idnits 2.17.1 draft-white-slapm-mib-06.txt: Checking boilerplate required by RFC 5378 and the IETF Trust (see https://trustee.ietf.org/license-info): ---------------------------------------------------------------------------- ** Looks like you're using RFC 2026 boilerplate. This must be updated to follow RFC 3978/3979, as updated by RFC 4748. Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt: ---------------------------------------------------------------------------- ** The document seems to lack a 1id_guidelines paragraph about Internet-Drafts being working documents. ** The document seems to lack a 1id_guidelines paragraph about 6 months document validity. == No 'Intended status' indicated for this document; assuming Proposed Standard == It seems as if not all pages are separated by form feeds - found 0 form feeds but 65 pages Checking nits according to https://www.ietf.org/id-info/checklist : ---------------------------------------------------------------------------- ** The document seems to lack an IANA Considerations section. (See Section 2.2 of https://www.ietf.org/id-info/checklist for how to handle the case when there are no actions for IANA.) ** The document seems to lack separate sections for Informative/Normative References. All references will be assumed normative when checking for downward references. ** There are 3 instances of too long lines in the document, the longest one being 2 characters in excess of 72. Miscellaneous warnings: ---------------------------------------------------------------------------- == The copyright year in the RFC 3978 Section 5.4 Copyright Line does not match the current year == Line 1550 has weird spacing: '...seconds since...' -- The document seems to lack a disclaimer for pre-RFC5378 work, but may have content which was first submitted before 10 November 2008. If you have contacted all the original authors and they are all willing to grant the BCP78 rights to the IETF Trust, then this is fine, and you can ignore this comment. If not, you may need to add the pre-RFC5378 disclaimer. (See the Legal Provisions document at https://trustee.ietf.org/license-info for more information.) -- The document date (September 1999) is 8990 days in the past. Is this intentional? Checking references for intended status: Proposed Standard ---------------------------------------------------------------------------- (See RFCs 3967 and 4897 for information about using normative references to lower-maturity documents in RFCs) == Unused Reference: '2' is defined on line 3250, but no explicit reference was found in the text == Unused Reference: '12' is defined on line 3297, but no explicit reference was found in the text == Unused Reference: '20' is defined on line 3327, but no explicit reference was found in the text ** Downref: Normative reference to an Historic RFC: RFC 1157 (ref. '1') ** Obsolete normative reference: RFC 1905 (ref. '6') (Obsoleted by RFC 3416) ** Obsolete normative reference: RFC 2571 (ref. '7') (Obsoleted by RFC 3411) ** Obsolete normative reference: RFC 2572 (ref. '8') (Obsoleted by RFC 3412) ** Obsolete normative reference: RFC 2573 (ref. '9') (Obsoleted by RFC 3413) ** Obsolete normative reference: RFC 2574 (ref. '10') (Obsoleted by RFC 3414) ** Obsolete normative reference: RFC 2575 (ref. '11') (Obsoleted by RFC 3415) ** Obsolete normative reference: RFC 2028 (ref. '12') (Obsoleted by RFC 9281) ** Downref: Normative reference to an Informational RFC: RFC 1215 (ref. '16') ** Downref: Normative reference to an Historic RFC: RFC 1901 (ref. '17') ** Obsolete normative reference: RFC 1906 (ref. '18') (Obsoleted by RFC 3417) ** Obsolete normative reference: RFC 2037 (ref. '19') (Obsoleted by RFC 2737) Summary: 18 errors (**), 0 flaws (~~), 7 warnings (==), 2 comments (--). Run idnits with the --verbose option for more detailed information about the items above. -------------------------------------------------------------------------------- 1 Network Working Group Kenneth White 2 Internet-draft IBM Corp. 3 Expiration Date: March 2000 5 September 1999 7 Definitions of Managed Objects for 8 Service Level Agreements 9 Performance Monitoring 10 12 Status of this Memo 14 This document is an Internet-Draft and is in full conformance with all 15 provisions of Section 10 of RFC2026. 17 Internet Drafts are working documents of the Internet Engineering Task 18 Force (IETF), its Areas, and its Working Groups. Note that other groups 19 may also distribute working documents as Internet Drafts. 21 Internet Drafts are draft documents valid for a maximum of six months. 22 Internet Drafts may be updated, replaced, or obsoleted by other 23 documents at any time. It is not appropriate to use Internet Drafts as 24 reference material or to cite them other than as a "working draft" or 25 "work in progress." 27 The list of current Internet-Drafts can be accessed at 28 http://www.ietf.org/ietf/1id-abstracts.txt 30 The list of Internet-Draft Shadow Directories can be accessed at 31 http://www.ietf.org/shadow.html. 33 Please check the I-D abstract listing contained in each Internet Draft 34 directory to learn the current status of this or any Internet Draft. 35 Distribution of this document is unlimited. 37 Copyright Notice 39 Copyright (C) The Internet Society (1999). All Rights Reserved. 41 Abstract 43 This memo defines a Management Information Base (MIB) for performance 44 monitoring of Service Level Agreements (SLAs) defined via policy 45 definitions. The MIB defined herein focuses on defining a set of 46 objects for monitoring SLAs and not on replication of the content of the 47 policy definitions being monitored. The goal of the MIB defined within 48 this document is to defined statistics related to a policy rule 49 definition for reporting on the effect that a policy rule has on a 50 system and to defined a method of monitoring this data. 52 Table of Contents 54 1.0 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 2 56 2.0 The SNMP Network Management Framework . . . . . . . . . . . . 3 58 3.0 Structure of the MIB . . . . . . . . . . . . . . . . . . . . . 3 59 3.1 Scalar objects . . . . . . . . . . . . . . . . . . . . . . . . 4 60 3.2 slapmPolicyNameTable . . . . . . . . . . . . . . . . . . . . . 5 61 3.3 slapmPolicyRuleStatsTable . . . . . . . . . . . . . . . . . . 6 62 3.4 slapmPRMonTable . . . . . . . . . . . . . . . . . . . . . . . 6 63 3.5 slapmSubcomponentTable . . . . . . . . . . . . . . . . . . . . 7 65 4.0 Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 8 67 5.0 Security Considerations . . . . . . . . . . . . . . . . . . . 61 69 6.0 Intellectual Property . . . . . . . . . . . . . . . . . . . . 62 71 7.0 Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 62 73 8.0 References . . . . . . . . . . . . . . . . . . . . . . . . . . 62 75 9.0 Author's Address . . . . . . . . . . . . . . . . . . . . . . . 64 77 10.0 Full Copyright Statement . . . . . . . . . . . . . . . . . . 64 79 1.0 Introduction 81 The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 82 "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 83 document are to be interpreted as described in RFC 2119, reference [13]. 85 This document's purpose is to define a MIB module for performance 86 management of Service Level Agreements (SLAs). It is assumed that an 87 SLA is defined via policy schema definitions. The policy definitions 88 being modeled with respect to performance management is primarily 89 related to network Quality of Service (QOS). There are a number of 90 methods that exist for defining and administering policy. Definition of 91 these methods is considered out side of the scope of this document. 93 The MIB module defined within this memo has been modeled using the 94 various versions of the schema definitions being developed within the 95 Policy Framework Working Group in the IETF. The content of the MIB 96 defined within this memo has evolved along with the Policy Framework 97 Working Group schema definitions. 99 2.0 The SNMP Network Management Framework 101 The SNMP Management Framework presently consists of five major 102 components: 104 o An overall architecture, described in RFC 2571 [7]. 106 o Mechanisms for describing and naming objects and events for the 107 purpose of management. The first version of this Structure of 108 Management Information (SMI) is called SMIv1 and described in RFC 109 1155 [14], RFC 1212 [15] and RFC 1215 [16]. The second version, 110 called SMIv2, is described in RFC 2578 [3], RFC 2579 [4] and RFC 111 2580 [5]. 113 o Message protocols for transferring management information. The 114 first version of the SNMP message protocol is called SNMPv1 and 115 described in RFC 1157 [1]. A second version of the SNMP message 116 protocol, which is not an Internet standards track protocol, is 117 called SNMPv2c and described in RFC 1901 [17] and RFC 1906 [18]. 118 The third version of the message protocol is called SNMPv3 and 119 described in RFC 1906 [18], RFC 2572 [8] and RFC 2574 [10]. 121 o Protocol operations for accessing management information. The first 122 set of protocol operations and associated PDU formats is described 123 in RFC 1157 [1]. A second set of protocol operations and associated 124 PDU formats is described in RFC 1905 [6]. 126 o A set of fundamental applications described in RFC 2573 [9] and the 127 view-based access control mechanism described in RFC 2575 [11]. 129 Managed objects are accessed via a virtual information store, termed the 130 Management Information Base or MIB. Objects in the MIB are defined 131 using the mechanisms defined in the SMI. 133 This memo specifies a MIB module that is compliant to the SMIv2. A MIB 134 conforming to the SMIv1 can be produced through the appropriate 135 translations. The resulting translated MIB must be semantically 136 equivalent, except where objects or events are omitted because no 137 translation is possible (use of Counter64). Some machine readable 138 information in SMIv2 will be converted into textual descriptions in 139 SMIv1 during the translation process. However, this loss of machine 140 readable information is not considered to change the semantics of the 141 MIB. 143 3.0 Structure of the MIB 145 The SLAPM-MIB consists of the following components: 147 o scalar objects 149 o slapmPolicyNameTable 150 o slapmPolicyRuleStatsTable (equivalent to the deprecated 151 slapmPolicyStatsTable) 153 o slapmPRMonTable (equivalent to the deprecated 154 slapmPolicyMonitorTable) 156 o slapmSubcomponentTable 158 Refer to the compliance statement defined within SLAPM-MIB for a 159 definition of what objects and notifications MUST be implemented by all 160 systems as opposed to those that MUST be implemented by end systems 161 only. 163 Initially most of the tables defined by the MIB module within this 164 document where directly indexed using a policy's name and a subordinate 165 traffic profile name. Over time the structure and resulting naming has 166 grown more complex and as such has exceeded the capacity of being used 167 as a direct MIB table index. As a result of this the original tables 168 (slapmPolicyStatsTable and slapmPolicyMonitorTable) have been deprecated 169 and replaced with new tables that use an Unsigned32 index element 170 instead of "names". A new table has been defined, slapmPolicyNameTable, 171 that maps the Unsigned32 index to a unique name associated with a given 172 policy rule definition. 174 3.1 Scalar objects 176 Global objects defined within SLAPM-MIB: 178 o slapmSpinLock 180 Enables multiple management application access to SLAPM-MIB. An 181 agent MUST implement the slapmSpinLock object to enable management 182 applications to coordinate their use of the SLAPM-MIB. Management 183 application use of slapmSpinLock is OPTIONAL. 185 o slapmPolicyCountQueries, slapmPolicyCountAccesses, 186 slapmPolicyCountSuccessAccesses, and slapmPolicyCountNotFounds 188 Basic statistics on the amount of policy directory access that has 189 occurred at a system. 191 o slapmPolicyPurgeTime 193 Used to prevent the entries in various SLAPM-MIB tables that relate 194 to a policy definition from immediately being deleted when the 195 corresponding policy definition no longer exists. This gives 196 management applications time to discover this condition and close 197 out any polled based interval data that may be being collected. All 198 dependent slapmPRMonTable entries are also deleted when its parent 199 slapmPolicyRuleStatsEntry is removed. Refer to the OBJECT 200 description for slapmPolicyPurgeTime for a more precise description 201 of this function. 203 o slapmPolicyTrapEnable 205 This object enables or suppresses generation of 206 slapmPolicyRuleDeleted or slapmPolicyRuleMonDeleted notifications. 208 o slapmPolicyTrapFilter 210 This object enables suppression of slapmSubcMonitorNotOkay 211 notifications. 213 3.2 slapmPolicyNameTable 215 The slapmPolicyNameTable maps a Unsigned32 index to a unique name 216 associated with a given policy rule definition. 218 Currently, the core schema definition being worked on within the Policy 219 Framework working group defines five general classes: policyGroup, 220 policyRule, policyCondition, policyTimePeriodCondition, and 221 policyAction. "Policies can either be used in a stand-alone fashion or 222 aggregated into policy groups to perform more elaborate functions. 223 Stand-alone policies are called policy rules. Policy groups are 224 aggregations of policy rules, or aggregations of policy groups, but not 225 both." Each policy rule consists of a set of conditions and a set of 226 actions. Policy rules may be aggregated into policy groups. 228 "Instances in a directory are identified by distinguished names (DNs), 229 which provide the same type of hierarchical organization that a file 230 system provides in a computer system. A distinguished name is a 231 sequence of relative distinguished names (RDNs), where an RDN provides a 232 unique identifier for an instance within the context of its immediate 233 superior, in the same way that a filename provides a unique identifier 234 for a file within the context of the folder in which it resides." 236 Each of these instances can also be named to fit in with the existing 237 DEN practice with a commonName (cn) attribute as oppose to the classes 238 name attribute. 240 "The cn, or commonName, attribute is an X.500 attribute. It stands for 241 commonName. It specifies a user-friendly name by which the object is 242 commonly known. This name may be ambiguous by itself. This name is 243 used in a limited scope (such as an organization). It conforms to the 244 naming conventions of the country or culture with which it is 245 associated. CN is used universally in DEN as the naming attribute for a 246 class." 248 An slapmPolicyNameEntry contains a single object, slapmPolicyNameOfRule, 249 that contains the unique name associated with a policy rule instance. 250 An slapmPolicyNameEntry is indexed by a Unsigned32 index, 251 slapmPolicyNameIndex, that is assigned by the implementation of this 252 MIB. 254 3.3 slapmPolicyRuleStatsTable 256 This table is functionally equivalent to the deprecated 257 slapmPolicyStatsTable. The slapmPolicyStatsTable uses the name of both a 258 policy definition and a traffic profile name to index an entry. The 259 slapmPolicyRuleStatsTable uses an slapmPolicyNameEntry index 260 (Unsigned32) instead. 262 The slapmPolicyRuleStatsTable is the main table defined by SLAPM-MIB. 263 The primary index for this table is slapmPolicyNameSystemAddress that 264 enables support of multiple systems from a single policy agent. The 265 index element, slapmPolicyNameSystemAddress, value must be either the 266 zero-length octet string when at a policy agent only a single system is 267 being support, 4 octets for a ipv4 address, or 16 octets for a ipv6 268 address. 