graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
towerops/priv/mibs/cisco/CISCOSB-BRIDGE-SECURITY
Graham McIntire b4f8b40b7f
Include MIB files in Docker image instead of using PVC 
- Remove PVC volume mount from k8s/deployment.yaml
- Delete k8s/mib-pvc.yaml (no longer needed)
- Update .gitignore to commit MIB files to git
- Add mix import_mibs task to copy MIBs from LibreNMS
- Add all MIB files from priv/mibs/ to git

This fixes the multi-attach volume error in Kubernetes where new pods
couldn't start because the RWO (ReadWriteOnce) PVC was attached to the
old pod. MIBs are now part of the Docker image and can be used by all
pods simultaneously.
2026-01-19 14:01:03 -06:00

1177 lines
37 KiB
Text
Raw Permalink Blame History

CISCOSB-BRIDGE-SECURITY DEFINITIONS ::= BEGIN
-- Version: 7.43
-- Date: 02-Apr-2006
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE,
Unsigned32, IpAddress, Counter32 FROM SNMPv2-SMI
InterfaceIndex, ifIndex FROM IF-MIB
RowStatus, TEXTUAL-CONVENTION, MacAddress,
DisplayString, TruthValue FROM SNMPv2-TC
VlanId FROM Q-BRIDGE-MIB
switch001 FROM CISCOSB-MIB;
rlBridgeSecurity MODULE-IDENTITY
LAST-UPDATED "200604020001Z"
ORGANIZATION "Cisco Systems, Inc."
CONTACT-INFO
"Postal: 170 West Tasman Drive
San Jose , CA 95134-1706
USA
Website: Cisco Small Business Support Community <http://www.cisco.com/go/smallbizsupport>"
DESCRIPTION
"The private MIB module definition for DHCP Snoop, ARP Inspection
and Ip source Guard features."
::= { switch001 112}
rlIpDhcpSnoop OBJECT IDENTIFIER ::= { rlBridgeSecurity 1}
rlIpSourceGuard OBJECT IDENTIFIER ::= { rlBridgeSecurity 2}
rlIpArpInspect OBJECT IDENTIFIER ::= { rlBridgeSecurity 3}
rlProtocolFiltering OBJECT IDENTIFIER ::= { rlBridgeSecurity 4}
rlIpDhcpOpt82 OBJECT IDENTIFIER ::= { rlBridgeSecurity 5}
--
-- DHCP Snoop
--
rlIpDhcpSnoopMibVersion OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"MIB's version, the current version is 1."
::= { rlIpDhcpSnoop 1 }
rlIpDhcpSnoopEnable OBJECT-TYPE
SYNTAX INTEGER{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION "Specifies a system DHCP Snoop enable state."
::= { rlIpDhcpSnoop 2 }
rlIpDhcpSnoopFileEnable OBJECT-TYPE
SYNTAX INTEGER{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION "Specifies a system DHCP Snoop file enable state."
::= { rlIpDhcpSnoop 3 }
rlIpDhcpSnoopClearAction OBJECT-TYPE
SYNTAX INTEGER {
noAction(1), -- for get only
clearNow(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Used to clear DHCP Snoop Table."
::= { rlIpDhcpSnoop 4 }
rlIpDhcpSnoopFileUpdateTime OBJECT-TYPE
SYNTAX INTEGER(600..86400)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Configures in seconds the period of time between file updates.
The valid range is 600 - 86400."
::= { rlIpDhcpSnoop 5 }
rlIpDhcpSnoopVerifyMacAddress OBJECT-TYPE
SYNTAX INTEGER{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Configures on an un-trusted port whether the source MAC address in a DHCP packet matches
the client hardware address."
::= { rlIpDhcpSnoop 6 }
rlIpDhcpSnoopCurrentEntiresNumber OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Contain the current number of DHCP snooping entries for all types."
::= { rlIpDhcpSnoop 7 }
rlIpDhcpOpt82InsertionEnable OBJECT-TYPE
SYNTAX INTEGER{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION "Specifies a DHCP option 82 insertion enable state."
::= { rlIpDhcpSnoop 8 }
rlIpDhcpOpt82RxOnUntrustedEnable OBJECT-TYPE
SYNTAX INTEGER{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION "Specifies a DHCP option 82 receive on untrusted port enable state."
