1HP-ICF-SNMP-MIB DEFINITIONS ::= BEGIN
2
3    IMPORTS
4        hpSwitch
5            FROM HP-ICF-OID
6        ifIndex, InterfaceIndexOrZero
7            FROM IF-MIB
8        InetAddressType, InetAddress
9            FROM INET-ADDRESS-MIB
10        OBJECT-GROUP, MODULE-COMPLIANCE, NOTIFICATION-GROUP
11            FROM SNMPv2-CONF
12        Counter32, OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE
13            FROM SNMPv2-SMI;
14
15
16    -- 1.3.6.1.4.1.11.2.14.11.5.1.38
17    hpicfSnmpMIB MODULE-IDENTITY
18        LAST-UPDATED "200708240000Z"      -- August 24, 2007 at 00:00 GMT
19        ORGANIZATION
20            "Hewlett-Packard Company
21            Procurve Networking Business"
22        CONTACT-INFO
23            "Hewlett-Packard Company
24            8000 Foothills Blvd.
25            Roseville, CA 95747"
26        DESCRIPTION
27            "This MIB module contains HP proprietary
28            objects for managing SNMP entity."
29        REVISION "200611110000Z"      -- November 11, 2006 at 00:00 GMT
30        DESCRIPTION
31            "Updated description and changed InterfaceIndex
32                    to InterfaceIndexOrZero for
33                    hpicfSnmpResponseSourceAddrIfIndex and
34                    hpicfSnmpTrapSourceAddrIfIndex objects."
35        REVISION "200609010000Z"      -- September 01, 2006 at 00:00 GMT
36        DESCRIPTION
37            "Initial revision"
38        REVISION "200708240000Z"      -- August 24, 2007 at 00:00 GMT
39        DESCRIPTION
40            "Added hpicfSnmpNotification information."
41        ::= { hpSwitch 38 }
42
43
44
45
46--
47-- Node definitions
48--
49
50    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.0
51    hpicfSnmpNotification OBJECT IDENTIFIER ::= { hpicfSnmpMIB 0 }
52
53    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.0.1
54    hpicfSnmpAuthFail NOTIFICATION-TYPE
55        OBJECTS { hpicfSnmpAuthFailCount, hpicfSnmpAuthFailIPType, hpicfSnmpAuthFailIP }
56
57        STATUS current
58        DESCRIPTION
59            "The switch sends this notification when an SNMP
60            SET command fails at the authorization check stage.
61            This notification applies to SETs within the hpicf tree that
62            are network security related.  This object is controlled
63            by hpicfSnmpAuthNotifyEnable"
64
65        ::= { hpicfSnmpNotification 1 }
66
67
68    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1
69    hpicfSnmpObjects OBJECT IDENTIFIER ::= { hpicfSnmpMIB 1 }
70
71
72    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1
73    hpicfSnmpConfig OBJECT IDENTIFIER ::= { hpicfSnmpObjects 1 }
74
75
76    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1
77    hpicfSnmpGlobalCfg OBJECT IDENTIFIER ::= { hpicfSnmpConfig 1 }
78
79
80    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1
81    hpicfSnmpResponseSourceAddrPolicyTable OBJECT-TYPE
82        SYNTAX SEQUENCE OF HpicfSnmpResponseSourceAddrPolicyEntry
83        MAX-ACCESS not-accessible
84        STATUS current
85        DESCRIPTION
86            "A table of entries used to configure the policy for
87            selecting source address while sending SNMP response.
88            When this entry is configured, the source address field
89            in the IP PKT header get modified based on the configured
90            option. There are 4 valid options that can be configured
91            for ipv4 and ipv6 networks
92            a) rfc1517
93               This is the default behavior if no other policy is
94               configured. In this case the source address will be
95               the address of the interface from which packet goes
96               out of the box.
97            b) user configured ip address
98               In this case the configured address will be used as
99               source address in the SNMP response.
100            c) user configured interface
101               In this case the IP address configured on the specified
102               interface will be used as source address in the SNMP
103               response. In case of multinet interface then smallest
104               IP address present on the interface in lexicographical
105               order will be used as source address while sending
106               SNMP responses for requests.
107            d) dst_ip_of_request
108               In this case, the destination ip address present in
109               the IP header of received SNMP request will be used
110               as source address in the SNMP response."
