-- ============================================================================= -- Revision history: -- Date Version Author Chanage Description -- 2010/8/27 2.00.004 D-Link Modify Surveillance Vlan MIB object description -- 2010/8/26 2.00.003 D-Link Remove table of Surveillance Vlan MIB -- 2010/8/13 2.00.002 D-Link Modify Surveillance Vlan MIB object -- 2010/06/04 2.00.001 D-Link Change string "Camera" to "Surveillance" in mib file. -- 2010/04/16 2.00.000 D-Link 1. Change version from 1.01.003 to 2.00.000 -- 2. Change DHCP Server Screen form per-port setting to -- port-list setting. -- 2010/03/26 1.01.003 D-Link 1.New Features: Auto Camera Vlan -- 2010/03/12 1.01.002 D-Link Added Fan Status MIB object. -- (OID:1.3.6.1.4.1.171.10.76.11.1.15.1). -- 2010/03/04 1.01.001 D-Link Fix the private MIB DHCP auto configuration -- description error and D-View compile error. -- 2010/02/05 1.01.000 D-Link 1.Change version from 1.00.011 to 1.01.000. -- 2.New Features: -- SSL -- SNMPV3 -- ARP Spoofing Prevention -- DHCP Auto Configuration -- DHCP Server Screening -- Multicast Filtering -- 2009/11/19 1.00.003 D-Link Modify all MIB objects' description. -- -- 2009/10/28 1.00.002 D-Link Fix portSecMLA fix portSecMLA support -- setting range error and update description. -- Modify STP mib description in stpGlobal -- object and its members. -- Modify ACL mib description in aclProfile -- object and its members. -- 2009/10/02 1.00.001 D-Link Fix sysgroupinterval, sysSwitchName -- SysLocationName, stpPortPriority, -- stpBridgeHelloTime, dot1xAuthMaxReq, -- dot1xAuthQuietPeriod, sysLBDRecoverTime -- and sysLBDInterval support settings range -- description error. -- tftpFwTftpOperationStatus add new status -- " 5: transmit(4) ". -- 2009/06/25 1.00.000 D-Link Initial version -- -- Revision End -- ============================================================================= DGS-1210-48-AX DEFINITIONS ::= BEGIN IMPORTS MODULE-IDENTITY, OBJECT-TYPE, enterprises, IpAddress, Integer32, Unsigned32, TimeTicks, Counter32 FROM SNMPv2-SMI InetAddress FROM INET-ADDRESS-MIB InterfaceIndex,InterfaceIndexOrZero FROM IF-MIB SnmpAdminString,SnmpEngineID,SnmpSecurityLevel FROM SNMP-FRAMEWORK-MIB dot1dBridge, dot1dBasePortEntry, dot1dBasePort FROM BRIDGE-MIB RowStatus, TruthValue, DisplayString, TEXTUAL-CONVENTION, MacAddress FROM SNMPv2-TC; d-link OBJECT IDENTIFIER ::= { enterprises 171 } dlink-products OBJECT IDENTIFIER ::= { d-link 10 } dlink-DGS1210SeriesProd OBJECT IDENTIFIER ::= { dlink-products 76} dgs-1210-48ax OBJECT IDENTIFIER ::= { dlink-DGS1210SeriesProd 11 } VlanIndex ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "A value used to index per-VLAN tables: values of 0 and 4095 are not permitted; if the value is between 1 and 4094 inclusive, it represents an IEEE 802.1Q VLAN-ID with global scope within a given bridged domain (see VlanId textual convention). If the value is greater than 4095 then it represents a VLAN with scope local to the particular agent, i.e. one without a global VLAN-ID assigned to it. Such VLANs are outside the scope of IEEE 802.1Q but it is convenient to be able to manage them in the same way using this MIB." SYNTAX Unsigned32 PortList ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Each octet within this value specifies a set of eight ports, with the first octet specifying ports 1 through 8, the second octet specifying ports 9 through 16, etc. Within each octet, the most significant bit represents the lowest numbered port, and the least significant bit represents the highest numbered port. Thus, each port of the bridge is represented by a single bit within the value of this object. If that bit has a value of '1' then that port is included in the set of ports; the port is not included if its bit has a value of '0'." SYNTAX OCTET STRING BridgeId ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The Bridge-Identifier as used in the Spanning Tree Protocol to uniquely identify a bridge. Its first two octets (in network byte order) contain a priority value and its last 6 octets contain the MAC address used to refer to a bridge in a unique fashion (typically, the numerically smallest MAC address of all ports on the bridge). Several objects in this MIB module represent values of timers used by the Spanning Tree Protocol. In this MIB, these timers have values in units of hundreths of a second (i.e. 1/100 secs). These timers, when stored in a Spanning Tree Protocol's BPDU, are in units of 1/256 seconds. Note, however, that 802.1D-1990 specifies a settable granularity of no more than 1 second for these timers. To avoid ambiguity, a data type is defined here as a textual convention and all representation of these timers in this MIB module are defined using this data type. An algorithm is also defined for converting between the different units, to ensure a timer's value is not distorted by multiple conversions." SYNTAX OCTET STRING (SIZE (8)) Timeout ::= TEXTUAL-CONVENTION DISPLAY-HINT "d4" STATUS current DESCRIPTION "A STP timer in units of 1/100 seconds To convert a Timeout value into a value in units of 1/256 seconds, the following algorithm should be used: b = floor( (n * 256) / 100) where: floor = quotient [ignore remainder] n is the value in 1/100 second units b is the value in 1/256 second units To convert the value from 1/256 second units back to 1/100 seconds, the following algorithm should be used: n = ceiling( (b * 100) / 256) where: ceiling = quotient [if remainder is 0], or quotient + 1 [if remainder is non-zero] n is the value in 1/100 second units b is the value in 1/256 second units Note: it is important that the arithmetic operations are done in the order specified (i.e., multiply first, divide second)." SYNTAX INTEGER -- ----------------------------------------------------------------- -- -- groups in the MIB -- ----------------------------------------------------------------- -- companySystem OBJECT IDENTIFIER ::= { dgs-1210-48ax 1 } companyIpifGroup OBJECT IDENTIFIER ::= { dgs-1210-48ax 2 } companyTftpGroup OBJECT IDENTIFIER ::= { dgs-1210-48ax 3 } companyMiscGroup OBJECT IDENTIFIER ::= { dgs-1210-48ax 4 } companyRSTP OBJECT IDENTIFIER ::= { dgs-1210-48ax 6 } companyDot1qVlanGroup OBJECT IDENTIFIER ::= { dgs-1210-48ax 7 } companyLA OBJECT IDENTIFIER ::= { dgs-1210-48ax 8 } companyStaticMAC OBJECT IDENTIFIER ::= { dgs-1210-48ax 9 } companyIgsGroup OBJECT IDENTIFIER ::= { dgs-1210-48ax 10 } companyDot1xGroup OBJECT IDENTIFIER ::= { dgs-1210-48ax 11 } companyQoSGroup OBJECT IDENTIFIER ::= { dgs-1210-48ax 12 } companyTrafficMgmt OBJECT IDENTIFIER ::= { dgs-1210-48ax 13 } companySecurity OBJECT IDENTIFIER ::= { dgs-1210-48ax 14 } companyACLGroup OBJECT IDENTIFIER ::= { dgs-1210-48ax 15 } companySyslog OBJECT IDENTIFIER ::= { dgs-1210-48ax 16 } companyLBD OBJECT IDENTIFIER ::= { dgs-1210-48ax 17 } companyMirror OBJECT IDENTIFIER ::= { dgs-1210-48ax 18 } companyTrapSetting OBJECT IDENTIFIER ::= { dgs-1210-48ax 19 } companySNTPSetting OBJECT IDENTIFIER ::= { dgs-1210-48ax 20 } companyVoiceVlan OBJECT IDENTIFIER ::= { dgs-1210-48ax 21 } companySNMPV3 OBJECT IDENTIFIER ::= { dgs-1210-48ax 25 } companyAutoSurveillanceVlan OBJECT IDENTIFIER ::= { dgs-1210-48ax 26 } companyTraps OBJECT IDENTIFIER ::= { dgs-1210-48ax 27 } -- ---------------------------------------------------------------- -- -- ------------------------------------------------------------------ -- companySystem -- ------------------------------------------------------------------ sysSwitchName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..20)) MAX-ACCESS read-write STATUS current DESCRIPTION "System name used for identification of the device. The following characters are allowed to input. 0 ~ 9 / a ~ z / A ~ Z Special character: ( ) - + _ = ." ::= { companySystem 1 } sysHardwareVersion OBJECT-TYPE SYNTAX DisplayString (SIZE(1..15)) MAX-ACCESS read-only STATUS current DESCRIPTION "Version number of the Hardware." DEFVAL { "" } ::= { companySystem 2 } sysFirmwareVersion OBJECT-TYPE SYNTAX DisplayString (SIZE(1..15)) MAX-ACCESS read-only STATUS current DESCRIPTION "Version number of the Firmware." DEFVAL { "" } ::= { companySystem 3 } sysLoginTimeoutInterval OBJECT-TYPE SYNTAX Integer32 (3..30) MAX-ACCESS read-write STATUS current DESCRIPTION "This time interval is used to count the time and logout web interface automatically." DEFVAL { 5 } ::= { companySystem 4 } sysLocationName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..20)) MAX-ACCESS read-write STATUS current DESCRIPTION "The location name of this node (e.g., `telephone closet, 3rd floor'). If the location is unknown, the value is the zero-length string." ::= { companySystem 5 } sysGroupInterval OBJECT-TYPE SYNTAX Integer32 (0 | 120..1225) MAX-ACCESS read-write STATUS current DESCRIPTION "Group Interval is used to send D-link Discover packet to D-link SmartConsole Utility frequency. The timer in units of seconds. Set value 0 to disable group Interval." ::= { companySystem 6 } sysSystemPassword OBJECT-TYPE SYNTAX DisplayString (SIZE(1..20)) MAX-ACCESS read-write STATUS current DESCRIPTION "This object is used to set System Password, The following characters are allowed to input: semicolon, question mark, space, and double quotation mark." ::= { companySystem 7 } sysSafeGuardEnable OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is used to set Safeguard Enable\Disable." DEFVAL { enable } ::= { companySystem 8 } sysRestart OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object allows the user to restart the Switch (i.e)the entire switch will operationally go down and start again. Setting a value of 'true' causes the switch to be restarted. When the switch operationally goes down, configuration save operation is initiated based on the configuration save option chosen. When the switch operationally come up, the saved configurations are restored based on the restore option chosen. Once the switch is restarted, the value of this object reverts to 'false'." DEFVAL { false } ::= { companySystem 9 } sysSave OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object is used to save Configuration." DEFVAL { false } ::= { companySystem 10 } sysPowerSavingEnable OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The Power Saving mode is capable of reducing power consumption automatically when connected devices are switched off or cable length less than 20meters. By reducing power consumption, less heat is produced, resulting in extended product life and lower operating costs. By default, the Power Saving mode is enabled." DEFVAL { enable } ::= { companySystem 11 } sysJumboFrameEnable OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Gigabit Web Smart Switches support jumbo frames (frames larger than the Ethernet frame size of 1522 bytes) of up to 10,000 bytes (tagged). Default jumbo frame is disabled." DEFVAL { disable } ::= { companySystem 12 } -- Port Control Table sysPortCtrlTable OBJECT-TYPE SYNTAX SEQUENCE OF SysPortCtrlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table to control the port specific parameters of the device like speed, duplex mode, etc." ::= { companySystem 13 } sysPortCtrlEntry OBJECT-TYPE SYNTAX SysPortCtrlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry appears in this table for each interface in the system. Index to the table is the interface index of the port." INDEX { sysPortCtrlIndex } ::= { sysPortCtrlTable 1 } SysPortCtrlEntry ::= SEQUENCE { sysPortCtrlIndex Integer32, sysPortCtrlSpeed INTEGER, sysPortCtrlOperStatus INTEGER, sysPortCtrlMDI INTEGER, sysPortCtrlFlowControl INTEGER, sysPortCtrlFlowControlOper INTEGER, sysPortCtrlType INTEGER } sysPortCtrlIndex OBJECT-TYPE SYNTAX Integer32 (1..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "Interface index of the port for the configuration in this entry applies." ::= { sysPortCtrlEntry 1 } sysPortCtrlSpeed OBJECT-TYPE SYNTAX INTEGER { rate1000M-Full (1), rate100M-Full (2), rate100M-Half (3), rate10M-Full (4), rate10M-Half (5), auto (6), disable (7) } MAX-ACCESS read-write STATUS current DESCRIPTION "Configures interface speed." ::= { sysPortCtrlEntry 2 } sysPortCtrlOperStatus OBJECT-TYPE SYNTAX INTEGER { down (1), rate1000M-Full (2), rate100M-Full (3), rate100M-Half (4), rate10M-Full (5), rate10M-Half (6) } MAX-ACCESS read-only STATUS current DESCRIPTION "The port's operating speed state." ::= { sysPortCtrlEntry 3 } sysPortCtrlMDI OBJECT-TYPE SYNTAX INTEGER { auto (1), mdi (2), mdix (3) } MAX-ACCESS read-write STATUS current DESCRIPTION "Configures interface auto/mdi/mdix mode. The default setting is Auto." ::= { sysPortCtrlEntry 4 } sysPortCtrlFlowControl OBJECT-TYPE SYNTAX INTEGER { enable (1), disable (2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enables / disables flow control for the interface." ::= { sysPortCtrlEntry 5 } sysPortCtrlFlowControlOper OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The link parner negotiate port's operating flow control state." ::= { sysPortCtrlEntry 6 } sysPortCtrlType OBJECT-TYPE SYNTAX INTEGER { fastethernet(1), gigabitethernet(2), fiberwith100BaseSFPModule(3), fiberwith1000BaseSFPModule(4) } MAX-ACCESS read-only STATUS current DESCRIPTION "The port's media type." ::= { sysPortCtrlEntry 7 } sysDhcpAutoConfiguration OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object indicates auto config is enabled or disabled." DEFVAL { disable } ::= { companySystem 14 } sysGPIOStatus OBJECT IDENTIFIER ::= { companySystem 15 } sysFanStatus OBJECT-TYPE SYNTAX INTEGER { normal(1), failure(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The Fan status for this device." ::= {sysGPIOStatus 1 } -- ------------------------------------------------------------------------- -- companyIpifGroup -- ------------------------------------------------------------------------- sysIpAddrCfgMode OBJECT-TYPE SYNTAX INTEGER { manual(1), dynamic(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the means by which the default interface in the device gets the IP address. If 'manual' mode is selected, the default interface takes the 'sysDefaultIpAddr' configured in the system. If 'dynamic' mode is selected, the default interface gets the IP address through dynamic IP address configuration protocols such as RARP client, BootP client, DHCP Client, etc. If the system fails to get the IP address dynamically through all the above protocols, the default interface uses the 'sysDefaultIpAddr' configured in the system." DEFVAL { manual } ::= { companyIpifGroup 1 } sysIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "Default IP Address of the system. This IP address, if modified, will take effect only when the configuration is stored & restored." ::= { companyIpifGroup 2 } sysIpSubnetMask OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "IP subnet mask for the default IP address. This subnet mask, if modified, will take effect only when the configuration is stored & restored." ::= { companyIpifGroup 3 } sysGateway OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "Gateway" ::= { companyIpifGroup 4 } -- ------------------------------------------------------------------------- -- companyTftpGroup -- ------------------------------------------------------------------------- tftpFwServerIpAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The TFTP server's IP address is used to upload or download firmware." ::= { companyTftpGroup 1 } tftpFwImageFileName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..64)) MAX-ACCESS read-write STATUS current DESCRIPTION "Configure firmware filename to download." ::= { companyTftpGroup 2 } tftpFwTftpOperation OBJECT-TYPE SYNTAX INTEGER { none(0), download(1), upload(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The tftp operates to perform downloading the firmware image to the unit. This object is used in conjunction with configBootTftpServerIp and configBootImageFileName." ::= { companyTftpGroup 3 } tftpFwTftpOperationStatus OBJECT-TYPE SYNTAX INTEGER { none(0), success(1), fail(2), progressing(3), transmit(4) } MAX-ACCESS read-only STATUS current DESCRIPTION "The tftp operation status represent firmware backup or upgrade status." ::= { companyTftpGroup 4 } tftpCfgServerIpAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The TFTP server's IP address is used to upload or download configuration file." ::= { companyTftpGroup 5 } tftpConfigFileName OBJECT-TYPE SYNTAX DisplayString (SIZE(1..64)) MAX-ACCESS read-write STATUS current DESCRIPTION "The configuration filename is used to store or retrieve config from the tftp server." ::= { companyTftpGroup 6 } tftpConfigTftpOperation OBJECT-TYPE SYNTAX INTEGER { download(1), upload(2), progressing(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "The tftp operates to perform either downloading the configuration file to the unit or uploading the current configuration file to the tftp server. This object is used in conjunction with configTftpServerIpAddress and configTftpServerFileName." ::= { companyTftpGroup 7 } tftpConfigTftpOperationStatus OBJECT-TYPE SYNTAX INTEGER { none(0), success(1), fail(2), progressing(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The tftp operation status represent configuration file backup or restore status." ::= { companyTftpGroup 8 } -- ------------------------------------------------------------------------- -- company Extension MIB, Miscellaneous Information -- ------------------------------------------------------------------------- miscReset OBJECT-TYPE SYNTAX INTEGER { reset(1), noop(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Physically resets the unit - use with care. A (1) resets the unit, a (2) does nothing." ::= { companyMiscGroup 2 } miscStatisticsReset OBJECT-TYPE SYNTAX INTEGER { reset(1), noop(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Resets the units statistics. A (1) resets the statistics count, a (2) does nothing." ::= { companyMiscGroup 3 } -- ---------------------------------------------------------------- -- The RSTP group -- ---------------------------------------------------------------- stpGlobal OBJECT IDENTIFIER ::= { companyRSTP 1 } rstpStatus OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The administrative module status requested by management for the RSTP Module. This enables or disables RSTP in the system. A value of 'enabled' (1) indicates that RSTP must be enabled in the device on all the ports. A value of 'disabled'(2) indicates that RSTP must be disabled in the device on all the ports." ::= {stpGlobal 1 } stpVersion OBJECT-TYPE SYNTAX INTEGER { stpCompatible(0), rstp(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The version of Spanning Tree Protocol the bridge is currently running. The value 'stpCompatible(0)' indicates the Spanning Tree Protocol specified in IEEE 802.1D and 'rstp(2)' indicates the Rapid Spanning Tree Protocol specified in IEEE 802.1w. New value may be defined as future versions of the protocol become available." REFERENCE "IEEE 802.1D-2004" DEFVAL { rstp } ::= { stpGlobal 2 } stpPriority OBJECT-TYPE SYNTAX INTEGER (0..61440) MAX-ACCESS read-write STATUS current DESCRIPTION "The bridge priority vector, as defined in 17.6. The first (RootBridgeID) and third (DesignatedBridgeID)components are both equal to the value of the Bridge Identifier (17.18.2). The other components are zero." