idnits 2.17.1 draft-ietf-isis-wg-mib-25.txt: Checking boilerplate required by RFC 5378 and the IETF Trust (see https://trustee.ietf.org/license-info): ---------------------------------------------------------------------------- ** It looks like you're using RFC 3978 boilerplate. You should update this to the boilerplate described in the IETF Trust License Policy document (see https://trustee.ietf.org/license-info), which is required now. -- Found old boilerplate from RFC 3978, Section 5.1 on line 14. -- Found old boilerplate from RFC 3978, Section 5.5 on line 4892. -- Found old boilerplate from RFC 3979, Section 5, paragraph 1 on line 4903. -- Found old boilerplate from RFC 3979, Section 5, paragraph 2 on line 4910. -- Found old boilerplate from RFC 3979, Section 5, paragraph 3 on line 4916. ** Found boilerplate matching RFC 3978, Section 5.4, paragraph 1 (on line 34), which is fine, but *also* found old RFC 2026, Section 10.4C, paragraph 1 text on line 34. ** This document has an original RFC 3978 Section 5.4 Copyright Line, instead of the newer IETF Trust Copyright according to RFC 4748. ** The document seems to lack an RFC 3978 Section 5.4 Reference to BCP 78. ** This document has an original RFC 3978 Section 5.5 Disclaimer, instead of the newer disclaimer which includes the IETF Trust according to RFC 4748. Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt: ---------------------------------------------------------------------------- == No 'Intended status' indicated for this document; assuming Proposed Standard == The page length should not exceed 58 lines per page, but there was 103 longer pages, the longest (page 2) being 59 lines Checking nits according to https://www.ietf.org/id-info/checklist : ---------------------------------------------------------------------------- No issues found here. Miscellaneous warnings: ---------------------------------------------------------------------------- == The copyright year in the RFC 3978 Section 5.4 Copyright Line does not match the current year == Line 4625 has weird spacing: '...dentify a set...' == The document seems to lack the recommended RFC 2119 boilerplate, even if it appears to use RFC 2119 keywords -- however, there's a paragraph with a matching beginning. Boilerplate error? (The document does seem to have the reference to RFC 2119 which the ID-Checklist requires). -- The document seems to lack a disclaimer for pre-RFC5378 work, but may have content which was first submitted before 10 November 2008. If you have contacted all the original authors and they are all willing to grant the BCP78 rights to the IETF Trust, then this is fine, and you can ignore this comment. If not, you may need to add the pre-RFC5378 disclaimer. (See the Legal Provisions document at https://trustee.ietf.org/license-info for more information.) -- The document date (Dec 23, 2005) is 6689 days in the past. Is this intentional? Checking references for intended status: Proposed Standard ---------------------------------------------------------------------------- (See RFCs 3967 and 4897 for information about using normative references to lower-maturity documents in RFCs) -- Possible downref: Non-RFC (?) normative reference: ref. 'ISO10589' -- Possible downref: Non-RFC (?) normative reference: ref. 'ISO10733' -- Obsolete informational reference (is this intentional?): RFC 3373 (Obsoleted by RFC 5303) Summary: 5 errors (**), 0 flaws (~~), 5 warnings (==), 10 comments (--). Run idnits with the --verbose option for more detailed information about the items above. -------------------------------------------------------------------------------- 2 Internet Engineering Task Force Jeff Parker, Editor 3 INTERNET DRAFT Axiowave Networks 4 Expiration date: June, 2006 Dec 23, 2005 6 Management Information Base for IS-IS 7 9 Status of this Memo 11 By submitting this Internet-Draft, each author represents that any 12 applicable patent or other IPR claims of which he or she is aware 13 have been or will be disclosed, and any of which he or she becomes 14 aware will be disclosed, in accordance with Section 6 of BCP 79. 16 Internet-Drafts are working documents of the Internet Engineering 17 Task Force (IETF), its areas, and its working groups. Note that 18 other groups may also distribute working documents as Internet- 19 Drafts. 21 Internet-Drafts are draft documents valid for a maximum of six months 22 and may be updated, replaced, or obsoleted by other documents at any 23 time. It is inappropriate to use Internet-Drafts as reference 24 material or to cite them other than as "work in progress". 26 The list of current Internet-Drafts can be accessed at 27 http://www.ietf.org/ietf/1id-abstracts.txt 29 The list of Internet-Draft Shadow Directories can be accessed at 30 http://www.ietf.org/shadow.html. 32 Copyright Notice 34 Copyright (C) The Internet Society (2005). All Rights Reserved. 36 Abstract 38 This document describes a management information base for the IS-IS 39 Routing protocol when it is used to construct routing tables for IP 40 networks. 42 This memo defines a portion of the Management Information Base (MIB) 43 for use with network management protocols in the Internet community. 45 This memo is based on an IETF draft by Chris Gunner. This version 46 has been modified to include MIB-II syntax, to exclude portions of 47 the protocol that are not relevant to IP, such as the ES-IS protocol, 48 and to add management support for current practice. 50 Table of Contents 52 1. The Internet-Standard Management Framework . . . . . 2 53 2. Overview . . . . . . . . . . . . . . . . . . . . . . 2 54 3. Conventions . . . . . . . . . . . . . . . . . . . . 2 55 4. Definition of IS-IS MIB. . . . . . . . . . . . . . . 6 56 5. IANA Considerations. . . . . . . . . . . . . . . . . 96 57 6. Acknowledgments. . . . . . . . . . . . . . . . . . . 97 58 7. Security Considerations. . . . . . . . . . . . . . . 97 59 8. Normative References . . . . . . . . . . . . . . . . 101 60 9. Informative References . . . . . . . . . . . . . . . 103 61 10. Authors' Address . . . . . . . . . . . . . . . . . . 103 62 11. Full Copyright Statement . . . . . . . . . . . . . . 103 63 12. Intellectual Property. . . . . . . . . . . . . . . . 104 65 1. The Internet-Standard Management Framework 67 For a detailed overview of the documents that describe the current 68 Internet-Standard Management Framework, please refer to section 7 of 69 RFC 3410 [RFC3410]. 71 Managed objects are accessed via a virtual information store, termed 72 the Management Information Base or MIB. MIB objects are generally 73 accessed through the Simple Network Management Protocol (SNMP). 74 Objects in the MIB are defined using the mechanisms defined in the 75 Structure of Management Information (SMI). This memo specifies a MIB 76 module that is compliant to the SMIv2, which is described in STD 58, 77 RFC 2578 [RFC2578], STD 58, RFC 2579 [RFC2579] and STD 58, RFC 2580 78 [RFC2580] 80 2. Overview 82 This document describes a management information base for the IS-IS 83 Routing protocol as described in ISO 10589 [ISO10589], when it is 84 used to construct routing tables for IP networks, as described in RFC 85 1195 [RFC1195]. The objects are mainly derived from the GDMO 86 definitions in ISO 10589 and from the GDMO definitions in ISO 10733 87 [ISO10733]. There are also additional objects to manage the IP- 88 specific functionality of Integrated IS-IS operation. 90 This MIB imports definitions from SNMPv2-TC [RFC2579], SNMPv2-SMI 91 [RFC2578] SNMPv2-CONF [RFC2580], SNMP-FRAMEWORK-MIB [RFC3411], 92 DIFFSERV-MIB [RFC3289], IF-MIB [RFC2863], and INET-ADDRESS-MIB 93 [RFC4001]. See the imports section of the MIB for the specific items 94 imported. 96 This MIB defines some objects to manage Mesh Groups, described in 97 [RFC2973] and a three-way handshake for point-to-point adjacencies 98 described in [RFC3373]. 100 The IS-IS MIB defines the following objects: 102 System-wide Attributes 104 - isisSystem 106 This table contains information specific to a single instance of 107 the IS-IS protocol running on a router. 109 - isisManAreaAddr 111 This table includes area addresses manually configured which are 112 used to control the associations formed between Level 1 113 Intermediate Systems. 115 - isisAreaAddr 117 This table includes area addresses reported in relevant L1 LSPs. 119 - isisSummAddr 121 This table holds summary addresses configured for each Level 2 122 instance of the IS-IS protocol running on a router. 124 - isisRedistributeAddr 126 This table provides criteria to decide if a route should be 127 leaked from L2 to L1 when Domain Wide Prefix leaking is enabled. 129 - isisRouter 131 This table holds the hostname and router ID for Intermediate 132 Systems in the network. 134 - isisSysLevel 136 This table contains information specific to a domain (Level 2) or 137 an area (Level 1) of the IS-IS protocol. 139 - isisNextCircIndex 141 This scalar is used to provide a unique circuit index. 143 Circuit-specific Attributes 145 - isisCirc 147 This table contains information specific to a point-to-point or a 148 broadcast interface in the system. 150 - isisCircLevel 152 This table contains information specific to a one Level 1 or 153 Level 2 of an interface. 155 Counters 157 - isisSystemCounter 159 Counters in the System table, such as times we have wraped a 160 sequence counter on one of our Link State PDUs. 162 - isisCircuitCounter 164 Counters of events particular to a circuit, such as PDUs with an 165 illegal value of the System ID field length. 167 - isisPacketCounter 168 Counts of ISIS Protocol PDUs broken down into packet type. 170 Attributes associated with an Adjacency 172 - isisISAdj 174 This table contains information about adjacencies to routers 175 maintained by the protocol. Entries in this table cannot be 176 created by management action: they are established through the 177 Hello protocol. 179 - isisISAdjAreaAddr 181 This table contains the set of Area Addresses of neighboring 182 Intermediate Systems as reported in IIH PDUs. 184 - isisISAdjIPAddr 186 This table contains the set of IP Addresses of neighboring 187 Intermediate Systems as reported in received IIH PDUs. 189 - isisISAdjProtSupp 191 This table contains the set of protocols supported by neighboring 192 Intermediate Systems as reported in received IIH PDUs. 194 Attributes associated with addresses 196 - isisRA 198 The Reachable Address Table. 200 This table contains information about an address prefix manually 201 configured on the system or learned through another protocol. 203 - isisIPRA 205 The IP Reachable Address Table. 207 This table contains information about IP reachable address 208 manually configured on this system or learned from another 209 protocol. 211 Attributes associated with Link State PDU Table 213 - isisLSPSummaryTable 215 The Link State PDU Summary Table 217 This table contains information contained in the headers of Link 218 State PDUs stored by the system. 220 - isisLSPTLVTable 222 The Link State PDU TLV Table 224 This table holds the sequence of TLVs that make up an LSP 225 fragment. 227 Attributes associated with a Notification 229 - isisNotification 231 This table defines attributes that will be included when 232 reporting IS-IS notifications. 234 3. Conventions 236 The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 237 "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and 238 "OPTIONAL", when they appear in this document, are to be interpreted 239 as described in BCP 14, RFC 2119 [RFC2119]. 241 4. Definition of IS-IS MIB 243 ISIS-MIB DEFINITIONS ::= BEGIN 244 IMPORTS 245 TEXTUAL-CONVENTION, RowStatus, TruthValue, TimeStamp 246 FROM SNMPv2-TC -- RFC2579 247 MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE, 248 Unsigned32, Counter32, mib-2 249 FROM SNMPv2-SMI -- RFC2578 250 MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP 251 FROM SNMPv2-CONF -- RFC2580 252 SnmpAdminString 253 FROM SNMP-FRAMEWORK-MIB -- RFC2571 254 IndexInteger, IndexIntegerNextFree 255 FROM DIFFSERV-MIB -- RFC3289 256 InterfaceIndex 257 FROM IF-MIB -- RFC2863 258 InetAddressType, InetAddress, InetAddressPrefixLength 259 FROM INET-ADDRESS-MIB; -- RFC3291 261 isisMIB MODULE-IDENTITY 262 LAST-UPDATED "200512231200Z" -- December 23, 2005, noon 263 ORGANIZATION "IETF IS-IS for IP Internets Working Group" 264 CONTACT-INFO 265 "IS-IS for IP Internets working Group 266 http://www.ietf.org/html.charters/isis-charter.html 267 isis-wg@ietf.org 269 Jeff Parker 270 Department of Computer Science 271 Middlebury College, 272 Middlebury, Vermont 05753 273 jeffp at middlbury dot edu" 275 DESCRIPTION 276 "This document describes a management information base for 277 the IS-IS Routing protocol, as described in ISO 10589, 278 when it is used to construct routing tables for IP 279 networks, as described in RFC 1195. 281 This document is based on a 1994 IETF draft by Chris 282 Gunner. This version has been modified to include 283 current syntax, to exclude portions of the protocol that 284 are not relevant to IP, and to add management support for 285 current practice. 287 Copyright (C) The Internet Society (2005). This version 288 of this MIB module is part of RFC 0DDD; see the RFC 289 itself for full legal notices." 291 REVISION "200512231200Z" -- December 23, 2005, noon 293 DESCRIPTION 294 "Initial version, published as RFC 0DDD." 296 ::= { mib-2 XXX } 298 -- RFC Editor - please Replace with proper IANA Value 300 -- Top-level structure of the MIB 302 isisNotifications OBJECT IDENTIFIER ::= { isisMIB 0 } 303 isisObjects OBJECT IDENTIFIER ::= { isisMIB 1 } 304 isisConformance OBJECT IDENTIFIER ::= { isisMIB 2 } 306 -- OBJECT IDENTIFIER definitions 308 -- System wide attributes. 309 isisSystem OBJECT IDENTIFIER ::= { isisObjects 1 } 311 -- Attributes associated with the domain or with the area. 312 isisSysLevel OBJECT IDENTIFIER ::= { isisObjects 2 } 314 -- Attributes associated with one Circuit 315 isisCirc OBJECT IDENTIFIER ::= { isisObjects 3 } 317 -- Attributes associated with area or domain relevant within a Circuit. 318 isisCircLevelValues OBJECT IDENTIFIER ::= { isisObjects 4 } 320 -- System and circuit counters. 321 isisCounters OBJECT IDENTIFIER ::= { isisObjects 5 } 323 -- Attributes associated with an adjacent Protocol Peer. 324 isisISAdj OBJECT IDENTIFIER ::= { isisObjects 6 } 326 -- Attributes associated with a configured address. 327 isisReachAddr OBJECT IDENTIFIER ::= { isisObjects 7 } 329 -- Attributes associated with IP routes learned by 330 -- configuration or through another protocol. 331 isisIPReachAddr OBJECT IDENTIFIER ::= { isisObjects 8 } 333 -- The collection of Link State PDUs known to the Intermediate System 334 isisLSPDataBase OBJECT IDENTIFIER ::= { isisObjects 9 } 336 -- Objects included in Notifications. 337 isisNotification OBJECT IDENTIFIER ::= { isisObjects 10 } 339 -- Type definitions 341 IsisOSINSAddress ::= TEXTUAL-CONVENTION 342 STATUS current 343 DESCRIPTION 344 "OSI Network Service Address, e.g. NSAP, SNPA, or Network 345 Entity Title" 346 SYNTAX OCTET STRING (SIZE(0..20)) 348 IsisSystemID ::= TEXTUAL-CONVENTION 349 STATUS current 350 DESCRIPTION 351 "The ID for an Intermediate System. This should 352 be unique within a network, and is included 353 in all PDUs originated by an Intermediate System. 354 The protocol does not place any meanings upon 355 the bits, other than using ordering to break 356 ties in electing a Designated IS on a LAN." 357 REFERENCE "{ISIS.aoi systemId (119)}" 358 SYNTAX OCTET STRING (SIZE(6)) 360 IsisLinkStatePDUID ::= TEXTUAL-CONVENTION 361 STATUS current 362 DESCRIPTION 363 "The 8 byte Link State PDU (LSP) ID, 364 consisting of the 6 byte SystemID of the 365 originating IS, a one byte PseudoNode ID 366 which is 0 unless the LSP represents the 367 topology of a LAN, and one byte LSP 368 fragment number that are issued in sequence, 369 starting with 0. Non zero PseudoNode IDs 370 need to be unique to the IS, but need not 371 match the IfIndex." 372 REFERENCE "{See section 9.8 of ISO 10589}" 373 SYNTAX OCTET STRING (SIZE(8)) 375 IsisAdminState ::= TEXTUAL-CONVENTION 376 STATUS current 377 DESCRIPTION 378 "Type used in enabling and disabling a row." 379 SYNTAX INTEGER 380 { 381 on(1), 382 off(2) 383 } 385 IsisLSPBuffSize ::= TEXTUAL-CONVENTION 386 DISPLAY-HINT "d" 387 STATUS current 388 DESCRIPTION 389 "Integer sub range for maximum LSP size." 390 SYNTAX Unsigned32 (512..16000) 392 IsisLevelState ::= TEXTUAL-CONVENTION 393 STATUS current 394 DESCRIPTION 395 "States of the IS-IS protocol." 396 SYNTAX INTEGER 397 { 398 off (1), 399 on (2), 400 waiting (3), 401 overloaded(4) 402 } 404 IsisSupportedProtocol ::= TEXTUAL-CONVENTION 405 STATUS current 406 DESCRIPTION 407 "Types of network protocol supported by Integrated IS-IS. 408 The values for ISO8473 and IP are those registered for 409 these protocols in ISO TR9577." 410 REFERENCE "{See section 5.3.1 of RFC 1195}" 411 SYNTAX INTEGER 412 { 413 iso8473(129), 414 ipV6(142), 415 ip(204) 416 } 418 IsisDefaultMetric ::= TEXTUAL-CONVENTION 419 DISPLAY-HINT "d" 420 STATUS current 421 DESCRIPTION 422 "Integer sub-range for default metric for single hop. 423 ISO 10589 provides for 4 types of metric. Only the 424 'default' metric is used in practice." 425 REFERENCE "{See section 7.2.2 of ISO 10589}" 426 SYNTAX Unsigned32 (0..63) 428 IsisWideMetric ::= TEXTUAL-CONVENTION 429 DISPLAY-HINT "d" 430 STATUS current 431 DESCRIPTION 432 "Wide Metric for IS Neighbors. ISO 10589 provides a 433 6 bit metric. Traffic Engineering extensions provide 434 24 bit metrics." 435 REFERENCE "{See section 3 of RFC 3784}" 436 SYNTAX Unsigned32 (0..16777215) 438 IsisFullMetric ::= TEXTUAL-CONVENTION 439 DISPLAY-HINT "d" 440 STATUS current 441 DESCRIPTION 442 "Full Metric for IP Routes. Traffic Engineering extensions 443 provide 32 bit metrics." 444 REFERENCE "{See section 4 of RFC 3784}" 445 SYNTAX Unsigned32 447 IsisMetricType ::= TEXTUAL-CONVENTION 448 STATUS current 449 DESCRIPTION 450 "Is this an Internal or External Metric?" 451 REFERENCE "{See section 7.2.2 of ISO 10589}" 452 SYNTAX INTEGER 453 { 454 internal(1), 455 external(2) 456 } 458 IsisMetricStyle ::= TEXTUAL-CONVENTION 459 STATUS current 460 DESCRIPTION 461 "Do we use RFC 1195 style metrics or wide metrics?" 462 REFERENCE "{See section 5 of RFC 3787}" 463 SYNTAX INTEGER 464 { 465 narrow(1), 466 wide(2), 467 both(3) 468 } 470 IsisISLevel ::= TEXTUAL-CONVENTION 471 STATUS current 472 DESCRIPTION 473 "Identifies a level." 474 REFERENCE "{See definitions 3.6.1 and 3.6.11 of ISO 10589}" 475 SYNTAX INTEGER 476 { 477 area(1), -- L1 478 domain(2) -- L2 479 } 481 IsisLevel ::= TEXTUAL-CONVENTION 482 STATUS current 483 DESCRIPTION 484 "Identifies one or more levels." 485 REFERENCE "{See definitions 3.6.1 and 3.6.11 of ISO 10589}" 486 SYNTAX INTEGER 487 { 488 level1(1), 489 level2(2), 490 level1and2(3) 491 } 493 IsisPDUHeader ::= TEXTUAL-CONVENTION 494 STATUS current 495 DESCRIPTION 496 "A block to contain the header from a PDU." 497 SYNTAX OCTET STRING (SIZE(0..64)) 499 IsisCircuitID ::= TEXTUAL-CONVENTION 500 STATUS current 501 DESCRIPTION 502 "ID for a circuit." 