376 lines
11 KiB
Plaintext
376 lines
11 KiB
Plaintext
--=================================================================
|
|
-- Copyright (C) 2022 by HUAWEI TECHNOLOGIES. All rights reserved
|
|
--
|
|
-- Description:HUAWEI MACSEC MIB
|
|
-- Reference:
|
|
-- Version: V1.06
|
|
-- History:
|
|
-- =================================================================
|
|
|
|
HUAWEI-MACSEC-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
hwDatacomm
|
|
FROM HUAWEI-MIB
|
|
OBJECT-GROUP, MODULE-COMPLIANCE, NOTIFICATION-GROUP
|
|
FROM SNMPv2-CONF
|
|
Unsigned32, OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE
|
|
FROM SNMPv2-SMI;
|
|
|
|
|
|
hwMACsec MODULE-IDENTITY
|
|
LAST-UPDATED "202207211521Z" -- 07/21, 2022
|
|
ORGANIZATION
|
|
"Huawei Technologies Co.,Ltd."
|
|
CONTACT-INFO
|
|
"Huawei Industrial Base
|
|
Bantian, Longgang
|
|
Shenzhen 518129
|
|
People's Republic of China
|
|
Website: http://www.huawei.com
|
|
Email: support@huawei.com"
|
|
DESCRIPTION
|
|
"This MIB describes objects used for MACsec."
|
|
REVISION "202207211521Z"
|
|
DESCRIPTION
|
|
"Delete useless comments."
|
|
REVISION "202202231521Z"
|
|
DESCRIPTION
|
|
"Modify MAX-ACCESS of hwMacsecRcvRspTimeoutIfIndex,hwMacsecRcvRspTimeoutRole,hwMacsecRcvRspTimeoutLocalPort."
|
|
REVISION "202011232003Z"
|
|
DESCRIPTION
|
|
"Add NOTIFICATION-TYPE of hwMACsecIfName, hwMACsecFailReason,hwMACsecFailNotify."
|
|
|
|
REVISION "201804231622Z"
|
|
DESCRIPTION
|
|
"Add NOTIFICATION-TYPE of hwMACsecPortCipherPeer, hwMACsecPortCipher,hwCipherSwitchFailAlarm,hwMACsecCipherSwitchReason, hwMACsecCipherSwitchFailReason."
|
|
|
|
REVISION "201711031622Z"
|
|
DESCRIPTION
|
|
"Add NOTIFICATION-TYPE of hwMacsecRcvRspTimeout, hwMacsecRcvRspTimeoutResume."
|
|
|
|
REVISION "201603101013Z"
|
|
DESCRIPTION
|
|
"Modify MAX-ACCESS of hwMACsecPortRole ,hwMACsecPortName,hwMACsecPortOldCKN,hwMACsecPortNewCKN."
|
|
|
|
REVISION "201603101013Z"
|
|
DESCRIPTION
|
|
"This MIB describes objects used for MACsec."
|
|
|
|
|
|
|
|
::= { hwDatacomm 347 }
|
|
|
|
|
|
--
|
|
-- Node definitions
|
|
--
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1
|
|
hwMACsecMibObjects OBJECT IDENTIFIER ::= { hwMACsec 1 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1
|
|
hwMACsecPortCfgTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF HwMACsecPortCfgEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The port's MACsec configuration table."
|
|
::= { hwMACsecMibObjects 1 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1
|
|
hwMACsecPortCfgEntry OBJECT-TYPE
|
|
SYNTAX HwMACsecPortCfgEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry in the MACsec configuration table."