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 3 } stpTxHoldCount OBJECT-TYPE SYNTAX INTEGER (1..10) MAX-ACCESS read-write STATUS current DESCRIPTION "The value used by the Port Transmit state machine to limit the maximum transmission rate." REFERENCE "IEEE 802.1D-2004" DEFVAL { 6 } ::= { stpGlobal 4 } stpProtocolSpecification OBJECT-TYPE SYNTAX INTEGER { unknown(1), decLb100(2), ieee8021d(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "An indication of what version of the Spanning Tree Protocol is being run. The value 'decLb100(2)' indicates the DEC LANbridge 100 Spanning Tree protocol. IEEE 802.1d implementations will return 'ieee8021d(3)'. If future versions of the IEEE Spanning Tree Protocol are released that are incompatible with the current version a new value will be defined." ::= { stpGlobal 5 } stpTimeSinceTopologyChange OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "The time (in hundredths of a second) since the last time a topology change was detected by the bridge entity." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 6 } stpTopChanges OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of topology changes detected by this bridge since the management entity was last reset or initialized." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 7 } stpDesignatedRoot OBJECT-TYPE SYNTAX BridgeId MAX-ACCESS read-only STATUS current DESCRIPTION "The bridge identifier of the root of the spanning tree as determined by the Spanning Tree Protocol as executed by this node. This value is used as the Root Identifier parameter in all Configuration Bridge PDUs originated by this node." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 8 } stpRootCost OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "The cost of the path to the root as seen from this bridge." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 9 } stpRootPort OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "The port number of the port which offers the lowest cost path from this bridge to the root bridge." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 10 } stpMaxAge OBJECT-TYPE SYNTAX Timeout MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum age of Spanning Tree Protocol information learned from the network on any port before it is discarded, in units of hundredths of a second. The rootTimes variable comprises the Bridges operational timer parameter values (Message Age, Max Age, Forward Delay, and Hello Time), derived from the values stored in portTimes (17.19.22) for the Root Port or from BridgeTimes (17.18.4)." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 11 } stpHelloTime OBJECT-TYPE SYNTAX Timeout MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of time between the transmission of Configuration bridge PDUs by this node on any port when it is the root of the spanning tree or trying to become so, in units of hundredths of a second. The interval between periodic transmissions of Configuration Messages by Designated Ports (Table 17-1)." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 12 } stpHoldTime OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "This time value determines the interval length during which no more than two Configuration bridge PDUs shall be transmitted by this node, in units of hundredths of a second." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 13 } stpForwardDelay OBJECT-TYPE SYNTAX Timeout MAX-ACCESS read-only STATUS current DESCRIPTION "This time value, measured in units of hundredths of a second, controls how fast a port changes its spanning state when moving towards the Forwarding state. The value determines how long the port stays in each of the Listening and Learning states, which precede the Forwarding state. This value is also used, when a topology change has been detected and is underway, to age all dynamic entries in the Forwarding Database. The delay used by STP Bridges (17.4) to transition Root and Designated Ports to Forwarding (Table 17-1)." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 14 } stpBridgeMaxAge OBJECT-TYPE SYNTAX Timeout (600..4000) MAX-ACCESS read-write STATUS current DESCRIPTION "The Max Age component of designatedTimes (17.19.5). This time value, measured in units of hundredths of a second. BridgeTimes comprises four components the current values of Bridge Forward Delay, Bridge Hello Time, and Bridge Max Age (17.13, Table 17-1), and a Message Age of zero." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 15 } stpBridgeHelloTime OBJECT-TYPE SYNTAX Timeout (100..1000) MAX-ACCESS read-write STATUS current DESCRIPTION "The Hello Time component of designatedTimes (17.19.5). This time value, measured in units of hundredths of a second. BridgeTimes comprises four components the current values of Bridge Forward Delay, Bridge Hello Time, and Bridge Max Age (17.13, Table 17-1), and a Message Age of zero." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 16 } stpBridgeForwardDelay OBJECT-TYPE SYNTAX Timeout (400..3000) MAX-ACCESS read-write STATUS current DESCRIPTION "The Forward Delay component of designatedTimes (17.19.5). This time value, measured in units of hundredths of a second. BridgeTimes comprises four components the current values of Bridge Forward Delay, Bridge Hello Time, and Bridge Max Age (17.13, Table 17-1), and a Message Age of zero." REFERENCE "IEEE 802.1D-2004" ::= { stpGlobal 17 } -- ------------------------------------- -- The Spanning Tree Port Table -- ------------------------------------- stpPortTable OBJECT-TYPE SYNTAX SEQUENCE OF StpPortEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table that contains port-specific information for the Spanning Tree Protocol." ::= { companyRSTP 2 } stpPortEntry OBJECT-TYPE SYNTAX StpPortEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of information maintained by every port about the Spanning Tree Protocol state for that port." INDEX { stpPort } ::= { stpPortTable 1 } StpPortEntry ::= SEQUENCE { stpPort INTEGER, stpPortPriority INTEGER, stpPortState INTEGER, stpPortEnable INTEGER, stpAdminPortPathCost INTEGER, stpPortPathCost INTEGER, stpPortDesignatedRoot BridgeId, stpPortDesignatedCost INTEGER, stpPortDesignatedBridge BridgeId, stpPortDesignatedPort OCTET STRING, stpPortForwardTransitions Counter32, stpPortProtocolMigration TruthValue, stpPortOperEdgePort TruthValue, stpPortAdminPointToPoint INTEGER, stpPortOperPointToPoint TruthValue, stpPortEdge INTEGER, stpPortRestrictedRole TruthValue, stpPortRestrictedTCN TruthValue } stpPort OBJECT-TYPE SYNTAX INTEGER (1..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The port number of the port for which this entry contains Spanning Tree Protocol management information." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 1 } stpPortPriority OBJECT-TYPE SYNTAX INTEGER (0..240) MAX-ACCESS read-write STATUS current DESCRIPTION "The value of the priority field which is contained in the first (in network byte order) octet of the (2 octet long) Port ID. The other octet of the Port ID is given by the value of stpPort." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 2 } stpPortState OBJECT-TYPE SYNTAX INTEGER { disabled(1), blocking(2), listening(3), learning(4), forwarding(5), broken(6) } MAX-ACCESS read-only STATUS current DESCRIPTION "The port's current state as defined by application of the Spanning Tree Protocol. This state controls what action a port takes on reception of a frame. If the bridge has detected a port that is malfunctioning it will place that port into the broken(6) state. For ports which are disabled (see stpPortEnable), this object will have a value of disabled(1)." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 3 } stpPortEnable OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The enabled/disabled status of the port." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 4 } stpAdminPortPathCost OBJECT-TYPE SYNTAX INTEGER (0..200000000) MAX-ACCESS read-write STATUS current DESCRIPTION "The contribution of this port to the path cost of paths towards the spanning tree root which include this port. Writing a value of '0' assigns the automatically calculated default Path Cost value to the ohter object stpPortPathCost. If the default Path Cost is being used,this object returns '0' when read." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 5 } stpPortPathCost OBJECT-TYPE SYNTAX INTEGER (1..200000000) MAX-ACCESS read-write STATUS current DESCRIPTION "The contribution of this port to the path cost of paths towards the spanning tree root which include this port." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 6 } stpPortDesignatedRoot OBJECT-TYPE SYNTAX BridgeId MAX-ACCESS read-only STATUS current DESCRIPTION "The unique Bridge Identifier of the Bridge recorded as the Root in the Configuration BPDUs transmitted by the Designated Bridge for the segment to which the port is attached." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 7 } stpPortDesignatedCost OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "The path cost of the Designated Port of the segment connected to this port. This value is compared to the Root Path Cost field in received bridge PDUs." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 8 } stpPortDesignatedBridge OBJECT-TYPE SYNTAX BridgeId MAX-ACCESS read-only STATUS current DESCRIPTION "The Bridge Identifier of the bridge which this port considers to be the Designated Bridge for this port's segment." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 9 } stpPortDesignatedPort OBJECT-TYPE SYNTAX OCTET STRING (SIZE (2)) MAX-ACCESS read-only STATUS current DESCRIPTION "The Port Identifier of the port on the Designated Bridge for this port's segment." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 10 } stpPortForwardTransitions OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of times this port has transitioned from the Learning state to the Forwarding state." ::= { stpPortEntry 11 } stpPortProtocolMigration OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "When operating in RSTP (version 2) mode, writing TRUE(1) to this object forces this port to transmit RSTP BPDUs. Any other operation on this object has no effect and it always returns FALSE(2) when read." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 12 } stpPortOperEdgePort OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The operational value of the Edge Port parameter. The object is initialized to the value of stpPortAdminEdgePort and is set FALSE on reception of a BPDU." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 13 } stpPortAdminPointToPoint OBJECT-TYPE SYNTAX INTEGER { forceTrue(0), forceFalse(1), auto(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The administrative point-to-point status of the LAN segment attached to this port. A value of forceTrue(0) indicates that this port should always be treated as if it is connected to a point-to-point link. A value of forceFalse(1) indicates that this port should be treated as having a shared media connection. A value of auto(2) indicates that this port is considered to have a point-to-point link if it is an Aggregator and all of its members are aggregatable, or if the MAC entity is configured for full duplex operation, either through auto-negotiation or by management means." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 14 } stpPortOperPointToPoint OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The operational point-to-point status of the LAN segment attached to this port. It indicates whether a port is considered to have a point-to-point connection or not. The value is determined by management or by auto-detection, as described in the stpPortAdminPointToPoint object." REFERENCE "IEEE 802.1D-2004" ::= { stpPortEntry 15 } stpPortEdge OBJECT-TYPE SYNTAX INTEGER { true(1), false(0), auto(2) } MAX-ACCESS read-write STATUS current DESCRIPTION " This parameter when TRUE(1) indicates that detection of a port as Edge Port happens automatically and FALSE(2) indicates that this feature is disabled." ::= { stpPortEntry 16 } stpPortRestrictedRole OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "A Boolean value set by management. If TRUE causes the Port not to be selected as Root Port for the CIST or any MSTI, even it has the best spanning tree priority vector. Such a Port will be selected as an Alternate Port after the Root Port has been selected. This parameter should be FALSE by default. If set it can cause lack of spanning tree connectivity. It is set by a network administrator to prevent bridges external to a core region of the network influencing the spanning tree active topology, possibly because those bridges are not under the full control of the administrator. This administrator configuration is also known as 'Root Guard'." ::= { stpPortEntry 17 } stpPortRestrictedTCN OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "A Boolean value set by management. If TRUE causes the Port not to propagate received topology change notifications and topology changes to other Ports. This parameter should be FALSE by default. If set it can cause temporary loss of connectivity after changes in a spanning trees active topology as a result of persistent incorrectly learnt station location information. It is set by a network administrator to prevent bridges external to a core region of the network causing address flushing in that region, possibly because those bridges are not under the full control of the administrator or MAC_Operational for the attached LANs transitions frequently." ::= { stpPortEntry 18 } -- ---------------------------------------------------------- -- The 802.1Q VLAN Groups -- ---------------------------------------------------------- dot1qVlanManagementOnOff OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable management VLAN mechanism." ::= { companyDot1qVlanGroup 2 } dot1qVlanManagementid OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The management VLAN ID, which will allow to forward packets of that VLAN to CPU." DEFVAL { 1 } ::= { companyDot1qVlanGroup 3 } dot1qVlanAsyOnOff OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable IEEE 802.1Q Asymmetric VLAN" ::= { companyDot1qVlanGroup 5 } -- ------------------------------------------------------------- -- The VLAN Database -- ------------------------------------------------------------- dot1qVlanTable OBJECT-TYPE SYNTAX SEQUENCE OF Dot1qVlanEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table containing static configuration information for each VLAN configured into the device by (local or network) management. All entries are permanent and will be restored after the device is reset." ::= { companyDot1qVlanGroup 6 } dot1qVlanEntry OBJECT-TYPE SYNTAX Dot1qVlanEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Information for a VLAN configured into the device by (local or network) management." INDEX { dot1qVlanName } ::= { dot1qVlanTable 1 } Dot1qVlanEntry ::= SEQUENCE { dot1qVlanName SnmpAdminString, dot1qVlanEgressPorts PortList, dot1qVlanForbiddenPorts PortList, dot1qVlanUntaggedPorts PortList, dot1qVlanRowStatus RowStatus } dot1qVlanName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..20)) MAX-ACCESS read-create STATUS current DESCRIPTION "An administratively assigned string, which may be used to identify the VLAN." REFERENCE "IEEE 802.1Q/D11 Section 12.10.2.1" ::= { dot1qVlanEntry 1 } dot1qVlanEgressPorts OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-create STATUS current DESCRIPTION "The set of ports which are permanently assigned to the egress list for this VLAN by management. Changes to a bit in this object affect the per-port per-VLAN Registrar control for Registration Fixed for the relevant GVRP state machine on each port. A port may not be added in this set if it is already a member of the set of ports in dot1qVlanForbiddenEgressPorts. The default value of this object is a string of zeros of appropriate length, indicating not fixed." REFERENCE "IEEE 802.1Q/D11 Section 12.7.7.3, 11.2.3.2.3" ::= { dot1qVlanEntry 2 } dot1qVlanForbiddenPorts OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-only