383 lines
13 KiB
Plaintext
383 lines
13 KiB
Plaintext
-- *****************************************************************
|
|
-- QTECH-SECZONE-CONTEXT-MIB.mib: Qtech security zone MIB file for multiple context
|
|
--
|
|
-- December 2009, rendh
|
|
--
|
|
-- Copyright (c) 2009 by Qtech Networks Co.,Ltd.
|
|
-- All rights reserved.
|
|
--
|
|
-- *****************************************************************
|
|
--
|
|
QTECH-SECZONE-CONTEXT-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY,
|
|
OBJECT-TYPE,
|
|
IpAddress
|
|
FROM SNMPv2-SMI
|
|
DisplayString,
|
|
RowStatus
|
|
FROM SNMPv2-TC
|
|
MODULE-COMPLIANCE,
|
|
OBJECT-GROUP
|
|
FROM SNMPv2-CONF
|
|
ConfigStatus
|
|
FROM QTECH-TC
|
|
qtechMgmt
|
|
FROM QTECH-SMI;
|
|
|
|
qtechSecZoneVCMIB MODULE-IDENTITY
|
|
LAST-UPDATED "200912060000Z"
|
|
ORGANIZATION "Qtech Networks Co.,Ltd."
|
|
CONTACT-INFO
|
|
"
|
|
Tel: 4008-111-000
|
|
|
|
E-mail: service@qtech.com.cn"
|
|
DESCRIPTION
|
|
"This module defines my Security Zone mibs for multiple context."
|
|
REVISION "200912060000Z"
|
|
DESCRIPTION
|
|
"Initial version of this MIB module."
|
|
::= { qtechMgmt 68 }
|
|
|
|
qtechSecZoneVCMIBObjects OBJECT IDENTIFIER ::= { qtechSecZoneVCMIB 1 }
|
|
|
|
|
|
-- *****************************************************************************************
|
|
-- define Security Zone chain
|
|
-- *****************************************************************************************
|
|
qtechSecZoneChainVCTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF QtechSecZoneChainVCEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of Security Zone Chain entries."
|
|
::= { qtechSecZoneVCMIBObjects 1 }
|
|
|
|
qtechSecZoneChainVCEntry OBJECT-TYPE
|
|
SYNTAX QtechSecZoneChainVCEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entry contains chain name and level."
|
|
INDEX {qtechSecZoneContextNameVC,qtechSecZoneChainNameVC }
|
|
::= { qtechSecZoneChainVCTable 1 }
|
|
|
|
QtechSecZoneChainVCEntry ::=
|
|
SEQUENCE {
|
|
qtechSecZoneContextNameVC DisplayString,
|
|
qtechSecZoneChainNameVC DisplayString,
|
|
qtechSecZoneLevelVC INTEGER,
|
|
qtechSecZoneAclNameVC DisplayString,
|
|
qtechSecZoneViolationNotifyThreshVC INTEGER,
|
|
qtechSecZoneViolationNotifyActionVC INTEGER,
|
|
qtechSecZoneViolationBlockThreshVC INTEGER,
|
|
qtechSecZoneViolationBlockActionVC INTEGER,
|
|
qtechSecZoneViolationBlockTimeoutVC INTEGER,
|
|
qtechSecZoneChainEntryStatusVC RowStatus
|
|
}
|
|
|
|
|
|
qtechSecZoneContextNameVC OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (1..31))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"context name of this entry."
|
|
::= { qtechSecZoneChainVCEntry 1 }
|
|
|
|
qtechSecZoneChainNameVC OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (1..32))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"security zone chain name of this entry."
|
|
::= { qtechSecZoneChainVCEntry 2 }
|
|
|
|
qtechSecZoneLevelVC OBJECT-TYPE
|
|
SYNTAX INTEGER(0..100)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Config level of this Seczone. value 0 means level is not defined so cannot use for comparing two zones's level "
|
|
DEFVAL{ 0 }
|
|
::= { qtechSecZoneChainVCEntry 3 }
|
|
|
|
qtechSecZoneAclNameVC OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (1..32))
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Access list name of security zone belong to. "
|
|
::= { qtechSecZoneChainVCEntry 4 }
|
|
|
|
qtechSecZoneViolationNotifyThreshVC OBJECT-TYPE
|
|
SYNTAX INTEGER(0..65535)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Threshold of security zone access violation . value 0 means no notify."