503 REFERENCE "{See section 7.2.7 of ISO 10589}" 504 SYNTAX OCTET STRING (SIZE(0|7)) 506 IsisISPriority ::= TEXTUAL-CONVENTION 507 DISPLAY-HINT "d" 508 STATUS current 509 DESCRIPTION 510 "Integer sub-range for IS-IS priority." 511 REFERENCE "{See section 9.5 of ISO 10589}" 512 SYNTAX Unsigned32 (0..127) 514 IsisUnsigned16TC ::= TEXTUAL-CONVENTION 515 DISPLAY-HINT "d" 516 STATUS current 517 DESCRIPTION 518 "An Unsigned32 further restricted to 16 Bits. Note that 519 the ASN.1 BER encoding may still require 24 Bits for 520 some values." 521 SYNTAX Unsigned32 (0..65535) 523 IsisUnsigned8TC ::= TEXTUAL-CONVENTION 524 DISPLAY-HINT "d" 525 STATUS current 526 DESCRIPTION 527 "An Unsigned32 further restricted to 8 Bits. Note that 528 the ASN.1 BER encoding may still require 16 Bits for 529 some values." 530 SYNTAX Unsigned32 (0..255) 532 -- Behavior Definitions 534 -- ResettingTimer behavior definition 535 -- 536 -- "This behavior applies to objects that specify the interval 537 -- between events in the operation of the protocol state machine. 538 -- If the value of such an object is set to a new value while 539 -- the protocol state machine is in operation, the implementation 540 -- shall take the necessary steps to ensure that for any time 541 -- interval which was in progress when the value of the 542 -- corresponding object was changed, the next expiration of that 543 -- interval takes place the specified time after the original 544 -- start of that interval, or immediately, whichever is later. 545 -- The precision with which this time shall be implemented shall 546 -- be the same as that associated with the basic operation of 547 -- the timer object." 549 -- ReplaceOnlyWhileDisabled behavior definition 550 -- "This behavior applies to objects that may not be modified 551 -- while the corresponding table row's variable of type 552 -- IsisAdminState is in state on." 554 -- ManualOrAutomatic behavior definition 555 -- "This behavior applies to objects that are read-write 556 -- if the object was created manually. Objects that were 557 -- created automatically that have this behavior are 558 -- read-only. 560 isisSysObject OBJECT IDENTIFIER ::= { isisSystem 1 } 562 isisSysVersion OBJECT-TYPE 563 SYNTAX INTEGER 564 { 565 unknown(0), 566 one(1) 567 } 568 MAX-ACCESS read-only 569 STATUS current 570 DESCRIPTION 571 "The version number of the IS-IS protocol that 572 is implemented." 573 REFERENCE "{ISIS.aoi version (1)}" 574 DEFVAL { one } 575 ::= { isisSysObject 1 } 577 isisSysLevelType OBJECT-TYPE 578 SYNTAX IsisLevel 579 MAX-ACCESS read-write 580 STATUS current 581 DESCRIPTION 582 "At which levels is the Intermediate System 583 running? This object may not be modified when 584 the isisSysAdminState variable is in state 'on' 585 for this Intermediate System. 587 Configured values MUST survive an agent reboot." 588 REFERENCE "{ISIS.aoi iSType (2)}" 589 DEFVAL { level1and2 } 590 ::= { isisSysObject 2 } 592 isisSysID OBJECT-TYPE 593 SYNTAX IsisSystemID 594 MAX-ACCESS read-write 595 STATUS current 596 DESCRIPTION 597 "The ID for this Intermediate System. 598 This value is appended to each of the 599 area addresses to form the Network Entity Titles. 600 The derivation of a value for this object is 601 implementation-specific. Some implementations may 602 automatically assign values and not permit an 603 SNMP write, while others may require the value 604 to be set manually. 606 Configured values MUST survive an agent reboot." 607 REFERENCE "{ISIS.aoi systemId (119)}" 608 ::= { isisSysObject 3 } 610 isisSysMaxPathSplits OBJECT-TYPE 611 SYNTAX Unsigned32 (1..32) 612 MAX-ACCESS read-write 613 STATUS current 614 DESCRIPTION 615 "Maximum number of paths with equal routing metric value 616 which it is permitted to split between. This object 617 may not be modified when the isisSysAdminState variable 618 is in state 'on' for this Intermediate System. 620 Configured values MUST survive an agent reboot." 621 REFERENCE "{ISIS.aoi maximumPathSplits (3)}" 622 DEFVAL { 2 } 623 ::= { isisSysObject 4 } 625 isisSysMaxLSPGenInt OBJECT-TYPE 626 SYNTAX Unsigned32 (1..65235) 627 UNITS "seconds" 628 MAX-ACCESS read-write 629 STATUS current 630 DESCRIPTION 631 "Maximum interval, in seconds, between generated LSPs 632 by this Intermediate System. This object follows 633 the ResettingTimer behavior. The value must be 634 greater than any value configured for 635 isisSysLevelMinLSPGenInt, and should be at least 300 636 seconds less than isisSysMaxAge. 638 Configured values MUST survive an agent reboot." 639 REFERENCE "{ISIS.aoi maximumLSPGenerationInterval (6)}" 640 DEFVAL { 900 } 641 ::= { isisSysObject 5 } 643 isisSysPollESHelloRate OBJECT-TYPE 644 SYNTAX IsisUnsigned16TC (1..65535) 645 UNITS "seconds" 646 MAX-ACCESS read-write 647 STATUS current 648 DESCRIPTION 649 "The value, in seconds, to be used for the suggested ES 650 configuration timer in ISH PDUs when soliciting the ES 651 configuration. 653 Configured values MUST survive an agent reboot." 654 REFERENCE "{ISIS.aoi pollESHelloRate (13)}" 655 DEFVAL { 50 } 656 ::= { isisSysObject 6 } 658 isisSysWaitTime OBJECT-TYPE 659 SYNTAX IsisUnsigned16TC (1..65535) 660 UNITS "seconds" 661 MAX-ACCESS read-write 662 STATUS current 663 DESCRIPTION 664 "Number of seconds to delay in state 'waiting' before 665 entering the state 'on'. This object follows the 666 ResettingTimer behavior. 668 Configured values MUST survive an agent reboot." 669 REFERENCE "{ISIS.aoi waitingTime (15)}" 670 DEFVAL { 60 } 671 ::= { isisSysObject 7 } 673 isisSysAdminState OBJECT-TYPE 674 SYNTAX IsisAdminState 675 MAX-ACCESS read-write 676 STATUS current 677 DESCRIPTION 678 "The administrative state of this Intermediate 679 System. Setting this object to the value 'on' 680 when its current value is 'off' enables 681 the Intermediate System. 683 Configured values MUST survive an agent reboot." 684 DEFVAL { off } 685 ::= { isisSysObject 8 } 687 isisSysL2toL1Leaking OBJECT-TYPE 688 SYNTAX TruthValue 689 MAX-ACCESS read-write 690 STATUS current 691 DESCRIPTION 692 "If true, allow the router to leak L2 routes into L1. 694 Configured values MUST survive an agent reboot." 695 DEFVAL { false } 696 ::= { isisSysObject 9 } 698 isisSysMaxAge OBJECT-TYPE 699 SYNTAX IsisUnsigned16TC (350..65535) 700 UNITS "seconds" 701 MAX-ACCESS read-write 702 STATUS current 703 DESCRIPTION 704 "Value to place in RemainingLifeTime field of 705 the LSPs we generate. 706 This should be at least 300 seconds greater than 707 isisSysMaxLSPGenInt. 709 Configured values MUST survive an agent reboot." 710 DEFVAL { 1200 } 711 ::= { isisSysObject 10 } 713 isisSysReceiveLSPBufferSize OBJECT-TYPE 714 SYNTAX IsisUnsigned16TC (1492..16000) 715 UNITS "bytes" 716 MAX-ACCESS read-write 717 STATUS current 718 DESCRIPTION 719 "Size of the largest Buffer we are designed or 720 configured to store. This should be at least 721 as big as the maximum isisSysLevelOrigLSPBuffSize 722 supported by the system. 724 If resources allow, we will store and flood LSPs 725 larger than isisSysReceiveLSPBufferSize, as this 726 can help avoid problems in networks with different 727 values for isisSysLevelOrigLSPBuffSize. 729 Configured values MUST survive an agent reboot." 730 DEFVAL { 1492 } 731 ::= { isisSysObject 11 } 733 isisSysProtSupported OBJECT-TYPE 734 SYNTAX BITS { 735 iso8473 (0), 736 ipv4 (1), 737 ipv6 (2) 738 } 739 MAX-ACCESS read-only 740 STATUS current 741 DESCRIPTION 742 "This attribute contains the set of protocols 743 supported by this Intermediate System." 744 ::= { isisSysObject 12 } 746 isisSysNotificationEnable OBJECT-TYPE 747 SYNTAX TruthValue 748 MAX-ACCESS read-write 749 STATUS current 750 DESCRIPTION 751 "If this object is set to true(1), then it enables 752 the emission of IS-IS Notifications. If it is 753 set to false(2), these notifications are not sent. 755 Configured values MUST survive an agent reboot." 756 DEFVAL { true } 757 ::= { isisSysObject 13 } 759 -- The Level 1 Manual Area Address Table 761 isisManAreaAddrTable OBJECT-TYPE 762 SYNTAX SEQUENCE OF IsisManAreaAddrEntry 763 MAX-ACCESS not-accessible 764 STATUS current 765 DESCRIPTION 766 "The set of manual area addresses configured on this 767 Intermediate System. 769 At least one row in which the value of 770 isisManAreaAddrExistState is active must be present. 771 The maximum number of rows in this table for for 772 which the object isisManAreaAddrExistState has the 773 value active is 3. 775 An attempt to create more 3 rows of isisManAreaAddrEntry 776 with state 'active' in one instance of the IS-IS protocol 777 should return inconsistentValue." 778 REFERENCE "{ISIS.aoi manualAreaAddresses (10)}" 779 ::= { isisSystem 2 } 781 isisManAreaAddrEntry OBJECT-TYPE 782 SYNTAX IsisManAreaAddrEntry 783 MAX-ACCESS not-accessible 784 STATUS current 785 DESCRIPTION 786 "Each entry contains one area address manually configured 787 on this system. 789 Dynamically created rows MUST survive an agent reboot." 790 INDEX { isisManAreaAddr } 791 ::= { isisManAreaAddrTable 1 } 793 IsisManAreaAddrEntry ::= 794 SEQUENCE { 795 isisManAreaAddr 796 IsisOSINSAddress, 797 isisManAreaAddrExistState 798 RowStatus 799 } 801 isisManAreaAddr OBJECT-TYPE 802 SYNTAX IsisOSINSAddress 803 MAX-ACCESS not-accessible 804 STATUS current 805 DESCRIPTION 806 "A manually configured area address for this system. 808 Note: an index for the entry {1, {49.0001} active} in 809 this table would be the ordered pair 810 (1, (0x03 0x49 0x00 0x01)), as the length of an Octet 811 string is part of the OID." 812 ::= { isisManAreaAddrEntry 1 } 814 isisManAreaAddrExistState OBJECT-TYPE 815 SYNTAX RowStatus 816 MAX-ACCESS read-create 817 STATUS current 818 DESCRIPTION 819 "The state of the isisManAreaAddrEntry. If the 820 isisSysAdminState for this Intermediate System is 'on', and 821 an attempt is made to set this object to the value 822 'destroy' or 'notInService' when this is the only 823 isisManAreaAddrEntry in state 'active' for this 824 Intermediate System should return inconsistentValue. 826 A row entry cannot be modified when the value of this 827 object is 'active'." 828 ::= { isisManAreaAddrEntry 2 } 830 -- The Level 1 Area Address Table 832 -- The Level 1 Area Address Table contains the 833 -- union of the sets of relevant area addresses configured 834 -- or learned from Level 1 LSPs received by this Intermediate System. 836 isisAreaAddrTable OBJECT-TYPE 837 SYNTAX SEQUENCE OF IsisAreaAddrEntry 838 MAX-ACCESS not-accessible 839 STATUS current 840 DESCRIPTION 841 "The union of the sets of area addresses reported in all 842 Level 1 LSPs with fragment number zero generated by this 843 Intermediate System, or received from other Intermediate 844 Systems which are reachable via Level 1 routing." 845 REFERENCE "{ISIS.aoi areaAddresses (18)}" 846 ::= { isisSystem 3 } 848 isisAreaAddrEntry OBJECT-TYPE 849 SYNTAX IsisAreaAddrEntry 850 MAX-ACCESS not-accessible 851 STATUS current 852 DESCRIPTION 853 "Each entry contains one area address reported in a 854 Level 1 LSP generated or received by this Intermediate 855 System. 857 Dynamically learned rows do not survive an agent reboot." 858 INDEX { isisAreaAddr } 859 ::= { isisAreaAddrTable 1 } 861 IsisAreaAddrEntry ::= 862 SEQUENCE { 863 isisAreaAddr 864 IsisOSINSAddress 865 } 867 isisAreaAddr OBJECT-TYPE 868 SYNTAX IsisOSINSAddress 869 MAX-ACCESS read-only 870 STATUS current 871 DESCRIPTION 872 "An area address reported in a Level 1 LSP." 873 ::= { isisAreaAddrEntry 1 } 875 -- The Summary Address Table 877 -- The Summary Address Table contains the set of summary 878 -- addresses manually configured for the Intermediate System. 879 -- 880 -- This is used to control leaking L1 routes into L2. 882 isisSummAddrTable OBJECT-TYPE 883 SYNTAX SEQUENCE OF IsisSummAddrEntry 884 MAX-ACCESS not-accessible 885 STATUS current 886 DESCRIPTION 887 "The set of IP summary addresses to use in forming 888 summary TLVs originated by this Intermediate System. 890 An administrator may use a summary address to combine 891 and modify IP Reachability announcements. If the 892 Intermediate system can reach any subset of the summary 893 address, the summary address MUST be announced instead, 894 at the configured metric." 895 ::= { isisSystem 4 } 897 isisSummAddrEntry OBJECT-TYPE 898 SYNTAX IsisSummAddrEntry 899 MAX-ACCESS not-accessible 900 STATUS current 901 DESCRIPTION 902 "Each entry contains one IP summary address. 904 Dynamically created rows MUST survive an agent reboot. 906 Implementers need to be aware that if the total number 907 of elements (octets or sub-identifiers) in 908 isisSummAddress and isisSummAddrPrefixLen is too great 909 then OIDs of column instances in this table will have 910 more than 128 subidentifiers and cannot be accessed 911 using SNMPv1, SNMPv2c, or SNMPv3." 912 INDEX { isisSummAddressType, 913 isisSummAddress, 914 isisSummAddrPrefixLen } 915 ::= { isisSummAddrTable 1 } 917 IsisSummAddrEntry ::= 918 SEQUENCE { 919 isisSummAddressType 920 InetAddressType, 921 isisSummAddress 922 InetAddress, 924 isisSummAddrPrefixLen 925 InetAddressPrefixLength, 926 isisSummAddrExistState 927 RowStatus, 928 isisSummAddrMetric 929 IsisDefaultMetric, 930 isisSummAddrFullMetric 931 IsisFullMetric 932 } 934 isisSummAddressType OBJECT-TYPE 935 SYNTAX InetAddressType 936 MAX-ACCESS not-accessible 937 STATUS current 938 DESCRIPTION 939 "The Type of IP address for this summary address." 940 ::= { isisSummAddrEntry 1 } 942 isisSummAddress OBJECT-TYPE 943 SYNTAX InetAddress 944 MAX-ACCESS not-accessible 945 STATUS current 946 DESCRIPTION 947 "The IP Address value for this summary address. 948 The address must not contain any set host bits 949 (bits set after the address prefix determined by 950 isisSummAddrPrefixLen). 952 The type of this address is determined by the value of 953 the isisSummAddressType object." 955 ::= { isisSummAddrEntry 2 } 957 isisSummAddrPrefixLen OBJECT-TYPE 958 SYNTAX InetAddressPrefixLength 959 MAX-ACCESS not-accessible 960 STATUS current 961 DESCRIPTION 962 "The Length of the IP NetMask for this summary address. 964 The values for the index objects isisSummAddress and 965 isisSummAddrPrefixLen must be consistent. When the value 966 of isisSummAddress (excluding the zone index, if one 967 is present) is x, then the bitwise logical-AND 968 of x with the value of the mask formed from the 969 corresponding index object isisSummAddrPrefixLen MUST be 970 equal to x. If not, then the index pair is not 971 consistent and an inconsistentName error must be 972 returned on SET or CREATE requests." 974 ::= { isisSummAddrEntry 3 } 976 isisSummAddrExistState OBJECT-TYPE 977 SYNTAX RowStatus 978 MAX-ACCESS read-create 979 STATUS current 980 DESCRIPTION 981 "The existence state of this summary address. Support 982 for 'createAndWait' and 'notInService' is not required. 984 A row entry cannot be modified when the value of this 985 object is 'active'." 986 ::= { isisSummAddrEntry 4 } 988 isisSummAddrMetric OBJECT-TYPE 989 SYNTAX IsisDefaultMetric 990 MAX-ACCESS read-create 991 STATUS current 992 DESCRIPTION 993 "The metric value to announce this summary 994 address within LSPs generated by this system." 995 DEFVAL { 20 } 996 ::= { isisSummAddrEntry 5 } 998 isisSummAddrFullMetric OBJECT-TYPE 999 SYNTAX IsisFullMetric 1000 MAX-ACCESS read-create 1001 STATUS current 1002 DESCRIPTION 1003 "The wide metric value to announce this summary 1004 address within LSPs generated by this system." 1005 DEFVAL { 20 } 1006 ::= { isisSummAddrEntry 6 } 1008 -- The Redistribution table defines addresses that should be 1009 -- leaked from L2 to L1 if isisSysL2toL1Leaking is enabled. 1011 isisRedistributeAddrTable OBJECT-TYPE 1012 SYNTAX SEQUENCE OF IsisRedistributeAddrEntry 1013 MAX-ACCESS not-accessible 1014 STATUS current 1015 DESCRIPTION 1016 "This table provides criteria to decide if a route should 1017 be leaked from L2 to L1 when Domain Wide Prefix leaking is 1018 enabled. 1020 Addresses that match the summary mask in the table MUST 1021 be announced at L1 by routers when isisSysL2toL1Leaking 1022 is enabled. Routes that fall into the ranges specified 1023 are announced as is, without being summarized. Routes 1024 that do not match a summary mask are not announced." 1025 ::= { isisSystem 5 } 1027 isisRedistributeAddrEntry OBJECT-TYPE 1028 SYNTAX IsisRedistributeAddrEntry 1029 MAX-ACCESS not-accessible 1030 STATUS current 1031 DESCRIPTION 1032 "Each entry contains one configured IP summary 1033 address to manage leaking L2 addresses into L1. 1035 Dynamically created rows MUST survive an agent reboot. 1037 Implementers need to be aware that if the total number 1038 of elements (octets or sub-identifiers) in 1039 isisRedistributeAddrAddress and 1040 isisRedistributeAddrPrefixLen is too great then OIDs 1041 of column instances in this table will have more than 1042 128 subidentifiers and cannot be accessed using SNMPv1, 1043 SNMPv2c, or SNMPv3." 1044 INDEX { isisRedistributeAddrType, 1045 isisRedistributeAddrAddress, 1046 isisRedistributeAddrPrefixLen } 1047 ::= { isisRedistributeAddrTable 1 } 1049 IsisRedistributeAddrEntry ::= 1050 SEQUENCE { 1051 isisRedistributeAddrType 1052 InetAddressType, 1053 isisRedistributeAddrAddress 1054 InetAddress, 1055 isisRedistributeAddrPrefixLen 1056 InetAddressPrefixLength, 1057 isisRedistributeAddrExistState 1058 RowStatus 1059 } 1061 isisRedistributeAddrType OBJECT-TYPE 1062 SYNTAX InetAddressType 1063 MAX-ACCESS not-accessible 1064 STATUS current 1065 DESCRIPTION 1066 "The Type of IP address for this summary address." 1067 ::= { isisRedistributeAddrEntry 1 } 1068 isisRedistributeAddrAddress OBJECT-TYPE 1069 SYNTAX InetAddress 1070 MAX-ACCESS not-accessible 1071 STATUS current 1072 DESCRIPTION 1073 "The IP Address value for this summary address. 1074 The type of this address is determined by the 1075 value of the isisRedistributeAddrType object. 1076 The address must not contain any set host bits - 1077 bits set after the address prefix determined by 1078 isisRedistributeAddrPrefixLen." 1080 ::= { isisRedistributeAddrEntry 2 } 1082 isisRedistributeAddrPrefixLen OBJECT-TYPE 1083 SYNTAX InetAddressPrefixLength 1084 MAX-ACCESS not-accessible 1085 STATUS current 1086 DESCRIPTION 1087 "The Length of the IP NetMask for this summary address. 1089 The values for the index objects 1090 isisRedistributeAddrAddress and 1091 isisRedistributeAddrPrefixLen must be consistent. 1092 When the value of isisRedistributeAddrAddress 1093 (excluding the zone index, if one is present) is x, 1094 then the bitwise logical-AND of x with the value of 1095 the mask formed from the corresponding index object 1096 isisRedistributeAddrPrefixLen MUST be equal to x. 1097 If not, then the index pair is not consistent and an 1098 inconsistentName error must be returned on SET or 1099 CREATE requests." 