STATUS current DESCRIPTION "The set of ports which are prohibited by management from being included in the egress list for this VLAN. Changes to this object that cause a port to be included or excluded affect the per-port per-VLAN Registrar control for Registration Forbidden for the relevant GVRP state machine on each port. A port may not be added in this set if it is already a member of the set of ports in dot1qVlanEgressPorts. The default value of this object is a string of zeros of appropriate length, excluding all ports from the forbidden set." REFERENCE "IEEE 802.1Q/D11 Section 12.7.7.3, 11.2.3.2.3" ::= { dot1qVlanEntry 3 } dot1qVlanUntaggedPorts OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-create STATUS current DESCRIPTION "The set of ports which should transmit egress packets for this VLAN as untagged. The default value of this object for the default VLAN (dot1qVlanIndex = 1) is a string of appropriate length including all ports. There is no specified default for other VLANs. If a device agent cannot support the set of ports being set then it will reject the set operation with an error. An example might be if a manager attempts to set more than one VLAN to be untagged on egress where the device does not support this IEEE 802.1Q option." REFERENCE "IEEE 802.1Q/D11 Section 12.10.2.1" ::= { dot1qVlanEntry 4 } dot1qVlanRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of a row in dot1qVlanTable. By setting this object, new entries can be created in dot1qVlanTable and existing entries can be removed from dot1qVlanTable. It can be used as specified in the SNMP v2 standard." ::= { dot1qVlanEntry 5 } -- ------------------------------------------------------------- -- The VLAN Port Configuration Table -- ------------------------------------------------------------- dot1qVlanPortTable OBJECT-TYPE SYNTAX SEQUENCE OF Dot1qVlanPortEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table containing per port control and status information for VLAN configuration in the device." ::= { companyDot1qVlanGroup 7 } dot1qVlanPortEntry OBJECT-TYPE SYNTAX Dot1qVlanPortEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Information controlling VLAN configuration for a port on the device." AUGMENTS { dot1dBasePortEntry } ::= { dot1qVlanPortTable 1 } Dot1qVlanPortEntry ::= SEQUENCE { dot1qVlanPvid VlanIndex } dot1qVlanPvid OBJECT-TYPE SYNTAX VlanIndex MAX-ACCESS read-write STATUS current DESCRIPTION "The PVID, the VLAN ID assigned to untagged frames or Priority-Tagged frames received on this port." REFERENCE "IEEE 802.1Q/D11 Section 12.10.1.1" DEFVAL { 1 } ::= { dot1qVlanPortEntry 1 } -- ------------------------------------------------------------- -- The VLAN Ungister Multicast Filter Table -- ------------------------------------------------------------- dot1qVlanUngisterMCFilterTable OBJECT-TYPE SYNTAX SEQUENCE OF Dot1qVlanUngisterMCFilterEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table contains the list of ports through which a router, in a particular VLAN is reachable." ::= { companyDot1qVlanGroup 8 } dot1qVlanUngisterMCFilterEntry OBJECT-TYPE SYNTAX Dot1qVlanUngisterMCFilterEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of multicast filter mode information for each VLAN ID." INDEX { dot1qVlanUngisterMCFilterVlanId } ::= { dot1qVlanUngisterMCFilterTable 1 } Dot1qVlanUngisterMCFilterEntry ::= SEQUENCE { dot1qVlanUngisterMCFilterVlanId Integer32, dot1qVlanUngisterMCFiltermode INTEGER } dot1qVlanUngisterMCFilterVlanId OBJECT-TYPE SYNTAX Integer32 (1..4094) MAX-ACCESS read-only STATUS current DESCRIPTION "Per Vlan to configure multicast filtering function." ::= { dot1qVlanUngisterMCFilterEntry 1 } dot1qVlanUngisterMCFiltermode OBJECT-TYPE SYNTAX INTEGER { filter(1), forward(0) } MAX-ACCESS read-write STATUS current DESCRIPTION "Filter unknown multicast frames or normal operation(i.e. forwarding)" ::= { dot1qVlanUngisterMCFilterEntry 2 } -- --------------------------------------------------------------------- -- LA Function -- --------------------------------------------------------------------- laSystem OBJECT IDENTIFIER ::= { companyLA 1 } laPortControl OBJECT IDENTIFIER ::= { companyLA 2 } -- ------------------------------------------------------------- -- Textual Conventions -- ------------------------------------------------------------- PortLaMode ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Defines how a Port Channel does channeling. lacp(1) - place the port into passive negotiation state, in which the port waits for its peer to initiate negotiation. static(2) - force the port to enable channeling. disable(3) - channeling is disabled." SYNTAX INTEGER { lacp(1), static(2), disable(3) } LacpKey ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The Actor or Partner Key value (0..65535)." SYNTAX Integer32 (0..65535) -- ------------------------------------------------------------------ -- The La System Group -- ------------------------------------------------------------------ laStatus OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Sets the Link Aggregation Module administrative status as enabled or disabled." ::= { laSystem 2 } -- -- Port Channel Table -- laPortChannelTable OBJECT-TYPE SYNTAX SEQUENCE OF LaPortChannelEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A Port-channel is created through ifMain table. After the creation of the port-channel, corresponding logical interface will be created in the ifMain table. This Port-channel table is indexed through Key values and allows to configure link selection policy and the Mac address for the port-channel. All other objects in this table displays the details of the port-channel." ::= { laSystem 3 } laPortChannelEntry OBJECT-TYPE SYNTAX LaPortChannelEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "There is one entry in this table for each created port-channel port." INDEX { laPortChannelIfIndex } ::= { laPortChannelTable 1 } LaPortChannelEntry ::= SEQUENCE { laPortChannelIfIndex InterfaceIndex, laPortChannelMemberList PortList, laPortChannelMode PortLaMode } laPortChannelIfIndex OBJECT-TYPE SYNTAX InterfaceIndex MAX-ACCESS read-only STATUS current DESCRIPTION "The index of the port-channel(Aggregator's interface index). " ::= { laPortChannelEntry 1 } laPortChannelMemberList OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-write STATUS current DESCRIPTION "Member Port list of the port channel. Add the ports as a aggregation member associated of a port-channel." ::= { laPortChannelEntry 2 } laPortChannelMode OBJECT-TYPE SYNTAX PortLaMode MAX-ACCESS read-write STATUS current DESCRIPTION "Current Operating Channel Mode of the port channel Lacp(1) - forcing the port to negotiate with the partner. manual(2) - force the port to enable channeling (Manual). disable(3) - channeling is disabled." ::= { laPortChannelEntry 3 } -- -- LA Port Control Table -- laPortControlTable OBJECT-TYPE SYNTAX SEQUENCE OF LaPortControlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table that contains Link Aggregation Control configuration information about every Aggregation Port associated with this device. A row appears in this table for each physical port." ::= { laPortControl 1 } laPortControlEntry OBJECT-TYPE SYNTAX LaPortControlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of Link Aggregation Control configuration parameters for each Aggregation Port on this device." INDEX { laPortControlIndex } ::= { laPortControlTable 1 } LaPortControlEntry ::= SEQUENCE { laPortControlIndex InterfaceIndex, laPortActorPortPriority INTEGER, laPortActorActivity INTEGER, laPortActorTimeout INTEGER } laPortControlIndex OBJECT-TYPE SYNTAX InterfaceIndex MAX-ACCESS read-only STATUS current DESCRIPTION "The index of the port." ::= { laPortControlEntry 1 } laPortActorPortPriority OBJECT-TYPE SYNTAX INTEGER (0..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The priority value assigned to this Aggregation Port. This 16-bit value is read-write." ::= { laPortControlEntry 2 } laPortActorActivity OBJECT-TYPE SYNTAX INTEGER { active(1), passive(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object indicates LACP_Activity to this Aggregation Port. LACP can be configured in one of two modes: active or passive. In active mode it will always send frames along the configured links. If the actor and partner are both in passive mode, they do not exchange LACP packets." ::= { laPortControlEntry 3 } laPortActorTimeout OBJECT-TYPE SYNTAX INTEGER { short(1), long(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object indicates LACP_Timeout to this Aggregation Port. short(1) - LACP Timeout 3 seconds. long (2) - LACP Timeout 90 seconds." ::= { laPortControlEntry 4 } -- ---------------------------------------------------------------- -- The STATIC MAC group -- ---------------------------------------------------------------- staticDisableAutoLearn OBJECT-TYPE SYNTAX INTEGER { on(1), off(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Set on to disable Auto Learning Excluding Uplink Port and set off to enable Auto Learning." ::= { companyStaticMAC 1 } staticAutoLearningList OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-write STATUS current DESCRIPTION "The set of the device's member ports that belong to the Static MAC auto learning enable/disable. For example, when Disable Auto Learning is enable, the octet value set up as '# 0x0F 0xFF 0xFF 0xFF' means from port 1 to port 4 are not in auto learning state, the other ports are in auto learning state. It can be set up when Disable Auto Learning is enable." ::= { companyStaticMAC 2 } staticTable OBJECT-TYPE SYNTAX SEQUENCE OF StaticEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of the Static MACs" ::= { companyStaticMAC 3 } staticEntry OBJECT-TYPE SYNTAX StaticEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A Static MAC entry containing the mac and forwarding port." INDEX { staticVlanID, staticMac,staticPort} ::= { staticTable 1 } StaticEntry ::= SEQUENCE { staticVlanID INTEGER, staticMac MacAddress, staticPort INTEGER, staticStatus RowStatus } staticVlanID OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "The VLAN ID of the static MAC entry." ::= { staticEntry 1 } staticMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The MAC address associated of the static MAC entry." ::= { staticEntry 2 } staticPort OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "The forwarding port of the static MAC entry." ::= { staticEntry 3 } staticStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-write STATUS current DESCRIPTION "The status of an entry in the Static MAC Table. Only a subset of the rowstatus variables (active, createAndGo, destroy) are available. The trunk member port can not set up static MAC." ::= { staticEntry 4 } -- --------------------------------------------------------------------- -- IGMP Snooping Function -- --------------------------------------------------------------------- igsSystem OBJECT IDENTIFIER ::= { companyIgsGroup 1 } igsVlan OBJECT IDENTIFIER ::= { companyIgsGroup 3 } igsStatus OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enables or disables IGMP snooping in the system. When set to 'enabled', the IGS module starts protocol operations. When set to 'disabled', the IGS module stops performing protocol operations." DEFVAL { 2 } ::= { igsSystem 1 } igsRouterPortPurgeInterval OBJECT-TYPE SYNTAX Integer32 (60..600) MAX-ACCESS read-write STATUS current DESCRIPTION "This is the interval (in seconds) after which a learnt router port entry will be purged. For each router port learnt, this timer runs for 'RouterPortPurgeInterval' seconds.When the timer expires, the learnt router port entry is purged. However if control messages are received from the router before the timer expiry, then the timer is restarted." DEFVAL { 260 } ::= { igsSystem 2 } igsHostPortPurgeInterval OBJECT-TYPE SYNTAX Integer32 (130..153025) MAX-ACCESS read-write STATUS current DESCRIPTION "This is the interval (in seconds) after which a learnt port entry will be purged. For each port on which report has been received this timer runs for 'PortPurgeInterval' seconds. This timer will be restarted whenever a report message is received from a host on the specific port. If the timer expires, then , the learnt port entry will be purged from the multicast group." DEFVAL {260} ::= { igsSystem 3 } igsRobustnessValue OBJECT-TYPE SYNTAX Integer32 (2..255) MAX-ACCESS read-write STATUS current DESCRIPTION "When the switch receives leave message on a port, it sends group specific query to check if there are any other interested receivers for the group. This attribute defines the maximum number of queries sent by the switch before deleting the port from the group membership information in the forwarding database. If the maximum retry count exceeds 'igsRobustnessValue', then the port will be deleted from the multicast group membership information in the forwarding database and received leave message will be forwarded onto the router ports if there are no interested receivers for the group." DEFVAL { 2 } ::= { igsSystem 4 } igsGrpQueryInterval OBJECT-TYPE SYNTAX Integer32 (1..25) MAX-ACCESS read-write STATUS current DESCRIPTION "The value of this attribute defines the time period with which the switch will send group specific queries on a port to check if there is any intersted receivers. The switch will send 'igsRobustnessValue' queries before removing the port from the group membership information in the forwarding database." DEFVAL { 1 } ::= { igsSystem 5 } igsQueryInterval OBJECT-TYPE SYNTAX Integer32 (60..600) MAX-ACCESS read-write STATUS current DESCRIPTION "This is the interval (in seconds) for which the switch sends general queries when it is configured as a querier for VLANs." DEFVAL { 125 } ::= { igsSystem 6 } igsQueryMaxResponseTime OBJECT-TYPE SYNTAX INTEGER (10..25) MAX-ACCESS read-write STATUS current DESCRIPTION "The maximum query response time advertised in IGMPv2 general queries on this interface." DEFVAL { 10 } ::= { igsSystem 7 } -- VLAN Based MAC Multicast Forwarding Table -- -- igsVlanMcastMacFwdTable OBJECT-TYPE -- SYNTAX SEQUENCE OF IgsVlanMcastMacFwdEntry -- MAX-ACCESS not-accessible -- STATUS current -- DESCRIPTION -- "This table contains MAC based multicast forwarding -- information. This information is applicable only if -- the 'igsVlanMcastForwardingMode' is set to 'macbased' " -- ::= { igsVlan 1 } -- -- igsVlanMcastMacFwdEntry OBJECT-TYPE -- SYNTAX IgsVlanMcastMacFwdEntry -- MAX-ACCESS not-accessible -- STATUS current -- DESCRIPTION -- "This table contains VLAN ID, multicast group MAC address and the -- list of ports onto which the multicast data packets for group -- should be forwarded." -- -- INDEX { igsVlanMcastMacFwdVlanId, -- igsVlanMcastMacFwdGroupAddress } -- ::= { igsVlanMcastMacFwdTable 1 } -- -- IgsVlanMcastMacFwdEntry ::= SEQUENCE { -- igsVlanMcastMacFwdVlanId Integer32, -- igsVlanMcastMacFwdGroupAddress MacAddress, -- igsVlanMcastMacFwdPortList PortList -- } -- -- igsVlanMcastMacFwdVlanId OBJECT-TYPE -- SYNTAX Integer32 (1..4094) -- MAX-ACCESS not-accessible -- STATUS current -- DESCRIPTION -- "VLAN ID pertaining to the Multicast forwarding entry" -- ::= { igsVlanMcastMacFwdEntry 1 } -- -- igsVlanMcastMacFwdGroupAddress OBJECT-TYPE -- SYNTAX MacAddress -- MAX-ACCESS not-accessible -- STATUS current -- DESCRIPTION -- "Multicast group MAC address." -- ::= { igsVlanMcastMacFwdEntry 2 } -- -- -- igsVlanMcastMacFwdPortList OBJECT-TYPE -- SYNTAX PortList -- MAX-ACCESS read-only -- STATUS current -- DESCRIPTION -- "List of ports onto which the multicast data -- packets destined for this group will be forwarded." -- ::= { igsVlanMcastMacFwdEntry 3 } -- VLAN based router table. igsVlanRouterTable OBJECT-TYPE SYNTAX SEQUENCE OF IgsVlanRouterEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table contains the list of ports through which a router, in a particular VLAN is reachable." ::= { igsVlan 3 } igsVlanRouterEntry OBJECT-TYPE SYNTAX IgsVlanRouterEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An igs vlan router entry contain the igs vlan router port list." INDEX { igsVlanRouterVlanId } ::= { igsVlanRouterTable 1 } IgsVlanRouterEntry ::= SEQUENCE { igsVlanRouterVlanId Integer32, igsVlanRouterPortList PortList } igsVlanRouterVlanId OBJECT-TYPE SYNTAX Integer32 (1..4094) MAX-ACCESS read-only STATUS current DESCRIPTION "It is the VLAN ID of the igs vlan router entry." ::= { igsVlanRouterEntry 1 } igsVlanRouterPortList OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-only STATUS current DESCRIPTION "List of ports on which routers are present. These router ports are learnt through control messages received from routers, and can also be configured statically." ::= { igsVlanRouterEntry 2 } -- VLAN based filter table igsVlanFilterTable OBJECT-TYPE SYNTAX SEQUENCE OF IgsVlanFilterEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table contains configuration of snooping on specific Vlans. This Table is valid only when VLAN is enabled in the system." ::= { igsVlan 4 } igsVlanFilterEntry OBJECT-TYPE SYNTAX IgsVlanFilterEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Contains snooping status , version and fast leave configuration for a specific VLAN." INDEX { igsVlanFilterVlanId } ::= { igsVlanFilterTable 1 } IgsVlanFilterEntry ::= SEQUENCE { igsVlanFilterVlanId Integer32, igsVlanSnoopStatus INTEGER, igsVlanQuerier INTEGER, igsVlanCfgQuerier INTEGER, igsVlanQueryInterval Integer32, igsVlanRtrPortList PortList } igsVlanFilterVlanId OBJECT-TYPE SYNTAX Integer32 (1..4094) MAX-ACCESS read-only STATUS current DESCRIPTION "Index of IgsVlanFilterEntry. This object indicates the VLAN ID for which the snooping configurations in