1 SNMP-COMMUNITY-MIB DEFINITIONS ::= BEGIN
15 FROM SNMP-FRAMEWORK-MIB
23 snmpCommunityMIB MODULE-IDENTITY
24 LAST-UPDATED "200003060000Z" -- 6 Mar 2000, midnight
25 ORGANIZATION "SNMPv3 Working Group"
26 CONTACT-INFO "WG-email: snmpv3@lists.tislabs.com
27 Subscribe: majordomo@lists.tislabs.com
28 In msg body: subscribe snmpv3
31 TIS Labs at Network Associates
32 Postal: 3060 Washington Rd
35 Email: mundy@tislabs.com
36 Phone: +1-301-854-6889
40 Postal: 1200 Bridge Parkway
41 Redwood City, CA 94065
43 E-mail: rfrye@cosinecom.com
44 Phone: +1 703 725 1130
46 Co-editor: David B. Levi
48 Postal: 3505 Kesterwood Drive
50 E-mail: dlevi@nortelnetworks.com
51 Phone: +1 423 686 0432
53 Co-editor: Shawn A. Routhier
54 Integrated Systems Inc.
55 Postal: 333 North Ave 4th Floor
57 E-mail: sar@epilogue.com
58 Phone: +1 781 245 0804
60 Co-editor: Bert Wijnen
65 Email: bwijnen@lucent.com
66 Phone: +31-348-407-775
69 "This MIB module defines objects to help support coexistence
70 between SNMPv1, SNMPv2c, and SNMPv3."
71 REVISION "200003060000Z" -- 6 Mar 2000
72 DESCRIPTION "This version published as RFC 2576."
73 REVISION "199905130000Z" -- 13 May 1999
74 DESCRIPTION "The Initial Revision"
75 ::= { snmpModules 18 }
77 -- Administrative assignments ****************************************
79 snmpCommunityMIBObjects OBJECT IDENTIFIER ::= { snmpCommunityMIB 1 }
80 snmpCommunityMIBConformance OBJECT IDENTIFIER ::= { snmpCommunityMIB 2 }
83 -- The snmpCommunityTable contains a database of community strings.
84 -- This table provides mappings between community strings, and the
86 -- parameters required for View-based Access Control.
89 snmpCommunityTable OBJECT-TYPE
90 SYNTAX SEQUENCE OF SnmpCommunityEntry
91 MAX-ACCESS not-accessible
94 "The table of community strings configured in the SNMP
95 engine's Local Configuration Datastore (LCD)."
96 ::= { snmpCommunityMIBObjects 1 }
98 snmpCommunityEntry OBJECT-TYPE
99 SYNTAX SnmpCommunityEntry
100 MAX-ACCESS not-accessible
103 "Information about a particular community string."
104 INDEX { IMPLIED snmpCommunityIndex }
105 ::= { snmpCommunityTable 1 }
107 SnmpCommunityEntry ::= SEQUENCE {
108 snmpCommunityIndex SnmpAdminString,
109 snmpCommunityName OCTET STRING,
110 snmpCommunitySecurityName SnmpAdminString,
111 snmpCommunityContextEngineID SnmpEngineID,
112 snmpCommunityContextName SnmpAdminString,
113 snmpCommunityTransportTag SnmpTagValue,
114 snmpCommunityStorageType StorageType,
115 snmpCommunityStatus RowStatus
118 snmpCommunityIndex OBJECT-TYPE
119 SYNTAX SnmpAdminString (SIZE(1..32))
120 MAX-ACCESS not-accessible
123 "The unique index value of a row in this table."
124 ::= { snmpCommunityEntry 1 }
126 snmpCommunityName OBJECT-TYPE
128 MAX-ACCESS read-create
131 "The community string for which a row in this table
132 represents a configuration."
133 ::= { snmpCommunityEntry 2 }
135 snmpCommunitySecurityName OBJECT-TYPE
136 SYNTAX SnmpAdminString (SIZE(1..32))
137 MAX-ACCESS read-create
140 "A human readable string representing the corresponding
141 value of snmpCommunityName in a Security Model
143 ::= { snmpCommunityEntry 3 }
145 snmpCommunityContextEngineID OBJECT-TYPE
147 MAX-ACCESS read-create
150 "The contextEngineID indicating the location of the
151 context in which management information is accessed
152 when using the community string specified by the
153 corresponding instance of snmpCommunityName.
