HOTWIRE-SYSTEM-MIB DEFINITIONS ::= BEGIN -- Version : 1.4 -- Last Updated : Wayne Jadoo 10/20/99 -- Last Updated : Rajesh Gowda 04/14/99 -- Last Updated : Rajesh Gowda 10/28/98 -- Created by : Prakash Easwar IMPORTS IpAddress, Counter FROM RFC1155-SMI OBJECT-TYPE FROM RFC-1212 TRAP-TYPE FROM RFC-1215 ifIndex, sysObjectID FROM RFC1213-MIB devSelfTestResults FROM PDN-HEALTHANDSTATUS-MIB ent-8800 FROM PDN-HEADER-MIB pdnClientConfigSubnetMask FROM HOT-DOMAIN-MIB; -- The Hotwire System MIB. This MIB is written specifically to -- configure, get statistics and do diagnostic tests on the -- device as a whole. -- History -- 9/3/96 -- 1. Added a new trap "EthernetStreamingOver" -- 2. Changed the description of the "EthernetStreaming". -- trap. -- 3. Changed the trap numbers so that they are unique -- across all the Hotwire MIBS. -- 4. Added an authentication failure trap for telnet and -- vt-100 based auth failures. -- 9/12/96 -- 1. Renamed object clearPowerSourceSwitchOverAlarm to -- enableRedundantPowerSourceFailureAlarm. Changed the -- semantics of this object. (change in requirements) -- 2. Renamed the powerSourceSwitchOver trap to -- redundantPowerSourceFailureTrap. Changed the -- description of this trap. (change in requirements) -- 3. Added a new Trap redundantPowerSourceDetected trap -- to compliment the redundantPowerSourceFailure trap. -- 4. Renamed the ethernetStreaming trap to -- ethernetJabber. Changed the description of this trap. -- Jabber is standard ethernet terminology. -- 5. Renamed the ethernetStreamingOver trap to -- ethernetJabberClear. Changed the description of this -- trap. Jabber is standard ethernet terminology. -- 9/27/96 -- 1. Added a device failure trap. The definition of a -- "device failure" on the device requires that this trap -- be sent. -- 2. Changed the following Traps to return the ifIndex as -- a varbind. (This helps indicate which interface -- is responsible for sending the Trap). -- a) ethernetJabber -- b) ethernetJabberClear -- c) ethernetJumbos -- d) ethernetRunts -- 3. Added a new object to the logicalEntityTable. This was -- required so that the logical entities could be uniquely -- identified. -- 4. Changed the varbinds for the CCN trap. This was done as -- a result of 3. -- 5. Added the in-range and out-range filter comparison types to the -- sysDevIpConfigSrcCompType and sysDevIpConfigSrcCompType as -- the device will be supporting these filter comparison types for the -- first release. -- 6. Added four new object to the sysDevIpFilterConfigTable to -- support (5) above. -- sysDevIpConfigFilterSrcPortNum -- sysDevIpConfigFilterMaxSrcPortNum -- sysDevIpConfigFilterDestPortNum -- sysDevIpConfigFilterMaxDestPortNum -- 10/6/96 -- 1. Changed top-level oids to represent the "New Paradyne" -- textual conventions -- 2. Made minor modifications for compilation purposes -- 10/28/96 -- 1. Added a new object logicalEntityDescr to the LogicalEntityTable -- 2. added SIZE to objects with OCTET STRING syntax -- 3. Changed the interesting variable for the "slot poll falure" and -- "new card detected" traps to "logicalEntityParentRelPos". This was -- done because this is what uniquely identifies a logical entity -- within a device. -- 4. changed the enterprise for traps to the MIB OID in which they -- are defined. This was decided in a MWG meeting -- 11/4/96 -- 1. Replaced "OCTET STRING" with DisplayString as all the objects -- with the OCTET STRING syntax are printable. -- 11/11/96 -- 1. Added a SelftestFailure Trap to this MIB. It is a requirement -- to send this trap. -- 2. Changed the size of the following objects of type DisplayString -- sysDevIpConfigFilterName -- sysDevIpBindingFilterName -- This was done to be consistent with the UI. -- 1/6/97 -- 1. Changed the description of the selfTestFailureTrap -- 1/7/97 -- 1. changed object names which have "tonga" in it to names -- which have "sys" in it. -- 1/8/97 -- 1. changed top level oid name "ent-tonga" to "ent-8500" -- 1/28/97 -- 1. changed top level oid name "ent-tonga" to "ent-8800" -- 1/31/97 -- 1. changed the description of the following objects -- logicalEntityIndex -- logicalEntityReadOnlyCommunity -- logicalEntityReadWriteCommunity -- logicalEntityResetToDefault -- logicalEntityIpAddress -- logicalEntitySubnetMask -- sysDevIpBindingFilterAction -- 4/8/97 -- 1. Replaced the table sysDevIpFilterStatsTable by two scalar -- objects -- a. sysDevIpInputPacketsFiltered -- b. sysDevIpOutputPacketsFiltered -- 2. Replaced the traps -- redundantPowerSourceFailure -- redundantPowerSourceDetected -- with the following traps -- powerSourceAFailure -- powerSourceAOperational -- powerSourceBFailure -- powerSourceBOperational -- 3. Replaced the following object -- enablePowerSourceSwitchOverAlarm -- by the following -- enablePowerSourceFailureAlarm -- -- 4/18/97 -- 1. Changed all instances of mcac, MCAC to mcc -- -- 7/1/97 -- 1. Added a new enum to the following object -- sysDevIpBindingFilterType -- 2. Added a new table -- sysDevIpFilterStatsTable -- to the following group -- sysDevFilter -- 3. Added a new object -- sysDevIpConfigRuleType -- to the table -- sysDevIpFilterConfigTable -- 4. Added a new object -- sysDevIpBindingDefaultFilterAction -- to the table -- sysDevIpFilterBindingTable -- -- 11/14/97 -- 1. Modified the DESCRIPTION field of the -- logicalEntityReadOnlyCommunity object to use -- the phrase "Hotwire" rather than "Hot-Wire" -- (for legal reasons). -- -- 07/29/98 rgowda -- 1. Added a new trap -- nonIpConservativeCardDetected -- -- 10/28/98 rgowda -- 1. Added the following two groups -- a. sysDevRadiusAuth (Info about all Radius Servers) -- b. sysDevUserAccount (Info about all login user accounts) -- -- 2. Added the following objects to sysDevIpFilterConfigTable -- a. sysDevIpConfigFilterProtocolTypeUdp -- b. sysDevIpConfigFilterProtocolTypeTcp -- c. sysDevIpConfigFilterProtocolTypeIcmp -- -- 3. Added a table/columnar object sNsysDevIpFilterBindingTable -- for service Node Filter Bindings. -- -- 4. More enumerations to accessMode object -- telnetLocal (3), -- telnetRemote (4), -- vt100TerminalLocal (5), -- vt100TerminalRemote (6) -- -- 04/14/99 rgowda -- 1. Added the object sysDevUserAccountAccessPartition -- into sysDevUserAccount group -- 2. Added 3 new traps -- - dhcpAddressInStaticSubnet (19) -- - nonSupportedMCC (20) -- - nonSupportedChassis (21) -- -- 10/120/99 Wayne Jadoo -- Made appropriate changes to use the -- pdn_Header mib file and did some minor -- clean-up. Also included the devSelfTestResults -- FROM PDN-HEALTHANDSTATUS-MIB -- -- textual conventions DisplayString ::= OCTET STRING -- This data type is used to model textual information -- taken from the NVT ASCII character set. By convention, -- objects with this syntax are declared as having -- SIZE (0..255) --thenewpdn OBJECT IDENTIFIER ::= { enterprises 1795 } --thenewpdn-mgmt OBJECT IDENTIFIER ::= { thenewpdn 2 } --paradyne OBJECT IDENTIFIER ::= { thenewpdn-mgmt 24 } --pdn-xdsl OBJECT IDENTIFIER ::= { paradyne 9 } --ent-8800 OBJECT IDENTIFIER ::= { pdn-xdsl 3 } -- groups in this mib sysDevStats OBJECT IDENTIFIER ::= { ent-8800 1 } sysDevConfig OBJECT IDENTIFIER ::= { ent-8800 2 } sysDevFilter OBJECT IDENTIFIER ::= { ent-8800 3 } sysDevRadiusAuth OBJECT IDENTIFIER ::= { ent-8800 7 } sysDevUserAccount OBJECT IDENTIFIER ::= { ent-8800 8 } -- The statistics group. The implementation of this group -- is mandatory. authTable OBJECT-TYPE SYNTAX SEQUENCE OF AuthTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table is used to keep track of authentication failures" ::= { sysDevStats 1 } authTableEntry OBJECT-TYPE SYNTAX AuthTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This object corresponds to an entry in the authentication table." INDEX { accessMode } ::= { authTable 1 } AuthTableEntry ::= SEQUENCE { accessMode INTEGER, authFailureCount Counter } accessMode OBJECT-TYPE SYNTAX INTEGER { telnet (1), vt100Terminal (2), telnetLocal (3), telnetRemote (4), vt100TerminalLocal (5), vt100TerminalRemote (6) } ACCESS read-only STATUS mandatory DESCRIPTION "This object tells us how an authentication failure was caused, either by telnet or by using a vt-100 terminal. SNMP based authentication failures are accounted for in MIB-II. Enums 1 and 2 are obsolete. Remote corresponds to access denied by RADIUS Server, Local corresponds to access denied locally by the device . telnet (1) = telnet access cannot be authenticated by the DSLAM/RADIUS vt100Terminal (2) = Console access cannot be authenticated by the DSLAM/RADISU telnetLocal (3) = telnet access cannot be authenticated by the DSLAM telnetRemote (4) = telnet access cannot be authenticated by the RADIUS vt100TerminalLocal (5) = console access cannot be authenticated by the DSLAM vt100TerminalRemote (6) = console access cannot be authenticated by the RADIUS" ::= { authTableEntry 1 } authFailureCount OBJECT-TYPE SYNTAX Counter ACCESS read-only STATUS mandatory DESCRIPTION "This object corresponds to the number of authentication failures since sysUpTime was reset." ::= { authTableEntry 2 } -- The configuration group. The implementation of this group -- is optional. enablePowerSourceFailureAlarm OBJECT-TYPE SYNTAX INTEGER { disable (1), enable (2) } ACCESS read-write STATUS mandatory DESCRIPTION "This objects corresponds to enabling/disabling the power source failure alarm - for both A and B power sources This object is for the MCC only. The default value of this object should be 1." ::= {sysDevConfig 1 } devIfTable OBJECT-TYPE SYNTAX SEQUENCE OF DevIfTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table is used to configure information for a particular interface" ::= {sysDevConfig 2 } devIfTableEntry OBJECT-TYPE SYNTAX DevIfTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This object corresponds to an entry in the DevifTable " INDEX { devIfIndex } ::= { devIfTable 1 } DevIfTableEntry ::= SEQUENCE { devIfIndex INTEGER, devPacketDiscardPolicy INTEGER, devLinkIntegrity INTEGER } devIfIndex OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "This object corresponds directly to the ifIndex value in the ifTable" ::= { devIfTableEntry 1 } devPacketDiscardPolicy OBJECT-TYPE SYNTAX INTEGER { mrrp (1), lrrp (2) } ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the policy for packet discards during periods of congestion : mrrp - most recently received packets are discarded. lrrp - least recently received packets are discarded. The default value of this object should be 2" ::= { devIfTableEntry 2 } devLinkIntegrity OBJECT-TYPE SYNTAX INTEGER { enable (1), disable (2), none (3) } ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the enabling or disabling of the ethernet link integrity : enable - enable link integrity disable - disable link integrity none - for interfaces that do not support link integrity The default value of this object should be 1" ::= { devIfTableEntry 3 } communityTrapAddressInfoTable OBJECT-TYPE SYNTAX SEQUENCE OF CommunityTrapAddressInfoTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table is used to set the trap destination address for a particular community." ::= {sysDevConfig 3 } communityTrapAddressInfoTableEntry OBJECT-TYPE SYNTAX CommunityTrapAddressInfoTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This object corresponds to an entry in the community trap address info table." INDEX { trapDestinationAddress, trapDestinationPort, trapCommunityName } ::= { communityTrapAddressInfoTable 1 } CommunityTrapAddressInfoTableEntry ::= SEQUENCE { trapCommunityName DisplayString (SIZE(1..32)), trapDestinationAddress IpAddress, trapDestinationPort INTEGER (0..65535), trapsEnable INTEGER } trapCommunityName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) ACCESS read-only STATUS mandatory DESCRIPTION "This object corresponds to the name of the SNMP Community." ::= { communityTrapAddressInfoTableEntry 1 } trapDestinationAddress OBJECT-TYPE SYNTAX IpAddress ACCESS read-only STATUS mandatory DESCRIPTION "The IP Address of the destination to which a trap needs to be sent to." ::= { communityTrapAddressInfoTableEntry 2 } trapDestinationPort OBJECT-TYPE SYNTAX INTEGER (0..65535) ACCESS read-only STATUS mandatory DESCRIPTION "The port of the destination to which a trap needs to be sent to." ::= { communityTrapAddressInfoTableEntry 3 } trapsEnable OBJECT-TYPE SYNTAX INTEGER { enable (1), disable (2), delete (3) } ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to turning traps on/off for a particular destination. enable (1) - traps will be sent to the specified destination. disable (2)- traps will not be sent to the specified destination. delete - (3)deletes an entry in the table. It is left to the implementstion whether to actually delete the entry or not. The default value of this object should be 2." ::= { communityTrapAddressInfoTableEntry 4 } communityTable OBJECT-TYPE SYNTAX SEQUENCE OF CommunityTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table is used to set the various configuration parameters for a particular community." ::= { sysDevConfig 4 } communityTableEntry OBJECT-TYPE SYNTAX CommunityTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This object corresponds to an entry in the community table." INDEX { communityName } ::= { communityTable 1 } CommunityTableEntry ::= SEQUENCE { communityName DisplayString (SIZE(1..32)), communityType INTEGER } communityName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) ACCESS read-only STATUS mandatory DESCRIPTION "This object corresponds to the name of the SNMP Community" ::= { communityTableEntry 1 } communityType OBJECT-TYPE SYNTAX INTEGER { readOnly (1), readWrite (2), noAccess (3) } ACCESS read-write STATUS mandatory DESCRIPTION "The type of the community readOnly - this community is only allowed to do get's readWrite - this community is allowed to do get's and set's noAccess - deletes the corresponding entry in the table. It is left upto the implementation whether to actually delete the entry in the table or not The default value of this object should be 1" ::= { communityTableEntry 2 } logicalEntityTable OBJECT-TYPE SYNTAX SEQUENCE OF LogicalEntityTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table is used to set the various configuration information for the logical entities of a device. This table complements the currently draft version of the entity mib" ::= {sysDevConfig 5 } logicalEntityTableEntry OBJECT-TYPE SYNTAX LogicalEntityTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This object corresponds to an entry in the logical entity table. Note that the entries in this table are always present and one could at the most modify entries in this table." INDEX { logicalEntityIndex } ::= { logicalEntityTable 1 } LogicalEntityTableEntry ::= SEQUENCE { logicalEntityIndex INTEGER, logicalEntityType INTEGER, logicalEntityParentRelPos INTEGER, logicalEntityDescr DisplayString (SIZE(1..32)), logicalEntityReadOnlyCommunity DisplayString (SIZE(1..32)), logicalEntityReadWriteCommunity DisplayString (SIZE(1..32)), logicalEntityResetToDefault INTEGER, logicalEntityIpAddress IpAddress, logicalEntitySubnetMask IpAddress } logicalEntityIndex OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "The index of the logical entity on the device. The value of this object directly corresponds to the logicalEntityIndex of the logicalEntityTable in the of the Entity MIB." ::= { logicalEntityTableEntry 1 } logicalEntityType OBJECT-TYPE SYNTAX INTEGER { mccCard (1), mccSpare (2), dslCard (3), remoteEntity (4) } ACCESS read-only STATUS mandatory DESCRIPTION "The logical entity type mccCard - specifies that the logical entity is an MCC card. mccSpare - specifies that the logical entity is an mcc spare. dslCard - specifies that the logical entity is a dsl card, remoteEntity - specifies that the logical entity is not located on the device" ::= { logicalEntityTableEntry 2 } logicalEntityParentRelPos OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "The status of this object corresponds to a unique identifier which identifies the logical entity. For the following values of logicalEntityType the value of this object will correspond to the slot number of the card. mcc-card, mcc-spare, dsl-card. For the following values of the logicalEntityType this object will correspond to the value of ifIndex of the ifTable in mib-2. remote-entity" ::= { logicalEntityTableEntry 3 } logicalEntityDescr OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) ACCESS read-write STATUS mandatory DESCRIPTION " a brief description of the particular entity" ::= { logicalEntityTableEntry 4 } logicalEntityReadOnlyCommunity OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) ACCESS read-write STATUS mandatory DESCRIPTION "The read-only community name for the