|
|
INDEX { hwMACsecIfIndex }
|
|
::= { hwMACsecPortCfgTable 1 }
|
|
|
|
HwMACsecPortCfgEntry ::=
|
|
SEQUENCE {
|
|
hwMACsecIfIndex
|
|
Unsigned32,
|
|
hwMACsecPortRole
|
|
INTEGER,
|
|
hwMACsecPortName
|
|
OCTET STRING,
|
|
hwMACsecPortOldCKN
|
|
OCTET STRING,
|
|
hwMACsecPortNewCKN
|
|
OCTET STRING,
|
|
hwMACsecPortCipherPeer
|
|
OCTET STRING,
|
|
hwMACsecPortCipher
|
|
OCTET STRING,
|
|
hwMACsecIfName
|
|
OCTET STRING,
|
|
hwMACsecFailReason
|
|
OCTET STRING
|
|
}
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1.1
|
|
hwMACsecIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface index."
|
|
::= { hwMACsecPortCfgEntry 1 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1.2
|
|
hwMACsecPortRole OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
nonkeyserver(1),
|
|
keyserver(2)
|
|
}
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates the MKA role of the port.
|
|
Options:
|
|
1. nonkeyserver(1) -indicates the MKA role of the port is supplicant.
|
|
2. keyserver(2) -indicates the MKA role of the port is key server. "
|
|
DEFVAL { nonkeyserver }
|
|
::= { hwMACsecPortCfgEntry 2 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1.3
|
|
hwMACsecPortName OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The port name."
|
|
::= { hwMACsecPortCfgEntry 3 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1.4
|
|
hwMACsecPortOldCKN OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The using CKN of this port."
|
|
::= { hwMACsecPortCfgEntry 4 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1.5
|
|
hwMACsecPortNewCKN OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The configed CKN of this port."
|
|
::= { hwMACsecPortCfgEntry 5 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1.6
|
|
hwMACsecPortCipherPeer OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The configed Cipher Suite of peer."
|
|
::= { hwMACsecPortCfgEntry 6 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1.7
|
|
hwMACsecPortCipher OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The configed Cipher Suite of this port."
|
|
::= { hwMACsecPortCfgEntry 7 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1.8
|
|
hwMACsecIfName OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface name."
|
|
::= { hwMACsecPortCfgEntry 8 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.1.1.9
|
|
hwMACsecFailReason OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The reason that MACsec failed to run on an interface."
|
|
::= { hwMACsecPortCfgEntry 9 }
|
|
|
|
--
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.2
|
|
hwMacsecRcvRspTimeoutTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF HwMacsecRcvRspTimeoutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"No heartbeat response alarm list."
|
|
::= { hwMACsecMibObjects 2 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.2.1
|
|
hwMacsecRcvRspTimeoutEntry OBJECT-TYPE
|
|
SYNTAX HwMacsecRcvRspTimeoutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry in the no heartbeat response alarm list."
|
|
INDEX { hwMacsecRcvRspTimeoutIfIndex, hwMacsecRcvRspTimeoutRole, hwMacsecRcvRspTimeoutLocalPort }
|
|
::= { hwMacsecRcvRspTimeoutTable 1 }
|
|
|
|
HwMacsecRcvRspTimeoutEntry ::=
|
|
SEQUENCE {
|
|
hwMacsecRcvRspTimeoutIfIndex
|
|
Unsigned32,
|
|
hwMacsecRcvRspTimeoutRole
|
|
Unsigned32,
|
|
hwMacsecRcvRspTimeoutLocalPort
|
|
OCTET STRING
|
|
}
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.2.1.1
|
|
hwMacsecRcvRspTimeoutIfIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Interface index."
|
|
::= { hwMacsecRcvRspTimeoutEntry 1 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.2.1.2
|
|
hwMacsecRcvRspTimeoutRole OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Device role."
|
|
::= { hwMacsecRcvRspTimeoutEntry 2 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.1.2.1.3
|
|
hwMacsecRcvRspTimeoutLocalPort OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Local port."
|
|
::= { hwMacsecRcvRspTimeoutEntry 3 }
|
|
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2
|
|
hwMACsecTraps OBJECT IDENTIFIER ::= { hwMACsec 2 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.1
|
|
hwMACsecTrapOID OBJECT IDENTIFIER ::= { hwMACsecTraps 1 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.1.1
|
|
hwMACsecCKNSwitchReason OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The reason of CKN switching."
