-- ============================================================================
-- Copyright (c) 2004-2010 Hangzhou H3C Tech. Co., Ltd. All rights reserved.
--
-- Description: Lawful Interception MIB
-- Reference:
-- Version: V1.0
-- History:
--   V1.0 2009-08-25 Initial version Created by Lixin Xu
-- ============================================================================
H3C-LI-MIB DEFINITIONS ::= BEGIN

IMPORTS
    h3cCommon
        FROM HUAWEI-3COM-OID-MIB
    Counter64, Counter32, Integer32, Unsigned32,
    OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE
        FROM SNMPv2-SMI
    RowStatus, TruthValue, MacAddress, DateAndTime
        FROM SNMPv2-TC
    InetAddress, InetAddressType, InetAddressPrefixLength, InetPortNumber
        FROM INET-ADDRESS-MIB
    InterfaceIndexOrZero
        FROM IF-MIB
    SnmpAdminString
        FROM SNMP-FRAMEWORK-MIB;

h3cLI MODULE-IDENTITY
    LAST-UPDATED "200908251000Z"
    ORGANIZATION
        "Hangzhou H3C Tech. Co., Ltd."
    CONTACT-INFO
        "Platform Team Hangzhou H3C Tech. Co., Ltd.
         Hai-Dian District Beijing P.R. China
         http://www.h3c.com
         Zip:100085"
    DESCRIPTION
        "Lawful Interception MIB"
    REVISION
        "200908251000Z"
    DESCRIPTION
        "Initial version."
    ::= { h3cCommon 111 }

--
-- Node definitions
--

h3cLICommon OBJECT IDENTIFIER ::= { h3cLI 1 }

h3cLITrapBindObjects OBJECT IDENTIFIER ::= { h3cLICommon 1 }

h3cLIBoardInformation OBJECT-TYPE
    SYNTAX      Unsigned32
    MAX-ACCESS  accessible-for-notify
    STATUS      current
    DESCRIPTION
        "It is a slot number."
    ::= { h3cLITrapBindObjects 1 }

h3cLINotifications OBJECT IDENTIFIER ::= { h3cLICommon 2 }

h3cLINotificationsPrefix OBJECT IDENTIFIER ::= { h3cLINotifications 0 }

h3cLIActive NOTIFICATION-TYPE
    OBJECTS {
              h3cLIStreamtype
            }
    STATUS current
    DESCRIPTION
        "This Notification is sent when a type of intercepting configuration
        is changed from inactive to active.
        The value of the h3cLIStreamtype which identify the actual intercept
        stream is included in this notification."
    ::= { h3cLINotificationsPrefix 1 }

h3cLITimeOut NOTIFICATION-TYPE
    OBJECTS { h3cLIMediationRowStatus }
    STATUS current
    DESCRIPTION
        "When the time specified in h3cLIMediationTimeout arrives,
        the device notifies the manager corresponding intercept is removed."
    ::= { h3cLINotificationsPrefix 2 }

h3cLIFailureInformation NOTIFICATION-TYPE
    OBJECTS {
                h3cLIStreamtype,
                h3cLIBoardInformation
            }
    STATUS current
    DESCRIPTION
        "When interception is configured on distributed device,
        the configuration perhaps failed on some board.
        If this happened, this notification will occur."
    ::= { h3cLINotificationsPrefix 3 }

h3cLIObjects OBJECT IDENTIFIER ::= { h3cLICommon 3 }

h3cLINewIndex OBJECT-TYPE
    SYNTAX Integer32 (1..2147483647)
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object will be used as an index value for a new
        h3cLIMediationEntry.  Whenever read, the agent will
        give a non-used value.  This is to reduce the probability
        of conflict during creation of new h3cLIMediationTable entries."
    ::= { h3cLIObjects 1 }
--
-- h3cLIMediationTable definition
--
h3cLIMediationTable OBJECT-TYPE
    SYNTAX SEQUENCE OF H3cLIMediationEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "This table describes interception gateway information with which
        interception device communicates."
    ::= { h3cLIObjects 2 }

h3cLIMediationEntry OBJECT-TYPE
    SYNTAX H3cLIMediationEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "An entry of configuring mediation device."
    INDEX { h3cLIMediationIndex }
    ::= { h3cLIMediationTable 1 }