::= { rlIpDhcpSnoop 9 }
--
-- Dhcp Snoop Static table
--
rlIpDhcpSnoopStaticTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpDhcpSnoopStaticEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The table specifies all DHCP Snoop Static (configured by user) entries.
The entry contains a local IP address of the DHCP client, a Port interface to which a DHCP client is connected to the switch."
::= { rlIpDhcpSnoop 10 }
rlIpDhcpSnoopStaticEntry OBJECT-TYPE
SYNTAX RlIpDhcpSnoopStaticEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {rlIpDhcpSnoopStaticVLANTag,
rlIpDhcpSnoopStaticMACAddress}
::= { rlIpDhcpSnoopStaticTable 1 }
RlIpDhcpSnoopStaticEntry ::= SEQUENCE {
rlIpDhcpSnoopStaticVLANTag VlanId,
rlIpDhcpSnoopStaticMACAddress MacAddress,
rlIpDhcpSnoopStaticIPAddress IpAddress,
rlIpDhcpSnoopStaticPortInterface InterfaceIndex,
rlIpDhcpSnoopStaticRowStatus RowStatus
}
rlIpDhcpSnoopStaticVLANTag OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A DHCP Snoop Static entry vlan tag."
::= { rlIpDhcpSnoopStaticEntry 1 }
rlIpDhcpSnoopStaticMACAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A DHCP Snoop Static entry mac address"
::= { rlIpDhcpSnoopStaticEntry 2 }
rlIpDhcpSnoopStaticIPAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"A DHCP Snoop Static entry IP address."
::= { rlIpDhcpSnoopStaticEntry 3 }
rlIpDhcpSnoopStaticPortInterface OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"A DHCP Snoop Static entry Port interface."
::= { rlIpDhcpSnoopStaticEntry 4 }
rlIpDhcpSnoopStaticRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"A status can be destroy, active or createAndGo"
::= { rlIpDhcpSnoopStaticEntry 5 }
--
-- Dhcp Snoop table
--
RlIpDhcpSnoopType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION "Ip Dhcp Snoop entry type."
SYNTAX INTEGER {
learnedByProtocol(1),
deletedByTimeout(2),
static(3)
}
rlIpDhcpSnoopTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpDhcpSnoopEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "DHCP Snoop entry. Use to add/delete a dynamic entries and to view all entries (dynamic and static)"
::= { rlIpDhcpSnoop 11 }
rlIpDhcpSnoopEntry OBJECT-TYPE
SYNTAX RlIpDhcpSnoopEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {rlIpDhcpSnoopVLANTag,
rlIpDhcpSnoopMACAddress}
::= { rlIpDhcpSnoopTable 1 }
RlIpDhcpSnoopEntry ::= SEQUENCE {
rlIpDhcpSnoopVLANTag VlanId,
rlIpDhcpSnoopMACAddress MacAddress,
rlIpDhcpSnoopType RlIpDhcpSnoopType,
rlIpDhcpSnoopLeaseTime Unsigned32,
rlIpDhcpSnoopIPAddress IpAddress,
rlIpDhcpSnoopPortInterface InterfaceIndex,
rlIpDhcpSnoopRowStatus RowStatus
}
rlIpDhcpSnoopVLANTag OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A DHCP Snoop entry vlan tag."
::= { rlIpDhcpSnoopEntry 1 }
rlIpDhcpSnoopMACAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A DHCP Snoop entry mac address"
::= { rlIpDhcpSnoopEntry 2 }
rlIpDhcpSnoopType OBJECT-TYPE
SYNTAX RlIpDhcpSnoopType
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"A DHCP Snoop entry type: static or dynamic."
::= { rlIpDhcpSnoopEntry 3 }
rlIpDhcpSnoopLeaseTime OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"A DHCP Snoop lease time. For static entry the lease time is 0xFFFFFFFF"
::= { rlIpDhcpSnoopEntry 4 }
rlIpDhcpSnoopIPAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The IP address of the DHCP client referred to in this table entry."
::= { rlIpDhcpSnoopEntry 5 }
rlIpDhcpSnoopPortInterface OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Identifies the port Interface ifindex, which connected to DHCP client identified with the entry."
::= { rlIpDhcpSnoopEntry 6 }
rlIpDhcpSnoopRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Entry status. A valid status is CreateandGo or Delete."