155 The default value is the snmpEngineID of the entity in
156 which this object is instantiated."
157 ::= { snmpCommunityEntry 4 }
159 snmpCommunityContextName OBJECT-TYPE
160 SYNTAX SnmpAdminString (SIZE(0..32))
161 MAX-ACCESS read-create
164 "The context in which management information is accessed
165 when using the community string specified by the corresponding
166 instance of snmpCommunityName."
167 DEFVAL { ''H } -- the empty string
168 ::= { snmpCommunityEntry 5 }
170 snmpCommunityTransportTag OBJECT-TYPE
172 MAX-ACCESS read-create
175 "This object specifies a set of transport endpoints
176 from which a command responder application will accept
177 management requests. If a management request containing
178 this community is received on a transport endpoint other
179 than the transport endpoints identified by this object,
180 the request is deemed unauthentic.
182 The transports identified by this object are specified
184 in the snmpTargetAddrTable. Entries in that table
185 whose snmpTargetAddrTagList contains this tag value
188 If the value of this object has zero-length, transport
189 endpoints are not checked when authenticating messages
190 containing this community string."
191 DEFVAL { ''H } -- the empty string
192 ::= { snmpCommunityEntry 6 }
194 snmpCommunityStorageType OBJECT-TYPE
196 MAX-ACCESS read-create
199 "The storage type for this conceptual row in the
200 snmpCommunityTable. Conceptual rows having the value
201 'permanent' need not allow write-access to any
202 columnar object in the row."
203 ::= { snmpCommunityEntry 7 }
205 snmpCommunityStatus OBJECT-TYPE
207 MAX-ACCESS read-create
210 "The status of this conceptual row in the snmpCommunityTable.
212 An entry in this table is not qualified for activation
213 until instances of all corresponding columns have been
214 initialized, either through default values, or through
215 Set operations. The snmpCommunityName and
216 snmpCommunitySecurityName objects must be explicitly set.
218 There is no restriction on setting columns in this table
219 when the value of snmpCommunityStatus is active(1)."
220 ::= { snmpCommunityEntry 8 }
223 -- The snmpTargetAddrExtTable
226 snmpTargetAddrExtTable OBJECT-TYPE
227 SYNTAX SEQUENCE OF SnmpTargetAddrExtEntry
228 MAX-ACCESS not-accessible
231 "The table of mask and mms values associated with the
235 The snmpTargetAddrExtTable augments the
236 snmpTargetAddrTable with a transport address mask value
237 and a maximum message size value. The transport address
238 mask allows entries in the snmpTargetAddrTable to define
239 a set of addresses instead of just a single address.
240 The maximum message size value allows the maximum
241 message size of another SNMP entity to be configured for
242 use in SNMPv1 (and SNMPv2c) transactions, where the
243 message format does not specify a maximum message size."
244 ::= { snmpCommunityMIBObjects 2 }
246 snmpTargetAddrExtEntry OBJECT-TYPE
247 SYNTAX SnmpTargetAddrExtEntry
248 MAX-ACCESS not-accessible
251 "Information about a particular mask and mms value."
252 AUGMENTS { snmpTargetAddrEntry }
253 ::= { snmpTargetAddrExtTable 1 }
255 SnmpTargetAddrExtEntry ::= SEQUENCE {
256 snmpTargetAddrTMask OCTET STRING,
257 snmpTargetAddrMMS Integer32
260 snmpTargetAddrTMask OBJECT-TYPE
261 SYNTAX OCTET STRING (SIZE (0..255))
262 MAX-ACCESS read-create
265 "The mask value associated with an entry in the
266 snmpTargetAddrTable. The value of this object must
267 have the same length as the corresponding instance of
268 snmpTargetAddrTAddress, or must have length 0. An
269 attempt to set it to any other value will result in
270 an inconsistentValue error.
272 The value of this object allows an entry in the
273 snmpTargetAddrTable to specify multiple addresses.
274 The mask value is used to select which bits of
275 a transport address must match bits of the corresponding
276 instance of snmpTargetAddrTAddress, in order for the
277 transport address to match a particular entry in the
278 snmpTargetAddrTable. Bits which are 1 in the mask
279 value indicate bits in the transport address which
280 must match bits in the snmpTargetAddrTAddress value.