H3cLIMediationEntry ::=
    SEQUENCE {
        h3cLIMediationIndex                 Integer32,
        h3cLIMediationDestAddrType          InetAddressType,
        h3cLIMediationDestAddr              InetAddress,
        h3cLIMediationDestPort              InetPortNumber,
        h3cLIMediationSrcInterface          InterfaceIndexOrZero,
        h3cLIMediationDscp                  Integer32,
        h3cLIMediationTimeOut               DateAndTime,
        h3cLIMediationTransport             INTEGER,
        h3cLIMediationNotificationEnable    TruthValue,
        h3cLIMediationRowStatus             RowStatus
     }

h3cLIMediationIndex OBJECT-TYPE
    SYNTAX Integer32 (1..2147483647)
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "h3cLIMediationIndex is a entry identifier.  The Mediation Device
            should be responsible for making sure these are unique.
            Before creating a new entry, a value for this variable may be
            obtained by reading h3cLINewIndex to reduce the probability
            of a value collision."
    ::= { h3cLIMediationEntry 1 }

h3cLIMediationDestAddrType OBJECT-TYPE
    SYNTAX InetAddressType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The type of h3cLIMediationDestAddr."
    ::= { h3cLIMediationEntry 2 }

h3cLIMediationDestAddr OBJECT-TYPE
    SYNTAX InetAddress
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The IP Address of the Mediation Device to receive intercepted traffic."
    ::= { h3cLIMediationEntry 3 }

h3cLIMediationDestPort OBJECT-TYPE
    SYNTAX InetPortNumber
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The L4-port number on the Mediation Device
         to receive intercepted traffic."
    ::= { h3cLIMediationEntry 4 }

h3cLIMediationSrcInterface OBJECT-TYPE
    SYNTAX InterfaceIndexOrZero
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The interface on the intercepting device from which to
        transmit intercepted data.
        If zero, intercepting device will select an outbound
        interface according to h3cLIMediationDestAddr."
    ::= { h3cLIMediationEntry 5 }

h3cLIMediationDscp OBJECT-TYPE
    SYNTAX Integer32
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The Differentiated Services Code Point the intercepting
        device applies to the IP packets encapsulating the intercepted traffic."
    DEFVAL { 34 }
    ::= { h3cLIMediationEntry 6 }

h3cLIMediationTimeOut OBJECT-TYPE
    SYNTAX DateAndTime
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The time at which this row and all related Stream Table rows
        should be automatically removed, and the intercept function expire."
    ::= { h3cLIMediationEntry 7 }

h3cLIMediationTransport OBJECT-TYPE
    SYNTAX INTEGER
        {
            udp(1)
        }
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The protocol used in transferring intercepted data to the
        Mediation Device."
    ::= { h3cLIMediationEntry 8 }

h3cLIMediationNotificationEnable OBJECT-TYPE
    SYNTAX TruthValue
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "This variable controls the generation of any notifications or
        informs by the MIB agent for this table entry."
    DEFVAL { true }
    ::= { h3cLIMediationEntry 9 }

h3cLIMediationRowStatus OBJECT-TYPE
    SYNTAX RowStatus
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
        "Operation status of this table entry."
    ::= { h3cLIMediationEntry 10 }

--
-- h3cLIStreamTable definition
--
h3cLIStreamTable OBJECT-TYPE
    SYNTAX SEQUENCE OF H3cLIStreamEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "This table lists the traffic stream's type to be intercepted.
         The specified filter is defined in h3cLIIPStreamTable,
         h3cLIMACStreamTable or h3cLIUserStreamTable, according to
         h3cLIStreamtype.  Also it contains counters for packets to
         be intercepted and dropped by attached type of filter."
    ::= { h3cLIObjects 3 }

h3cLIStreamEntry OBJECT-TYPE
    SYNTAX H3cLIStreamEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "A single type of data stream to be intercepted."
    INDEX { h3cLIMediationIndex, h3cLIStreamIndex }
    ::= { h3cLIStreamTable 1 }

