MPLS-L3VPN-STD-MIB DEFINITIONS ::= BEGIN

IMPORTS

   MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE,

   Integer32, Counter32, Unsigned32, Gauge32

      FROM SNMPv2-SMI                                     -- [RFC2578]

   MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP

      FROM SNMPv2-CONF                                    -- [RFC2580]

   TEXTUAL-CONVENTION, TruthValue, RowStatus,

   TimeStamp, StorageType

      FROM SNMPv2-TC                                      -- [RFC2579]

   InterfaceIndex, InterfaceIndexOrZero

      FROM IF-MIB                                         -- [RFC2863]

   VPNIdOrZero

     FROM VPN-TC-STD-MIB                                  -- [RFC4265]

   SnmpAdminString

      FROM SNMP-FRAMEWORK-MIB                             -- [RFC3411]

   IANAipRouteProtocol

      FROM IANA-RTPROTO-MIB                               -- [RTPROTO]

   InetAddress, InetAddressType,

   InetAddressPrefixLength,

   InetAutonomousSystemNumber

      FROM INET-ADDRESS-MIB                               -- [RFC4001]

   mplsStdMIB

      FROM MPLS-TC-STD-MIB                                -- [RFC3811]

   MplsIndexType

      FROM MPLS-LSR-STD-MIB                               -- [RFC3813]

   ;

mplsL3VpnMIB MODULE-IDENTITY

   LAST-UPDATED "200601230000Z"  -- 23 January 2006

   ORGANIZATION "IETF Layer-3 Virtual Private

                 Networks Working Group."

   CONTACT-INFO

          "        Thomas D. Nadeau

                   tnadeau@cisco.com

                   Harmen van der Linde

                   havander@cisco.com

                   Comments and discussion to l3vpn@ietf.org"

   DESCRIPTION

        "This MIB contains managed object definitions for the

         Layer-3 Multiprotocol Label Switching Virtual

         Private Networks.

        Copyright (C) The Internet Society (2006).  This

        version of this MIB module is part of RFC4382; see

        the RFC itself for full legal notices."

  -- Revision history.

  REVISION

      "200601230000Z"  -- 23 January 2006

   DESCRIPTION

      "Initial version.  Published as RFC 4382."

   ::= { mplsStdMIB 11 }

-- Textual Conventions.

MplsL3VpnName ::= TEXTUAL-CONVENTION

   STATUS        current

   DESCRIPTION

       "An identifier that is assigned to each MPLS/BGP VPN and

        is used to uniquely identify it.  This is assigned by the

        system operator or NMS and SHOULD be unique throughout

        the MPLS domain.  If this is the case, then this identifier

        can then be used at any LSR within a specific MPLS domain

        to identify this MPLS/BGP VPN.  It may also be possible to

        preserve the uniqueness of this identifier across MPLS

        domain boundaries, in which case this identifier can then

        be used to uniquely identify MPLS/BGP VPNs on a more global

        basis.  This object MAY be set to the VPN ID as defined in

        RFC 2685."

   REFERENCE

        "RFC 2685 Fox B., et al, 'Virtual Private

         Networks Identifier', September 1999."

   SYNTAX OCTET STRING (SIZE (0..31))

MplsL3VpnRouteDistinguisher ::= TEXTUAL-CONVENTION

   STATUS        current

   DESCRIPTION

       "Syntax for a route distinguisher and route target

        as defined in [RFC4364]."

   REFERENCE

        "[RFC4364]"

   SYNTAX  OCTET STRING(SIZE (0..256))

MplsL3VpnRtType ::= TEXTUAL-CONVENTION

   STATUS        current

   DESCRIPTION

       "Used to define the type of a route target usage.

        Route targets can be specified to be imported,

        exported, or both.  For a complete definition of a

        route target, see [RFC4364]."