1101 ::= { isisRedistributeAddrEntry 3 } 1103 isisRedistributeAddrExistState OBJECT-TYPE 1104 SYNTAX RowStatus 1105 MAX-ACCESS read-create 1106 STATUS current 1107 DESCRIPTION 1108 "The existence state of this summary address. Support 1109 for createAndWait and notInService is not required. 1111 A row entry cannot be modified when the value of this 1112 object is 'active'." 1113 ::= { isisRedistributeAddrEntry 4 } 1115 -- The Router Table keeps track of hostnames and router IDs 1116 -- associated with Intermediate Systems in the area and domain. 1118 isisRouterTable OBJECT-TYPE 1119 SYNTAX SEQUENCE OF IsisRouterEntry 1120 MAX-ACCESS not-accessible 1121 STATUS current 1122 DESCRIPTION 1123 "The set of hostnames and router ID." 1124 ::= { isisSystem 6 } 1126 isisRouterEntry OBJECT-TYPE 1127 SYNTAX IsisRouterEntry 1128 MAX-ACCESS not-accessible 1129 STATUS current 1130 DESCRIPTION 1131 "Each entry tracks information about one Intermediate 1132 System at one level. 1134 Dynamically learned rows do not survive an agent reboot." 1135 INDEX { isisRouterSysID, 1136 isisRouterLevel } 1137 ::= { isisRouterTable 1 } 1139 IsisRouterEntry ::= 1140 SEQUENCE { 1141 isisRouterSysID 1142 IsisSystemID, 1143 isisRouterLevel 1144 IsisISLevel, 1145 isisRouterHostName 1146 SnmpAdminString, 1147 isisRouterID 1148 Unsigned32 1149 } 1151 isisRouterSysID OBJECT-TYPE 1152 SYNTAX IsisSystemID 1153 MAX-ACCESS not-accessible 1154 STATUS current 1155 DESCRIPTION 1156 "The System ID of the Intermediate System." 1157 ::= { isisRouterEntry 1 } 1159 isisRouterLevel OBJECT-TYPE 1160 SYNTAX IsisISLevel 1161 MAX-ACCESS not-accessible 1162 STATUS current 1163 DESCRIPTION 1164 "The level at which the information about this 1165 Intermediate System was received." 1166 ::= { isisRouterEntry 2 } 1168 isisRouterHostName OBJECT-TYPE 1169 SYNTAX SnmpAdminString 1170 MAX-ACCESS read-only 1171 STATUS current 1172 DESCRIPTION 1173 "The hostname listed in the LSP, or a zero-length 1174 string if none." 1175 ::= { isisRouterEntry 3 } 1177 isisRouterID OBJECT-TYPE 1178 SYNTAX Unsigned32 1179 MAX-ACCESS read-only 1180 STATUS current 1181 DESCRIPTION 1182 "The Router ID found in the LSP, or zero if none." 1183 ::= { isisRouterEntry 4 } 1185 -- The System Level Table 1186 -- This table captures level-specific information about the System 1188 isisSysLevelTable OBJECT-TYPE 1189 SYNTAX SEQUENCE OF IsisSysLevelEntry 1190 MAX-ACCESS not-accessible 1191 STATUS current 1192 DESCRIPTION 1193 "Level specific information about the System." 1194 ::= { isisSysLevel 1 } 1196 isisSysLevelEntry OBJECT-TYPE 1197 SYNTAX IsisSysLevelEntry 1198 MAX-ACCESS not-accessible 1199 STATUS current 1200 DESCRIPTION 1201 "Each row describes variables configured for Area or Domain. 1203 Configured values MUST survive an agent reboot." 1204 INDEX { isisSysLevelIndex } 1205 ::= { isisSysLevelTable 1 } 1207 IsisSysLevelEntry ::= 1208 SEQUENCE { 1209 isisSysLevelIndex 1210 IsisISLevel, 1211 isisSysLevelOrigLSPBuffSize 1212 IsisLSPBuffSize, 1213 isisSysLevelMinLSPGenInt 1214 IsisUnsigned16TC, 1215 isisSysLevelState 1216 IsisLevelState, 1217 isisSysLevelSetOverload 1218 TruthValue, 1219 isisSysLevelSetOverloadUntil 1220 Unsigned32, 1221 isisSysLevelMetricStyle 1222 IsisMetricStyle, 1223 isisSysLevelSPFConsiders 1224 IsisMetricStyle, 1225 isisSysLevelTEEnabled 1226 TruthValue 1227 } 1229 isisSysLevelIndex OBJECT-TYPE 1230 SYNTAX IsisISLevel 1231 MAX-ACCESS not-accessible 1232 STATUS current 1233 DESCRIPTION 1234 "The level that this entry describes." 1235 ::= { isisSysLevelEntry 1 } 1237 isisSysLevelOrigLSPBuffSize OBJECT-TYPE 1238 SYNTAX IsisLSPBuffSize 1239 MAX-ACCESS read-write 1240 STATUS current 1241 DESCRIPTION 1242 "The maximum size of LSPs and SNPs originated by 1243 this Intermediate System at this level. This 1244 object may not be modified when the isisSysAdminState 1245 variable is in state 'on' for this Intermediate System." 1246 REFERENCE "{ISIS.aoi originatingL1LSPBufferSize (9)}" 1247 DEFVAL { 1492 } 1248 ::= { isisSysLevelEntry 2 } 1250 isisSysLevelMinLSPGenInt OBJECT-TYPE 1251 SYNTAX IsisUnsigned16TC (1..65535) 1252 UNITS "seconds" 1253 MAX-ACCESS read-write 1254 STATUS current 1255 DESCRIPTION 1256 "Minimum interval, in seconds, between successive 1257 generation of LSPs with the same LSPID at this level 1258 by this Intermediate System." 1259 REFERENCE "{ISIS.aoi minimumLSPGenerationInterval (11)}" 1260 DEFVAL { 30 } 1261 ::= { isisSysLevelEntry 3 } 1263 isisSysLevelState OBJECT-TYPE 1264 SYNTAX IsisLevelState 1265 MAX-ACCESS read-only 1266 STATUS current 1267 DESCRIPTION 1268 "The state of the database at this level. 1269 The value 'off' indicates that IS-IS is not active at 1270 this level. 1271 The value 'on' indicates that IS-IS is active at this 1272 level, and not overloaded. 1273 The value 'waiting' indicates a database that is low on 1274 an essential resource, such as memory. 1275 The administrator may force the state to 'overloaded' 1276 by setting the object isisSysLevelSetOverload. 1277 If the state is 'waiting' or 'overloaded', we 1278 originate LSPs with the Overload bit set." 1279 REFERENCE "{ISIS.aoi l1State (17)}" 1280 ::= { isisSysLevelEntry 4 } 1282 isisSysLevelSetOverload OBJECT-TYPE 1283 SYNTAX TruthValue 1284 MAX-ACCESS read-write 1285 STATUS current 1286 DESCRIPTION 1287 "Administratively set the overload bit for the level. 1288 The overload bit MUST continue to be set if the 1289 implementation runs out of memory, independent of 1290 this variable. It may also be set manually independent 1291 of this variable, using the isisSysLevelSetOverloadUntil 1292 object." 1293 DEFVAL { false } 1294 ::= { isisSysLevelEntry 5 } 1296 isisSysLevelSetOverloadUntil OBJECT-TYPE 1297 SYNTAX Unsigned32 1298 UNITS "Seconds until clearing manually set Overload Bit" 1299 MAX-ACCESS read-write 1300 STATUS current 1301 DESCRIPTION 1302 "If this object is non-zero, the overload bit is set at 1303 this level when the isisSysAdminState variable goes to 1304 state 'on' for this Intermediate System. The overload bit 1305 remains set for isisSysLevelSetOverloadUntil seconds. 1306 When isisSysLevelSetOverloadUntil seconds have elapsed, 1307 the overload flag remains set if the implementation has 1308 run out of memory, or if it is set manually using the 1309 isisSysLevelSetOverload object. 1311 If isisSysLevelSetOverload is false, the system clears 1312 the overload bit when isisSysLevelSetOverloadUntil seconds 1313 have elapsed, if the system has not run out of memory." 1314 ::= { isisSysLevelEntry 6 } 1316 isisSysLevelMetricStyle OBJECT-TYPE 1317 SYNTAX IsisMetricStyle 1318 MAX-ACCESS read-write 1319 STATUS current 1320 DESCRIPTION 1321 "Which style of Metric do we generate in our LSPs 1322 at this level?" 1323 DEFVAL { narrow } 1324 ::= { isisSysLevelEntry 7 } 1326 isisSysLevelSPFConsiders OBJECT-TYPE 1327 SYNTAX IsisMetricStyle 1328 MAX-ACCESS read-write 1329 STATUS current 1330 DESCRIPTION 1331 "Which style of Metric do we consider in our 1332 SPF computation at this level?" 1333 DEFVAL { narrow } 1334 ::= { isisSysLevelEntry 8 } 1336 isisSysLevelTEEnabled OBJECT-TYPE 1337 SYNTAX TruthValue 1338 MAX-ACCESS read-write 1339 STATUS current 1340 DESCRIPTION 1341 "Do we do Traffic Engineering at this level?" 1342 DEFVAL { false } 1343 ::= { isisSysLevelEntry 9 } 1345 -- Static to provide next CircIndex 1347 isisNextCircIndex OBJECT-TYPE 1348 SYNTAX IndexIntegerNextFree 1349 MAX-ACCESS read-only 1350 STATUS current 1351 DESCRIPTION 1352 "This object is used to assist a management 1353 application in creating new rows in the 1354 isisCircTable. If it is possible to create 1355 a new instance of isisCircEntry, then this 1356 object will contain a non-zero value that 1357 is not in use as the index of any row in the 1358 isisCircTable. The network manager reads the 1359 value of this object and then (if the value 1360 value read is non-zero) attempts to create 1361 the corresponding instance of isisCircEntry. 1362 If the set request fails with the code 1363 'inconsistentValue', then the process must be 1364 repeated; if the set request succeeds, then 1365 the agent will change value of this object 1366 according to an implementation-specific 1367 algorithm." 1368 ::= { isisCirc 1 } 1370 -- The Circuit Table 1371 -- Each broadcast or point-to-point interface on the system 1372 -- corresponds to one entry in the Circuit table. However, there 1373 -- may be multiple X.25 DA circuit entries in the Circuit table 1374 -- for a given X.25 interface. 1376 isisCircTable OBJECT-TYPE 1377 SYNTAX SEQUENCE OF IsisCircEntry 1378 MAX-ACCESS not-accessible 1379 STATUS current 1380 DESCRIPTION 1381 "The table of circuits used by this 1382 Intermediate System." 1383 ::= { isisCirc 2 } 1385 isisCircEntry OBJECT-TYPE 1386 SYNTAX IsisCircEntry 1387 MAX-ACCESS not-accessible 1388 STATUS current 1389 DESCRIPTION 1390 "An isisCircEntry exists for each circuit configured 1391 for Integrated IS-IS on this system. 1393 Dynamically created rows MUST survive an agent reboot." 1394 INDEX { isisCircIndex } 1395 ::= { isisCircTable 1 } 1397 IsisCircEntry ::= 1398 SEQUENCE { 1399 isisCircIndex 1400 IndexInteger, 1401 isisCircIfIndex 1402 InterfaceIndex, 1404 isisCircAdminState 1405 IsisAdminState, 1406 isisCircExistState 1407 RowStatus, 1408 isisCircType 1409 INTEGER, 1410 isisCircExtDomain 1411 TruthValue, 1412 isisCircLevelType 1413 IsisLevel, 1414 isisCircPassiveCircuit 1415 TruthValue, 1416 isisCircMeshGroupEnabled 1417 INTEGER, 1418 isisCircMeshGroup 1419 Unsigned32, 1420 isisCircSmallHellos 1421 TruthValue, 1422 isisCircLastUpTime 1423 TimeStamp, 1424 isisCirc3WayEnabled 1425 TruthValue, 1426 isisCircExtendedCircID 1427 Unsigned32 1428 } 1430 isisCircIndex OBJECT-TYPE 1431 SYNTAX IndexInteger 1432 MAX-ACCESS not-accessible 1433 STATUS current 1434 DESCRIPTION 1435 "An index used to uniquely identify this circuit. 1436 When creating a row in this table, the 1437 isisNextCircIndex object should be retrieved 1438 and it's value should be specified as the value 1439 of this index using a SET operation. A retrieved 1440 value of zero(0) indicates that no rows can be 1441 created at this time." 1442 ::= { isisCircEntry 1 } 1444 isisCircIfIndex OBJECT-TYPE 1445 SYNTAX InterfaceIndex 1446 MAX-ACCESS read-create 1447 STATUS current 1448 DESCRIPTION 1449 "The value of ifIndex for the interface to which this 1450 circuit corresponds. This object cannot be modified 1451 after creation." 1453 ::= { isisCircEntry 2 } 1455 isisCircAdminState OBJECT-TYPE 1456 SYNTAX IsisAdminState 1457 MAX-ACCESS read-create 1458 STATUS current 1459 DESCRIPTION 1460 "The administrative state of the circuit." 1461 DEFVAL { off } 1462 ::= { isisCircEntry 3 } 1464 isisCircExistState OBJECT-TYPE 1465 SYNTAX RowStatus 1466 MAX-ACCESS read-create 1467 STATUS current 1468 DESCRIPTION 1469 "The existence state of this circuit. Setting the state 1470 to 'notInService' halts the generation and processing of 1471 IS-IS protocol PDUs on this circuit. Setting the state 1472 to destroy will also erase any configuration associated 1473 with the circuit. Support for 'createAndWait' and 1474 'notInService' is not required. 1476 A row entry cannot be modified when the value of this 1477 object is 'active'." 1478 ::= { isisCircEntry 4 } 1480 isisCircType OBJECT-TYPE 1481 SYNTAX INTEGER 1482 { 1483 broadcast(1), 1484 ptToPt(2), 1485 staticIn(3), 1486 staticOut(4), 1487 dA(5) 1488 } 1489 MAX-ACCESS read-create 1490 STATUS current 1491 DESCRIPTION 1492 "The type of the circuit. This object follows the 1493 ReplaceOnlyWhileDisabled behavior. The type specified 1494 must be compatible with the type of the interface defined 1495 by the value of isisCircIfIndex." 1496 REFERENCE "{ISIS.aoi type (33)}" 1497 ::= { isisCircEntry 5 } 1499 isisCircExtDomain OBJECT-TYPE 1500 SYNTAX TruthValue 1501 MAX-ACCESS read-create 1502 STATUS current 1503 DESCRIPTION 1504 "If true, suppress normal transmission of and 1505 interpretation of Intra-domain IS-IS PDUs on this 1506 circuit." 1507 REFERENCE "{ISIS.aoi externalDomain (46)}" 1508 DEFVAL { false } 1509 ::= { isisCircEntry 6 } 1511 isisCircLevelType OBJECT-TYPE 1512 SYNTAX IsisLevel 1513 MAX-ACCESS read-create 1514 STATUS current 1515 DESCRIPTION 1516 "Indicates which type of packets will be sent and 1517 accepted on this circuit. The values set will be 1518 saved, but the values used will be modified by 1519 the settings of isisSysLevelType. Thus if the 1520 isisSysTpe is level2 and the isisCircLevelType 1521 for a circuit is level1, the circuit will not send 1522 or receive IS-IS packets. This object follows the 1523 ReplaceOnlyWhileDisabled behavior." 1524 DEFVAL { level1and2 } 1525 ::= { isisCircEntry 7 } 1527 isisCircPassiveCircuit OBJECT-TYPE 1528 SYNTAX TruthValue 1529 MAX-ACCESS read-create 1530 STATUS current 1531 DESCRIPTION 1532 "Should we include this interface in LSPs, even if 1533 it is not running the IS-IS Protocol?" 1534 DEFVAL { false } 1535 ::= { isisCircEntry 8 } 1537 isisCircMeshGroupEnabled OBJECT-TYPE 1538 SYNTAX INTEGER 1539 { 1540 inactive(1), 1541 blocked(2), 1542 set(3) 1543 } 1544 MAX-ACCESS read-create 1545 STATUS current 1546 DESCRIPTION 1547 "Is this port a member of a mesh group, or blocked? 1548 Circuits in the same mesh group act as a virtual 1549 multiaccess network. LSPs seen on one circuit in 1550 a mesh group will not be flooded to another circuit 1551 in the same mesh group." 1552 REFERENCE "{ RFC 2973 }" 1553 DEFVAL { inactive } 1554 ::= { isisCircEntry 9 } 1556 isisCircMeshGroup OBJECT-TYPE 1557 SYNTAX Unsigned32 1558 MAX-ACCESS read-create 1559 STATUS current 1560 DESCRIPTION 1561 "Circuits in the same mesh group act as a virtual 1562 multiaccess network. LSPs seen on one circuit in 1563 a mesh group will not be flooded to another circuit 1564 in the same mesh group. If isisCircMeshGroupEnabled 1565 is inactive or blocked, this value is ignored." 1566 REFERENCE "{ RFC 2973 }" 1567 ::= { isisCircEntry 10 } 1569 isisCircSmallHellos OBJECT-TYPE 1570 SYNTAX TruthValue 1571 MAX-ACCESS read-create 1572 STATUS current 1573 DESCRIPTION 1574 "Can we send unpadded hellos on LAN circuits? False 1575 means LAN Hellos must be padded. 1576 Implementations should allow the administrator to read 1577 this value. An implementation need not be able to 1578 support unpadded hellos to be conformant." 1579 DEFVAL { false } 1580 ::= { isisCircEntry 11 } 1582 isisCircLastUpTime OBJECT-TYPE 1583 SYNTAX TimeStamp 1584 MAX-ACCESS read-only 1585 STATUS current 1586 DESCRIPTION 1587 "How long the circuit has been enabled, measured in 1588 hundredths of seconds since the last re-initialization 1589 of the network management subsystem, or 0 if the 1590 circuit has never been 'on'." 1591 ::= { isisCircEntry 12 } 1593 isisCirc3WayEnabled OBJECT-TYPE 1594 SYNTAX TruthValue 1595 MAX-ACCESS read-create 1596 STATUS current 1597 DESCRIPTION 1598 "Is this circuit enabled to run 3Way handshake?" 1599 DEFVAL { true } 1600 ::= { isisCircEntry 13 } 1602 isisCircExtendedCircID OBJECT-TYPE 1603 SYNTAX Unsigned32 1604 MAX-ACCESS read-create 1605 STATUS current 1606 DESCRIPTION 1607 "The value to be used as the extended circuit ID in 1608 3Way handshake. This value is only used if 1609 isisCirc3WayEnabled is true, and must be unique across 1610 all circuits on this IS." 1611 ::= { isisCircEntry 14 } 1613 -- The Circuit Level Table 1614 -- This table captures level-specific information about a circuit 1616 isisCircLevelTable OBJECT-TYPE 1617 SYNTAX SEQUENCE OF IsisCircLevelEntry 1618 MAX-ACCESS not-accessible 1619 STATUS current 1620 DESCRIPTION 1621 "Level specific information about circuits used by IS-IS." 1622 ::= { isisCircLevelValues 1 } 1624 isisCircLevelEntry OBJECT-TYPE 1625 SYNTAX IsisCircLevelEntry 1626 MAX-ACCESS not-accessible 1627 STATUS current 1628 DESCRIPTION 1629 "An isisCircLevelEntry exists for each level on 1630 each circuit configured for Integrated IS-IS on 1631 this system. 1633 Configured values MUST survive an agent reboot." 1634 INDEX { isisCircIndex, 1635 isisCircLevelIndex } 1636 ::= { isisCircLevelTable 1 } 1638 IsisCircLevelEntry ::= 1639 SEQUENCE { 1640 isisCircLevelIndex 1641 IsisISLevel, 1642 isisCircLevelMetric 1643 IsisDefaultMetric, 1644 isisCircLevelWideMetric 1645 IsisWideMetric, 1646 isisCircLevelISPriority 1647 IsisISPriority, 1648 isisCircLevelIDOctet 1649 Unsigned32, 1650 isisCircLevelID 1651 IsisCircuitID, 1652 isisCircLevelDesIS 1653 IsisCircuitID, 1654 isisCircLevelHelloMultiplier 1655 Unsigned32, 1656 isisCircLevelHelloTimer 1657 Unsigned32, 1658 isisCircLevelDRHelloTimer 1659 Unsigned32, 1660 isisCircLevelLSPThrottle 1661 IsisUnsigned16TC, 1662 isisCircLevelMinLSPRetransInt 1663 Unsigned32, 1664 isisCircLevelCSNPInterval 1665 Unsigned32, 1666 isisCircLevelPartSNPInterval 1667 Unsigned32 1668 } 1670 isisCircLevelIndex OBJECT-TYPE 1671 SYNTAX IsisISLevel 1672 MAX-ACCESS not-accessible 1673 STATUS current 1674 DESCRIPTION 1675 "The level that this entry describes." 1676 ::= { isisCircLevelEntry 1 } 1678 isisCircLevelMetric OBJECT-TYPE 1679 SYNTAX IsisDefaultMetric 1680 MAX-ACCESS read-write 1681 STATUS current 1682 DESCRIPTION 1683 "The metric value of this circuit for this level." 1684 REFERENCE "{ISIS.aoi l1DefaultMetric (35)}" 1685 DEFVAL { 10 } 1686 ::= { isisCircLevelEntry 2 } 1688 isisCircLevelWideMetric OBJECT-TYPE 1689 SYNTAX IsisWideMetric 1690 MAX-ACCESS read-write 1691 STATUS current 1692 DESCRIPTION 1693 "The wide metric value of this circuit for this level." 1694 DEFVAL { 10 } 1695 ::= { isisCircLevelEntry 3 } 1697 isisCircLevelISPriority OBJECT-TYPE 1698 SYNTAX IsisISPriority 1699 MAX-ACCESS read-write 1700 STATUS current 1701 DESCRIPTION 1702 "The priority for becoming LAN Designated 1703 Intermediate System at this level." 1704 REFERENCE "{ISIS.aoi l2IntermediateSystemPriority (73)}" 1705 DEFVAL { 64 } 1706 ::= { isisCircLevelEntry 4 } 1708 isisCircLevelIDOctet OBJECT-TYPE 1709 SYNTAX Unsigned32(0..255) 1710 MAX-ACCESS read-only 1711 STATUS current 1712 DESCRIPTION 1713 "A one byte identifier for the circuit selected by the 1714 Intermediate System. 1716 On point-to-point circuits, the value is used as the Local 1717 Circuit ID in point-to-point IIH PDUs transmitted on this 1718 circuit. In this case, values of isisCircLevelIDOctet do 1719 not need to be unique. 1721 For broadcast circuits, the value is used to generate the 1722 LAN ID that will be used if this Intermediate System is 1723 elected as the Designated IS on this circuit. The value 1724 is required to differ on LANs where the Intermediate System 1725 is the Designated Intermediate System." 1726 ::= { isisCircLevelEntry 5 } 1728 isisCircLevelID OBJECT-TYPE 1729 SYNTAX IsisCircuitID 1730 MAX-ACCESS read-only 1731 STATUS current 1732 DESCRIPTION 1733 "On a point to point circuit with a fully initialized 1734 adjacency to a peer IS, the value of this object is 1735 the circuit ID negotiated during adjacency initialization. 