1HP-ICF-SNMP-MIB DEFINITIONS ::= BEGIN 2 3 IMPORTS 4 hpSwitch 5 FROM HP-ICF-OID 6 ifIndex, InterfaceIndexOrZero 7 FROM IF-MIB 8 InetAddressType, InetAddress 9 FROM INET-ADDRESS-MIB 10 OBJECT-GROUP, MODULE-COMPLIANCE, NOTIFICATION-GROUP 11 FROM SNMPv2-CONF 12 Counter32, OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE 13 FROM SNMPv2-SMI; 14 15 16 -- 1.3.6.1.4.1.11.2.14.11.5.1.38 17 hpicfSnmpMIB MODULE-IDENTITY 18 LAST-UPDATED "200708240000Z" -- August 24, 2007 at 00:00 GMT 19 ORGANIZATION 20 "Hewlett-Packard Company 21 Procurve Networking Business" 22 CONTACT-INFO 23 "Hewlett-Packard Company 24 8000 Foothills Blvd. 25 Roseville, CA 95747" 26 DESCRIPTION 27 "This MIB module contains HP proprietary 28 objects for managing SNMP entity." 29 REVISION "200611110000Z" -- November 11, 2006 at 00:00 GMT 30 DESCRIPTION 31 "Updated description and changed InterfaceIndex 32 to InterfaceIndexOrZero for 33 hpicfSnmpResponseSourceAddrIfIndex and 34 hpicfSnmpTrapSourceAddrIfIndex objects." 35 REVISION "200609010000Z" -- September 01, 2006 at 00:00 GMT 36 DESCRIPTION 37 "Initial revision" 38 REVISION "200708240000Z" -- August 24, 2007 at 00:00 GMT 39 DESCRIPTION 40 "Added hpicfSnmpNotification information." 41 ::= { hpSwitch 38 } 42 43 44 45 46-- 47-- Node definitions 48-- 49 50 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.0 51 hpicfSnmpNotification OBJECT IDENTIFIER ::= { hpicfSnmpMIB 0 } 52 53 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.0.1 54 hpicfSnmpAuthFail NOTIFICATION-TYPE 55 OBJECTS { hpicfSnmpAuthFailCount, hpicfSnmpAuthFailIPType, hpicfSnmpAuthFailIP } 56 57 STATUS current 58 DESCRIPTION 59 "The switch sends this notification when an SNMP 60 SET command fails at the authorization check stage. 61 This notification applies to SETs within the hpicf tree that 62 are network security related. This object is controlled 63 by hpicfSnmpAuthNotifyEnable" 64 65 ::= { hpicfSnmpNotification 1 } 66 67 68 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1 69 hpicfSnmpObjects OBJECT IDENTIFIER ::= { hpicfSnmpMIB 1 } 70 71 72 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1 73 hpicfSnmpConfig OBJECT IDENTIFIER ::= { hpicfSnmpObjects 1 } 74 75 76 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1 77 hpicfSnmpGlobalCfg OBJECT IDENTIFIER ::= { hpicfSnmpConfig 1 } 78 79 80 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1 81 hpicfSnmpResponseSourceAddrPolicyTable OBJECT-TYPE 82 SYNTAX SEQUENCE OF HpicfSnmpResponseSourceAddrPolicyEntry 83 MAX-ACCESS not-accessible 84 STATUS current 85 DESCRIPTION 86 "A table of entries used to configure the policy for 87 selecting source address while sending SNMP response. 88 When this entry is configured, the source address field 89 in the IP PKT header get modified based on the configured 90 option. There are 4 valid options that can be configured 91 for ipv4 and ipv6 networks 92 a) rfc1517 93 This is the default behavior if no other policy is 94 configured. In this case the source address will be 95 the address of the interface from which packet goes 96 out of the box. 97 b) user configured ip address 98 In this case the configured address will be used as 99 source address in the SNMP response. 100 c) user configured interface 101 In this case the IP address configured on the specified 102 interface will be used as source address in the SNMP 103 response. In case of multinet interface then smallest 104 IP address present on the interface in lexicographical 105 order will be used as source address while sending 106 SNMP responses for requests. 107 d) dst_ip_of_request 108 In this case, the destination ip address present in 109 the IP header of received SNMP request will be used 110 as source address in the SNMP response." 