590 lines
19 KiB
Plaintext
590 lines
19 KiB
Plaintext
-- *****************************************************************
|
|
-- MY-SMP-MIB.mib: My SMP MIB file
|
|
--
|
|
-- $Copyright$
|
|
--
|
|
-- *****************************************************************
|
|
--
|
|
|
|
DES7200-SMP-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY,
|
|
OBJECT-TYPE,
|
|
NOTIFICATION-TYPE,
|
|
Unsigned32,
|
|
Integer32,
|
|
IpAddress
|
|
FROM SNMPv2-SMI
|
|
RowStatus,
|
|
DisplayString,
|
|
MacAddress,
|
|
TruthValue
|
|
FROM SNMPv2-TC
|
|
MODULE-COMPLIANCE,
|
|
OBJECT-GROUP,
|
|
NOTIFICATION-GROUP
|
|
FROM SNMPv2-CONF
|
|
IfIndex,
|
|
ConfigStatus
|
|
FROM DES7200-TC
|
|
ifIndex
|
|
FROM IF-MIB
|
|
myMgmt
|
|
FROM DES7200-SMI
|
|
Community
|
|
FROM DES7200-SNMP-AGENT-MIB
|
|
VlanId
|
|
FROM Q-BRIDGE-MIB;
|
|
|
|
mySMPMIB MODULE-IDENTITY
|
|
LAST-UPDATED "200409090000Z"
|
|
ORGANIZATION "D-Link Crop."
|
|
CONTACT-INFO
|
|
"
|
|
http://support.dlink.com"
|
|
DESCRIPTION
|
|
"This module defines the MIB security case requires. At present, this MIB could only be accessed by
|
|
the specified SMP Server."
|
|
REVISION "200409090000Z"
|
|
DESCRIPTION
|
|
"Initial version of this MIB module."
|
|
::= { myMgmt 39}
|
|
|
|
mySMPMIBObjects OBJECT IDENTIFIER ::= { mySMPMIB 1 }
|
|
|
|
--
|
|
-- user management
|
|
--
|
|
|
|
mySMPServer OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP addresses for the SMP Server."
|
|
::= { mySMPMIBObjects 1 }
|
|
|
|
mySMPServerKey OBJECT-TYPE
|
|
SYNTAX Community
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Keys for the SMP Server."
|
|
::= { mySMPMIBObjects 2 }
|
|
|
|
mySMPEventSendSlice OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The minimum interval of sending SU security event. The variable value must be less
|
|
than the one defined by mySMPHICheckInterval."
|
|
::= { mySMPMIBObjects 3 }
|
|
|
|
mySMPPolicyDelete OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable value:
|
|
0: No action is required; other values:Delete all policy information."
|
|
::= { mySMPMIBObjects 4 }
|
|
|
|
mySMPPolicyChecksum OBJECT-TYPE
|
|
SYNTAX OCTET STRING(SIZE(16))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The checksum information set on the current SMP policy table."
|
|
::= { mySMPMIBObjects 5 }
|
|
|
|
mySMPPolicyTimeout OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Timeout time of SMP policy."
|
|
::= { mySMPMIBObjects 6 }
|
|
|
|
mySMPPolicyGroupTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF MySMPPolicyGroupEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Security policy group."
|
|
::= { mySMPMIBObjects 9}
|
|
|
|
mySMPPolicyGroupEntry OBJECT-TYPE
|
|
SYNTAX MySMPPolicyGroupEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SMP policy group."
|
|
INDEX {mySMPPolicyGroupIndex}
|
|
::= { mySMPPolicyGroupTable 1 }
|
|
|
|
MySMPPolicyGroupEntry ::=
|
|
SEQUENCE {
|
|
mySMPPolicyGroupIndex
|
|
Unsigned32,
|
|
mySMPPolicyGroupCount
|
|
Unsigned32,
|
|
mySMPPolicyGroupChecksum
|
|
OCTET STRING(SIZE(16)),
|
|
mySMPPolicyGroupStatus
|
|
RowStatus
|
|
}
|
|
|
|
mySMPPolicyGroupIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Policy group index."
|
|
::= { mySMPPolicyGroupEntry 1 }
|
|
|
|
mySMPPolicyGroupCount OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Policy count in the policy group."