111        ::= { hpicfSnmpGlobalCfg 1 }
112
113
114    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1
115    hpicfSnmpResponseSourceAddrPolicyEntry OBJECT-TYPE
116        SYNTAX HpicfSnmpResponseSourceAddrPolicyEntry
117        MAX-ACCESS not-accessible
118        STATUS current
119        DESCRIPTION
120            "An entry in the table, containing information about
121            a single source address. This table alows only 2 values
122            that can be used as index to this table. These are:
123            1) hpicfSnmpResponseSourceAddressType = ipv4
124              Where user wants to configure the source address type
125              used while sending the SNMP response on IPV4 network.
126            2) hpicfSnmpResponseSourceAddressType = ipv6
127             Where user wants to configure the source address type
128             used while sending the SNMP response on IPV6 network."
129        INDEX { hpicfSnmpResponseSourceAddressType }
130        ::= { hpicfSnmpResponseSourceAddrPolicyTable 1 }
131
132
133    HpicfSnmpResponseSourceAddrPolicyEntry ::=
134        SEQUENCE {
135            hpicfSnmpResponseSourceAddressType
136                InetAddressType,
137            hpicfSnmpResponseSourceAddrPolicy
138                INTEGER,
139            hpicfSnmpResponseSourceAddress
140                InetAddress,
141            hpicfSnmpResponseSourceAddrIfIndex
142                InterfaceIndexOrZero
143         }
144
145    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1.1
146    hpicfSnmpResponseSourceAddressType OBJECT-TYPE
147        SYNTAX InetAddressType
148        MAX-ACCESS accessible-for-notify
149        STATUS current
150        DESCRIPTION
151            "We allow only 2 values for this object as an index for
152            hpicfSnmpResponseSourceAddrPolicyEntry -
153            1) hpicfSnmpResponseSourceAddressType = ipv4
154              Where user wants to configure the source address type
155              used while sending the SNMP response on IPV4 network
156            2) hpicfSnmpResponseSourceAddressType = ipv6
157              Where user wants to configure the source address type
158              used while sending the SNMP response on IPV6 network."
159        ::= { hpicfSnmpResponseSourceAddrPolicyEntry 1 }
160
161
162    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1.2
163    hpicfSnmpResponseSourceAddrPolicy OBJECT-TYPE
164        SYNTAX INTEGER
165            {
166            rfc1517(1),
167            configuredIP(2),
168            configuredInterface(3),
169            dstIpOfRequest(4)
170            }
171        MAX-ACCESS read-create
172        STATUS current
173        DESCRIPTION
174            " This specifies the policy for selecting the source
175            address for outgoing SNMP responses.
176            a) rfc1517
177             This is the default behavior if no other policy is
178             configured. In this case the source address will be
179             the address of the interface from which packet goes
180             out of the box.
181            b) configuredIP
182             By setting this value will enable the SNMP agent to use
183             IP addresses specified in hpicfSnmpResponseSourceAddress
184             object as source address while sending the response.
185             hpicfSnmpResponseSourceAddress must be set to a valid
186             and active ip address before setting policy to
187             configuredIP.
188            c) configuredInterface
189             By setting this value will enable the SNMP agent to use
190             IP addresses configured on the interface specified by
191             hpicfSnmpResponseSourceAddrIfIndex object as source
192             address while sending the response.
193             In case of multinet interface then smallest IP
194             address present on the interface in lexicographical
195             order will be used as source address while sending
196             SNMP responses for requests.
197             hpicfSnmpResponseSourceAddrIfIndex object must be set
198             to a valid loopback interface number before setting
199             policy to configuredInterface.
200            d) dst_ip_of_request
201             In this case, the destination ip address present in
202             the IP header of received SNMP request will be used as
203             source address in the SNMP response."
204        DEFVAL { 1 }
205        ::= { hpicfSnmpResponseSourceAddrPolicyEntry 2 }
206
207
208    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1.3
209    hpicfSnmpResponseSourceAddress OBJECT-TYPE
210        SYNTAX InetAddress
211        MAX-ACCESS read-create
212        STATUS current
213        DESCRIPTION
214            "This object is used to set the IP address which will be
215            used as source ip while sending the SNMP response.