270 It is possible that on a single system multiple policy agent instances 271 exists. The Entity MIB, refer to [19], should be used to handle the 272 resulting MIBs. 274 With respect to slapmPolicyNameSystemAddress one 275 slapmPolicyRuleStatsEntry exists for each policy rule instance. Entries 276 in this table are not administered via SNMP. An agent implementation 277 for this table MUST reflect its current set of policy rule instances via 278 table entries. The mechanisms for policy administration are outside of 279 the scope of this memo. 281 3.4 slapmPRMonTable 283 This table is functionally equivalent to the deprecated 284 slapmPolicyMonitorTable. The slapmPolicyMonitorTable uses the name of 285 both a policy definition and a traffic profile name to index an entry. 286 The slapmPRMonTable uses an slapmPolicyNameEntry index (Unsigned32) 287 instead. 289 The slapmPRMonTable provides a method of monitoring the effect of SLA 290 policy being used at a system. A management application creates an 291 slapmPRMonEntry for each collection that it requires. The value of the 292 BITS slapmPRMonControl object determines what type of monitoring occurs, 293 at what level to monitor and whether trap support is enabled: 295 o monitorMinRate(0) 297 Use the value of slapmPRMonInterval as the interval to determine 298 current traffic in and out rates, using slapmPRMonCurrentInRate and 299 slapmPRMonCurrentOutRate, that can be compared to 300 slapmPRMonMinRateLow for determining when to generate a 301 slapmPolicyRuleMonNotOkay notification. The notification 302 slapmPolicyRuleMonOkay is generated when the problem is resolved. 303 This can be determined by comparing the current rates to 304 slapmPRMonMinRateHigh. 306 o monitorMaxRate(1) 308 Use the value of slapmPRMonInterval as the interval to determine 309 current traffic in and out rate, using slapmPRMonCurrentInRate and 310 slapmPRMonCurrentOutRate, that can be compared to 311 slapmPRMonMaxRateHigh for determining when to generate a 312 slapmPolicyRuleMonNotOkay notification. The notification 313 slapmPolicyRuleMonOkay is generated when the problem is resolved. 314 This can be determined by comparing the current rates to 315 slapmPRMonMaxRateLow. 317 o monitorMaxDelay(2) 319 Use the value of slapmPRMonInterval as the interval to determine the 320 current delay. This can be calculated on an aggregate level by 321 averaging the round trip times for all TCP connections associated 322 with the policy definition. For an individual subcomponent its 323 round trip time can be used directly. Compare this value to 324 slapmPRMonMaxDelayHigh for determining when to generate a 325 slapmPolicyRuleMonNotOkay notification. The notification 326 slapmPolicyRuleMonOkay is generated when the problem is resolved. 327 This can be determined by comparing the current rates to 328 slapmPRMonMaxDelayLow. 330 UDP subcomponents don't support max delay monitoring. 332 o enableAggregateTraps(3) 334 The slapmPRMonitorControl BITS setting, enableAggregateTraps(3), 335 MUST be set in order for any notifications relating to 336 slapmPolicyRuleStatsTable monitoring to be generated. 338 o enableSubcomponentTraps(4) 340 This slapmPRMonControl BITS setting MUST be set in order for any 341 notifications relating to slapmSubcomponetTable monitoring to be 342 generated. The slapmPRMonControl BITS setting 343 monitorSubcomponents(5) MUST be selected in order for this setting 344 to be allowed. 346 o monitorSubcomponents(5) 348 If selected monitor slapmSubcomponentTable entries individually. 349 Note: aggregate policy rule monitoring is always enabled. 351 The index element slapmPRMonOwnerIndex is used as the first index in 352 slapmPRMonTable in order to enable SNMP VACM security control. The 353 slapmPRMonTable is the only table that supports SNMP RowStatus 354 operations. 356 3.5 slapmSubcomponentTable 358 Entries are made into this table for the protocol entities (policy 359 traffic profile subcomponents) to indicate actual policy rule usage, 360 provide general statistics at either a TCP connection or UDP listener 361 level, and enable subcomponent monitoring. 363 4.0 Definitions 365 SLAPM-MIB DEFINITIONS ::= BEGIN 367 IMPORTS 368 MODULE-IDENTITY, OBJECT-TYPE, 369 experimental, Integer32, NOTIFICATION-TYPE, 370 Gauge32, Counter32, Unsigned32 371 FROM SNMPv2-SMI -- RFC2578 372 TEXTUAL-CONVENTION, RowStatus, 373 TestAndIncr, DateAndTime 374 FROM SNMPv2-TC -- RFC2579 375 MODULE-COMPLIANCE, OBJECT-GROUP, 376 NOTIFICATION-GROUP 377 FROM SNMPv2-CONF -- RFC2580 378 SnmpAdminString 379 FROM SNMP-FRAMEWORK-MIB; -- RFC2571 381 slapmMIB MODULE-IDENTITY 382 LAST-UPDATED "9910130000Z" 383 ORGANIZATION "Internet Engineering Task Force (IETF)" 384 CONTACT-INFO 385 "Kenneth White 387 International Business Machines Corporation 388 Network Computing Software Division 389 Research Triangle Park, NC, USA 391 E-mail: wkenneth@us.ibm.com" 392 DESCRIPTION 393 "The Service Level Agreement Performance Monitoring MIB 394 (SLAPM-MIB) provides data collection and monitoring 395 capabilities for Service Level Agreements (SLAs) 396 policy definitions." 398 -- Revision history 400 REVISION "9910130000Z" -- 13 Oct. 1999 401 DESCRIPTION 402 "This version published as RFC xxxx." 403 -- RFC-editor assigns xxxx 405 ::= { experimental 88 } 407 -- Textual Conventions 409 SlapmNameType ::= TEXTUAL-CONVENTION 410 STATUS deprecated 411 DESCRIPTION 412 "The textual convention for naming entities 413 within this MIB. The actual contents of an object 414 defined using this textual convention should consist 415 of the distinguished name portion of an name. 416 This is usually the right-most 417 portion of the name. This convention is necessary, 418 since names within this MIB can be used as index 419 items and an instance identifier is limited to 128 420 subidentifiers. 422 This textual convention has been deprecated. All of the 423 tables defined within this MIB that use this textual 424 convention have been deprecated as well since the method 425 of using a portion of the name (either of a policy 426 definition or of a traffic profile) has been replaced 427 by using an Unsigned32 index. The new slapmPolicyNameTable 428 would then map the Unsigned32 index to a real name." 429 SYNTAX SnmpAdminString (SIZE(0..32)) 431 SlapmStatus ::= TEXTUAL-CONVENTION 432 STATUS current 433 DESCRIPTION 434 "The textual convention for defining the various 435 slapmPRMonTable (or old slapmPolicyMonitorTable) 436 and the slapmSubcomponentTable states for actual policy 437 rule traffic monitoring." 438 SYNTAX BITS { 439 slaMinInRateNotAchieved(0), 440 slaMaxInRateExceeded(1), 441 slaMaxDelayExceeded(2), 442 slaMinOutRateNotAchieved(3), 443 slaMaxOutRateExceeded(4), 444 monitorMinInRateNotAchieved(5), 445 monitorMaxInRateExceeded(6), 446 monitorMaxDelayExceeded(7), 447 monitorMinOutRateNotAchieved(8), 448 monitorMaxOutRateExceeded(9) 449 } 451 SlapmPolicyRuleName ::= TEXTUAL-CONVENTION 452 DISPLAY-HINT "1024t" 453 STATUS current 454 DESCRIPTION 455 "To facilitate internationalization, this TC 456 represents information taken from the ISO/IEC IS 457 10646-1 character set, encoded as an octet string 458 using the UTF-8 character encoding scheme described 459 in RFC 2044. For strings in 7-bit US-ASCII, 460 there is no impact since the UTF-8 representation 461 is identical to the US-ASCII encoding." 462 SYNTAX OCTET STRING (SIZE (0..1024)) 464 -- Top-level structure of the MIB 466 slapmNotifications OBJECT IDENTIFIER ::= { slapmMIB 0 } 467 slapmObjects OBJECT IDENTIFIER ::= { slapmMIB 1 } 468 slapmConformance OBJECT IDENTIFIER ::= { slapmMIB 2 } 470 -- All scalar objects 472 slapmBaseObjects OBJECT IDENTIFIER ::= { slapmObjects 1 } 474 -- Scalar Object Definitions 476 slapmSpinLock OBJECT-TYPE 477 SYNTAX TestAndIncr 478 MAX-ACCESS read-write 479 STATUS current 480 DESCRIPTION 481 "An advisory lock used to allow cooperating applications 482 to coordinate their use of the contents of this MIB. This 483 typically occurs when an application seeks to create an 484 new entry or alter an existing entry in 485 slapmPRMonTable (or old slapmPolicyMonitorTable). A 486 management implementation MAY utilize the slapmSpinLock to 487 serialize its changes or additions. This usage is not 488 required. However, slapmSpinLock MUST be supported by 489 agent implementations." 490 ::= { slapmBaseObjects 1 } 492 slapmPolicyCountQueries OBJECT-TYPE 493 SYNTAX Counter32 494 MAX-ACCESS read-only 495 STATUS current 496 DESCRIPTION 497 "The total number of times that a policy lookup occurred 498 with respect to a policy agent. 499 This is the number of times that a reference was made to 500 a policy definition at a system and includes the number 501 of times that a policy repository was accessed, 502 slapmPolicyCountAccesses. The object 503 slapmPolicyCountAccesses should be less than 504 slapmPolicyCountQueries when policy definitions are 505 cached at a system." 506 ::= { slapmBaseObjects 2 } 508 slapmPolicyCountAccesses OBJECT-TYPE 509 SYNTAX Counter32 510 MAX-ACCESS read-only 511 STATUS current 512 DESCRIPTION 513 "Total number of times that a policy repository was 514 accessed with respect to a policy agent. 515 The value of this object should be less than 516 slapmPolicyCountQueries, since typically policy entries 517 are cached to minimize repository accesses." 518 ::= { slapmBaseObjects 3 } 520 slapmPolicyCountSuccessAccesses OBJECT-TYPE 521 SYNTAX Counter32 522 MAX-ACCESS read-only 523 STATUS current 524 DESCRIPTION 525 "Total number of successful policy repository accesses 526 with respect to a policy agent." 527 ::= { slapmBaseObjects 4 } 529 slapmPolicyCountNotFounds OBJECT-TYPE 530 SYNTAX Counter32 531 MAX-ACCESS read-only 532 STATUS current 533 DESCRIPTION 534 "Total number of policy repository accesses, 535 with respect to a policy agent, that 536 resulted in an entry not being located." 537 ::= { slapmBaseObjects 5 } 539 slapmPolicyPurgeTime OBJECT-TYPE 540 SYNTAX Integer32 (0..3600) -- maximum of 1 hour 541 UNITS "seconds" 542 MAX-ACCESS read-write 543 STATUS current 544 DESCRIPTION 545 "The purpose of this object is to define the amount 546 of time (in seconds) to wait before removing an 547 slapmPolicyRuleStatsEntry (or old slapmPolicyStatsEntry) 548 when a system detects that the associated policy 549 definition has been deleted. This gives any polling 550 management applications time to complete their last poll 551 before an entry is removed. An slapmPolicyRuleStatsEntry 552 (or old slapmPolicyStatsEntry) enters the 553 deleteNeeded(3) state via slapmPolicyRuleStatsOperStatus 554 (or old slapmPolicyStatsOperStatus) when a system first 555 detects that the entry needs to be removed. 557 Once slapmPolicyPurgeTime has expired for an entry in 558 deleteNeeded(3) state it is removed a long with any 559 dependent slapmPRMonTable (or slapmPolicyMonitorTable) 560 entries. 562 A value of 0 for this option disables this function and 563 results in the automatic purging of slapmPRMonTable 564 (or slapmPolicyTable) entries upon transition into 565 deleteNeeded(3) state. 567 A slapmPolicyRuleDeleted (or slapmPolicyProfileDeleted) 568 notification is sent when an slapmPolicyRuleStatsEntry (or 569 slapmPolicyStatsEntry) is removed. Dependent 570 slapmPRMonTable (or slapmPolicyMonitorTable) 571 deletion results in a slapmPolicyRuleMonDeleted (or 572 slapmPolicyMonitorDeleted) notification being sent. 573 These notifications are suppressed if the value of 574 slapmPolicyTrapEnable is disabled(2)." 575 DEFVAL { 900 } -- 15 minute default purge time 576 ::= { slapmBaseObjects 6 } 578 slapmPolicyTrapEnable OBJECT-TYPE 579 SYNTAX INTEGER { enabled(1), disabled(2) } 580 MAX-ACCESS read-write 581 STATUS current 582 DESCRIPTION 583 "Indicates whether slapmPolicyRuleDeleted and 584 slapmPolicyRuleMonDeleted (or slapmPolicyProfileDeleted 585 and slapmPolicyMonitorDeleted) notifications should be 586 generated by this system." 587 DEFVAL { disabled } 588 ::= { slapmBaseObjects 7 } 590 slapmPolicyTrapFilter OBJECT-TYPE 591 SYNTAX Integer32 (0..64) 592 UNITS "intervals" 593 MAX-ACCESS read-create 594 STATUS current 595 DESCRIPTION 596 "The purpose of this object is to suppress unnecessary 597 slapmSubcMonitorNotOkay (or 598 slapmSubcomponentMonitoredEventNotAchieved), for example, 599 notifications. Basically, a monitored event has to 600 not meet its SLA requirement for the number of 601 consecutive intervals indicated by the value of this 602 object." 603 DEFVAL { 3 } 604 ::= { slapmBaseObjects 8 } 606 slapmTableObjects OBJECT IDENTIFIER ::= { slapmObjects 2 } 608 -- Sla Performance Monitoring Policy Statistics Table 610 slapmPolicyStatsTable OBJECT-TYPE 611 SYNTAX SEQUENCE OF SlapmPolicyStatsEntry 612 MAX-ACCESS not-accessible 613 STATUS deprecated 614 DESCRIPTION 615 "Provides statistics on all policies known at a 616 system. 618 This table has been deprecated and replaced with 619 the slapmPolicyRuleStatsTable. Older implementations of 620 this MIB are expected to continue their support of this 621 table." 622 ::= { slapmTableObjects 1 } 624 slapmPolicyStatsEntry OBJECT-TYPE 625 SYNTAX SlapmPolicyStatsEntry 626 MAX-ACCESS not-accessible 627 STATUS deprecated 628 DESCRIPTION 629 "Defines an entry in the slapmPolicyStatsTable. This table 630 defines a set of statistics that is kept on a per system, 631 policy and traffic profile basis. A policy can be 632 defined to contain multiple traffic profiles that map to 633 a single action. 635 Entries in this table are not created or deleted via SNMP 636 but reflect the set of policy definitions known at a system." 637 INDEX { 638 slapmPolicyStatsSystemAddress, 639 slapmPolicyStatsPolicyName, 640 slapmPolicyStatsTrafficProfileName 641 } 642 ::= { slapmPolicyStatsTable 1 } 644 SlapmPolicyStatsEntry ::= 645 SEQUENCE { 646 slapmPolicyStatsSystemAddress OCTET STRING, 647 slapmPolicyStatsPolicyName SlapmNameType, 648 slapmPolicyStatsTrafficProfileName SlapmNameType, 649 slapmPolicyStatsOperStatus INTEGER, 650 slapmPolicyStatsActiveConns Gauge32, 651 slapmPolicyStatsTotalConns Counter32, 652 slapmPolicyStatsFirstActivated DateAndTime, 653 slapmPolicyStatsLastMapping DateAndTime, 654 slapmPolicyStatsInOctets Counter32, 655 slapmPolicyStatsOutOctets Counter32, 656 slapmPolicyStatsConnectionLimit Integer32, 657 slapmPolicyStatsCountAccepts Counter32, 658 slapmPolicyStatsCountDenies Counter32, 659 slapmPolicyStatsInDiscards Counter32, 660 slapmPolicyStatsOutDiscards Counter32, 661 slapmPolicyStatsInPackets Counter32, 662 slapmPolicyStatsOutPackets Counter32, 663 slapmPolicyStatsInProfileOctets Counter32, 664 slapmPolicyStatsOutProfileOctets Counter32, 665 slapmPolicyStatsMinRate Integer32, 666 slapmPolicyStatsMaxRate Integer32, 667 slapmPolicyStatsMaxDelay Integer32 668 } 670 slapmPolicyStatsSystemAddress OBJECT-TYPE 671 SYNTAX OCTET STRING (SIZE(0 | 4 | 16)) 672 MAX-ACCESS not-accessible 673 STATUS deprecated 674 DESCRIPTION 675 "Address of a system that an Policy definition relates to. 676 A zero length octet string must be used to indicate that 677 only a single system is being represented. 678 Otherwise, the length of the octet string must be 679 4 for an ipv4 address or 16 for an ipv6 address." 680 ::= { slapmPolicyStatsEntry 1 } 682 slapmPolicyStatsPolicyName OBJECT-TYPE 683 SYNTAX SlapmNameType 684 MAX-ACCESS not-accessible 685 STATUS deprecated 686 DESCRIPTION 687 "Policy name that this entry relates to." 688 ::= { slapmPolicyStatsEntry 2 } 690 slapmPolicyStatsTrafficProfileName OBJECT-TYPE 691 SYNTAX SlapmNameType 692 MAX-ACCESS not-accessible 693 STATUS deprecated 694 DESCRIPTION 695 "The name of a traffic profile that is associated with 696 a policy." 