142 lines
4.2 KiB
Plaintext
142 lines
4.2 KiB
Plaintext
-- ==========================================================================
|
|
-- Copyright (c) 2004-2022 New H3C Tech. Co., Ltd. All rights reserved.
|
|
--
|
|
-- Description: The file defines a MIB to provide MACSEC configuration
|
|
-- Reference:
|
|
-- Version: V1.1
|
|
-- History:
|
|
-- V1.0 2015-09-01 created by liubo
|
|
-- V1.1 2022-05-11 Add hh3cMACsecTrap by zhengjun
|
|
-- ==========================================================================
|
|
HH3C-MACSEC-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE
|
|
FROM SNMPv2-SMI
|
|
InterfaceIndex, ifDescr, ifIndex
|
|
FROM IF-MIB
|
|
hh3cCommon
|
|
FROM HH3C-OID-MIB;
|
|
|
|
hh3cMACsec MODULE-IDENTITY
|
|
LAST-UPDATED "202205111427Z"
|
|
ORGANIZATION
|
|
"New H3C Technologies Co., Ltd."
|
|
CONTACT-INFO
|
|
"Platform Team New H3C Technologies Co., Ltd.
|
|
Hai-Dian District Beijing P.R. China
|
|
http://www.h3c.com
|
|
Zip: 100085"
|
|
DESCRIPTION
|
|
"This MIB provides information for MACSEC configuration.
|
|
MACSEC presents secure communication method."
|
|
REVISION "202205111427Z"
|
|
DESCRIPTION
|
|
"This version added the MKA session lifetime expired notification and
|
|
its recovery notification."
|
|
REVISION "201509011615Z"
|
|
DESCRIPTION
|
|
"Initial version."
|
|
::= { hh3cCommon 163 }
|
|
|
|
hh3cMACsecCFGObjects OBJECT IDENTIFIER ::= { hh3cMACsec 1 }
|
|
|
|
-- ==========================================================================
|
|
-- hh3cMACsecCFGPortTable OBJECT
|
|
-- ==========================================================================
|
|
hh3cMACsecCFGPortTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF Hh3cMACsecCFGPortEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The MACsec port table."
|
|
::= { hh3cMACsecCFGObjects 1 }
|
|
|
|
hh3cMACsecCFGPortEntry OBJECT-TYPE
|
|
SYNTAX Hh3cMACsecCFGPortEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The MACsec port entry."
|
|
INDEX { hh3cMACsecCFGPortIndex }
|
|
::= { hh3cMACsecCFGPortTable 1 }
|
|
|
|
Hh3cMACsecCFGPortEntry ::= SEQUENCE {
|
|
hh3cMACsecCFGPortIndex InterfaceIndex,
|
|
hh3cMACsecCFGPortPSKCKNName OCTET STRING,
|
|
hh3cMACsecCFGPortPSKCAKValue OCTET STRING }
|
|
|
|
hh3cMACsecCFGPortIndex OBJECT-TYPE
|
|
SYNTAX InterfaceIndex
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An interface index indicates the port number associated with this port."
|
|
::= { hh3cMACsecCFGPortEntry 1 }
|
|
|
|
hh3cMACsecCFGPortPSKCKNName OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The connectivity asociation key name."
|
|
::= { hh3cMACsecCFGPortEntry 2 }
|
|
|
|
hh3cMACsecCFGPortPSKCAKValue OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE(0..128))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The connectivity asociation key value."
|
|
::= { hh3cMACsecCFGPortEntry 3 }
|
|
|
|
-- trap --
|
|
hh3cMACsecTrap OBJECT IDENTIFIER ::= { hh3cMACsec 2 }
|
|
|
|
hh3cMACsecTrapPrex OBJECT IDENTIFIER ::= { hh3cMACsecTrap 0 }
|
|
|
|
hh3cMACsecTimeout NOTIFICATION-TYPE
|
|
OBJECTS
|
|
{
|
|
ifIndex,
|
|
ifDescr,
|
|
hh3cMACsecDeviceRole
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The lifetime of the MKA session on the specified local interface expired."
|
|
::= { hh3cMACsecTrapPrex 1 }
|
|
|
|
hh3cMACsecTimeoutResume NOTIFICATION-TYPE
|
|
OBJECTS
|
|
{
|
|
ifIndex,
|
|
ifDescr,
|
|
hh3cMACsecDeviceRole
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The MKA session on the specified local interface restored."
|
|
::= { hh3cMACsecTrapPrex 2 }
|
|
|
|
hh3cMACsecTrapOjbects OBJECT IDENTIFIER ::= { hh3cMACsecTrap 1 }
|
|
|
|
hh3cMACsecDeviceRole OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
unknown(1),
|
|
server(2),
|
|
client(3)
|
|
}
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The role of the local device role in MKA.
|
|
unknown : The device role is unknown.
|
|
server : The device is the key server.
|
|
client : The device is the client.
|
|
"
|
|
::= { hh3cMACsecTrapOjbects 1 }
|
|
|
|
END
|