|
|
::= { hwMACsecTrapOID 1 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.1.2
|
|
hwMACsecCKNSwitchFailReason OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The reason of CKN switching failed."
|
|
::= { hwMACsecTrapOID 2 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.1.3
|
|
hwMACsecCipherSwitchReason OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The reason of Cipher Suite switching."
|
|
::= { hwMACsecTrapOID 3 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.1.4
|
|
hwMACsecCipherSwitchFailReason OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The reason of Cipher Suite switching failed."
|
|
::= { hwMACsecTrapOID 4 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.2
|
|
hwCKNSwitchFailAlarm NOTIFICATION-TYPE
|
|
OBJECTS { hwMACsecPortRole, hwMACsecPortName, hwMACsecPortOldCKN, hwMACsecPortNewCKN, hwMACsecCKNSwitchReason, hwMACsecCKNSwitchFailReason }
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Failed to switch the CKN."
|
|
::= { hwMACsecTraps 2 }
|
|
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.3
|
|
hwMacsecRcvRspTimeout NOTIFICATION-TYPE
|
|
OBJECTS {hwMacsecRcvRspTimeoutIfIndex, hwMacsecRcvRspTimeoutRole, hwMacsecRcvRspTimeoutLocalPort}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"No heartbeat response alarm list."
|
|
::= { hwMACsecTraps 3 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.4
|
|
hwMacsecRcvRspTimeoutResume NOTIFICATION-TYPE
|
|
OBJECTS {hwMacsecRcvRspTimeoutIfIndex, hwMacsecRcvRspTimeoutRole, hwMacsecRcvRspTimeoutLocalPort}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"No heartbeat response alarm resume list."
|
|
::= { hwMACsecTraps 4 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.5
|
|
hwCipherSwitchFailAlarm NOTIFICATION-TYPE
|
|
OBJECTS { hwMACsecPortRole, hwMACsecPortName, hwMACsecPortCipherPeer, hwMACsecPortCipher, hwMACsecCipherSwitchReason, hwMACsecCipherSwitchFailReason }
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Failed to switch the cipher suite."
|
|
::= { hwMACsecTraps 5 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.2.6
|
|
hwMACsecFailNotify NOTIFICATION-TYPE
|
|
OBJECTS { hwMACsecIfName, hwMACsecFailReason }
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Failed to run on an interface."
|
|
::= { hwMACsecTraps 6 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.3
|
|
hwMACsecConformance OBJECT IDENTIFIER ::= { hwMACsec 3 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.3.1
|
|
hwMACsecMibGroups MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The compliance statement for systems supporting this module."
|
|
MODULE -- this module
|
|
MANDATORY-GROUPS { hwMACsecBindGroup, hwMACsecTrapGroup }
|
|
::= { hwMACsecConformance 1 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.3.1.1
|
|
hwMACsecBindGroup OBJECT-GROUP
|
|
OBJECTS { hwMACsecPortRole, hwMACsecCKNSwitchReason, hwMACsecPortName, hwMACsecPortNewCKN, hwMACsecPortOldCKN,
|
|
hwMACsecCKNSwitchFailReason , hwMACsecPortCipherPeer, hwMACsecPortCipher, hwMACsecCipherSwitchReason, hwMACsecCipherSwitchFailReason}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The MACsec module's Bind group."
|
|
::= { hwMACsecMibGroups 1 }
|
|
|
|
-- 1.3.6.1.4.1.2011.5.25.347.3.1.2
|
|
hwMACsecTrapGroup NOTIFICATION-GROUP
|
|
NOTIFICATIONS { hwCKNSwitchFailAlarm,hwMacsecRcvRspTimeout,hwMacsecRcvRspTimeoutResume,hwCipherSwitchFailAlarm,hwMACsecFailNotify }
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The MACsec module's Notification group."
|
|
::= { hwMACsecMibGroups 2 }
|
|
END
|
|
|
|
--
|
|
-- HUAWEI-MACSEC-MIB.my
|
|
--
|