IgsVlanFilterEntry is to be done." ::= { igsVlanFilterEntry 1 } igsVlanSnoopStatus OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object allows you to enable/disable IGS function on a specific VLAN." DEFVAL { 1 } ::= { igsVlanFilterEntry 2 } igsVlanQuerier OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "Indicates whether the switch is configured as a querier in the VLAN" DEFVAL { 2 } ::= { igsVlanFilterEntry 3 } igsVlanCfgQuerier OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The snooping switch can be configured as a querier via this object to send out IGMP general queries when IGMP routers are not present in the VLAN. When set to 'enabled', the switch will generate general queries." DEFVAL { 2 } ::= { igsVlanFilterEntry 4 } igsVlanQueryInterval OBJECT-TYPE SYNTAX Integer32 (60..600) MAX-ACCESS read-only STATUS current DESCRIPTION "This is the interval (in seconds) for which the switch sends general queries when it is configured as a querier for the VLAN. A switch should be configured as a querier for a VLAN only when there is no queriers in the network." DEFVAL { 125 } ::= { igsVlanFilterEntry 5 } igsVlanRtrPortList OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-write STATUS current DESCRIPTION "List of ports which are configured statically as router ports" ::= { igsVlanFilterEntry 6 } -- VLAN Based IGMP Snooping Group igsVlanMulticastGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF IgsVlanMulticastGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table contains MAC based multicast forwarding information." ::= { igsVlan 5 } igsVlanMulticastGroupEntry OBJECT-TYPE SYNTAX IgsVlanMulticastGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table contains VLAN ID, multicast group MAC address and the list of ports onto which the multicast data packets for group should be forwarded." INDEX { igsVlanMulticastGroupVlanId, igsVlanMulticastGroupIpAddress } ::= { igsVlanMulticastGroupTable 1 } IgsVlanMulticastGroupEntry ::= SEQUENCE { igsVlanMulticastGroupVlanId Integer32, igsVlanMulticastGroupIpAddress InetAddress, igsVlanMulticastGroupMacAddress MacAddress, igsVlanMulticastGroupPortList PortList } igsVlanMulticastGroupVlanId OBJECT-TYPE SYNTAX Integer32 (1..4094) MAX-ACCESS read-only STATUS current DESCRIPTION "VLAN ID pertaining to the Multicast forwarding entry" ::= { igsVlanMulticastGroupEntry 1 } igsVlanMulticastGroupIpAddress OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Multicast group IP address. This object indicates that a multicast group address was learned in the switch and be represented as IP address format." ::= { igsVlanMulticastGroupEntry 2 } igsVlanMulticastGroupMacAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Multicast group MAC address. This object indicates that a multicast group address was learned in the switch and be represented as MAC address format." ::= { igsVlanMulticastGroupEntry 3 } igsVlanMulticastGroupPortList OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-only STATUS current DESCRIPTION "List of ports onto which the multicast data packets destined for this group will be forwarded." ::= { igsVlanMulticastGroupEntry 4 } -- ----------------------------------------------------------------- -- The Dot1x Groups -- ----------------------------------------------------------------- radius OBJECT IDENTIFIER ::= { companyDot1xGroup 1 } -------------------------------------------- -- radius -------------------------------------------- radiusServerAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The IP address of the RADIUS server referred to in this table entry." ::= { radius 1 } radiusServerSharedSecret OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-write STATUS current DESCRIPTION "The secret string which is shared between Server and Client" ::= { radius 2 } -- ----------------------------------------------------------------- -- The Dot1x Groups -- ----------------------------------------------------------------- dot1xAuth OBJECT IDENTIFIER ::= { companyDot1xGroup 2 } -------------------------------------------- -- 1x Auth -------------------------------------------- dot1xAuthStatus OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable Static 802.1x." ::= { dot1xAuth 1 } dot1xAuthQuietPeriod OBJECT-TYPE SYNTAX INTEGER (0..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The value, in seconds, of the quietPeriod constant currently in use by the Authenticator PAE state machine." REFERENCE "9.4.1, quietPeriod." DEFVAL { 60 } ::= { dot1xAuth 2 } dot1xAuthTxPeriod OBJECT-TYPE SYNTAX INTEGER (1..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The value, in seconds, of the txPeriod constant currently in use by the Authenticator PAE state machine." REFERENCE "9.4.1, txPeriod." DEFVAL { 24 } ::= { dot1xAuth 3 } dot1xAuthSuppTimeout OBJECT-TYPE SYNTAX INTEGER (1..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The value, in seconds, of the suppTimeout constant currently in use by the Backend Authentication state machine." REFERENCE "9.4.1, suppTimeout." DEFVAL { 12 } ::= { dot1xAuth 4 } dot1xAuthServerTimeout OBJECT-TYPE SYNTAX INTEGER (1..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The value, in seconds, of the serverTimeout constant currently in use by the Backend Authentication state machine." REFERENCE "9.4.1, serverTimeout." DEFVAL { 16 } ::= { dot1xAuth 5 } dot1xAuthMaxReq OBJECT-TYPE SYNTAX INTEGER (1..10) MAX-ACCESS read-write STATUS current DESCRIPTION "The value of the maxReq constant currently in use by the Backend Authentication state machine." REFERENCE "9.4.1, maxReq." DEFVAL { 2 } ::= { dot1xAuth 6 } dot1xAuthReAuthPeriod OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS read-write STATUS current DESCRIPTION "The value, in seconds, of the reAuthPeriod constant currently in use by the Reauthentication Timer state machine." REFERENCE "9.4.1, reAuthPerio." DEFVAL { 3600 } ::= { dot1xAuth 7 } dot1xAuthReAuthEnabled OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The enable/disable control used by the Reauthentication Timer state machine (8.5.5.1)." REFERENCE "9.4.1, reAuthEnable." ::= { dot1xAuth 8 } dot1xAuthConfigPortTable OBJECT-TYPE SYNTAX SEQUENCE OF Dot1xAuthConfigPortEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table that contains the configuration objects for the Authenticator PAE associated with each port. An entry appears in this table for each port that may authenticate access to itself." ::= { dot1xAuth 9 } dot1xAuthConfigPortEntry OBJECT-TYPE SYNTAX Dot1xAuthConfigPortEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The configuration information for an Authenticator Port." INDEX { dot1xAuthConfigPortNumber } ::= { dot1xAuthConfigPortTable 1 } Dot1xAuthConfigPortEntry ::= SEQUENCE { dot1xAuthConfigPortNumber INTEGER, dot1xAuthConfigPortControl INTEGER, dot1xAuthConfigPortStatus INTEGER, dot1xAuthConfigPortSessionTime TimeTicks, dot1xAuthConfigPortSessionUserName SnmpAdminString } dot1xAuthConfigPortNumber OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "A unique value for each port that correlates to port index. Its value ranges between 1 and the value of port number." ::= { dot1xAuthConfigPortEntry 1 } dot1xAuthConfigPortControl OBJECT-TYPE SYNTAX INTEGER { forceUnauthorized(1), auto(2), forceAuthorized(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "The current value of the controlled Port control parameter for the Port." REFERENCE "9.4.1, AuthControlledPortControl." ::= { dot1xAuthConfigPortEntry 2 } dot1xAuthConfigPortStatus OBJECT-TYPE SYNTAX INTEGER { authorized(1), unauthorized(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The current value of the controlled Port status parameter for the Port." REFERENCE "9.4.1, AuthControlledPortStatu." ::= { dot1xAuthConfigPortEntry 3 } dot1xAuthConfigPortSessionTime OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "The duration of the session in seconds." REFERENCE "9.4.4, Session Tim." ::= { dot1xAuthConfigPortEntry 4 } dot1xAuthConfigPortSessionUserName OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-only STATUS current DESCRIPTION "The User-Name representing the identity of the Supplicant PAE." REFERENCE "9.4.4, Session User Name." ::= { dot1xAuthConfigPortEntry 5 } -- ------------------------------------------------------------------ -- QoS -- ------------------------------------------------------------------ qosMode OBJECT-TYPE SYNTAX INTEGER { dot1p(1), dscp(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Settings of Qos mode: IEEE 802.1p QoS or DSCP QoS. IEEE 802.1p : It specifies a priority(0~7) value to four queues in WS3 : Low(1,2), Medium(0,3), High(4,5) and Highest(6,7), inclusive that can be used by Quality of Service (QoS) disciplines to differentiate traffic. DSCP : Differentiated services enhancements to the Internet protocol are intended to enable scalable service discrimination in the Internet without the need for per-flow state and signaling at every hop. " ::= { companyQoSGroup 1 } queuingMechanism OBJECT-TYPE SYNTAX INTEGER { strictPriority(1), wrr(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Queuing mechanism. strictPriority(1) : Strict Priority wrr(2) : Weighted Round Robin Strict-priority scheduling is implemented with a special strict-priority scheduler node that is stacked directly above the port. Queues stacked on top of the strict-priority scheduler node always get bandwidth before other queues. Weighted round-robin scheduling is designed to better handle queues with different processing capacities. Each queue has a weight : Low is 1, Medium is 2, High is 4 and Highest is 8 for WS3 spec. Queues with higher weights get bandwidth before than other queues with less weights. " ::= { companyQoSGroup 2 } -- ------------------------------------------------------------------ -- QoS -- ------------------------------------------------------------------ qosQ1p OBJECT IDENTIFIER ::= { companyQoSGroup 3 } dot1pPortTable OBJECT-TYPE SYNTAX SEQUENCE OF Dot1pPortEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of 802.1p port default priority Entries." ::= { qosQ1p 1 } dot1pPortEntry OBJECT-TYPE SYNTAX Dot1pPortEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of 802.1p port default priority priorities." INDEX { dot1pPortIndex } ::= { dot1pPortTable 1 } Dot1pPortEntry ::= SEQUENCE { dot1pPortIndex INTEGER, dot1pPortPriority INTEGER } dot1pPortIndex OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-only STATUS current DESCRIPTION "A port identifier that is in the range of 1 to ifNumber." ::= { dot1pPortEntry 1 } dot1pPortPriority OBJECT-TYPE SYNTAX INTEGER { low(1), medium(2), high(3), highest(4) } MAX-ACCESS read-write STATUS current DESCRIPTION "For ingress untagged packets, the per port 'Default Priority' setting will be applied to packets of each port to provide port-based traffic prioritization. For ingress tagged packets, D-Link Smart Switches will refer to their 802.1p information and prioritize them with 4 different priority queues. " ::= { dot1pPortEntry 2 } -- ------------------------------------------------------------------ -- QoS -- ------------------------------------------------------------------ qosDiffServ OBJECT IDENTIFIER ::= { companyQoSGroup 4 } qosDiffServEnable OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "Display the DSCP(Differentiated services) function Enabled or Disabled. Notice : DiffServ Type is 2~7 bits in the TOS field. ex: If the DiffServ Type = 000011(3), the value in TOS field is 00001100(12) " ::= { qosDiffServ 1 } qosDiffServTypeGroup OBJECT IDENTIFIER ::= { qosDiffServ 2 } qosDiffServType00 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 0 : IP ToS value = 0" ::= { qosDiffServTypeGroup 1 } qosDiffServType01 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 01 : IP ToS value = 4" ::= { qosDiffServTypeGroup 2 } qosDiffServType02 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 02 : IP ToS value = 8" ::= { qosDiffServTypeGroup 3 } qosDiffServType03 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 03 : IP ToS value = 12" ::= { qosDiffServTypeGroup 4 } qosDiffServType04 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 04 : IP ToS value = 16" ::= { qosDiffServTypeGroup 5 } qosDiffServType05 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 05 : IP ToS value = 20" ::= { qosDiffServTypeGroup 6 } qosDiffServType06 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 06 : IP ToS value = 24" ::= { qosDiffServTypeGroup 7 } qosDiffServType07 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 07 : IP ToS value = 28" ::= { qosDiffServTypeGroup 8 } qosDiffServType08 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 08 : IP ToS value = 32" ::= { qosDiffServTypeGroup 9 } qosDiffServType09 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 09 : IP ToS value = 36" ::= { qosDiffServTypeGroup 10 } qosDiffServType10 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 10 : IP ToS value = 40" ::= { qosDiffServTypeGroup 11 } qosDiffServType11 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 11 : IP ToS value = 44" ::= { qosDiffServTypeGroup 12 } qosDiffServType12 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 12 : IP ToS value = 48" ::= { qosDiffServTypeGroup 13 } qosDiffServType13 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 13 : IP ToS value = 52" ::= { qosDiffServTypeGroup 14 } qosDiffServType14 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 14 : IP ToS value = 56" ::= { qosDiffServTypeGroup 15 } qosDiffServType15 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 15 : IP ToS value = 60" ::= { qosDiffServTypeGroup 16 } qosDiffServType16 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 16 : IP ToS value = 64" ::= { qosDiffServTypeGroup 17 } qosDiffServType17 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 17 : IP ToS value = 68" ::= { qosDiffServTypeGroup 18 } qosDiffServType18 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 18 : IP ToS value = 72" ::= { qosDiffServTypeGroup 19 } qosDiffServType19 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 19 : IP ToS value = 76" ::= { qosDiffServTypeGroup 20 } qosDiffServType20 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 20 : IP ToS value = 80" ::= { qosDiffServTypeGroup 21 } qosDiffServType21 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 21 : IP ToS value = 84" ::= { qosDiffServTypeGroup 22 } qosDiffServType22 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 22 : IP ToS value = 88" ::= { qosDiffServTypeGroup 23 } qosDiffServType23 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 23 : IP ToS value = 92" ::= { qosDiffServTypeGroup 24 } qosDiffServType24 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 24 : IP ToS value = 96" ::= { qosDiffServTypeGroup 25 } qosDiffServType25 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 25 : IP ToS value = 100" ::= { qosDiffServTypeGroup 26 } qosDiffServType26 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 26 : IP ToS value = 104" ::= { qosDiffServTypeGroup 27 } qosDiffServType27 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 27 : IP ToS value = 108" ::= { qosDiffServTypeGroup 28 } qosDiffServType28 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 28 : IP ToS value = 112" ::= { qosDiffServTypeGroup 29 } qosDiffServType29 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 29 : IP ToS value = 116" ::= { qosDiffServTypeGroup 30 } qosDiffServType30 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 30 : IP ToS value = 120" ::= { qosDiffServTypeGroup 31 } qosDiffServType31 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 31 : IP ToS value = 124" ::= { qosDiffServTypeGroup 32 } qosDiffServType32 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 32 : IP ToS value = 128" ::= { qosDiffServTypeGroup 33 } qosDiffServType33 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 33 : IP ToS value = 132" ::= { qosDiffServTypeGroup 34 } qosDiffServType34 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 34 : IP ToS value = 136" ::= { qosDiffServTypeGroup 35 } qosDiffServType35 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 35 : IP ToS value = 140" ::= { qosDiffServTypeGroup 36 } qosDiffServType36 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 36 : IP ToS value = 144" ::= { qosDiffServTypeGroup 37 } qosDiffServType37 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 37 : IP ToS value = 148" ::= { qosDiffServTypeGroup 38 } qosDiffServType38 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 38 : IP ToS value = 152" ::= { qosDiffServTypeGroup 39 } qosDiffServType39 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 39 : IP ToS value = 156" ::= { qosDiffServTypeGroup 40 } qosDiffServType40 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 40 : IP ToS value = 160" ::= { qosDiffServTypeGroup 41 } qosDiffServType41 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 41 : IP ToS value = 164" ::= { qosDiffServTypeGroup 42 } qosDiffServType42 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 42 : IP ToS value = 168" ::= { qosDiffServTypeGroup 43 } qosDiffServType43 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 43 : IP ToS value = 172" ::= { qosDiffServTypeGroup 44 } qosDiffServType44 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 44 : IP ToS value = 176" ::= { qosDiffServTypeGroup 45 } qosDiffServType45 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 45 : IP ToS value = 180" ::= { qosDiffServTypeGroup 46 } qosDiffServType46 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 46 : IP ToS value = 184" ::= { qosDiffServTypeGroup 47 } qosDiffServType47 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 47 : IP ToS value = 188" ::= { qosDiffServTypeGroup 