697 ::= { slapmPolicyStatsEntry 3 } 699 slapmPolicyStatsOperStatus OBJECT-TYPE 700 SYNTAX INTEGER { 701 inactive(1), 702 active(2), 703 deleteNeeded(3) 704 } 705 MAX-ACCESS read-only 706 STATUS deprecated 707 DESCRIPTION 708 "The state of a policy entry: 710 inactive(1) - An policy entry was either defined 711 by local system definition or 712 discovered via a directory search 713 but has not been activated (not 714 currently being used). 715 active(2) - Policy entry is being used to affect 716 traffic flows. 717 deleteNeeded(3) - Either though local implementation 718 dependent methods or by discovering 719 that the directory entry corresponding 720 to this table entry no longer 721 exists and slapmPolicyPurgeTime needs 722 to expire before attempting to remove 723 the corresponding slapmPolicyStatsEntry 724 and any dependent slapmPolicyMonitor 725 table entries. 726 Note: a policy traffic profile in a state other than 727 active(1) is not being used to affect traffic flows." 728 ::= { slapmPolicyStatsEntry 4 } 730 slapmPolicyStatsActiveConns OBJECT-TYPE 731 SYNTAX Gauge32 732 MAX-ACCESS read-only 733 STATUS deprecated 734 DESCRIPTION 735 "The number of active TCP connections that are 736 affected by the corresponding policy entry." 737 ::= { slapmPolicyStatsEntry 5 } 739 slapmPolicyStatsTotalConns OBJECT-TYPE 740 SYNTAX Counter32 741 MAX-ACCESS read-only 742 STATUS deprecated 743 DESCRIPTION 744 "The number of total TCP connections that are 745 affected by the corresponding policy entry." 746 ::= { slapmPolicyStatsEntry 6 } 748 slapmPolicyStatsFirstActivated OBJECT-TYPE 749 SYNTAX DateAndTime 750 MAX-ACCESS read-only 751 STATUS deprecated 752 DESCRIPTION 753 "The timestamp for when the corresponding policy entry 754 is activated. The value of this object serves as 755 the discontinuity event indicator when polling entries 756 in this table. The value of this object is updated on 757 transition of slapmPolicyStatsOperStatus into the active(2) 758 state." 759 DEFVAL { '0000000000000000'H } 760 ::= { slapmPolicyStatsEntry 7 } 762 slapmPolicyStatsLastMapping OBJECT-TYPE 763 SYNTAX DateAndTime 764 MAX-ACCESS read-only 765 STATUS deprecated 766 DESCRIPTION 767 "The timestamp for when the last time 768 that the associated policy entry was used." 769 DEFVAL { '0000000000000000'H } 770 ::= { slapmPolicyStatsEntry 8 } 772 slapmPolicyStatsInOctets OBJECT-TYPE 773 SYNTAX Counter32 774 MAX-ACCESS read-only 775 STATUS deprecated 776 DESCRIPTION 777 "The number of octets that was received by IP for an 778 entity that map to this entry." 779 ::= { slapmPolicyStatsEntry 9 } 781 slapmPolicyStatsOutOctets OBJECT-TYPE 782 SYNTAX Counter32 783 MAX-ACCESS read-only 784 STATUS deprecated 785 DESCRIPTION 786 "The number of octets that was transmitted by IP for an 787 entity that map to this entry." 788 ::= { slapmPolicyStatsEntry 10 } 790 slapmPolicyStatsConnectionLimit OBJECT-TYPE 791 SYNTAX Integer32 792 MAX-ACCESS read-only 793 STATUS deprecated 794 DESCRIPTION 795 "The limit for the number of active TCP connections that 796 are allowed for this policy definition. A value of zero 797 for this object implies that a connection limit has not 798 been specified." 799 ::= { slapmPolicyStatsEntry 11 } 801 slapmPolicyStatsCountAccepts OBJECT-TYPE 802 SYNTAX Counter32 803 MAX-ACCESS read-only 804 STATUS deprecated 805 DESCRIPTION 806 "This counter is incremented when a policy action's 807 Permission value is set to Accept and a session 808 (TCP connection) is accepted." 809 ::= { slapmPolicyStatsEntry 12 } 811 slapmPolicyStatsCountDenies OBJECT-TYPE 812 SYNTAX Counter32 813 MAX-ACCESS read-only 814 STATUS deprecated 815 DESCRIPTION 816 "This counter is incremented when a policy action's 817 Permission value is set to Deny and a session is denied, 818 or when a session (TCP connection) is rejected due to a 819 policy's connection limit (slapmPolicyStatsConnectLimit) 820 being reached." 821 ::= { slapmPolicyStatsEntry 13 } 823 slapmPolicyStatsInDiscards OBJECT-TYPE 824 SYNTAX Counter32 825 MAX-ACCESS read-only 826 STATUS deprecated 827 DESCRIPTION 828 "This counter counts the number of in octets discarded. 829 This occurs when an error is detected. Examples of this 830 are buffer overflow, checksum error, or bad packet 831 format." 832 ::= { slapmPolicyStatsEntry 14 } 834 slapmPolicyStatsOutDiscards OBJECT-TYPE 835 SYNTAX Counter32 836 MAX-ACCESS read-only 837 STATUS deprecated 838 DESCRIPTION 839 "This counter counts the number of out octets discarded. 840 Examples of this are buffer overflow, checksum error, or 841 bad packet format." 842 ::= { slapmPolicyStatsEntry 15 } 844 slapmPolicyStatsInPackets OBJECT-TYPE 845 SYNTAX Counter32 846 MAX-ACCESS read-only 847 STATUS deprecated 848 DESCRIPTION 849 "This counter counts the number of in packets received 850 that relate to this policy entry from IP." 851 ::= { slapmPolicyStatsEntry 16 } 853 slapmPolicyStatsOutPackets OBJECT-TYPE 854 SYNTAX Counter32 855 MAX-ACCESS read-only 856 STATUS deprecated 857 DESCRIPTION 858 "This counter counts the number of out packets sent 859 by IP that relate to this policy entry." 860 ::= { slapmPolicyStatsEntry 17 } 862 slapmPolicyStatsInProfileOctets OBJECT-TYPE 863 SYNTAX Counter32 864 MAX-ACCESS read-only 865 STATUS deprecated 866 DESCRIPTION 867 "This counter counts the number of in octets that are 868 determined to be within profile." 869 ::= { slapmPolicyStatsEntry 18 } 871 slapmPolicyStatsOutProfileOctets OBJECT-TYPE 872 SYNTAX Counter32 873 MAX-ACCESS read-only 874 STATUS deprecated 875 DESCRIPTION 876 "This counter counts the number of out octets that are 877 determined to be within profile." 878 ::= { slapmPolicyStatsEntry 19 } 880 slapmPolicyStatsMinRate OBJECT-TYPE 881 SYNTAX Integer32 882 UNITS "Kilobits per second" 883 MAX-ACCESS read-only 884 STATUS deprecated 885 DESCRIPTION 886 "The minimum transfer rate defined for this entry." 887 ::= { slapmPolicyStatsEntry 20 } 889 slapmPolicyStatsMaxRate OBJECT-TYPE 890 SYNTAX Integer32 891 UNITS "Kilobits per second" 892 MAX-ACCESS read-only 893 STATUS deprecated 894 DESCRIPTION 895 "The maximum transfer rate defined for this entry." 896 ::= { slapmPolicyStatsEntry 21 } 898 slapmPolicyStatsMaxDelay OBJECT-TYPE 899 SYNTAX Integer32 900 UNITS "milliseconds" 901 MAX-ACCESS read-only 902 STATUS deprecated 903 DESCRIPTION 904 "The maximum delay defined for this entry." 905 ::= { slapmPolicyStatsEntry 22 } 907 -- SLA Performance Monitoring Policy Monitor Table 909 slapmPolicyMonitorTable OBJECT-TYPE 910 SYNTAX SEQUENCE OF SlapmPolicyMonitorEntry 911 MAX-ACCESS not-accessible 912 STATUS deprecated 913 DESCRIPTION 914 "Provides a method of monitoring policies and their 915 effect at a system. 917 This table has been deprecated and replaced with 918 the slapmPRMonTable. Older implementations of 919 this MIB are expected to continue their support 920 of this table." 921 ::= { slapmTableObjects 2 } 923 slapmPolicyMonitorEntry OBJECT-TYPE 924 SYNTAX SlapmPolicyMonitorEntry 925 MAX-ACCESS not-accessible 926 STATUS deprecated 927 DESCRIPTION 928 "Defines an entry in the slapmPolicyMonitorTable. This 929 table defines which policies should be monitored on a 930 per policy traffic profile basis." 931 INDEX { 932 slapmPolicyMonitorOwnerIndex, 933 slapmPolicyMonitorSystemAddress, 934 slapmPolicyMonitorPolicyName, 935 slapmPolicyMonitorTrafficProfileName 936 } 937 ::= { slapmPolicyMonitorTable 1 } 939 SlapmPolicyMonitorEntry ::= 940 SEQUENCE { 941 slapmPolicyMonitorOwnerIndex SnmpAdminString, 942 slapmPolicyMonitorSystemAddress OCTET STRING, 943 slapmPolicyMonitorPolicyName SlapmNameType, 944 slapmPolicyMonitorTrafficProfileName SlapmNameType, 945 slapmPolicyMonitorControl BITS, 946 slapmPolicyMonitorStatus SlapmStatus, 947 slapmPolicyMonitorInterval Integer32, 948 slapmPolicyMonitorIntTime DateAndTime, 949 slapmPolicyMonitorCurrentInRate Gauge32, 950 slapmPolicyMonitorCurrentOutRate Gauge32, 951 slapmPolicyMonitorMinRateLow Integer32, 952 slapmPolicyMonitorMinRateHigh Integer32, 953 slapmPolicyMonitorMaxRateHigh Integer32, 954 slapmPolicyMonitorMaxRateLow Integer32, 955 slapmPolicyMonitorMaxDelayHigh Integer32, 956 slapmPolicyMonitorMaxDelayLow Integer32, 957 slapmPolicyMonitorMinInRateNotAchieves Counter32, 958 slapmPolicyMonitorMaxInRateExceeds Counter32, 959 slapmPolicyMonitorMaxDelayExceeds Counter32, 960 slapmPolicyMonitorMinOutRateNotAchieves Counter32, 961 slapmPolicyMonitorMaxOutRateExceeds Counter32, 962 slapmPolicyMonitorCurrentDelayRate Gauge32, 963 slapmPolicyMonitorRowStatus RowStatus 964 } 966 slapmPolicyMonitorOwnerIndex OBJECT-TYPE 967 SYNTAX SnmpAdminString (SIZE(0..16)) 968 MAX-ACCESS not-accessible 969 STATUS deprecated 970 DESCRIPTION 971 "To facilitate the provisioning of access control by a 972 security administrator using the View-Based Access 973 Control Model (RFC 2575, VACM) for tables in which 974 multiple users may need to independently create or modify 975 entries, the initial index is used as an 'owner index'. 976 Such an initial index has a syntax of SnmpAdminString, 977 and can thus be trivially mapped to a securityName or 978 groupName as defined in VACM, in accordance with a 979 security policy. 981 All entries in that table belonging to a particular user 982 will have the same value for this initial index. For a 983 given user's entries in a particular table, the object 984 identifiers for the information in these entries will 985 have the same subidentifiers (except for the 'column' 986 subidentifier) up to the end of the encoded owner index. 987 To configure VACM to permit access to this portion of the 988 table, one would create vacmViewTreeFamilyTable entries 989 with the value of vacmViewTreeFamilySubtree including the 990 owner index portion, and vacmViewTreeFamilyMask 991 'wildcarding' the column subidentifier. More elaborate 992 configurations are possible." 993 ::= { slapmPolicyMonitorEntry 1 } 995 slapmPolicyMonitorSystemAddress OBJECT-TYPE 996 SYNTAX OCTET STRING (SIZE(0 | 4 | 16)) 997 MAX-ACCESS not-accessible 998 STATUS deprecated 999 DESCRIPTION 1000 "Address of a system that an Policy definition relates to. 1001 A zero length octet string can be used to indicate that 1002 only a single system is being represented. 1003 Otherwise, the length of the octet string should be 1004 4 for an ipv4 address and 16 for an ipv6 address." 1005 ::= { slapmPolicyMonitorEntry 2 } 1007 slapmPolicyMonitorPolicyName OBJECT-TYPE 1008 SYNTAX SlapmNameType 1009 MAX-ACCESS not-accessible 1010 STATUS deprecated 1011 DESCRIPTION 1012 "Policy name that this entry relates to." 1013 ::= { slapmPolicyMonitorEntry 3 } 1015 slapmPolicyMonitorTrafficProfileName OBJECT-TYPE 1016 SYNTAX SlapmNameType 1017 MAX-ACCESS not-accessible 1018 STATUS deprecated 1019 DESCRIPTION 1020 "The corresponding Traffic Profile name." 1021 ::= { slapmPolicyMonitorEntry 4 } 1023 slapmPolicyMonitorControl OBJECT-TYPE 1024 SYNTAX BITS { 1025 monitorMinRate(0), 1026 monitorMaxRate(1), 1027 monitorMaxDelay(2), 1028 enableAggregateTraps(3), 1029 enableSubcomponentTraps(4), 1030 monitorSubcomponents(5) 1031 } 1032 MAX-ACCESS read-create 1033 STATUS deprecated 1034 DESCRIPTION 1035 "The value of this object determines the type and level 1036 of monitoring that is applied to a policy/profile. The 1037 value of this object can't be changed once the table 1038 entry that it is a part of is activated via a 1039 slapmPolicyMonitorRowStatus transition to active state. 1041 monitorMinRate(0) - Monitor minimum transfer rate. 1042 monitorMaxRate(1) - Monitor maximum transfer rate. 1043 monitorMaxDelay(2) - Monitor maximum delay. 1045 enableAggregateTraps(3) - The enableAggregateTraps(3) 1046 BITS setting enables notification generation 1047 when monitoring a policy traffic profile as an 1048 aggregate using the values in the corresponding 1049 slapmPolicyStatsEntry. By default this function 1050 is not enabled. 1051 enableSubcomponentTraps(4) - This BITS setting enables 1052 notification generation when monitoring all 1053 subcomponents that are mapped to an corresponding 1054 slapmPolicyStatsEntry. By default this 1055 function is not enabled. 1056 monitorSubcomponents(5) - This BITS setting enables 1057 monitoring of each subcomponent (typically a 1058 TCP connection or UDP listener) individually." 1059 DEFVAL { { monitorMinRate, monitorMaxRate, 1060 monitorMaxDelay } } 1061 ::= { slapmPolicyMonitorEntry 5 } 1063 slapmPolicyMonitorStatus OBJECT-TYPE 1064 SYNTAX SlapmStatus 1065 MAX-ACCESS read-only 1066 STATUS deprecated 1067 DESCRIPTION 1068 "The value of this object indicates when a monitored 1069 value has not meet a threshold or isn't meeting the 1070 defined service level. The SlapmStatus TEXTUAL-CONVENTION 1071 defines two levels of not meeting a threshold. The first 1072 set: 1073 slaMinInRateNotAchieved(0), 1074 slaMaxInRateExceeded(1), 1075 slaMaxDelayExceeded(2), 1076 slaMinOutRateNotAchieved(3), 1077 slaMaxOutRateExceeded(4) 1079 are used to indicate when the SLA as an aggregate is 1080 not meeting a threshold while the second set: 1082 monitorMinInRateNotAchieved(5), 1083 monitorMaxInRateExceeded(6), 1084 monitorMaxDelayExceeded(7), 1085 monitorMinOutRateNotAchieved(8), 1086 monitorMaxOutRateExceeded(9) 1088 indicate that at least one subcomponent is not meeting 1089 a threshold." 1090 ::= { slapmPolicyMonitorEntry 6 } 1092 slapmPolicyMonitorInterval OBJECT-TYPE 1093 SYNTAX Integer32 (15..86400) -- 15 second min, 24 hour max 1094 UNITS "seconds" 1095 MAX-ACCESS read-create 1096 STATUS deprecated 1097 DESCRIPTION 1098 "The number of seconds that defines the sample period." 1099 DEFVAL {20} -- 20 seconds 1100 ::= { slapmPolicyMonitorEntry 7 } 1102 slapmPolicyMonitorIntTime OBJECT-TYPE 1103 SYNTAX DateAndTime 1104 MAX-ACCESS read-only 1105 STATUS deprecated 1106 DESCRIPTION 1107 "The timestamp for when the last interval ended." 1108 DEFVAL { '0000000000000000'H } 1109 ::= { slapmPolicyMonitorEntry 8 } 1111 slapmPolicyMonitorCurrentInRate OBJECT-TYPE 1112 SYNTAX Gauge32 1113 UNITS "kilobits per second" 1114 MAX-ACCESS read-only 1115 STATUS deprecated 1116 DESCRIPTION 1117 "Using the value of the corresponding 1118 slapmPolicyMonitorInterval, slapmPolicyStatsInOctets 1119 is sampled and then divided by slapmPolicyMonitorInterval 1120 to determine the current in transfer rate." 1121 ::= { slapmPolicyMonitorEntry 9 } 1123 slapmPolicyMonitorCurrentOutRate OBJECT-TYPE 1124 SYNTAX Gauge32 1125 UNITS "kilobits per second" 1126 MAX-ACCESS read-only 1127 STATUS deprecated 1128 DESCRIPTION 1129 "Using the value of the corresponding 1130 slapmPolicyMonitorInterval, slapmPolicyStatsOutOctets 1131 is sampled and then divided by slapmPolicyMonitorInterval 1132 to determine the current out transfer rate." 1133 ::= { slapmPolicyMonitorEntry 10 } 1135 slapmPolicyMonitorMinRateLow OBJECT-TYPE 1136 SYNTAX Integer32 1137 UNITS "kilobits per second" 1138 MAX-ACCESS read-create 1139 STATUS deprecated 1140 DESCRIPTION 1141 "The threshold for generating a 1142 slapmMonitoredEventNotAchieved notification, signalling 1143 that a monitored minimum transfer rate has not been meet. 1145 A slapmMonitoredEventNotAchieved notification is not 1146 generated again for an slapmPolicyMonitorEntry until 1147 the minimum transfer rate 1148 exceeds slapmPolicyMonitorMinRateHigh (a 1149 slapmMonitoredEventOkay notification is then transmitted) 1150 and then fails below slapmPolicyMonitorMinRateLow. This 1151 behavior reduces the slapmMonitoredEventNotAchieved 1152 notifications that are transmitted. 