|
|
DEFVAL{ 0 }
|
|
::= {qtechSecZoneChainVCEntry 5 }
|
|
|
|
qtechSecZoneViolationNotifyActionVC OBJECT-TYPE
|
|
SYNTAX INTEGER{
|
|
nologtrap(0),
|
|
log(1),
|
|
trap(2),
|
|
logtrap(3)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Action of security zone access violation Notify:nologtrap(0),log (1), trap (2) , log and trap(3)."
|
|
DEFVAL{ 0 }
|
|
::= {qtechSecZoneChainVCEntry 6 }
|
|
|
|
qtechSecZoneViolationBlockThreshVC OBJECT-TYPE
|
|
SYNTAX INTEGER(0..65535)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Threshold of security zone access violation Blocking. value 0 means no block."
|
|
DEFVAL{ 0 }
|
|
::= {qtechSecZoneChainVCEntry 7 }
|
|
|
|
qtechSecZoneViolationBlockActionVC OBJECT-TYPE
|
|
SYNTAX INTEGER{
|
|
globalblock (1),
|
|
zoneblock(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Action of security zone access violation Blocking:globalblock(1),zoneblock(2) ."
|
|
DEFVAL{ 1 }
|
|
::= {qtechSecZoneChainVCEntry 8 }
|
|
|
|
qtechSecZoneViolationBlockTimeoutVC OBJECT-TYPE
|
|
SYNTAX INTEGER (0..3600)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Timeout(minutes)of security zone access violation Blocking . value 0 means block permanently"
|
|
DEFVAL{ 1 }
|
|
::= {qtechSecZoneChainVCEntry 9 }
|
|
|
|
qtechSecZoneChainEntryStatusVC OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status of this entry, set its value to invalid will delete this entry.
|
|
set its value to valid has no effect."
|
|
::= { qtechSecZoneChainVCEntry 10 }
|
|
|
|
-- *****************************************************************************************
|
|
-- define zone to zone policy for multi context
|
|
-- *****************************************************************************************
|
|
|
|
|
|
qtechSecZone2ZoneVCTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF QtechSecZone2ZoneVCEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of Two Security Zone entries."
|
|
::= { qtechSecZoneVCMIBObjects 2 }
|
|
|
|
qtechSecZone2ZoneVCEntry OBJECT-TYPE
|
|
SYNTAX QtechSecZone2ZoneVCEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entry contains policy from one Zone to another Zone ."
|
|
INDEX { qtechZone2ZoneContextNameVC, qtechZoneFirstNameVC ,qtechZoneSecondNameVC,qtechZone2ZoneAclNameVC }
|
|
::= { qtechSecZone2ZoneVCTable 1 }
|
|
|
|
QtechSecZone2ZoneVCEntry ::=
|
|
SEQUENCE {
|
|
qtechZone2ZoneContextNameVC DisplayString,
|
|
qtechZoneFirstNameVC DisplayString,
|
|
qtechZoneSecondNameVC DisplayString,
|
|
qtechZone2ZoneAclNameVC DisplayString,
|
|
qtechZone2ZoneEntryStautsVC RowStatus
|
|
}
|
|
|
|
qtechZone2ZoneContextNameVC OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (1..31))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"context name of this entry."
|
|
::= { qtechSecZone2ZoneVCEntry 1 }
|
|
|
|
qtechZoneFirstNameVC OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (1..32))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"First zone name of this entry."
|
|
::= { qtechSecZone2ZoneVCEntry 2 }
|
|
|
|
qtechZoneSecondNameVC OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (1..32))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Second zone name of this entry."
|
|
::= { qtechSecZone2ZoneVCEntry 3 }
|
|
|
|
qtechZone2ZoneAclNameVC OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (1..32))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Key chain name of this entry."
|
|
::= { qtechSecZone2ZoneVCEntry 4 }
|
|
|
|
qtechZone2ZoneEntryStautsVC OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"entry status for this list."
|
|
::= { qtechSecZone2ZoneVCEntry 5 }
|
|
|
|
-- *****************************************************************************************
|
|
-- blocking ip table for multi context
|
|
-- *****************************************************************************************
|
|
|
|
qtechSecZoneBlockingVCTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF QtechSecZoneBlockingVCEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of IP blocking entries."
|
|
::= { qtechSecZoneVCMIBObjects 3 }
|
|
|
|
qtechSecZoneBlockingVCEntry OBJECT-TYPE
|
|
SYNTAX QtechSecZoneBlockingVCEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entry contains blocking IPs ."