48 } qosDiffServType48 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 48 : IP ToS value = 192" ::= { qosDiffServTypeGroup 49 } qosDiffServType49 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 49 : IP ToS value = 196" ::= { qosDiffServTypeGroup 50 } qosDiffServType50 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 50 : IP ToS value = 200" ::= { qosDiffServTypeGroup 51 } qosDiffServType51 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 51 : IP ToS value = 204" ::= { qosDiffServTypeGroup 52 } qosDiffServType52 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 52 : IP ToS value = 208" ::= { qosDiffServTypeGroup 53 } qosDiffServType53 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 53 : IP ToS value = 212" ::= { qosDiffServTypeGroup 54 } qosDiffServType54 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 54 : IP ToS value = 216" ::= { qosDiffServTypeGroup 55 } qosDiffServType55 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 55 : IP ToS value = 220" ::= { qosDiffServTypeGroup 56 } qosDiffServType56 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 56 : IP ToS value = 224" ::= { qosDiffServTypeGroup 57 } qosDiffServType57 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 57 : IP ToS value = 228" ::= { qosDiffServTypeGroup 58 } qosDiffServType58 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 58 : IP ToS value = 232" ::= { qosDiffServTypeGroup 59 } qosDiffServType59 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 59 : IP ToS value = 236" ::= { qosDiffServTypeGroup 60 } qosDiffServType60 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 60 : IP ToS value = 240" ::= { qosDiffServTypeGroup 61 } qosDiffServType61 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 61 : IP ToS value = 244" ::= { qosDiffServTypeGroup 62 } qosDiffServType62 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 62 : IP ToS value = 248" ::= { qosDiffServTypeGroup 63 } qosDiffServType63 OBJECT-TYPE SYNTAX INTEGER { low(0), medium(1), high(2), highest(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "DiffServ Type 63 : IP ToS value = 252" ::= { qosDiffServTypeGroup 64 } -- ---------------------------------------------------------- -- The companyTrafficMgmt Groups -- ---------------------------------------------------------- -- Bandwidth Control Group --------------------------------------------- -- bandwidthCtrlSettings OBJECT IDENTIFIER ::= { companyTrafficMgmt 1 } bandwidthCtrlTable OBJECT-TYPE SYNTAX SEQUENCE OF BandwidthCtrlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table to control the rate limiting parameters either for the entire switch or for each interface in the switch." ::= { bandwidthCtrlSettings 2 } bandwidthCtrlEntry OBJECT-TYPE SYNTAX BandwidthCtrlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry appears in this table for each physical interface in the switch." INDEX { bandwidthCtrlIndex } ::= { bandwidthCtrlTable 1 } BandwidthCtrlEntry ::= SEQUENCE { bandwidthCtrlIndex Integer32, bandwidthCtrlTxThreshold Integer32, bandwidthCtrlRxThreshold Integer32 } bandwidthCtrlIndex OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The interface index for which the configuration in this entry applies." ::= { bandwidthCtrlEntry 1 } bandwidthCtrlTxThreshold OBJECT-TYPE SYNTAX Integer32 (0 | 64..1024000) MAX-ACCESS read-write STATUS current DESCRIPTION "Configures interface Rate Limit (Packet that can be transferred on a port at a particular second). This object's value will take effect on the interface speed. Based on the operating speed of the port, the rate limit will be applied. This value can also be affected by the metering. A value of zero(0) disable rate limiting i.e. sets the port to full speed. The value can be set between 64~102400(Kbits per second) in FE port, 64~1024000 (Kbits per second) in GE port. (Note: The multiple of 1850 Kbits/sec will be set automatically because the resolution of Giga-port Tx bandwidth control is 1850 Kbits/sec.)" ::= { bandwidthCtrlEntry 2 } bandwidthCtrlRxThreshold OBJECT-TYPE SYNTAX Integer32 (0 | 64..1024000) MAX-ACCESS read-write STATUS current DESCRIPTION "Allows to configure the limiting value for the maximum number of receive packets that can be transmitted per second over this interface. Setting this object to the value zero disables rate limiting for receive packets on this interface. The value that can be set for this object is limited by the underlying hardware. The value can be set between 64~102400(Kbits per second) in FE port, 64~1024000(Kbits per second) in GE port." ::= { bandwidthCtrlEntry 3} -- Broadcast Storm Control Group --------------------------------------------- -- -- Broadcast Storm Control broadcastStormCtrlSettings OBJECT IDENTIFIER ::= { companyTrafficMgmt 3 } broadcastStormCtrlGlobalOnOff OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object indicates storm control function is enabled or disabled for device. When you enable broadcast storm control function, D-Link Smart Switches will allowed you to limit the number of broadcast packets per second going through device." ::= { broadcastStormCtrlSettings 1 } broadcastStormCtrlLimitType OBJECT-TYPE SYNTAX INTEGER { broadcastonly(1), multicastAndbroadcast(2), dlfMulticastAndbroadcast(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object indicates storm control function is control broadcast packet or multicast packet or dlf packet." ::= { broadcastStormCtrlSettings 2 } broadcastStormCtrlThreshold OBJECT-TYPE SYNTAX Integer32 (0 | 64..1024000) MAX-ACCESS read-write STATUS current DESCRIPTION "Allows to configure the limiting value for the maximum number of Kbits/sec that can be transmitted per second over this interface. Setting this object to the value zero disables rate limiting on this interface. The value that can be set for this object is limited by the underlying hardware. The limit value must be between 64~1024000 and limit value is multiple of 64. (Notice : if the limit value is 0, it means unlimited.)" DEFVAL {0} ::= { broadcastStormCtrlSettings 3 } -- ------------------------------------------------------------------ -- companySecurity -- ------------------------------------------------------------------ -- Trusted Host securityTrustedHost OBJECT IDENTIFIER ::= { companySecurity 1 } trustedHostStatus OBJECT-TYPE SYNTAX INTEGER { enabled (1), disabled (2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object indicates trusted host function is enabled or disabled. When trusted host function is enabled, D-Link Smart Switches will only allow hosts which you trust to access and control the switch. Your local host IP Addresses must be one of the IP Addresses to avoid disconnection." DEFVAL { disabled } ::= { securityTrustedHost 1 } trustedHostTable OBJECT-TYPE SYNTAX SEQUENCE OF TrustedHostEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table to configure trusted host in the system." ::= { securityTrustedHost 2 } trustedHostEntry OBJECT-TYPE SYNTAX TrustedHostEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry in this table represents rules for particular trusted host." INDEX { trustedHostIpAddr, trustedHostIpMask } ::= { trustedHostTable 1 } TrustedHostEntry ::= SEQUENCE { trustedHostIpAddr IpAddress, trustedHostIpMask IpAddress, trustedHostRowStatus RowStatus } trustedHostIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The IP address of host you allow to access to D-Link Smart Switch. Your local host IP Addresses must be one of the IP Addresses to avoid disconnection." ::= { trustedHostEntry 1 } trustedHostIpMask OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Used to mask with IP address, it allow you set a subnet as a trusted host entry." ::= { trustedHostEntry 2 } trustedHostRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of an entry in the Trusted Host Table. Only a subset of the rowstatus variables (active, createAndGo, destroy) are available." ::= { trustedHostEntry 3 } securityARPSpoofPrevent OBJECT IDENTIFIER ::= { companySecurity 3} -- aRPSpoofPrevent Control Table aRPSpoofPreventTable OBJECT-TYPE SYNTAX SEQUENCE OF ARPSpoofPreventEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table to control ARP Spoofing prevention for the entire switch or for each interface in the switch." ::= { securityARPSpoofPrevent 1 } aRPSpoofPreventEntry OBJECT-TYPE SYNTAX ARPSpoofPreventEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry appears in this table for each interface in the system." INDEX { aRPSpoofPreventIpAddr } ::= { aRPSpoofPreventTable 1 } ARPSpoofPreventEntry ::= SEQUENCE { aRPSpoofPreventIpAddr IpAddress, aRPSpoofPreventMacAddress MacAddress, aRPSpoofPreventPortList PortList, aRPSpoofPreventRowStatus RowStatus } aRPSpoofPreventIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifies either the Network or Host address from which the switch can be managed. An address 0.0.0.0 indicates 'Any Manager'." ::= { aRPSpoofPreventEntry 1 } aRPSpoofPreventMacAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-write STATUS current DESCRIPTION "Ethernet Mac Address." DEFVAL { '000102030405'h } ::= { aRPSpoofPreventEntry 2 } aRPSpoofPreventPortList OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the port numbers through which the authorized manager can access the switch. By default the authorized manager is allowed to access the switch through all the ports. If a set of ports are configured in the 'PortList', the manager can access the switch only through the configured ports." ::= { aRPSpoofPreventEntry 3 } aRPSpoofPreventRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object indicates the status of this entry." ::= { aRPSpoofPreventEntry 4 } -- ------------------------------------------------------------------ -- companySecurity -- ------------------------------------------------------------------ securitySSL OBJECT IDENTIFIER ::= { companySecurity 5 } sslSecurityHttpStatus OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling secure HTTP in the system." DEFVAL { disable } ::= { securitySSL 1 } sslCiphers OBJECT IDENTIFIER ::= { securitySSL 2 } sslCipherSuiteList OBJECT-TYPE SYNTAX BITS { rsa-null-md5(0), rsa-null-sha(1), rsa-des-sha(2), rsa-3des-sha(3), dh-rsa-des-sha(4), dh-rsa-3des-sha(5), rsa-exp1024-des-sha(6) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is to configure the cipher-suites list." ::= { sslCiphers 1} -- ---------------------------------------------------------- -- The companySecurity Groups -- ---------------------------------------------------------- securityPortSecurity OBJECT IDENTIFIER ::= { companySecurity 2 } -- Port Security Group --------------------------------------------- -- portSecTable OBJECT-TYPE SYNTAX SEQUENCE OF PortSecEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table to control port security features of the device." ::= { securityPortSecurity 1 } portSecEntry OBJECT-TYPE SYNTAX PortSecEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry appears in port security table for each interface in the system." INDEX { portSecIndex } ::= { portSecTable 1 } PortSecEntry ::= SEQUENCE { portSecIndex Integer32, portSecState INTEGER, portSecMLA Integer32 } portSecIndex OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The interface index for which the configuration in this entry applies." ::= { portSecEntry 1 } portSecState OBJECT-TYPE SYNTAX INTEGER { enabled (1), disabled (2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable / disable port security admin state for the interface. A given ports' dynamic MAC address learning will be stopped such that the current source MAC addresses entered into the MAC address forwarding table can not be changed once the port security admin state is enabled." ::= { portSecEntry 2 } portSecMLA OBJECT-TYPE SYNTAX Integer32 (0..64) MAX-ACCESS read-write STATUS current DESCRIPTION "Configures interface port security maximum learning address numbers. When given ports' admin state is enabled, allows forwarding table learning address number. The number can be set 0 to 64. Note: Set value 0 means cannot learn MAC address." ::= {portSecEntry 3} -- ------------------------------------------------------------------ -- companyACLGroup -- ------------------------------------------------------------------ -- ACL Profile Group -------------------------------------------------- aclProfile OBJECT IDENTIFIER ::= { companyACLGroup 1 } aclProfileTable OBJECT-TYPE SYNTAX SEQUENCE OF AclProfileEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION " A table to ACL profile . " ::= { aclProfile 1 } aclProfileEntry OBJECT-TYPE SYNTAX AclProfileEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION " Each entry in this table is a ACL profile. Index to the table is ACL profile ID. " INDEX { aclProfileNo} ::= { aclProfileTable 1 } AclProfileEntry ::= SEQUENCE { aclProfileNo Integer32, aclProfileType INTEGER, aclProfileRuleCount Integer32, aclProfileMask OCTET STRING, aclProfileDstMacAddrMask MacAddress, aclProfileSrcMacAddrMask MacAddress, aclProfileIPProtocol INTEGER, aclProfileDstIpAddrMask IpAddress, aclProfileSrcIpAddrMask IpAddress, aclProfileDstPortMask OCTET STRING, aclProfileSrcPortMask OCTET STRING, aclProfileArpSenderMacAddrMask MacAddress, aclProfileArpSenderIpAddrMask IpAddress, aclProfileStatus RowStatus } aclProfileNo OBJECT-TYPE SYNTAX Integer32 (1..50) MAX-ACCESS read-only STATUS current DESCRIPTION "The ACL Profile ID. The ID 1 to 50 is user-defined ACL, and the ID more than 50 is reserved for system-defined ACL. The user only allow to create user-defined ACL ID. And system-defined ACL is read only." ::= { aclProfileEntry 1 } aclProfileType OBJECT-TYPE SYNTAX INTEGER { l2 (1), l3 (2), arpSP-permit(4), arpSP-deny(5), voiceVlan(6) } MAX-ACCESS read-write STATUS current DESCRIPTION "The ACL Profile type, possible value are l2 (1) - for MAC-based rule, l3 (2) - for IPv4-based rule, arpSP_permit(4) - for ARP Spoofing prevention entry, arpSP_deny(5) - for ARP Spoofing prevention entry, voiceVlan(6) - for Voice VLAN OUI entry. Note that only l2 and l3 could be set by user, other is reserved for system to show information. " ::= { aclProfileEntry 2 } aclProfileRuleCount OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The number of rules in this profile." ::= { aclProfileEntry 3 } aclProfileMask OBJECT-TYPE SYNTAX OCTET STRING MAX-ACCESS read-write STATUS current DESCRIPTION "Indicate which field want to care in the packet. Turn on the following bits to select the following items Type Item BIT ------------------------------------------ L2 DST_MAC 0 (LSB) L2 SRC_MAC 1 L2 VID 2 L2 8021P_PRIORITY 3 L2 ETHER_TYPE 4 L3 DSCP 5 L3 ICMP_TYPE 6 L3 ICMP_CODE 7 L3 IGMP_TYPE 8 L3 DST_IP 9 L3 SRC_IP 10 L3 DST_PORT 11 L3 SRC_PORT 12 L3 TCPFLAG 13 ARP-SP ARP_SENDER_MAC 14 ARP-SP ARP_SENDER_IP 15 (MSB) ------------------------------------------- The value is in Hex format. " ::= { aclProfileEntry 4 } aclProfileDstMacAddrMask OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The ACL Profile destination MAC address mask. If DST_MAC is turn on in aclProfileMask, it will work with its member rule field,aclL2RuleDstMacAddr, to caculate a range of MAC address which is really care. " ::= { aclProfileEntry 5 } aclProfileSrcMacAddrMask OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The ACL Profile source MAC address mask. If SRC_MAC is turn on in aclProfileMask, it will work with its member rule field,aclL2RuleSrcMacAddr, to caculate a range of MAC address which is really care. " ::= { aclProfileEntry 6 } aclProfileIPProtocol OBJECT-TYPE SYNTAX INTEGER { none(0), icmp(1), igmp(2), tcp(6), udp(17) } MAX-ACCESS read-write STATUS current DESCRIPTION "Indicate which IP Protocol will be care in this profile. Only profile type is l3 can set the IP protocol. For others, this field will be none. " ::= { aclProfileEntry 7 } aclProfileDstIpAddrMask OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The ACL Profile destination IP address mask. If DST_IP is turn on in aclProfileMask, it will work with its member rule field,aclL3RuleDstIpAddr, to caculate a range of IP address which is really care. The value is in HEX format, for example: '255.255.255.0' is presented to 'FFFFFF00' " DEFVAL { 'FFFFFFFF'h } ::= { aclProfileEntry 8 } aclProfileSrcIpAddrMask OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The ACL Profile source IP address mask. If SRC_IP is turn on in aclProfileMask, it will work with its member rule field,aclL3RuleSrcIpAddr, to caculate a range of IP address which is really care. The value is in HEX format, for example: '255.255.255.0' is presented to 'FFFFFF00' " DEFVAL { 'FFFFFFFF'h } ::= { aclProfileEntry 9 } aclProfileDstPortMask OBJECT-TYPE SYNTAX OCTET STRING MAX-ACCESS read-write STATUS current DESCRIPTION "The ACL Profile UDP/TCP destination port mask. If DST_PORT is turn on in aclProfileMask, it will work with its member rule field,aclL3RuleTcpUdpDstPort, to caculate a range of destination port which is really care. The value is in HEX format. " DEFVAL { 'FFFF'h } ::= { aclProfileEntry 10 } aclProfileSrcPortMask OBJECT-TYPE SYNTAX OCTET STRING MAX-ACCESS read-write STATUS current DESCRIPTION "The ACL Profile UDP/TCP source port mask. If SRC_PORT is turn on in aclProfileMask, it will work with its member rule field,aclL3RuleTcpUdpSrcPort, to caculate a range of source port which is really care. The value is in HEX format. " DEFVAL { 'FFFF'h } ::= { aclProfileEntry 11 } aclProfileArpSenderMacAddrMask OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The ACL Profile Sender MAC mask. This is only for ARP Spoofing Prevention which is System-defined ACL, and it's not allow to modify. The value is in HEX format. " DEFVAL { 'FFFFFFFFFF'h } ::= { aclProfileEntry 12 } aclProfileArpSenderIpAddrMask OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The ACL Profile Sender IP mask. This is only for ARP Spoofing Prevention which is System-defined ACL, and it's not allow to modify. The value is in HEX format. " DEFVAL { 'FFFFFFFF'h } ::= { aclProfileEntry 13 } aclProfileStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION " This object indicates the status of this entry, can only be set to 'createAndWait','active' and 'destroy'. When the value of the entry status is 'createAndWait', it could be set to 'active' only if the three values of aclProfileType, aclProfileMask and ProtocolType are not conflicted. " ::= { aclProfileEntry 14 } -- ------------------------------------------------------------------ -- L2 Filter Group -------------------------------------------------- aclL2Rule OBJECT IDENTIFIER ::= { companyACLGroup 2 } aclL2RuleTable OBJECT-TYPE SYNTAX SEQUENCE OF AclL2RuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table to configure L2 filter rules in the system." ::= { aclL2Rule 1 } aclL2RuleEntry OBJECT-TYPE SYNTAX AclL2RuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry in this table is a L2 filter rule. Index to the table is the L2 filter number and Profile ID." INDEX { aclL2AccessID, aclL2ProfileID} ::= { aclL2RuleTable 1 } AclL2RuleEntry ::= SEQUENCE { aclL2AccessID Integer32, aclL2ProfileID Integer32, aclL2RuleEtherType Integer32, aclL2RuleDstMacAddr MacAddress, aclL2RuleSrcMacAddr MacAddress, aclL2RuleVlanId Integer32, aclL2Rule1pPriority Integer32, aclL2RuleDstMacAddrMask MacAddress, aclL2RuleSrcMacAddrMask MacAddress, aclL2RuleInPortList PortList, aclL2RuleAction INTEGER, aclL2RuleStatus RowStatus } aclL2AccessID OBJECT-TYPE SYNTAX Integer32 (1..