1736 On a point to point circuit without such an adjacency, 1737 the value is the concatenation of the local system ID 1738 and the one byte isisCircLevelIDOctet for this circuit 1739 i.e. the value that would be proposed for the circuit ID. 1741 On other circuit types, the value returned is the zero 1742 length OCTET STRING." 1743 REFERENCE "{ISIS.aoi ptPtCircuitID (51)}" 1744 ::= { isisCircLevelEntry 6 } 1746 isisCircLevelDesIS OBJECT-TYPE 1747 SYNTAX IsisCircuitID 1748 MAX-ACCESS read-only 1749 STATUS current 1750 DESCRIPTION 1751 "The ID of the LAN Designated Intermediate System 1752 on this circuit at this level. If, for any reason, 1753 this system is not partaking in the relevant 1754 Designated Intermediate System election process, 1755 then the value returned is the zero length OCTET STRING." 1756 REFERENCE "{ISIS.aoi l2DesignatedIntermediateSystem (75)}" 1757 ::= { isisCircLevelEntry 7 } 1759 isisCircLevelHelloMultiplier OBJECT-TYPE 1760 SYNTAX Unsigned32 (2..100) 1761 MAX-ACCESS read-write 1762 STATUS current 1763 DESCRIPTION 1764 "This value is multiplied by the corresponding HelloTimer 1765 and the result in seconds (rounded up) is used as the 1766 holding time in transmitted hellos, to be used by 1767 receivers of hello packets from this IS" 1768 REFERENCE "{ISIS.aoi iSISHelloTimer (45)}" 1769 DEFVAL { 10 } 1770 ::= { isisCircLevelEntry 8 } 1772 isisCircLevelHelloTimer OBJECT-TYPE 1773 SYNTAX Unsigned32 (10..600000) 1774 UNITS "milliseconds" 1775 MAX-ACCESS read-write 1776 STATUS current 1777 DESCRIPTION 1778 "Maximum period, in milliseconds, between IIH PDUs 1779 on multiaccess networks at this level for LANs. 1780 The value at L1 is used as the period between 1781 Hellos on L1L2 point to point circuits. Setting 1782 this value at level 2 on an L1L2 point to point 1783 circuit will result in an error of InconsistentValue. 1785 This object follows the ResettingTimer behavior." 1786 REFERENCE "{ISIS.aoi iSISHelloTimer (45)}" 1787 DEFVAL { 3000 } 1788 ::= { isisCircLevelEntry 9 } 1789 isisCircLevelDRHelloTimer OBJECT-TYPE 1790 SYNTAX Unsigned32 (10..120000) 1791 UNITS "milliseconds" 1792 MAX-ACCESS read-write 1793 STATUS current 1794 DESCRIPTION 1795 "Period, in milliseconds, between Hello PDUs on 1796 multiaccess networks when this IS is the Designated 1797 Intermediate System. This object follows the 1798 ResettingTimer behavior." 1799 REFERENCE "{ISIS.aoi iSISHelloTimer (45)}" 1800 DEFVAL { 1000 } 1801 ::= { isisCircLevelEntry 10 } 1803 isisCircLevelLSPThrottle OBJECT-TYPE 1804 SYNTAX IsisUnsigned16TC (1..65535) 1805 UNITS "milliseconds" 1806 MAX-ACCESS read-write 1807 STATUS current 1808 DESCRIPTION 1809 "Minimal interval of time, in milliseconds, between 1810 transmissions of LSPs on an interface at this level." 1811 REFERENCE 1812 "{ISIS.aoi minimumBroadcastLSPTransmissionInterval (5)}" 1813 DEFVAL { 30 } 1814 ::= { isisCircLevelEntry 11 } 1816 isisCircLevelMinLSPRetransInt OBJECT-TYPE 1817 SYNTAX Unsigned32 (1..300) 1818 UNITS "seconds" 1819 MAX-ACCESS read-write 1820 STATUS current 1821 DESCRIPTION 1822 "Minimum interval, in seconds, between re-transmission of 1823 an LSP at this level. This object follows the 1824 ResettingTimer behavior. 1826 Note that isisCircLevelLSPThrottle controls 1827 how fast we send back to back LSPs. This variable 1828 controls how fast we re-send the same LSP." 1829 REFERENCE "{ISIS.aoi minimumLSPTransmissionInterval (5)}" 1830 DEFVAL { 5 } 1831 ::= { isisCircLevelEntry 12 } 1833 isisCircLevelCSNPInterval OBJECT-TYPE 1834 SYNTAX Unsigned32 (1..600) 1835 UNITS "seconds" 1836 MAX-ACCESS read-write 1837 STATUS current 1838 DESCRIPTION 1839 "Interval of time, in seconds, between periodic 1840 transmission of a complete set of CSNPs on 1841 multiaccess networks if this router is the 1842 designated router at this level. 1843 This object follows the ResettingTimer behavior." 1844 REFERENCE "{ISIS.aoi completeSNPInterval (8)}" 1845 DEFVAL { 10 } 1846 ::= { isisCircLevelEntry 13 } 1848 isisCircLevelPartSNPInterval OBJECT-TYPE 1849 SYNTAX Unsigned32 (1..120) 1850 UNITS "seconds" 1851 MAX-ACCESS read-write 1852 STATUS current 1853 DESCRIPTION 1854 "Minimum interval in seconds between sending Partial 1855 Sequence Number PDUs at this level. This object 1856 follows the ResettingTimer behavior." 1857 REFERENCE "{ISIS.aoi partialSNPInterval (14)}" 1858 DEFVAL { 2 } 1859 ::= { isisCircLevelEntry 14 } 1861 -- isisSystemCounterTable keeps track of system-wide events. 1863 isisSystemCounterTable OBJECT-TYPE 1864 SYNTAX SEQUENCE OF IsisSystemCounterEntry 1865 MAX-ACCESS not-accessible 1866 STATUS current 1867 DESCRIPTION 1868 "System wide counters for this Intermediate System." 1869 ::= { isisCounters 1 } 1871 isisSystemCounterEntry OBJECT-TYPE 1872 SYNTAX IsisSystemCounterEntry 1873 MAX-ACCESS not-accessible 1874 STATUS current 1875 DESCRIPTION 1876 "System-wide IS-IS counters." 1877 INDEX { isisSysStatLevel } 1878 ::= { isisSystemCounterTable 1 } 1880 IsisSystemCounterEntry ::= 1881 SEQUENCE { 1882 isisSysStatLevel 1883 IsisISLevel, 1884 isisSysStatCorrLSPs 1885 Counter32, 1886 isisSysStatAuthTypeFails 1887 Counter32, 1888 isisSysStatAuthFails 1889 Counter32, 1890 isisSysStatLSPDbaseOloads 1891 Counter32, 1892 isisSysStatManAddrDropFromAreas 1893 Counter32, 1894 isisSysStatAttmptToExMaxSeqNums 1895 Counter32, 1896 isisSysStatSeqNumSkips 1897 Counter32, 1898 isisSysStatOwnLSPPurges 1899 Counter32, 1900 isisSysStatIDFieldLenMismatches 1901 Counter32, 1902 isisSysStatPartChanges 1903 Counter32, 1904 isisSysStatSPFRuns 1905 Counter32, 1906 isisSysStatLSPErrors 1907 Counter32 1908 } 1910 isisSysStatLevel OBJECT-TYPE 1911 SYNTAX IsisISLevel 1912 MAX-ACCESS not-accessible 1913 STATUS current 1914 DESCRIPTION 1915 "The level that this entry describes." 1916 ::= { isisSystemCounterEntry 1 } 1918 isisSysStatCorrLSPs OBJECT-TYPE 1919 SYNTAX Counter32 1920 UNITS "Number of corrupted in-memory frames" 1921 MAX-ACCESS read-only 1922 STATUS current 1923 DESCRIPTION 1924 "Number of corrupted in-memory LSPs detected. 1926 LSPs received from the wire with a bad checksum 1927 are silently dropped and not counted. 1929 LSPs received from the wire with parse errors 1930 are counted by isisSysStatLSPErrors." 1931 REFERENCE "{ISIS.aoi corruptedLSPsDetected (19)}" 1932 ::= { isisSystemCounterEntry 2 } 1933 isisSysStatAuthTypeFails OBJECT-TYPE 1934 SYNTAX Counter32 1935 UNITS "Number of frames with authentication type mismatches" 1936 MAX-ACCESS read-only 1937 STATUS current 1938 DESCRIPTION 1939 "The number of authentication type mismatches recognized 1940 by this Intermediate System." 1941 ::= { isisSystemCounterEntry 3 } 1943 isisSysStatAuthFails OBJECT-TYPE 1944 SYNTAX Counter32 1945 UNITS "Number of frames with authentication key failures" 1946 MAX-ACCESS read-only 1947 STATUS current 1948 DESCRIPTION 1949 "The number of authentication key failures recognized 1950 by this Intermediate System." 1951 ::= { isisSystemCounterEntry 4 } 1953 isisSysStatLSPDbaseOloads OBJECT-TYPE 1954 SYNTAX Counter32 1955 MAX-ACCESS read-only 1956 STATUS current 1957 DESCRIPTION 1958 "Number of times the LSP database has become 1959 overloaded." 1960 REFERENCE "{ISIS.aoi lSPL1DatabaseOverloads (20)}" 1961 ::= { isisSystemCounterEntry 5 } 1963 isisSysStatManAddrDropFromAreas OBJECT-TYPE 1964 SYNTAX Counter32 1965 MAX-ACCESS read-only 1966 STATUS current 1967 DESCRIPTION 1968 "Number of times a manual address has been dropped from 1969 the area." 1970 REFERENCE "{ISIS.aoi manualAddressesDroppedFromArea (21)}" 1971 ::= { isisSystemCounterEntry 6 } 1973 isisSysStatAttmptToExMaxSeqNums OBJECT-TYPE 1974 SYNTAX Counter32 1975 MAX-ACCESS read-only 1976 STATUS current 1977 DESCRIPTION 1978 "Number of times the IS has attempted to exceed the 1979 maximum sequence number." 1980 REFERENCE 1981 "{ISIS.aoi attemptsToExceedmaximumSequenceNumber (22)}" 1982 ::= { isisSystemCounterEntry 7 } 1984 isisSysStatSeqNumSkips OBJECT-TYPE 1985 SYNTAX Counter32 1986 MAX-ACCESS read-only 1987 STATUS current 1988 DESCRIPTION 1989 "Number of times a sequence number skip has occurred." 1990 REFERENCE "{ISIS.aoi sequenceNumberSkips (23)}" 1991 ::= { isisSystemCounterEntry 8 } 1993 isisSysStatOwnLSPPurges OBJECT-TYPE 1994 SYNTAX Counter32 1995 MAX-ACCESS read-only 1996 STATUS current 1997 DESCRIPTION 1998 "Number of times a zero-aged copy of the system's own LSP 1999 is received from some other node." 2000 REFERENCE "{ISIS.aoi ownLSPPurges (24)}" 2001 ::= { isisSystemCounterEntry 9 } 2003 isisSysStatIDFieldLenMismatches OBJECT-TYPE 2004 SYNTAX Counter32 2005 UNITS "Number of frames with ID length mismatches" 2006 MAX-ACCESS read-only 2007 STATUS current 2008 DESCRIPTION 2009 "Number of times a PDU is received with a different value 2010 for ID field length to that of the receiving system." 2011 REFERENCE "{ISIS.aoi iDFieldLengthMismatches (25)}" 2012 ::= { isisSystemCounterEntry 10 } 2014 isisSysStatPartChanges OBJECT-TYPE 2015 SYNTAX Counter32 2016 MAX-ACCESS read-only 2017 STATUS current 2018 DESCRIPTION 2019 "Partition changes." 2020 ::= { isisSystemCounterEntry 11 } 2022 isisSysStatSPFRuns OBJECT-TYPE 2023 SYNTAX Counter32 2024 MAX-ACCESS read-only 2025 STATUS current 2026 DESCRIPTION 2027 "Number of times we ran SPF at this level." 2028 ::= { isisSystemCounterEntry 12 } 2029 isisSysStatLSPErrors OBJECT-TYPE 2030 SYNTAX Counter32 2031 UNITS "Number of frames with errors that we have received" 2032 MAX-ACCESS read-only 2033 STATUS current 2034 DESCRIPTION 2035 "Number of LSPs with errors we have received." 2036 ::= { isisSystemCounterEntry 13 } 2038 -- isisCircuitCounterTable keeps track of events 2039 -- specific to a circuit and a level 2041 isisCircuitCounterTable OBJECT-TYPE 2042 SYNTAX SEQUENCE OF IsisCircuitCounterEntry 2043 MAX-ACCESS not-accessible 2044 STATUS current 2045 DESCRIPTION 2046 "Circuit specific counters for this 2047 Intermediate System." 2048 ::= { isisCounters 2 } 2050 isisCircuitCounterEntry OBJECT-TYPE 2051 SYNTAX IsisCircuitCounterEntry 2052 MAX-ACCESS not-accessible 2053 STATUS current 2054 DESCRIPTION 2055 "An isisCircuitCounterEntry exists for each circuit 2056 used by Integrated IS-IS on this system." 2057 INDEX { isisCircIndex, 2058 isisCircuitType } 2059 ::= { isisCircuitCounterTable 1 } 2061 IsisCircuitCounterEntry ::= SEQUENCE { 2062 isisCircuitType 2063 INTEGER, 2064 isisCircAdjChanges 2065 Counter32, 2066 isisCircNumAdj 2067 Unsigned32, 2068 isisCircInitFails 2069 Counter32, 2070 isisCircRejAdjs 2071 Counter32, 2072 isisCircIDFieldLenMismatches 2073 Counter32, 2074 isisCircMaxAreaAddrMismatches 2075 Counter32, 2076 isisCircAuthTypeFails 2077 Counter32, 2078 isisCircAuthFails 2079 Counter32, 2080 isisCircLANDesISChanges 2081 Counter32 2082 } 2084 isisCircuitType OBJECT-TYPE 2085 SYNTAX INTEGER 2086 { 2087 lanlevel1(1), 2088 lanlevel2(2), 2089 p2pcircuit(3) 2090 } 2091 MAX-ACCESS not-accessible 2092 STATUS current 2093 DESCRIPTION 2094 "What type of circuit saw these counts? 2096 The point to point Hello PDU includes 2097 both L1 and L2, and ISs form a single 2098 adjacency on point to point links. 2099 Thus we combine counts on 2100 point to point links into one group." 2101 ::= { isisCircuitCounterEntry 1 } 2103 isisCircAdjChanges OBJECT-TYPE 2104 SYNTAX Counter32 2105 MAX-ACCESS read-only 2106 STATUS current 2107 DESCRIPTION 2108 "The number of times an adjacency state change has 2109 occurred on this circuit." 2110 REFERENCE "{ISIS.aoi changesInAdjacencyState (40)}" 2111 ::= { isisCircuitCounterEntry 2 } 2113 isisCircNumAdj OBJECT-TYPE 2114 SYNTAX Unsigned32 2115 MAX-ACCESS read-only 2116 STATUS current 2117 DESCRIPTION 2118 "The number of adjacencies on this circuit." 2119 REFERENCE "{ISIS.aoi changesInAdjacencyState (40)}" 2120 ::= { isisCircuitCounterEntry 3 } 2122 isisCircInitFails OBJECT-TYPE 2123 SYNTAX Counter32 2124 MAX-ACCESS read-only 2125 STATUS current 2126 DESCRIPTION 2127 "The number of times initialization of this circuit has 2128 failed. This counts events such as PPP NCP failures. 2129 Failures to form an adjacency are counted by 2130 isisCircRejAdjs." 2131 ::= { isisCircuitCounterEntry 4 } 2133 isisCircRejAdjs OBJECT-TYPE 2134 SYNTAX Counter32 2135 MAX-ACCESS read-only 2136 STATUS current 2137 DESCRIPTION 2138 "The number of times an adjacency has been rejected on 2139 this circuit." 2140 REFERENCE "{ISIS.aoi rejectedAdjacencies (42)}" 2141 ::= { isisCircuitCounterEntry 5 } 2143 isisCircIDFieldLenMismatches OBJECT-TYPE 2144 SYNTAX Counter32 2145 UNITS "Number of frames with ID field length mismatch" 2146 MAX-ACCESS read-only 2147 STATUS current 2148 DESCRIPTION 2149 "The number of times an IS-IS control PDU with an ID 2150 field length different to that for this system has been 2151 received." 2152 REFERENCE "{ISIS.aoi iDFieldLengthMismatches (25)}" 2153 ::= { isisCircuitCounterEntry 6 } 2155 isisCircMaxAreaAddrMismatches OBJECT-TYPE 2156 SYNTAX Counter32 2157 MAX-ACCESS read-only 2158 STATUS current 2159 DESCRIPTION 2160 "The number of times an IS-IS control PDU with a 2161 max area address field different to that for this 2162 system has been received." 2163 REFERENCE "{ISIS.aoi iDFieldLengthMismatches (25)}" 2164 ::= { isisCircuitCounterEntry 7 } 2166 isisCircAuthTypeFails OBJECT-TYPE 2167 SYNTAX Counter32 2168 MAX-ACCESS read-only 2169 STATUS current 2170 DESCRIPTION 2171 "The number of times an IS-IS control PDU with 2172 an auth type field different to that for this 2173 system has been received." 2174 ::= { isisCircuitCounterEntry 8 } 2176 isisCircAuthFails OBJECT-TYPE 2177 SYNTAX Counter32 2178 MAX-ACCESS read-only 2179 STATUS current 2180 DESCRIPTION 2181 "The number of times an IS-IS control PDU with 2182 the correct auth type has failed to pass authentication 2183 validation." 2184 ::= { isisCircuitCounterEntry 9 } 2186 isisCircLANDesISChanges OBJECT-TYPE 2187 SYNTAX Counter32 2188 MAX-ACCESS read-only 2189 STATUS current 2190 DESCRIPTION 2191 "The number of times the Designated IS has changed 2192 on this circuit at this level. If the circuit is 2193 point to point, this count is zero." 2194 ::= { isisCircuitCounterEntry 10 } 2196 -- isisPacketCounterTable keeps track of the number of IS-IS 2197 -- control packets sent and received at each level 2199 isisPacketCounterTable OBJECT-TYPE 2200 SYNTAX SEQUENCE OF IsisPacketCounterEntry 2201 MAX-ACCESS not-accessible 2202 STATUS current 2203 DESCRIPTION 2204 "Information about IS-IS protocol traffic at one level 2205 on one circuit in one direction." 2206 ::= { isisCounters 3 } 2208 isisPacketCounterEntry OBJECT-TYPE 2209 SYNTAX IsisPacketCounterEntry 2210 MAX-ACCESS not-accessible 2211 STATUS current 2212 DESCRIPTION 2213 "Information about IS-IS protocol traffic at one level 2214 on one circuit in one direction." 2215 INDEX { isisCircIndex, 2216 isisPacketCountLevel, 2217 isisPacketCountDirection } 2218 ::= { isisPacketCounterTable 1 } 2220 IsisPacketCounterEntry ::= 2221 SEQUENCE { 2222 isisPacketCountLevel 2223 IsisISLevel, 2224 isisPacketCountDirection 2225 INTEGER, 2226 isisPacketCountIIHello 2227 Counter32, 2228 isisPacketCountISHello 2229 Counter32, 2230 isisPacketCountESHello 2231 Counter32, 2232 isisPacketCountLSP 2233 Counter32, 2234 isisPacketCountCSNP 2235 Counter32, 2236 isisPacketCountPSNP 2237 Counter32, 2238 isisPacketCountUnknown 2239 Counter32 2240 } 2242 isisPacketCountLevel OBJECT-TYPE 2243 SYNTAX IsisISLevel 2244 MAX-ACCESS not-accessible 2245 STATUS current 2246 DESCRIPTION 2247 "The level at which these PDU counts have been collected." 2248 ::= { isisPacketCounterEntry 1 } 2250 isisPacketCountDirection OBJECT-TYPE 2251 SYNTAX INTEGER 2252 { 2253 sending(1), 2254 receiving(2) 2255 } 2256 MAX-ACCESS not-accessible 2257 STATUS current 2258 DESCRIPTION 2259 "Were we sending or receiving these PDUs?" 2260 ::= { isisPacketCounterEntry 2 } 2262 isisPacketCountIIHello OBJECT-TYPE 2263 SYNTAX Counter32 2264 UNITS "Number of IS-IS Hellos frames seen in this direction 2265 at this level" 2266 MAX-ACCESS read-only 2267 STATUS current 2268 DESCRIPTION 2269 "The number of IS-IS Hello PDUs seen in this 2270 direction at this level. 2272 Point-to-Point IIH PDUs are counted at 2273 the lowest enabled level: at L1 on L1 or L1L2 circuits, 2274 and at L2 otherwise." 2275 REFERENCE "{ISIS.aoi iSISControlPDUsSent (43)}" 2276 ::= { isisPacketCounterEntry 3 } 2278 isisPacketCountISHello OBJECT-TYPE 2279 SYNTAX Counter32 2280 UNITS "Number of ES-IS frames seen in this direction at 2281 this level." 2282 MAX-ACCESS read-only 2283 STATUS current 2284 DESCRIPTION 2285 "The number of ES-IS Hello PDUs seen in this 2286 direction. ISH PDUs are counted at the 2287 lowest enabled level: at L1 on L1 or L1L2 2288 circuits, and at L2 otherwise." 2289 ::= { isisPacketCounterEntry 4 } 2291 isisPacketCountESHello OBJECT-TYPE 2292 SYNTAX Counter32 2293 UNITS "Number of ES Hello frames seen in this direction at 2294 this level" 2295 MAX-ACCESS read-only 2296 STATUS current 2297 DESCRIPTION 2298 "The number of ES Hello PDUs seen in this 2299 direction. ESH PDUs are counted at the 2300 lowest enabled level: at L1 on L1 or L1L2 2301 circuits, and at L2 otherwise." 2302 ::= { isisPacketCounterEntry 5 } 2304 isisPacketCountLSP OBJECT-TYPE 2305 SYNTAX Counter32 2306 UNITS "Number of IS-IS LSP frames seen in this direction at 2307 this level" 2308 MAX-ACCESS read-only 2309 STATUS current 2310 DESCRIPTION 2311 "The number of IS-IS LSPs seen in this 2312 direction at this level." 2313 REFERENCE "{ISIS.aoi iSISControlPDUsSent (43)}" 2314 ::= { isisPacketCounterEntry 6 } 2316 isisPacketCountCSNP OBJECT-TYPE 2317 SYNTAX Counter32 2318 UNITS "Number of IS-IS CSNP frames seen in this direction at 2319 this level" 2320 MAX-ACCESS read-only 2321 STATUS current 2322 DESCRIPTION 2323 "The number of IS-IS CSNPs seen in this 2324 direction at this level." 2325 REFERENCE "{ISIS.aoi iSISControlPDUsSent (43)}" 2326 ::= { isisPacketCounterEntry 7 } 2328 isisPacketCountPSNP OBJECT-TYPE 2329 SYNTAX Counter32 2330 UNITS "Number of IS-IS PSNP frames seen in this direction at 2331 this level" 2332 MAX-ACCESS read-only 2333 STATUS current 2334 DESCRIPTION 2335 "The number of IS-IS PSNPs seen in this 2336 direction at this level." 2337 REFERENCE "{ISIS.aoi iSISControlPDUsSent (43)}" 2338 ::= { isisPacketCounterEntry 8 } 2340 isisPacketCountUnknown OBJECT-TYPE 2341 SYNTAX Counter32 2342 UNITS "Number of unknown IS-IS frames seen at this level" 2343 MAX-ACCESS read-only 2344 STATUS current 2345 DESCRIPTION 2346 "The number of unknown IS-IS PDUs seen 2347 at this level." 2348 REFERENCE "{ISIS.aoi iSISControlPDUsSent (43)}" 2349 ::= { isisPacketCounterEntry 9 } 2351 -- The IS Adjacency Table 2352 -- 2353 -- Each adjacency to an IS corresponds to one entry in this 2354 -- table. 2356 isisISAdjTable OBJECT-TYPE 2357 SYNTAX SEQUENCE OF IsisISAdjEntry 2358 MAX-ACCESS not-accessible 2359 STATUS current 2360 DESCRIPTION 2361 "The table of adjacencies to Intermediate Systems." 