216            This object should be used in conjunction with the
217            hpicfSnmpResponseSourceAddressType and
218            hpicfSnmpResponseSourceAddrPolicy."
219        ::= { hpicfSnmpResponseSourceAddrPolicyEntry 3 }
220
221
222    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.1.1.4
223    hpicfSnmpResponseSourceAddrIfIndex OBJECT-TYPE
224        SYNTAX InterfaceIndexOrZero
225        MAX-ACCESS read-create
226        STATUS current
227        DESCRIPTION
228            "This object is used to set the interface whose IP address
229            will be used as source IP while sending the SNMP response.
230            This object should be used in conjunction with the
231            hpicfSnmpResponseSourceAddressType and
232            hpicfSnmpResponseSourceAddrPolicy."
233        ::= { hpicfSnmpResponseSourceAddrPolicyEntry 4 }
234
235
236    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2
237    hpicfSnmpTrapSourceAddrTable OBJECT-TYPE
238        SYNTAX SEQUENCE OF HpicfSnmpTrapSourceAddrEntry
239        MAX-ACCESS not-accessible
240        STATUS current
241        DESCRIPTION
242            "A table of entries used to configure the source address
243            used while generating SNMP Traps. When this entry is
244            configured, the source address field in the IP PKT header
245            get modified based on the configured option."
246        ::= { hpicfSnmpGlobalCfg 2 }
247
248
249    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1
250    hpicfSnmpTrapSourceAddrEntry OBJECT-TYPE
251        SYNTAX HpicfSnmpTrapSourceAddrEntry
252        MAX-ACCESS not-accessible
253        STATUS current
254        DESCRIPTION
255            "An entry in the table, containing information about
256            a single source address. This table alows only 2 values
257            that can be used as index to this table. These are:
258            1) hpicfSnmpResponseSourceAddressType = ipv4
259              Where user wants to configure the source address
260              used while sending the SNMP TRAPs on IPV4 network.
261            2) hpicfSnmpResponseSourceAddressType = ipv6
262              Where user wants to configure the source address
263              used while sending the SNMP TRAPs on IPV6 network."
264        INDEX { hpicfSnmpTrapSourceAddressType }
265        ::= { hpicfSnmpTrapSourceAddrTable 1 }
266
267
268    HpicfSnmpTrapSourceAddrEntry ::=
269        SEQUENCE {
270            hpicfSnmpTrapSourceAddressType
271                InetAddressType,
272            hpicfSnmpTrapSourceAddrPolicy
273                INTEGER,
274            hpicfSnmpTrapSourceAddress
275                InetAddress,
276            hpicfSnmpTrapSourceAddrIfIndex
277                InterfaceIndexOrZero
278         }
279
280    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1.1
281    hpicfSnmpTrapSourceAddressType OBJECT-TYPE
282        SYNTAX InetAddressType
283        MAX-ACCESS accessible-for-notify
284        STATUS current
285        DESCRIPTION
286            " This table alows only 2 values
287            that can be used as index to this table. These are:
288            1) hpicfSnmpResponseSourceAddressType = ipv4
289             Where user wants to configure the source address
290             used while sending the SNMP TRAPs on IPV4 network.
291            2) hpicfSnmpResponseSourceAddressType = ipv6
292             Where user wants to configure the source address
293             used while sending the SNMP TRAPs on IPV6 network."
294        ::= { hpicfSnmpTrapSourceAddrEntry 1 }
295
296
297    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1.2
298    hpicfSnmpTrapSourceAddrPolicy OBJECT-TYPE
299        SYNTAX INTEGER
300            {
301            rfc1517(1),
302            configuredIP(2),
303            configuredInterface(3),
304            dstIpOfRequest(4)
305            }
306        MAX-ACCESS read-create
307        STATUS current
308        DESCRIPTION
309            " This specifies the policy for selecting the source
310            address for outgoing SNMP responses.
311            a) rfc1517
312             This is the default behavior if no other policy is
313             configured. In this case the source address will be
314             the address of the interface from which packet goes
315             out of the box.
316            b) configuredIP
317             By setting this value will enable the SNMP agent to use
318             IP addresses specified in hpicfSnmpResponseSourceAddress
319             object as source address while sending the response.
320             hpicfSnmpTrapSourceAddress must be set to a valid
321             and active ip address before setting policy to
322             configuredIP.
