--/* -- * -- * -- */ -- ################################################################################ EXTREME-SNMPV3-MIB DEFINITIONS ::= BEGIN IMPORTS MODULE-IDENTITY FROM SNMPv2-SMI Integer32, OBJECT-TYPE FROM SNMPv2-SMI DisplayString FROM SNMPv2-TC IpAddress, TruthValue FROM SNMPv2-TC extremeAgent FROM EXTREME-BASE-MIB snmpTargetAddrEntry FROM SNMP-TARGET-MIB; extremeSnmpv3 MODULE-IDENTITY LAST-UPDATED "201009280400Z" ORGANIZATION "Extreme Networks, Inc." CONTACT-INFO "www.extremenetworks.com" DESCRIPTION "Extreme-specific SNMPv3 objects" ::= { extremeAgent 23 } extremeTarget OBJECT IDENTIFIER ::= { extremeSnmpv3 1 } extremeUsm OBJECT IDENTIFIER ::= { extremeSnmpv3 2 } extremeTargetAddrExtTable OBJECT-TYPE SYNTAX SEQUENCE OF ExtremeTargetAddrExtEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table is an extension to the snmpTargetAddrTable found in the SNMP-TARGET-MIB. It contains Extreme Networks specific objects needed for each management target." ::= { extremeTarget 1 } extremeTargetAddrExtEntry OBJECT-TYPE SYNTAX ExtremeTargetAddrExtEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry in the extremeTargetAddrExtTable." AUGMENTS { snmpTargetAddrEntry } ::= { extremeTargetAddrExtTable 1 } ExtremeTargetAddrExtEntry ::= SEQUENCE { extremeTargetAddrExtIgnoreMPModel TruthValue, extremeTargetAddrExtStandardMode TruthValue, extremeTargetAddrExtTrapDestIndex Integer32, extremeTargetAddrExtUseEventComm TruthValue, extremeTargetAddrExtTrapSrcIp IpAddress, extremeTargetAddrExtVrName DisplayString } extremeTargetAddrExtIgnoreMPModel OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "When this object is set to TRUE, the version of the trap/notification sent to the corresponding management target (trap receiver) will be the same as in releases of Extremeware prior to 7.1.0. Thus, the value of the snmpTargetParamsMPModel object in the snmpTargetParamsTable will be ignored while determining the version of the trap/notification to be sent. When a trap-receiver is created via the RMON trapDestTable or from the CLI command 'configure snmp add trapreceiver ....', the value of this object will be set to TRUE for the corresponding entry in this table." DEFVAL { false } ::= { extremeTargetAddrExtEntry 1 } extremeTargetAddrExtStandardMode OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "When this object is set to TRUE, the management target will be treated as a 'standard mode' one, in that any Extreme Networks specific extra varbinds present in a standards-based trap/notification will not be sent to this management target. Only the varbinds defined in the standard will be sent." DEFVAL { false } ::= { extremeTargetAddrExtEntry 2 } extremeTargetAddrExtTrapDestIndex OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object contains the value of the trapDestIndex in the corresponding entry of the RMON trapDestTable." ::= { extremeTargetAddrExtEntry 3 } extremeTargetAddrExtUseEventComm OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object is used only when sending RMON alarms as SNMPv3 traps. When it is set to TRUE and an RMON risingAlarm or fallingAlarm is being sent for an event, then the eventCommunity in the RMON event table is compared to the snmpTargetAddrName in the snmpTargetAddrTable. The alarm is sent to the target only when the two are the same. This behavior is exhibited only when the snmpTargetParamsMPModel corresponding to the target indicates an SNMPv3 trap. For SNMPv1/v2c traps, the community in the RMON trapDestTable is used for the comparision, which is the 'regular' method, as per the standards. When this object is set to FALSE, then the RMON alarm (if being sent as an SNMPv3 trap) is sent without using the event community for any comparision." DEFVAL { true } ::= { extremeTargetAddrExtEntry 4 } extremeTargetAddrExtTrapSrcIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "This object contains the source IP address from which traps have to be sent out. If this object is assigned an IP address that does not belong to the switch, an error is thrown." DEFVAL { 0 } ::= { extremeTargetAddrExtEntry 5} extremeTargetAddrExtVrName OBJECT-TYPE SYNTAX DisplayString (SIZE(0..32)) MAX-ACCESS read-write STATUS current DESCRIPTION "This object contains the virtual router name through which the SNMP Traps are being sent out. If extremeTargetAddrExtVrName is not specified then the SNMP Traps will be sent out through either VR-Mgmt or VR-Default." ::= { extremeTargetAddrExtEntry 6} extremeUsm3DESPrivProtocol OBJECT-IDENTITY STATUS current DESCRIPTION "The 3DES-EDE Symmetric Encryption Protocol. This is the protocol as specified in draft-reeder-snmpv3-usm-3desede-00." REFERENCE "-Data Encryption Standard, National Institute of Standards and Technology. Federal Information Processing Standard (FIPS) Publication 46-3,(1999, pending approval). Will supersede FIPS Publication 46-2. - Data Encryption Algorithm, American National Standards Institute. ANSI X3.92-1981,(December, 1980). - DES Modes of Operation, National Institute of Standards and Technology. Federal Information Processing Standard (FIPS) Publication 81,(December, 1980). - Data Encryption Algorithm - Modes of Operation, American National Standards Institute. ANSI X3.106-1983, (May 1983)." ::= { extremeUsm 1 } extremeUsmAesCfb192Protocol OBJECT-IDENTITY STATUS current DESCRIPTION "The CFB128-AES-192 Privacy Protocol." REFERENCE "- Specification for the ADVANCED ENCRYPTION STANDARD (DRAFT). Federal Information Processing Standard (FIPS) Publication 197. (November 2001). - Dworkin, M., NIST Recommendation for Block Cipher Modes of Operation, Methods and Techniques (DRAFT). NIST Special Publication 800-38A (December 2001)." ::= { extremeUsm 2 } extremeUsmAesCfb256Protocol OBJECT-IDENTITY STATUS current DESCRIPTION "The CFB128-AES-256 Privacy Protocol." REFERENCE "- Specification for the ADVANCED ENCRYPTION STANDARD (DRAFT). Federal Information Processing Standard (FIPS) Publication 197 (November 2001). - Dworkin, M., NIST Recommendation for Block Cipher Modes of Operation, Methods and Techniques (DRAFT). NIST Special Publication 800-38A (December 2001)." ::= { extremeUsm 3 } END