111 ::= { hpicfSnmpGlobalCfg 1 } 112 113 114 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1 115 hpicfSnmpResponseSourceAddrPolicyEntry OBJECT-TYPE 116 SYNTAX HpicfSnmpResponseSourceAddrPolicyEntry 117 MAX-ACCESS not-accessible 118 STATUS current 119 DESCRIPTION 120 "An entry in the table, containing information about 121 a single source address. This table alows only 2 values 122 that can be used as index to this table. These are: 123 1) hpicfSnmpResponseSourceAddressType = ipv4 124 Where user wants to configure the source address type 125 used while sending the SNMP response on IPV4 network. 126 2) hpicfSnmpResponseSourceAddressType = ipv6 127 Where user wants to configure the source address type 128 used while sending the SNMP response on IPV6 network." 129 INDEX { hpicfSnmpResponseSourceAddressType } 130 ::= { hpicfSnmpResponseSourceAddrPolicyTable 1 } 131 132 133 HpicfSnmpResponseSourceAddrPolicyEntry ::= 134 SEQUENCE { 135 hpicfSnmpResponseSourceAddressType 136 InetAddressType, 137 hpicfSnmpResponseSourceAddrPolicy 138 INTEGER, 139 hpicfSnmpResponseSourceAddress 140 InetAddress, 141 hpicfSnmpResponseSourceAddrIfIndex 142 InterfaceIndexOrZero 143 } 144 145 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1.1 146 hpicfSnmpResponseSourceAddressType OBJECT-TYPE 147 SYNTAX InetAddressType 148 MAX-ACCESS accessible-for-notify 149 STATUS current 150 DESCRIPTION 151 "We allow only 2 values for this object as an index for 152 hpicfSnmpResponseSourceAddrPolicyEntry - 153 1) hpicfSnmpResponseSourceAddressType = ipv4 154 Where user wants to configure the source address type 155 used while sending the SNMP response on IPV4 network 156 2) hpicfSnmpResponseSourceAddressType = ipv6 157 Where user wants to configure the source address type 158 used while sending the SNMP response on IPV6 network." 159 ::= { hpicfSnmpResponseSourceAddrPolicyEntry 1 } 160 161 162 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1.2 163 hpicfSnmpResponseSourceAddrPolicy OBJECT-TYPE 164 SYNTAX INTEGER 165 { 166 rfc1517(1), 167 configuredIP(2), 168 configuredInterface(3), 169 dstIpOfRequest(4) 170 } 171 MAX-ACCESS read-create 172 STATUS current 173 DESCRIPTION 174 " This specifies the policy for selecting the source 175 address for outgoing SNMP responses. 176 a) rfc1517 177 This is the default behavior if no other policy is 178 configured. In this case the source address will be 179 the address of the interface from which packet goes 180 out of the box. 181 b) configuredIP 182 By setting this value will enable the SNMP agent to use 183 IP addresses specified in hpicfSnmpResponseSourceAddress 184 object as source address while sending the response. 185 hpicfSnmpResponseSourceAddress must be set to a valid 186 and active ip address before setting policy to 187 configuredIP. 188 c) configuredInterface 189 By setting this value will enable the SNMP agent to use 190 IP addresses configured on the interface specified by 191 hpicfSnmpResponseSourceAddrIfIndex object as source 192 address while sending the response. 193 In case of multinet interface then smallest IP 194 address present on the interface in lexicographical 195 order will be used as source address while sending 196 SNMP responses for requests. 197 hpicfSnmpResponseSourceAddrIfIndex object must be set 198 to a valid loopback interface number before setting 199 policy to configuredInterface. 200 d) dst_ip_of_request 201 In this case, the destination ip address present in 202 the IP header of received SNMP request will be used as 203 source address in the SNMP response." 204 DEFVAL { 1 } 205 ::= { hpicfSnmpResponseSourceAddrPolicyEntry 2 } 206 207 208 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1.3 209 hpicfSnmpResponseSourceAddress OBJECT-TYPE 210 SYNTAX InetAddress 211 MAX-ACCESS read-create 212 STATUS current 213 DESCRIPTION 214 "This object is used to set the IP address which will be 215 used as source ip while sending the SNMP response. 