H3cLIStreamEntry ::=
    SEQUENCE {
        h3cLIStreamIndex        Integer32,
        h3cLIStreamtype         INTEGER,
        h3cLIStreamEnable       TruthValue,
        h3cLIStreamPackets      Counter32,
        h3cLIStreamDrops        Counter32,
        h3cLIStreamHPackets     Counter64,
        h3cLIStreamHDrops       Counter64,
        h3cLIStreamRowStatus    RowStatus
     }

h3cLIStreamIndex OBJECT-TYPE
    SYNTAX Integer32 (1..2147483647)
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "The index of the stream entry."
    ::= { h3cLIStreamEntry 1 }

h3cLIStreamtype OBJECT-TYPE
    SYNTAX INTEGER
        {
            ip(1),
            mac(2),
            userConnection(3)
        }
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "Identifies the type of stream, and according to it uses filter table.
        It can not be changed after a filter table is attached to it.
        The following types of streams are supported:
         ip:             IP filter.  The exact definition is a row in
                         h3cLIIPStreamTable.
         mac:            MAC filter.  The exact definition is a row in
                         h3cLIMACStreamTable.
         userConnecton:  User connection filter.  The exact definition
                         is a row in h3cLIUserStreamTable."
    ::= { h3cLIStreamEntry 2 }

h3cLIStreamEnable OBJECT-TYPE
    SYNTAX TruthValue
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "If 'true', the interception is active.  And it is set to 'true'
         only after an additional filter specification has been attached
         to this stream."
    DEFVAL { false }
    ::= { h3cLIStreamEntry 3 }

h3cLIStreamPackets OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The numbers of packets that have been intercepted."
    ::= { h3cLIStreamEntry 4 }

h3cLIStreamDrops OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The numbers of packets were dropped in the lawful intercept process."
    ::= { h3cLIStreamEntry 5 }

h3cLIStreamHPackets OBJECT-TYPE
    SYNTAX Counter64
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The numbers of packets have been intercepted.
        This object is a 64-bit version of h3cLIStreamPackets."
    ::= { h3cLIStreamEntry 6 }

h3cLIStreamHDrops OBJECT-TYPE
    SYNTAX Counter64
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The numbers of packets were dropped in the lawful intercept process.
        This object is a 64-bit version of h3cLIStreamDrops."
    ::= { h3cLIStreamEntry 7 }

h3cLIStreamRowStatus OBJECT-TYPE
    SYNTAX RowStatus
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
        "Operation status of this table entry."
    ::= { h3cLIStreamEntry 8 }

--
-- h3cLIIPStreamTable definition
--
h3cLIIPStream OBJECT IDENTIFIER ::= { h3cLI 2 }

h3cLIIPStreamObjects OBJECT IDENTIFIER ::= { h3cLIIPStream 1 }

h3cLIIPStreamTable OBJECT-TYPE
    SYNTAX SEQUENCE OF H3cLIIPStreamEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "This table lists the IPv4 and IPv6 streams to be intercepted.
        It is associated with h3cLIMediationTable and h3cLIStreamTable."
    ::= { h3cLIIPStreamObjects 1 }

h3cLIIPStreamEntry OBJECT-TYPE
    SYNTAX H3cLIIPStreamEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "A single stream to be intercepted.
        The first index indicates the Mediation Device.
        The second index is that of the stream's counter entry
        in the h3cLIStreamTable.  The second index permits multiple
        classifiers to be used together, such as having an IP address
        as source or destination."
    INDEX { h3cLIMediationIndex, h3cLIStreamIndex }
    ::= { h3cLIIPStreamTable 1 }

H3cLIIPStreamEntry ::=
    SEQUENCE {
        h3cLIIPStreamInterface          InterfaceIndexOrZero,
        h3cLIIPStreamAddrType           InetAddressType,
        h3cLIIPStreamDestAddr           InetAddress,
        h3cLIIPStreamDestAddrLength     InetAddressPrefixLength,
        h3cLIIPStreamSrcAddr            InetAddress,
        h3cLIIPStreamSrcAddrLength      InetAddressPrefixLength,
        h3cLIIPStreamTosByte            Integer32,
        h3cLIIPStreamTosByteMask        Integer32,
        h3cLIIPStreamFlowId             Integer32,
        h3cLIIPStreamProtocol           Integer32,
        h3cLIIPStreamDestL4PortMin      InetPortNumber,
        h3cLIIPStreamDestL4PortMax      InetPortNumber,
        h3cLIIPStreamSrcL4PortMin       InetPortNumber,
        h3cLIIPStreamSrcL4PortMax       InetPortNumber,
        h3cLIIPStreamVRF                SnmpAdminString,
        h3cLIIPStreamRowStatus          RowStatus
     }

h3cLIIPStreamInterface OBJECT-TYPE
    SYNTAX InterfaceIndexOrZero
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "Traffic received or transmitted over this interface
         will be intercepted.