323            c) configuredInterface
324             By setting this value will enable the SNMP agent to use
325             IP addresses configured on the interface specified by
326             hpicfSnmpResponseSourceAddrIfIndex object as source
327             address while sending the response.
328             In case of multinet interface then smallest IP
329             address present on the interface in lexicographical
330             order will be used as source address while sending
331             SNMP responses for requests.
332             hpicfSnmpTrapSourceAddrIfIndex object must be set
333             to a valid loopback interface number before setting
334             policy to configuredInterface."
335        ::= { hpicfSnmpTrapSourceAddrEntry 2 }
336
337
338    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1.3
339    hpicfSnmpTrapSourceAddress OBJECT-TYPE
340        SYNTAX InetAddress
341        MAX-ACCESS read-create
342        STATUS current
343        DESCRIPTION
344            "This object is used to set the IP address which will be
345            used as source ip while sending the SNMP TRAPs.
346            This object should be used in conjunction with the
347            hpicfSnmpResponseSourceAddressType and
348            hpicfSnmpTrapSourceAddrPolicy."
349        ::= { hpicfSnmpTrapSourceAddrEntry 3 }
350
351
352    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.2.1.4
353    hpicfSnmpTrapSourceAddrIfIndex OBJECT-TYPE
354        SYNTAX InterfaceIndexOrZero
355        MAX-ACCESS read-create
356        STATUS current
357        DESCRIPTION
358            "This object is used to set the interface whose IP address
359            will be used as source ip while sending the SNMP TRAPs.
360            This object should be used in conjunction with the
361            hpicfSnmpResponseSourceAddressType and
362            hpicfSnmpTrapSourceAddrPolicy."
363        ::= { hpicfSnmpTrapSourceAddrEntry 4 }
364
365
366    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.1.1.3
367    hpicfSnmpAuthNotifyEnable OBJECT-TYPE
368        SYNTAX INTEGER
369            {
370            enabled(1),
371            disabled(2)
372            }
373        MAX-ACCESS read-write
374        STATUS current
375        DESCRIPTION
376            "Controls whether hpicfSnmpAuthFail notifications will be generated.
377            The default value is �1� (Enabled).  A value of �2� represents
378            Disabled.  Writing this object requires authentication, such
379            as provided by SNMPv3.
380
381            NOTE that hpicfSnmpAuthFail and snmpEnableAuthenTraps (RFC-1157)
382            are mutually exclusive.  While they may both be disabled, only
383            one may be enabled at any given time.  Notifications enabled by
384            hpicfSnmpAuthFail are more comprehensive and are therefore
385            recommended."
386        ::= { hpicfSnmpGlobalCfg 3 }
387
388
389    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.2
390    hpicfSnmpNotificationObjects OBJECT IDENTIFIER ::= { hpicfSnmpObjects 2 }
391
392
393    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.2.1
394    hpicfSnmpAuthFailCount OBJECT-TYPE
395        SYNTAX Counter32
396        MAX-ACCESS accessible-for-notify
397        STATUS current
398        DESCRIPTION
399            "A count of SNMP authorization failures detected by the SNMP entity."
400        ::= { hpicfSnmpNotificationObjects 1 }
401
402
403    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.2.2
404    hpicfSnmpAuthFailIPType OBJECT-TYPE
405        SYNTAX InetAddressType
406        MAX-ACCESS accessible-for-notify
407        STATUS current
408        DESCRIPTION
409            "Type of IP address contained in hpicfSnmpAuthFailIP."
410        ::= { hpicfSnmpNotificationObjects 2 }
411
412
413    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.1.2.3
414    hpicfSnmpAuthFailIP OBJECT-TYPE
415        SYNTAX InetAddress
416        MAX-ACCESS accessible-for-notify
417        STATUS current
418        DESCRIPTION
419            "IP address of sender of message that failed authentication."