2362 ::= { isisISAdj 1 } 2364 isisISAdjEntry OBJECT-TYPE 2365 SYNTAX IsisISAdjEntry 2366 MAX-ACCESS not-accessible 2367 STATUS current 2368 DESCRIPTION 2369 "Each entry corresponds to one adjacency to an 2370 Intermediate System on this system. 2372 Dynamically learned rows do not survive an agent reboot." 2373 INDEX { isisCircIndex, 2374 isisISAdjIndex } 2375 ::= { isisISAdjTable 1 } 2377 IsisISAdjEntry ::= 2378 SEQUENCE { 2379 isisISAdjIndex 2380 Unsigned32, 2381 isisISAdjState 2382 INTEGER, 2383 isisISAdj3WayState 2384 INTEGER, 2385 isisISAdjNeighSNPAAddress 2386 IsisOSINSAddress, 2387 isisISAdjNeighSysType 2388 INTEGER, 2389 isisISAdjNeighSysID 2390 IsisSystemID, 2391 isisISAdjNbrExtendedCircID 2392 Unsigned32, 2393 isisISAdjUsage 2394 IsisLevel, 2395 isisISAdjHoldTimer 2396 IsisUnsigned16TC, 2397 isisISAdjNeighPriority 2398 IsisISPriority, 2399 isisISAdjLastUpTime 2400 TimeStamp 2401 } 2403 isisISAdjIndex OBJECT-TYPE 2404 SYNTAX Unsigned32(1..4294967295) 2405 MAX-ACCESS not-accessible 2406 STATUS current 2407 DESCRIPTION 2408 "A unique value identifying the IS adjacency from all 2409 other such adjacencies on this circuit. This value is 2410 automatically assigned by the system when the adjacency 2411 is created." 2412 ::= { isisISAdjEntry 1 } 2413 isisISAdjState OBJECT-TYPE 2414 SYNTAX INTEGER 2415 { 2416 down (1), 2417 initializing (2), 2418 up (3), 2419 failed(4) 2420 } 2421 MAX-ACCESS read-only 2422 STATUS current 2423 DESCRIPTION 2424 "The state of the adjacency." 2425 REFERENCE "{ISIS.aoi adjacencyState (78)}" 2426 ::= { isisISAdjEntry 2 } 2428 isisISAdj3WayState OBJECT-TYPE 2429 SYNTAX INTEGER 2430 { 2431 up (0), 2432 initializing (1), 2433 down (2), 2434 failed (3) 2435 } 2436 MAX-ACCESS read-only 2437 STATUS current 2438 DESCRIPTION 2439 "The 3Way state of the adjacency. These are picked 2440 to match the historical on-the-wire representation 2441 of the 3Way state, and are not intended to match 2442 isisISAdjState." 2443 REFERENCE "{ RFC 3373 }" 2444 ::= { isisISAdjEntry 3 } 2446 isisISAdjNeighSNPAAddress OBJECT-TYPE 2447 SYNTAX IsisOSINSAddress 2448 MAX-ACCESS read-only 2449 STATUS current 2450 DESCRIPTION 2451 "The SNPA address of the neighboring system." 2452 REFERENCE "{ISIS.aoi neighbourSNPAAddress (79)}" 2453 ::= { isisISAdjEntry 4 } 2455 isisISAdjNeighSysType OBJECT-TYPE 2456 SYNTAX INTEGER 2457 { 2458 l1IntermediateSystem(1), 2459 l2IntermediateSystem(2), 2460 l1L2IntermediateSystem(3), 2461 unknown(4) 2462 } 2463 MAX-ACCESS read-only 2464 STATUS current 2465 DESCRIPTION 2466 "The type of the neighboring system." 2467 REFERENCE "{ISIS.aoi neighbourSystemType (80)}" 2468 ::= { isisISAdjEntry 5 } 2470 isisISAdjNeighSysID OBJECT-TYPE 2471 SYNTAX IsisSystemID 2472 MAX-ACCESS read-only 2473 STATUS current 2474 DESCRIPTION 2475 "The system ID of the neighboring Intermediate 2476 System." 2477 REFERENCE "{ISIS.aoi neighbourSystemIds (83)}" 2478 ::= { isisISAdjEntry 6 } 2480 isisISAdjNbrExtendedCircID OBJECT-TYPE 2481 SYNTAX Unsigned32 2482 MAX-ACCESS read-only 2483 STATUS current 2484 DESCRIPTION 2485 "The 4 byte Extended Circuit ID learned from the 2486 Neighbor during 3-way handshake, or 0." 2487 ::= { isisISAdjEntry 7 } 2489 isisISAdjUsage OBJECT-TYPE 2490 SYNTAX IsisLevel 2491 MAX-ACCESS read-only 2492 STATUS current 2493 DESCRIPTION 2494 "How is the adjacency used? On a point-to-point link, 2495 this might be level1and2, but on a LAN, the usage will 2496 be level1 on the adjacency between peers at L1, 2497 and level2 for the adjacency between peers at L2." 2498 REFERENCE "{ISIS.aoi adjacencyUsage (82)}" 2499 ::= { isisISAdjEntry 8 } 2501 isisISAdjHoldTimer OBJECT-TYPE 2502 SYNTAX IsisUnsigned16TC (1..65535) 2503 UNITS "seconds" 2504 MAX-ACCESS read-only 2505 STATUS current 2506 DESCRIPTION 2507 "The holding time in seconds for this adjacency. 2508 This value is based on received IIH PDUs and 2509 the elapsed time since receipt." 2510 REFERENCE "{ISIS.aoi holdingTimer (85)}" 2511 ::= { isisISAdjEntry 9 } 2513 isisISAdjNeighPriority OBJECT-TYPE 2514 SYNTAX IsisISPriority 2515 MAX-ACCESS read-only 2516 STATUS current 2517 DESCRIPTION 2518 "Priority of the neighboring Intermediate System for 2519 becoming the Designated Intermediate System." 2520 REFERENCE "{ISIS.aoi lANPriority (86)}" 2521 ::= { isisISAdjEntry 10 } 2523 isisISAdjLastUpTime OBJECT-TYPE 2524 SYNTAX TimeStamp 2525 MAX-ACCESS read-only 2526 STATUS current 2527 DESCRIPTION 2528 "When the adjacency most recently entered the state 'up', 2529 measured in hundredths of a second since the last 2530 re-initialization of the network management subsystem. 2531 Holds 0 if the adjacency has never been in state 'up'." 2532 ::= { isisISAdjEntry 11 } 2534 -- The IS Adjacency Area Address Table 2536 -- The IS Adjacency Area Address Table contains the set of 2537 -- Area Addresses of neighboring 2538 -- Intermediate Systems as reported in IIH PDUs. 2540 isisISAdjAreaAddrTable OBJECT-TYPE 2541 SYNTAX SEQUENCE OF IsisISAdjAreaAddrEntry 2542 MAX-ACCESS not-accessible 2543 STATUS current 2544 DESCRIPTION 2545 "This table contains the set of Area Addresses of 2546 neighboring Intermediate Systems as reported in received 2547 IIH PDUs." 2548 REFERENCE "{ISIS.aoi areaAddressesOfNeighbour (84)}" 2549 ::= { isisISAdj 2 } 2551 isisISAdjAreaAddrEntry OBJECT-TYPE 2552 SYNTAX IsisISAdjAreaAddrEntry 2553 MAX-ACCESS not-accessible 2554 STATUS current 2555 DESCRIPTION 2556 "Each entry contains one Area Address reported by a 2557 neighboring Intermediate System in its IIH PDUs. 2559 Dynamically learned rows do not survive an agent reboot." 2560 INDEX { isisCircIndex, 2561 isisISAdjIndex, 2562 isisISAdjAreaAddrIndex } 2563 ::= { isisISAdjAreaAddrTable 1 } 2565 IsisISAdjAreaAddrEntry ::= 2566 SEQUENCE { 2567 isisISAdjAreaAddrIndex 2568 Unsigned32, 2569 isisISAdjAreaAddress 2570 IsisOSINSAddress 2571 } 2573 isisISAdjAreaAddrIndex OBJECT-TYPE 2574 SYNTAX Unsigned32(1..4294967295) 2575 MAX-ACCESS not-accessible 2576 STATUS current 2577 DESCRIPTION 2578 "An index for the areas associated with one neighbor. 2579 This provides a simple way to walk the table." 2580 ::= { isisISAdjAreaAddrEntry 1 } 2582 isisISAdjAreaAddress OBJECT-TYPE 2583 SYNTAX IsisOSINSAddress 2584 MAX-ACCESS read-only 2585 STATUS current 2586 DESCRIPTION 2587 "One Area Address as reported in IIH PDUs received from 2588 the neighbor." 2589 ::= { isisISAdjAreaAddrEntry 2 } 2591 -- The IS Adjacency IP Address Table 2593 -- The IS Adjacency IP Address Table contains the 2594 -- set of IP Addresses of neighboring Intermediate Systems 2595 -- as reported in received IIH PDUs. 2597 isisISAdjIPAddrTable OBJECT-TYPE 2598 SYNTAX SEQUENCE OF IsisISAdjIPAddrEntry 2599 MAX-ACCESS not-accessible 2600 STATUS current 2601 DESCRIPTION 2602 "This table contains the set of IP Addresses of 2603 neighboring Intermediate Systems as reported in received 2604 IIH PDUs." 2606 ::= { isisISAdj 3 } 2608 isisISAdjIPAddrEntry OBJECT-TYPE 2609 SYNTAX IsisISAdjIPAddrEntry 2610 MAX-ACCESS not-accessible 2611 STATUS current 2612 DESCRIPTION 2613 "Each entry contains one IP Address reported by a 2614 neighboring Intermediate System in its IIH PDUs. 2616 Dynamically learned rows do not survive an agent reboot." 2617 INDEX { isisCircIndex, 2618 isisISAdjIndex, 2619 isisISAdjIPAddrIndex 2620 } 2621 ::= { isisISAdjIPAddrTable 1 } 2623 IsisISAdjIPAddrEntry ::= 2624 SEQUENCE { 2625 isisISAdjIPAddrIndex 2626 Unsigned32, 2627 isisISAdjIPAddrType 2628 InetAddressType, 2629 isisISAdjIPAddrAddress 2630 InetAddress 2631 } 2633 isisISAdjIPAddrIndex OBJECT-TYPE 2634 SYNTAX Unsigned32(1..4294967295) 2635 MAX-ACCESS not-accessible 2636 STATUS current 2637 DESCRIPTION 2638 "An index to this table which identifies the IP addresses 2639 to which this entry belongs." 2640 ::= { isisISAdjIPAddrEntry 1 } 2642 isisISAdjIPAddrType OBJECT-TYPE 2643 SYNTAX InetAddressType 2644 MAX-ACCESS read-only 2645 STATUS current 2646 DESCRIPTION 2647 "The type of one IP Address as reported in IIH PDUs 2648 received from the neighbor." 2649 ::= { isisISAdjIPAddrEntry 2 } 2651 isisISAdjIPAddrAddress OBJECT-TYPE 2652 SYNTAX InetAddress 2653 MAX-ACCESS read-only 2654 STATUS current 2655 DESCRIPTION 2656 "One IP Address as reported in IIH PDUs received from the 2657 neighbor. 2659 The type of this address is determined by the value of 2660 the isisISAdjIPAddrType object." 2661 ::= { isisISAdjIPAddrEntry 3 } 2663 -- The IS Adjacency Protocol Supported Table 2664 -- 2665 -- The IS Adjacency Protocol Supported Table contains the set of 2666 -- protocols supported by neighboring 2667 -- Intermediate Systems as reported in received IIH PDUs. 2669 isisISAdjProtSuppTable OBJECT-TYPE 2670 SYNTAX SEQUENCE OF IsisISAdjProtSuppEntry 2671 MAX-ACCESS not-accessible 2672 STATUS current 2673 DESCRIPTION 2674 "This table contains the set of protocols supported by 2675 neighboring Intermediate Systems as reported in received 2676 IIH PDUs." 2677 ::= { isisISAdj 4 } 2679 isisISAdjProtSuppEntry OBJECT-TYPE 2680 SYNTAX IsisISAdjProtSuppEntry 2681 MAX-ACCESS not-accessible 2682 STATUS current 2683 DESCRIPTION 2684 "Each entry contains one protocol supported by a 2685 neighboring Intermediate System as reported in its IIH 2686 PDUs. 2688 Dynamically learned rows do not survive an agent reboot." 2689 INDEX { isisCircIndex, 2690 isisISAdjIndex, 2691 isisISAdjProtSuppProtocol } 2692 ::= { isisISAdjProtSuppTable 1 } 2694 IsisISAdjProtSuppEntry ::= 2695 SEQUENCE { 2696 isisISAdjProtSuppProtocol 2697 IsisSupportedProtocol 2698 } 2700 isisISAdjProtSuppProtocol OBJECT-TYPE 2701 SYNTAX IsisSupportedProtocol 2702 MAX-ACCESS read-only 2703 STATUS current 2704 DESCRIPTION 2705 "One supported protocol as reported in IIH PDUs received 2706 from the neighbor." 2707 ::= { isisISAdjProtSuppEntry 1 } 2709 -- The Reachable Address Group 2710 -- 2711 -- The Reachable Address Table 2712 -- Each entry records information about a reachable address 2713 -- (NSAP or address prefix) manually configured on the system 2714 -- or learned through another protocol. 2716 isisRATable OBJECT-TYPE 2717 SYNTAX SEQUENCE OF IsisRAEntry 2718 MAX-ACCESS not-accessible 2719 STATUS current 2720 DESCRIPTION 2721 "The table of Reachable Addresses to NSAPs or Address 2722 Prefixes." 2723 ::= { isisReachAddr 1 } 2725 isisRAEntry OBJECT-TYPE 2726 SYNTAX IsisRAEntry 2727 MAX-ACCESS not-accessible 2728 STATUS current 2729 DESCRIPTION 2730 "Each entry defines a configured Reachable Address 2731 to a NSAP or Address Prefix. 2733 Dynamically created rows MUST survive an agent reboot." 2734 INDEX { isisCircIndex, 2735 isisRAIndex } 2736 ::= { isisRATable 1 } 2738 IsisRAEntry ::= 2739 SEQUENCE { 2740 isisRAIndex 2741 Unsigned32, 2742 isisRAExistState 2743 RowStatus, 2744 isisRAAdminState 2745 IsisAdminState, 2746 isisRAAddrPrefix 2747 IsisOSINSAddress, 2748 isisRAMapType 2749 INTEGER, 2751 isisRAMetric 2752 IsisDefaultMetric, 2753 isisRAMetricType 2754 IsisMetricType, 2755 isisRASNPAAddress 2756 IsisOSINSAddress, 2757 isisRASNPAMask 2758 IsisOSINSAddress, 2759 isisRASNPAPrefix 2760 IsisOSINSAddress, 2761 isisRAType 2762 INTEGER 2763 } 2765 isisRAIndex OBJECT-TYPE 2766 SYNTAX Unsigned32(1..4294967295) 2767 MAX-ACCESS not-accessible 2768 STATUS current 2769 DESCRIPTION 2770 "The identifier for this isisRAEntry. This value must be 2771 unique amongst all Reachable Addresses on the same parent 2772 Circuit." 2773 ::= { isisRAEntry 1 } 2775 isisRAExistState OBJECT-TYPE 2776 SYNTAX RowStatus 2777 MAX-ACCESS read-create 2778 STATUS current 2779 DESCRIPTION 2780 "The existence state of this Reachable Address. This 2781 object follows the ManualOrAutomatic behaviors. Support 2782 for 'createAndWait' and 'notInService' is not required. 2784 A row entry cannot be modified when the value of this 2785 object is 'active'." 2786 ::= { isisRAEntry 2 } 2788 isisRAAdminState OBJECT-TYPE 2789 SYNTAX IsisAdminState 2790 MAX-ACCESS read-create 2791 STATUS current 2792 DESCRIPTION 2793 "The administrative state of the Reachable Address. This 2794 object follows the ManualOrAutomatic behaviors." 2795 DEFVAL { off } 2796 ::= { isisRAEntry 3 } 2798 isisRAAddrPrefix OBJECT-TYPE 2799 SYNTAX IsisOSINSAddress 2800 MAX-ACCESS read-create 2801 STATUS current 2802 DESCRIPTION 2803 "The destination of this Reachable Address. This is an 2804 Address Prefix. This object follows the 2805 ReplaceOnlyWhileDisabled and ManualOrAutomatic 2806 behaviors." 2807 REFERENCE "{ISIS.aoi addressPrefix (98)}" 2808 ::= { isisRAEntry 4 } 2810 isisRAMapType OBJECT-TYPE 2811 SYNTAX INTEGER 2812 { 2813 none (1), 2814 explicit (2), 2815 extractIDI (3), 2816 extractDSP (4) 2817 } 2818 MAX-ACCESS read-create 2819 STATUS current 2820 DESCRIPTION 2821 "The type of mapping to be employed to ascertain the SNPA 2822 Address which should be used in forwarding PDUs for this 2823 Reachable Address prefix. This object follows the 2824 ManualOrAutomatic behavior. The following values of 2825 mapping type are defined: 2827 none: The mapping is null because the neighbor SNPA is 2828 implicit by nature of the subnetwork (e.g. a 2829 point-to-point linkage). 2831 explicit: The subnetwork addresses in the object 2832 isisRASNPAAddress is to be used. 2834 extractIDI: The SNPA is embedded in the IDI of 2835 the destination NSAP Address. The mapping 2836 algorithm extracts the SNPA to be used 2837 according to the format and encoding rules of 2838 ISO8473/Add2. This SNPA extraction algorithm can 2839 be used in conjunction with Reachable Address 2840 prefixes from the X.121, F.69, E.163 and E.164 2841 addressing subdomains. 2843 extractDSP: All, or a suffix, of the SNPA is embedded 2844 in the DSP of the destination address. This SNPA 2845 extraction algorithm extracts the embedded 2846 subnetwork addressing information by performing a 2847 logical AND of the isisRASNPAMask object value 2848 with the destination address. The part of the 2849 SNPA extracted from the destination NSAP is 2850 appended to the isisRASNPAPrefix object value to 2851 form the next hop subnetwork addressing 2852 information." 2854 REFERENCE "{ISO10589-ISIS.aoi mappingType (107)}" 2855 ::= { isisRAEntry 5 } 2857 isisRAMetric OBJECT-TYPE 2858 SYNTAX IsisDefaultMetric 2859 MAX-ACCESS read-create 2860 STATUS current 2861 DESCRIPTION 2862 "The metric value for reaching the specified 2863 prefix over this circuit. This object follows the 2864 ManualOrAutomatic behavior." 2865 REFERENCE "{ISIS.aoi DefaultMetric (99)}" 2866 DEFVAL { 20 } 2867 ::= { isisRAEntry 6 } 2869 isisRAMetricType OBJECT-TYPE 2870 SYNTAX IsisMetricType 2871 MAX-ACCESS read-create 2872 STATUS current 2873 DESCRIPTION 2874 "Indicates whether the metric is internal or 2875 external. This object follows the ManualOrAutomatic 2876 behavior." 2877 REFERENCE "{ISIS.aoi DefaultMetricType (103)}" 2878 DEFVAL { internal } 2879 ::= { isisRAEntry 7 } 2881 isisRASNPAAddress OBJECT-TYPE 2882 SYNTAX IsisOSINSAddress 2883 MAX-ACCESS read-create 2884 STATUS current 2885 DESCRIPTION 2886 "The SNPA Address to which a PDU may be forwarded in 2887 order to reach a destination which matches the address 2888 prefix of the Reachable Address. This object follows the 2889 ManualOrAutomatic behavior." 2890 REFERENCE "{ISIS.aoi sNPAAddresses (109)}" 2891 -- Note only one address may be specified per Reachable Address 2892 -- in the MIB 2893 DEFVAL { ''H } 2894 ::= { isisRAEntry 8 } 2895 isisRASNPAMask OBJECT-TYPE 2896 SYNTAX IsisOSINSAddress 2897 MAX-ACCESS read-create 2898 STATUS current 2899 DESCRIPTION 2900 "A bit mask with 1 bits indicating the positions in the 2901 effective destination address from which embedded SNPA 2902 information is to be extracted. For the extraction the 2903 first octet of the isisRASNPAMask object value is aligned 2904 with the first octet (AFI) of the NSAP Address. If the 2905 isisRASNPAMask object value and NSAP Address are of 2906 different lengths, the shorter of the two is logically 2907 padded with zeros before performing the extraction. This 2908 object follows the ManualOrAutomatic behavior." 2909 REFERENCE "{ISIS.aoi sNPAMask (122)}" 2910 DEFVAL { '00'H } 2911 ::= { isisRAEntry 9 } 2913 isisRASNPAPrefix OBJECT-TYPE 2914 SYNTAX IsisOSINSAddress 2915 MAX-ACCESS read-create 2916 STATUS current 2917 DESCRIPTION 2918 "A fixed SNPA prefix for use when the isisRAMapType is 2919 extractDSP. The SNPA Address to use is formed by 2920 concatenating the fixed SNPA prefix with a variable SNPA 2921 part that is extracted from the effective destination 2922 address. For Reachable Address prefixes in which the 2923 entire SNPA is embedded in the DSP the SNPA Prefix shall 2924 be null. This object follows the ManualOrAutomatic 2925 behavior." 2926 REFERENCE "{ISIS.aoi sNPAPrefix (123)}" 2927 DEFVAL { '00'H } 2928 ::= { isisRAEntry 10 } 2930 isisRAType OBJECT-TYPE 2931 SYNTAX INTEGER 2932 { 2933 manual (1), 2934 automatic (2) 2935 } 2936 MAX-ACCESS read-create 2937 STATUS current 2938 DESCRIPTION 2939 "The type of Reachable address. Those of type 2940 manual are created by the network manager. Those 2941 of type automatic are created through propagation 2942 of routing information from another routing 2943 protocol (eg. IDRP). " 2944 DEFVAL {manual} 2945 ::= {isisRAEntry 11 } 2947 -- The IP Reachable Address Table 2949 -- Each entry records information about one IP reachable 2950 -- address manually configured on this system or learned from 2951 -- another protocol. 2953 isisIPRATable OBJECT-TYPE 2954 SYNTAX SEQUENCE OF IsisIPRAEntry 2955 MAX-ACCESS not-accessible 2956 STATUS current 2957 DESCRIPTION 2958 "The table of IP Reachable Addresses to networks, 2959 subnetworks or hosts either manually configured or 2960 learned from another protocol." 2961 ::= { isisIPReachAddr 1 } 2963 isisIPRAEntry OBJECT-TYPE 2964 SYNTAX IsisIPRAEntry 2965 MAX-ACCESS not-accessible 2966 STATUS current 2967 DESCRIPTION 2968 "Each entry defines an IP Reachable Address to a network, 2969 subnetwork or host. 2971 Each IP Reachable Address may have multiple entries in the 2972 table, one for each equal cost path to the reachable 2973 address. 2975 Dynamically created rows MUST survive an agent reboot. 2977 Implementers need to be aware that if the total number 2978 of elements (octets or sub-identifiers) in 2979 isisIPRADestr, isisIPRADestPrefixLen, and 2980 isisIPRANextHopIndex is too great then OIDs of column 2981 instances in this table will have more than 128 2982 subidentifiers and cannot be accessed using SNMPv1, 2983 SNMPv2c, or SNMPv3." 