1154 A value of zero for this object is returned when the 1155 slapmPolicyMonitorControl monitorMinRate(0) is not 1156 enabled. When enabled the default value for this object 1157 is the min rate value specified in the associated 1158 action definition minus 10%. If the action definition 1159 doesn't have a min rate defined then there is no 1160 default for this object and a value MUST be specified 1161 prior to activating this entry when monitorMinRate(0) 1162 is selected. 1164 Note: The corresponding slapmPolicyMonitorControl 1165 BITS setting, enableAggregateTraps(3), MUST be selected in 1166 order for any notification relating to this entry to 1167 potentially be generated." 1168 ::= { slapmPolicyMonitorEntry 11 } 1170 slapmPolicyMonitorMinRateHigh OBJECT-TYPE 1171 SYNTAX Integer32 1172 UNITS "kilobits per second" 1173 MAX-ACCESS read-create 1174 STATUS deprecated 1175 DESCRIPTION 1176 "The threshold for generating a slapmMonitoredEventOkay 1177 notification, signalling that a monitored minimum 1178 transfer rate has increased to an acceptable level. 1180 A value of zero for this object is returned when the 1181 slapmPolicyMonitorControl monitorMinRate(0) is not 1182 enabled. When enabled the default value for this object 1183 is the min rate value specified in the associated 1184 action definition plus 10%. If the action definition 1185 doesn't have a min rate defined then there is no 1186 default for this object and a value MUST be specified 1187 prior to activating this entry when monitorMinRate(0) 1188 is selected. 1190 Note: The corresponding slapmPolicyMonitorControl 1191 BITS setting, enableAggregateTraps(3), MUST be selected 1192 in order for any notification relating to this entry to 1193 potentially be generated." 1194 ::= { slapmPolicyMonitorEntry 12 } 1196 slapmPolicyMonitorMaxRateHigh OBJECT-TYPE 1197 SYNTAX Integer32 1198 UNITS "kilobits per second" 1199 MAX-ACCESS read-create 1200 STATUS deprecated 1201 DESCRIPTION 1202 "The threshold for generating a 1203 slapmMonitoredEventNotAchieved notification, signalling 1204 that a monitored maximum transfer rate has been exceeded. 1206 A slapmMonitoredEventNotAchieved notification is not 1207 generated again for an slapmPolicyMonitorEntry until the 1208 maximum transfer rate fails below 1209 slapmPolicyMonitorMaxRateLow (a slapmMonitoredEventOkay 1210 notification is then transmitted) and then raises above 1211 slapmPolicyMonitorMaxRateHigh. This behavior reduces the 1212 slapmMonitoredEventNotAchieved notifications that are 1213 transmitted. 1215 A value of zero for this object is returned when the 1216 slapmPolicyMonitorControl monitorMaxRate(1) is not 1217 enabled. When enabled the default value for this object 1218 is the max rate value specified in the associated 1219 action definition plus 10%. If the action definition 1220 doesn't have a max rate defined then there is no 1221 default for this object and a value MUST be specified 1222 prior to activating this entry when monitorMaxRate(1) 1223 is selected. 1225 Note: The corresponding slapmPolicyMonitorControl 1226 BITS setting, enableAggregateTraps(3), MUST be selected in 1227 order for any notification relating to this entry to 1228 potentially be generated." 1229 ::= { slapmPolicyMonitorEntry 13 } 1231 slapmPolicyMonitorMaxRateLow OBJECT-TYPE 1232 SYNTAX Integer32 1233 UNITS "kilobits per second" 1234 MAX-ACCESS read-create 1235 STATUS deprecated 1236 DESCRIPTION 1237 "The threshold for generating a slapmMonitoredEventOkay 1238 notification, signalling that a monitored maximum 1239 transfer rate has fallen to an acceptable level. 1241 A value of zero for this object is returned when the 1242 slapmPolicyMonitorControl monitorMaxRate(1) is not 1243 enabled. When enabled the default value for this object 1244 is the max rate value specified in the associated 1245 action definition minus 10%. If the action definition 1246 doesn't have a max rate defined then there is no 1247 default for this object and a value MUST be specified 1248 prior to activating this entry when monitorMaxRate(1) 1249 is selected. 1251 Note: The corresponding slapmPolicyMonitorControl 1252 BITS setting, enableAggregateTraps(3), MUST be selected in 1253 order for any notification relating to this entry to 1254 potentially be generated." 1255 ::= { slapmPolicyMonitorEntry 14 } 1257 slapmPolicyMonitorMaxDelayHigh OBJECT-TYPE 1258 SYNTAX Integer32 1259 UNITS "milliseconds" 1260 MAX-ACCESS read-create 1261 STATUS deprecated 1262 DESCRIPTION 1263 "The threshold for generating a 1264 slapmMonitoredEventNotAchieved notification, signalling 1265 that a monitored maximum delay rate has been exceeded. 1267 A slapmMonitoredEventNotAchieved notification is not 1268 generated again for an slapmPolicyMonitorEntry until 1269 the maximum delay rate falls below 1270 slapmPolicyMonitorMaxDelayLow (a slapmMonitoredEventOkay 1271 notification is then transmitted) and raises above 1272 slapmPolicyMonitorMaxDelayHigh. This behavior reduces 1273 the slapmMonitoredEventNotAchieved notifications that are 1274 transmitted. 1276 A value of zero for this object is returned when the 1277 slapmPolicyMonitorControl monitorMaxDelay(4) is not 1278 enabled. When enabled the default value for this object 1279 is the max delay value specified in the associated 1280 action definition plus 10%. If the action definition 1281 doesn't have a max delay defined then there is no 1282 default for this object and a value MUST be specified 1283 prior to activating this entry when monitorMaxDelay(4) 1284 is selected. 1286 Note: The corresponding slapmPolicyMonitorControl 1287 BITS setting, enableAggregateTraps(3), MUST be selected 1288 in order for any notification relating to this entry to 1289 potentially be generated." 1290 ::= { slapmPolicyMonitorEntry 15 } 1292 slapmPolicyMonitorMaxDelayLow OBJECT-TYPE 1293 SYNTAX Integer32 1294 UNITS "milliseconds" 1295 MAX-ACCESS read-create 1296 STATUS deprecated 1297 DESCRIPTION 1298 "The threshold for generating a slapmMonitoredEventOkay 1299 notification, signalling that a monitored maximum delay 1300 rate has fallen to an acceptable level. 1302 A value of zero for this object is returned when the 1303 slapmPolicyMonitorControl monitorMaxDelay(4) is not 1304 enabled. When enabled the default value for this object 1305 is the max delay value specified in the associated 1306 action definition minus 10%. If the action definition 1307 doesn't have a max delay defined then there is no 1308 default for this object and a value MUST be specified 1309 prior to activating this entry when monitorMaxDelay(4) 1310 is selected. 1312 Note: The corresponding slapmPolicyMonitorControl 1313 BITS setting, enableAggregateTraps(3), MUST be selected 1314 in order for any notification relating to this entry to 1315 potentially be generated." 1316 ::= { slapmPolicyMonitorEntry 16 } 1318 slapmPolicyMonitorMinInRateNotAchieves OBJECT-TYPE 1319 SYNTAX Counter32 1320 MAX-ACCESS read-only 1321 STATUS deprecated 1322 DESCRIPTION 1323 "The number of times that a minimum transfer in rate 1324 was not achieved." 1325 ::= { slapmPolicyMonitorEntry 17 } 1327 slapmPolicyMonitorMaxInRateExceeds OBJECT-TYPE 1328 SYNTAX Counter32 1329 MAX-ACCESS read-only 1330 STATUS deprecated 1331 DESCRIPTION 1332 "The number of times that a maximum transfer in rate 1333 was exceeded." 1334 ::= { slapmPolicyMonitorEntry 18 } 1336 slapmPolicyMonitorMaxDelayExceeds OBJECT-TYPE 1337 SYNTAX Counter32 1338 MAX-ACCESS read-only 1339 STATUS deprecated 1340 DESCRIPTION 1341 "The number of times that a maximum delay in rate 1342 was exceeded." 1343 ::= { slapmPolicyMonitorEntry 19 } 1345 slapmPolicyMonitorMinOutRateNotAchieves OBJECT-TYPE 1346 SYNTAX Counter32 1347 MAX-ACCESS read-only 1348 STATUS deprecated 1349 DESCRIPTION 1350 "The number of times that a minimum transfer out rate 1351 was not achieved." 1352 ::= { slapmPolicyMonitorEntry 20 } 1354 slapmPolicyMonitorMaxOutRateExceeds OBJECT-TYPE 1355 SYNTAX Counter32 1356 MAX-ACCESS read-only 1357 STATUS deprecated 1358 DESCRIPTION 1359 "The number of times that a maximum transfer out rate 1360 was exceeded." 1361 ::= { slapmPolicyMonitorEntry 21 } 1363 slapmPolicyMonitorCurrentDelayRate OBJECT-TYPE 1364 SYNTAX Gauge32 1365 UNITS "milliseconds" 1366 MAX-ACCESS read-only 1367 STATUS deprecated 1368 DESCRIPTION 1369 "The current delay rate for this entry. This is 1370 calculated by taking the average of the TCP 1371 round trip times for all associating 1372 slapmSubcomponentTable entries within a interval." 1373 ::= { slapmPolicyMonitorEntry 22 } 1375 slapmPolicyMonitorRowStatus OBJECT-TYPE 1376 SYNTAX RowStatus 1377 MAX-ACCESS read-create 1378 STATUS deprecated 1379 DESCRIPTION 1380 "This object allows entries to be created and deleted 1381 in the slapmPolicyMonitorTable. An entry in this table 1382 is deleted by setting this object to destroy(6). 1384 Removal of a corresponding (same policy and traffic profile 1385 names) slapmPolicyStatsEntry has the side effect of the 1386 automatic deletion an entry in this table." 1387 ::= { slapmPolicyMonitorEntry 23 } 1389 -- Subcomponent Table 1391 slapmSubcomponentTable OBJECT-TYPE 1392 SYNTAX SEQUENCE OF SlapmSubcomponentEntry 1393 MAX-ACCESS not-accessible 1394 STATUS current 1395 DESCRIPTION 1396 "Defines a table to provide information on the 1397 individually components that are mapped to 1398 a policy rule (or old traffic profile). 1400 The indexing for this table is designed to support 1401 the use of an SNMP GET-NEXT operation using only 1402 the remote address and remote port as a way for 1403 a management station to retrieve the table entries 1404 relating to a particular client." 1405 ::= { slapmTableObjects 3 } 1407 slapmSubcomponentEntry OBJECT-TYPE 1408 SYNTAX SlapmSubcomponentEntry 1409 MAX-ACCESS not-accessible 1410 STATUS current 1411 DESCRIPTION 1412 "Describes a particular subcomponent entry. This 1413 table does not have an OwnerIndex as 1414 part of its indexing since this table's contents 1415 is intended to span multiple users." 1416 INDEX { 1417 slapmSubcomponentRemAddress, 1418 slapmSubcomponentRemPort, 1419 slapmSubcomponentLocalAddress, 1420 slapmSubcomponentLocalPort 1421 } 1422 ::= { slapmSubcomponentTable 1 } 1424 SlapmSubcomponentEntry ::= 1425 SEQUENCE { 1426 slapmSubcomponentRemAddress OCTET STRING, 1427 slapmSubcomponentRemPort Integer32, 1428 slapmSubcomponentLocalAddress OCTET STRING, 1429 slapmSubcomponentLocalPort Integer32, 1430 slapmSubcomponentProtocol INTEGER, 1431 slapmSubcomponentSystemAddress OCTET STRING, 1432 slapmSubcomponentPolicyName SlapmNameType, 1433 slapmSubcomponentTrafficProfileName SlapmNameType, 1434 slapmSubcomponentLastActivity DateAndTime, 1435 slapmSubcomponentInOctets Counter32, 1436 slapmSubcomponentOutOctets Counter32, 1437 slapmSubcomponentTcpOutBufferedOctets Counter32, 1438 slapmSubcomponentTcpInBufferedOctets Counter32, 1439 slapmSubcomponentTcpReXmts Counter32, 1440 slapmSubcomponentTcpRoundTripTime Integer32, 1441 slapmSubcomponentTcpRoundTripVariance Integer32, 1442 slapmSubcomponentInPdus Counter32, 1443 slapmSubcomponentOutPdus Counter32, 1444 slapmSubcomponentApplName SnmpAdminString, 1445 slapmSubcomponentMonitorStatus SlapmStatus, 1446 slapmSubcomponentMonitorIntTime DateAndTime, 1447 slapmSubcomponentMonitorCurrentInRate Gauge32, 1448 slapmSubcomponentMonitorCurrentOutRate Gauge32, 1449 slapmSubcomponentPolicyRuleIndex Unsigned32 1450 } 1452 slapmSubcomponentRemAddress OBJECT-TYPE 1453 SYNTAX OCTET STRING (SIZE(0 | 4 | 16)) 1454 MAX-ACCESS not-accessible 1455 STATUS current 1456 DESCRIPTION 1457 "Indicate the remote address of a subcomponent. 1458 A remote address can be either an ipv4 address in which 1459 case 4 octets are required or as an ipv6 address that 1460 requires 16 octets. The value of this subidentifier 1461 is a zero length octet string when this entry relates 1462 to a UDP listener." 1463 ::= { slapmSubcomponentEntry 1 } 1465 slapmSubcomponentRemPort OBJECT-TYPE 1466 SYNTAX Integer32(0..65535) 1467 MAX-ACCESS not-accessible 1468 STATUS current 1469 DESCRIPTION 1470 "Indicate the remote port of a subcomponent. 1471 The value of this subidentifier 1472 is 0 when this entry relates to a UDP listener." 1473 ::= { slapmSubcomponentEntry 2 } 1475 slapmSubcomponentLocalAddress OBJECT-TYPE 1476 SYNTAX OCTET STRING (SIZE(4 | 16)) 1477 MAX-ACCESS not-accessible 1478 STATUS current 1479 DESCRIPTION 1480 "Indicate the local address of a subcomponent. 1481 A local address can be either an ipv4 address in which 1482 case 4 octets are required or as an ipv6 address that 1483 requires 16 octets." 1484 ::= { slapmSubcomponentEntry 3 } 1486 slapmSubcomponentLocalPort OBJECT-TYPE 1487 SYNTAX Integer32(0..65535) 1488 MAX-ACCESS not-accessible 1490 STATUS current 1491 DESCRIPTION 1492 "Indicate the local port of a subcomponent." 1493 ::= { slapmSubcomponentEntry 4 } 1495 slapmSubcomponentProtocol OBJECT-TYPE 1496 SYNTAX INTEGER { 1497 udpListener(1), 1498 tcpConnection(2) 1499 } 1500 MAX-ACCESS read-only 1501 STATUS current 1502 DESCRIPTION 1503 "Indicate the protocol in use that identifies the 1504 type of subcomponent." 1505 ::= { slapmSubcomponentEntry 5 } 1507 slapmSubcomponentSystemAddress OBJECT-TYPE 1508 SYNTAX OCTET STRING (SIZE(0 | 4 | 16)) 1509 MAX-ACCESS read-only 1510 STATUS current 1511 DESCRIPTION 1512 "Address of a system that an Policy definition relates to. 1513 A zero length octet string can be used to indicate that 1514 only a single system is being represented. 1515 Otherwise, the length of the octet string should be 1516 4 for an ipv4 address and 16 for an ipv6 address." 1517 ::= { slapmSubcomponentEntry 6 } 1519 slapmSubcomponentPolicyName OBJECT-TYPE 1520 SYNTAX SlapmNameType 1521 MAX-ACCESS read-only 1522 STATUS deprecated 1523 DESCRIPTION 1524 "Policy name that this entry relates to. 1526 This object, along with slapmSubcomponentTrafficProfileName, 1527 have been replaced with the use of an unsigned integer 1528 index that is mapped to an slapmPolicyNameEntry to actually 1529 identify policy naming." 1530 ::= { slapmSubcomponentEntry 7 } 1532 slapmSubcomponentTrafficProfileName OBJECT-TYPE 1533 SYNTAX SlapmNameType 1534 MAX-ACCESS read-only 1535 STATUS deprecated 1536 DESCRIPTION 1537 "The corresponding traffic profile name. 1539 This object, along with slapmSubcomponentProfileName, 1540 have been replaced with the use of an unsigned integer 1541 index that is mapped to an slapmPolicyNameEntry to 1542 actually identify policy naming." 1543 ::= { slapmSubcomponentEntry 8 } 1545 slapmSubcomponentLastActivity OBJECT-TYPE 1546 SYNTAX DateAndTime 1547 MAX-ACCESS read-only 1548 STATUS current 1549 DESCRIPTION 1550 "The number of 100ths of seconds since this entry 1551 was last used." 1552 DEFVAL { '0000000000000000'H } 1553 ::= { slapmSubcomponentEntry 9 } 1555 slapmSubcomponentInOctets OBJECT-TYPE 1556 SYNTAX Counter32 1557 MAX-ACCESS read-only 1558 STATUS current 1559 DESCRIPTION 1560 "The number of octets received from IP for this 1561 connection." 1562 ::= { slapmSubcomponentEntry 10 } 1564 slapmSubcomponentOutOctets OBJECT-TYPE 1565 SYNTAX Counter32 1566 MAX-ACCESS read-only 1567 STATUS current 1568 DESCRIPTION 1569 "The number of octets sent to IP for this connection." 1570 ::= { slapmSubcomponentEntry 11 } 1572 slapmSubcomponentTcpOutBufferedOctets OBJECT-TYPE 1573 SYNTAX Counter32 1574 MAX-ACCESS read-only 1575 STATUS current 1576 DESCRIPTION 1577 "Number of outgoing octets buffered. The value 1578 of this object is zero when the entry is not 1579 for a TCP connection." 1580 ::= { slapmSubcomponentEntry 12 } 1582 slapmSubcomponentTcpInBufferedOctets OBJECT-TYPE 1583 SYNTAX Counter32 1584 MAX-ACCESS read-only 1585 STATUS current 1586 DESCRIPTION 1587 "Number of incoming octets buffered. The value 1588 of this object is zero when the entry is not 1589 for a TCP connection." 