|
|
::= { mySMPPolicyGroupEntry 2 }
|
|
|
|
mySMPPolicyGroupChecksum OBJECT-TYPE
|
|
SYNTAX OCTET STRING(SIZE(16))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The sole identification in the policy group."
|
|
::= { mySMPPolicyGroupEntry 3 }
|
|
|
|
mySMPPolicyGroupStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of this conceptual row."
|
|
::= { mySMPPolicyGroupEntry 4 }
|
|
|
|
mySMPPolicyTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF MySMPPolicyEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Security policy table."
|
|
::= { mySMPMIBObjects 8}
|
|
|
|
mySMPPolicyEntry OBJECT-TYPE
|
|
SYNTAX MySMPPolicyEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SMP policy table."
|
|
INDEX {mySMPGroupIndex,mySMPPolicyIndex}
|
|
::= { mySMPPolicyTable 1 }
|
|
|
|
MySMPPolicyEntry ::=
|
|
SEQUENCE {
|
|
mySMPGroupIndex
|
|
Unsigned32,
|
|
mySMPPolicyIndex
|
|
Unsigned32,
|
|
mySMPPolicyStatus
|
|
ConfigStatus,
|
|
mySMPPolicyNumber
|
|
Unsigned32,
|
|
mySMPPolicyInstallPort
|
|
IfIndex,
|
|
mySMPPolicyType
|
|
INTEGER,
|
|
mySMPPolicyContent
|
|
OCTET STRING,
|
|
mySMPPolicyMask
|
|
OCTET STRING,
|
|
mySMPPolicyName
|
|
DisplayString
|
|
}
|
|
|
|
mySMPGroupIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The index of the policy group which the current policy is in."
|
|
::= { mySMPPolicyEntry 1 }
|
|
|
|
mySMPPolicyIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The policy index."
|
|
::= { mySMPPolicyEntry 2 }
|
|
|
|
mySMPPolicyStatus OBJECT-TYPE
|
|
SYNTAX ConfigStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entry state fields. For the detailed information, pls refer to DES7200-TC."
|
|
::= { mySMPPolicyEntry 3 }
|
|
|
|
mySMPPolicyNumber OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The policy sequence number."
|
|
::= { mySMPPolicyEntry 4 }
|
|
|
|
mySMPPolicyInstallPort OBJECT-TYPE
|
|
SYNTAX IfIndex
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The index of port installed the policy."
|
|
::= { mySMPPolicyEntry 5 }
|
|
|
|
mySMPPolicyType OBJECT-TYPE
|
|
SYNTAX INTEGER{
|
|
hi-isolate(1),
|
|
isolate(2),
|
|
blocked(3),
|
|
addrBind(4)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The action of policy template. Hi-isolate application failure can be detected by HI only.
|
|
isolate: isolation action; blocked: blocking action; addrBind: address-binding action. "
|
|
::= { mySMPPolicyEntry 6 }
|
|
|
|
mySMPPolicyContent OBJECT-TYPE
|
|
SYNTAX OCTET STRING(SIZE(80))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Content(80 bytes) of policy template."
|
|
::= { mySMPPolicyEntry 7 }
|
|
|
|
mySMPPolicyMask OBJECT-TYPE
|
|
SYNTAX OCTET STRING(SIZE(80))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Mask information(80 bytes) of policy template."
|
|
::= { mySMPPolicyEntry 8 }
|
|
|
|
mySMPPolicyName OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (0..32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Policy name fields."
|
|
::= { mySMPPolicyEntry 9 }
|
|
|
|
mySMPFrameRelayTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF MySMPFrameRelayEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SMP message forward table."
|
|
::= { mySMPMIBObjects 7}
|
|
|
|
mySMPFrameRelayEntry OBJECT-TYPE
|
|
SYNTAX MySMPFrameRelayEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SMP message forward table."
|
|
INDEX {mySMPFrameRelayIndex}
|
|
::= { mySMPFrameRelayTable 1 }
|
|
|
|
MySMPFrameRelayEntry ::=
|
|
SEQUENCE {
|
|
mySMPFrameRelayIndex
|
|
Unsigned32,
|
|
mySMPFrameRelayContent
|
|
OCTET STRING,
|
|
mySMPFrameRelayLength
|
|
Unsigned32,
|
|
mySMPFrameRelayDestPort
|
|
IfIndex,
|
|
mySMPFrameRelayDestVlan
|
|
VlanId
|
|
}
|
|
|
|
mySMPFrameRelayIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SMP message forward table index."