2984 INDEX { isisSysLevelIndex, 2985 isisIPRADestType, 2986 isisIPRADest, 2987 isisIPRADestPrefixLen, 2988 isisIPRANextHopIndex } 2989 ::= { isisIPRATable 1 } 2990 IsisIPRAEntry ::= 2991 SEQUENCE { 2992 isisIPRADestType 2993 InetAddressType, 2994 isisIPRADest 2995 InetAddress, 2996 isisIPRADestPrefixLen 2997 InetAddressPrefixLength, 2998 isisIPRANextHopIndex 2999 Unsigned32, 3000 isisIPRANextHopType 3001 InetAddressType, 3002 isisIPRANextHop 3003 InetAddress, 3004 isisIPRAType 3005 INTEGER, 3006 isisIPRAExistState 3007 RowStatus, 3008 isisIPRAAdminState 3009 IsisAdminState, 3010 isisIPRAMetric 3011 IsisDefaultMetric, 3012 isisIPRAMetricType 3013 IsisMetricType, 3014 isisIPRAFullMetric 3015 IsisFullMetric, 3016 isisIPRASNPAAddress 3017 IsisOSINSAddress, 3018 isisIPRASourceType 3019 INTEGER 3020 } 3022 isisIPRADestType OBJECT-TYPE 3023 SYNTAX InetAddressType 3024 MAX-ACCESS not-accessible 3025 STATUS current 3026 DESCRIPTION 3027 "The type of this IP Reachable Address." 3028 ::= { isisIPRAEntry 1 } 3030 isisIPRADest OBJECT-TYPE 3031 SYNTAX InetAddress 3032 MAX-ACCESS not-accessible 3033 STATUS current 3034 DESCRIPTION 3035 "The destination of this IP Reachable Address. This is 3036 either a network address, subnetwork address or host 3037 address. 3039 The type of this address is determined by the value of 3040 the isisIPRADestType object." 3042 ::= { isisIPRAEntry 2 } 3044 isisIPRADestPrefixLen OBJECT-TYPE 3045 SYNTAX InetAddressPrefixLength 3046 MAX-ACCESS not-accessible 3047 STATUS current 3048 DESCRIPTION 3049 "The length of the IP Netmask for Reachability Address. 3051 The values for the index objects isisIPRADest and 3052 isisIPRADestPrefixLen must be consistent. When the value 3053 of isisIPRADest (excluding the zone index, if one 3054 is present) is x, then the bitwise logical-AND 3055 of x with the value of the mask formed from the 3056 corresponding index object isisIPRADestPrefixLen MUST be 3057 equal to x. If not, then the index pair is not 3058 consistent and an inconsistentName error must be 3059 returned on SET or CREATE requests." 3060 ::= { isisIPRAEntry 3 } 3062 isisIPRANextHopIndex OBJECT-TYPE 3063 SYNTAX Unsigned32(1..4294967295) 3064 MAX-ACCESS not-accessible 3065 STATUS current 3066 DESCRIPTION 3067 "Index of next hop. Used when there are multiple Equal 3068 Cost Multipath alternatives for the same destination." 3069 ::= { isisIPRAEntry 4 } 3071 isisIPRANextHopType OBJECT-TYPE 3072 SYNTAX InetAddressType 3073 MAX-ACCESS read-create 3074 STATUS current 3075 DESCRIPTION 3076 "The type of the IP next hop address." 3077 ::= { isisIPRAEntry 5 } 3079 isisIPRANextHop OBJECT-TYPE 3080 SYNTAX InetAddress 3081 MAX-ACCESS read-create 3082 STATUS current 3083 DESCRIPTION 3084 "The IP next hop to this destination. 3086 The type of this address is determined by the value of 3087 the isisIPRANextHopType object." 3088 ::= { isisIPRAEntry 6 } 3090 isisIPRAType OBJECT-TYPE 3091 SYNTAX INTEGER 3092 { 3093 manual (1), 3094 automatic (2) 3095 } 3096 MAX-ACCESS read-create 3097 STATUS current 3098 DESCRIPTION 3099 "The type of this IP Reachable Address. Those of type 3100 manual are created by the network manager. Those of type 3101 automatic are created through propagation of routing 3102 information from another routing protocol. This object 3103 follows the ManualOrAutomatic behavior." 3104 ::= { isisIPRAEntry 7 } 3106 isisIPRAExistState OBJECT-TYPE 3107 SYNTAX RowStatus 3108 MAX-ACCESS read-create 3109 STATUS current 3110 DESCRIPTION 3111 "The state of this IP Reachable Address. This object 3112 follows the ExistenceState and ManualOrAutomatic 3113 behaviors. Support for 'createAndWait' and 3114 'notInService' is not required. 3116 A row entry cannot be modified when the value of this 3117 object is 'active'." 3118 ::= { isisIPRAEntry 8 } 3120 isisIPRAAdminState OBJECT-TYPE 3121 SYNTAX IsisAdminState 3122 MAX-ACCESS read-create 3123 STATUS current 3124 DESCRIPTION 3125 "The administrative state of the IP Reachable Address. This 3126 object follows the IsisAdminState and ManualOrAutomatic 3127 behaviors." 3128 DEFVAL { off } 3129 ::= { isisIPRAEntry 9 } 3131 isisIPRAMetric OBJECT-TYPE 3132 SYNTAX IsisDefaultMetric 3133 MAX-ACCESS read-create 3134 STATUS current 3135 DESCRIPTION 3136 "The metric value for reaching the specified 3137 destination over this circuit. This object follows the 3138 ManualOrAutomatic behavior." 3139 DEFVAL { 10 } 3140 ::= { isisIPRAEntry 10 } 3142 isisIPRAMetricType OBJECT-TYPE 3143 SYNTAX IsisMetricType 3144 MAX-ACCESS read-create 3145 STATUS current 3146 DESCRIPTION 3147 "Indicates whether the metric is internal or 3148 external. This object follows the ManualOrAutomatic 3149 behavior." 3150 DEFVAL { internal } 3151 ::= { isisIPRAEntry 11 } 3153 isisIPRAFullMetric OBJECT-TYPE 3154 SYNTAX IsisFullMetric 3155 MAX-ACCESS read-create 3156 STATUS current 3157 DESCRIPTION 3158 "The wide metric value for reaching the specified 3159 destination over this circuit. This object follows the 3160 ManualOrAutomatic behavior." 3161 DEFVAL { 10 } 3162 ::= { isisIPRAEntry 12 } 3164 isisIPRASNPAAddress OBJECT-TYPE 3165 SYNTAX IsisOSINSAddress 3166 MAX-ACCESS read-create 3167 STATUS current 3168 DESCRIPTION 3169 "The SNPA Address to which a PDU may be forwarded in 3170 order to reach a destination which matches this IP 3171 Reachable Address. This object follows the 3172 ManualOrAutomatic behavior." 3173 DEFVAL { ''H } 3174 ::= { isisIPRAEntry 13 } 3176 isisIPRASourceType OBJECT-TYPE 3177 SYNTAX INTEGER 3178 { 3179 static (1), 3180 direct (2), 3181 ospfv2 (3), 3182 ospfv3 (4), 3183 isis (5), 3184 rip (6), 3185 igrp (7), 3186 eigrp (8), 3187 bgp (9), 3188 other (10) 3189 } 3190 MAX-ACCESS read-only 3191 STATUS current 3192 DESCRIPTION 3193 "The origin of this route." 3194 ::= { isisIPRAEntry 14 } 3196 -- The LSP Database Table 3197 -- 3198 -- The first table provides Summary Information about LSPs 3199 -- The next table provides a complete record 3201 isisLSPSummaryTable OBJECT-TYPE 3202 SYNTAX SEQUENCE OF IsisLSPSummaryEntry 3203 MAX-ACCESS not-accessible 3204 STATUS current 3205 DESCRIPTION 3206 "The table of LSP Headers." 3207 ::= { isisLSPDataBase 1 } 3209 isisLSPSummaryEntry OBJECT-TYPE 3210 SYNTAX IsisLSPSummaryEntry 3211 MAX-ACCESS not-accessible 3212 STATUS current 3213 DESCRIPTION 3214 "Each entry provides a summary describing an 3215 LSP currently stored in the system. 3217 Dynamically learned rows will not survive an 3218 agent reboot." 3219 INDEX { isisLSPLevel, 3220 isisLSPID } 3221 ::= { isisLSPSummaryTable 1 } 3223 IsisLSPSummaryEntry ::= 3224 SEQUENCE { 3225 isisLSPLevel 3226 IsisISLevel, 3227 isisLSPID 3228 IsisLinkStatePDUID, 3229 isisLSPSeq 3230 Unsigned32, 3232 isisLSPZeroLife 3233 TruthValue, 3234 isisLSPChecksum 3235 IsisUnsigned16TC, 3236 isisLSPLifetimeRemain 3237 IsisUnsigned16TC, 3238 isisLSPPDULength 3239 IsisUnsigned16TC, 3240 isisLSPAttributes 3241 IsisUnsigned8TC 3242 } 3244 isisLSPLevel OBJECT-TYPE 3245 SYNTAX IsisISLevel 3246 MAX-ACCESS not-accessible 3247 STATUS current 3248 DESCRIPTION 3249 "At which level does this LSP appear?" 3250 ::= { isisLSPSummaryEntry 1 } 3252 isisLSPID OBJECT-TYPE 3253 SYNTAX IsisLinkStatePDUID 3254 MAX-ACCESS not-accessible 3255 STATUS current 3256 DESCRIPTION 3257 "The 8 byte LSP ID for this Link State PDU." 3258 ::= { isisLSPSummaryEntry 2 } 3260 isisLSPSeq OBJECT-TYPE 3261 SYNTAX Unsigned32 3262 MAX-ACCESS read-only 3263 STATUS current 3264 DESCRIPTION 3265 "The sequence number for this LSP." 3266 ::= { isisLSPSummaryEntry 3 } 3268 isisLSPZeroLife OBJECT-TYPE 3269 SYNTAX TruthValue 3270 MAX-ACCESS read-only 3271 STATUS current 3272 DESCRIPTION 3273 "Is this LSP being purged by this System?" 3274 ::= { isisLSPSummaryEntry 4 } 3276 isisLSPChecksum OBJECT-TYPE 3277 SYNTAX IsisUnsigned16TC 3278 MAX-ACCESS read-only 3279 STATUS current 3280 DESCRIPTION 3281 "The 16 bit Fletcher Checksum for this LSP." 3282 ::= { isisLSPSummaryEntry 5 } 3284 isisLSPLifetimeRemain OBJECT-TYPE 3285 SYNTAX IsisUnsigned16TC 3286 UNITS "seconds" 3287 MAX-ACCESS read-only 3288 STATUS current 3289 DESCRIPTION 3290 "The remaining lifetime in seconds for this LSP." 3291 ::= { isisLSPSummaryEntry 6 } 3293 isisLSPPDULength OBJECT-TYPE 3294 SYNTAX IsisUnsigned16TC 3295 MAX-ACCESS read-only 3296 STATUS current 3297 DESCRIPTION 3298 "The length of this LSP." 3299 ::= { isisLSPSummaryEntry 7 } 3301 isisLSPAttributes OBJECT-TYPE 3302 SYNTAX IsisUnsigned8TC 3303 MAX-ACCESS read-only 3304 STATUS current 3305 DESCRIPTION 3306 "Flags carried by the LSP." 3307 ::= { isisLSPSummaryEntry 8 } 3309 -- LSP Table 3310 -- 3311 -- The full LSP as a sequence of {Type, Len, Value} tuples 3312 -- Since the underlying LSP may have changed while downloading 3313 -- TLVs, we provide the Sequence number and Checksum for each 3314 -- LSP TLV, so the network manager may verify that they are 3315 -- still working on the same version of the LSP. 3317 isisLSPTLVTable OBJECT-TYPE 3318 SYNTAX SEQUENCE OF IsisLSPTLVEntry 3319 MAX-ACCESS not-accessible 3320 STATUS current 3321 DESCRIPTION 3322 "The table of LSPs in the database." 3323 ::= { isisLSPDataBase 2 } 3325 isisLSPTLVEntry OBJECT-TYPE 3326 SYNTAX IsisLSPTLVEntry 3327 MAX-ACCESS not-accessible 3328 STATUS current 3329 DESCRIPTION 3330 "Each entry describes a TLV within 3331 an LSP current stored in the system. 3333 Dynamically learned rows will not survive an 3334 agent reboot." 3335 INDEX { isisLSPLevel, 3336 isisLSPID, 3337 isisLSPTLVIndex } 3338 ::= { isisLSPTLVTable 1 } 3340 IsisLSPTLVEntry ::= 3341 SEQUENCE { 3342 isisLSPTLVIndex 3343 Unsigned32, 3344 isisLSPTLVSeq 3345 Unsigned32, 3346 isisLSPTLVChecksum 3347 IsisUnsigned16TC, 3348 isisLSPTLVType 3349 IsisUnsigned8TC, 3350 isisLSPTLVLen 3351 IsisUnsigned8TC, 3352 isisLSPTLVValue 3353 OCTET STRING 3354 } 3356 isisLSPTLVIndex OBJECT-TYPE 3357 SYNTAX Unsigned32(1..4294967295) 3358 MAX-ACCESS not-accessible 3359 STATUS current 3360 DESCRIPTION 3361 "The index of this TLV in the LSP. The first TLV has 3362 index 1 and the Nth TLV has an index of N." 3363 ::= { isisLSPTLVEntry 1 } 3365 isisLSPTLVSeq OBJECT-TYPE 3366 SYNTAX Unsigned32 3367 MAX-ACCESS read-only 3368 STATUS current 3369 DESCRIPTION 3370 "The sequence number for this LSP." 3371 ::= { isisLSPTLVEntry 2 } 3373 isisLSPTLVChecksum OBJECT-TYPE 3374 SYNTAX IsisUnsigned16TC 3375 MAX-ACCESS read-only 3376 STATUS current 3377 DESCRIPTION 3378 "The 16 bit Fletcher Checksum for this LSP." 3379 ::= { isisLSPTLVEntry 3 } 3381 isisLSPTLVType OBJECT-TYPE 3382 SYNTAX IsisUnsigned8TC 3383 MAX-ACCESS read-only 3384 STATUS current 3385 DESCRIPTION 3386 "The type of this TLV." 3387 ::= { isisLSPTLVEntry 4 } 3389 isisLSPTLVLen OBJECT-TYPE 3390 SYNTAX IsisUnsigned8TC 3391 MAX-ACCESS read-only 3392 STATUS current 3393 DESCRIPTION 3394 "The length of this TLV." 3395 ::= { isisLSPTLVEntry 5 } 3397 isisLSPTLVValue OBJECT-TYPE 3398 SYNTAX OCTET STRING (SIZE(0..255)) 3399 MAX-ACCESS read-only 3400 STATUS current 3401 DESCRIPTION 3402 "The value of this TLV." 3403 ::= { isisLSPTLVEntry 6 } 3405 -- The IS-IS Notification Table 3407 -- The IS-IS Notification Table records fields that are 3408 -- required for notifications 3410 isisNotificationEntry OBJECT IDENTIFIER 3411 ::= { isisNotification 1 } 3413 isisNotificationSysLevelIndex OBJECT-TYPE 3414 SYNTAX IsisLevel 3415 MAX-ACCESS accessible-for-notify 3416 STATUS current 3417 DESCRIPTION 3418 "The system level for this notification." 3419 ::= { isisNotificationEntry 1 } 3421 isisNotificationCircIfIndex OBJECT-TYPE 3422 SYNTAX Unsigned32 (1..2147483647) 3423 MAX-ACCESS accessible-for-notify 3424 STATUS current 3425 DESCRIPTION 3426 "The identifier of this circuit relevant to 3427 this Notification." 3428 ::= { isisNotificationEntry 2 } 3430 isisPduLspId OBJECT-TYPE 3431 SYNTAX IsisLinkStatePDUID 3432 MAX-ACCESS accessible-for-notify 3433 STATUS current 3434 DESCRIPTION 3435 "An Octet String that uniquely identifies 3436 a Link State PDU." 3437 ::= { isisNotificationEntry 3 } 3439 isisPduFragment OBJECT-TYPE 3440 SYNTAX IsisPDUHeader 3441 MAX-ACCESS accessible-for-notify 3442 STATUS current 3443 DESCRIPTION 3444 "Holds up to 64 initial bytes of a PDU that 3445 triggered the notification." 3446 ::= { isisNotificationEntry 4 } 3448 isisPduFieldLen OBJECT-TYPE 3449 SYNTAX IsisUnsigned8TC 3450 MAX-ACCESS accessible-for-notify 3451 STATUS current 3452 DESCRIPTION 3453 "Holds the System ID length reported in PDU we received." 3454 ::= { isisNotificationEntry 5 } 3456 isisPduMaxAreaAddress OBJECT-TYPE 3457 SYNTAX IsisUnsigned8TC 3458 MAX-ACCESS accessible-for-notify 3459 STATUS current 3460 DESCRIPTION 3461 "Holds the Max Area Addresses reported in a PDU 3462 we received." 3463 ::= { isisNotificationEntry 6 } 3465 isisPduProtocolVersion OBJECT-TYPE 3466 SYNTAX IsisUnsigned8TC 3467 MAX-ACCESS accessible-for-notify 3468 STATUS current 3469 DESCRIPTION 3470 "Holds the Protocol version reported in PDU we received." 3472 ::= { isisNotificationEntry 7 } 3474 isisPduLspSize OBJECT-TYPE 3475 SYNTAX Unsigned32 (0..2147483647) 3476 MAX-ACCESS accessible-for-notify 3477 STATUS current 3478 DESCRIPTION 3479 "Holds the size of LSP we received that is too 3480 big to forward." 3481 ::= { isisNotificationEntry 8 } 3483 isisPduOriginatingBufferSize OBJECT-TYPE 3484 SYNTAX IsisUnsigned16TC (0..16000) 3485 MAX-ACCESS accessible-for-notify 3486 STATUS current 3487 DESCRIPTION 3488 "Holds the size of isisSysLevelOrigLSPBuffSize advertised 3489 by the peer in the originatingLSPBufferSize TLV. 3490 If the peer does not advertise this TLV, this 3491 value is set to 0." 3492 ::= { isisNotificationEntry 9 } 3494 isisPduBufferSize OBJECT-TYPE 3495 SYNTAX IsisUnsigned16TC (0..16000) 3496 MAX-ACCESS accessible-for-notify 3497 STATUS current 3498 DESCRIPTION 3499 "Holds the size of LSP received from peer." 3500 ::= { isisNotificationEntry 10 } 3502 isisPduProtocolsSupported OBJECT-TYPE 3503 SYNTAX OCTET STRING (SIZE(0..255)) 3504 MAX-ACCESS accessible-for-notify 3505 STATUS current 3506 DESCRIPTION 3507 "The list of protocols supported by an 3508 adjacent system. This may be empty." 3509 ::= { isisNotificationEntry 11 } 3511 isisAdjState OBJECT-TYPE 3512 SYNTAX INTEGER 3513 { 3514 down (1), 3515 initializing (2), 3516 up (3), 3517 failed(4) 3518 } 3520 MAX-ACCESS accessible-for-notify 3521 STATUS current 3522 DESCRIPTION 3523 "The current state of an adjacency." 3524 ::= { isisNotificationEntry 12 } 3526 isisErrorOffset OBJECT-TYPE 3527 SYNTAX Unsigned32 3528 MAX-ACCESS accessible-for-notify 3529 STATUS current 3530 DESCRIPTION 3531 "An offset to a problem in a PDU. If the problem 3532 is a malformed TLV, this points to the beginning 3533 of the TLV. If the problem is in the header, this 3534 points to the byte that is suspicious." 3535 ::= { isisNotificationEntry 13 } 3537 isisErrorTLVType OBJECT-TYPE 3538 SYNTAX Unsigned32 (0..255) 3539 MAX-ACCESS accessible-for-notify 3540 STATUS current 3541 DESCRIPTION 3542 "The type for a malformed TLV." 3543 ::= { isisNotificationEntry 14 } 3545 isisNotificationAreaAddress OBJECT-TYPE 3546 SYNTAX IsisOSINSAddress 3547 MAX-ACCESS accessible-for-notify 3548 STATUS current 3549 DESCRIPTION 3550 "An Area Address." 3551 ::= { isisNotificationEntry 15 } 3553 -- Notification definitions 3554 -- 3555 -- Note that notifications can be disabled by setting 3556 -- isisSysNotificationEnable false 3558 isisDatabaseOverload NOTIFICATION-TYPE 3559 OBJECTS { 3560 isisNotificationSysLevelIndex, 3561 isisSysLevelState 3562 } 3563 STATUS current 3564 DESCRIPTION 3565 "This notification is generated when the system 3566 enters or leaves the Overload state. The number 3567 of times this has be generated and cleared is kept 3568 track of by isisSysStatLSPDbaseOloads." 3569 ::= { isisNotifications 1 } 3571 isisManualAddressDrops NOTIFICATION-TYPE 3572 OBJECTS { 3573 isisNotificationAreaAddress 3574 } 3575 STATUS current 3576 DESCRIPTION 3577 "This notification is generated when one of the 3578 manual areaAddresses assigned to this system is 3579 ignored when computing routes. The object 3580 isisNotificationAreaAddress describes the area that 3581 has been dropped. 3583 The number of times this event has been generated 3584 is counted by isisSysStatManAddrDropFromAreas. 3586 The agent must throttle the generation of 3587 consecutive isisManualAddressDrops notifications 3588 so that there is at least a 5-second gap between 3589 notifications of this type. When notifications 3590 are throttled, they are dropped, not queued for 3591 sending at a future time." 3592 ::= { isisNotifications 2 } 3594 isisCorruptedLSPDetected NOTIFICATION-TYPE 3595 OBJECTS { 3596 isisNotificationSysLevelIndex, 3597 isisPduLspId 3598 } 3599 STATUS current 3600 DESCRIPTION 3601 "This notification is generated when we find that 3602 an LSP that was stored in memory has become 3603 corrupted. The number of times this has been 3604 generated is counted by isisSysCorrLSPs. 3606 We forward an LSP ID. We may have independent 3607 knowledge of the ID, but in some implementations 3608 there is a chance that the ID itself will be 3609 corrupted." 3611 ::= { isisNotifications 3 } 3613 isisAttemptToExceedMaxSequence NOTIFICATION-TYPE 3614 OBJECTS { 3615 isisNotificationSysLevelIndex, 3616 isisPduLspId 3617 } 3618 STATUS current 3619 DESCRIPTION 3620 "When the sequence number on an LSP we generate 3621 wraps the 32 bit sequence counter, we purge and 3622 wait to re-announce this information. This 3623 notification describes that event. Since these 3624 should not be generated rapidly, we generate 3625 an event each time this happens. 3627 While the first 6 bytes of the LSPID are ours, 3628 the other two contain useful information." 3630 ::= { isisNotifications 4 } 3632 isisIDLenMismatch NOTIFICATION-TYPE 3633 OBJECTS { 3634 isisNotificationSysLevelIndex, 3635 isisPduFieldLen, 3636 isisNotificationCircIfIndex, 3637 isisPduFragment 3638 } 3639 STATUS current 3640 DESCRIPTION 3641 "A notification sent when we receive a PDU 3642 with a different value of the System ID Length. 3643 This notification includes the an index to identify 3644 the circuit where we saw the PDU and the header of 3645 the PDU which may help a network manager identify 3646 the source of the confusion. 3648 The agent must throttle the generation of 3649 consecutive isisIDLenMismatch notifications 3650 so that there is at least a 5-second gap between 3651 notifications of this type. When notifications 3652 are throttled, they are dropped, not queued for 3653 sending at a future time." 3655 ::= { isisNotifications 5 } 3657 isisMaxAreaAddressesMismatch NOTIFICATION-TYPE 3658 OBJECTS { 3659 isisNotificationSysLevelIndex, 3660 isisPduMaxAreaAddress, 3661 isisNotificationCircIfIndex, 3662 isisPduFragment 3663 } 3664 STATUS current 3665 DESCRIPTION 3666 "A notification sent when we receive a PDU 3667 with a different value of the Maximum Area 3668 Addresses. This notification includes the 3669 header of the packet, which may help a 3670 network manager identify the source of the 3671 confusion. 