048)
    UNITS       "packet per second"
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "This object indicates rate limit value for Dynamic ARP
         Inspection purpose. If the incoming rate of ARP packets
         exceeds the value of this object, interface will be put
         into errdisable state. If the field has the value of 0, 
         no limiting is performed"
    DEFVAL { 0 }
    ::= { eltIpArpInspectPortConfigEntry 1 }


END