282 Bits which are 0 in the mask indicate bits in the
283 transport address which need not match. If the
284 length of the mask is 0, the mask should be treated
285 as if all its bits were 1 and its length were equal
286 to the length of the corresponding value of
289 This object may not be modified while the value of the
290 corresponding instance of snmpTargetAddrRowStatus is
291 active(1). An attempt to set this object in this case
292 will result in an inconsistentValue error."
294 ::= { snmpTargetAddrExtEntry 1 }
296 snmpTargetAddrMMS OBJECT-TYPE
297 SYNTAX Integer32 (0|484..2147483647)
298 MAX-ACCESS read-create
301 "The maximum message size value associated with an entry
302 in the snmpTargetAddrTable."
304 ::= { snmpTargetAddrExtEntry 2 }
307 -- The snmpTrapAddress and snmpTrapCommunity objects are included
308 -- in notifications that are forwarded by a proxy, which were
309 -- originally received as SNMPv1 Trap messages.
312 snmpTrapAddress OBJECT-TYPE
314 MAX-ACCESS accessible-for-notify
317 "The value of the agent-addr field of a Trap PDU which
318 is forwarded by a proxy forwarder application using
319 an SNMP version other than SNMPv1. The value of this
320 object SHOULD contain the value of the agent-addr field
321 from the original Trap PDU as generated by an SNMPv1
323 ::= { snmpCommunityMIBObjects 3 }
325 snmpTrapCommunity OBJECT-TYPE
327 MAX-ACCESS accessible-for-notify
330 "The value of the community string field of an SNMPv1
331 message containing a Trap PDU which is forwarded by a
332 a proxy forwarder application using an SNMP version
333 other than SNMPv1. The value of this object SHOULD
334 contain the value of the community string field from
335 the original SNMPv1 message containing a Trap PDU as
336 generated by an SNMPv1 agent."
337 ::= { snmpCommunityMIBObjects 4 }
339 -- Conformance Information *******************************************
341 snmpCommunityMIBCompliances OBJECT IDENTIFIER
342 ::= { snmpCommunityMIBConformance 1 }
343 snmpCommunityMIBGroups OBJECT IDENTIFIER
344 ::= { snmpCommunityMIBConformance 2 }
346 -- Compliance statements
348 snmpCommunityMIBCompliance MODULE-COMPLIANCE
351 "The compliance statement for SNMP engines which
352 implement the SNMP-COMMUNITY-MIB."
354 MODULE -- this module
355 MANDATORY-GROUPS { snmpCommunityGroup }
357 OBJECT snmpCommunityName
359 DESCRIPTION "Write access is not required."
361 OBJECT snmpCommunitySecurityName
363 DESCRIPTION "Write access is not required."
365 OBJECT snmpCommunityContextEngineID
367 DESCRIPTION "Write access is not required."
369 OBJECT snmpCommunityContextName
371 DESCRIPTION "Write access is not required."
373 OBJECT snmpCommunityTransportTag
375 DESCRIPTION "Write access is not required."
377 OBJECT snmpCommunityStorageType
379 DESCRIPTION "Write access is not required."
381 OBJECT snmpCommunityStatus
383 DESCRIPTION "Write access is not required."
384 ::= { snmpCommunityMIBCompliances 1 }
386 snmpProxyTrapForwardCompliance MODULE-COMPLIANCE
389 "The compliance statement for SNMP engines which
390 contain a proxy forwarding application which is
391 capable of forwarding SNMPv1 traps using SNMPv2c
393 MODULE -- this module
394 MANDATORY-GROUPS { snmpProxyTrapForwardGroup }
395 ::= { snmpCommunityMIBCompliances 2 }
397 snmpCommunityGroup OBJECT-GROUP
400 snmpCommunitySecurityName,
401 snmpCommunityContextEngineID,
402 snmpCommunityContextName,
403 snmpCommunityTransportTag,
404 snmpCommunityStorageType,
411 "A collection of objects providing for configuration
412 of community strings for SNMPv1 (and SNMPv2c) usage."
413 ::= { snmpCommunityMIBGroups 1 }
415 snmpProxyTrapForwardGroup OBJECT-GROUP
422 "Objects which are used by proxy forwarding applications
423 when translating traps between SNMP versions. These are
424 used to preserve SNMPv1-specific information when
426 translating to SNMPv2c or SNMPv3."
427 ::= { snmpCommunityMIBGroups 3 }