|
|
::= { mySMPFrameRelayEntry 1 }
|
|
|
|
mySMPFrameRelayContent OBJECT-TYPE
|
|
SYNTAX OCTET STRING(SIZE(0..1024))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SMP message content with maximal 1024 bytes."
|
|
::= { mySMPFrameRelayEntry 2 }
|
|
|
|
mySMPFrameRelayLength OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SMP message length."
|
|
::= { mySMPFrameRelayEntry 3 }
|
|
|
|
mySMPFrameRelayDestPort OBJECT-TYPE
|
|
SYNTAX IfIndex
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The index of destination port SMP messages are sent to."
|
|
::= { mySMPFrameRelayEntry 4 }
|
|
|
|
mySMPFrameRelayDestVlan OBJECT-TYPE
|
|
SYNTAX VlanId
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The VLAN ID of destination port SMP messages are sent to."
|
|
::= { mySMPFrameRelayEntry 5 }
|
|
|
|
|
|
-- As the given port in SMP Server, this node will not be present in MIB.
|
|
mySMPTraps OBJECT IDENTIFIER ::= { mySMPMIB 65535}
|
|
|
|
mySMPSwitchIP OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP addresses for the switch sending the Trap."
|
|
::= { mySMPTraps 1 }
|
|
|
|
mySMPSwitchInterfaceID OBJECT-TYPE
|
|
SYNTAX IfIndex
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface receiving the messages to be forwarded."
|
|
::= { mySMPTraps 2 }
|
|
|
|
mySMPSwitchInterfaceVLANID OBJECT-TYPE
|
|
SYNTAX VlanId
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The VLAN ID of the switch interface receiving the messages to be forwarded."
|
|
::= { mySMPTraps 3 }
|
|
|
|
mySMPFrameContentLength OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The encapsulated message length, which can not exceed 1024."
|
|
::= { mySMPTraps 4 }
|
|
|
|
mySMPFrameContent OBJECT-TYPE
|
|
SYNTAX OCTET STRING(SIZE(0..1024))
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The encapsulated message whose length can not exceed 1024."
|
|
::= { mySMPTraps 5 }
|
|
|
|
mySMPFrameRelayTrap NOTIFICATION-TYPE
|
|
OBJECTS {mySMPSwitchIP,mySMPSwitchInterfaceID,mySMPSwitchInterfaceVLANID,
|
|
mySMPFrameContentLength,mySMPFrameContent}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Trap message includes: IP address for the specified received message,
|
|
port receiving the message, message length and message content."
|
|
::= { mySMPTraps 6 }
|
|
|
|
|
|
mySMPArpAttackSubnetIP OBJECT-TYPE
|
|
SYNTAX OCTET STRING(SIZE(0..40))
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP addresses for all subnets of SVI where the attack source locates."
|
|
::= { mySMPTraps 7 }
|
|
|
|
mySMPArpAttackSubnetIPNum OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Subnet IP address number."
|
|
::= { mySMPTraps 8 }
|
|
|
|
mySMPArpAttackInterfaceSlot OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The slot number for the device connecting the attack source."
|
|
::= { mySMPTraps 9 }
|
|
|
|
mySMPArpAttackInterfacePort OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface number for the device connecting the attack source."
|
|
::= { mySMPTraps 10}
|
|
|
|
mySMPArpAttackInterfaceVlanID OBJECT-TYPE
|
|
SYNTAX VlanId
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The VLAN ID of VLAN where the attack source locates."
|
|
::= { mySMPTraps 11 }
|
|
|
|
mySMPArpAttackFrameContent OBJECT-TYPE
|
|
SYNTAX OCTET STRING(SIZE(0..64))
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The ARP messages sent from the attack source."
|
|
::= { mySMPTraps 12 }
|
|
|
|
mySMPArpAttackStatus OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Show whether the device is attacked by the attack source or not.
|
|
true: attack occurred; false: attack has been removed."