216 This object should be used in conjunction with the 217 hpicfSnmpResponseSourceAddressType and 218 hpicfSnmpResponseSourceAddrPolicy." 219 ::= { hpicfSnmpResponseSourceAddrPolicyEntry 3 } 220 221 222 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1.4 223 hpicfSnmpResponseSourceAddrIfIndex OBJECT-TYPE 224 SYNTAX InterfaceIndexOrZero 225 MAX-ACCESS read-create 226 STATUS current 227 DESCRIPTION 228 "This object is used to set the interface whose IP address 229 will be used as source IP while sending the SNMP response. 230 This object should be used in conjunction with the 231 hpicfSnmpResponseSourceAddressType and 232 hpicfSnmpResponseSourceAddrPolicy." 233 ::= { hpicfSnmpResponseSourceAddrPolicyEntry 4 } 234 235 236 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2 237 hpicfSnmpTrapSourceAddrTable OBJECT-TYPE 238 SYNTAX SEQUENCE OF HpicfSnmpTrapSourceAddrEntry 239 MAX-ACCESS not-accessible 240 STATUS current 241 DESCRIPTION 242 "A table of entries used to configure the source address 243 used while generating SNMP Traps. When this entry is 244 configured, the source address field in the IP PKT header 245 get modified based on the configured option." 246 ::= { hpicfSnmpGlobalCfg 2 } 247 248 249 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1 250 hpicfSnmpTrapSourceAddrEntry OBJECT-TYPE 251 SYNTAX HpicfSnmpTrapSourceAddrEntry 252 MAX-ACCESS not-accessible 253 STATUS current 254 DESCRIPTION 255 "An entry in the table, containing information about 256 a single source address. This table alows only 2 values 257 that can be used as index to this table. These are: 258 1) hpicfSnmpResponseSourceAddressType = ipv4 259 Where user wants to configure the source address 260 used while sending the SNMP TRAPs on IPV4 network. 261 2) hpicfSnmpResponseSourceAddressType = ipv6 262 Where user wants to configure the source address 263 used while sending the SNMP TRAPs on IPV6 network." 264 INDEX { hpicfSnmpTrapSourceAddressType } 265 ::= { hpicfSnmpTrapSourceAddrTable 1 } 266 267 268 HpicfSnmpTrapSourceAddrEntry ::= 269 SEQUENCE { 270 hpicfSnmpTrapSourceAddressType 271 InetAddressType, 272 hpicfSnmpTrapSourceAddrPolicy 273 INTEGER, 274 hpicfSnmpTrapSourceAddress 275 InetAddress, 276 hpicfSnmpTrapSourceAddrIfIndex 277 InterfaceIndexOrZero 278 } 279 280 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1.1 281 hpicfSnmpTrapSourceAddressType OBJECT-TYPE 282 SYNTAX InetAddressType 283 MAX-ACCESS accessible-for-notify 284 STATUS current 285 DESCRIPTION 286 " This table alows only 2 values 287 that can be used as index to this table. These are: 288 1) hpicfSnmpResponseSourceAddressType = ipv4 289 Where user wants to configure the source address 290 used while sending the SNMP TRAPs on IPV4 network. 291 2) hpicfSnmpResponseSourceAddressType = ipv6 292 Where user wants to configure the source address 293 used while sending the SNMP TRAPs on IPV6 network." 294 ::= { hpicfSnmpTrapSourceAddrEntry 1 } 295 296 297 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1.2 298 hpicfSnmpTrapSourceAddrPolicy OBJECT-TYPE 299 SYNTAX INTEGER 300 { 301 rfc1517(1), 302 configuredIP(2), 303 configuredInterface(3), 304 dstIpOfRequest(4) 305 } 306 MAX-ACCESS read-create 307 STATUS current 308 DESCRIPTION 309 " This specifies the policy for selecting the source 310 address for outgoing SNMP responses. 311 a) rfc1517 312 This is the default behavior if no other policy is 313 configured. In this case the source address will be 314 the address of the interface from which packet goes 315 out of the box. 316 b) configuredIP 317 By setting this value will enable the SNMP agent to use 318 IP addresses specified in hpicfSnmpResponseSourceAddress 319 object as source address while sending the response. 