298 lines
9.0 KiB
Plaintext
298 lines
9.0 KiB
Plaintext
RUCKUS-DHCPV6-SNOOPING-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Integer32, IpAddress
|
|
FROM SNMPv2-SMI
|
|
snSwitch
|
|
FROM FOUNDRY-SN-SWITCH-GROUP-MIB
|
|
NDType, NDState
|
|
FROM RUCKUS-NDI-MIB
|
|
MacAddress, TruthValue, TEXTUAL-CONVENTION
|
|
FROM SNMPv2-TC
|
|
Ipv6Address
|
|
FROM IPV6-TC
|
|
VlanIndex
|
|
FROM Q-BRIDGE-MIB --RFC 2674
|
|
DisplayString
|
|
FROM FOUNDRY-SN-AGENT-MIB
|
|
ifIndex
|
|
FROM IF-MIB; --RFC 2863
|
|
|
|
ruckusDhcpv6SnoopMIB MODULE-IDENTITY
|
|
LAST-UPDATED "202008040000Z" -- Aug 4, 2020
|
|
ORGANIZATION "Ruckus Wireless, Inc."
|
|
CONTACT-INFO
|
|
"Technical Support Center
|
|
350 West Java Drive,
|
|
Sunnyvale, CA 94089, USA
|
|
Support URL: https://support.ruckuswireless.com
|
|
Phone: +1-855-782-5871
|
|
ROW TF Numbers: https://support.ruckuswireless.com/contact-us"
|
|
DESCRIPTION
|
|
"Management Information for configuration of DHCPv6 Snooping feature.
|
|
DHCPv6 Snooping is a security feature which enables the device to filter
|
|
untrusted DHCPv6 packets in a subnet. It can also stop unauthorized DHCPv6
|
|
serves and prevent errors due to user mis-configuration servers.
|
|
|
|
Copyright 1996-2020 Ruckus Wireless, Inc.
|
|
All rights reserved.
|
|
This Ruckus Wireless, Inc SNMP Management Information Base Specification
|
|
embodies Ruckus Wireless, Inc' confidential and proprietary
|
|
intellectual property. Ruckus Wireless, Inc retains all
|
|
title and ownership in the Specification, including any revisions.
|
|
|
|
This Specification is supplied AS IS, and Ruckus Wireless, Inc makes
|
|
no warranty, either express or implied, as to the use,
|
|
operation, condition, or performance of the specification, and any unintended
|
|
consequence it may on the user environment."
|
|
|
|
::= { snSwitch 48}
|
|
|
|
--
|
|
-- Textual Conventions
|
|
--
|
|
|
|
ClearAction ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Represents action of Clear operation to be used."
|
|
SYNTAX INTEGER{
|
|
valid(0),
|
|
clear(1)
|
|
}
|
|
|
|
ruckusDhcpv6SnoopNotify OBJECT IDENTIFIER ::= { ruckusDhcpv6SnoopMIB 0 }
|
|
ruckusDhcpv6SnoopObjects OBJECT IDENTIFIER ::= { ruckusDhcpv6SnoopMIB 1 }
|
|
ruckusDhcpv6SnoopConformance OBJECT IDENTIFIER ::= { ruckusDhcpv6SnoopMIB 2 }
|
|
|
|
ruckusDhcpv6SnoopGlobalObjects OBJECT IDENTIFIER ::= { ruckusDhcpv6SnoopObjects 1 }
|
|
ruckusDhcpv6SnoopVlan OBJECT IDENTIFIER ::= { ruckusDhcpv6SnoopObjects 2 }
|
|
ruckusDhcpv6SnoopInterface OBJECT IDENTIFIER ::= { ruckusDhcpv6SnoopObjects 3 }
|
|
ruckusDhcpv6SnoopBind OBJECT IDENTIFIER ::= { ruckusDhcpv6SnoopObjects 4 }
|
|
|
|
--
|
|
-- DHCPv6 Snooping global Scalar Object
|
|
--
|
|
|
|
ruckusDhcpv6SnoopGlobalClearOper OBJECT-TYPE
|
|
SYNTAX ClearAction
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"valid(0) - this value is always returned when the variable is read.