::= { rlIpDhcpSnoopEntry 7 }
--
-- Dhcp Snoop Enable VLAN Table
--
rlIpDhcpSnoopEnableVlanTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpDhcpSnoopEnableVlanEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "An Ip Dhcp Snooping enabled VLAN table."
::= { rlIpDhcpSnoop 12 }
rlIpDhcpSnoopEnableVlanEntry OBJECT-TYPE
SYNTAX RlIpDhcpSnoopEnableVlanEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "An Ip Dhcp Snooping enabled VLAN entry."
INDEX {rlIpDhcpSnoopEnableVlanTag}
::= { rlIpDhcpSnoopEnableVlanTable 1 }
RlIpDhcpSnoopEnableVlanEntry ::= SEQUENCE {
rlIpDhcpSnoopEnableVlanTag VlanId,
rlIpDhcpSnoopEnableVlanRowStatus RowStatus
}
rlIpDhcpSnoopEnableVlanTag OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A DHCP Snoop entry vlan tag."
::= { rlIpDhcpSnoopEnableVlanEntry 1 }
rlIpDhcpSnoopEnableVlanRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Entry status. A valid status is CreateandGo and Delete."
::= { rlIpDhcpSnoopEnableVlanEntry 2 }
--
-- Dhcp Snoop Trusted ports Table
--
rlIpDhcpSnoopTrustedPortTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpDhcpSnoopTrustedPortEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"DHCP Snoop Trusted ports entry. The entry created when port is configured as trusted."
::= { rlIpDhcpSnoop 13 }
rlIpDhcpSnoopTrustedPortEntry OBJECT-TYPE
SYNTAX RlIpDhcpSnoopTrustedPortEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {ifIndex}
::= { rlIpDhcpSnoopTrustedPortTable 1 }
RlIpDhcpSnoopTrustedPortEntry ::= SEQUENCE {
rlIpDhcpSnoopTrustedPortRowStatus RowStatus
}
rlIpDhcpSnoopTrustedPortRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Entry status. A valid status is CreateandGo or Delete."
::= { rlIpDhcpSnoopTrustedPortEntry 2 }
--
-- IP Source Guard
--
rlIpSourceGuardMibVersion OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"MIB's version, the current version is 1."
::= { rlIpSourceGuard 1 }
rlIpSourceGuardEnable OBJECT-TYPE
SYNTAX INTEGER{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"FALSE - There is no Ip Source Guard in the system.
TRUE - Ip Source Guard is enabled on system."
::= { rlIpSourceGuard 2 }
rlIpSourceGuardRetryToInsert OBJECT-TYPE
SYNTAX INTEGER {
noAction(0), -- for get only
retryToInsertNow(1)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"When setted to retryToInsertNow all IP Source Guard inactive entries
due to resource problem reinserted in the Policy.
On get always return noAction."
::= { rlIpSourceGuard 3 }
rlIpSourceGuardRetryTime OBJECT-TYPE
SYNTAX INTEGER (0..600)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Configures in seconds the period of time the application retries to
insert inactive by resource problem rules. The actual range is 10-600.
0 used to sign that the timer is not active."
::= { rlIpSourceGuard 4 }
--
-- IP Source Guard Ports table
--
rlIpSourceGuardPortTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpSourceGuardPortEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"IP Source Guard ports entry. The entry created when IP Source Guard
enabled on port."
::= { rlIpSourceGuard 5 }
rlIpSourceGuardPortEntry OBJECT-TYPE
SYNTAX RlIpSourceGuardPortEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {ifIndex}
::= { rlIpSourceGuardPortTable 1 }
RlIpSourceGuardPortEntry ::= SEQUENCE {
rlIpSourceGuardPortRowStatus RowStatus
}
rlIpSourceGuardPortRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Entry status. A valid status is CreateAndGo or Delete."
::= { rlIpSourceGuardPortEntry 2 }
--
-- IP Source Guard table
--
RlIpSourceGuardType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION "Ip IP Source Guard entry type."
SYNTAX INTEGER {
dynamic(1),
static(2)
}
RlIpSourceGuardStatus ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION "Ip IP Source Guard entry status."
SYNTAX INTEGER {
active(1),
inactive(2)
}
RlIpSourceGuardFailReason ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION "Ip IP Source Guard entry reason."