320 hpicfSnmpTrapSourceAddress must be set to a valid 321 and active ip address before setting policy to 322 configuredIP. 323 c) configuredInterface 324 By setting this value will enable the SNMP agent to use 325 IP addresses configured on the interface specified by 326 hpicfSnmpResponseSourceAddrIfIndex object as source 327 address while sending the response. 328 In case of multinet interface then smallest IP 329 address present on the interface in lexicographical 330 order will be used as source address while sending 331 SNMP responses for requests. 332 hpicfSnmpTrapSourceAddrIfIndex object must be set 333 to a valid loopback interface number before setting 334 policy to configuredInterface." 335 ::= { hpicfSnmpTrapSourceAddrEntry 2 } 336 337 338 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1.3 339 hpicfSnmpTrapSourceAddress OBJECT-TYPE 340 SYNTAX InetAddress 341 MAX-ACCESS read-create 342 STATUS current 343 DESCRIPTION 344 "This object is used to set the IP address which will be 345 used as source ip while sending the SNMP TRAPs. 346 This object should be used in conjunction with the 347 hpicfSnmpResponseSourceAddressType and 348 hpicfSnmpTrapSourceAddrPolicy." 349 ::= { hpicfSnmpTrapSourceAddrEntry 3 } 350 351 352 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1.4 353 hpicfSnmpTrapSourceAddrIfIndex OBJECT-TYPE 354 SYNTAX InterfaceIndexOrZero 355 MAX-ACCESS read-create 356 STATUS current 357 DESCRIPTION 358 "This object is used to set the interface whose IP address 359 will be used as source ip while sending the SNMP TRAPs. 360 This object should be used in conjunction with the 361 hpicfSnmpResponseSourceAddressType and 362 hpicfSnmpTrapSourceAddrPolicy." 363 ::= { hpicfSnmpTrapSourceAddrEntry 4 } 364 365 366 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.3 367 hpicfSnmpAuthNotifyEnable OBJECT-TYPE 368 SYNTAX INTEGER 369 { 370 enabled(1), 371 disabled(2) 372 } 373 MAX-ACCESS read-write 374 STATUS current 375 DESCRIPTION 376 "Controls whether hpicfSnmpAuthFail notifications will be generated. 377 The default value is �1� (Enabled). A value of �2� represents 378 Disabled. Writing this object requires authentication, such 379 as provided by SNMPv3. 380 381 NOTE that hpicfSnmpAuthFail and snmpEnableAuthenTraps (RFC-1157) 382 are mutually exclusive. While they may both be disabled, only 383 one may be enabled at any given time. Notifications enabled by 384 hpicfSnmpAuthFail are more comprehensive and are therefore 385 recommended." 386 ::= { hpicfSnmpGlobalCfg 3 } 387 388 389 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.2 390 hpicfSnmpNotificationObjects OBJECT IDENTIFIER ::= { hpicfSnmpObjects 2 } 391 392 393 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.2.1 394 hpicfSnmpAuthFailCount OBJECT-TYPE 395 SYNTAX Counter32 396 MAX-ACCESS accessible-for-notify 397 STATUS current 398 DESCRIPTION 399 "A count of SNMP authorization failures detected by the SNMP entity." 400 ::= { hpicfSnmpNotificationObjects 1 } 401 402 403 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.2.2 404 hpicfSnmpAuthFailIPType OBJECT-TYPE 405 SYNTAX InetAddressType 406 MAX-ACCESS accessible-for-notify 407 STATUS current 408 DESCRIPTION 409 "Type of IP address contained in hpicfSnmpAuthFailIP." 410 ::= { hpicfSnmpNotificationObjects 2 } 411 412 413 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.2.3 414 hpicfSnmpAuthFailIP OBJECT-TYPE 415 SYNTAX InetAddress 416 MAX-ACCESS accessible-for-notify 417 STATUS current 418 DESCRIPTION 419 "IP address of sender of message that failed authentication." 