specified logical entity. A noSuchName error will be returned if this object is not visible. This object is not visible for the DSL cards in the Hotwire chassis. This object is visible for the MCC card in the Hotwire chassis" ::= { logicalEntityTableEntry 5 } logicalEntityReadWriteCommunity OBJECT-TYPE SYNTAX DisplayString (SIZE(1..32)) ACCESS read-write STATUS mandatory DESCRIPTION "The read-write community name for the specified logical entity. Note that this object can only be accessed by a manager who has read-write access to the device. If this object is not visible a noSuchName error is returned." ::= { logicalEntityTableEntry 6 } logicalEntityResetToDefault OBJECT-TYPE SYNTAX INTEGER { noop (1), reset (2) } ACCESS read-write STATUS mandatory DESCRIPTION "This object resets the read-only and read-write community to the default values for this particular entry in the logical entity table. When read enum noop will be returned" ::= { logicalEntityTableEntry 7 } logicalEntityIpAddress OBJECT-TYPE SYNTAX IpAddress ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the IpAddress of the logical entity. A noSuchName error will be returned if IP addresses have not been configured as yet." ::= { logicalEntityTableEntry 8 } logicalEntitySubnetMask OBJECT-TYPE SYNTAX IpAddress ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the subnet mask of the logical entity. a noSuchName error will be returned if subnet masks have not been configured as yet." ::= { logicalEntityTableEntry 9 } -- The filter group. sysDevIpFilterConfigTable OBJECT-TYPE SYNTAX SEQUENCE OF SysDevIpFilterConfigTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table allows us to configure filtering information. Every filter is comprised of a number of rules. When a filter is bound to an interface, all the rules of that particular filter apply to that particular interface. Also the same filter maybe bound to several interfaces. This table only allows us to configure information about a particular filter. As such this table is doubly indexed by sysDevIpConfigFilterName and sysDevIpConfigFilterRuleNumber." ::= { sysDevFilter 1 } sysDevIpFilterConfigTableEntry OBJECT-TYPE SYNTAX SysDevIpFilterConfigTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Describes a specific entry of the filter configuration table." INDEX { sysDevIpConfigFilterName, sysDevIpConfigFilterRuleNumber } ::= { sysDevIpFilterConfigTable 1 } SysDevIpFilterConfigTableEntry ::= SEQUENCE { sysDevIpConfigFilterName DisplayString (SIZE(12)), sysDevIpConfigFilterRuleNumber INTEGER (1..16), sysDevIpConfigFilterSrcAddress IpAddress, sysDevIpConfigFilterSrcAddrMask IpAddress, sysDevIpConfigFilterSrcPortNum INTEGER (0..65535), sysDevIpConfigFilterMaxSrcPortNum INTEGER (0..65535), sysDevIpConfigFilterSrcCompType INTEGER, sysDevIpConfigFilterDestAddress IpAddress, sysDevIpConfigFilterDestAddrMask IpAddress, sysDevIpConfigFilterDestPortNum INTEGER (0..65535), sysDevIpConfigFilterMaxDestPortNum INTEGER (0..65535), sysDevIpConfigFilterDestCompType INTEGER, sysDevIpConfigFilterAction INTEGER, sysDevIpConfigRuleType INTEGER, sysDevIpConfigFilterProtocolTypeUdp INTEGER, sysDevIpConfigFilterProtocolTypeTcp INTEGER, sysDevIpConfigFilterProtocolTypeIcmp INTEGER } sysDevIpConfigFilterName OBJECT-TYPE SYNTAX DisplayString (SIZE(12)) ACCESS read-only STATUS mandatory DESCRIPTION "The value of this object corresponds directly to the name of the filter." ::= { sysDevIpFilterConfigTableEntry 1 } sysDevIpConfigFilterRuleNumber OBJECT-TYPE SYNTAX INTEGER (1..16) ACCESS read-only STATUS mandatory DESCRIPTION "The value of this object corresponds directly to a rule within a particular filter. If the value of this object is 0, then the sets apply to the filter as a whole. For example one may want to delete the whole filter. for a get only the name of the filter is returned." ::= { sysDevIpFilterConfigTableEntry 2 } sysDevIpConfigFilterSrcAddress OBJECT-TYPE SYNTAX IpAddress ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds directly to an source IP Address. This object could be set if IP packets need to be filtered based on where it is coming from." ::= { sysDevIpFilterConfigTableEntry 3 } sysDevIpConfigFilterSrcAddrMask OBJECT-TYPE SYNTAX IpAddress ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds directly to an source IP Address Mask. The value of this object is bitwise anded with the source address within the IP packet and then compared with the sysDevIPFilterSrcAddress" ::= { sysDevIpFilterConfigTableEntry 4 } sysDevIpConfigFilterSrcPortNum OBJECT-TYPE SYNTAX INTEGER (0..65535) ACCESS read-write STATUS mandatory DESCRIPTION "The UDP or TCP port number of the source on which this filter is applied" ::= { sysDevIpFilterConfigTableEntry 5 } sysDevIpConfigFilterMaxSrcPortNum OBJECT-TYPE SYNTAX INTEGER (0..65535) ACCESS read-write STATUS mandatory DESCRIPTION "The maximum UDP or TCP port number of the source on which this filter is applied. This object is valid only if the source comparison type is in-range or out-range" ::= { sysDevIpFilterConfigTableEntry 6 } sysDevIpConfigFilterSrcCompType OBJECT-TYPE SYNTAX INTEGER { none (1), eq (2), neq (3), gt (4), lt (5), inRange (6), outRange (7) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to the type of comparison which is to be made for source based filtering for the particular rule of the filter. none - no comparison is to be made. eq - equal to neq - not equal to gt - greater than lt - less than inRange - the source port number of the TCP or UDP packet is within a specified range. outRange - the source