SYNTAX INTEGER {
noProblem(1),
noResource(2),
noSnoopVlan(3),
trustPort(4)
}
rlIpSourceGuardTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpSourceGuardEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "IP Source Guard entry. Use to view all entries (dynamic and static)"
::= { rlIpSourceGuard 6 }
rlIpSourceGuardEntry OBJECT-TYPE
SYNTAX RlIpSourceGuardEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {ifIndex,
rlIpSourceGuardIPAddress,
rlIpSourceGuardVLANTag}
::= { rlIpSourceGuardTable 1 }
RlIpSourceGuardEntry ::= SEQUENCE {
rlIpSourceGuardIPAddress IpAddress,
rlIpSourceGuardVLANTag VlanId,
rlIpSourceGuardMACAddress MacAddress,
rlIpSourceGuardType RlIpSourceGuardType,
rlIpSourceGuardStatus RlIpSourceGuardStatus,
rlIpSourceGuardFailReason RlIpSourceGuardFailReason
}
rlIpSourceGuardIPAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The IP address of the Ip Source Guard entry."
::= { rlIpSourceGuardEntry 1 }
rlIpSourceGuardVLANTag OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A Ip Source Guard entry vlan tag."
::= { rlIpSourceGuardEntry 2 }
rlIpSourceGuardMACAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A Ip Source Guard entry mac address"
::= { rlIpSourceGuardEntry 3 }
rlIpSourceGuardType OBJECT-TYPE
SYNTAX RlIpSourceGuardType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A Ip Source Guard entry type: static or dynamic."
::= { rlIpSourceGuardEntry 4 }
rlIpSourceGuardStatus OBJECT-TYPE
SYNTAX RlIpSourceGuardStatus
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Identifies the status of Ip Source Guard entry."
::= { rlIpSourceGuardEntry 5 }
rlIpSourceGuardFailReason OBJECT-TYPE
SYNTAX RlIpSourceGuardFailReason
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Identifies the reason for in-activity of Ip Source Guard entry."
::= { rlIpSourceGuardEntry 6 }
--
-- IP Source Guard Permitted rules counter table
--
rlIpSourceGuardPermittedRuleCounterTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpSourceGuardPermittedRuleCounterEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The table includes, per vlan, the IP Source Guard permitted rules counters."
::= { rlIpSourceGuard 7 }
rlIpSourceGuardPermittedRuleCounterEntry OBJECT-TYPE
SYNTAX RlIpSourceGuardPermittedRuleCounterEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {rlIpSourceGuardPermittedRuleCounterVLANTag}
::= { rlIpSourceGuardPermittedRuleCounterTable 1 }
RlIpSourceGuardPermittedRuleCounterEntry ::= SEQUENCE {
rlIpSourceGuardPermittedRuleCounterVLANTag VlanId,
rlIpSourceGuardPermittedRuleCounterNumOfStaticRules Counter32,
rlIpSourceGuardPermittedRuleCounterNumOfDhcpRules Counter32
}
rlIpSourceGuardPermittedRuleCounterVLANTag OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Ip Source Guard permitted rules counters entry Vlan tag."
::= { rlIpSourceGuardPermittedRuleCounterEntry 1 }
rlIpSourceGuardPermittedRuleCounterNumOfStaticRules OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Number of static rules added by IP Source Guard for the permitted Hosts"
::= { rlIpSourceGuardPermittedRuleCounterEntry 2 }
rlIpSourceGuardPermittedRuleCounterNumOfDhcpRules OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Number of rules added by IP Source Guard for the permitted Hosts,
as a result of DHCP Snooping dynamic information."
::= { rlIpSourceGuardPermittedRuleCounterEntry 3 }
--
-- ARP Inspection
--
RlIpArpInspectListNameType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION "Ip arp inspection list name type."
SYNTAX DisplayString(SIZE(1..32))
rlIpArpInspectMibVersion OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"MIB's version, the current version is 1."
::= { rlIpArpInspect 1 }
rlIpArpInspectEnable OBJECT-TYPE
SYNTAX INTEGER{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION "Specifies a system ARP Inspection enable state."
::= { rlIpArpInspect 2 }
rlIpArpInspectLogInterval OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Specify the minimal interval between successive ARP SYSLOG messages.