3673 The agent must throttle the generation of 3674 consecutive isisMaxAreaAddressesMismatch 3675 notifications so that there is at least a 5-second 3676 gap between notifications of this type. When 3677 notifications are throttled, they are dropped, not 3678 queued for sending at a future time." 3680 ::= { isisNotifications 6 } 3682 isisOwnLSPPurge NOTIFICATION-TYPE 3683 OBJECTS { 3684 isisNotificationSysLevelIndex, 3685 isisNotificationCircIfIndex, 3686 isisPduLspId 3687 } 3688 STATUS current 3689 DESCRIPTION 3690 "A notification sent when we receive a PDU 3691 with our systemID and zero age. This 3692 notification includes the circuit Index 3693 and router ID from the LSP, if available, 3694 which may help a network manager 3695 identify the source of the confusion." 3697 ::= { isisNotifications 7 } 3699 isisSequenceNumberSkip NOTIFICATION-TYPE 3700 OBJECTS { 3701 isisNotificationSysLevelIndex, 3702 isisNotificationCircIfIndex, 3703 isisPduLspId 3704 } 3705 STATUS current 3706 DESCRIPTION 3707 "When we receive an LSP with our System ID 3708 and different contents, we may need to reissue 3709 the LSP with a higher sequence number. 3711 We send this notification if we need to increase 3712 the sequence number by more than one. If two 3713 Intermediate Systems are configured with the same 3714 System ID, this notification will fire." 3716 ::= { isisNotifications 8 } 3718 isisAuthenticationTypeFailure NOTIFICATION-TYPE 3719 OBJECTS { 3720 isisNotificationSysLevelIndex, 3721 isisNotificationCircIfIndex, 3722 isisPduFragment 3723 } 3724 STATUS current 3725 DESCRIPTION 3726 "A notification sent when we receive a PDU 3727 with the wrong authentication type field. 3728 This notification includes the header of the 3729 packet, which may help a network manager 3730 identify the source of the confusion. 3732 The agent must throttle the generation of 3733 consecutive isisAuthenticationTypeFailure 3734 notifications so that there is at least a 5-second 3735 gap between notifications of this type. When 3736 notifications are throttled, they are dropped, not 3737 queued for sending at a future time." 3739 ::= { isisNotifications 9 } 3741 isisAuthenticationFailure NOTIFICATION-TYPE 3742 OBJECTS { 3743 isisNotificationSysLevelIndex, 3744 isisNotificationCircIfIndex, 3745 isisPduFragment 3746 } 3747 STATUS current 3748 DESCRIPTION 3749 "A notification sent when we receive a PDU 3750 with incorrect authentication information 3751 field. This notification includes the header 3752 of the packet, which may help a network manager 3753 identify the source of the confusion. 3755 The agent must throttle the generation of 3756 consecutive isisAuthenticationFailure 3757 notifications so that there is at least a 5-second 3758 gap between notifications of this type. When 3759 notifications are throttled, they are dropped, not 3760 queued for sending at a future time." 3762 ::= { isisNotifications 10 } 3764 isisVersionSkew NOTIFICATION-TYPE 3765 OBJECTS { 3766 isisNotificationSysLevelIndex, 3767 isisNotificationCircIfIndex, 3768 isisPduProtocolVersion, 3769 isisPduFragment 3770 } 3771 STATUS current 3772 DESCRIPTION 3773 "A notification sent when we receive a Hello 3774 PDU from an IS running a different version 3775 of the protocol. This notification includes 3776 the header of the packet, which may help a 3777 network manager identify the source of the 3778 confusion. 3780 The agent must throttle the generation of 3781 consecutive isisVersionSkew notifications 3782 so that there is at least a 5-second gap 3783 between notifications of this type. When 3784 notifications are throttled, they are dropped, not 3785 queued for sending at a future time." 3787 ::= { isisNotifications 11 } 3789 isisAreaMismatch NOTIFICATION-TYPE 3790 OBJECTS { 3791 isisNotificationCircIfIndex, 3792 isisPduFragment 3793 } 3794 STATUS current 3795 DESCRIPTION 3796 "A notification sent when we receive a Hello 3797 PDU from an IS which does not share any 3798 area address. This notification includes 3799 the header of the packet, which may help a 3800 network manager identify the source of the 3801 confusion. 3803 The agent must throttle the generation of 3804 consecutive isisAreaMismatch notifications 3805 so that there is at least a 5-second gap 3806 between notifications of this type. When 3807 notifications are throttled, they are dropped, not 3808 queued for sending at a future time." 3810 ::= { isisNotifications 12 } 3812 isisRejectedAdjacency NOTIFICATION-TYPE 3813 OBJECTS { 3814 isisNotificationSysLevelIndex, 3815 isisNotificationCircIfIndex, 3816 isisPduFragment 3817 } 3818 STATUS current 3819 DESCRIPTION 3820 "A notification sent when we receive a Hello 3821 PDU from an IS, but do not establish an 3822 adjacency for some reason. 3824 The agent must throttle the generation of 3825 consecutive isisRejectedAdjacency notifications 3826 so that there is at least a 5-second gap 3827 between notifications of this type. When 3828 notifications are throttled, they are dropped, not 3829 queued for sending at a future time." 3831 ::= { isisNotifications 13 } 3833 isisLSPTooLargeToPropagate NOTIFICATION-TYPE 3834 OBJECTS { 3835 isisNotificationSysLevelIndex, 3836 isisNotificationCircIfIndex, 3837 isisPduLspSize, 3838 isisPduLspId 3839 } 3840 STATUS current 3841 DESCRIPTION 3842 "A notification sent when we attempt to propagate 3843 an LSP which is larger than the dataLinkBlockSize 3844 for the circuit. 3846 The agent must throttle the generation of 3847 consecutive isisLSPTooLargeToPropagate notifications 3848 so that there is at least a 5-second gap 3849 between notifications of this type. When 3850 notifications are throttled, they are dropped, not 3851 queued for sending at a future time." 3853 ::= { isisNotifications 14 } 3855 isisOrigLSPBuffSizeMismatch NOTIFICATION-TYPE 3856 OBJECTS { 3857 isisNotificationSysLevelIndex, 3858 isisNotificationCircIfIndex, 3859 isisPduLspId, 3860 isisPduOriginatingBufferSize, 3861 isisPduBufferSize 3862 } 3863 STATUS current 3864 DESCRIPTION 3865 "A notification sent when a Level 1 LSP or Level 3866 2 LSP is received which is larger than the local 3867 value for isisSysLevelOrigLSPBuffSize, or when an 3868 LSP is received containing the supported Buffer Size 3869 option and the value in the PDU option field does 3870 not match the local value for isisSysLevelOrigLSPBuffSize. 3871 We pass up the size from the option field and the 3872 size of the LSP when one of them exceeds our configuration. 3874 The agent must throttle the generation of 3875 consecutive isisOrigLSPBuffSizeMismatch notifications 3876 so that there is at least a 5-second gap 3877 between notifications of this type. When 3878 notifications are throttled, they are dropped, not 3879 queued for sending at a future time." 3881 ::= { isisNotifications 15 } 3883 isisProtocolsSupportedMismatch NOTIFICATION-TYPE 3884 OBJECTS { 3885 isisNotificationSysLevelIndex, 3886 isisNotificationCircIfIndex, 3887 isisPduProtocolsSupported, 3888 isisPduLspId, 3889 isisPduFragment 3890 } 3891 STATUS current 3892 DESCRIPTION 3893 "A notification sent when a non-pseudonode 3894 segment 0 LSP is received that has no matching 3895 protocols supported. 3896 This may be because the system does not generate 3897 the field, or because there are no common elements. 3898 The list of protocols supported should be included 3899 in the notification: it may be empty if the TLV 3900 is not supported, or if the TLV is empty. 3902 The agent must throttle the generation of 3903 consecutive isisProtocolsSupportedMismatch 3904 notifications so that there is at least a 5-second 3905 gap between notifications of this type. When 3906 notifications are throttled, they are dropped, not 3907 queued for sending at a future time." 3909 ::= { isisNotifications 16 } 3911 isisAdjacencyChange NOTIFICATION-TYPE 3912 OBJECTS { 3913 isisNotificationSysLevelIndex, 3914 isisNotificationCircIfIndex, 3915 isisPduLspId, 3916 isisAdjState 3917 } 3918 STATUS current 3919 DESCRIPTION 3920 "A notification sent when an adjacency changes 3921 state, entering or leaving state up. 3922 The first 6 bytes of the isisPduLspId are the 3923 SystemID of the adjacent IS. 3924 The isisAdjState is the new state of the adjacency." 3926 ::= { isisNotifications 17 } 3928 isisLSPErrorDetected NOTIFICATION-TYPE 3929 OBJECTS { 3930 isisNotificationSysLevelIndex, 3931 isisPduLspId, 3932 isisNotificationCircIfIndex, 3933 isisPduFragment, 3934 isisErrorOffset, 3935 isisErrorTLVType 3936 } 3937 STATUS current 3938 DESCRIPTION 3939 "This notification is generated when we receive 3940 an LSP with a parse error. The isisCircIfIndex 3941 holds in index of the circuit on which the PDU 3942 arrived. The isisPduFragment holds start of the LSP, 3943 and the isisErrorOffset points to the problem. 3945 If the problem is a malformed TLV, isisErrorOffset 3946 points to start of the TLV and isisErrorTLVType 3947 holds the value of the type. 3949 If the problem is with the LSP header, isisErrorOffset 3950 points to the suspicious byte. 3952 The number of such LSPs is accumulated in 3953 isisSysStatLSPErrors." 3955 ::= { isisNotifications 18 } 3957 -- Agent Conformance Definitions 3958 -- We define the objects a conformant agent must define 3960 isisCompliances OBJECT IDENTIFIER ::= { isisConformance 1 } 3961 isisGroups OBJECT IDENTIFIER ::= { isisConformance 2 } 3963 -- compliance statements 3965 isisCompliance MODULE-COMPLIANCE 3966 STATUS current 3967 DESCRIPTION 3968 "The compliance statement for agents that support 3969 the IS-IS MIB. 3971 There are a number of INDEX objects that cannot be 3972 represented in the form of OBJECT clauses in SMIv2, 3973 but for which there are compliance requirements. 3974 Those requirements, and similar requirements for 3975 related objects, are expressed below in 3976 pseudo-OBJECT clause form in this description: 3978 -- OBJECT isisSummAddressType 3979 -- SYNTAX InetAddressType { ipv4(1), ipv6(2) } 3980 -- 3981 -- DESCRIPTION 3982 -- The MIB requires support for IPv4 Summary 3983 -- Addresses, and anticipates the support of 3984 -- IPv6 addresses. 3985 -- 3986 -- 3987 -- OBJECT isisRedistributeAddrType 3988 -- SYNTAX InetAddressType { ipv4(1), ipv6(2) } 3989 -- 3990 -- DESCRIPTION 3991 -- The MIB requires support for IPv4 3992 -- Redistribution Addresses, and anticipates 3993 -- the support of IPv6 addresses." 3994 -- 3995 -- 3996 -- OBJECT isisISAdjIPAddrType 3997 -- SYNTAX InetAddressType { ipv4(1), ipv6(2) } 3998 -- 3999 -- DESCRIPTION 4000 -- The MIB requires support for IPv4 4001 -- Adjacency Addresses, and anticipates the 4002 -- support of IPv6 addresses. 4003 MODULE -- this module 4004 MANDATORY-GROUPS { 4005 isisSystemGroup, 4006 isisCircuitGroup, 4007 isisISAdjGroup, 4008 isisNotificationObjectGroup, 4009 isisNotificationGroup 4010 } 4011 ::= { isisCompliances 1 } 4013 -- List of all groups, mandatory and optional 4014 isisAdvancedCompliance MODULE-COMPLIANCE 4015 STATUS current 4016 DESCRIPTION 4017 "The compliance statement for agents that fully 4018 support the IS-IS MIB. 4020 There are a number of INDEX objects that cannot be 4021 represented in the form of OBJECT clauses in SMIv2, 4022 but for which there are compliance requirements. 4023 Those requirements, and similar requirements for 4024 related objects, are expressed below in 4025 pseudo-OBJECT clause form in this description: 4027 -- OBJECT isisSummAddressType 4028 -- SYNTAX InetAddressType { ipv4(1), ipv6(2) } 4029 -- 4030 -- DESCRIPTION 4031 -- The MIB requires support for IPv4 Summary 4032 -- Addresses, and anticipates the support of 4033 -- IPv6 addresses. 4034 -- 4035 -- 4036 -- OBJECT isisRedistributeAddrType 4037 -- SYNTAX InetAddressType { ipv4(1), ipv6(2) } 4038 -- 4039 -- DESCRIPTION 4040 -- The MIB requires support for IPv4 4041 -- Redistribution Addresses, and anticipates 4042 -- the support of IPv6 addresses." 4043 -- 4044 -- 4045 -- OBJECT isisISAdjIPAddrType 4046 -- SYNTAX InetAddressType { ipv4(1), ipv6(2) } 4047 -- 4048 -- DESCRIPTION 4049 -- The MIB requires support for IPv4 4050 -- Adjacency Addresses, and anticipates the 4051 -- support of IPv6 addresses. 4052 -- 4053 -- 4054 -- OBJECT isisIPRADestType 4055 -- SYNTAX InetAddressType { ipv4(1), ipv6(2) } 4056 -- 4057 -- DESCRIPTION 4058 -- The MIB requires support for IPv4 RA 4059 -- Addresses, and anticipates the support of 4060 -- IPv6 addresses. 4061 -- 4062 -- 4063 -- OBJECT isisIPRANextHopType 4064 -- SYNTAX InetAddressType { ipv4(1), ipv6(2) } 4065 -- 4066 -- DESCRIPTION 4067 -- The MIB requires support for IPv4 NextHop 4068 -- Addresses, and anticipates the support of 4069 -- IPv6 addresses. 4070 MODULE -- this module 4071 MANDATORY-GROUPS { 4072 isisSystemGroup, 4073 isisCircuitGroup, 4074 isisISAdjGroup, 4075 isisNotificationObjectGroup, 4076 isisNotificationGroup, 4077 isisISPDUCounterGroup, 4078 isisRATableGroup, 4079 isisISIPRADestGroup, 4080 isisLSPGroup 4081 } 4082 ::= { isisCompliances 2 } 4084 isisReadOnlyCompliance MODULE-COMPLIANCE 4085 STATUS current 4086 DESCRIPTION 4087 "When this MIB is implemented without support for 4088 read-create (i.e. in read-only mode), the implementation 4089 can claim read-only compliance. Such a device can then 4090 be monitored but can not be configured with this MIB." 4091 MODULE -- this module 4092 MANDATORY-GROUPS { 4093 isisSystemGroup, 4094 isisCircuitGroup, 4095 isisISAdjGroup 4097 } 4099 OBJECT isisSysLevelType 4100 MIN-ACCESS read-only 4101 DESCRIPTION 4102 "Write access is not required." 4104 OBJECT isisSysID 4105 MIN-ACCESS read-only 4106 DESCRIPTION 4107 "Write access is not required." 4109 OBJECT isisSysMaxPathSplits 4110 MIN-ACCESS read-only 4111 DESCRIPTION 4112 "Write access is not required." 4114 OBJECT isisSysMaxLSPGenInt 4115 MIN-ACCESS read-only 4116 DESCRIPTION 4117 "Write access is not required." 4119 OBJECT isisSysPollESHelloRate 4120 MIN-ACCESS read-only 4121 DESCRIPTION 4122 "Write access is not required." 4124 OBJECT isisSysWaitTime 4125 MIN-ACCESS read-only 4126 DESCRIPTION 4127 "Write access is not required." 4129 OBJECT isisSysAdminState 4130 MIN-ACCESS read-only 4131 DESCRIPTION 4132 "Write access is not required." 4134 OBJECT isisSysL2toL1Leaking 4135 MIN-ACCESS read-only 4136 DESCRIPTION 4137 "Write access is not required." 4139 OBJECT isisSysMaxAge 4140 MIN-ACCESS read-only 4141 DESCRIPTION 4142 "Write access is not required." 4144 OBJECT isisManAreaAddrExistState 4145 MIN-ACCESS read-only 4146 DESCRIPTION 4147 "Write access is not required." 4149 OBJECT isisSysLevelOrigLSPBuffSize 4150 MIN-ACCESS read-only 4151 DESCRIPTION 4152 "Write access is not required." 4154 OBJECT isisSysLevelMinLSPGenInt 4155 MIN-ACCESS read-only 4156 DESCRIPTION 4157 "Write access is not required." 4159 OBJECT isisSysLevelSetOverload 4160 MIN-ACCESS read-only 4161 DESCRIPTION 4162 "Write access is not required." 4164 OBJECT isisSysLevelSetOverloadUntil 4165 MIN-ACCESS read-only 4166 DESCRIPTION 4167 "Write access is not required." 4169 OBJECT isisSysLevelMetricStyle 4170 MIN-ACCESS read-only 4171 DESCRIPTION 4172 "Write access is not required." 4174 OBJECT isisSysLevelSPFConsiders 4175 MIN-ACCESS read-only 4176 DESCRIPTION 4177 "Write access is not required." 4179 OBJECT isisSysLevelTEEnabled 4180 MIN-ACCESS read-only 4181 DESCRIPTION 4182 "Write access is not required." 4184 OBJECT isisSysReceiveLSPBufferSize 4185 MIN-ACCESS read-only 4186 DESCRIPTION 4187 "Write access is not required." 4189 OBJECT isisSummAddrExistState 4190 MIN-ACCESS read-only 4191 DESCRIPTION 4192 "Write access is not required." 4194 OBJECT isisSummAddrMetric 4195 MIN-ACCESS read-only 4196 DESCRIPTION 4197 "Write access is not required." 4199 OBJECT isisSummAddrFullMetric 4200 MIN-ACCESS read-only 4201 DESCRIPTION 4202 "Write access is not required." 4204 OBJECT isisRedistributeAddrExistState 4205 MIN-ACCESS read-only 4206 DESCRIPTION 4207 "Write access is not required." 4209 OBJECT isisCircAdminState 4210 MIN-ACCESS read-only 4211 DESCRIPTION 4212 "Write access is not required." 4214 OBJECT isisCircExistState 4215 MIN-ACCESS read-only 4216 DESCRIPTION 4217 "Write access is not required." 4219 OBJECT isisCircType 4220 MIN-ACCESS read-only 4221 DESCRIPTION 4222 "Write access is not required." 4224 OBJECT isisCircExtDomain 4225 MIN-ACCESS read-only 4226 DESCRIPTION 4227 "Write access is not required." 4229 OBJECT isisCircLevelType 4230 MIN-ACCESS read-only 4231 DESCRIPTION 4232 "Write access is not required." 4234 OBJECT isisCircPassiveCircuit 4235 MIN-ACCESS read-only 4236 DESCRIPTION 4237 "Write access is not required." 4239 OBJECT isisCircMeshGroupEnabled 4240 MIN-ACCESS read-only 4241 DESCRIPTION 4242 "Write access is not required." 4244 OBJECT isisCircMeshGroup 4245 MIN-ACCESS read-only 4246 DESCRIPTION 4247 "Write access is not required." 4249 OBJECT isisCircSmallHellos 4250 MIN-ACCESS read-only 4251 DESCRIPTION 4252 "Write access is not required." 4254 OBJECT isisCircExtendedCircID 4255 MIN-ACCESS read-only 4256 DESCRIPTION 4257 "Write access is not required." 4259 OBJECT isisCircIfIndex 4260 MIN-ACCESS read-only 4261 DESCRIPTION 4262 "Write access is not required." 4264 OBJECT isisCirc3WayEnabled 4265 MIN-ACCESS read-only 4266 DESCRIPTION 4267 "Write access is not required." 4269 OBJECT isisCircLevelMetric 4270 MIN-ACCESS read-only 4271 DESCRIPTION 4272 "Write access is not required." 4274 OBJECT isisCircLevelWideMetric 4275 MIN-ACCESS read-only 4276 DESCRIPTION 4277 "Write access is not required." 4279 OBJECT isisCircLevelISPriority 4280 MIN-ACCESS read-only 4281 DESCRIPTION 4282 "Write access is not required." 4284 OBJECT isisCircLevelHelloMultiplier 4285 MIN-ACCESS read-only 4286 DESCRIPTION 4287 "Write access is not required." 4289 OBJECT isisCircLevelHelloTimer 4290 MIN-ACCESS read-only 4291 DESCRIPTION 4292 "Write access is not required." 4294 OBJECT isisCircLevelDRHelloTimer 4295 MIN-ACCESS read-only 4296 DESCRIPTION 4297 "Write access is not required." 4299 OBJECT isisCircLevelLSPThrottle 4300 MIN-ACCESS read-only 4301 DESCRIPTION 4302 "Write access is not required." 4304 OBJECT isisCircLevelMinLSPRetransInt 4305 MIN-ACCESS read-only 4306 DESCRIPTION 4307 "Write access is not required." 4309 OBJECT isisCircLevelCSNPInterval 4310 MIN-ACCESS read-only 4311 DESCRIPTION 4312 "Write access is not required." 4314 OBJECT isisCircLevelPartSNPInterval 4315 MIN-ACCESS read-only 4316 DESCRIPTION 4317 "Write access is not required." 4319 ::= { isisCompliances 3 } 4321 -- MIB Grouping 4323 isisSystemGroup OBJECT-GROUP 4324 OBJECTS { 4325 isisSysVersion, 4326 isisSysLevelType, 4327 isisSysID, 4328 isisSysMaxPathSplits, 4329 isisSysMaxLSPGenInt, 4330 isisSysPollESHelloRate, 4331 isisSysWaitTime, 4332 isisSysAdminState, 4333 isisSysL2toL1Leaking, 4334 isisSysMaxAge, 4335 isisSysProtSupported, 4336 isisSysNotificationEnable, 4337 isisManAreaAddrExistState, 4338 isisSysLevelOrigLSPBuffSize, 4339 isisSysLevelMinLSPGenInt, 4340 isisSysLevelState, 4341 isisSysLevelSetOverload, 4342 isisSysLevelSetOverloadUntil, 4343 isisSysLevelMetricStyle, 4344 isisSysLevelSPFConsiders, 4345 isisSysLevelTEEnabled, 4346 isisSysReceiveLSPBufferSize, 4347 isisSummAddrExistState, 4348 isisSummAddrMetric, 4349 isisAreaAddr, 4350 isisSummAddrFullMetric, 4351 isisRedistributeAddrExistState, 4352 isisRouterHostName, 4353 isisRouterID, 4354 isisSysStatCorrLSPs, 4355 isisSysStatLSPDbaseOloads, 4356 isisSysStatManAddrDropFromAreas, 4357 isisSysStatAttmptToExMaxSeqNums, 4358 isisSysStatSeqNumSkips, 4359 isisSysStatOwnLSPPurges, 4360 isisSysStatIDFieldLenMismatches, 4361 isisSysStatPartChanges, 4362 isisSysStatSPFRuns, 4363 isisSysStatAuthTypeFails, 4364 isisSysStatAuthFails, 4365 isisSysStatLSPErrors 4366 } 4367 STATUS current 4368 DESCRIPTION 4369 "The collections of objects used to manage an 4370 IS-IS router." 