   REFERENCE

        "[RFC4364]"

   SYNTAX INTEGER { import(1), export(2), both(3) }

-- Top level components of this MIB.

mplsL3VpnNotifications OBJECT IDENTIFIER ::= { mplsL3VpnMIB 0 }

mplsL3VpnObjects       OBJECT IDENTIFIER ::= { mplsL3VpnMIB 1 }

mplsL3VpnScalars       OBJECT IDENTIFIER ::= { mplsL3VpnObjects 1 }

mplsL3VpnConf          OBJECT IDENTIFIER ::= { mplsL3VpnObjects 2 }

mplsL3VpnPerf          OBJECT IDENTIFIER ::= { mplsL3VpnObjects 3 }

mplsL3VpnRoute         OBJECT IDENTIFIER ::= { mplsL3VpnObjects 4 }

mplsL3VpnConformance   OBJECT IDENTIFIER ::= { mplsL3VpnMIB 2 }

--

-- Scalar Objects

--

mplsL3VpnConfiguredVrfs OBJECT-TYPE

   SYNTAX        Unsigned32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "The number of VRFs that are configured on this node."

   ::= { mplsL3VpnScalars 1 }

mplsL3VpnActiveVrfs OBJECT-TYPE

   SYNTAX        Gauge32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "The number of VRFs that are active on this node.

        That is, those VRFs whose corresponding mplsL3VpnVrfOperStatus

        object value is equal to operational (1)."

   ::= { mplsL3VpnScalars 2 }

mplsL3VpnConnectedInterfaces OBJECT-TYPE

   SYNTAX        Gauge32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "Total number of interfaces connected to a VRF."

   ::= { mplsL3VpnScalars 3 }

mplsL3VpnNotificationEnable OBJECT-TYPE

   SYNTAX        TruthValue

   MAX-ACCESS    read-write

   STATUS        current

   DESCRIPTION

        "If this object is true, then it enables the

         generation of all notifications defined in

         this MIB.  This object's value should be

         preserved across agent reboots."

   REFERENCE

       "See also [RFC3413] for explanation that

        notifications are under the ultimate control of the

        MIB modules in this document."

   DEFVAL { false }

   ::= { mplsL3VpnScalars 4 }

mplsL3VpnVrfConfMaxPossRts  OBJECT-TYPE

   SYNTAX        Unsigned32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

     "Denotes maximum number of routes that the device

      will allow all VRFs jointly to hold.  If this value is

      set to 0, this indicates that the device is

      unable to determine the absolute maximum.  In this

      case, the configured maximum MAY not actually

      be allowed by the device."

   ::= { mplsL3VpnScalars 5 }

mplsL3VpnVrfConfRteMxThrshTime  OBJECT-TYPE

   SYNTAX        Unsigned32

   UNITS         "seconds"

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

     "Denotes the interval in seconds, at which the route max threshold

      notification may be reissued after the maximum value has been

      exceeded (or has been reached if mplsL3VpnVrfConfMaxRoutes and

      mplsL3VpnVrfConfHighRteThresh are equal) and the initial

      notification has been issued.  This value is intended to prevent

      continuous generation of notifications by an agent in the event

      that routes are continually added to a VRF after it has reached

      its maximum value.  If this value is set to 0, the agent should

      only issue a single notification at the time that the maximum

      threshold has been reached, and should not issue any more

      notifications until the value of routes has fallen below the

      configured threshold value.  This is the recommended default

      behavior."

   DEFVAL { 0 }

   ::= { mplsL3VpnScalars 6 }

mplsL3VpnIllLblRcvThrsh OBJECT-TYPE

   SYNTAX        Unsigned32

   MAX-ACCESS    read-write

   STATUS        current

   DESCRIPTION

       "The number of illegally received labels above which

        the mplsNumVrfSecIllglLblThrshExcd notification

        is issued.  The persistence of this value mimics

        that of the device's configuration."

   ::= { mplsL3VpnScalars 7 }

-- VPN Interface Configuration Table

mplsL3VpnIfConfTable  OBJECT-TYPE

   SYNTAX        SEQUENCE OF MplsL3VpnIfConfEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "This table specifies per-interface MPLS capability

        and associated information."

   ::= { mplsL3VpnConf 1 }

mplsL3VpnIfConfEntry OBJECT-TYPE

   SYNTAX        MplsL3VpnIfConfEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "An entry in this table is created by an LSR for

        every interface capable of supporting MPLS L3VPN.

        Each entry in this table is meant to correspond to

        an entry in the Interfaces Table."