0 - message is immediately generated.
0xFFFFFFFF - messages would not be generated. A legal range is 0-86400."
::= { rlIpArpInspect 3 }
rlIpArpInspectValidation OBJECT-TYPE
SYNTAX INTEGER{
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Defined a specific check on incoming ARP packets:
Source MAC: Compare the source MAC address in the Ethernet header against
the sender MAC address in the ARP body. This check is performed on both ARP requests and responses.
Destination MAC: Compare the destination MAC address in the Ethernet header against
the target MAC address in ARP body. This check is performed for ARP responses.
IP addresses: Compare the ARP body for invalid and unexpected IP addresses.
Addresses include 0.0.0.0, 255.255.255.255, and all IP multicast addresses."
::= { rlIpArpInspect 4 }
--
-- ARP Inspection List table
--
rlIpArpInspectListTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpArpInspectListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The table specifies all ARP Inspection List entries.
The entry contains a list name, list IP address, a list Mac address."
::= { rlIpArpInspect 5 }
rlIpArpInspectListEntry OBJECT-TYPE
SYNTAX RlIpArpInspectListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {rlIpArpInspectListName,
rlIpArpInspectListIPAddress}
::= { rlIpArpInspectListTable 1 }
RlIpArpInspectListEntry ::= SEQUENCE {
rlIpArpInspectListName RlIpArpInspectListNameType,
rlIpArpInspectListIPAddress IpAddress,
rlIpArpInspectListMACAddress MacAddress,
rlIpArpInspectListRowStatus RowStatus
}
rlIpArpInspectListName OBJECT-TYPE
SYNTAX RlIpArpInspectListNameType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The Name of the Access List."
::= { rlIpArpInspectListEntry 1}
rlIpArpInspectListIPAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"ARP Inspection List IP address."
::= { rlIpArpInspectListEntry 2 }
rlIpArpInspectListMACAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"ARP Inspection List mac address"
::= { rlIpArpInspectListEntry 3 }
rlIpArpInspectListRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"A status can be destroy, active or createAndGo"
::= { rlIpArpInspectListEntry 4 }
--
-- Arp Inspection Enable VLAN Table
--
rlIpArpInspectEnableVlanTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpArpInspectEnableVlanEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "An Ip ARP Inspection enabled VLAN table."
::= { rlIpArpInspect 6 }
rlIpArpInspectEnableVlanEntry OBJECT-TYPE
SYNTAX RlIpArpInspectEnableVlanEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "An Ip ARP Inspection enabled VLAN entry."
INDEX {rlIpArpInspectEnableVlanTag}
::= { rlIpArpInspectEnableVlanTable 1 }
RlIpArpInspectEnableVlanEntry ::= SEQUENCE {
rlIpArpInspectEnableVlanTag VlanId,
rlIpArpInspectAssignedListName RlIpArpInspectListNameType,
rlIpArpInspectEnableVlanRowStatus RowStatus,
rlIpArpInspectVlanNumOfArpForwarded Counter32,
rlIpArpInspectVlanNumOfArpDropped Counter32,
rlIpArpInspectVlanNumOfArpMismatched Counter32,
rlIpArpInspectVlanClearCountersAction TruthValue
}
rlIpArpInspectEnableVlanTag OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An Ip ARP Inspection entry vlan tag."
::= { rlIpArpInspectEnableVlanEntry 1 }
rlIpArpInspectAssignedListName OBJECT-TYPE
SYNTAX RlIpArpInspectListNameType
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"An Ip ARP Inspection assigned ACL name."
::= { rlIpArpInspectEnableVlanEntry 2 }
rlIpArpInspectEnableVlanRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Entry status. A valid status is CreateandGo and Delete."