420 ::= { hpicfSnmpNotificationObjects 3 } 421 422 423 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2 424 hpicfSnmpConformance OBJECT IDENTIFIER ::= { hpicfSnmpMIB 2 } 425 426 427 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.1 428 hpicfSnmpCompliances OBJECT IDENTIFIER ::= { hpicfSnmpConformance 1 } 429 430 431 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.1.1 432 hpicfSnmpCompliance MODULE-COMPLIANCE 433 STATUS current 434 DESCRIPTION 435 "A compliance statement for HP Routing switches with SNMP" 436 MODULE -- this module 437 MANDATORY-GROUPS { hpicfSnmpResponseSourceAddrTableCompliancesGroup, 438 hpicfSnmpTrapSourceAddrTableCompliancesGroup } 439 GROUP hpicfSnmpResponseSourceAddrTableGroup 440 DESCRIPTION 441 "A Collection of Object(s) that allow 442 configuration of policies for selecting source address for 443 SNMP response." 444 GROUP hpicfSnmpTrapSourceAddrTableGroup 445 DESCRIPTION 446 "A Collection of Object(s) that allow 447 configuration of Trap source Addresses" 448 ::= { hpicfSnmpCompliances 1 } 449 450 451 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2 452 hpicfSnmpCompliancesGroups OBJECT IDENTIFIER ::= { hpicfSnmpConformance 2 } 453 454 455 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.1 456 hpicfSnmpResponseSourceAddrTableCompliancesGroup OBJECT-GROUP 457 OBJECTS { hpicfSnmpResponseSourceAddressType, 458 hpicfSnmpResponseSourceAddrPolicy, 459 hpicfSnmpResponseSourceAddress, 460 hpicfSnmpResponseSourceAddrIfIndex } 461 STATUS current 462 DESCRIPTION 463 "A collection of objects allowing configuration of policies 464 in the switch for selecting the source address used while 465 generating SNMP response" 466 ::= { hpicfSnmpCompliancesGroups 1 } 467 468 469 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.2 470 hpicfSnmpTrapSourceAddrTableCompliancesGroup OBJECT-GROUP 471 OBJECTS { hpicfSnmpTrapSourceAddressType, 472 hpicfSnmpTrapSourceAddrPolicy, 473 hpicfSnmpTrapSourceAddress, 474 hpicfSnmpTrapSourceAddrIfIndex } 475 STATUS current 476 DESCRIPTION 477 "A collection of objects allowing configuration of source 478 addresses for SNMP traps geneated by the switch." 479 ::= { hpicfSnmpCompliancesGroups 2 } 480 481 482 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.3 483 hpicfSnmpResponseSourceAddrTableGroup OBJECT-GROUP 484 OBJECTS { hpicfSnmpResponseSourceAddressType, 485 hpicfSnmpResponseSourceAddrPolicy, 486 hpicfSnmpResponseSourceAddress, 487 hpicfSnmpResponseSourceAddrIfIndex } 488 STATUS current 489 DESCRIPTION 490 "Description." 491 ::= { hpicfSnmpCompliancesGroups 3 } 492 493 494 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.4 495 hpicfSnmpTrapSourceAddrTableGroup OBJECT-GROUP 496 OBJECTS { hpicfSnmpResponseSourceAddressType, 497 hpicfSnmpResponseSourceAddrPolicy, 498 hpicfSnmpResponseSourceAddress, 499 hpicfSnmpResponseSourceAddrIfIndex } 500 STATUS current 501 DESCRIPTION 502 "Description." 503 ::= { hpicfSnmpCompliancesGroups 4 } 504 505 506 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.5 507 hpicfSnmpNotifyObjectGroup OBJECT-GROUP 508 OBJECTS { hpicfSnmpAuthFailCount, 509 hpicfSnmpAuthFailIPType, hpicfSnmpAuthFailIP, 510 hpicfSnmpAuthNotifyEnable } 511 STATUS current 512 DESCRIPTION 513 "The operational status of hpicfSwitchAuthServerFail notifications. 514 The default value is �1� (Enabled). A value of �2� represents 515 Disabled. Writing this object requires authentication, such 516 as provided by SNMPv3." 517 ::= { hpicfSnmpCompliancesGroups 5 } 518 519 520 -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.6 521 hpicfSnmpNotificationGroup NOTIFICATION-GROUP 522 NOTIFICATIONS { hpicfSnmpAuthFail } 523 STATUS current 524 DESCRIPTION 525 "Description." 526 ::= { hpicfSnmpCompliancesGroups 6 } 527 528 529END 530