   INDEX       { mplsL3VpnVrfName, mplsL3VpnIfConfIndex }

   ::= { mplsL3VpnIfConfTable 1 }

MplsL3VpnIfConfEntry ::= SEQUENCE {

  mplsL3VpnIfConfIndex             InterfaceIndex,

  mplsL3VpnIfVpnClassification     INTEGER,

  mplsL3VpnIfVpnRouteDistProtocol  BITS,

  mplsL3VpnIfConfStorageType       StorageType,

  mplsL3VpnIfConfRowStatus         RowStatus

}

mplsL3VpnIfConfIndex OBJECT-TYPE

   SYNTAX        InterfaceIndex

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "This is a unique index for an entry in the

        mplsL3VpnIfConfTable.  A non-zero index for an

        entry indicates the ifIndex for the corresponding

        interface entry in the MPLS-VPN-layer in the ifTable.

        Note that this table does not necessarily correspond

        one-to-one with all entries in the Interface MIB

        having an ifType of MPLS-layer; rather, only those

        that are enabled for MPLS L3VPN functionality."

   REFERENCE

       "RFC2863"

   ::= { mplsL3VpnIfConfEntry 1 }

mplsL3VpnIfVpnClassification OBJECT-TYPE

   SYNTAX        INTEGER { carrierOfCarrier (1),

                           enterprise (2),

                           interProvider (3)

   }

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

       "Denotes whether this link participates in a

        carrier's carrier, enterprise, or inter-provider

        scenario."

   DEFVAL { enterprise }

   ::= { mplsL3VpnIfConfEntry 2 }

mplsL3VpnIfVpnRouteDistProtocol OBJECT-TYPE

   SYNTAX        BITS { none (0),

                        bgp (1),

                        ospf (2),

                        rip(3),

                        isis(4),

                        static(5),

                        other (6)

   }

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

       "Denotes the route distribution protocol across the

        PE-CE link.  Note that more than one routing protocol

        may be enabled at the same time; thus, this object is

        specified as a bitmask.  For example, static(5) and

        ospf(2) are a typical configuration."

   ::= { mplsL3VpnIfConfEntry 3 }

mplsL3VpnIfConfStorageType  OBJECT-TYPE

   SYNTAX      StorageType

   MAX-ACCESS  read-create

   STATUS      current

   DESCRIPTION

       "The storage type for this VPN If entry.

        Conceptual rows having the value 'permanent'

        need not allow write access to any columnar

        objects in the row."

   REFERENCE

        "See RFC2579."

   DEFVAL { volatile }

   ::= { mplsL3VpnIfConfEntry 4 }

mplsL3VpnIfConfRowStatus  OBJECT-TYPE

   SYNTAX      RowStatus

   MAX-ACCESS  read-create

   STATUS      current

   DESCRIPTION

       "This variable is used to create, modify, and/or

        delete a row in this table.  Rows in this

        table signify that the specified interface is

        associated with this VRF.  If the row creation

        operation succeeds, the interface will have been

        associated with the specified VRF, otherwise the

        agent MUST not allow the association.  If the agent

        only allows read-only operations on this table, it

        MUST create entries in this table as they are created

        on the device.  When a row in this table is in

        active(1) state, no objects in that row can be

        modified except mplsL3VpnIfConfStorageType and

        mplsL3VpnIfConfRowStatus."

   ::= { mplsL3VpnIfConfEntry 5 }

-- VRF Configuration Table

mplsL3VpnVrfTable  OBJECT-TYPE

   SYNTAX        SEQUENCE OF MplsL3VpnVrfEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "This table specifies per-interface MPLS L3VPN

        VRF Table capability and associated information.

        Entries in this table define VRF routing instances

        associated with MPLS/VPN interfaces.  Note that

        multiple interfaces can belong to the same VRF

        instance.  The collection of all VRF instances

        comprises an actual VPN."

   ::= { mplsL3VpnConf 2 }

mplsL3VpnVrfEntry OBJECT-TYPE

   SYNTAX        MplsL3VpnVrfEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "An entry in this table is created by an LSR for

        every VRF capable of supporting MPLS L3VPN.  The

        indexing provides an ordering of VRFs per-VPN

        interface."