1590 ::= { slapmSubcomponentEntry 13 } 1592 slapmSubcomponentTcpReXmts OBJECT-TYPE 1593 SYNTAX Counter32 1594 MAX-ACCESS read-only 1595 STATUS current 1596 DESCRIPTION 1597 "Number of retransmissions. The value 1598 of this object is zero when the entry is not 1599 for a TCP connection." 1600 ::= { slapmSubcomponentEntry 14 } 1602 slapmSubcomponentTcpRoundTripTime OBJECT-TYPE 1603 SYNTAX Integer32 1604 UNITS "milliseconds" 1605 MAX-ACCESS read-only 1606 STATUS current 1607 DESCRIPTION 1608 "The amount of time that has elapsed, measured in 1609 milliseconds, from when the last TCP segment was 1610 transmitted by the TCP Stack until the ACK was 1611 received. 1613 The value of this object is zero when the entry is not 1614 for a TCP connection." 1615 ::= { slapmSubcomponentEntry 15 } 1617 slapmSubcomponentTcpRoundTripVariance OBJECT-TYPE 1618 SYNTAX Integer32 1619 MAX-ACCESS read-only 1620 STATUS current 1621 DESCRIPTION 1622 "Round trip time variance. 1624 The value of this object is zero when the entry is not 1625 for a TCP connection." 1626 ::= { slapmSubcomponentEntry 16 } 1628 slapmSubcomponentInPdus OBJECT-TYPE 1629 SYNTAX Counter32 1630 MAX-ACCESS read-only 1631 STATUS current 1632 DESCRIPTION 1633 "The number of protocol related data units transferred 1634 inbound: 1636 slapmSubcomponentProtocol PDU Type 1638 udpListener(1) UDP datagrams 1639 tcpConnection(2) TCP segments" 1640 ::= { slapmSubcomponentEntry 17 } 1642 slapmSubcomponentOutPdus OBJECT-TYPE 1643 SYNTAX Counter32 1644 MAX-ACCESS read-only 1645 STATUS current 1646 DESCRIPTION 1647 "The number of protocol related data units transferred 1648 outbound: 1650 slapmSubcomponentProtocol PDU Type 1652 udpListener(1) UDP datagrams 1653 tcpConnection(2) TCP segments" 1654 ::= { slapmSubcomponentEntry 18 } 1656 slapmSubcomponentApplName OBJECT-TYPE 1657 SYNTAX SnmpAdminString (SIZE(0..32)) 1658 MAX-ACCESS read-only 1659 STATUS current 1660 DESCRIPTION 1661 "The application name associated with this entry if known, 1662 otherwise a zero-length octet string is returned as the 1663 value of this object." 1664 ::= { slapmSubcomponentEntry 19 } 1666 slapmSubcomponentMonitorStatus OBJECT-TYPE 1667 SYNTAX SlapmStatus 1668 MAX-ACCESS read-only 1669 STATUS current 1670 DESCRIPTION 1671 "The value of this object indicates when a monitored 1672 value has exceeded a threshold or isn't meeting the 1673 defined service level. Only the following SlapmStatus 1674 BITS setting can be reported here: 1676 monitorMinInRateNotAchieved(5), 1677 monitorMaxInRateExceeded(6), 1678 monitorMaxDelayExceeded(7), 1679 monitorMinOutRateNotAchieved(8), 1680 monitorMaxOutRateExceeded(9) 1682 This object only has meaning when an corresponding 1683 slapmPolicyMonitorEntry exists with the 1684 slapmPolicyMonitorControl BITS setting 1685 monitorSubcomponents(5) enabled." 1686 ::= { slapmSubcomponentEntry 20 } 1688 slapmSubcomponentMonitorIntTime OBJECT-TYPE 1689 SYNTAX DateAndTime 1690 MAX-ACCESS read-only 1691 STATUS current 1692 DESCRIPTION 1693 "The timestamp for when the last interval ended. 1695 This object only has meaning when an corresponding 1696 slapmPRMonEntry (or old slapmPolicyMonitorEntry) 1697 exists with the slapmPRMonControl (or 1698 slapmPolicyMonitorControl) BITS setting 1699 monitorSubcomponents(5) enabled. All of the 1700 octets returned when monitoring is not in effect 1701 must be zero." 1702 DEFVAL { '0000000000000000'H } 1703 ::= { slapmSubcomponentEntry 21 } 1705 slapmSubcomponentMonitorCurrentInRate OBJECT-TYPE 1706 SYNTAX Gauge32 1707 UNITS "kilobits per second" 1708 MAX-ACCESS read-only 1709 STATUS current 1710 DESCRIPTION 1711 "Using the value of the corresponding 1712 slapmPRMonInterval (or slapmPolicyMonitorInterval), 1713 slapmSubcomponentStatsInOctets 1714 is divided by slapmSubcomponentMonitorInterval to determine 1715 the current in transfer rate. 1717 This object only has meaning when an corresponding 1718 slapmPRMonEntry (or slapmPolicyMonitorEntry) 1719 exists with the slapmPRMonControl (or 1720 slapmPolicyMonitorControl) BITS setting 1721 monitorSubcomponents(5) enabled. The value of this 1722 object is zero when monitoring is not in effect." 1723 ::= { slapmSubcomponentEntry 22 } 1725 slapmSubcomponentMonitorCurrentOutRate OBJECT-TYPE 1726 SYNTAX Gauge32 1727 UNITS "kilobits per second" 1728 MAX-ACCESS read-only 1729 STATUS current 1730 DESCRIPTION 1731 "Using the value of the corresponding slapmPRMonInterval (or 1732 slapmPolicyMonitorInterva)l, slapmSubcomponentStatsOutOctets 1733 is divided by slapmPRMonInterval (or 1734 slapmPolicyMonitorInterval) to determine the 1735 current out transfer rate. 1737 This object only has meaning when an corresponding 1738 slapmPRMonEntry (or slapmPolicyMonitorEntry) exists with 1739 the slapmPRMonControl (or slapmPolicyMonitorControl) 1740 BITS setting monitorSubcomponents(5) enabled. The value 1741 of this object is zero when monitoring is not in effect." 1742 ::= { slapmSubcomponentEntry 23 } 1744 slapmSubcomponentPolicyRuleIndex OBJECT-TYPE 1745 SYNTAX Unsigned32 (1..4294967295) 1746 MAX-ACCESS read-only 1747 STATUS current 1748 DESCRIPTION 1749 "Points to an slapmPolicyNameEntry when combined with 1750 slapmSubcomponentSystemAddress to indicate the 1751 policy naming that relates to this entry." 1752 ::= { slapmSubcomponentEntry 24 } 1754 -- Table that maps an unsigned integer index to whatever 1755 -- names a policy rule. 1757 slapmPolicyNameTable OBJECT-TYPE 1758 SYNTAX SEQUENCE OF SlapmPolicyNameEntry 1759 MAX-ACCESS not-accessible 1760 STATUS current 1761 DESCRIPTION 1762 "Provides the mapping between a policy index as a 1763 unsigned 32 bit integer and the unique name associated 1764 with a policy rule." 1765 ::= { slapmTableObjects 4 } 1767 slapmPolicyNameEntry OBJECT-TYPE 1768 SYNTAX SlapmPolicyNameEntry 1769 MAX-ACCESS not-accessible 1770 STATUS current 1771 DESCRIPTION 1772 "Defines an entry in the slapmPolicyNameTable." 1773 INDEX { 1774 slapmPolicyNameSystemAddress, 1775 slapmPolicyNameIndex 1776 } 1777 ::= { slapmPolicyNameTable 1 } 1779 SlapmPolicyNameEntry ::= 1780 SEQUENCE { 1781 slapmPolicyNameSystemAddress OCTET STRING, 1782 slapmPolicyNameIndex Unsigned32, 1783 slapmPolicyNameOfRule SlapmPolicyRuleName 1784 } 1786 slapmPolicyNameSystemAddress OBJECT-TYPE 1787 SYNTAX OCTET STRING (SIZE(0 | 4 | 16)) 1788 MAX-ACCESS not-accessible 1789 STATUS current 1790 DESCRIPTION 1791 "Address of a system that an Policy rule definition relates 1792 to. A zero length octet string must be used to indicate 1793 that only a single system is being represented. 1794 Otherwise, the length of the octet string must be 1795 4 for an ipv4 address or 16 for an ipv6 address." 1796 ::= { slapmPolicyNameEntry 1 } 1798 slapmPolicyNameIndex OBJECT-TYPE 1799 SYNTAX Unsigned32 (1..4294967295) 1800 MAX-ACCESS not-accessible 1801 STATUS current 1802 DESCRIPTION 1803 "A locally arbitrary, but unique identifier associated 1804 with this table entry. This value is not expected to 1805 remain constant across reIPLs." 1806 ::= { slapmPolicyNameEntry 2 } 1808 slapmPolicyNameOfRule OBJECT-TYPE 1809 SYNTAX SlapmPolicyRuleName 1810 MAX-ACCESS read-only 1811 STATUS current 1812 DESCRIPTION 1813 "The unique name that identifies a policy rule definition." 1814 ::= { slapmPolicyNameEntry 3 } 1816 -- Sla Performance Monitoring Policy Rule Statistics Table 1818 slapmPolicyRuleStatsTable OBJECT-TYPE 1819 SYNTAX SEQUENCE OF SlapmPolicyRuleStatsEntry 1820 MAX-ACCESS not-accessible 1821 STATUS current 1822 DESCRIPTION 1823 "Provides statistics on a per system and a per policy 1824 rule basis." 1825 ::= { slapmTableObjects 5 } 1827 slapmPolicyRuleStatsEntry OBJECT-TYPE 1828 SYNTAX SlapmPolicyRuleStatsEntry 1829 MAX-ACCESS not-accessible 1830 STATUS current 1831 DESCRIPTION 1832 "Defines an entry in the slapmPolicyRuleStatsTable. 1833 This table defines a set of statistics that is kept 1834 on a per system and per policy rule basis. 1836 Entries in this table are not created or deleted via SNMP 1837 but reflect the set of policy rule definitions known 1838 at a system." 1839 INDEX { 1840 slapmPolicyNameSystemAddress, 1841 slapmPolicyNameIndex 1842 } 1843 ::= { slapmPolicyRuleStatsTable 1 } 1845 SlapmPolicyRuleStatsEntry ::= 1846 SEQUENCE { 1847 slapmPolicyRuleStatsOperStatus INTEGER, 1848 slapmPolicyRuleStatsActiveConns Gauge32, 1849 slapmPolicyRuleStatsTotalConns Counter32, 1850 slapmPolicyRuleStatsLActivated DateAndTime, 1851 slapmPolicyRuleStatsLastMapping DateAndTime, 1852 slapmPolicyRuleStatsInOctets Counter32, 1853 slapmPolicyRuleStatsOutOctets Counter32, 1854 slapmPolicyRuleStatsConnLimit Unsigned32, 1855 slapmPolicyRuleStatsCountAccepts Counter32, 1856 slapmPolicyRuleStatsCountDenies Counter32, 1857 slapmPolicyRuleStatsInDiscards Counter32, 1858 slapmPolicyRuleStatsOutDiscards Counter32, 1859 slapmPolicyRuleStatsInPackets Counter32, 1860 slapmPolicyRuleStatsOutPackets Counter32, 1861 slapmPolicyRuleStatsInProOctets Counter32, 1862 slapmPolicyRuleStatsOutProOctets Counter32, 1863 slapmPolicyRuleStatsMinRate Unsigned32, 1864 slapmPolicyRuleStatsMaxRate Unsigned32, 1865 slapmPolicyRuleStatsMaxDelay Unsigned32, 1866 slapmPolicyRuleStatsTotalRsvpFlows Counter32, 1867 slapmPolicyRuleStatsActRsvpFlows Gauge32 1868 } 1870 slapmPolicyRuleStatsOperStatus OBJECT-TYPE 1871 SYNTAX INTEGER { 1872 inactive(1), 1873 active(2), 1874 deleteNeeded(3) 1875 } 1876 MAX-ACCESS read-only 1877 STATUS current 1878 DESCRIPTION 1879 "The state of a policy entry: 1881 inactive(1) - An policy entry was either defined 1882 by local system definition or 1883 discovered via 1884 a directory search but has not been 1885 activated (not currently being used). 1886 active(2) - Policy entry is being used to affect 1887 traffic flows. 1888 deleteNeeded(3) - Either though local implementation 1889 dependent methods or by discovering 1890 that the directory entry corresponding 1891 to this table entry no longer 1892 exists and slapmPolicyPurgeTime needs 1893 to expire before attempting to remove 1894 the corresponding slapmPolicyStatsEntry 1895 and any dependent slapmPolicyMonitor 1896 table entries. 1897 Note: a policy rule in a state other than 1898 active(2) is not being used to affect traffic flows." 1899 ::= { slapmPolicyRuleStatsEntry 1 } 1901 slapmPolicyRuleStatsActiveConns OBJECT-TYPE 1902 SYNTAX Gauge32 1903 MAX-ACCESS read-only 1904 STATUS current 1905 DESCRIPTION 1906 "The number of active TCP connections that are 1907 affected by the corresponding policy entry." 1908 ::= { slapmPolicyRuleStatsEntry 2 } 1910 slapmPolicyRuleStatsTotalConns OBJECT-TYPE 1911 SYNTAX Counter32 1912 MAX-ACCESS read-only 1913 STATUS current 1914 DESCRIPTION 1915 "The number of total TCP connections that are 1916 affected by the corresponding policy entry." 1917 ::= { slapmPolicyRuleStatsEntry 3 } 1919 slapmPolicyRuleStatsLActivated OBJECT-TYPE 1920 SYNTAX DateAndTime 1921 MAX-ACCESS read-only 1922 STATUS current 1923 DESCRIPTION 1924 "The timestamp for when the corresponding policy entry 1925 was last activated. The value of this object serves as 1926 the discontinuity event indicator when polling entries 1927 in this table. The value of this object is updated on 1928 transition of slapmPolicyRuleStatsOperStatus into the 1929 active(2) state." 1930 DEFVAL { '0000000000000000'H } 1931 ::= { slapmPolicyRuleStatsEntry 4 } 1933 slapmPolicyRuleStatsLastMapping OBJECT-TYPE 1934 SYNTAX DateAndTime 1935 MAX-ACCESS read-only 1936 STATUS current 1937 DESCRIPTION 1938 "The timestamp for when the last time 1939 that the associated policy entry was used." 1940 DEFVAL { '0000000000000000'H } 1941 ::= { slapmPolicyRuleStatsEntry 5 } 1943 slapmPolicyRuleStatsInOctets OBJECT-TYPE 1944 SYNTAX Counter32 1945 MAX-ACCESS read-only 1946 STATUS current 1947 DESCRIPTION 1948 "The number of octets that was received by IP for an 1949 entity that map to this entry." 1950 ::= { slapmPolicyRuleStatsEntry 6 } 1952 slapmPolicyRuleStatsOutOctets OBJECT-TYPE 1953 SYNTAX Counter32 1954 MAX-ACCESS read-only 1955 STATUS current 1956 DESCRIPTION 1957 "The number of octets that was transmitted by IP for an 1958 entity that map to this entry." 1959 ::= { slapmPolicyRuleStatsEntry 7 } 1961 slapmPolicyRuleStatsConnLimit OBJECT-TYPE 1962 SYNTAX Unsigned32 1963 MAX-ACCESS read-only 1964 STATUS current 1965 DESCRIPTION 1966 "The limit for the number of active TCP connections that 1967 are allowed for this policy definition. A value of zero 1968 for this object implies that a connection limit has not 1969 been specified." 1970 ::= { slapmPolicyRuleStatsEntry 8 } 1972 slapmPolicyRuleStatsCountAccepts OBJECT-TYPE 1973 SYNTAX Counter32 1974 MAX-ACCESS read-only 1975 STATUS current 1976 DESCRIPTION 1977 "This counter is incremented when a policy action's 1978 Permission value is set to Accept and a session 1979 (TCP connection) is accepted." 1980 ::= { slapmPolicyRuleStatsEntry 9 } 1982 slapmPolicyRuleStatsCountDenies OBJECT-TYPE 1983 SYNTAX Counter32 1984 MAX-ACCESS read-only 1985 STATUS current 1986 DESCRIPTION 1987 "This counter is incremented when a policy action's 1988 Permission value is set to Deny and a session is denied, 1989 or when a session (TCP connection) is rejected due to a 1990 policy's connection limit (slapmPolicyRuleStatsConnectLimit) 1991 being reached." 1992 ::= { slapmPolicyRuleStatsEntry 10 } 1994 slapmPolicyRuleStatsInDiscards OBJECT-TYPE 1995 SYNTAX Counter32 1996 MAX-ACCESS read-only 1997 STATUS current 1998 DESCRIPTION 1999 "This counter counts the number of in octets discarded. 2000 This occurs when an error is detected. Examples of this 2001 are buffer overflow, checksum error, or bad packet 2002 format." 2003 ::= { slapmPolicyRuleStatsEntry 11 } 2005 slapmPolicyRuleStatsOutDiscards OBJECT-TYPE 2006 SYNTAX Counter32 2007 MAX-ACCESS read-only 2008 STATUS current 2009 DESCRIPTION 2010 "This counter counts the number of out octets discarded. 2011 Examples of this are buffer overflow, checksum error, or 2012 bad packet format." 2013 ::= { slapmPolicyRuleStatsEntry 12 } 2015 slapmPolicyRuleStatsInPackets OBJECT-TYPE 2016 SYNTAX Counter32 2017 MAX-ACCESS read-only 2018 STATUS current 2019 DESCRIPTION 2020 "This counter counts the number of in packets received 2021 that relate to this policy entry from IP." 2022 ::= { slapmPolicyRuleStatsEntry 13 } 2024 slapmPolicyRuleStatsOutPackets OBJECT-TYPE 2025 SYNTAX Counter32 2026 MAX-ACCESS read-only 2027 STATUS current 2028 DESCRIPTION 2029 "This counter counts the number of out packets sent 2030 by IP that relate to this policy entry." 2031 ::= { slapmPolicyRuleStatsEntry 14 } 2033 slapmPolicyRuleStatsInProOctets OBJECT-TYPE 2034 SYNTAX Counter32 2035 MAX-ACCESS read-only 2036 STATUS current 2037 DESCRIPTION 2038 "This counter counts the number of in octets that are 2039 determined to be within profile." 2040 ::= { slapmPolicyRuleStatsEntry 15 } 2042 slapmPolicyRuleStatsOutProOctets OBJECT-TYPE 2043 SYNTAX Counter32 2044 MAX-ACCESS read-only 2045 STATUS current 2046 DESCRIPTION 2047 "This counter counts the number of out octets that are 2048 determined to be within profile." 2050 ::= { slapmPolicyRuleStatsEntry 16 } 2052 slapmPolicyRuleStatsMinRate OBJECT-TYPE 2053 SYNTAX Unsigned32 2054 UNITS "Kilobits per second" 2055 MAX-ACCESS read-only 2056 STATUS current 2057 DESCRIPTION 2058 "The minimum transfer rate defined for this entry." 2059 ::= { slapmPolicyRuleStatsEntry 17 } 2061 slapmPolicyRuleStatsMaxRate OBJECT-TYPE 2062 SYNTAX Unsigned32 2063 UNITS "Kilobits per second" 2064 MAX-ACCESS read-only 2065 STATUS current 2066 DESCRIPTION 2067 "The maximum transfer rate defined for this entry." 