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "L2 Filter rule ID." ::= { aclL2RuleEntry 1 } aclL2ProfileID OBJECT-TYPE SYNTAX Integer32 (1..50) MAX-ACCESS read-only STATUS current DESCRIPTION "ACL Profile ID which this rule join." DEFVAL { 1 } ::= { aclL2RuleEntry 2 } aclL2RuleEtherType OBJECT-TYPE SYNTAX Integer32 (-1 | 1501..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The value in the Type/Len field of a frame that will be matched to trigger this filter. The default value of this object is '-1', which means the rule don't care this condition." DEFVAL { -1 } ::= { aclL2RuleEntry 3 } aclL2RuleDstMacAddr OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-write STATUS current DESCRIPTION "Destination MAC address to be matched with the packet. By Default, the Destination Mac Address will be zero,which means the rule don't care this condition." ::= { aclL2RuleEntry 4 } aclL2RuleSrcMacAddr OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-write STATUS current DESCRIPTION "Source MAC address to be matched with the packet. By Default, the Source Mac Address will be zero, which means the rule don't care this condition.. address" ::= { aclL2RuleEntry 5 } aclL2RuleVlanId OBJECT-TYPE SYNTAX Integer32 (-1..4094) MAX-ACCESS read-write STATUS current DESCRIPTION "Vlan Id to be filtered. In case of Provider bridges, This Vlan Id will be treated as customer Vlan Id. By Default, the value will be '-1', which means the rule don't care this condition." DEFVAL { -1 } ::= { aclL2RuleEntry 6 } aclL2Rule1pPriority OBJECT-TYPE SYNTAX Integer32 (-1..7) MAX-ACCESS read-write STATUS current DESCRIPTION "802.1p priority to be matched with the packet. By Default, the value will be '-1', which means the rule don't care this condition." DEFVAL { -1 } ::= { aclL2RuleEntry 7 } aclL2RuleDstMacAddrMask OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The MAC address Mask work for Destination MAC address. This field is read-only and copy from it's Profile setting." ::= { aclL2RuleEntry 8 } aclL2RuleSrcMacAddrMask OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The MAC address Mask work for Source MAC address. This field is read-only and copy from it's Profile setting." ::= { aclL2RuleEntry 9 } aclL2RuleInPortList OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the complete set of ports over which this filter is applied for packets ingress at ports in this list." ::= { aclL2RuleEntry 10 } aclL2RuleAction OBJECT-TYPE SYNTAX INTEGER { allow (1), drop (2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the action to be taken on the packet if the filter rule matches. If the action is 'allow', the packet will be forwarded according to the forwarding rules. If the action is 'drop', the packet will be discarded." DEFVAL { allow } ::= { aclL2RuleEntry 11 } aclL2RuleStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object indicates the status of this entry. An entry is created in this table when this object is SET to 'createAndWait'. The entry in this table is used when the status of this object is SET 'active'. The entry in this table is not used when this object is SET 'notInService'. An entry created in this table is be deleted when this object is SET 'destroy'." ::= { aclL2RuleEntry 13 } -- ------------------------------------------------------------------ -- L3 Filter Group -------------------------------------------------- aclL3Rule OBJECT IDENTIFIER ::= { companyACLGroup 3 } aclL3RuleTable OBJECT-TYPE SYNTAX SEQUENCE OF AclL3RuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION " A table to configure L3 filter rules in the system. " ::= { aclL3Rule 1 } aclL3RuleEntry OBJECT-TYPE SYNTAX AclL3RuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION " Each entry in this table is a L3 filter rule. Index to the table is L3 filter number. " INDEX { aclL3RuleAccessID, aclL3RuleProfileNo} ::= { aclL3RuleTable 1 } AclL3RuleEntry ::= SEQUENCE { aclL3RuleAccessID Integer32, aclL3RuleProfileNo Integer32, aclL3RuleProtocol INTEGER, aclL3RuleICMPMessageType Integer32, aclL3RuleICMPMessageCode Integer32, aclL3RuleDstIpAddr IpAddress, aclL3RuleSrcIpAddr IpAddress, aclL3RuleDstIpAddrMask IpAddress, aclL3RuleSrcIpAddrMask IpAddress, aclL3RuleTcpUdpDstPort Integer32, aclL3RuleTcpUdpSrcPort Integer32, aclL3RuleTcpUdpDstPortMask OCTET STRING, aclL3RuleTcpUdpSrcPortMask OCTET STRING, aclL3RuleTcpAckBit INTEGER, aclL3RuleTcpRstBit INTEGER, aclL3RuleTcpUrgBit INTEGER, aclL3RuleTcpPshBit INTEGER, aclL3RuleTcpSynBit INTEGER, aclL3RuleTcpFinBit INTEGER, aclL3RuleDscp Integer32, aclL3RuleIgmpType Integer32, aclL3RulePortList PortList, aclL3RuleAction INTEGER, aclL3RuleStatus RowStatus } aclL3RuleAccessID OBJECT-TYPE SYNTAX Integer32 (1..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "L3 Filter rule ID." ::= { aclL3RuleEntry 1 } aclL3RuleProfileNo OBJECT-TYPE SYNTAX Integer32 (1..50) MAX-ACCESS read-only STATUS current DESCRIPTION "The Profile ID which this rule join." ::= { aclL3RuleEntry 2 } aclL3RuleProtocol OBJECT-TYPE SYNTAX INTEGER { icmp(1), igmp(2), tcp(6), udp(17) } MAX-ACCESS read-only STATUS current DESCRIPTION " The type of protocol to be checked against the packet." ::= { aclL3RuleEntry 3 } aclL3RuleICMPMessageType OBJECT-TYPE SYNTAX Integer32 (-1..255) MAX-ACCESS read-write STATUS current DESCRIPTION " The message type to be checked against the packet. If the message type matches with the packet, then the packet will be dropped / allowed based on the action set in aclL3RuleAction. The default value is '-1',which means the rule don't care this condition. Some ICMP message types are: echoReply(0), destinationUnreachable(3), sourceQuench(4), redirect(5), echoRequest(8), timeExceeded(11), parameterProblem(12), timestampRequest(13), timestampReply(14), informationRequest(15), informationReply(16), addressMaskRequest(17), addressMaskReply (18), " DEFVAL { -1 } ::= { aclL3RuleEntry 4 } aclL3RuleICMPMessageCode OBJECT-TYPE SYNTAX Integer32 (-1..255) MAX-ACCESS read-write STATUS current DESCRIPTION " The message code to be checked against the packet. If the packet matches with the message code, then the packet will be dropped / allowed based on the action set in aclL3RuleAction. The default value is '-1', which means the rule don't care this condition. Some ICMP message codes are : networkUnreachable(0), hostUnreachable(1), protocolUnreachable(2), portUnreachable(3), fragmentNeed(4), sourceRouteFail(5), destNetworkUnknown(6), destHostUnknown(7), srcHostIsolated(8), destNetworkAdminProhibited(9), destHostAdminProhibited(10), networkUnreachableTOS(11), hostUnreachableTOS(12), " DEFVAL { -1 } ::= { aclL3RuleEntry 5 } aclL3RuleDstIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "Destination IP address to be matched with the packet. The default value will be zero, which means the rule don't care this condition." DEFVAL { '00000000'h } ::= { aclL3RuleEntry 6 } aclL3RuleSrcIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "Source IP address to be matched with the packet. The default value will be zero, which means the rule don't care this condition." DEFVAL { '00000000'h } ::= { aclL3RuleEntry 7 } aclL3RuleDstIpAddrMask OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The IP subnet mask for Destination IP address. This field is read-only and copy from it's Profile setting. " DEFVAL { 'FFFFFFFF'h } ::= { aclL3RuleEntry 8 } aclL3RuleSrcIpAddrMask OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The IP subnet mask for Source IP address. This field is read-only and copy from it's Profile setting. " DEFVAL { 'FFFFFFFF'h } ::= { aclL3RuleEntry 9 } aclL3RuleTcpUdpDstPort OBJECT-TYPE SYNTAX Integer32 (-1..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The TCP / UDP destination port. The default value is -1, which means the rule don't care this condition." DEFVAL { -1 } ::= { aclL3RuleEntry 10 } aclL3RuleTcpUdpSrcPort OBJECT-TYPE SYNTAX Integer32 (-1..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The TCP / UDP source port. The default value is -1, which means the rule don't care this condition." DEFVAL { -1 } ::= { aclL3RuleEntry 11 } aclL3RuleTcpUdpDstPortMask OBJECT-TYPE SYNTAX OCTET STRING MAX-ACCESS read-only STATUS current DESCRIPTION "The TCP / UDP Destination port Mask. This field is read-only and copy from it's Profile setting. " ::= { aclL3RuleEntry 12 } aclL3RuleTcpUdpSrcPortMask OBJECT-TYPE SYNTAX OCTET STRING MAX-ACCESS read-only STATUS current DESCRIPTION "The TCP / UDP Source port Mask. This field is read-only and copy from it's Profile setting. " ::= { aclL3RuleEntry 13 } aclL3RuleTcpAckBit OBJECT-TYPE SYNTAX INTEGER { dont-care(-1), establish(1), notEstablish(2) } MAX-ACCESS read-create STATUS current DESCRIPTION " The TCP ACK bit to be checked against the packet. The default value is 'dont-care'(-1), which means the rule don't care this condition." DEFVAL { dont-care } ::= { aclL3RuleEntry 14 } aclL3RuleTcpRstBit OBJECT-TYPE SYNTAX INTEGER { dont-care(-1), establish(1), notEstablish(2) } MAX-ACCESS read-create STATUS current DESCRIPTION " The TCP RST bit to be checked against the packet. The default value is 'dont-care'(-1), which means the rule don't care this condition." DEFVAL { dont-care } ::= { aclL3RuleEntry 15 } aclL3RuleTcpUrgBit OBJECT-TYPE SYNTAX INTEGER { dont-care(-1), establish(1), notEstablish(2) } MAX-ACCESS read-create STATUS current DESCRIPTION " The TCP Urg bit to be checked against the packet. The default value is 'dont-care'(-1), which means the rule don't care this condition." DEFVAL { dont-care } ::= { aclL3RuleEntry 16 } aclL3RuleTcpPshBit OBJECT-TYPE SYNTAX INTEGER { dont-care(-1), establish(1), notEstablish(2) } MAX-ACCESS read-create STATUS current DESCRIPTION " The TCP Psh bit to be checked against the packet. The default value is 'dont-care'(-1). which means the rule don't care this condition." DEFVAL { dont-care } ::= { aclL3RuleEntry 17 } aclL3RuleTcpSynBit OBJECT-TYPE SYNTAX INTEGER { dont-care(-1), establish(1), notEstablish(2) } MAX-ACCESS read-create STATUS current DESCRIPTION " The TCP Syn bit to be checked against the packet. The default value is 'dont-care'(-1), which means the rule don't care this condition." DEFVAL { dont-care } ::= { aclL3RuleEntry 18 } aclL3RuleTcpFinBit OBJECT-TYPE SYNTAX INTEGER { dont-care(-1), establish(1), notEstablish(2) } MAX-ACCESS read-create STATUS current DESCRIPTION " The TCP Fin bit to be checked against the packet. The default value is 'dont-care'(-1), which means the rule don't care this condition." DEFVAL { dont-care } ::= { aclL3RuleEntry 19 } aclL3RuleDscp OBJECT-TYPE SYNTAX Integer32 (-1..63) MAX-ACCESS read-create STATUS current DESCRIPTION " The IP Dscp value to be checked against the packet. A default value is '-1', which means the rule don't care this condition." DEFVAL { -1 } ::= { aclL3RuleEntry 20 } aclL3RuleIgmpType OBJECT-TYPE SYNTAX Integer32 (-1..255) MAX-ACCESS read-write STATUS current DESCRIPTION " The IGMP Type to be checked against the packet.A default value is '-1', which means the rule don't care this condition." DEFVAL { -1 } ::= { aclL3RuleEntry 21 } aclL3RulePortList OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the complete set of ports over which if the packet arrives this filter rule will be applicable." ::= { aclL3RuleEntry 22 } aclL3RuleAction OBJECT-TYPE SYNTAX INTEGER { allow (1), drop (2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the action to be taken on the packet if the filter rule matches." DEFVAL { allow } ::= { aclL3RuleEntry 23 } aclL3RuleStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object indicates the status of this entry. An entry is created in this table when this object is SET to 'createAndWait'. The entry in this table is used when the status of this object is SET 'active'. The entry in this table is not used when this object is SET 'notInService'. An entry created in this table is be deleted when this object is SET 'destroy'." ::= { aclL3RuleEntry 25 } snmpGlobalState OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling SNMP Community function." ::= { companySNMPV3 1 } snmpV3User OBJECT IDENTIFIER ::= { companySNMPV3 2 } snmpV3Group OBJECT IDENTIFIER ::= { companySNMPV3 3 } snmpV3ViewTree OBJECT IDENTIFIER ::= { companySNMPV3 4 } snmpV3Community OBJECT IDENTIFIER ::= { companySNMPV3 5 } snmpV3Host OBJECT IDENTIFIER ::= { companySNMPV3 6 } snmpV3EngineID OBJECT-TYPE SYNTAX SnmpEngineID MAX-ACCESS read-write STATUS current DESCRIPTION "An SNMP engine's administratively-unique identifier. In a simple agent, this value is always that agent's own snmpEngineID value. The value can also take the value of the snmpEngineID of a remote SNMP engine with which this user can communicate." ::= { companySNMPV3 7 } snmpV3Trap OBJECT IDENTIFIER ::= { companySNMPV3 8 } -- ---------------------------------------------------------------- -- The snmpV3User group -- ---------------------------------------------------------------- snmpV3UserTable OBJECT-TYPE SYNTAX SEQUENCE OF SnmpV3UserEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" ::= { snmpV3User 1 } snmpV3UserEntry OBJECT-TYPE SYNTAX SnmpV3UserEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" INDEX { snmpV3UserName , snmpV3UserVersion} ::= { snmpV3UserTable 1 } SnmpV3UserEntry ::= SEQUENCE { snmpV3UserName SnmpAdminString, snmpV3UserVersion INTEGER, snmpV3UserGroupName SnmpAdminString, snmpV3UserAuthProtocol INTEGER, snmpV3UserAuthProtocolPassword SnmpAdminString, snmpV3UserPrivProtocol INTEGER, snmpV3UserPrivProtocolPassword SnmpAdminString, snmpV3UserStatus RowStatus } snmpV3UserName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(1..32)) MAX-ACCESS read-only STATUS current DESCRIPTION "A human readable string representing the name of the user. This is the (User-based Security) Model dependent security ID. " ::= { snmpV3UserEntry 1 } snmpV3UserVersion OBJECT-TYPE SYNTAX INTEGER { v1 (1), v2c (2), v3 (3) } MAX-ACCESS read-only STATUS current DESCRIPTION "A human readable string representing the name of the user. This is the (User-based Security) Model dependent security ID. " ::= { snmpV3UserEntry 2 } snmpV3UserGroupName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(1..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The name of the group to which this entry (e.g., the combination of securityModel and securityName) belongs. This groupName is used as index into the vacmAccessTable to select an access control policy. However, a value in this table does not imply that an instance with the value exists in table vacmAccesTable. " ::= { snmpV3UserEntry 3 } snmpV3UserAuthProtocol OBJECT-TYPE SYNTAX INTEGER { none (1), md5 (2), sha (3) } MAX-ACCESS read-create STATUS current DESCRIPTION "An indication of whether messages sent on behalf of this user to/from the SNMP engine identified by usmUserEngineID, can be authenticated, and if so, the type of authentication protocol which is used. An instance of this object is created concurrently with the creation of any other object instance for the same user (i.e., as part of the processing of the set operation which creates the first object instance in the same conceptual row). If an initial set operation (i.e. at row creation time) tries to set a value for an unknown or unsupported protocol, then a 'wrongValue' error must be returned. The value will be overwritten/set when a set operation is performed on the corresponding instance of UserCloneFrom. Once instantiated, the value of such an instance of this object can only be changed via a set operation to the value of the NoAuthProtocol. If a set operation tries to change the value of an existing instance of this object to any value other than NoAuthProtocol, then an 'inconsistentValue' error must be returned. If a set operation tries to set the value to the NoAuthProtocol while the UserPrivProtocol value in the same row is not equal to NoPrivProtocol, then an 'inconsistentValue' error must be returned. That means that an SNMP command generator application must first ensure that the UserPrivProtocol is set to the NoPrivProtocol value before it can set the UserAuthProtocol value to NoAuthProtocol. " ::= { snmpV3UserEntry 4 } snmpV3UserAuthProtocolPassword OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(1..