   INDEX       { mplsL3VpnVrfName }

   ::= { mplsL3VpnVrfTable 1 }

MplsL3VpnVrfEntry ::= SEQUENCE {

  mplsL3VpnVrfName                      MplsL3VpnName,

  mplsL3VpnVrfVpnId                     VPNIdOrZero,

  mplsL3VpnVrfDescription               SnmpAdminString,

  mplsL3VpnVrfRD                        MplsL3VpnRouteDistinguisher,

  mplsL3VpnVrfCreationTime              TimeStamp,

  mplsL3VpnVrfOperStatus                INTEGER,

  mplsL3VpnVrfActiveInterfaces          Gauge32,

  mplsL3VpnVrfAssociatedInterfaces      Unsigned32,

  mplsL3VpnVrfConfMidRteThresh          Unsigned32,

  mplsL3VpnVrfConfHighRteThresh         Unsigned32,

  mplsL3VpnVrfConfMaxRoutes             Unsigned32,

  mplsL3VpnVrfConfLastChanged           TimeStamp,

  mplsL3VpnVrfConfRowStatus             RowStatus,

  mplsL3VpnVrfConfAdminStatus           INTEGER,

  mplsL3VpnVrfConfStorageType           StorageType

}

mplsL3VpnVrfName OBJECT-TYPE

   SYNTAX        MplsL3VpnName

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "The human-readable name of this VPN.  This MAY

        be equivalent to the [RFC2685] VPN-ID, but may

        also vary.  If it is set to the VPN ID, it MUST

        be equivalent to the value of mplsL3VpnVrfVpnId.

        It is strongly recommended that all sites supporting

        VRFs that are part of the same VPN use the same

        naming convention for VRFs as well as the same VPN

        ID."

   REFERENCE

       "[RFC2685]"

   ::= { mplsL3VpnVrfEntry 1 }

mplsL3VpnVrfVpnId OBJECT-TYPE

   SYNTAX        VPNIdOrZero

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

       "The VPN ID as specified in [RFC2685].  If a VPN ID

        has not been specified for this VRF, then this

        variable SHOULD be set to a zero-length OCTET

        STRING."

   ::= { mplsL3VpnVrfEntry 2 }

mplsL3VpnVrfDescription OBJECT-TYPE

   SYNTAX        SnmpAdminString

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

       "The human-readable description of this VRF."

   DEFVAL { "" }

   ::= { mplsL3VpnVrfEntry 3 }

mplsL3VpnVrfRD OBJECT-TYPE

   SYNTAX        MplsL3VpnRouteDistinguisher

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

       "The route distinguisher for this VRF."

   DEFVAL { "" }

   ::= { mplsL3VpnVrfEntry 4 }

mplsL3VpnVrfCreationTime OBJECT-TYPE

   SYNTAX        TimeStamp

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "The time at which this VRF entry was created."

   ::= { mplsL3VpnVrfEntry 5 }

mplsL3VpnVrfOperStatus OBJECT-TYPE

   SYNTAX        INTEGER { up (1),

                           down (2)

                         }

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "Denotes whether or not a VRF is operational.  A VRF is

        up(1) when there is at least one interface associated

        with the VRF whose ifOperStatus is up(1).  A VRF is

        down(2) when:

        a. There does not exist at least one interface whose

           ifOperStatus is up(1).

        b. There are no interfaces associated with the VRF."

   ::= { mplsL3VpnVrfEntry 6 }

mplsL3VpnVrfActiveInterfaces OBJECT-TYPE

   SYNTAX        Gauge32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "Total number of interfaces connected to this VRF with

        ifOperStatus = up(1).

        This value should increase when an interface is associated

        with the corresponding VRF and its corresponding ifOperStatus

        is equal to up(1).  If an interface is associated whose

        ifOperStatus is not up(1), then the value is not incremented

        until such time as it transitions to this state.

        This value should be decremented when an interface is

        disassociated with a VRF or the corresponding ifOperStatus

        transitions out of the up(1) state to any other state.

       "

   ::= { mplsL3VpnVrfEntry 7 }

mplsL3VpnVrfAssociatedInterfaces OBJECT-TYPE

   SYNTAX        Unsigned32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "Total number of interfaces connected to this VRF

        (independent of ifOperStatus type)."

   ::= { mplsL3VpnVrfEntry 8 }

mplsL3VpnVrfConfMidRteThresh    OBJECT-TYPE

   SYNTAX        Unsigned32

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

     "Denotes mid-level water marker for the number

      of routes that this VRF may hold."

  DEFVAL { 0 }

  ::= { mplsL3VpnVrfEntry 9 }

mplsL3VpnVrfConfHighRteThresh  OBJECT-TYPE

   SYNTAX        Unsigned32

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

     "Denotes high-level water marker for the number of

      routes that this VRF may hold."