2068 ::= { slapmPolicyRuleStatsEntry 18 } 2070 slapmPolicyRuleStatsMaxDelay OBJECT-TYPE 2071 SYNTAX Unsigned32 2072 UNITS "milliseconds" 2073 MAX-ACCESS read-only 2074 STATUS current 2075 DESCRIPTION 2076 "The maximum delay defined for this entry." 2077 ::= { slapmPolicyRuleStatsEntry 19 } 2079 slapmPolicyRuleStatsTotalRsvpFlows OBJECT-TYPE 2080 SYNTAX Counter32 2081 MAX-ACCESS read-only 2082 STATUS current 2083 DESCRIPTION 2084 "Total number of RSVP flows that have be activated." 2085 ::= { slapmPolicyRuleStatsEntry 20 } 2087 slapmPolicyRuleStatsActRsvpFlows OBJECT-TYPE 2088 SYNTAX Gauge32 2089 MAX-ACCESS read-only 2090 STATUS current 2091 DESCRIPTION 2092 "Current number of active RSVP flows." 2093 ::= { slapmPolicyRuleStatsEntry 21 } 2095 -- SLA Performance Monitoring Policy Rule Monitor Table 2097 slapmPRMonTable OBJECT-TYPE 2098 SYNTAX SEQUENCE OF SlapmPRMonEntry 2099 MAX-ACCESS not-accessible 2100 STATUS current 2101 DESCRIPTION 2102 "Provides a method of monitoring policies and their 2103 effect at a system." 2104 ::= { slapmTableObjects 6 } 2106 slapmPRMonEntry OBJECT-TYPE 2107 SYNTAX SlapmPRMonEntry 2108 MAX-ACCESS not-accessible 2109 STATUS current 2110 DESCRIPTION 2111 "Defines an entry in the slapmPRMonTable. This 2112 table defines which policies should be monitored on a 2113 per policy rule basis." 2114 INDEX { 2115 slapmPRMonOwnerIndex, 2116 slapmPRMonSystemAddress, 2117 slapmPRMonIndex 2118 } 2119 ::= { slapmPRMonTable 1 } 2121 SlapmPRMonEntry ::= 2122 SEQUENCE { 2123 slapmPRMonOwnerIndex SnmpAdminString, 2124 slapmPRMonSystemAddress OCTET STRING, 2125 slapmPRMonIndex Unsigned32, 2126 slapmPRMonControl BITS, 2127 slapmPRMonStatus SlapmStatus, 2128 slapmPRMonInterval Unsigned32, 2129 slapmPRMonIntTime DateAndTime, 2130 slapmPRMonCurrentInRate Gauge32, 2131 slapmPRMonCurrentOutRate Gauge32, 2132 slapmPRMonMinRateLow Unsigned32, 2133 slapmPRMonMinRateHigh Unsigned32, 2134 slapmPRMonMaxRateHigh Unsigned32, 2135 slapmPRMonMaxRateLow Unsigned32, 2136 slapmPRMonMaxDelayHigh Unsigned32, 2137 slapmPRMonMaxDelayLow Unsigned32, 2138 slapmPRMonMinInRateNotAchieves Counter32, 2139 slapmPRMonMaxInRateExceeds Counter32, 2140 slapmPRMonMaxDelayExceeds Counter32, 2141 slapmPRMonMinOutRateNotAchieves Counter32, 2142 slapmPRMonMaxOutRateExceeds Counter32, 2143 slapmPRMonCurrentDelayRate Gauge32, 2144 slapmPRMonRowStatus RowStatus 2145 } 2147 slapmPRMonOwnerIndex OBJECT-TYPE 2148 SYNTAX SnmpAdminString (SIZE(0..16)) 2149 MAX-ACCESS not-accessible 2150 STATUS current 2151 DESCRIPTION 2152 "To facilitate the provisioning of access control by a 2153 security administrator using the View-Based Access 2154 Control Model (RFC 2575, VACM) for tables in which 2155 multiple users may need to independently create or modify 2156 entries, the initial index is used as an 'owner index'. 2157 Such an initial index has a syntax of SnmpAdminString, 2158 and can thus be trivially mapped to a securityName or 2159 groupName as defined in VACM, in accordance with a 2160 security policy. 2162 All entries in that table belonging to a particular user 2163 will have the same value for this initial index. For a 2164 given user's entries in a particular table, the object 2165 identifiers for the information in these entries will 2166 have the same subidentifiers (except for the 'column' 2167 subidentifier) up to the end of the encoded owner index. 2168 To configure VACM to permit access to this portion of the 2169 table, one would create vacmViewTreeFamilyTable entries 2170 with the value of vacmViewTreeFamilySubtree including the 2171 owner index portion, and vacmViewTreeFamilyMask 2172 'wildcarding' the column subidentifier. More elaborate 2173 configurations are possible." 2174 ::= { slapmPRMonEntry 1 } 2176 slapmPRMonSystemAddress OBJECT-TYPE 2177 SYNTAX OCTET STRING (SIZE(0 | 4 | 16)) 2178 MAX-ACCESS not-accessible 2179 STATUS current 2180 DESCRIPTION 2181 "Address of a system that an Policy definition relates to. 2182 A zero length octet string can be used to indicate that 2183 only a single system is being represented. 2184 Otherwise, the length of the octet string should be 2185 4 for an ipv4 address and 16 for an ipv6 address." 2186 ::= { slapmPRMonEntry 2 } 2188 slapmPRMonIndex OBJECT-TYPE 2189 SYNTAX Unsigned32 2190 MAX-ACCESS not-accessible 2191 STATUS current 2192 DESCRIPTION 2193 "An slapmPolicyNameTable index, slapmPolicyNameIndex, 2194 that points to the unique name associated with a 2195 policy rule definition." 2196 ::= { slapmPRMonEntry 3 } 2198 slapmPRMonControl OBJECT-TYPE 2199 SYNTAX BITS { 2200 monitorMinRate(0), 2201 monitorMaxRate(1), 2202 monitorMaxDelay(2), 2203 enableAggregateTraps(3), 2204 enableSubcomponentTraps(4), 2205 monitorSubcomponents(5) 2206 } 2207 MAX-ACCESS read-create 2208 STATUS current 2209 DESCRIPTION 2210 "The value of this object determines the type and level 2211 of monitoring that is applied to a policy rule. The 2212 value of this object can't be changed once the table 2213 entry that it is a part of is activated via a 2214 slapmPRMonRowStatus transition to active state. 2216 monitorMinRate(0) - Monitor minimum transfer rate. 2217 monitorMaxRate(1) - Monitor maximum transfer rate. 2218 monitorMaxDelay(2) - Monitor maximum delay. 2219 enableAggregateTraps(3) - The enableAggregateTraps(3) 2220 BITS setting enables notification generation 2221 when monitoring a policy rule as an 2222 aggregate using the values in the corresponding 2223 slapmPRMonStatsEntry. By default this function 2224 is not enabled. 2225 enableSubcomponentTraps(4) - This BITS setting enables 2226 notification generation when monitoring all 2227 subcomponents that are mapped to an corresponding 2228 slapmPRMonStatsEntry. By default this 2229 function is not enabled. 2230 monitorSubcomponents(5) - This BITS setting enables 2231 monitoring of each subcomponent (typically a 2232 TCP connection or UDP listener) individually." 2233 DEFVAL { { monitorMinRate, monitorMaxRate, 2234 monitorMaxDelay } } 2235 ::= { slapmPRMonEntry 4 } 2237 slapmPRMonStatus OBJECT-TYPE 2238 SYNTAX SlapmStatus 2239 MAX-ACCESS read-only 2240 STATUS current 2241 DESCRIPTION 2242 "The value of this object indicates when a monitored 2243 value has not meet a threshold or isn't meeting the 2244 defined service level. The SlapmStatus TEXTUAL-CONVENTION 2245 defines two levels of not meeting a threshold. The first 2246 set: 2247 slaMinInRateNotAchieved(0), 2248 slaMaxInRateExceeded(1), 2249 slaMaxDelayExceeded(2), 2250 slaMinOutRateNotAchieved(3), 2251 slaMaxOutRateExceeded(4) 2253 are used to indicate when the SLA as an aggregate is 2254 not meeting a threshold while the second set: 2256 monitorMinInRateNotAchieved(5), 2257 monitorMaxInRateExceeded(6), 2258 monitorMaxDelayExceeded(7), 2259 monitorMinOutRateNotAchieved(8), 2260 monitorMaxOutRateExceeded(9) 2262 indicate that at least one subcomponent is not meeting 2263 a threshold." 2264 ::= { slapmPRMonEntry 5 } 2266 slapmPRMonInterval OBJECT-TYPE 2267 SYNTAX Unsigned32 (15..86400) -- 15 second min, 24 hour max 2268 UNITS "seconds" 2269 MAX-ACCESS read-create 2270 STATUS current 2271 DESCRIPTION 2272 "The number of seconds that defines the sample period." 2273 DEFVAL {20} -- 20 seconds 2274 ::= { slapmPRMonEntry 6 } 2276 slapmPRMonIntTime OBJECT-TYPE 2277 SYNTAX DateAndTime 2278 MAX-ACCESS read-only 2279 STATUS current 2280 DESCRIPTION 2281 "The timestamp for when the last interval ended." 2282 DEFVAL { '0000000000000000'H } 2283 ::= { slapmPRMonEntry 7 } 2285 slapmPRMonCurrentInRate OBJECT-TYPE 2286 SYNTAX Gauge32 2287 UNITS "kilobits per second" 2288 MAX-ACCESS read-only 2289 STATUS current 2290 DESCRIPTION 2291 "Using the value of the corresponding 2292 slapmPRMonInterval, slapmPolicyRuleStatsInOctets 2293 is sampled and then divided by slapmPRMonInterval 2294 to determine the current in transfer rate." 2295 ::= { slapmPRMonEntry 8 } 2297 slapmPRMonCurrentOutRate OBJECT-TYPE 2298 SYNTAX Gauge32 2299 UNITS "kilobits per second" 2300 MAX-ACCESS read-only 2301 STATUS current 2302 DESCRIPTION 2303 "Using the value of the corresponding 2304 slapmPolicyMonInterval, slapmPolicyRuleStatsOutOctets 2305 is sampled and then divided by slapmPRMonInterval 2306 to determine the current out transfer rate." 2307 ::= { slapmPRMonEntry 9 } 2309 slapmPRMonMinRateLow OBJECT-TYPE 2310 SYNTAX Unsigned32 2311 UNITS "kilobits per second" 2312 MAX-ACCESS read-create 2313 STATUS current 2314 DESCRIPTION 2315 "The threshold for generating a 2316 slapmPolicyRuleMonNotOkay notification, signalling 2317 that a monitored minimum transfer rate has not been meet. 2319 A slapmPolicyRuleMonNotOkay notification is not 2320 generated again for an slapmPRMonEntry until 2321 the minimum transfer rate 2322 exceeds slapmPRMonMinRateHigh (a 2323 slapmPolicyRuleMonOkay notification is then transmitted) 2324 and then fails below slapmPRMonMinRateLow. This 2325 behavior reduces the slapmPolicyRuleMonNotOkay 2326 notifications that are transmitted. 2328 A value of zero for this object is returned when the 2329 slapmPRMonControl monitorMinRate(0) is not 2330 enabled. When enabled the default value for this object 2331 is the min rate value specified in the associated 2332 action definition minus 10%. If the action definition 2333 doesn't have a min rate defined then there is no 2334 default for this object and a value MUST be specified 2335 prior to activating this entry when monitorMinRate(0) 2336 is selected. 2338 Note: The corresponding slapmPRMonControl 2339 BITS setting, enableAggregateTraps(3), MUST be selected in 2340 order for any notification relating to this entry to 2341 potentially be generated." 2342 ::= { slapmPRMonEntry 10 } 2344 slapmPRMonMinRateHigh OBJECT-TYPE 2345 SYNTAX Unsigned32 2346 UNITS "kilobits per second" 2347 MAX-ACCESS read-create 2348 STATUS current 2349 DESCRIPTION 2350 "The threshold for generating a slapmPolicyRuleMonOkay 2351 notification, signalling that a monitored minimum 2352 transfer rate has increased to an acceptable level. 2354 A value of zero for this object is returned when the 2355 slapmPRMonControl monitorMinRate(0) is not 2356 enabled. When enabled the default value for this object 2357 is the min rate value specified in the associated 2358 action definition plus 10%. If the action definition 2359 doesn't have a min rate defined then there is no 2360 default for this object and a value MUST be specified 2361 prior to activating this entry when monitorMinRate(0) 2362 is selected. 2364 Note: The corresponding slapmPRMonControl 2365 BITS setting, enableAggregateTraps(3), MUST be selected 2366 in order for any notification relating to this entry to 2367 potentially be generated." 2368 ::= { slapmPRMonEntry 11 } 2370 slapmPRMonMaxRateHigh OBJECT-TYPE 2371 SYNTAX Unsigned32 2372 UNITS "kilobits per second" 2373 MAX-ACCESS read-create 2374 STATUS current 2375 DESCRIPTION 2376 "The threshold for generating a 2377 slapmPolicyRuleMonNotOkay notification, signalling 2378 that a monitored maximum transfer rate has been exceeded. 2380 A slapmPolicyRuleNotOkay notification is not 2381 generated again for an slapmPRMonEntry until the 2382 maximum transfer rate fails below 2383 slapmPRMonMaxRateLow (a slapmPolicyRuleMonOkay 2384 notification is then transmitted) and then raises above 2385 slapmPRMonMaxRateHigh. This behavior reduces the 2386 slapmPolicyRuleMonNotOkay notifications that are 2387 transmitted. 2389 A value of zero for this object is returned when the 2390 slapmPRMonControl monitorMaxRate(1) is not 2391 enabled. When enabled the default value for this object 2392 is the max rate value specified in the associated 2393 action definition plus 10%. If the action definition 2394 doesn't have a max rate defined then there is no 2395 default for this object and a value MUST be specified 2396 prior to activating this entry when monitorMaxRate(1) 2397 is selected. 2399 Note: The corresponding slapmPRMonControl 2400 BITS setting, enableAggregateTraps(3), MUST be selected in 2401 order for any notification relating to this entry to 2402 potentially be generated." 2403 ::= { slapmPRMonEntry 12 } 2405 slapmPRMonMaxRateLow OBJECT-TYPE 2406 SYNTAX Unsigned32 2407 UNITS "kilobits per second" 2408 MAX-ACCESS read-create 2409 STATUS current 2410 DESCRIPTION 2411 "The threshold for generating a slapmPolicyRuleMonOkay 2412 notification, signalling that a monitored maximum 2413 transfer rate has fallen to an acceptable level. 2415 A value of zero for this object is returned when the 2416 slapmPRMonControl monitorMaxRate(1) is not 2417 enabled. When enabled the default value for this object 2418 is the max rate value specified in the associated 2419 action definition minus 10%. If the action definition 2420 doesn't have a max rate defined then there is no 2421 default for this object and a value MUST be specified 2422 prior to activating this entry when monitorMaxRate(1) 2423 is selected. 2425 Note: The corresponding slapmPRMonControl 2426 BITS setting, enableAggregateTraps(3), MUST be selected in 2427 order for any notification relating to this entry to 2428 potentially be generated." 2429 ::= { slapmPRMonEntry 13 } 2431 slapmPRMonMaxDelayHigh OBJECT-TYPE 2432 SYNTAX Unsigned32 2433 UNITS "milliseconds" 2434 MAX-ACCESS read-create 2435 STATUS current 2436 DESCRIPTION 2437 "The threshold for generating a 2438 slapmPolicyRuleMonNotOkay notification, signalling 2439 that a monitored maximum delay rate has been exceeded. 2441 A slapmPolicyRuleMonNotOkay notification is not 2442 generated again for an slapmPRMonEntry until 2443 the maximum delay rate falls below 2444 slapmPRMonMaxDelayLow (a slapmPolicyRuleMonOkay 2445 notification is then transmitted) and raises above 2446 slapmPRMonMaxDelayHigh. This behavior reduces 2447 the slapmPolicyRuleMonNotOkay notifications that are 2448 transmitted. 2450 A value of zero for this object is returned when the 2451 slapmPRMonControl monitorMaxDelay(4) is not 2452 enabled. When enabled the default value for this object 2453 is the max delay value specified in the associated 2454 action definition plus 10%. If the action definition 2455 doesn't have a max delay defined then there is no 2456 default for this object and a value MUST be specified 2457 prior to activating this entry when monitorMaxDelay(4) 2458 is selected. 2460 Note: The corresponding slapmPRMonControl 2461 BITS setting, enableAggregateTraps(3), MUST be selected 2462 in order for any notification relating to this entry to 2463 potentially be generated." 2464 ::= { slapmPRMonEntry 14 } 2466 slapmPRMonMaxDelayLow OBJECT-TYPE 2467 SYNTAX Unsigned32 2468 UNITS "milliseconds" 2469 MAX-ACCESS read-create 2470 STATUS current 2471 DESCRIPTION 2472 "The threshold for generating a slapmPolicyRuleMonOkay 2473 notification, signalling that a monitored maximum delay 2474 rate has fallen to an acceptable level. 2476 A value of zero for this object is returned when the 2477 slapmPRMonControl monitorMaxDelay(4) is not 2478 enabled. When enabled the default value for this object 2479 is the max delay value specified in the associated 2480 action definition minus 10%. If the action definition 2481 doesn't have a max delay defined then there is no 2482 default for this object and a value MUST be specified 2483 prior to activating this entry when monitorMaxDelay(4) 2484 is selected. 2486 Note: The corresponding slapmPRMonControl 2487 BITS setting, enableAggregateTraps(3), MUST be selected 2488 in order for any notification relating to this entry to 2489 potentially be generated." 2490 ::= { slapmPRMonEntry 15 } 2492 slapmPRMonMinInRateNotAchieves OBJECT-TYPE 2493 SYNTAX Counter32 2494 MAX-ACCESS read-only 2495 STATUS current 2496 DESCRIPTION 2497 "The number of times that a minimum transfer in rate 2498 was not achieved." 