Skip to main content

5. Managed Object Definitions for SNMP Management Frameworks

5. Managed Object Definitions for SNMP Management Frameworks

This section defines the SNMP-FRAMEWORK-MIB module, which contains managed objects for the SNMPv3 framework. This MIB module provides identification and configuration information for an SNMP engine.

SNMP-FRAMEWORK-MIB DEFINITIONS ::= BEGIN

IMPORTS
MODULE-IDENTITY, OBJECT-TYPE,
OBJECT-IDENTITY,
snmpModules FROM SNMPv2-SMI
TEXTUAL-CONVENTION FROM SNMPv2-TC
MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF;

snmpFrameworkMIB MODULE-IDENTITY
LAST-UPDATED "200210140000Z"
ORGANIZATION "SNMPv3 Working Group"
CONTACT-INFO
"WG-EMail: [email protected]
Subscribe: [email protected]

Co-Chair: Russ Mundy
Network Associates Laboratories
postal: 15204 Omega Drive, Suite 300
Rockville, MD 20850-4601
USA
EMail: [email protected]
phone: +1 301-947-7107

Co-Chair: David Harrington
Enterasys Networks
postal: 35 Industrial Way
P. O. Box 5005
Rochester, NH 03866-5005
USA
EMail: [email protected]
phone: +1 603-337-2614

Co-editor: Randy Presuhn
BMC Software, Inc.
postal: 2141 North First Street
San Jose, CA 95131
USA
EMail: [email protected]
phone: +1 408-546-1006

Co-editor: Bert Wijnen
Lucent Technologies
postal: Schagen 33
3461 GL Linschoten
Netherlands
EMail: [email protected]
phone: +31 348-680-685"
DESCRIPTION
"The SNMP Management Architecture MIB

Copyright (C) The Internet Society (2002). This
version of this MIB module is part of RFC 3411;
see the RFC itself for full legal notices."
REVISION "200210140000Z"
DESCRIPTION "Changes in this revision:
- Updated various administrative information.
- Corrected some typos.
This revision published as RFC 3411."
REVISION "199901190000Z"
DESCRIPTION "Initial version, published as RFC 2571."
::= { snmpModules 10 }

-- Administrative assignments ***************************************

snmpFrameworkAdmin
OBJECT IDENTIFIER ::= { snmpFrameworkMIB 1 }
snmpFrameworkMIBObjects
OBJECT IDENTIFIER ::= { snmpFrameworkMIB 2 }
snmpFrameworkMIBConformance
OBJECT IDENTIFIER ::= { snmpFrameworkMIB 3 }

-- Textual Conventions ***********************************************

SnmpEngineID ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION "An SNMP engine's administratively-unique identifier.
Objects of this type are for identification, not for
addressing, even though it is possible that an
address may have been used in the generation of
a specific value.

The value for this object may not be all zeros or
all 'ff'H or the empty (zero length) string.

The initial value for this object may be configured
via an operator console entry or via an algorithmic
function. In the latter case, the following
example algorithm is recommended.

In cases where there are multiple engines on the
same system, the use of this algorithm is NOT
appropriate, as it would result in all of those
engines ending up with the same ID value."
SYNTAX OCTET STRING (SIZE(5..32))

SnmpSecurityModel ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION "An identifier that uniquely identifies a
Security Model of the Security Subsystem within
this SNMP Management Architecture.

The values for securityModel are allocated as
follows:

- The zero value does not identify any particular
security model.

- Values between 1 and 255, inclusive, are reserved
for standards-track Security Models and are
managed by the Internet Assigned Numbers Authority
(IANA).

- Values greater than 255 are allocated to
enterprise-specific Security Models. An
enterprise-specific securityModel value is defined
to be:

enterpriseID * 256 + security model within
enterprise

For example, the fourth Security Model defined by
the enterprise whose enterpriseID is 1 would be
260."
SYNTAX INTEGER(0 .. 2147483647)

SnmpMessageProcessingModel ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION "An identifier that uniquely identifies a Message
Processing Model of the Message Processing
Subsystem within this SNMP Management Architecture.

The values for messageProcessingModel are
allocated as follows:

- Values between 0 and 255, inclusive, are
reserved for standards-track Message Processing
Models and are managed by the Internet Assigned
Numbers Authority (IANA).

- Values greater than 255 are allocated to
enterprise-specific Message Processing Models.
An enterprise messageProcessingModel value is
defined to be:

enterpriseID * 256 +
messageProcessingModel within enterprise

For example, the fourth Message Processing Model
defined by the enterprise whose enterpriseID
is 1 would be 260."
SYNTAX INTEGER(0 .. 2147483647)

SnmpSecurityLevel ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION "A Level of Security at which SNMP messages can be
sent or with which operations are being processed;
in particular, one of:

noAuthNoPriv - without authentication and
without privacy,
authNoPriv - with authentication but
without privacy,
authPriv - with authentication and
with privacy.

These three values are ordered such that
noAuthNoPriv is less than authNoPriv and
authNoPriv is less than authPriv."
SYNTAX INTEGER { noAuthNoPriv(1),
authNoPriv(2),
authPriv(3)
}

SnmpAdminString ::= TEXTUAL-CONVENTION
DISPLAY-HINT "255t"
STATUS current
DESCRIPTION "An octet string containing administrative
information, preferably in human-readable form.