   DEFVAL { 0 }

  ::= { mplsL3VpnVrfEntry 10 }

mplsL3VpnVrfConfMaxRoutes  OBJECT-TYPE

   SYNTAX        Unsigned32

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

     "Denotes maximum number of routes that this VRF is

      configured to hold.  This value MUST be less than or

      equal to mplsL3VpnVrfConfMaxPossRts unless it is set

      to 0."

   DEFVAL { 0 }

  ::= { mplsL3VpnVrfEntry 11 }

mplsL3VpnVrfConfLastChanged  OBJECT-TYPE

   SYNTAX        TimeStamp

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

     "The value of sysUpTime at the time of the last

      change of this table entry, which includes changes of

      VRF parameters defined in this table or addition or

      deletion of interfaces associated with this VRF."

  ::= { mplsL3VpnVrfEntry 12 }

mplsL3VpnVrfConfRowStatus OBJECT-TYPE

   SYNTAX        RowStatus

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

       "This variable is used to create, modify, and/or

        delete a row in this table.

        When a row in this table is in active(1) state, no

        objects in that row can be modified except

        mplsL3VpnVrfConfAdminStatus, mplsL3VpnVrfConfRowStatus,

        and mplsL3VpnVrfConfStorageType."

  ::= { mplsL3VpnVrfEntry 13 }

mplsL3VpnVrfConfAdminStatus OBJECT-TYPE

   SYNTAX     INTEGER {

                      up(1),     -- ready to pass packets

                      down(2),   -- can't pass packets

                      testing(3) -- in some test mode

                }

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

        "Indicates the desired operational status of this

         VRF."

  ::= { mplsL3VpnVrfEntry 14 }

mplsL3VpnVrfConfStorageType  OBJECT-TYPE

   SYNTAX      StorageType

   MAX-ACCESS  read-create

   STATUS      current

   DESCRIPTION

        "The storage type for this VPN VRF entry.

         Conceptual rows having the value 'permanent'

         need not allow write access to any columnar

         objects in the row."

   REFERENCE

        "See RFC2579."

   DEFVAL { volatile }

   ::= { mplsL3VpnVrfEntry 15 }

-- MplsL3VpnVrfRTTable

mplsL3VpnVrfRTTable OBJECT-TYPE

    SYNTAX        SEQUENCE OF MplsL3VpnVrfRTEntry

    MAX-ACCESS    not-accessible

    STATUS        current

    DESCRIPTION

        "This table specifies per-VRF route target association.

         Each entry identifies a connectivity policy supported

         as part of a VPN."

    ::= { mplsL3VpnConf 3 }

mplsL3VpnVrfRTEntry OBJECT-TYPE

    SYNTAX        MplsL3VpnVrfRTEntry

    MAX-ACCESS    not-accessible

    STATUS        current

    DESCRIPTION

       "An entry in this table is created by an LSR for

        each route target configured for a VRF supporting

        a MPLS L3VPN instance.  The indexing provides an

        ordering per-VRF instance.  See [RFC4364] for a

        complete definition of a route target."

    INDEX  { mplsL3VpnVrfName, mplsL3VpnVrfRTIndex,

             mplsL3VpnVrfRTType }

    ::= { mplsL3VpnVrfRTTable 1 }

MplsL3VpnVrfRTEntry ::= SEQUENCE {

     mplsL3VpnVrfRTIndex       Unsigned32,

     mplsL3VpnVrfRTType        MplsL3VpnRtType,

     mplsL3VpnVrfRT            MplsL3VpnRouteDistinguisher,

     mplsL3VpnVrfRTDescr       SnmpAdminString,

     mplsL3VpnVrfRTRowStatus   RowStatus,

     mplsL3VpnVrfRTStorageType StorageType

   }

mplsL3VpnVrfRTIndex OBJECT-TYPE

   SYNTAX        Unsigned32 (1..4294967295)

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "Auxiliary index for route targets configured for a

        particular VRF."

   ::= { mplsL3VpnVrfRTEntry 2 }

mplsL3VpnVrfRTType OBJECT-TYPE

   SYNTAX        MplsL3VpnRtType

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "The route target distribution type."