2499 ::= { slapmPRMonEntry 16 } 2501 slapmPRMonMaxInRateExceeds OBJECT-TYPE 2502 SYNTAX Counter32 2503 MAX-ACCESS read-only 2504 STATUS current 2505 DESCRIPTION 2506 "The number of times that a maximum transfer in rate 2507 was exceeded." 2508 ::= { slapmPRMonEntry 17 } 2510 slapmPRMonMaxDelayExceeds OBJECT-TYPE 2511 SYNTAX Counter32 2512 MAX-ACCESS read-only 2513 STATUS current 2514 DESCRIPTION 2515 "The number of times that a maximum delay in rate 2516 was exceeded." 2517 ::= { slapmPRMonEntry 18 } 2519 slapmPRMonMinOutRateNotAchieves OBJECT-TYPE 2520 SYNTAX Counter32 2521 MAX-ACCESS read-only 2522 STATUS current 2523 DESCRIPTION 2524 "The number of times that a minimum transfer out rate 2525 was not achieved." 2527 ::= { slapmPRMonEntry 19 } 2529 slapmPRMonMaxOutRateExceeds OBJECT-TYPE 2530 SYNTAX Counter32 2531 MAX-ACCESS read-only 2532 STATUS current 2533 DESCRIPTION 2534 "The number of times that a maximum transfer out rate 2535 was exceeded." 2536 ::= { slapmPRMonEntry 20 } 2538 slapmPRMonCurrentDelayRate OBJECT-TYPE 2539 SYNTAX Gauge32 2540 UNITS "milliseconds" 2541 MAX-ACCESS read-only 2542 STATUS current 2543 DESCRIPTION 2544 "The current delay rate for this entry. This is 2545 calculated by taking the average of the TCP 2546 round trip times for all associating 2547 slapmSubcomponentTable entries within a interval." 2548 ::= { slapmPRMonEntry 21 } 2550 slapmPRMonRowStatus OBJECT-TYPE 2551 SYNTAX RowStatus 2552 MAX-ACCESS read-create 2553 STATUS current 2554 DESCRIPTION 2555 "This object allows entries to be created and deleted 2556 in the slapmPRMonTable. An entry in this table 2557 is deleted by setting this object to destroy(6). 2559 Removal of an corresponding (same policy index) 2560 slapmPolicyRuleStatsEntry has the side effect of the 2561 automatic deletion an entry in this table." 2562 ::= { slapmPRMonEntry 22 } 2564 -- Notifications 2566 slapmMonitoredEventNotAchieved NOTIFICATION-TYPE 2567 OBJECTS { 2568 slapmPolicyMonitorIntTime, 2569 slapmPolicyMonitorControl, 2570 slapmPolicyMonitorStatus, 2571 slapmPolicyMonitorStatus, 2572 slapmPolicyMonitorCurrentInRate, 2573 slapmPolicyMonitorCurrentOutRate, 2574 slapmPolicyMonitorCurrentDelayRate 2575 } 2576 STATUS deprecated 2577 DESCRIPTION 2578 "This notification is generated when an monitored event 2579 is not achieved with respect to threshold. This 2580 applies only towards monitoring a policy traffic 2581 profile as an aggregate via an associating 2582 slapmPolicyStatsEntry. The value 2583 of slapmPolicyMonitorControl can be examined to 2584 determine what is being monitored. The first 2585 slapmPolicyMonitorStatus value supplies the current 2586 monitor status while the 2nd value supplies the 2587 previous status. 2589 Note: The corresponding slapmPolicyMonitorControl 2590 BITS setting, enableAggregateTraps(3), MUST be 2591 selected in order for this notification to 2592 potentially be generated." 2593 ::= { slapmNotifications 1 } 2595 slapmMonitoredEventOkay NOTIFICATION-TYPE 2596 OBJECTS { 2597 slapmPolicyMonitorIntTime, 2598 slapmPolicyMonitorControl, 2599 slapmPolicyMonitorStatus, 2600 slapmPolicyMonitorStatus, 2601 slapmPolicyMonitorCurrentInRate, 2602 slapmPolicyMonitorCurrentOutRate, 2603 slapmPolicyMonitorCurrentDelayRate 2604 } 2605 STATUS deprecated 2606 DESCRIPTION 2607 "This notification is generated when a monitored 2608 event has improved to an acceptable level. This 2609 applies only towards monitoring a policy traffic 2610 profile as an aggregate via an associating 2611 slapmPolicyStatsEntry. The value 2612 of slapmPolicyMonitorControl can be examined to 2613 determine what is being monitored. The first 2614 slapmPolicyMonitorStatus value supplies the current 2615 monitor status while the 2nd value supplies the 2616 previous status. 2618 Note: The corresponding slapmPolicyMonitorControl 2619 BITS setting, enableAggregateTraps(3), MUST be 2620 selected in order for this notification to 2621 potentially be generated." 2622 ::= { slapmNotifications 2 } 2624 slapmPolicyProfileDeleted NOTIFICATION-TYPE 2625 OBJECTS { 2626 slapmPolicyStatsActiveConns, 2627 slapmPolicyStatsTotalConns, 2628 slapmPolicyStatsFirstActivated, 2629 slapmPolicyStatsLastMapping, 2630 slapmPolicyStatsInOctets, 2631 slapmPolicyStatsOutOctets, 2632 slapmPolicyStatsConnectionLimit, 2633 slapmPolicyStatsCountAccepts, 2634 slapmPolicyStatsCountDenies, 2635 slapmPolicyStatsInDiscards, 2636 slapmPolicyStatsOutDiscards, 2637 slapmPolicyStatsInPackets, 2638 slapmPolicyStatsOutPackets, 2639 slapmPolicyStatsInProfileOctets, 2640 slapmPolicyStatsOutProfileOctets, 2641 slapmPolicyStatsMinRate, 2642 slapmPolicyStatsMaxRate, 2643 slapmPolicyStatsMaxDelay 2644 } 2645 STATUS deprecated 2646 DESCRIPTION 2647 "A slapmPolicyDeleted notification is sent when a 2648 slapmPolicyStatsEntry is deleted if the value of 2649 slapmPolicyTrapEnable is enabled(1)." 2650 ::= { slapmNotifications 3 } 2652 slapmPolicyMonitorDeleted NOTIFICATION-TYPE 2653 OBJECTS { 2654 slapmPolicyMonitorStatus, 2655 slapmPolicyMonitorInterval, 2656 slapmPolicyMonitorIntTime, 2657 slapmPolicyMonitorCurrentInRate, 2658 slapmPolicyMonitorCurrentOutRate, 2659 slapmPolicyMonitorCurrentDelayRate, 2660 slapmPolicyMonitorMinRateLow, 2661 slapmPolicyMonitorMinRateHigh, 2662 slapmPolicyMonitorMaxRateHigh, 2663 slapmPolicyMonitorMaxRateLow, 2664 slapmPolicyMonitorMaxDelayHigh, 2665 slapmPolicyMonitorMaxDelayLow, 2666 slapmPolicyMonitorMinInRateNotAchieves, 2667 slapmPolicyMonitorMaxInRateExceeds, 2668 slapmPolicyMonitorMaxDelayExceeds, 2669 slapmPolicyMonitorMinOutRateNotAchieves, 2670 slapmPolicyMonitorMaxOutRateExceeds 2671 } 2672 STATUS deprecated 2673 DESCRIPTION 2674 "A slapmPolicyMonitorDeleted notification is sent when a 2675 slapmPolicyMonitorEntry is deleted if the value of 2676 slapmPolicyTrapEnable is enabled(1)." 2677 ::= { slapmNotifications 4 } 2679 slapmSubcomponentMonitoredEventNotAchieved NOTIFICATION-TYPE 2680 OBJECTS { 2681 slapmSubcomponentSystemAddress, 2682 slapmSubcomponentPolicyName, 2683 slapmSubcomponentTrafficProfileName, 2684 slapmSubcomponentMonitorStatus, 2685 slapmSubcomponentMonitorStatus, 2686 slapmSubcomponentMonitorIntTime, 2687 slapmSubcomponentMonitorCurrentInRate, 2688 slapmSubcomponentMonitorCurrentOutRate, 2689 slapmSubcomponentTcpRoundTripTime 2690 } 2691 STATUS deprecated 2692 DESCRIPTION 2693 "This notification is generated when a monitored value 2694 does not achieved a threshold specification. This 2695 applies only towards monitoring the individual components 2696 of a policy traffic profile. The value of the 2697 corresponding slapmPolicyMonitorControl can be examined 2698 to determine what is being monitored. The first 2699 slapmSubcomponentMonitorStatus value supplies the current 2700 monitor status while the 2nd value supplies the 2701 previous status. 2703 Note: The corresponding slapmPolicyMonitorControl 2704 BITS setting, enableSubcomponentTraps(4), MUST be selected 2705 in order for this notification to potentially be generated." 2706 ::= { slapmNotifications 5 } 2708 slapmSubcomponentMonitoredEventOkay NOTIFICATION-TYPE 2709 OBJECTS { 2710 slapmSubcomponentSystemAddress, 2711 slapmSubcomponentPolicyName, 2712 slapmSubcomponentTrafficProfileName, 2713 slapmSubcomponentMonitorStatus, 2714 slapmSubcomponentMonitorStatus, 2715 slapmSubcomponentMonitorIntTime, 2716 slapmSubcomponentMonitorCurrentInRate, 2717 slapmSubcomponentMonitorCurrentOutRate, 2718 slapmSubcomponentTcpRoundTripTime 2719 } 2720 STATUS deprecated 2721 DESCRIPTION 2722 "This notification is generated when a monitored value 2723 has reached an acceptable level. 2725 Note: The corresponding slapmPolicyMonitorControl 2726 BITS setting, enableSubcomponentTraps(3), MUST be 2727 selected in order for this notification to potentially 2728 be generated." 2729 ::= { slapmNotifications 6 } 2731 slapmPolicyRuleMonNotOkay NOTIFICATION-TYPE 2732 OBJECTS { 2733 slapmPRMonIntTime, 2734 slapmPRMonControl, 2735 slapmPRMonStatus, 2736 slapmPRMonStatus, 2737 slapmPRMonCurrentInRate, 2738 slapmPRMonCurrentOutRate, 2739 slapmPRMonCurrentDelayRate 2740 } 2741 STATUS current 2742 DESCRIPTION 2743 "This notification is generated when an monitored event 2744 is not achieved with respect to a threshold. This 2745 applies only towards monitoring a policy rule 2746 as an aggregate via an associating 2747 slapmPolicyRuleStatsEntry. The value 2748 of slapmPRMonControl can be examined to 2749 determine what is being monitored. The first 2750 slapmPRMonStatus value supplies the current 2751 monitor status while the 2nd value supplies the 2752 previous status. 2754 Note: The corresponding slapmPRMonControl 2755 BITS setting, enableAggregateTraps(3), MUST be 2756 selected in order for this notification to 2757 potentially be generated." 2758 ::= { slapmNotifications 7 } 2760 slapmPolicyRuleMonOkay NOTIFICATION-TYPE 2761 OBJECTS { 2762 slapmPRMonIntTime, 2763 slapmPRMonControl, 2764 slapmPRMonStatus, 2765 slapmPRMonStatus, 2766 slapmPRMonCurrentInRate, 2767 slapmPRMonCurrentOutRate, 2768 slapmPRMonCurrentDelayRate 2769 } 2770 STATUS current 2771 DESCRIPTION 2772 "This notification is generated when a monitored 2773 event has improved to an acceptable level. This 2774 applies only towards monitoring a policy rule 2775 as an aggregate via an associating 2776 slapmPolicyRuleStatsEntry. The value 2777 of slapmPRMonControl can be examined to 2778 determine what is being monitored. The first 2779 slapmPRMonStatus value supplies the current 2780 monitor status while the 2nd value supplies the 2781 previous status. 2783 Note: The corresponding slapmPRMonControl 2784 BITS setting, enableAggregateTraps(3), MUST be 2785 selected in order for this notification to 2786 potentially be generated." 2787 ::= { slapmNotifications 8 } 2789 slapmPolicyRuleDeleted NOTIFICATION-TYPE 2790 OBJECTS { 2791 slapmPolicyRuleStatsActiveConns, 2792 slapmPolicyRuleStatsTotalConns, 2793 slapmPolicyRuleStatsLActivated, 2794 slapmPolicyRuleStatsLastMapping, 2795 slapmPolicyRuleStatsInOctets, 2796 slapmPolicyRuleStatsOutOctets, 2797 slapmPolicyRuleStatsConnLimit, 2798 slapmPolicyRuleStatsCountAccepts, 2799 slapmPolicyRuleStatsCountDenies, 2800 slapmPolicyRuleStatsInDiscards, 2801 slapmPolicyRuleStatsOutDiscards, 2802 slapmPolicyRuleStatsInPackets, 2803 slapmPolicyRuleStatsOutPackets, 2804 slapmPolicyRuleStatsInProOctets, 2805 slapmPolicyRuleStatsOutProOctets, 2806 slapmPolicyRuleStatsMinRate, 2807 slapmPolicyRuleStatsMaxRate, 2808 slapmPolicyRuleStatsMaxDelay, 2809 slapmPolicyRuleStatsTotalRsvpFlows, 2810 slapmPolicyRuleStatsActRsvpFlows 2811 } 2812 STATUS current 2813 DESCRIPTION 2814 "A slapmPolicyRuleDeleted notification is sent when a 2815 slapmPolicyRuleStatsEntry is deleted if the value of 2816 slapmPolicyTrapEnable is enabled(1)." 2817 ::= { slapmNotifications 9 } 2819 slapmPolicyRuleMonDeleted NOTIFICATION-TYPE 2820 OBJECTS { 2821 slapmPRMonControl, 2822 slapmPRMonStatus, 2823 slapmPRMonInterval, 2824 slapmPRMonIntTime, 2825 slapmPRMonCurrentInRate, 2826 slapmPRMonCurrentOutRate, 2827 slapmPRMonCurrentDelayRate, 2828 slapmPRMonMinRateLow, 2829 slapmPRMonMinRateHigh, 2830 slapmPRMonMaxRateHigh, 2831 slapmPRMonMaxRateLow, 2832 slapmPRMonMaxDelayHigh, 2833 slapmPRMonMaxDelayLow, 2834 slapmPRMonMinInRateNotAchieves, 2835 slapmPRMonMaxInRateExceeds, 2836 slapmPRMonMaxDelayExceeds, 2837 slapmPRMonMinOutRateNotAchieves, 2838 slapmPRMonMaxOutRateExceeds 2839 } 2840 STATUS current 2841 DESCRIPTION 2842 "A slapmPolicyRuleMonDeleted notification is sent when a 2843 slapmPRMonEntry is deleted if the value of 2844 slapmPolicyTrapEnable is enabled(1)." 2845 ::= { slapmNotifications 10 } 2847 slapmSubcMonitorNotOkay NOTIFICATION-TYPE 2848 OBJECTS { 2849 slapmSubcomponentSystemAddress, 2850 slapmSubcomponentPolicyRuleIndex, 2851 slapmPRMonControl, 2852 slapmSubcomponentMonitorStatus, 2853 slapmSubcomponentMonitorStatus, 2854 slapmSubcomponentMonitorIntTime, 2855 slapmSubcomponentMonitorCurrentInRate, 2856 slapmSubcomponentMonitorCurrentOutRate, 2857 slapmSubcomponentTcpRoundTripTime 2858 } 2859 STATUS current 2860 DESCRIPTION 2861 "This notification is generated when a monitored value 2862 does not achieved a threshold specification. This 2863 applies only towards monitoring the individual components 2864 of a policy rule. The value of the 2865 corresponding slapmPRMonControl can be examined 2866 to determine what is being monitored. The first 2867 slapmSubcomponentMonitorStatus value supplies the current 2868 monitor status while the 2nd value supplies the 2869 previous status. 2871 Note: The corresponding slapmPRMonControl 2872 BITS setting, enableSubcomponentTraps(4), MUST be selected 2873 in order for this notification to potentially be generated." 2874 ::= { slapmNotifications 11 } 2876 slapmSubcMonitorOkay NOTIFICATION-TYPE 2877 OBJECTS { 2878 slapmSubcomponentSystemAddress, 2879 slapmSubcomponentPolicyRuleIndex, 2880 slapmPRMonControl, 2881 slapmSubcomponentMonitorStatus, 2882 slapmSubcomponentMonitorStatus, 2883 slapmSubcomponentMonitorIntTime, 2884 slapmSubcomponentMonitorCurrentInRate, 2885 slapmSubcomponentMonitorCurrentOutRate, 2886 slapmSubcomponentTcpRoundTripTime 2887 } 2888 STATUS current 2889 DESCRIPTION 2890 "This notification is generated when a monitored value 2891 has reached an acceptable level. 2893 Note: The corresponding slapmPRMonControl 2894 BITS setting, enableSubcomponentTraps(3), MUST be 2895 selected in order for this notification to potentially 2896 be generated." 2898 ::= { slapmNotifications 12 } 2900 -- Conformance information 2901 -- Compliance statements 2903 slapmCompliances OBJECT IDENTIFIER ::= { slapmConformance 1 } 2904 slapmGroups OBJECT IDENTIFIER ::= { slapmConformance 2 } 2906 -- Compliance statements 2908 slapmCompliance MODULE-COMPLIANCE 2909 STATUS current 2910 DESCRIPTION 2911 "The compliance statement for the SLAPM-MIB." 2912 MODULE -- this module 2913 MANDATORY-GROUPS { 2914 slapmBaseGroup2, 2915 slapmNotGroup2 2916 } 2917 GROUP slapmEndSystemGroup2 2918 DESCRIPTION 2919 "The contents of this group is required by end-system 2920 implementations." 2921 GROUP slapmEndSystemNotGroup2 2922 DESCRIPTION 2923 "The contents of this group is required by end-system 2924 implementations." 2925 GROUP slapmBaseGroup 2926 DESCRIPTION 2927 "The contents of this group has been deprecated in favor 2928 of the new slapmBaseGroup2. Older implementations of this 2929 MIB would continue its support of the contents of this 2930 group." 2931 GROUP slapmNotGroup 2932 DESCRIPTION 2933 "The contents of this group has been deprecated in favor 2934 of the new slapmNotGroup2. Older implementations of this 2935 MIB would continue its support of the contents of 2936 this group." 2937 GROUP slapmOptionalGroup 2938 DESCRIPTION 2939 "The contents of this group has been deprecated." 2940 GROUP slapmEndSystemGroup 2941 DESCRIPTION 2942 "The contents of this group has been deprecated in favor 2943 of the new slapmEndSystemGroup2. Older implementations 2944 of this MIB would continue its support of the 2945 contents of this group." 2946 GROUP slapmEndSystemNotGroup 2947 DESCRIPTION 2948 "The contents of this group has been deprecated in favor 2949 of the new slapmEndSystemNotGroup2. Older 2950 implementations of this MIB would continue its support 2951 of the contents of this group." 