|
|
INDEX { qtechBockingContextNameVC , qtechBockingIPVC }
|
|
::= { qtechSecZoneBlockingVCTable 1 }
|
|
|
|
|
|
|
|
QtechSecZoneBlockingVCEntry ::=
|
|
SEQUENCE {qtechBockingContextNameVC DisplayString,
|
|
qtechBockingIPVC IpAddress,
|
|
qtechBockingCurrentStatusVC INTEGER,
|
|
qtechBockingTryAccessZoneNameVC DisplayString,
|
|
qtechBockingEntryStatusVC ConfigStatus
|
|
}
|
|
|
|
qtechBockingContextNameVC OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (1..31))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"context name of this entry."
|
|
::= { qtechSecZoneBlockingVCEntry 1 }
|
|
|
|
qtechBockingIPVC OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"ip address of Blocking table.To clear all blocking IP use 0.0.0.0 "
|
|
::= { qtechSecZoneBlockingVCEntry 2 }
|
|
|
|
qtechBockingCurrentStatusVC OBJECT-TYPE
|
|
SYNTAX INTEGER{
|
|
globalblock (1),
|
|
zoneblock(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"status of security zone access violation Blocking:globalblock(1),zoneblock(2)."
|
|
::= { qtechSecZoneBlockingVCEntry 3 }
|
|
|
|
qtechBockingTryAccessZoneNameVC OBJECT-TYPE
|
|
SYNTAX DisplayString(SIZE (0..32))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Try access Zone name of blocking IP.It indicate that
|
|
this doesn't match any Zone if this string is null"
|
|
::= { qtechSecZoneBlockingVCEntry 4 }
|
|
|
|
qtechBockingEntryStatusVC OBJECT-TYPE
|
|
SYNTAX ConfigStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status of this entry, set its value to invalid (2)will delete this entry.
|
|
set its value to valid(1)has no effect."
|
|
::= { qtechSecZoneBlockingVCEntry 5 }
|
|
|
|
|
|
|
|
|
|
|
|
-- compliance statements
|
|
|
|
qtechSecZoneVCMIBConformance OBJECT IDENTIFIER ::= { qtechSecZoneVCMIB 3 }
|
|
qtechSecZoneVCMIBCompliances OBJECT IDENTIFIER ::= { qtechSecZoneVCMIBConformance 1 }
|
|
qtechSecZoneVCMIBGroups OBJECT IDENTIFIER ::= { qtechSecZoneVCMIBConformance 2 }
|
|
|
|
qtechSecZoneVCMIBCompliance MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The compliance statement for entities which implement
|
|
the security zone MIB for multiple context"
|
|
MODULE -- this module
|
|
MANDATORY-GROUPS { qtechSecZoneVCMIBGroup
|
|
}
|
|
|
|
::= { qtechSecZoneVCMIBCompliances 1 }
|
|
|
|
-- units of conformance
|
|
|
|
qtechSecZoneVCMIBGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
qtechSecZoneContextNameVC,
|
|
qtechSecZoneChainNameVC,
|
|
qtechSecZoneLevelVC,
|
|
qtechSecZoneAclNameVC,
|
|
qtechSecZoneViolationNotifyThreshVC,
|
|
qtechSecZoneViolationNotifyActionVC,
|
|
qtechSecZoneViolationBlockThreshVC,
|
|
qtechSecZoneViolationBlockActionVC,
|
|
qtechSecZoneViolationBlockTimeoutVC,
|
|
qtechSecZoneChainEntryStatusVC,
|
|
|
|
qtechZone2ZoneContextNameVC,
|
|
qtechZoneFirstNameVC,
|
|
qtechZoneSecondNameVC,
|
|
qtechZone2ZoneAclNameVC,
|
|
qtechZone2ZoneEntryStautsVC,
|
|
|
|
qtechBockingContextNameVC ,
|
|
qtechBockingIPVC,
|
|
qtechBockingCurrentStatusVC,
|
|
qtechBockingTryAccessZoneNameVC,
|
|
qtechBockingEntryStatusVC
|
|
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects providing Security Zone management and
|
|
opertion to a My agent."
|
|
::= { qtechSecZoneVCMIBGroups 1 }
|
|
|
|
--
|
|
|
|
|
|
END
|