|
|
clear(1) - setting the variable to this value clears all entries in the
|
|
DHCPv6 binding database."
|
|
::= { ruckusDhcpv6SnoopGlobalObjects 1 }
|
|
|
|
--
|
|
-- DHCPv6 Snooping VLAN configuration table
|
|
--
|
|
|
|
ruckusDhcpv6SnoopVlanConfigTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RuckusDhcpv6SnoopVlanConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table provides the mechanism to control DHCPv6 Snooping
|
|
per VLAN. When a VLAN is created in a device
|
|
supporting this table, a corresponding entry of this table
|
|
will be added."
|
|
::= { ruckusDhcpv6SnoopVlan 1 }
|
|
|
|
ruckusDhcpv6SnoopVlanConfigEntry OBJECT-TYPE
|
|
SYNTAX RuckusDhcpv6SnoopVlanConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A row instance contains the configuration to enable
|
|
or disable DHCPv6 Snooping at the existing VLAN."
|
|
INDEX { ruckusDhcpv6SnoopVlanConfigVLanId }
|
|
::= { ruckusDhcpv6SnoopVlanConfigTable 1 }
|
|
|
|
RuckusDhcpv6SnoopVlanConfigEntry ::= SEQUENCE {
|
|
ruckusDhcpv6SnoopVlanConfigVLanId
|
|
VlanIndex,
|
|
ruckusDhcpv6SnoopVlanConfigDhcpv6SnoopEnable
|
|
TruthValue
|
|
}
|
|
|
|
ruckusDhcpv6SnoopVlanConfigVLanId OBJECT-TYPE
|
|
SYNTAX VlanIndex
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the VLAN number on which DHCP
|
|
Snooping feature is configured."
|
|
::= { ruckusDhcpv6SnoopVlanConfigEntry 1 }
|
|
|
|
ruckusDhcpv6SnoopVlanConfigDhcpv6SnoopEnable OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates whether DHCPv6 Snooping is enabled in this VLAN.
|
|
|
|
If this object is set to 'true', DHCPv6 Snooping is enabled.
|
|
If this object is set to 'false', DHCPv6 Snooping is disabled."
|
|
DEFVAL { false }
|
|
::= { ruckusDhcpv6SnoopVlanConfigEntry 2 }
|
|
|
|
--
|
|
-- DHCPv6 Snooping Interface configuration table
|
|
--
|
|
|
|
ruckusDhcpv6SnoopIfConfigTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RuckusDhcpv6SnoopIfConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table provides the mechanism to configure the trust
|
|
state for DHCPv6 Snooping purpose at each physical
|
|
interface."
|
|
::= { ruckusDhcpv6SnoopInterface 1 }
|
|
|
|
ruckusDhcpv6SnoopIfConfigEntry OBJECT-TYPE
|
|
SYNTAX RuckusDhcpv6SnoopIfConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A row instance contains the configuration to enable or
|
|
disable trust state for DHCPv6 Snooping at each
|
|
physical interface capable of this feature."
|
|
INDEX { ifIndex }
|
|
::= { ruckusDhcpv6SnoopIfConfigTable 1 }
|
|
|
|
RuckusDhcpv6SnoopIfConfigEntry ::= SEQUENCE {
|
|
ruckusDhcpv6SnoopIfConfigTrustValue
|
|
TruthValue
|
|
}
|
|
|
|
ruckusDhcpv6SnoopIfConfigTrustValue OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates whether the interface is trusted for
|
|
DHCPv6 Snooping.
|
|
If this object is set to 'true', the interface is trusted.
|
|
DHCPv6 packets coming to this interface will be forwarded
|
|
without checking.
|
|
If this object is set to 'false', the interface is not trusted.
|
|
DHCPv6 packets received on this interface will be subjected
|
|
to DHCPv6 checks."