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "" ::= { snmpV3UserEntry 5 } snmpV3UserPrivProtocol OBJECT-TYPE SYNTAX INTEGER { none (1), des (2) } MAX-ACCESS read-create STATUS current DESCRIPTION "An indication of whether messages sent on behalf of this user to/from the SNMP engine identified by usmUserEngineID, can be protected from disclosure, and if so, the type of privacy protocol which is used. An instance of this object is created concurrently with the creation of any other object instance for the same user (i.e., as part of the processing of the set operation which creates the first object instance in the same conceptual row). If an initial set operation (i.e. at row creation time) tries to set a value for an unknown or unsupported protocol, then a 'wrongValue' error must be returned. The value will be overwritten/set when a set operation is performed on the corresponding instance of usmUserCloneFrom. Once instantiated, the value of such an instance of this object can only be changed via a set operation to the value of the NoPrivProtocol. If a set operation tries to change the value of an existing instance of this object to any value other than NoPrivProtocol, then an 'inconsistentValue' error must be returned. Note that if any privacy protocol is used, then you must also use an authentication protocol. In other words, if usmUserPrivProtocol is set to anything else than NoPrivProtocol, then the corresponding instance of usmUserAuthProtocol cannot have a value of usmNoAuthProtocol. If it does, then an 'inconsistentValue' error must be returned. " ::= { snmpV3UserEntry 6 } snmpV3UserPrivProtocolPassword OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(1..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "" ::= { snmpV3UserEntry 7 } snmpV3UserStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this conceptual row. Until instances of all corresponding columns are appropriately configured, the value of the corresponding instance of the usmUserStatus column is 'notReady'. In particular, a newly created row for a user who employs authentication, cannot be made active until the corresponding usmUserCloneFrom and usmUserAuthKeyChange have been set. Further, a newly created row for a user who also employs privacy, cannot be made active until the usmUserPrivKeyChange has been set. The RowStatus TC [RFC2579] requires that this DESCRIPTION clause states under which circumstances other objects in this row can be modified: The value of this object has no effect on whether other objects in this conceptual row can be modified, except for usmUserOwnAuthKeyChange and usmUserOwnPrivKeyChange. For these 2 objects, the value of usmUserStatus MUST be active. " ::= { snmpV3UserEntry 8 } -- ---------------------------------------------------------------- -- The snmpV3Group group -- ---------------------------------------------------------------- snmpV3GroupTable OBJECT-TYPE SYNTAX SEQUENCE OF SnmpV3GroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" ::= { snmpV3Group 1 } snmpV3GroupEntry OBJECT-TYPE SYNTAX SnmpV3GroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" INDEX { snmpV3GroupName ,snmpV3GroupSecurityModel ,snmpV3GroupSecurityLevel} ::= { snmpV3GroupTable 1 } SnmpV3GroupEntry ::= SEQUENCE { snmpV3GroupName SnmpAdminString, snmpV3GroupSecurityModel INTEGER, snmpV3GroupSecurityLevel SnmpSecurityLevel, snmpV3GroupReadViewName SnmpAdminString, snmpV3GroupWriteViewName SnmpAdminString, snmpV3GroupNotifyViewName SnmpAdminString, snmpV3GroupStatus RowStatus } snmpV3GroupName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(1..32)) MAX-ACCESS read-only STATUS current DESCRIPTION "The name of the group to which this entry (e.g., the combination of securityModel and securityName) belongs. This groupName is used as index into the vacmAccessTable to select an access control policy. However, a value in this table does not imply that an instance with the value exists in table vacmAccesTable. " ::= { snmpV3GroupEntry 1 } snmpV3GroupSecurityModel OBJECT-TYPE SYNTAX INTEGER { v1 (1), v2c (2), v3 (3) } MAX-ACCESS read-only STATUS current DESCRIPTION "In order to gain the access rights allowed by this conceptual row, this securityModel must be in use. " ::= { snmpV3GroupEntry 2 } snmpV3GroupSecurityLevel OBJECT-TYPE SYNTAX SnmpSecurityLevel MAX-ACCESS read-only STATUS current DESCRIPTION "The minimum level of security required in order to gain the access rights allowed by this conceptual row. A securityLevel of noAuthNoPriv is less than authNoPriv which in turn is less than authPriv. If multiple entries are equally indexed except for this vacmAccessSecurityLevel index, then the entry which has the highest value for vacmAccessSecurityLevel is selected. " ::= { snmpV3GroupEntry 3 } snmpV3GroupReadViewName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of an instance of this object identifies the MIB view of the SNMP context to which this conceptual row authorizes read access. The identified MIB view is that one for which the vacmViewTreeFamilyViewName has the same value as the instance of this object; if the value is the empty string or if there is no active MIB view having this value of vacmViewTreeFamilyViewName, then no access is granted. " -- DEFVAL { ''H } -- -- the empty string -- ::= { snmpV3GroupEntry 4 } snmpV3GroupWriteViewName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of an instance of this object identifies the MIB view of the SNMP context to which this conceptual row authorizes write access. The identified MIB view is that one for which the vacmViewTreeFamilyViewName has the same value as the instance of this object; if the value is the empty string or if there is no active MIB view having this value of vacmViewTreeFamilyViewName, then no access is granted. " -- DEFVAL { ''H } -- -- the empty string -- ::= { snmpV3GroupEntry 5 } snmpV3GroupNotifyViewName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of an instance of this object identifies the MIB view of the SNMP context to which this conceptual row authorizes access for notifications. The identified MIB view is that one for which the vacmViewTreeFamilyViewName has the same value as the instance of this object; if the value is the empty string or if there is no active MIB view having this value of vacmViewTreeFamilyViewName, then no access is granted. " -- DEFVAL { ''H } -- -- the empty string -- ::= { snmpV3GroupEntry 6 } snmpV3GroupStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this conceptual row. The RowStatus TC [RFC2579] requires that this DESCRIPTION clause states under which circumstances other objects in this row can be modified: The value of this object has no effect on whether other objects in this conceptual row can be modified. " ::= { snmpV3GroupEntry 7 } -- ---------------------------------------------------------------- -- The snmpV3ViewTree group -- ---------------------------------------------------------------- snmpV3ViewTreeTable OBJECT-TYPE SYNTAX SEQUENCE OF SnmpV3ViewTreeEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" ::= { snmpV3ViewTree 1 } snmpV3ViewTreeEntry OBJECT-TYPE SYNTAX SnmpV3ViewTreeEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" INDEX { snmpV3viewTreeName ,snmpV3viewTreeSubtree } ::= { snmpV3ViewTreeTable 1 } SnmpV3ViewTreeEntry ::= SEQUENCE { snmpV3viewTreeName SnmpAdminString, snmpV3viewTreeSubtree OBJECT IDENTIFIER, snmpV3viewTreeMask OCTET STRING, snmpV3viewTreeType INTEGER, snmpV3viewTreeStatus RowStatus } snmpV3viewTreeName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(1..32)) MAX-ACCESS read-only STATUS current DESCRIPTION "The human readable name for a family of view subtrees. " ::= { snmpV3ViewTreeEntry 1 } snmpV3viewTreeSubtree OBJECT-TYPE SYNTAX OBJECT IDENTIFIER MAX-ACCESS read-only STATUS current DESCRIPTION "The MIB subtree which when combined with the corresponding instance of vacmViewTreeFamilyMask defines a family of view subtrees. " ::= { snmpV3ViewTreeEntry 2 } snmpV3viewTreeMask OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..16)) MAX-ACCESS read-create STATUS current DESCRIPTION "The bit mask which, in combination with the corresponding instance of vacmViewTreeFamilySubtree, defines a family of view subtrees. Each bit of this bit mask corresponds to a sub-identifier of vacmViewTreeFamilySubtree, with the most significant bit of the i-th octet of this octet string value (extended if necessary, see below) corresponding to the (8*i - 7)-th sub-identifier, and the least significant bit of the i-th octet of this octet string corresponding to the (8*i)-th sub-identifier, where i is in the range 1 through 16. Each bit of this bit mask specifies whether or not the corresponding sub-identifiers must match when determining if an OBJECT IDENTIFIER is in this family of view subtrees; a '1' indicates that an exact match must occur; a '0' indicates 'wild card', i.e., any sub-identifier value matches. Thus, the OBJECT IDENTIFIER X of an object instance is contained in a family of view subtrees if, for each sub-identifier of the value of vacmViewTreeFamilySubtree, either: the i-th bit of vacmViewTreeFamilyMask is 0, or the i-th sub-identifier of X is equal to the i-th sub-identifier of the value of vacmViewTreeFamilySubtree. If the value of this bit mask is M bits long and there are more than M sub-identifiers in the corresponding instance of vacmViewTreeFamilySubtree, then the bit mask is extended with 1's to be the required length. Note that when the value of this object is the zero-length string, this extension rule results in a mask of all-1's being used (i.e., no 'wild card'), and the family of view subtrees is the one view subtree uniquely identified by the corresponding instance of vacmViewTreeFamilySubtree. Note that masks of length greater than zero length do not need to be supported. In this case this object is made read-only. " -- DEFVAL { ''H } ::= { snmpV3ViewTreeEntry 3 } snmpV3viewTreeType OBJECT-TYPE SYNTAX INTEGER { included(1), excluded(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Indicates whether the corresponding instances of vacmViewTreeFamilySubtree and vacmViewTreeFamilyMask define a family of view subtrees which is included in or excluded from the MIB view. " -- DEFVAL { included } ::= { snmpV3ViewTreeEntry 4 } snmpV3viewTreeStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this conceptual row. The RowStatus TC [RFC2579] requires that this DESCRIPTION clause states under which circumstances other objects in this row can be modified: The value of this object has no effect on whether other objects in this conceptual row can be modified. " ::= { snmpV3ViewTreeEntry 5 } -- ---------------------------------------------------------------- -- The snmpV3Community group -- ---------------------------------------------------------------- snmpV3CommunityTable OBJECT-TYPE SYNTAX SEQUENCE OF SnmpV3CommunityEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" ::= { snmpV3Community 1 } snmpV3CommunityEntry OBJECT-TYPE SYNTAX SnmpV3CommunityEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" INDEX { snmpV3CommunityName } ::= { snmpV3CommunityTable 1 } SnmpV3CommunityEntry ::= SEQUENCE { snmpV3CommunityName OCTET STRING, snmpV3CommunityPolicy SnmpAdminString, snmpV3CommunityStatus RowStatus } snmpV3CommunityName OBJECT-TYPE SYNTAX OCTET STRING MAX-ACCESS read-only STATUS current DESCRIPTION "The unique index value of a row in this table." ::= { snmpV3CommunityEntry 1 } snmpV3CommunityPolicy OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(1..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "A human readable string representing the corresponding value of snmpCommunityName in a Security Model independent format." ::= { snmpV3CommunityEntry 2 } snmpV3CommunityStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this conceptual row in the snmpCommunityTable. An entry in this table is not qualified for activation until instances of all corresponding columns have been initialized, either through default values, or through Set operations. The snmpCommunityName and snmpCommunitySecurityName objects must be explicitly set. There is no restriction on setting columns in this table when the value of snmpCommunityStatus is active(1)." ::= { snmpV3CommunityEntry 3 } -- ---------------------------------------------------------------- -- The snmpV3Host group -- ---------------------------------------------------------------- snmpV3HostTable OBJECT-TYPE SYNTAX SEQUENCE OF SnmpV3HostEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" ::= { snmpV3Host 1 } snmpV3HostEntry OBJECT-TYPE SYNTAX SnmpV3HostEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "" INDEX { snmpV3HostAddress } ::= { snmpV3HostTable 1 } SnmpV3HostEntry ::= SEQUENCE { snmpV3HostAddress IpAddress, snmpV3HostCommunityName SnmpAdminString, snmpV3HostVersion INTEGER, snmpV3HostStatus RowStatus } snmpV3HostAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "This object contains a transport address. The format of this address depends on the value of the snmpTargetAddrTDomain object. And this object is unique identifier associated with this snmpNotifyEntry." ::= { snmpV3HostEntry 1 } snmpV3HostCommunityName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(1..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The locally arbitrary." ::= { snmpV3HostEntry 2 } snmpV3HostVersion OBJECT-TYPE SYNTAX INTEGER { v1 (1), v2c (2), v3NoAuthNoPriv (3), v3AuthNoPriv (4), v3AuthPriv (5) } MAX-ACCESS read-create STATUS current DESCRIPTION "The Level of Security to be used when generating SNMP messages using this entry." ::= { snmpV3HostEntry 3 } snmpV3HostStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "" ::= { snmpV3HostEntry 4 } -- ---------------------------------------------------------------- -- The snmpV3Trap group -- ---------------------------------------------------------------- snmpV3TrapSNMPAuthentication OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling SNMP login fail event trap in the system." ::= { snmpV3Trap 1 } snmpV3TrapBootup OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling devie Bootup event trap in the system." ::= { snmpV3Trap 2 } -- -- snmpV3TrapFiberLinkUpDown OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling Fiber link up / link down event trap in the system." ::= { snmpV3Trap 3 } snmpV3TrapCopperLinkUpDown OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling Copper link up / link down event trap in the system." ::= { snmpV3Trap 4 } snmpV3TrapRSTPStateChange OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling RSTP topology change event trap in the system." ::= { snmpV3Trap 5 } snmpV3TrapFirmUpgrade OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling Firmware upgrade suess or fail event trap in the system." ::= { snmpV3Trap 6 } traps OBJECT IDENTIFIER ::= { companyTraps 0 } topologyChange NOTIFICATION-TYPE STATUS current DESCRIPTION "AST_TOPOLOGY_CHG_TRAP_VAL." ::= { traps 4 } firmwareUpgradeSuccess NOTIFICATION-TYPE STATUS current DESCRIPTION "SNMP_FIRMUPGRADE_SUCC." ::= { traps 8 } firmwareUpgradeFailure NOTIFICATION-TYPE STATUS current DESCRIPTION "SNMP_FIRMUPGRADE_FAIL." ::= { traps 9 } firmwareIllegalFile NOTIFICATION-TYPE STATUS current DESCRIPTION "SNMP_FIRMUPGRADE_FAIL2." ::= { traps 10 } firmwareTransferError NOTIFICATION-TYPE STATUS current DESCRIPTION "SNMP_FIRMUPGRADE_FAIL1." ::= { traps 11 } firmwareChecksumError NOTIFICATION-TYPE STATUS current DESCRIPTION "SNMP_FIRMUPGRADE_FAIL3." ::= { traps 12 } -- ------------------------------------------------------------------ -- companySyslog -- ------------------------------------------------------------------ syslogGeneralGroup OBJECT IDENTIFIER ::= { companySyslog 1 } syslogLogSrvAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the syslog server IP to be used for remote logging. When configured, a new socket will be opened for this address. When the address is changed, the socket opened for the previous address will be closed and a new socket will be opened for this address." ::= { syslogGeneralGroup 1 } syslogUDPPort OBJECT-TYPE SYNTAX INTEGER (1..