|
|
::= { mySMPTraps 13 }
|
|
|
|
mySMPArpAttackCriticalStatus OBJECT-TYPE
|
|
SYNTAX INTEGER{
|
|
critical(1), -- Slight ARP attack, infulencing normal operation of the network
|
|
-- and advertising the SMP Server.
|
|
emergencies(2) -- Severe ARP attack, leading to network crash. System blocks this
|
|
-- attack automatically and advertise the SMP Server.
|
|
}
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The severity level of device attack by attack source:
|
|
critical(1), -- Slight ARP attack, infulencing normal operation of the network
|
|
and advertising the SMP Server.
|
|
emergencies(2) -- Severe ARP attack, leading to network crash. System blocks this
|
|
attack automatically and advertise the SMP Server. "
|
|
::= { mySMPTraps 14 }
|
|
|
|
mySMPArpAttackMac OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"MAC address for the device connecting the attack source."
|
|
::= { mySMPTraps 15 }
|
|
|
|
mySMPArpAttackInterfaceIndex OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface index for the device connecting the attack source."
|
|
::= { mySMPTraps 16 }
|
|
|
|
mySMPArpAttackTrap NOTIFICATION-TYPE
|
|
OBJECTS {mySMPArpAttackSubnetIP, mySMPArpAttackSubnetIPNum, mySMPArpAttackInterfaceSlot,
|
|
mySMPArpAttackInterfacePort, mySMPArpAttackInterfaceVlanID, mySMPArpAttackFrameContent,
|
|
mySMPArpAttackStatus, mySMPArpAttackCriticalStatus, mySMPArpAttackMac,
|
|
mySMPArpAttackInterfaceIndex}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Trap message includes:
|
|
IP addresses for all subnets of SVI where the attack source locates,
|
|
Subnet IP address number,
|
|
Slot number the attack source attacks,
|
|
Port number the attack source attacks,
|
|
VLAN ID of the VLAN the attack source belongs to,
|
|
ARP message(64 bytes),
|
|
Advertisement of attack occurrance and removal,
|
|
MAC address for the device connecting the attack source,
|
|
Interface index for the device connecting the attack source."
|
|
::= { mySMPTraps 17 }
|
|
|
|
mySMPMIBConformance OBJECT IDENTIFIER ::= { mySMPMIB 3 }
|
|
mySMPMIBCompliances OBJECT IDENTIFIER ::= { mySMPMIBConformance 1 }
|
|
mySMPMIBGroups OBJECT IDENTIFIER ::= { mySMPMIBConformance 2 }
|
|
|
|
-- compliance statements
|
|
myDeviceMIBCompliance MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The compliance statement for entities which implement
|
|
the My SMP MIB"
|
|
MODULE -- this module
|
|
MANDATORY-GROUPS { mySMPServerMibGroup,
|
|
mySMPClientMibGroup,
|
|
mySMPPolicyMibGroup,
|
|
mySMPFrameRelayMibGroup}
|
|
::= { mySMPMIBCompliances 1 }
|
|
|
|
mySMPServerMibGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
mySMPServer,
|
|
mySMPServerKey
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Collection of SMP Server information."
|
|
::= { mySMPMIBGroups 1 }
|
|
|
|
mySMPClientMibGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
mySMPEventSendSlice
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Collection of restricted information of SMP Client management."
|
|
::= { mySMPMIBGroups 2 }
|
|
|
|
mySMPPolicyMibGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
mySMPPolicyDelete,
|
|
mySMPPolicyChecksum,
|
|
mySMPPolicyIndex,
|
|
mySMPPolicyStatus,
|
|
mySMPPolicyInstallPort,
|
|
mySMPPolicyType,
|
|
mySMPPolicyContent,
|
|
mySMPPolicyMask,
|
|
mySMPPolicyName
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Policy information collection."
|
|
::= { mySMPMIBGroups 3 }
|
|
|
|
mySMPFrameRelayMibGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
mySMPFrameRelayIndex,
|
|
mySMPFrameRelayContent,
|
|
mySMPFrameRelayLength,
|
|
mySMPFrameRelayDestPort,
|
|
mySMPFrameRelayDestVlan
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Information collection of message forward table."
|
|
::= { mySMPMIBGroups 4 }
|
|
|
|
|
|
END
|