To facilitate internationalization, this
information is represented using the ISO/IEC
IS 10646-1 character set, encoded as an octet
string using the UTF-8 transformation format
described in [RFC2279].

Since additional code points are added by
amendments to the 10646 standard from time
to time, implementations must be prepared to
encounter any code point from 0x00000000 to
0x7fffffff. Byte sequences that do not
correspond to the valid UTF-8 encoding of a
code point or are outside this range are
prohibited.

The use of control codes should be avoided.

When it is necessary to represent a newline,
the control code sequence CR LF should be used.

The use of leading or trailing white space should
be avoided.

For code points not directly supported by user
interface hardware or software, an alternative
means of entry and display, such as hexadecimal,
may be provided.

For information encoded in 7-bit US-ASCII,
the UTF-8 encoding is identical to the
US-ASCII encoding.

UTF-8 may require multiple bytes to represent a
single character / code point; thus the length
of this object in octets may be different from
the number of characters encoded. Similarly,
size constraints refer to the number of encoded
octets, not the number of characters represented
by an encoding.

Note that when this TC is used for an object that
is used or envisioned to be used as an index, then
a SIZE restriction MUST be specified so that the
number of sub-identifiers stays reasonable. Note
that the size of a SnmpAdminString object is
measured in octets, not characters."
SYNTAX OCTET STRING (SIZE (0..255))

-- SNMP Engine Objects ***********************************************

snmpEngine OBJECT IDENTIFIER ::= { snmpFrameworkMIBObjects 1 }

snmpEngineID OBJECT-TYPE
SYNTAX SnmpEngineID
MAX-ACCESS read-only
STATUS current
DESCRIPTION "An SNMP engine's administratively-unique identifier.

This information SHOULD be stored in non-volatile
storage so that it remains constant across
re-initializations of the SNMP engine."
::= { snmpEngine 1 }

snmpEngineBoots OBJECT-TYPE
SYNTAX INTEGER (1..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of times that the SNMP engine has
(re-)initialized itself since snmpEngineID
was last configured."
::= { snmpEngine 2 }

snmpEngineTime OBJECT-TYPE
SYNTAX INTEGER (0..2147483647)
UNITS "seconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of seconds since the value of
the snmpEngineBoots object last changed.
When incrementing this object's value would
cause it to exceed its maximum,
snmpEngineBoots is incremented as if the
agent had re-booted, and this object's value
consequently reverts to zero."
::= { snmpEngine 3 }

snmpEngineMaxMessageSize OBJECT-TYPE
SYNTAX INTEGER (484..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The maximum length in octets of an SNMP message
which this SNMP engine can send or receive and
process, determined as the minimum of the maximum
message size values supported among all of the
transports available to and supported by the engine."
::= { snmpEngine 4 }

-- Registration Points for Authentication Protocols *****************

snmpAuthProtocols OBJECT-IDENTITY
STATUS current
DESCRIPTION "Registration point for standards-track
authentication protocols used in SNMP Management
Frameworks."
::= { snmpFrameworkAdmin 1 }

-- Registration Points for Privacy Protocols ************************

snmpPrivProtocols OBJECT-IDENTITY
STATUS current
DESCRIPTION "Registration point for standards-track privacy
protocols used in SNMP Management Frameworks."
::= { snmpFrameworkAdmin 2 }

-- Conformance Information *******************************************

snmpFrameworkMIBCompliances
OBJECT IDENTIFIER ::= { snmpFrameworkMIBConformance 1 }
snmpFrameworkMIBGroups
OBJECT IDENTIFIER ::= { snmpFrameworkMIBConformance 2 }

-- Compliance Statements *********************************************

snmpFrameworkMIBCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION "The compliance statement for SNMP engines which
implement the SNMP Management Framework MIB."

MODULE -- this module
MANDATORY-GROUPS { snmpEngineGroup }

::= { snmpFrameworkMIBCompliances 1 }

-- Units of Conformance **********************************************

snmpEngineGroup OBJECT-GROUP
OBJECTS {
snmpEngineID,
snmpEngineBoots,
snmpEngineTime,
snmpEngineMaxMessageSize
}
STATUS current
DESCRIPTION "A collection of objects for identifying and
determining the configuration and current timeliness
values of an SNMP engine."
::= { snmpFrameworkMIBGroups 1 }

END

This MIB module defines the following key objects:

Textual Conventions

  1. SnmpEngineID: A unique identifier for an SNMP engine
  2. SnmpSecurityModel: An identifier for a Security Model
  3. SnmpMessageProcessingModel: An identifier for a Message Processing Model
  4. SnmpSecurityLevel: The security level (noAuthNoPriv, authNoPriv, authPriv)
  5. SnmpAdminString: A string for administrative information (UTF-8 encoded)

SNMP Engine Objects

  1. snmpEngineID: The unique identifier for this SNMP engine
  2. snmpEngineBoots: The number of times the engine has been re-initialized
  3. snmpEngineTime: The number of seconds since the last re-initialization
  4. snmpEngineMaxMessageSize: The maximum message size the engine can handle

Registration Points

  1. snmpAuthProtocols: Registration point for authentication protocols
  2. snmpPrivProtocols: Registration point for privacy protocols

These objects provide the foundation for managing SNMP engines and are essential for the operation of the SNMPv3 framework.