         This value must be set when creating a stream entry,
         either zero, or a valid interface index.

         If the value is zero, interception accepts any interface.
         Then at least one additional parameter must be selected,
         and not be default value."
    ::= { h3cLIIPStreamEntry 1 }

h3cLIIPStreamAddrType OBJECT-TYPE
    SYNTAX InetAddressType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The type of address, used in packet selection."
    DEFVAL { ipv4 }
    ::= { h3cLIIPStreamEntry 2 }

h3cLIIPStreamDestAddr OBJECT-TYPE
    SYNTAX InetAddress
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The Destination address  used in packet selection.
        This address will be consistent with the type specified in
        h3cLIIPStreamAddrType."
    DEFVAL  { '00000000'H }
    ::= { h3cLIIPStreamEntry 3 }

h3cLIIPStreamDestAddrLength OBJECT-TYPE
    SYNTAX InetAddressPrefixLength
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The length of the Destination Prefix.  A value of zero means
        all addresses to match.  This prefix length will be consistent
        with the type specified in h3cLIIPStreamAddrType."
    DEFVAL { 0 }
    ::= { h3cLIIPStreamEntry 4 }

h3cLIIPStreamSrcAddr OBJECT-TYPE
    SYNTAX InetAddress
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The Source Address used in packet selection.  This address will
        be consistent with the type specified in h3cLIIPStreamAddrType."
    DEFVAL  { '00000000'H }
    ::= { h3cLIIPStreamEntry 5 }

h3cLIIPStreamSrcAddrLength OBJECT-TYPE
    SYNTAX InetAddressPrefixLength
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The length of the Source Prefix.  A value of zero means all
        addresses to match.  This prefix length will be consistent with
        the type specified in h3cLIIPStreamAddrType."
    DEFVAL { 0 }
    ::= { h3cLIIPStreamEntry 6 }

h3cLIIPStreamTosByte OBJECT-TYPE
    SYNTAX Integer32 (0..255)
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The value of the TOS byte.
        If h3cLIIPStreamTosByte&(~h3cLIIPStreamTosByteMask)!=0,
        configuration is rejected."
    DEFVAL { 0 }
    ::= { h3cLIIPStreamEntry 7 }

h3cLIIPStreamTosByteMask OBJECT-TYPE
    SYNTAX Integer32 (0..255)
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "This value is ANDed with the value of the TOS byte in a packet
         and compared with h3cLIIPStreamTosByte.  If the values are equal,
         the comparison is equal.
         If both the mask and the TosByte value are zero,
         the result is to always accept."
    DEFVAL { 0 }
    ::= { h3cLIIPStreamEntry 8 }

h3cLIIPStreamFlowId OBJECT-TYPE
    SYNTAX Integer32 (-1 | 0..1048575)
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The flow identifier in an IPv6 header.  -1 indicates that the
        Flow Id is unused."
    DEFVAL { -1 } -- any flow identifier value
    ::= { h3cLIIPStreamEntry 9 }

h3cLIIPStreamProtocol OBJECT-TYPE
    SYNTAX Integer32 (-1 | 0..255)
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The IP protocol to match against the IPv4 protocol number or
        the IPv6 Next- Header number in the packet."
    DEFVAL { -1 } -- any IP protocol
    ::= { h3cLIIPStreamEntry 10 }

h3cLIIPStreamDestL4PortMin OBJECT-TYPE
    SYNTAX InetPortNumber
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The minimum value that the layer-4 destination port number in
         the packet must have in order to match.  This value must be
         equal to or less than the value specified for this entry in
         h3cLIIPStreamDestL4PortMax.