::= { rlIpArpInspectEnableVlanEntry 3 }
rlIpArpInspectVlanNumOfArpForwarded OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of forwarded ARP packets, packets which were validated by ARP inspection "
::= { rlIpArpInspectEnableVlanEntry 4 }
rlIpArpInspectVlanNumOfArpDropped OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Number of dropped ARP packets, which were validated by ARP inspection
(mismatch , not-found and dropped for any reason)"
::= { rlIpArpInspectEnableVlanEntry 5 }
rlIpArpInspectVlanNumOfArpMismatched OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Number of dropped ARP packets, which were validated by ARP inspection
and inconsistency was found for IP and MAC (mismatch)"
::= { rlIpArpInspectEnableVlanEntry 6 }
rlIpArpInspectVlanClearCountersAction OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"If true, clear (set to zero) all Arp Inspection counters: rlIpArpInspectVlanNumOfArpForwarded ,
rlIpArpInspectVlanNumOfArpDropped and rlIpArpInspectVlanNumOfArpMismatched"
DEFVAL{ false }
::= { rlIpArpInspectEnableVlanEntry 7 }
--
-- ARP Inspection Trusted ports Table
--
rlIpArpInspectTrustedPortTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpArpInspectTrustedPortEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "ARP Inspection Trusted ports entry. The entry created when port is configured as trusted."
::= { rlIpArpInspect 7 }
rlIpArpInspectTrustedPortEntry OBJECT-TYPE
SYNTAX RlIpArpInspectTrustedPortEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {ifIndex}
::= { rlIpArpInspectTrustedPortTable 1 }
RlIpArpInspectTrustedPortEntry ::= SEQUENCE {
rlIpArpInspectTrustedPortRowStatus RowStatus
}
rlIpArpInspectTrustedPortRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Entry status. A valid status is CreateandGo or Delete."
::= { rlIpArpInspectTrustedPortEntry 2 }
rlIpArpInspectClearCountersAction OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"If true, clear (set to zero) on all vlans: all Arp Inspection counters: rlIpArpInspectVlanNumOfArpForwarded ,
rlIpArpInspectVlanNumOfArpDropped and rlIpArpInspectVlanNumOfArpMismatched"
DEFVAL{ false }
::= { rlIpArpInspect 8 }
--
-- Protocol Filtering
--
ProtocolFilteringMap ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"This TC describes the list of protocol to be filtered.
The bit 'all(0)' indicates all Cisco protocols in range 0100.0ccc.ccc0 - 0100.0ccc.cccf
The bit 'cdp(1)' indicates Cisco CDP protocol.
Identified by destination mac address: 0100.0ccc.cccc and protocol type:0x2000.
The bit 'vtp(2)' indicates Cisco VTP protocol.
Identified by destination mac address: 0100.0ccc.cccc and protocol type:0x2003.
The bit 'dtp(3)' indicates Cisco DTP protocol.
Identified by destination mac address: 0100.0ccc.cccc and protocol type:0x2004.
The bit 'udld (4)' indicates Cisco UDLD protocol.
Identified by destination mac address: 0100.0ccc.cccc and protocol type:0x0111.
The bit 'pagp(5)' indicates Cisco PAGP protocol.
Identified by destination mac address: 0100.0ccc.cccc and protocol type: 0x0104.
The bit 'sstp(6)' indicates Cisco SSTP protocol.
Identified by destination mac address: 0100.0ccc.cccd.
"
SYNTAX BITS {
all(0),
cdp(1),
vtp(2),
dtp(3),
udld(4),
pagp(5),
sstp(6)
}
rlProtocolFilteringTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlProtocolFilteringEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "Protocol filter configuration entry"
::= { rlProtocolFiltering 1 }
rlProtocolFilteringEntry OBJECT-TYPE
SYNTAX RlProtocolFilteringEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {ifIndex}
::= { rlProtocolFilteringTable 1 }
RlProtocolFilteringEntry::= SEQUENCE {
rlProtocolFilteringList ProtocolFilteringMap,
rlProtocolFilteringRowStatus RowStatus
}
rlProtocolFilteringList OBJECT-TYPE
SYNTAX ProtocolFilteringMap
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The list of protocol to be filtered."
::= { rlProtocolFilteringEntry 1 }
rlProtocolFilteringRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"A status can be destroy, active or createAndGo"
::= { rlProtocolFilteringEntry 2 }
--
-- DHCP Option82
--
rlIpDhcpOpt82ConfigEnable OBJECT-TYPE
SYNTAX INTEGER{
enable(1),
disable(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Specifies a DHCP option 82 configurable state."