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The value is for setting UDP Port." ::= { syslogGeneralGroup 2 } syslogTimeStamp OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling timestamp option. When enabled, the messages (log and email alert messages) will hold the time stamp information. When disabled, the time stamp information will not be carried with the messages sent to the log and mail servers." DEFVAL { enable } ::= { syslogGeneralGroup 3 } syslogSeverity OBJECT-TYPE SYNTAX INTEGER{ warning(4), -- For logging warning messages. info(6), -- For logging informational messages. all(7) -- For logging debug messages. } MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the log level option to be set for a specific module." ::= { syslogGeneralGroup 4 } syslogFacility OBJECT-TYPE SYNTAX INTEGER { local0(128), -- Reserved local use local1(136), -- Reserved local use local2(144), -- Reserved local use local3(152), -- Reserved local use local4(160), -- Reserved local use local5(168), -- Reserved local use local6(176), -- Reserved local use local7(184) -- Reserved local use } MAX-ACCESS read-write STATUS current DESCRIPTION "The Syslog standard facilities. The facility to be used when sending Syslog messages to this server." DEFVAL { local0 } ::= { syslogGeneralGroup 5 } syslogLogging OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling syslog alert features in the system. System Logs record and manage events, as well as report errors and informational messages." DEFVAL { disable } ::= { syslogGeneralGroup 6 } -- LBD Group ------------------------------------------------------ sysLBDStateEnable OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable Loopback detection function. The Loopback Detection function is used to detect the loop created by a specific port while Spanning Tree Protocol (STP) is not enabled in the network, especially when the down links are hubs or unmanaged switchs.The Switch will automatically shutdown the port and sends a log to the administrator." DEFVAL { disabled } ::= { companyLBD 1 } sysLBDInterval OBJECT-TYPE SYNTAX Integer32 (1..32767) MAX-ACCESS read-write STATUS current DESCRIPTION "Set a Loop detection Interval between 1 and 32767 seconds. The default is 2 seconds. This time interval to be used at counting time seconds to resend the CTP packet automatically." DEFVAL { 2 } ::= { companyLBD 2 } sysLBDRecoverTime OBJECT-TYPE SYNTAX Integer32 (0 | 60..1000000) MAX-ACCESS read-write STATUS current DESCRIPTION "This time interval to be used at counting time seconds to recover the disabled port automatically. The Loop Detection Recover Time can be set at 0 seconds, or 60 to 1000000 seconds. Entering 0 will disable the Loop Detection Recover Time. The default is 60 seconds." DEFVAL { 60 } ::= { companyLBD 3 } -- LBD Port Control Table sysLBDCtrlTable OBJECT-TYPE SYNTAX SEQUENCE OF SysLBDCtrlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table to control Loopback detection features either for the entire switch or for each interface in the switch." ::= { companyLBD 4 } sysLBDCtrlEntry OBJECT-TYPE SYNTAX SysLBDCtrlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry appears in this table for each interface in the system." INDEX { sysLBDCtrlIndex } ::= { sysLBDCtrlTable 1 } SysLBDCtrlEntry ::= SEQUENCE { sysLBDCtrlIndex Integer32, sysLBDPortStatus INTEGER, sysLBDPortLoopStatus INTEGER } sysLBDCtrlIndex OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The interface index of the port for which the configuration in this entry applies." ::= { sysLBDCtrlEntry 1 } sysLBDPortStatus OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Provides control to per port enable or disable the loopback detection function. Default is disabled." DEFVAL { disabled } ::= { sysLBDCtrlEntry 2 } sysLBDPortLoopStatus OBJECT-TYPE SYNTAX INTEGER { normal(1), disabled(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The loop status for this port." ::= { sysLBDCtrlEntry 3 } -- ------------------------------------------------------------------ -- Mirror Group -- ------------------------------------------------------------------ sysMirrorStatus OBJECT-TYPE SYNTAX INTEGER { enabled (1), disabled (2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable Port Mirroring function. Default is disabled. Port Mirroring is a method of monitoring network traffic that forwards a copy of each incoming and/or outgoing packet from one port of the Switch to another port where the packet can be studied." -- "Provides control over the mirroring feature in the switch." -- DEFVAL { disabled } ::= { companyMirror 1 } sysMirrorTargetPort OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the port to which the mirrored traffic in the system is to be copied." ::= { companyMirror 2 } sysMirrorCtrlIngressMirroring OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-write STATUS current DESCRIPTION "Provides control to enable or disable mirroring of ingress traffic over this interface to the mirrored-to port." ::= { companyMirror 3 } sysMirrorCtrlEgressMirroring OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-write STATUS current DESCRIPTION "Provides control to enable or disable mirroring of egress traffic over this interface to the mirrored-to port." ::= { companyMirror 4 } -- ------------------------------------------------------------------ -- trap setting sysTrapIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The smart console utility's IP address is used to recive trap events." ::= { companyTrapSetting 1 } sysTrapSystemEvent OBJECT-TYPE SYNTAX INTEGER { none(0), deviceBootUp(1), illegalLogin(2), both(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable system trap events in the switch system." DEFVAL { none } ::= { companyTrapSetting 2 } -- -- sysTrapFiberPortEvent OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable fiber port trap event in the system." DEFVAL { disable } ::= { companyTrapSetting 3 } sysTrapTwistedPortEvent OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable twisted port trap event in the system." DEFVAL { disable } ::= { companyTrapSetting 4 } sysTrapStateChangeEvent OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable RSTP state change trap event in the system." DEFVAL { disable } ::= { companyTrapSetting 5 } sysTrapFirmUpgradeEvent OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable firmware upgrading trap event in the system." DEFVAL { disable } ::= { companyTrapSetting 6 } sysTrapStatus OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable trap event in the system." DEFVAL { disable } ::= { companyTrapSetting 10 } -- ------------------------------------------------------------------ -- SNTP Timesetting -- ------------------------------------------------------------------ sysSNTPTimeSeconds OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for setting the system time in seconds from Epoch (00:00:00 UTC, January 1, 2009). Notice : input value must larger than 1230768000 (00:00:00 UTC, January 1, 2009) and smaller than 2145916799 (23:59:59 UTC, December 31, 2037)." ::= { companySNTPSetting 1 } sysSNTPFirstServer OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "SNTP First Server's IP Address" ::= { companySNTPSetting 2 } sysSNTPSecondServer OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "SNTP Second Server's IP Address" ::= { companySNTPSetting 3 } sysSNTPPollInterval OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-write STATUS current DESCRIPTION "SNTP Poll Interval In Seconds (30-99999) " ::= { companySNTPSetting 4 } sysSNTPState OBJECT-TYPE SYNTAX INTEGER { sntp(1), local(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/Disable SNTP function in the system." ::= { companySNTPSetting 5 } -- SNTP TimeZonesetting sysSNTPDSTOffset OBJECT-TYPE SYNTAX INTEGER { offset30min (30), offset60min (60), offset90min (90), offset120min (120) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for Daylight Saving Time Offset In (30/60/90/120) Minutes." ::= { companySNTPSetting 6 } sysSNTPGMTMinutes OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the Time Zone Offset from GMT in +/- Minutes. (+780 ~ -720)" ::= { companySNTPSetting 7 } sysSNTPDSTStartMon OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The start month of Daylight Saving Time." ::= { companySNTPSetting 8 } sysSNTPDSTStartDay OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The start day of Daylight Saving Time." ::= { companySNTPSetting 9 } sysSNTPDSTStartHour OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The start hour of Daylight Saving Time." ::= { companySNTPSetting 10 } sysSNTPDSTStartMin OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The start minute of Daylight Saving Time." ::= { companySNTPSetting 11 } sysSNTPDSTEndMon OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The end month of Daylight Saving Time." ::= { companySNTPSetting 12 } sysSNTPDSTEndDay OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The end day of Daylight Saving Time." ::= { companySNTPSetting 13 } sysSNTPDSTEndHour OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The end hour of Daylight Saving Time." ::= { companySNTPSetting 14 } sysSNTPDSTEndMin OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The end minute of Daylight Saving Time." ::= { companySNTPSetting 15 } sysSNTPDSTState OBJECT-TYPE SYNTAX INTEGER { annual(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for Annual(1) or Disabled(2) DST state in the system." ::= { companySNTPSetting 16 } -- --------------------------------------------------------------------- -- voicevlan Function -- --------------------------------------------------------------------- voicevlanSystem OBJECT IDENTIFIER ::= { companyVoiceVlan 1 } voicevlanOUI OBJECT IDENTIFIER ::= { companyVoiceVlan 2 } -- ------------------------------------------------------------------ -- The Voice Vlan Group -- ------------------------------------------------------------------ voiceVlanMode OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Voice VLAN is a feature that allows you to automatically place the voice traffic from IP phone to an assigned VLAN to enhance the VoIP service. This object is for enabling or disabling Voice Vlan function in the system. If the Vlan mode is in Asymmetric VLAN mode, Voice VLAN can not be enabled." ::= { voicevlanSystem 2 } voiceVlanId OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The ID of VLAN that you want the voice traffic to be in. It must be a exist vlan id." ::= { voicevlanSystem 3 } voiceVlanTimeout OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "A period of time in hour to remove a port from voice VLAN if the port is an automatic VLAN member. The Timeout range is 1~120 hours. Default aging time is 1 hour." ::= { voicevlanSystem 4} voiceVlanPriority OBJECT-TYPE SYNTAX INTEGER { highest(0), high(1), medium(2), low(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "The 802.1p priority levels of the traffic in the Voice VLAN." ::= { voicevlanSystem 5} -- -- Voice Vlan Port Control Table -- voicevlanPortControlTable OBJECT-TYPE SYNTAX SEQUENCE OF VoiceVlanPortControlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table that contains Voice Vlan Port Control configuration information." ::= { voicevlanSystem 6 } voicevlanPortControlEntry OBJECT-TYPE SYNTAX VoiceVlanPortControlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of Voice Vlan Control configuration parameters for each Port on this device." INDEX { voicevlanPortControlIndex } ::= { voicevlanPortControlTable 1 } VoiceVlanPortControlEntry ::= SEQUENCE { voicevlanPortControlIndex InterfaceIndex, voicevlanPortAutoDetection INTEGER, voicevlanPortState INTEGER } voicevlanPortControlIndex OBJECT-TYPE SYNTAX InterfaceIndex MAX-ACCESS read-only STATUS current DESCRIPTION "The voice vlan port index." ::= { voicevlanPortControlEntry 1 } voicevlanPortAutoDetection OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling Voice Vlan Auto Detection in the port. If the auto detection is enable, switch will add this port to the voice VLAN automatically if it detects the device OUI matches the Telephony OUI. If the port is a static member of voice vlan or a LA member, it can not enable voice vlan auto detection." ::= { voicevlanPortControlEntry 2 } voicevlanPortState OBJECT-TYPE SYNTAX INTEGER { manual(1), dynamic(2), none(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates Voice vlan state to this Port. manual - this port is a static member of voice vlan. dynamic - this port is a dynamic member of voice vlan. none - this port is not a member of voice vlan." ::= { voicevlanPortControlEntry 3 } -- ------------------------------------------------------------------ -- The Voice Vlan OUI Group -- ------------------------------------------------------------------ -- -- Voice Vlan OUI Table -- voicevlanOUITable OBJECT-TYPE SYNTAX SEQUENCE OF VoicevlanOUIEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A voice vlan OUI entry containing the description and mac." ::= { voicevlanOUI 1 } voicevlanOUIEntry OBJECT-TYPE SYNTAX VoicevlanOUIEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A voice vlan OUI entry containing the description and mac." INDEX { voicevlanOUITelephonyOUI } ::= { voicevlanOUITable 1 } VoicevlanOUIEntry ::= SEQUENCE { voicevlanOUITelephonyOUI MacAddress, voicevlanOUIDescription OCTET STRING, voicevlanOUIMask MacAddress, voicevlanOUIStatus RowStatus } voicevlanOUITelephonyOUI OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "An Organizationally Unique Identifier (OUI) is a 24-bit number that is purchased from the IEEE Registration Authority. This identifier uniquely identifies a vendor, manufacturer, or other organization. This object indicates the voice traffic's OUI that user created." ::= { voicevlanOUIEntry 1 } voicevlanOUIDescription OBJECT-TYPE SYNTAX OCTET STRING MAX-ACCESS read-write STATUS current DESCRIPTION "The Description for the OUI." ::= { voicevlanOUIEntry 2 } voicevlanOUIMask OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Voice vlan OUI Mask. Always be FF:FF:FF:00:00:00." ::= { voicevlanOUIEntry 3 } voicevlanOUIStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-write STATUS current DESCRIPTION "This object indicates the status of this entry. To create a new entry, you must set the voicevlanOUIStatus to be CreateAndGo, then this entry will turn to be Active." ::= { voicevlanOUIEntry 4 } -- --------------------------------------------------------------------- -- Auto Surveillance Vlan Function -- --------------------------------------------------------------------- autoSurveillanceVlanSystem OBJECT IDENTIFIER ::= { companyAutoSurveillanceVlan 1 } autoSurveillanceVlanOUI OBJECT IDENTIFIER ::= { companyAutoSurveillanceVlan 2 } -- ------------------------------------------------------------------ -- The Auto Surveillance Vlan Group -- ------------------------------------------------------------------ autoSurveillanceVlanMode OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object is for enabling or disabling Auto Surveillance Vlan function in the system. If the Vlan mode is in Asymmetric VLAN mode, Auto Surveillance VLAN can not be enabled." ::= { autoSurveillanceVlanSystem 1 } autoSurveillanceVlanId OBJECT-TYPE SYNTAX INTEGER MAX-ACCESS read-write STATUS current DESCRIPTION "The ID of VLAN that you want the surveillance traffic to be in. It must be a exist vlan id." ::= { autoSurveillanceVlanSystem 2 } autoSurveillanceVlanPriority OBJECT-TYPE SYNTAX INTEGER { highest(0), high(1), medium(2), low(3) } MAX-ACCESS read-write STATUS current DESCRIPTION "The 802.1p priority levels of the traffic in the Auto Surveillance VLAN." ::= { autoSurveillanceVlanSystem 3} -- ------------------------------------------------------------------ -- The Auto Surveillance Vlan OUI Group -- ------------------------------------------------------------------ -- -- Auto Surveillance Vlan OUI Table -- autoSurveillanceVlanOUITable OBJECT-TYPE SYNTAX SEQUENCE OF AutoSurveillanceVlanOUIEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A Auto Surveillance vlan OUI entry containing the description and mac." ::= { autoSurveillanceVlanOUI 1 } autoSurveillanceVlanOUIEntry OBJECT-TYPE SYNTAX AutoSurveillanceVlanOUIEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A Auto Surveillance vlan OUI entry containing the description and mac." INDEX { autoSurveillanceVlanOUISurveillanceOUI } ::= { autoSurveillanceVlanOUITable 1 } AutoSurveillanceVlanOUIEntry ::= SEQUENCE { autoSurveillanceVlanOUISurveillanceOUI MacAddress, autoSurveillanceVlanOUIDescription OCTET STRING, autoSurveillanceVlanOUIMask MacAddress, autoSurveillanceVlanOUIStatus RowStatus, autoSurveillanceVlanOUIComponentType INTEGER } autoSurveillanceVlanOUISurveillanceOUI OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "An Organizationally Unique Identifier (OUI) is a 24-bit number that is purchased from the IEEE Registration Authority. This identifier uniquely identifies a vendor, manufacturer, or other organization. This object indicates the surveillance traffic's OUI that user created." ::= { autoSurveillanceVlanOUIEntry 1 } autoSurveillanceVlanOUIDescription OBJECT-TYPE SYNTAX OCTET STRING MAX-ACCESS read-write STATUS current DESCRIPTION "The Description for the OUI." ::= { autoSurveillanceVlanOUIEntry 2 } autoSurveillanceVlanOUIMask OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Auto Surveillance vlan OUI Mask. In default OUI is FF:FF:FF:F0:00:00, in user define OUI is FF:FF:FF:FF:FF:FF." ::= { autoSurveillanceVlanOUIEntry 3 } autoSurveillanceVlanOUIComponentType OBJECT-TYPE SYNTAX INTEGER { video-Management-Server(0), vMS-Client(1), video-Encoder(2), network-Storage(3), other-IP-Surveillance-Devices(4), d-Link-Surveillance-Device(5) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object indicates the Component Type of this entry. To create a new entry, you must set the autoSurveillanceVlanOUIComponentType to be CreateAndGo, then this entry will turn to be Active." ::= { autoSurveillanceVlanOUIEntry 4 } autoSurveillanceVlanOUIStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-write STATUS current DESCRIPTION "This object indicates the status of this entry. To create a new entry, you must set the autoSurveillanceVlanOUIStatus to be CreateAndGo, then this entry will turn to be Active." ::= { autoSurveillanceVlanOUIEntry 5 } -- ---------------------------------------------------------- -- The companySecurity Groups -- ---------------------------------------------------------- securityDhcpServerScreen OBJECT IDENTIFIER ::= { companySecurity 7 } -- Port Security Group --------------------------------------------- -- dhcpServerScreenEnablePortlist OBJECT-TYPE SYNTAX PortList MAX-ACCESS read-write STATUS current DESCRIPTION "To enable or disable DHCP Server Screening port list." ::= { securityDhcpServerScreen 1 } -- ***************************************************************** -- -- Enterprise Trap group -- -- ***************************************************************** END