         If both h3cLIIPStreamDestL4PortMin and h3cLIIPStreamDestL4PortMax
         are at their default values, the port number is effectively unused.
         If h3cLIIPStreamDestL4PortMin is equal to
         h3cLIIPStreamDestL4PortMax, only one port number to be intercepted."
    DEFVAL { 0 }
    ::= { h3cLIIPStreamEntry 11 }

h3cLIIPStreamDestL4PortMax OBJECT-TYPE
    SYNTAX InetPortNumber
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The maximum value that the layer-4 destination port number in
         the packet must have in order to match this classifier entry.
         This value must be equal to or greater than the value specified
         for this entry in h3cLIIPStreamDestL4PortMin.
         If both h3cLIIPStreamDestL4PortMin and h3cLIIPStreamDestL4PortMax
         are at their default values, the port number is effectively unused.
         If h3cLIIPStreamDestL4PortMin is equal to h3cLIIPStreamDestL4PortMax,
         only one port number to be intercepted."
    DEFVAL { 65535 }
    ::= { h3cLIIPStreamEntry 12 }

h3cLIIPStreamSrcL4PortMin OBJECT-TYPE
    SYNTAX InetPortNumber
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The minimum value that the layer-4 destination port number in
         the packet must have in order to match.  This value must be
         equal to or less than the value specified for this entry in
         h3cLIIPStreamSrcL4PortMax.
         If both h3cLIIPStreamSrcL4PortMin and h3cLIIPStreamSrcL4PortMax
         are at their default values, the port number is effectively unused.
         If h3cLIIPStreamSrcL4PortMin is equal to
         h3cLIIPStreamSrcL4PortMax, only one port number to be intercepted."
    DEFVAL { 0 }
    ::= { h3cLIIPStreamEntry 13 }

h3cLIIPStreamSrcL4PortMax OBJECT-TYPE
    SYNTAX InetPortNumber
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The maximum value that the layer-4 destination port number in
         the packet must have in order to match this classifier entry.
         This value must be equal to or greater than the value specified
         for this entry in h3cLIIPStreamSrcL4PortMin.
         If both h3cLIIPStreamSrcL4PortMin and h3cLIIPStreamSrcL4PortMax
         are at their default values, the port number is effectively unused.
         If h3cLIIPStreamSrcL4PortMin is equal to h3cLIIPStreamSrcL4PortMax,
         only one port number to be intercepted."
    DEFVAL { 65535 }
    ::= { h3cLIIPStreamEntry 14 }

h3cLIIPStreamVRF OBJECT-TYPE
    SYNTAX SnmpAdminString
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "It is the name of a Virtual Routing and Forwarding (VRF) of a VPN."
    DEFVAL { "" }
    ::= { h3cLIIPStreamEntry 15 }

h3cLIIPStreamRowStatus OBJECT-TYPE
    SYNTAX RowStatus
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
        "Operation status of this table entry."
    ::= { h3cLIIPStreamEntry 18 }

--
-- h3cLIMACStreamTable definition
--
h3cLIMACStream OBJECT IDENTIFIER ::= { h3cLI 3 }

h3cLIMACStreamObjects OBJECT IDENTIFIER ::= { h3cLIMACStream 1 }

h3cLIMACStreamTable OBJECT-TYPE
    SYNTAX SEQUENCE OF H3cLIMACStreamEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "This table lists the IEEE 802 streams to be intercepted.
        It is associated with h3cLIMediationTable and h3cLIStreamTable."
    ::= { h3cLIMACStreamObjects 1 }

h3cLIMACStreamEntry OBJECT-TYPE
    SYNTAX H3cLIMACStreamEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "A single stream to be intercepted.
        The first index indicates the Mediation Device.
        The second index is that of the stream's counter entry
        in the h3cLIStreamTable.  The second index permits multiple
        classifiers to be used together, such as having an MAC address
        as source or destination."
    INDEX { h3cLIMediationIndex, h3cLIStreamIndex }
    ::= { h3cLIMACStreamTable 1 }

H3cLIMACStreamEntry ::=
    SEQUENCE {
        h3cLIMACStreamFields        BITS,
        h3cLIMACStreamInterface     InterfaceIndexOrZero,
        h3cLIMACStreamDestAddr      MacAddress,
        h3cLIMACStreamSrcAddr       MacAddress,
        h3cLIMACStreamEthPid        Unsigned32,
        h3cLIMACStreamDSap          Unsigned32,
        h3cLIMACStreamSSap          Unsigned32,
        h3cLIMACStreamRowStatus     RowStatus
     }