port number of the TCP or UDP packet lies outside a specified range." ::= { sysDevIpFilterConfigTableEntry 7 } sysDevIpConfigFilterDestAddress OBJECT-TYPE SYNTAX IpAddress ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds directly to an destination IP Address. This object could be set if IP packets need to be filtered based on where it is going to." ::= { sysDevIpFilterConfigTableEntry 8 } sysDevIpConfigFilterDestAddrMask OBJECT-TYPE SYNTAX IpAddress ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds directly to an destination IP Address Mask. The value of this object is bitwise anded with the destination address within the IP packet and then compared with the sysDevIPFilterDestAddress" ::= { sysDevIpFilterConfigTableEntry 9 } sysDevIpConfigFilterDestPortNum OBJECT-TYPE SYNTAX INTEGER (0..65535) ACCESS read-write STATUS mandatory DESCRIPTION "The UDP or TCP port number of the destination on which this filter is applied" ::= { sysDevIpFilterConfigTableEntry 10 } sysDevIpConfigFilterMaxDestPortNum OBJECT-TYPE SYNTAX INTEGER (0..65535) ACCESS read-write STATUS mandatory DESCRIPTION "The maximum UDP or TCP port number of the destination on which this filter is applied. This object is valid only if the destination comparison type is in-range or out-range" ::= { sysDevIpFilterConfigTableEntry 11 } sysDevIpConfigFilterDestCompType OBJECT-TYPE SYNTAX INTEGER { none (1), eq (2), neq (3), gt (4), lt (5), inRange (6), outRange (7) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to the type of comparison which is to be made for destination based filtering for the particular rule of the filter. none - no comparison is to be made. eq - equal to neq - not equal to gt - greater than lt - less than inRange - the source port number of the TCP or UDP packet is within a specified range. outRange - the source port number of the TCP or UDP packet lies outside a specified range." ::= { sysDevIpFilterConfigTableEntry 12 } sysDevIpConfigFilterAction OBJECT-TYPE SYNTAX INTEGER { forward (1), discard (2), delete (3) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to the action taken on a particular IP packet based on the filter rule. forward - the packet is forwarded discard - the packet is discarded. delete - the rule of a particular filter or the filter as a whole is deleted." ::= { sysDevIpFilterConfigTableEntry 13 } sysDevIpConfigRuleType OBJECT-TYPE SYNTAX INTEGER { static (1), dynamic (2) } ACCESS read-only STATUS mandatory DESCRIPTION "The value of this object corresponds to the type of type of rule configured static - This indicates that the rule was configured by an NMS either by SNMP, console or using telnet dynamic - this indicates that the rule was configured by the the system for end-users who have obtaimed an IP address using the DHCP protocol." ::= { sysDevIpFilterConfigTableEntry 14 } sysDevIpConfigFilterProtocolTypeUdp OBJECT-TYPE SYNTAX INTEGER { forward (1), discard (2) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to the action taken on a particular UDP packet based on the source/ destination port comparison rule." ::= { sysDevIpFilterConfigTableEntry 15 } sysDevIpConfigFilterProtocolTypeTcp OBJECT-TYPE SYNTAX INTEGER { forward (1), discard (2) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to the action taken on a particular TCP packet bases on the source/ destination port comparison rule." ::= { sysDevIpFilterConfigTableEntry 16 } sysDevIpConfigFilterProtocolTypeIcmp OBJECT-TYPE SYNTAX INTEGER { forward (1), discard (2) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to the action taken on a particular ICMP packet bases on the protocol type comparison rule." ::= { sysDevIpFilterConfigTableEntry 17 } -- Access Node Filter Bindings sysDevIpFilterBindingTable OBJECT-TYPE SYNTAX SEQUENCE OF SysDevIpFilterBindingTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table allows us to bind filters to a particular interface. As such this table is doubly indexed by sysDevIpBindingIfIndex and sysDevIpBindingFilterName." ::= { sysDevFilter 2 } sysDevIpFilterBindingTableEntry OBJECT-TYPE SYNTAX SysDevIpFilterBindingTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Describes a specific entry of the filter binding table." INDEX { sysDevIpBindingIfIndex, sysDevIpBindingFilterName } ::= { sysDevIpFilterBindingTable 1 } SysDevIpFilterBindingTableEntry ::= SEQUENCE { sysDevIpBindingIfIndex INTEGER, sysDevIpBindingFilterName DisplayString (SIZE(1..12)), sysDevIpBindingFilterType INTEGER, sysDevIpBindingFilterAction INTEGER, sysDevIpBindingDefaultFilterAction INTEGER } sysDevIpBindingIfIndex OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "The value of this object corresponds directly to each interface as described in ifTable." ::= { sysDevIpFilterBindingTableEntry 1 } sysDevIpBindingFilterName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..12)) ACCESS read-only STATUS mandatory DESCRIPTION "The value of this object corresponds directly to the name of the filter which needs to be bound to a particular interface." ::= { sysDevIpFilterBindingTableEntry 2 } sysDevIpBindingFilterType OBJECT-TYPE SYNTAX INTEGER { inputFilter (1), outputFilter (2), inputOutputFilter (3) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds directly to the type of the filter which needs to be bound to a particular interface. inputFilter - This indicates that the filter is applied to the packets coming in to the interface. outputFilter - this indicates that the filter is applied to packets going out the interface. inputOutputFilter - this indicates that the filter is applied