|
|
DEFVAL { false }
|
|
::= { ruckusDhcpv6SnoopIfConfigEntry 1 }
|
|
|
|
--
|
|
-- DHCPv6 Snooping binding database table
|
|
-- Use this table to display DHCPv6 Snooping entries
|
|
--
|
|
|
|
ruckusDhcpv6SnoopBindTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF RuckusDhcpv6SnoopBindEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table provides the information of DHCPv6 snooping
|
|
binding database learnt by the device"
|
|
::= { ruckusDhcpv6SnoopBind 1 }
|
|
|
|
ruckusDhcpv6SnoopBindEntry OBJECT-TYPE
|
|
SYNTAX RuckusDhcpv6SnoopBindEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A row instance contains the information of DHCPv6 snoonping entry."
|
|
INDEX { ruckusDhcpv6SnoopBindMacAddr, ruckusDhcpv6SnoopBindVlanId}
|
|
::= { ruckusDhcpv6SnoopBindTable 1 }
|
|
|
|
RuckusDhcpv6SnoopBindEntry ::= SEQUENCE {
|
|
ruckusDhcpv6SnoopBindMacAddr
|
|
MacAddress,
|
|
ruckusDhcpv6SnoopBindVlanId
|
|
VlanIndex,
|
|
ruckusDhcpv6SnoopBindIpAddr
|
|
Ipv6Address,
|
|
ruckusDhcpv6SnoopBindType
|
|
NDType,
|
|
ruckusDhcpv6SnoopBindState
|
|
NDState,
|
|
ruckusDhcpv6SnoopBindPort
|
|
Integer32,
|
|
ruckusDhcpv6SnoopBindClearOper
|
|
ClearAction
|
|
}
|
|
|
|
ruckusDhcpv6SnoopBindMacAddr OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The device MAC address."
|
|
::= { ruckusDhcpv6SnoopBindEntry 1 }
|
|
|
|
ruckusDhcpv6SnoopBindVlanId OBJECT-TYPE
|
|
SYNTAX VlanIndex
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the VLAN number on which DHCPv6 snooping
|
|
feature is configured."
|
|
::= { ruckusDhcpv6SnoopBindEntry 2 }
|
|
|
|
ruckusDhcpv6SnoopBindIpAddr OBJECT-TYPE
|
|
SYNTAX Ipv6Address
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The device IP address."
|
|
::= { ruckusDhcpv6SnoopBindEntry 3}
|
|
|
|
ruckusDhcpv6SnoopBindType OBJECT-TYPE
|
|
SYNTAX NDType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the ND entry"
|
|
::= { ruckusDhcpv6SnoopBindEntry 4 }
|
|
|
|
ruckusDhcpv6SnoopBindState OBJECT-TYPE
|
|
SYNTAX NDState
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The state of the ND entry"
|
|
::= { ruckusDhcpv6SnoopBindEntry 5 }
|
|
|
|
ruckusDhcpv6SnoopBindPort OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The port of the ND entry"
|
|
::= { ruckusDhcpv6SnoopBindEntry 6 }
|
|
|
|
ruckusDhcpv6SnoopBindClearOper OBJECT-TYPE
|
|
SYNTAX ClearAction
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"valid(0) - this value is always returned when the variable is read.
|
|
clear(1) - setting the variable to this value clears this entry in the
|
|
DHCPv6 binding database."
|
|
::= {ruckusDhcpv6SnoopBindEntry 7 }
|
|
|
|
-- --------------------------------------------------------------------------------
|
|
-- DHCPv6Snooping MIB Conformance
|
|
-- --------------------------------------------------------------------------------
|
|
ruckusDhcpv6SnoopCompliances OBJECT IDENTIFIER ::= { ruckusDhcpv6SnoopConformance 1 }
|
|
|
|
ruckusDhcpv6SnoopCompliance MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION "The compliance statement for entities which
|
|
implement RUCKUS-DHCPv6Snoop-MIB."
|
|
MODULE -- this module
|
|
::= { ruckusDhcpv6SnoopConformance 1 }
|
|
|
|
END
|