   ::= { mplsL3VpnVrfRTEntry 3 }

mplsL3VpnVrfRT OBJECT-TYPE

   SYNTAX        MplsL3VpnRouteDistinguisher

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

       "The route target distribution policy."

   DEFVAL { "" }

   ::= { mplsL3VpnVrfRTEntry 4 }

mplsL3VpnVrfRTDescr OBJECT-TYPE

   SYNTAX        SnmpAdminString

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

       "Description of the route target."

   DEFVAL { "" }

   ::= { mplsL3VpnVrfRTEntry 5 }

mplsL3VpnVrfRTRowStatus OBJECT-TYPE

   SYNTAX        RowStatus

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

       "This variable is used to create, modify, and/or

        delete a row in this table.  When a row in this

        table is in active(1) state, no objects in that row

        can be modified except mplsL3VpnVrfRTRowStatus."

   ::= { mplsL3VpnVrfRTEntry 6 }

mplsL3VpnVrfRTStorageType OBJECT-TYPE

   SYNTAX        StorageType

   MAX-ACCESS    read-create

   STATUS        current

   DESCRIPTION

        "The storage type for this VPN route target (RT) entry.

         Conceptual rows having the value 'permanent'

         need not allow write access to any columnar

         objects in the row."

   REFERENCE

        "See RFC2579."

   DEFVAL { volatile }

   ::= { mplsL3VpnVrfRTEntry 7 }

-- VRF Security Table

mplsL3VpnVrfSecTable  OBJECT-TYPE

   SYNTAX        SEQUENCE OF MplsL3VpnVrfSecEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "This table specifies per MPLS L3VPN VRF Table

        security-related counters."

   ::= { mplsL3VpnConf 6 }

mplsL3VpnVrfSecEntry OBJECT-TYPE

   SYNTAX        MplsL3VpnVrfSecEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "An entry in this table is created by an LSR for

        every VRF capable of supporting MPLS L3VPN.  Each

        entry in this table is used to indicate security-related

        information for each VRF entry."

   AUGMENTS      { mplsL3VpnVrfEntry }

      ::= { mplsL3VpnVrfSecTable 1 }

MplsL3VpnVrfSecEntry ::= SEQUENCE {

       mplsL3VpnVrfSecIllegalLblVltns     Counter32,

       mplsL3VpnVrfSecDiscontinuityTime   TimeStamp

}

mplsL3VpnVrfSecIllegalLblVltns OBJECT-TYPE

   SYNTAX        Counter32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "Indicates the number of illegally received

        labels on this VPN/VRF.

        Discontinuities in the value of this counter can occur

        at re-initialization of the management system, and at

        other times as indicated by the value of

        mplsL3VpnVrfSecDiscontinuityTime."

   ::= { mplsL3VpnVrfSecEntry 1 }

mplsL3VpnVrfSecDiscontinuityTime  OBJECT-TYPE

   SYNTAX              TimeStamp

   MAX-ACCESS          read-only

   STATUS              current

   DESCRIPTION

       "The value of sysUpTime on the most recent occasion at

        which any one or more of this entry's counters suffered

        a discontinuity.  If no such discontinuities have

        occurred since the last re-initialization of the local

        management subsystem, then this object contains a zero

        value."

   ::= { mplsL3VpnVrfSecEntry 2 }

-- VRF Performance Table

mplsL3VpnVrfPerfTable  OBJECT-TYPE

   SYNTAX        SEQUENCE OF MplsL3VpnVrfPerfEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "This table specifies per MPLS L3VPN VRF Table performance

        information."

   ::= { mplsL3VpnPerf 1 }

mplsL3VpnVrfPerfEntry OBJECT-TYPE

   SYNTAX        MplsL3VpnVrfPerfEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "An entry in this table is created by an LSR for

        every VRF capable of supporting MPLS L3VPN."

   AUGMENTS      { mplsL3VpnVrfEntry }

      ::= { mplsL3VpnVrfPerfTable 1 }

MplsL3VpnVrfPerfEntry ::= SEQUENCE {

   mplsL3VpnVrfPerfRoutesAdded       Counter32,

   mplsL3VpnVrfPerfRoutesDeleted     Counter32,

   mplsL3VpnVrfPerfCurrNumRoutes     Gauge32,

   mplsL3VpnVrfPerfRoutesDropped     Counter32,

   mplsL3VpnVrfPerfDiscTime          TimeStamp

}

mplsL3VpnVrfPerfRoutesAdded OBJECT-TYPE

   SYNTAX        Counter32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "Indicates the number of routes added to this VPN/VRF

        since the last discontinuity.  Discontinuities in

        the value of this counter can occur

        at re-initialization of the management system, and at

        other times as indicated by the value of

        mplsL3VpnVrfPerfDiscTime."