packets going out the interface and to packets coming in to the interface." ::= { sysDevIpFilterBindingTableEntry 3 } sysDevIpBindingFilterAction OBJECT-TYPE SYNTAX INTEGER { bind (1), unBind (2) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to enabling/disabling the filter on a particular interface. When read enum bind is returned or noSuchName error is returned if the filter is not bound to the interface (specified by ifIndex) bind - This indicates that the filter is to be bound to a the particular interface. unBind - this indicates that the filter is to be un-bound on a particular interface." ::= { sysDevIpFilterBindingTableEntry 4 } sysDevIpBindingDefaultFilterAction OBJECT-TYPE SYNTAX INTEGER { forward (1), discard (2) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to the default action for this filter if none of the rules result in a match forward - forward the IP packet the particular interface. discard - discard the IP packet the default value of this object is set to 1" ::= { sysDevIpFilterBindingTableEntry 5 } -- Filter statistics sysDevIpInputPacketsFiltered OBJECT-TYPE SYNTAX Counter ACCESS read-only STATUS mandatory DESCRIPTION "The number of IP packets that have been filtered on all the incoming interfaces due to not matching programmed filter entries on interfaces that are activated for IP filtering." ::= { sysDevFilter 3 } sysDevIpOutputPacketsFiltered OBJECT-TYPE SYNTAX Counter ACCESS read-only STATUS mandatory DESCRIPTION "The number of IP packets that have been filtered on all the outgoing interfaces due to not matching programmed filter entries on interfaces that are activated for IP filtering." ::= { sysDevFilter 4 } sysDevIpFilterStatsTable OBJECT-TYPE SYNTAX SEQUENCE OF SysDevIpFilterStatsTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table allows an NMS to monitor information about all the filters in the table" ::= { sysDevFilter 5 } sysDevIpFilterStatsTableEntry OBJECT-TYPE SYNTAX SysDevIpFilterStatsTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Describes a specific entry of the filter stats table." INDEX { sysDevIpFilterStatsIndex } ::= { sysDevIpFilterStatsTable 1 } SysDevIpFilterStatsTableEntry ::= SEQUENCE { sysDevIpFilterStatsIndex INTEGER, sysDevIpFilterStatsFilterName DisplayString (SIZE(1..12)), sysDevIpFilterStatsNumDynamicRules INTEGER, sysDevIpFilterStatsNumStaticRules INTEGER, sysDevIpFilterStatsRefCnt INTEGER } sysDevIpFilterStatsIndex OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "This is a unique value corresponding to every filter configured. On the MCC card one can configure upto 4 IP filters. On the DSL card on can configure upto 12 IP filters." ::= { sysDevIpFilterStatsTableEntry 1 } sysDevIpFilterStatsFilterName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..12)) ACCESS read-only STATUS mandatory DESCRIPTION "The value of this object corresponds to the name of the filter configured." ::= { sysDevIpFilterStatsTableEntry 2 } sysDevIpFilterStatsNumDynamicRules OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "This object corresponds to the number of dynamic rules configured for this filter" ::= { sysDevIpFilterStatsTableEntry 3 } sysDevIpFilterStatsNumStaticRules OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "This object corresponds to the number of static rules configured for this filter" ::= { sysDevIpFilterStatsTableEntry 4 } sysDevIpFilterStatsRefCnt OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "This object corresponds to the number of references for this filter by the various interfaces of the system For Example if filter 'abc' is bound to two of the DSL interfaces as input filters. then the reference count for this filter is 2. if a filter 'def' is bound to the 10BaseT interface as both an input and an output filter. The reference count for this filter would be 2. Filters can be deleted from the system (by a user) only if the reference count equals 0" ::= { sysDevIpFilterStatsTableEntry 5 } -- Service Node Filter Bindings. sNsysDevIpFilterBindingTable OBJECT-TYPE SYNTAX SEQUENCE OF SNsysDevIpFilterBindingTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table allows us to bind filters to a particular interface. As such this table is doubly indexed by sNsysDevIpBindingIfIndex and sNsysDevIpBindingFilterName. This table is supported for those cards where filtering is done at the service node" ::= { sysDevFilter 6 } sNsysDevIpFilterBindingTableEntry OBJECT-TYPE SYNTAX SNsysDevIpFilterBindingTableEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Describes a specific entry of the filter binding table." INDEX { sNsysDevIpBindingIfIndex, sNsysDevIpBindingFilterVNID, sNsysDevIpBindingFilterName } ::= { sNsysDevIpFilterBindingTable 1 } SNsysDevIpFilterBindingTableEntry ::= SEQUENCE { sNsysDevIpBindingIfIndex INTEGER, sNsysDevIpBindingFilterVNID INTEGER, sNsysDevIpBindingFilterName DisplayString (SIZE(1..12)), sNsysDevIpBindingFilterType INTEGER, sNsysDevIpBindingFilterAction INTEGER, sNsysDevIpBindingDefaultFilterAction INTEGER, sNsysDevIpBindingFilterDhcpTransaction INTEGER } sNsysDevIpBindingIfIndex OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "The value of this object corresponds directly to each interface as described in ifTable." ::= { sNsysDevIpFilterBindingTableEntry 1 } sNsysDevIpBindingFilterVNID OBJECT-TYPE SYNTAX INTEGER ACCESS read-only STATUS mandatory DESCRIPTION "The value of this object corresponds to the VNID bound to the interface and the filter name." ::= { sNsysDevIpFilterBindingTableEntry 2 } sNsysDevIpBindingFilterName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..12)) ACCESS