420        ::= { hpicfSnmpNotificationObjects 3 }
421
422
423    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2
424    hpicfSnmpConformance OBJECT IDENTIFIER ::= { hpicfSnmpMIB 2 }
425
426
427    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.1
428    hpicfSnmpCompliances OBJECT IDENTIFIER ::= { hpicfSnmpConformance 1 }
429
430
431    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.1.1
432    hpicfSnmpCompliance MODULE-COMPLIANCE
433        STATUS current
434        DESCRIPTION
435            "A compliance statement for HP Routing switches with SNMP"
436        MODULE -- this module
437            MANDATORY-GROUPS { hpicfSnmpResponseSourceAddrTableCompliancesGroup,
438                hpicfSnmpTrapSourceAddrTableCompliancesGroup }
439            GROUP hpicfSnmpResponseSourceAddrTableGroup
440                DESCRIPTION
441                    "A Collection of Object(s) that allow
442                    configuration of policies for selecting source address for
443                    SNMP response."
444            GROUP hpicfSnmpTrapSourceAddrTableGroup
445                DESCRIPTION
446                    "A Collection of Object(s) that allow
447                    configuration of Trap source Addresses"
448        ::= { hpicfSnmpCompliances 1 }
449
450
451    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2
452    hpicfSnmpCompliancesGroups OBJECT IDENTIFIER ::= { hpicfSnmpConformance 2 }
453
454
455    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.1
456    hpicfSnmpResponseSourceAddrTableCompliancesGroup OBJECT-GROUP
457        OBJECTS { hpicfSnmpResponseSourceAddressType,
458            hpicfSnmpResponseSourceAddrPolicy,
459            hpicfSnmpResponseSourceAddress,
460            hpicfSnmpResponseSourceAddrIfIndex }
461        STATUS current
462        DESCRIPTION
463            "A collection of objects allowing configuration of policies
464            in the switch for selecting the source address used while
465            generating SNMP response"
466        ::= { hpicfSnmpCompliancesGroups 1 }
467
468
469    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.2
470    hpicfSnmpTrapSourceAddrTableCompliancesGroup OBJECT-GROUP
471        OBJECTS { hpicfSnmpTrapSourceAddressType,
472            hpicfSnmpTrapSourceAddrPolicy,
473            hpicfSnmpTrapSourceAddress,
474            hpicfSnmpTrapSourceAddrIfIndex }
475        STATUS current
476        DESCRIPTION
477            "A collection of objects allowing configuration of source
478            addresses for SNMP traps geneated by the switch."
479        ::= { hpicfSnmpCompliancesGroups 2 }
480
481
482    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.3
483    hpicfSnmpResponseSourceAddrTableGroup OBJECT-GROUP
484        OBJECTS { hpicfSnmpResponseSourceAddressType,
485            hpicfSnmpResponseSourceAddrPolicy,
486            hpicfSnmpResponseSourceAddress,
487            hpicfSnmpResponseSourceAddrIfIndex }
488        STATUS current
489        DESCRIPTION
490            "Description."
491        ::= { hpicfSnmpCompliancesGroups 3 }
492
493
494    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.4
495    hpicfSnmpTrapSourceAddrTableGroup OBJECT-GROUP
496        OBJECTS { hpicfSnmpResponseSourceAddressType,
497            hpicfSnmpResponseSourceAddrPolicy,
498            hpicfSnmpResponseSourceAddress,
499            hpicfSnmpResponseSourceAddrIfIndex }
500        STATUS current
501        DESCRIPTION
502            "Description."
503        ::= { hpicfSnmpCompliancesGroups 4 }
504
505
506    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.5
507    hpicfSnmpNotifyObjectGroup OBJECT-GROUP
508        OBJECTS { hpicfSnmpAuthFailCount,
509        hpicfSnmpAuthFailIPType, hpicfSnmpAuthFailIP,
510            hpicfSnmpAuthNotifyEnable }
511        STATUS current
512        DESCRIPTION
513            "The operational status of hpicfSwitchAuthServerFail notifications.
514            The default value is �1� (Enabled).  A value of �2� represents
515            Disabled.  Writing this object requires authentication, such
516            as provided by SNMPv3."
517        ::= { hpicfSnmpCompliancesGroups 5 }
518
519
520    -- 1.3.6.1.4.1.11.2.14.11.5.1.38.2.2.6
521    hpicfSnmpNotificationGroup NOTIFICATION-GROUP
522        NOTIFICATIONS { hpicfSnmpAuthFail }
523        STATUS current
524        DESCRIPTION
525            "Description."
526        ::= { hpicfSnmpCompliancesGroups 6 }
527
528
529END
530