4371 ::= { isisGroups 1 } 4373 isisCircuitGroup OBJECT-GROUP 4374 OBJECTS { 4375 isisNextCircIndex, 4376 isisCircAdminState, 4377 isisCircExistState, 4378 isisCircType, 4379 isisCircExtDomain, 4380 isisCircLevelType, 4381 isisCircAdjChanges, 4382 isisCircNumAdj, 4383 isisCircInitFails, 4384 isisCircRejAdjs, 4385 isisCircIDFieldLenMismatches, 4386 isisCircMaxAreaAddrMismatches, 4387 isisCircAuthTypeFails, 4388 isisCircAuthFails, 4389 isisCircLANDesISChanges, 4390 isisCircPassiveCircuit, 4391 isisCircMeshGroupEnabled, 4392 isisCircMeshGroup, 4393 isisCircSmallHellos, 4394 isisCircLastUpTime, 4395 isisCirc3WayEnabled, 4396 isisCircExtendedCircID, 4397 isisCircIfIndex, 4398 isisCircLevelMetric, 4399 isisCircLevelWideMetric, 4400 isisCircLevelISPriority, 4401 isisCircLevelIDOctet, 4402 isisCircLevelID, 4403 isisCircLevelDesIS, 4404 isisCircLevelHelloMultiplier, 4405 isisCircLevelHelloTimer, 4406 isisCircLevelDRHelloTimer, 4407 isisCircLevelLSPThrottle, 4408 isisCircLevelMinLSPRetransInt, 4409 isisCircLevelCSNPInterval, 4410 isisCircLevelPartSNPInterval 4411 } 4412 STATUS current 4413 DESCRIPTION 4414 "The collection of objects used to describe in 4415 IS-IS Circuit." 4416 ::= { isisGroups 2 } 4418 isisISAdjGroup OBJECT-GROUP 4419 OBJECTS { 4420 isisISAdjState, 4421 isisISAdj3WayState, 4422 isisISAdjNeighSNPAAddress, 4423 isisISAdjNeighSysType, 4424 isisISAdjNeighSysID, 4425 isisISAdjNbrExtendedCircID, 4426 isisISAdjUsage, 4427 isisISAdjHoldTimer, 4428 isisISAdjNeighPriority, 4429 isisISAdjLastUpTime, 4430 isisISAdjAreaAddress, 4431 isisISAdjIPAddrType, 4432 isisISAdjIPAddrAddress, 4433 isisISAdjProtSuppProtocol 4435 } 4436 STATUS current 4437 DESCRIPTION 4438 "The collections of objects used to manage an 4439 IS-IS Adjacency." 4440 ::= { isisGroups 3 } 4442 isisNotificationObjectGroup OBJECT-GROUP 4443 OBJECTS { 4444 isisNotificationSysLevelIndex, 4445 isisNotificationCircIfIndex, 4446 isisPduLspId, 4447 isisPduFragment, 4448 isisPduFieldLen, 4449 isisPduMaxAreaAddress, 4450 isisPduProtocolVersion, 4451 isisPduLspSize, 4452 isisPduOriginatingBufferSize, 4453 isisPduBufferSize, 4454 isisPduProtocolsSupported, 4455 isisAdjState, 4456 isisErrorOffset, 4457 isisErrorTLVType, 4458 isisNotificationAreaAddress 4459 } 4460 STATUS current 4461 DESCRIPTION 4462 "The objects used to record notification parameters." 4463 ::= { isisGroups 4 } 4465 isisNotificationGroup NOTIFICATION-GROUP 4466 NOTIFICATIONS { 4467 isisDatabaseOverload, 4468 isisManualAddressDrops, 4469 isisCorruptedLSPDetected, 4470 isisAttemptToExceedMaxSequence, 4471 isisIDLenMismatch, 4472 isisMaxAreaAddressesMismatch, 4473 isisOwnLSPPurge, 4474 isisSequenceNumberSkip, 4475 isisAuthenticationTypeFailure, 4476 isisAuthenticationFailure, 4477 isisVersionSkew, 4478 isisAreaMismatch, 4479 isisRejectedAdjacency, 4480 isisLSPTooLargeToPropagate, 4481 isisOrigLSPBuffSizeMismatch, 4482 isisProtocolsSupportedMismatch, 4483 isisAdjacencyChange, 4484 isisLSPErrorDetected 4485 } 4486 STATUS current 4487 DESCRIPTION 4488 "The collections of notifications sent by an IS." 4489 ::= { isisGroups 5 } 4491 isisISPDUCounterGroup OBJECT-GROUP 4492 OBJECTS { 4493 isisPacketCountIIHello, 4494 isisPacketCountISHello, 4495 isisPacketCountESHello, 4496 isisPacketCountLSP, 4497 isisPacketCountCSNP, 4498 isisPacketCountPSNP, 4499 isisPacketCountUnknown 4500 } 4501 STATUS current 4502 DESCRIPTION 4503 "The collections of objects used to count protocol PDUs." 4504 ::= { isisGroups 6 } 4506 isisRATableGroup OBJECT-GROUP 4507 OBJECTS { 4508 isisRAExistState, 4509 isisRAAdminState, 4510 isisRAAddrPrefix, 4511 isisRAMapType, 4512 isisRAMetric, 4513 isisRAMetricType, 4514 isisRASNPAAddress, 4515 isisRASNPAMask, 4516 isisRASNPAPrefix, 4517 isisRAType 4518 } 4519 STATUS current 4520 DESCRIPTION 4521 "The collections of objects used to manage the 4522 reachable NSAP prefixes." 4523 ::= { isisGroups 7 } 4525 isisISIPRADestGroup OBJECT-GROUP 4526 OBJECTS { 4527 isisIPRANextHopType, 4528 isisIPRANextHop, 4529 isisIPRAType, 4530 isisIPRAExistState, 4531 isisIPRAAdminState, 4532 isisIPRAMetric, 4533 isisIPRAFullMetric, 4534 isisIPRAMetricType, 4535 isisIPRASNPAAddress, 4536 isisIPRASourceType 4537 } 4538 STATUS current 4539 DESCRIPTION 4540 "The collections of objects used to manage configured 4541 IP addresses." 4542 ::= { isisGroups 8 } 4544 isisLSPGroup OBJECT-GROUP 4545 OBJECTS { 4546 isisLSPSeq, 4547 isisLSPZeroLife, 4548 isisLSPChecksum, 4549 isisLSPLifetimeRemain, 4550 isisLSPPDULength, 4551 isisLSPAttributes, 4552 isisLSPTLVSeq, 4553 isisLSPTLVChecksum, 4554 isisLSPTLVType, 4555 isisLSPTLVLen, 4556 isisLSPTLVValue 4557 } 4558 STATUS current 4559 DESCRIPTION 4560 "The collections of objects used to observe the LSP 4561 Data Base." 4562 ::= { isisGroups 9 } 4564 END 4566 5. IANA Considerations 4568 The MIB module in this document uses the following IANA-assigned 4569 OBJECT IDENTIFIER values recorded in the SMI Numbers registry: 4571 Descriptor OBJECT IDENTIFIER value 4572 ---------- ----------------------- 4574 isisMIB { mib-2 XXX } 4576 Editor's Note (to be removed prior to publication): the IANA is 4577 requested to assign a value for "XXX" under the 'mib-2' subtree and 4578 to record the assignment in the SMI Numbers registry. When the 4579 assignment has been made, the RFC Editor is asked to replace "XXX" 4580 (here and in the MIB module) with the assigned value and to remove 4581 this note. 4583 6. Acknowledgments 4585 This draft MIB is based on a March 1994 Internet Draft by Chris 4586 Gunner, who should be held blameless for the errors introduced since 4587 then. 4589 We would like to thank the following individuals for constructive and 4590 valuable comments: Mike Bartlett, Neal Castagnoli, Ken Chapman, Joan 4591 Cucchiara, Satish Dattatri, Nagi Jonnala, Adrian Farrel, Shamik 4592 Ganguly, Les Ginsberg, Don Goodspeed, Jeff Gross, Jim Halpin, Jon 4593 Harrison, Dimitri Haskin, C. M. Heard, Peter Higginson, Christian 4594 Hopps, Laura Liu, Gavin McPherson, Kay Noguchi, Serge Maskalik, Z. 4595 Opalka, Jeff Pickering, Sundar Ramachandran, Swaminatha Ramalingam, 4596 Aravind Ravikumar, Juergen Schoenwaelder, Koen Vermeulen, Hans De 4597 Vleeschouwer, Bert Wijnen, and Bingzhang Zhao. 4599 7. Security Considerations 4601 Management information defined in this MIB may be considered 4602 sensitive in some network environments. 4604 7.1 Discussion 4606 This MIB may be used to manage an IP router, which is used to direct 4607 network traffic. The control of network traffic allows an attacker 4608 to deny service to a region of the network or to forward traffic to 4609 adversaries. By raising or lowering metrics, traffic may be directed 4610 to insecure portions of the network. By disabling the protocol on an 4611 interface, the network may be partitioned. Changes to the network 4612 topology will force all routers to recompute their routes. Periodic 4613 route changes have brought down networks in the past by subjecting 4614 routers to stressful recomputations. 4616 There are a number of management objects defined in this MIB that 4617 have a MAX-ACCESS clause of read-write and/or read-create. Such 4618 objects may be considered sensitive or vulnerable in some network 4619 environments. The support for SET operations in a non-secure 4620 environment without proper protection can have a negative effect on 4621 network operations. Authentication of received SNMP requests and 4622 controlled access to management information should be employed in 4623 such environments. 4625 We identify a set of threats, and then list attributes that can be 4626 used in each form of attack. We discuss the effects that can be 4627 obtained by a single change to the variable in each class. 4629 7.2 Threats 4631 - Drop an Adjacency 4632 - Drop all Peers 4633 - Drop Subnetwork 4634 - Split the Network 4635 - Intermittent Outages 4636 - Redirect Traffic 4637 - Delay Convergence 4638 - Avoid Detection 4639 - Prevent Updates 4640 - Hijack LAN 4641 - Create problems for CLNS networks 4643 7.2.1 Drop an Adjacency 4645 By changing attributes that are used to peer, we can disrupt an 4646 adjacency and bring a link down. 4648 isisCirc3WayEnabled OBJECT-TYPE 4649 isisCircAdminState OBJECT-TYPE 4650 isisCircExistState OBJECT-TYPE 4651 isisCircLevelDRHelloTimer OBJECT-TYPE 4652 isisCircLevelHelloTimer OBJECT-TYPE 4653 isisCircLevelType OBJECT-TYPE 4654 isisCircSmallHellos OBJECT-TYPE 4656 7.2.2 Drop All Adjacencies 4658 These attributes can be used to break some or all of a router's 4659 adjacencies. In the case of System ID, the adjacency may be 4660 restored. However, it will subject the network to additional stress. 4662 isisSysLevelType OBJECT-TYPE 4663 isisManAreaAddrExistState OBJECT-TYPE 4664 isisSysAdminState OBJECT-TYPE 4665 isisSysID OBJECT-TYPE 4667 7.2.3 Drop Subnetwork 4669 This attribute can be used to stop advertisement of a subnetwork 4670 reachable through a single interface. 4672 isisCircPassiveCircuit OBJECT-TYPE 4674 7.2.4 Split the Network 4676 If the network design depends upon Wide Metrics or TE, we can use 4677 these attributes to prevent traffic from passing through a router. 4679 isisSysLevelMetricStyle OBJECT-TYPE 4680 isisSysLevelOrigLSPBuffSize OBJECT-TYPE 4681 isisSysLevelSPFConsiders OBJECT-TYPE 4682 isisSysLevelTEEnabled OBJECT-TYPE 4683 isisSysReceiveLSPBufferSize OBJECT-TYPE 4685 7.2.5 Intermittent Outages 4687 We can use these attributes to subject the network to a series of 4688 topology changes, or otherwise force extensive recomputations of 4689 routes. 4691 isisSysLevelMinLSPGenInt OBJECT-TYPE 4692 isisSysLevelSetOverload OBJECT-TYPE 4693 isisSysLevelSetOverloadUntil OBJECT-TYPE 4694 isisSysMaxAge OBJECT-TYPE 4695 isisSysMaxLSPGenInt OBJECT-TYPE 4696 isisSysL2toL1Leaking OBJECT-TYPE 4697 isisSysID OBJECT-TYPE 4699 7.2.6 Redirect Traffic 4701 By changing attributes such as metrics, we can push traffic to 4702 different parts of the network. This may allow an intruder to 4703 observe data traffic from otherwise remote parts of the network. 4705 We may also use these attributes to deny service to parts of the 4706 network. 4708 isisSysMaxPathSplits OBJECT-TYPE 4709 isisCircLevelMetric OBJECT-TYPE 4710 isisCircLevelWideMetric OBJECT-TYPE 4711 isisIPRAAdminState OBJECT-TYPE 4712 isisIPRAExistState OBJECT-TYPE 4713 isisIPRAFullMetric OBJECT-TYPE 4714 isisIPRAMetric OBJECT-TYPE 4715 isisIPRAMetricType OBJECT-TYPE 4716 isisIPRANextHop OBJECT-TYPE 4717 isisIPRANextHopType OBJECT-TYPE 4718 isisIPRASNPAAddress OBJECT-TYPE 4719 isisIPRAType OBJECT-TYPE 4720 isisRedistributeAddrExistState OBJECT-TYPE 4721 isisSummAddrExistState OBJECT-TYPE 4722 isisSummAddrFullMetric OBJECT-TYPE 4723 isisSummAddrMetric OBJECT-TYPE 4724 isisSysL2toL1Leaking OBJECT-TYPE 4726 7.2.7 Delay Convergence 4728 These attributes can be used to slow convergence by increasing the 4729 minimal interval required to update a packet. 4731 isisCircLevelCSNPInterval OBJECT-TYPE 4732 isisCircLevelLSPThrottle OBJECT-TYPE 4733 isisCircLevelMinLSPRetransInt OBJECT-TYPE 4734 isisCircLevelPartSNPInterval OBJECT-TYPE 4735 isisSysWaitTime OBJECT-TYPE 4736 isisCircPassiveCircuit OBJECT-TYPE 4738 7.2.8 Avoid Detection 4740 By turning off traps, we can prevent a Network Management station 4741 from observing problems in the network caused by other aspects of an 4742 attack. 4744 isisSysNotificationEnable OBJECT-TYPE 4746 7.2.9 Prevent Updates 4748 Mesh Groups can be used to prevent the transmission of Link State 4749 PDUs on certain interfaces, delaying or preventing the propagation of 4750 updates. 4752 isisCircMeshGroup OBJECT-TYPE 4753 isisCircMeshGroupEnabled OBJECT-TYPE 4755 7.2.10 Hijack LAN 4757 If we have compromised a router, we can use this attribute to become 4758 the designated router and lie about the topology of a LAN. 4760 isisCircLevelISPriority OBJECT-TYPE 4762 7.2.11 Create problems for CLNS networks 4764 This attribute can be used to modify the handling of CLNS traffic. 4766 isisRAAddrPrefix OBJECT-TYPE 4767 isisRAAdminState OBJECT-TYPE 4768 isisRAExistState OBJECT-TYPE 4769 isisRAMapType OBJECT-TYPE 4770 isisRAMetric OBJECT-TYPE 4771 isisRAMetricType OBJECT-TYPE 4772 isisRASNPAAddress OBJECT-TYPE 4773 isisRASNPAMask OBJECT-TYPE 4774 isisRASNPAPrefix OBJECT-TYPE 4775 isisRAType OBJECT-TYPE 4776 isisSysPollESHelloRate OBJECT-TYPE 4778 7.2.12 Mostly Harmless 4780 The following writable attributes do not pose a known security risk. 4782 isisCircExtDomain OBJECT-TYPE 4783 isisCircIfIndex OBJECT-TYPE 4784 isisCircLevelHelloMultiplier OBJECT-TYPE 4785 isisCircType OBJECT-TYPE 4787 7.2.13 Recommendations 4789 Much of the MIB is used to set or read attributes which are readily 4790 visible to any intruder who has access to traffic. None of the 4791 security attributes are setable or visible through the MIB. Read 4792 access to the MIB does not pose additional risks or vulnerabilities. 4794 If write access is to be provided, it is RECOMMENDED that 4795 implementers consider the security features as provided by the SNMPv3 4796 framework (see [RFC3410], section 8), including full support for the 4797 SNMPv3 cryptographic mechanisms (for authentication and privacy). 4799 SNMP versions prior to SNMPv3 did not include adequate security. 4800 Even if the network itself is secure (for example by using IPSec), 4801 even then, there is no control as to who on the secure network is 4802 allowed to access and GET/SET (read/change/create/delete) the objects 4803 in this MIB module. 4805 Deployment of SNMP versions prior to SNMPv3 is NOT RECOMMENDED. 4806 Instead, it is RECOMMENDED to deploy SNMPv3 and to enable 4807 cryptographic security. It is then a customer/operator 4808 responsibility to ensure that the SNMP entity giving access to an 4809 instance of this MIB module is properly configured to give access to 4810 the objects only to those principals (users) that have legitimate 4811 rights to indeed GET or SET (change/create/delete) them. 4813 8. Normative References 4815 [ISO10589] ISO 10589, "Intermediate system to Intermediate system 4816 routeing information exchange protocol for use in conjunction 4817 with the Protocol for providing the Connectionless-mode Network 4818 Service (ISO 8473)," ISO/IEC 10589:2002. 4820 [ISO10733] ISO 10733, "Information Processing Systems - Open Systems 4821 Interconnection - Specification of the elements of Management 4822 Information related to OSI Network layer Standards", September 4823 1998. 4825 [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate 4826 Requirement Levels", BCP 14, RFC 2119, March 1997. 4828 [RFC1195] Callon, R., "Use of OSI IS-IS for Routing in TCP/IP and 4829 Dual Environments", RFC 1195, December 1990. 4831 [RFC2863] McCloghrie, K., and F. Kastenholz, "The Interfaces Group 4832 MIB", RFC 2863, Jun 2000. 4834 [RFC3289] Baker, F., K. Chan, and A. Smith, "Management Information 4835 Base for the Differentiated Services Architecture", RFC 3289, 4836 May 2002. 4838 [RFC3411] Harrington, D., Presuhn, R., and B. Wijnen, "An 4839 Architecture for Simple Network Management Protocol Management 4840 Frameworks", RFC 3411, December 2002. 4842 [RFC2578] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., 4843 Rose, M., and S. Waldbusser, "Structure of Management 4844 Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999. 4846 [RFC2579] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., 4847 Rose, M., and S. Waldbusser, "Textual Conventions for SMIv2", 4848 STD 58, RFC 2579, April 1999. 4850 [RFC2580] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., 4851 Rose, M., and S. Waldbusser, "Conformance Statements for SMIv2", 4852 STD 58, RFC 2580, April 1999. 4854 [RFC4001] Daniele, M., Haberman, B., Routhier, S., and J. 4855 Schoenwaelder, "Textual Conventions for Internet Network 4856 Addresses", RFC 4001. 4858 9. Informative References 4860 [RFC2973] Balay, R., Katz, D., and J. Parker, "IS-IS Mesh Groups", 4861 RFC 2973, October 2000. 4863 [RFC3373] Katz, D., and R.Saluja, "Three-Way Handshake for 4864 Intermediate System to Intermediate System Point-to-Point 4865 Adjacencies", RFC 3373, September 2002. 4867 [RFC3410] Case, J., Mundy, R., Partain, D. and B. Stewart, 4868 "Introduction and Applicability Statements for Internet-Standard 4869 Management Framework", RFC 3410, December 2002. 4871 10. Authors' Address 4873 Jeff Parker 4874 Department of Computer Science 4875 Middlebury College, 4876 Middlebury, Vermont 05753 4878 email: jeffp at middlebury dot edu 4880 11. Full Copyright Statement 4882 Copyright (C) The Internet Society (2005). This document is subject 4883 to the rights, licenses and restrictions contained in BCP 78, and 4884 except as set forth therein, the authors retain all their rights. 4886 This document and the information contained herein are provided on an 4887 "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS 4888 OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET 4889 ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, 4890 INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE 4891 INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED 4892 WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. 4894 12. Intellectual Property 4896 The IETF takes no position regarding the validity or scope of any 4897 Intellectual Property Rights or other rights that might be claimed to 4898 pertain to the implementation or use of the technology described in 4899 this document or the extent to which any license under such rights 4900 might or might not be available; nor does it represent that it has 4901 made any independent effort to identify any such rights. Information 4902 on the procedures with respect to rights in RFC documents can be 4903 found in BCP 78 and BCP 79. 4905 Copies of IPR disclosures made to the IETF Secretariat and any 4906 assurances of licenses to be made available, or the result of an 4907 attempt made to obtain a general license or permission for the use of 4908 such proprietary rights by implementers or users of this 4909 specification can be obtained from the IETF on-line IPR repository at 4910 http://www.ietf.org/ipr. 4912 The IETF invites any interested party to bring to its attention any 4913 copyrights, patents or patent applications, or other proprietary 4914 rights that may cover technology that may be required to implement 4915 this standard. Please address the information to the IETF at ietf- 4916 ipr@ietf.org.