read-only STATUS mandatory DESCRIPTION "The value of this object corresponds directly to the name of the filter which needs to be bound to a particular interface." ::= { sNsysDevIpFilterBindingTableEntry 3 } sNsysDevIpBindingFilterType OBJECT-TYPE SYNTAX INTEGER { inputFilter (1), outputFilter (2), inputOutputFilter (3) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds directly to the type of the filter which needs to be bound to a particular interface. inputFilter - This indicates that the filter is applied to the packets coming in to the interface. outputFilter - this indicates that the filter is applied to packets going out the interface." ::= { sNsysDevIpFilterBindingTableEntry 4 } sNsysDevIpBindingFilterAction OBJECT-TYPE SYNTAX INTEGER { bind (1), unBind (2) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to enabling/disabling the filter on a particular interface. When read enum bind is returned or noSuchName error is returned if the filter is not bound to the interface (specified by ifIndex) bind - This indicates that the filter is to be bound to a the particular interface. unBind - this indicates that the filter is to be un-bound on a particular interface." ::= { sNsysDevIpFilterBindingTableEntry 5 } sNsysDevIpBindingDefaultFilterAction OBJECT-TYPE SYNTAX INTEGER { forward (1), discard (2) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to the default action for this filter if none of the rules result in a match forward - forward the IP packet the particular interface. discard - discard the IP packet the default value of this object is set to 1" ::= { sNsysDevIpFilterBindingTableEntry 6 } sNsysDevIpBindingFilterDhcpTransaction OBJECT-TYPE SYNTAX INTEGER { forward (1), discard (2) } ACCESS read-write STATUS mandatory DESCRIPTION "The value of this object corresponds to the action taken on a particular DHCP packet bases on the protocol type comparison rule." ::= { sNsysDevIpFilterBindingTableEntry 7 } -- 3.2.3. Radius Security -- MCC-rq 150-180: A new group is added into the Hotwire System MIB sysDevRadiusAuthEnable OBJECT-TYPE SYNTAX INTEGER { disable (1), enable (2) } ACCESS read-write STATUS mandatory DESCRIPTION "Enable and disable RADIUS Authentication." ::= { sysDevRadiusAuth 1 } sysDevRadiusAuthConfigTimeout OBJECT-TYPE SYNTAX INTEGER (3..30) ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the maximum response time of the RADIUS Server." ::= { sysDevRadiusAuth 2 } sysDevRadiusAuthConfigAttempts OBJECT-TYPE SYNTAX INTEGER (1..3) ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the number of retries in the event of authentication timeout." ::= { sysDevRadiusAuth 3 } sysDevRadiusAuthConfigTable OBJECT-TYPE SYNTAX SEQUENCE OF SysDevRadiusAuthConfigEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table contains variables that facilitate the configuration of RADIUS authentication servers." ::= { sysDevRadiusAuth 4 } sysDevRadiusAuthConfigEntry OBJECT-TYPE SYNTAX SysDevRadiusAuthConfigEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "An entry containing RADIUS Authentication Server configuration." INDEX { sysDevRadiusAuthConfigServerIndex } ::= { sysDevRadiusAuthConfigTable 1 } SysDevRadiusAuthConfigEntry ::= SEQUENCE { sysDevRadiusAuthConfigServerIndex INTEGER, sysDevRadiusAuthConfigServerAddress IpAddress, sysDevRadiusAuthConfigServerPort INTEGER (0..65535), sysDevRadiusAuthConfigSecret DisplayString (SIZE(6..32)) } sysDevRadiusAuthConfigServerIndex OBJECT-TYPE SYNTAX INTEGER ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the Index to the RADIUS server Configuration table." ::= { sysDevRadiusAuthConfigEntry 1 } sysDevRadiusAuthConfigServerAddress OBJECT-TYPE SYNTAX IpAddress ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the IP address of the RADIUS server." ::= { sysDevRadiusAuthConfigEntry 2 } sysDevRadiusAuthConfigServerPort OBJECT-TYPE SYNTAX INTEGER (0..65535) ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the UDP Port that the RADIUS server will accept Access-Request." ::= { sysDevRadiusAuthConfigEntry 3 } sysDevRadiusAuthConfigSecret OBJECT-TYPE SYNTAX DisplayString (SIZE(6..32)) ACCESS not-accessible STATUS mandatory DESCRIPTION "This object corresponds to the RADIUS secret used by RADIUS server and NAS." ::= { sysDevRadiusAuthConfigEntry 4 } -- MCC-rq 200-210: A new user account group is added into the Hotwire System MIB sysDevUserAccountTable OBJECT-TYPE SYNTAX SEQUENCE OF SysDevUserAccountEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table contains the user accounts." ::= { sysDevUserAccount 1} sysDevUserAccountEntry OBJECT-TYPE SYNTAX SysDevUserAccountEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "An entry containing user account information." INDEX { sysDevUserAccountIndex } ::= { sysDevUserAccountTable 1 } SysDevUserAccountEntry ::= SEQUENCE { sysDevUserAccountIndex INTEGER, sysDevUserAccountUserId DisplayString (SIZE(6..15)), sysDevUserAccountPrivilege INTEGER, sysDevUserAccountUserPassword DisplayString (SIZE(6..15)), sysDevUserAccountAccessPartition DisplayString (SIZE(0..50)) } sysDevUserAccountIndex OBJECT-TYPE SYNTAX INTEGER ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the index to the user account." ::= { sysDevUserAccountEntry 1 } sysDevUserAccountUserId OBJECT-TYPE SYNTAX DisplayString (SIZE(6..15)) ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the login ID of the user account." ::= { sysDevUserAccountEntry 2 } sysDevUserAccountPrivilege OBJECT-TYPE SYNTAX INTEGER { operator (1), administrator (2) } ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the access privilege of the user account. 