   ::= { mplsL3VpnVrfPerfEntry 1 }

mplsL3VpnVrfPerfRoutesDeleted OBJECT-TYPE

   SYNTAX        Counter32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "Indicates the number of routes removed from this VPN/VRF.

        Discontinuities in the value of this counter can occur

        at re-initialization of the management system, and at

        other times as indicated by the value of

        mplsL3VpnVrfPerfDiscTime."

   ::= { mplsL3VpnVrfPerfEntry 2 }

mplsL3VpnVrfPerfCurrNumRoutes     OBJECT-TYPE

   SYNTAX        Gauge32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "Indicates the number of routes currently used by this

        VRF."

   ::= { mplsL3VpnVrfPerfEntry 3 }

mplsL3VpnVrfPerfRoutesDropped OBJECT-TYPE

   SYNTAX        Counter32

   MAX-ACCESS    read-only

   STATUS        current

   DESCRIPTION

       "This counter should be incremented when the number of routes

        contained by the specified VRF exceeds or attempts to exceed

        the maximum allowed value as indicated by

        mplsL3VpnVrfMaxRouteThreshold.

        Discontinuities in the value of this counter can occur

        at re-initialization of the management system, and at

        other times as indicated by the value of

        mplsL3VpnVrfPerfDiscTime."

  ::= { mplsL3VpnVrfPerfEntry 4 }

mplsL3VpnVrfPerfDiscTime  OBJECT-TYPE

   SYNTAX              TimeStamp

   MAX-ACCESS          read-only

   STATUS              current

   DESCRIPTION

       "The value of sysUpTime on the most recent occasion at

        which any one or more of this entry's counters suffered

        a discontinuity.  If no such discontinuities have

        occurred since the last re-initialization of the local

        management subsystem, then this object contains a zero

        value."

  ::= { mplsL3VpnVrfPerfEntry 5 }

-- VRF Routing Table

mplsL3VpnVrfRteTable  OBJECT-TYPE

   SYNTAX        SEQUENCE OF MplsL3VpnVrfRteEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "This table specifies per-interface MPLS L3VPN VRF Table

        routing information.  Entries in this table define VRF routing

        entries associated with the specified MPLS/VPN interfaces.  Note

        that this table contains both BGP and Interior Gateway Protocol

        IGP routes, as both may appear in the same VRF."

    REFERENCE

       "[RFC2096]"

   ::= { mplsL3VpnRoute 1 }

mplsL3VpnVrfRteEntry OBJECT-TYPE

   SYNTAX        MplsL3VpnVrfRteEntry

   MAX-ACCESS    not-accessible

   STATUS        current

   DESCRIPTION

       "An entry in this table is created by an LSR for every route

        present configured (either dynamically or statically) within

        the context of a specific VRF capable of supporting MPLS/BGP

        VPN.  The indexing provides an ordering of VRFs per-VPN

        interface.

        Implementers need to be aware that there are quite a few

        index objects that together can exceed the size allowed

        for an Object Identifier (OID).  So implementers must make

        sure that OIDs of column instances in this table will have

        no more than 128 sub-identifiers, otherwise they cannot be

        accessed using SNMPv1, SNMPv2c, or SNMPv3."

      INDEX  { mplsL3VpnVrfName,

               mplsL3VpnVrfRteInetCidrDestType,

               mplsL3VpnVrfRteInetCidrDest,

               mplsL3VpnVrfRteInetCidrPfxLen,

               mplsL3VpnVrfRteInetCidrPolicy,

               mplsL3VpnVrfRteInetCidrNHopType,

               mplsL3VpnVrfRteInetCidrNextHop

      }

      ::= { mplsL3VpnVrfRteTable 1 }

MplsL3VpnVrfRteEntry ::= SEQUENCE {

         mplsL3VpnVrfRteInetCidrDestType     InetAddressType,

         mplsL3VpnVrfRteInetCidrDest         InetAddress,