::= { rlIpDhcpOpt82 1 }
rlIpDhcpOpt82SuboptionConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpDhcpOpt82SuboptionConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "Protocol filter configuration entry"
::= { rlIpDhcpOpt82 2 }
rlIpDhcpOpt82SuboptionConfigEntry OBJECT-TYPE
SYNTAX RlIpDhcpOpt82SuboptionConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX {rlIpDhcpOpt82SuboptionConfigIndex}
::= { rlIpDhcpOpt82SuboptionConfigTable 1 }
RlIpDhcpOpt82SuboptionConfigEntry::= SEQUENCE {
rlIpDhcpOpt82SuboptionConfigIndex INTEGER,
rlIpDhcpOpt82SuboptionConfigCircuitIdPayloadLength INTEGER,
rlIpDhcpOpt82SuboptionConfigCircuitIdFormat DisplayString,
rlIpDhcpOpt82SuboptionConfigRemoteIdPayloadLength INTEGER,
rlIpDhcpOpt82SuboptionConfigRemoteIdFormat DisplayString,
rlIpDhcpOpt82SuboptionConfigNumericTokenFormat INTEGER,
rlIpDhcpOpt82SuboptionConfigCircuitIdAuxFailFlag TruthValue
}
rlIpDhcpOpt82SuboptionConfigIndex OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "Entry index. Must be 1"
::= { rlIpDhcpOpt82SuboptionConfigEntry 1 }
rlIpDhcpOpt82SuboptionConfigCircuitIdPayloadLength OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Returns CircuitId payload length."
::= { rlIpDhcpOpt82SuboptionConfigEntry 2 }
rlIpDhcpOpt82SuboptionConfigCircuitIdFormat OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..160))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Defines the CircuitId format. Default is an empty string. Empty string means that CircuitId is added in a default format.
Non-empty string AND true value of rlIpDhcpOpt82SuboptionConfigCircuitIdSupported Scalar means that CircuitId is added in configured format"
::= { rlIpDhcpOpt82SuboptionConfigEntry 3 }
rlIpDhcpOpt82SuboptionConfigRemoteIdPayloadLength OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Returns RemoteId payload length."
::= { rlIpDhcpOpt82SuboptionConfigEntry 4 }
rlIpDhcpOpt82SuboptionConfigRemoteIdFormat OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..160))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Defines the RemoteId format. Default is an empty string. Empty string means that RemoteId is added in a default format.
Non-empty string AND true value of rlIpDhcpOpt82SuboptionConfigRemoteIdSupported Scalar means that RemoteId is added in configured format"
::= { rlIpDhcpOpt82SuboptionConfigEntry 5 }
rlIpDhcpOpt82SuboptionConfigNumericTokenFormat OBJECT-TYPE
SYNTAX INTEGER{
hex(1),
ascii(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Defines the format of numeric tokens included in the Circuit-id and Remote-ID sub-options string."
::= { rlIpDhcpOpt82SuboptionConfigEntry 6 }
rlIpDhcpOpt82SuboptionConfigCircuitIdAuxFailFlag OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Defines whatever to fail the CircuitId Suboption configuration"
::= { rlIpDhcpOpt82SuboptionConfigEntry 7 }
--------------------------------------------------------------
-- rlIpDhcpOpt82SuboptionContentTable (Read Only)
--------------------------------------------------------------
rlIpDhcpOpt82SuboptionContentTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpDhcpOpt82SuboptionContentEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The table specifies option 82 content."
::= { rlIpDhcpOpt82 3 }
rlIpDhcpOpt82SuboptionContentEntry OBJECT-TYPE
SYNTAX RlIpDhcpOpt82SuboptionContentEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX { rlIpDhcpOpt82SuboptionContentIfIndex,
rlIpDhcpOpt82SuboptionContentVlanTag }
::= { rlIpDhcpOpt82SuboptionContentTable 1 }
RlIpDhcpOpt82SuboptionContentEntry ::= SEQUENCE {
rlIpDhcpOpt82SuboptionContentIfIndex InterfaceIndex,
rlIpDhcpOpt82SuboptionContentVlanTag VlanId,
rlIpDhcpOpt82SuboptionContentCircuitIdHeader OCTET STRING,
rlIpDhcpOpt82SuboptionContentCircuitIdPayload160 OCTET STRING,
rlIpDhcpOpt82SuboptionContentCircuitIdPayload320 OCTET STRING,
rlIpDhcpOpt82SuboptionContentRemoteIdHeader OCTET STRING,
rlIpDhcpOpt82SuboptionContentRemoteIdPayload160 OCTET STRING,
rlIpDhcpOpt82SuboptionContentRemoteIdPayload320 OCTET STRING
}
rlIpDhcpOpt82SuboptionContentIfIndex OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The port's interface index."