1 = Operator, 2 = Administrator." ::= { sysDevUserAccountEntry 3 } sysDevUserAccountUserPassword OBJECT-TYPE SYNTAX DisplayString (SIZE(6..15)) ACCESS not-accessible STATUS mandatory DESCRIPTION "This object corresponds to the password of the user account." ::= { sysDevUserAccountEntry 4 } sysDevUserAccountAccessPartition OBJECT-TYPE SYNTAX DisplayString (SIZE(0..50)) ACCESS read-write STATUS mandatory DESCRIPTION "This object corresponds to the access partition of the user account. The default value of this object is 'all'" ::= { sysDevUserAccountEntry 5 } --Traps cCN TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { logicalEntityType, logicalEntityParentRelPos } DESCRIPTION "This trap signifies a Configuation change or software upgrade in the xDSL card. This trap is of 'warning' class" ::= 7 authenticationFailure TRAP-TYPE ENTERPRISE ent-8800 VARIABLES {accessMode, authFailureCount} DESCRIPTION "This trap signifies an authentication failure. Authentication failures can be telnet based or terminal based. This trap is in addition to the SNMP based authentication failure trap, which is a generic trap." ::= 8 -- the following traps are sent by the MCC ******* fanModuleFailure TRAP-TYPE ENTERPRISE ent-8800 DESCRIPTION "This trap indicates the indicates the failure of the fan module on the device. This trap is sent only by the MCC card. this trap is of 'minor' class" ::= 9 fanModuleOperational TRAP-TYPE ENTERPRISE ent-8800 DESCRIPTION "This trap indicates the indicates the fan module on the device is operational. This trap is sent only by the MCC card. This trap is of 'minor' class" ::= 109 powerSourceAFailure TRAP-TYPE ENTERPRISE ent-8800 DESCRIPTION "This trap indicates that power source A has failed. This is sent only by the MCC card. This trap is of 'minor' class." ::= 10 powerSourceAOperational TRAP-TYPE ENTERPRISE ent-8800 DESCRIPTION "This trap indicates that the power source A is operational. This is sent only by the MCC card. This trap is of 'minor' class. This trap compliments powerSourceAFailure trap." ::= 110 slotPollFailure TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { logicalEntityParentRelPos } DESCRIPTION "This trap indicates a slot poll failure. This is sent only by the MCC card. this trap is of 'major' class." ::= 11 newCardDetected TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { logicalEntityParentRelPos } DESCRIPTION "This trap indicates that a new card was detected in a slot. This is sent only by the MCC card. this trap is of 'warning' class." ::= 111 -- **************************** ethernetJabber TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { ifIndex } DESCRIPTION "This trap indicates that a jabber condition has been detected on the ethernet interface. This trap is of 'major' class." ::= 12 ethernetJabberClear TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { ifIndex } DESCRIPTION "This trap indicates that the jabber condition that was detected no longer exists. This trap is of 'major' class." ::= 112 ethernetJumbos TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { ifIndex } DESCRIPTION "This trap indicates ethernet jumbos. this trap is of 'minor' class" ::= 13 ethernetRunts TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { ifIndex } DESCRIPTION "This trap indicates ethernet runts. this trap is of 'minor'" ::= 14 deviceFailure TRAP-TYPE ENTERPRISE ent-8800 DESCRIPTION "This trap signifies that the sending protocol's device has failed and the failure was not a result of a device test. Note there are no variable bindings for this trap" ::= 15 selfTestFailure TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { devSelfTestResults } DESCRIPTION "This trap signifies that the sending protocol's device has failed self test. The variable binding for this trap would be the selfTest devSelfTestResults object of the Health and Status MIB. The exact format of this display string will be well-documented in the Operational Specifications of the device." ::= 16 powerSourceBFailure TRAP-TYPE ENTERPRISE ent-8800 DESCRIPTION "This trap indicates that power source B has failed. This is sent only by the MCC card. This trap is of 'minor' class." ::= 17 powerSourceBOperational TRAP-TYPE ENTERPRISE ent-8800 DESCRIPTION "This trap indicates that the power source B is operational. This is sent only by the MCC card. This trap is of 'minor' class. This trap compliments powerSourceBFailure trap." ::= 117 nonIpConservativeCardDetected TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { ifIndex, logicalEntityParentRelPos } DESCRIPTION "This trap indicates that a non ip conservative DSL card exist in the chassis at the slot 'slotNumber'.This is sent only by the MCC card. This trap is of warning class." ::= 18 dhcpAddressInStaticSubnet TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { ifIndex, pdnClientConfigSubnetMask, ifIndex } DESCRIPTION "This trap indicates that the DHCP server attempting to assign an address in range of static subnet on a different port. Information on affected port, subnet mask and the assigned port is also sent with the trap. This trap is of warning class" ::= 19 nonSupportedMCC TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { ifIndex } DESCRIPTION "AN has detected MCC firmware release too low to support this device" ::= 20 nonSupportedChassis TRAP-TYPE ENTERPRISE ent-8800 VARIABLES { ifIndex, sysObjectID } DESCRIPTION "AN in slot xx has been installed in a chassis that cannot support one or more of its features. " ::= 21 END