2952 ::= { slapmCompliances 1 } 2954 -- MIB groupings 2956 slapmBaseGroup OBJECT-GROUP 2957 OBJECTS { 2958 slapmSpinLock, 2959 slapmPolicyCountQueries, 2960 slapmPolicyCountAccesses, 2961 slapmPolicyCountSuccessAccesses, 2962 slapmPolicyCountNotFounds, 2963 slapmPolicyPurgeTime, 2964 slapmPolicyTrapEnable, 2965 slapmPolicyStatsOperStatus, 2966 slapmPolicyStatsActiveConns, 2967 slapmPolicyStatsFirstActivated, 2968 slapmPolicyStatsLastMapping, 2969 slapmPolicyStatsInOctets, 2970 slapmPolicyStatsOutOctets, 2971 slapmPolicyStatsConnectionLimit, 2972 slapmPolicyStatsTotalConns, 2973 slapmPolicyStatsCountAccepts, 2974 slapmPolicyStatsCountDenies, 2975 slapmPolicyStatsInDiscards, 2976 slapmPolicyStatsOutDiscards, 2977 slapmPolicyStatsInPackets, 2978 slapmPolicyStatsOutPackets, 2979 slapmPolicyStatsMinRate, 2980 slapmPolicyStatsMaxRate, 2981 slapmPolicyStatsMaxDelay, 2982 slapmPolicyMonitorControl, 2983 slapmPolicyMonitorStatus, 2984 slapmPolicyMonitorInterval, 2985 slapmPolicyMonitorIntTime, 2986 slapmPolicyMonitorCurrentInRate, 2987 slapmPolicyMonitorCurrentOutRate, 2988 slapmPolicyMonitorMinRateLow, 2989 slapmPolicyMonitorMinRateHigh, 2990 slapmPolicyMonitorMaxRateHigh, 2991 slapmPolicyMonitorMaxRateLow, 2992 slapmPolicyMonitorMaxDelayHigh, 2993 slapmPolicyMonitorMaxDelayLow, 2994 slapmPolicyMonitorMinInRateNotAchieves, 2995 slapmPolicyMonitorMaxInRateExceeds, 2996 slapmPolicyMonitorMaxDelayExceeds, 2997 slapmPolicyMonitorMinOutRateNotAchieves, 2998 slapmPolicyMonitorMaxOutRateExceeds, 2999 slapmPolicyMonitorCurrentDelayRate, 3000 slapmPolicyMonitorRowStatus 3001 } 3002 STATUS deprecated 3003 DESCRIPTION 3004 "The group of objects defined by this MIB that are 3005 required for all implementations to be compliant." 3006 ::= { slapmGroups 1 } 3008 slapmOptionalGroup OBJECT-GROUP 3009 OBJECTS { 3010 slapmPolicyStatsInProfileOctets, 3011 slapmPolicyStatsOutProfileOctets 3012 } 3013 STATUS deprecated 3014 DESCRIPTION 3015 "The group of objects defined by this MIB that are 3016 optional." 3017 ::= { slapmGroups 2 } 3019 slapmEndSystemGroup OBJECT-GROUP 3020 OBJECTS { 3021 slapmPolicyTrapFilter, 3022 slapmSubcomponentProtocol, 3023 slapmSubcomponentSystemAddress, 3024 slapmSubcomponentPolicyName, 3025 slapmSubcomponentTrafficProfileName, 3026 slapmSubcomponentLastActivity, 3027 slapmSubcomponentInOctets, 3028 slapmSubcomponentOutOctets, 3029 slapmSubcomponentTcpOutBufferedOctets, 3030 slapmSubcomponentTcpInBufferedOctets, 3031 slapmSubcomponentTcpReXmts, 3032 slapmSubcomponentTcpRoundTripTime, 3033 slapmSubcomponentTcpRoundTripVariance, 3034 slapmSubcomponentInPdus, 3035 slapmSubcomponentOutPdus, 3036 slapmSubcomponentApplName, 3037 slapmSubcomponentMonitorStatus, 3038 slapmSubcomponentMonitorIntTime, 3039 slapmSubcomponentMonitorCurrentOutRate, 3040 slapmSubcomponentMonitorCurrentInRate 3041 } 3042 STATUS deprecated 3043 DESCRIPTION 3044 "The group of objects defined by this MIB that are 3045 required for end system implementations." 3046 ::= { slapmGroups 3 } 3048 slapmNotGroup NOTIFICATION-GROUP 3049 NOTIFICATIONS { 3050 slapmMonitoredEventNotAchieved, 3051 slapmMonitoredEventOkay, 3052 slapmPolicyProfileDeleted, 3053 slapmPolicyMonitorDeleted 3054 } 3055 STATUS deprecated 3056 DESCRIPTION 3057 "The group of notifications defined by this MIB that MUST 3058 be implemented." 3059 ::= { slapmGroups 4 } 3061 slapmEndSystemNotGroup NOTIFICATION-GROUP 3062 NOTIFICATIONS { 3063 slapmSubcomponentMonitoredEventNotAchieved, 3064 slapmSubcomponentMonitoredEventOkay 3065 } 3066 STATUS deprecated 3067 DESCRIPTION 3068 "The group of objects defined by this MIB that are 3069 required for end system implementations." 3070 ::= { slapmGroups 5 } 3072 slapmBaseGroup2 OBJECT-GROUP 3073 OBJECTS { 3074 slapmSpinLock, 3075 slapmPolicyCountQueries, 3076 slapmPolicyCountAccesses, 3077 slapmPolicyCountSuccessAccesses, 3078 slapmPolicyCountNotFounds, 3079 slapmPolicyPurgeTime, 3080 slapmPolicyTrapEnable, 3081 slapmPolicyNameOfRule, 3082 slapmPolicyRuleStatsOperStatus, 3083 slapmPolicyRuleStatsActiveConns, 3084 slapmPolicyRuleStatsTotalConns, 3085 slapmPolicyRuleStatsLActivated, 3086 slapmPolicyRuleStatsLastMapping, 3087 slapmPolicyRuleStatsInOctets, 3088 slapmPolicyRuleStatsOutOctets, 3089 slapmPolicyRuleStatsConnLimit, 3090 slapmPolicyRuleStatsCountAccepts, 3091 slapmPolicyRuleStatsCountDenies, 3092 slapmPolicyRuleStatsInDiscards, 3093 slapmPolicyRuleStatsOutDiscards, 3094 slapmPolicyRuleStatsInPackets, 3095 slapmPolicyRuleStatsOutPackets, 3096 slapmPolicyRuleStatsInProOctets, 3097 slapmPolicyRuleStatsOutProOctets, 3098 slapmPolicyRuleStatsMinRate, 3099 slapmPolicyRuleStatsMaxRate, 3100 slapmPolicyRuleStatsMaxDelay, 3101 slapmPolicyRuleStatsTotalRsvpFlows, 3102 slapmPolicyRuleStatsActRsvpFlows, 3103 slapmPRMonControl, 3104 slapmPRMonStatus, 3105 slapmPRMonInterval, 3106 slapmPRMonIntTime, 3107 slapmPRMonCurrentInRate, 3108 slapmPRMonCurrentOutRate, 3109 slapmPRMonMinRateLow, 3110 slapmPRMonMinRateHigh, 3111 slapmPRMonMaxRateHigh, 3112 slapmPRMonMaxRateLow, 3113 slapmPRMonMaxDelayHigh, 3114 slapmPRMonMaxDelayLow, 3115 slapmPRMonMinInRateNotAchieves, 3116 slapmPRMonMaxInRateExceeds, 3117 slapmPRMonMaxDelayExceeds, 3118 slapmPRMonMinOutRateNotAchieves, 3119 slapmPRMonMaxOutRateExceeds, 3120 slapmPRMonCurrentDelayRate, 3121 slapmPRMonRowStatus 3122 } 3123 STATUS current 3124 DESCRIPTION 3125 "The group of objects defined by this MIB that are 3126 required for all implementations to be compliant." 3127 ::= { slapmGroups 6 } 3129 slapmEndSystemGroup2 OBJECT-GROUP 3130 OBJECTS { 3131 slapmPolicyTrapFilter, 3132 slapmSubcomponentProtocol, 3133 slapmSubcomponentSystemAddress, 3134 slapmSubcomponentLastActivity, 3135 slapmSubcomponentInOctets, 3136 slapmSubcomponentOutOctets, 3137 slapmSubcomponentTcpOutBufferedOctets, 3138 slapmSubcomponentTcpInBufferedOctets, 3139 slapmSubcomponentTcpReXmts, 3140 slapmSubcomponentTcpRoundTripTime, 3141 slapmSubcomponentTcpRoundTripVariance, 3142 slapmSubcomponentInPdus, 3143 slapmSubcomponentOutPdus, 3144 slapmSubcomponentApplName, 3145 slapmSubcomponentMonitorStatus, 3146 slapmSubcomponentMonitorIntTime, 3147 slapmSubcomponentMonitorCurrentOutRate, 3148 slapmSubcomponentMonitorCurrentInRate, 3149 slapmSubcomponentPolicyRuleIndex 3150 } 3151 STATUS current 3152 DESCRIPTION 3153 "The group of objects defined by this MIB that are 3154 required for end system implementations." 3155 ::= { slapmGroups 7 } 3157 slapmNotGroup2 NOTIFICATION-GROUP 3158 NOTIFICATIONS { 3159 slapmPolicyRuleMonNotOkay, 3160 slapmPolicyRuleMonOkay, 3161 slapmPolicyRuleDeleted, 3162 slapmPolicyRuleMonDeleted 3163 } 3164 STATUS current 3165 DESCRIPTION 3166 "The group of notifications defined by this MIB that MUST 3167 be implemented." 3168 ::= { slapmGroups 8 } 3170 slapmEndSystemNotGroup2 NOTIFICATION-GROUP 3171 NOTIFICATIONS { 3172 slapmSubcMonitorNotOkay, 3173 slapmSubcMonitorOkay 3174 } 3175 STATUS current 3176 DESCRIPTION 3177 "The group of objects defined by this MIB that are 3178 required for end system implementations." 3179 ::= { slapmGroups 9 } 3181 END 3183 5.0 Security Considerations 3185 Certain management information in the MIB defined by this document may 3186 be considered sensitive in some network environments. Therefore, 3187 authentication of received SNMP requests and controlled access to 3188 management information SHOULD be employed in such environments. The 3189 method for this authentication is a function of the SNMP Administrative 3190 Framework, and has not been expanded by this MIB. 3192 To facilitate the provisioning of access control by a security 3193 administrator using the View-Based Access Control Model (VACM) defined 3194 in RFC 2575 [11] for tables in which multiple users may need to 3195 independently create or modify entries, the initial index is used as an 3196 "owner index" (refer to slapmPRMonOwnerIndex in an slapmPRMonEntry). 3197 Such an initial index has a syntax of SnmpAdminString, and can thus be 3198 trivially mapped to a securityName or groupName as defined in VACM, in 3199 accordance with a security policy. 3201 All entries in related tables belonging to a particular user will have 3202 the same value for this initial index. For a given user's entries in a 3203 particular table, the object identifiers for the information in these 3204 entries will have the same subidentifiers (except for the "column" 3205 subidentifier) up to the end of the encoded owner index. To configure 3206 VACM to permit access to this portion of the table, one would create 3207 vacmViewTreeFamilyTable entries with the value of 3208 vacmViewTreeFamilySubtree including the owner index portion, and 3209 vacmViewTreeFamilyMask "wildcarding" the column subidentifier. More 3210 elaborate configurations are possible. The VACM access control 3211 mechanism described above provides control 3212 It is RECOMMENDED that the slapmPRMonTable (equivalent to the deprecated 3213 slapmPolicyMonitorTable) and the slapmSubcomponentTable not be supported 3214 in insecure environments. 3216 6.0 Intellectual Property 3218 The IETF takes no position regarding the validity or scope of any 3219 intellectual property or other rights that might be claimed to pertain 3220 to the implementation or use of the technology described in this 3221 document or the extent to which any license under such rights might or 3222 might not be available; neither does it represent that it has made any 3223 effort to identify any such rights. Information on the IETF's 3224 procedures with respect to rights in standards-track and 3225 standards-related documentation can be found in BCP-11. Copies of 3226 claims of rights made available for publication and any assurances of 3227 licenses to be made available, or the result of an attempt made to 3228 obtain a general license or permission for the use of such proprietary 3229 rights by implementers or users of this specification can be obtained 3230 from the IETF Secretariat. 3232 The IETF invites any interested party to bring to its attention any 3233 copyrights, patents or patent applications, or other proprietary rights 3234 which may cover technology that may be required to practice this 3235 standard. Please address the information to the IETF Executive 3236 Director. 3238 7.0 Acknowledgments 3240 This document is an individual submission and not the product of any 3241 IETF working group. Special thanks should be given to Robert Moore of 3242 IBM for his numerous reviews. 3244 8.0 References 3246 [1] Case, J., M. Fedor, M. Schoffstall, J. Davin, "Simple Network 3247 Management Protocol", RFC 1157, SNMP Research, Performance Systems 3248 International, MIT Laboratory for Computer Science, May 1990. 3250 [2] McCloghrie, K., and M. Rose, Editors, "Management Information Base 3251 for Network Management of TCP/IP-based internets: MIB-II", STD 17, 3252 RFC 1213, Hughes LAN Systems, Performance Systems International, 3253 March 1991. 3255 [3] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., 3256 and S. Waldbusser, "Structure of Management Information Version 2 3257 (SMIv2)", RFC 2578, STD 58, Cisco Systems, SNMPinfo, TU 3258 Braunschweig, SNMP Research, First Virtual Holdings, International 3259 Network Services, April 1999. 3261 [4] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., 3262 and S. Waldbusser, "Textual Conventions for SMIv2", RFC 2579, STD 3263 58, Cisco Systems, SNMPinfo, TU Braunschweig, SNMP Research, First 3264 Virtual Holdings, International Network Services, April 1999. 3266 [5] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., 3267 and S. Waldbusser, "Conformance Statements for SMIv2", RFC 2580, 3268 STD 58, Cisco Systems, SNMPinfo, TU Braunschweig, SNMP Research, 3269 First Virtual Holdings, International Network Services, April 1999. 3271 [6] Case, J., McCloghrie, K., Rose, M., and Waldbusser, S., "Protocol 3272 Operations for Version 2 of the Simple Network Management Protocol 3273 (SNMPv2)", RFC 1905, January 1996. 3275 [7] Harrington D., Presuhn, R., Wijnen, B., "An Architecture for 3276 Describing SNMP Management Frameworks", RFC 2571, Cabletron 3277 Systems, BMC Software, Inc., IBM T.J. Watson Research, April 1999. 3279 [8] Case, J., Harrington D., Presuhn, R., Wijnen, B., "Message 3280 Processing and Dispatching for the Simple Network Management 3281 Protocol (SNMP)", RFC 2572, SNMP Research Inc., Cabletron Systems, 3282 BMC Software, Inc., IBM T.J. Watson Research, April 1999. 3284 [9] Levi D., Meyer P., Stewart, B., "SNMPv3 Applications", RFC 2573, 3285 SNMP Research, Inc., Secure Computing Corporation, Cisco Systems, 3286 April 1999. 3288 [10] Blumenthal, U., Wijnen, B., "User-based Security Model (USM) for 3289 version 3 of the Simple Network Management Protocol (SNMPv3)", RFC 3290 2574, IBM T. J. Watson Research, April 1999. 3292 [11] Wijnen, B., Presuhn, R., McCloghrie, K., "View-based Access Control 3293 Model (VACM) for the Simple Network Management Protocol (SNMP)", 3294 RFC 2575, IBM T.J. Watson Research, BMC Software, Inc., Cisco 3295 Systems, Inc., April 1999. 3297 [12] Hovey, R., and S. Bradner, "The Organizations Involved in the IETF 3298 Standards Process", BCP 11, RFC 2028, October 1996. 3300 [13] Bradner, S., "Key words for use in RFCs to Indicate Requirement 3301 Levels", BCP 14, RFC 2119, March 1997. 3303 [14] Rose, M., and K. McCloghrie, "Structure and Identification of 3304 Management Information for TCP/IP-based Internets", RFC 1155, 3305 Performance Systems International, Hughes LAN Systems, May 1990. 3307 [15] Rose, M., and K. McCloghrie, "Concise MIB Definitions", RFC 1212, 3308 Performance Systems International, Hughes LAN Systems, March 1991. 3310 [16] M. Rose, "A Convention for Defining Traps for use with the SNMP", 3311 RFC 1215, Performance Systems International, March 1991. 3313 [17] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, 3314 "Introduction to Community-based SNMPv2", RFC 1901, SNMP Research, 3315 Inc., Cisco Systems, Inc., Dover Beach Consulting, Inc., 3316 International Network Services, January 1996. 3318 [18] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Transport 3319 Mappings for Version 2 of the Simple Network Management Protocol 3320 (SNMPv2)", RFC 1906, SNMP Research, Inc., Cisco Systems, Inc., 3321 Dover Beach Consulting, Inc., International Network Services, 3322 January 1996. 3324 [19] McCloghrie, K. and Bierman, A., "Entity MIB using SMIv2", RFC 2037, 3325 October 1996. 3327 [20] Bradner, S., "The Internet Standards Process -- Revision 3", RFC 3328 2026, BCP 9, Harvard University, October 1996. 3330 9.0 Author's Address 3332 Kenneth D. White 3333 Dept. BRQA/Bldg. 501/G114 3334 IBM Corporation 3335 P.O.Box 12195 3336 3039 Cornwallis 3337 Research Triangle Park, NC 27709, USA 3338 E-mail: wkenneth@us.ibm.com 3340 10.0 Full Copyright Statement 3342 Copyright (C) The Internet Society (1999). All Rights Reserved. 3344 This document and translations of it may be copied and furnished to 3345 others, and derivative works that comment on or otherwise explain it or 3346 assist in its implementation may be prepared, copied, published and 3347 distributed, in whole or in part, without restriction of any kind, 3348 provided that the above copyright notice and this paragraph are included 3349 on all such copies and derivative works. However, this document itself 3350 may not be modified in any way, such as by removing the copyright notice 3351 or references to the Internet Society or other Internet organizations, 3352 except as needed for the purpose of developing Internet standards in 3353 which case the procedures for copyrights defined in the Internet 3354 Standards process must be followed, or as required to translate it into 3355 languages other than English. 3357 The limited permissions granted above are perpetual and will not be 3358 revoked by the Internet Society or its successors or assigns. 3360 This document and the information contained herein is provided on an "AS 3361 IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK 3362 FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT 3363 LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT 3364 INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR 3365 FITNESS FOR A PARTICULAR PURPOSE.