h3cLIMACStreamFields OBJECT-TYPE
    SYNTAX BITS {
                    interface(0),
                    dstMacAddress(1),
                    srcMacAddress(2),
                    ethernetPid(3),
                    dSap(4),
                    sSap(5)
                }
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "This object displays what attributes will be compared to
         identify traffic.
         interface:     indicates that traffic on the stated
                                interface is to be intercepted
         dstMacAddress: indicates that traffic destined to a
                                given address should be intercepted
         srcMacAddress: indicates that traffic sourced from a
                                given address should be intercepted
         ethernetPid:   indicates that traffic with a stated
                                Ethernet Protocol Identifier should
                                be intercepted
         dSap:          indicates that traffic with an certain
                                802.2 LLC Destination SAP should be
                                intercepted
         sSap:          indicates that traffic with an certain
                                802.2 LLC Source SAP should be intercepted

         At least one of the bits has to be set in order to activate an
         entry.  If multiple bits are set, traffic to be intercepted must
         be satisfied with all set attributes."
    ::= { h3cLIMACStreamEntry 1 }

h3cLIMACStreamInterface OBJECT-TYPE
    SYNTAX InterfaceIndexOrZero
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "Traffic received or transmitted over this interface
         will be intercepted.
         This value must be set when creating a stream entry,
         either zero, or a valid interface index.
         If the value is zero, interception accepts any interface.
         Additional parameter must be selected together."
    ::= { h3cLIMACStreamEntry 2 }

h3cLIMACStreamDestAddr OBJECT-TYPE
    SYNTAX MacAddress
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The Destination address used in packet selection."
    ::= { h3cLIMACStreamEntry 3 }

h3cLIMACStreamSrcAddr OBJECT-TYPE
    SYNTAX MacAddress
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The Source Address used in packet selection."
    ::= { h3cLIMACStreamEntry 4 }

h3cLIMACStreamEthPid OBJECT-TYPE
    SYNTAX Unsigned32
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The value of the Ethernet Protocol Identifier in the
        Ethernet traffic or IEEE 802.2 SNAP traffic."
    ::= { h3cLIMACStreamEntry 5 }

h3cLIMACStreamDSap OBJECT-TYPE
    SYNTAX Unsigned32
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The value of the IEEE 802.2 Destination SAP."
    ::= { h3cLIMACStreamEntry 6 }

h3cLIMACStreamSSap OBJECT-TYPE
    SYNTAX Unsigned32
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The value of the IEEE 802.2 Source SAP."
    ::= { h3cLIMACStreamEntry 7 }

h3cLIMACStreamRowStatus OBJECT-TYPE
    SYNTAX RowStatus
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
        "Operation status of this table entry."
    ::= { h3cLIMACStreamEntry 8 }

--
-- h3cLIUserStreamTable definition
--
h3cLIUserStream OBJECT IDENTIFIER ::= { h3cLI 4 }

h3cLIUserStreamObjects OBJECT IDENTIFIER ::= { h3cLIUserStream 1 }

h3cLIUserStreamTable OBJECT-TYPE
    SYNTAX SEQUENCE OF H3cLIUserStreamEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "This table lists the user connection streams to be intercepted.
        It is associated with h3cLIMediationTable and h3cLIStreamTable."
    ::= { h3cLIUserStreamObjects 1 }

h3cLIUserStreamEntry OBJECT-TYPE
    SYNTAX H3cLIUserStreamEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "A single stream to be intercepted.
        The first index indicates the Mediation Device.
        The second index is that of the stream's counter entry
        in the h3cLIStreamTable.  This permits multiple classifiers
        to be used together."
    INDEX { h3cLIMediationIndex, h3cLIStreamIndex }
    ::= { h3cLIUserStreamTable 1 }

H3cLIUserStreamEntry ::=
    SEQUENCE {
        h3cLIUserStreamAcctSessID       OCTET STRING,
        h3cLIUserStreamRowStatus        RowStatus
     }

h3cLIUserStreamAcctSessID OBJECT-TYPE
    SYNTAX OCTET STRING (SIZE (0..253))
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "This is the RADIUS attribute 44 acct-session-ID.
         The string must be set, and the length not be zero."
    ::= { h3cLIUserStreamEntry 1 }

h3cLIUserStreamRowStatus OBJECT-TYPE
    SYNTAX RowStatus
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
        "Operation status of this table entry."
    ::= { h3cLIUserStreamEntry 2 }

END