::= { rlIpDhcpOpt82SuboptionContentEntry 1 }
rlIpDhcpOpt82SuboptionContentVlanTag OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The VLAN identifier."
::= { rlIpDhcpOpt82SuboptionContentEntry 2 }
rlIpDhcpOpt82SuboptionContentCircuitIdHeader OBJECT-TYPE
SYNTAX OCTET STRING(SIZE(4))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies option 82 CircuitId suboption header content per interface/port"
::= { rlIpDhcpOpt82SuboptionContentEntry 3 }
rlIpDhcpOpt82SuboptionContentCircuitIdPayload160 OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies option 82 CircuitId suboption payload first 160 bytes content per interface/port"
::= { rlIpDhcpOpt82SuboptionContentEntry 4 }
rlIpDhcpOpt82SuboptionContentCircuitIdPayload320 OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies option 82 CircuitId suboption payload second 160 bytes content per interface/port"
::= { rlIpDhcpOpt82SuboptionContentEntry 5 }
rlIpDhcpOpt82SuboptionContentRemoteIdHeader OBJECT-TYPE
SYNTAX OCTET STRING(SIZE(4))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies option 82 RemoteId suboption header content per interface/port"
::= { rlIpDhcpOpt82SuboptionContentEntry 6 }
rlIpDhcpOpt82SuboptionContentRemoteIdPayload160 OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies option 82 RemoteId suboption payload first 160 bytes content per interface/port"
::= { rlIpDhcpOpt82SuboptionContentEntry 7 }
rlIpDhcpOpt82SuboptionContentRemoteIdPayload320 OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies option 82 RemoteId suboption payload second 160 bytes content per interface/port"
::= { rlIpDhcpOpt82SuboptionContentEntry 8 }
--------------------------------------------------------------
-- rlIpDhcpOpt82SuboptionTokenTable (Read Only)
--------------------------------------------------------------
rlIpDhcpOpt82SuboptionTokenTable OBJECT-TYPE
SYNTAX SEQUENCE OF RlIpDhcpOpt82SuboptionTokenEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The table specifies option 82 content."
::= { rlIpDhcpOpt82 4 }
rlIpDhcpOpt82SuboptionTokenEntry OBJECT-TYPE
SYNTAX RlIpDhcpOpt82SuboptionTokenEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The row definition for this table."
INDEX { rlIpDhcpOpt82SuboptionTokenName}
::= { rlIpDhcpOpt82SuboptionTokenTable 1 }
RlIpDhcpOpt82SuboptionTokenEntry ::= SEQUENCE {
rlIpDhcpOpt82SuboptionTokenName DisplayString,
rlIpDhcpOpt82SuboptionTokenValue DisplayString,
rlIpDhcpOpt82SuboptionTokenFormat INTEGER,
rlIpDhcpOpt82SuboptionTokenReservedLength INTEGER,
rlIpDhcpOpt82SuboptionTokenHexaLength INTEGER
}
rlIpDhcpOpt82SuboptionTokenName OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Token have meaningful and pre-determined names based on the information they represent. A $ symbol is placed before and after the Token name ($token-name$)."
::= { rlIpDhcpOpt82SuboptionTokenEntry 1 }
rlIpDhcpOpt82SuboptionTokenValue OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Token description."
::= { rlIpDhcpOpt82SuboptionTokenEntry 2 }
rlIpDhcpOpt82SuboptionTokenFormat OBJECT-TYPE
SYNTAX INTEGER{
hex(1),
ascii(2),
config(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Token format."
::= { rlIpDhcpOpt82SuboptionTokenEntry 3 }
rlIpDhcpOpt82SuboptionTokenReservedLength OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Token reserved length."
::= { rlIpDhcpOpt82SuboptionTokenEntry 4 }
rlIpDhcpOpt82SuboptionTokenHexaLength OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"If format is config, the hexa length is returned. Otherwise 0."
::= { rlIpDhcpOpt82SuboptionTokenEntry 5 }
END
Reference in a new issue View git blame Copy permalink