|
Packit |
022b05 |
PKTC-IETF-MTA-MIB DEFINITIONS ::= BEGIN
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
IMPORTS
|
|
Packit |
022b05 |
MODULE-IDENTITY,
|
|
Packit |
022b05 |
OBJECT-TYPE,
|
|
Packit |
022b05 |
OBJECT-IDENTITY,
|
|
Packit |
022b05 |
Unsigned32,
|
|
Packit |
022b05 |
Counter32,
|
|
Packit |
022b05 |
NOTIFICATION-TYPE,
|
|
Packit |
022b05 |
mib-2
|
|
Packit |
022b05 |
FROM SNMPv2-SMI -- [RFC2578]
|
|
Packit |
022b05 |
TEXTUAL-CONVENTION,
|
|
Packit |
022b05 |
RowStatus,
|
|
Packit |
022b05 |
TruthValue
|
|
Packit |
022b05 |
FROM SNMPv2-TC -- [RFC2579]
|
|
Packit |
022b05 |
OBJECT-GROUP,
|
|
Packit |
022b05 |
MODULE-COMPLIANCE,
|
|
Packit |
022b05 |
NOTIFICATION-GROUP
|
|
Packit |
022b05 |
FROM SNMPv2-CONF -- [RFC2580]
|
|
Packit |
022b05 |
InetAddressType,
|
|
Packit |
022b05 |
InetAddress
|
|
Packit |
022b05 |
FROM INET-ADDRESS-MIB -- [RFC4001]
|
|
Packit |
022b05 |
sysDescr
|
|
Packit |
022b05 |
FROM SNMPv2-MIB -- [RFC3418]
|
|
Packit |
022b05 |
SnmpAdminString
|
|
Packit |
022b05 |
FROM SNMP-FRAMEWORK-MIB -- [RFC3411]
|
|
Packit |
022b05 |
docsDevSoftwareGroupV2
|
|
Packit |
022b05 |
FROM DOCS-CABLE-DEVICE-MIB -- [RFC4639]
|
|
Packit |
022b05 |
DocsX509ASN1DEREncodedCertificate,
|
|
Packit |
022b05 |
docsBpi2CodeDownloadGroup
|
|
Packit |
022b05 |
FROM DOCS-IETF-BPI2-MIB -- [RFC4131]
|
|
Packit |
022b05 |
LongUtf8String
|
|
Packit |
022b05 |
FROM SYSAPPL-MIB -- [RFC2287]
|
|
Packit |
022b05 |
ifPhysAddress
|
|
Packit |
022b05 |
FROM IF-MIB; -- [RFC2863]
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcIetfMtaMib MODULE-IDENTITY
|
|
Packit |
022b05 |
LAST-UPDATED "200609180000Z" -- September 18, 2006
|
|
Packit |
022b05 |
ORGANIZATION "IETF IP over Cable Data Network Working Group"
|
|
Packit |
022b05 |
CONTACT-INFO
|
|
Packit |
022b05 |
"Eugene Nechamkin
|
|
Packit |
022b05 |
Broadcom Corporation,
|
|
Packit |
022b05 |
200-13711 International Place,
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Richmond, BC, V6V 2Z8
|
|
Packit |
022b05 |
CANADA
|
|
Packit |
022b05 |
Phone: +1 604 233 8500
|
|
Packit |
022b05 |
Email: enechamkin@broadcom.com
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Jean-Francois Mule
|
|
Packit |
022b05 |
Cable Television Laboratories, Inc.
|
|
Packit |
022b05 |
858 Coal Creek Circle
|
|
Packit |
022b05 |
Louisville, CO 80027-9750
|
|
Packit |
022b05 |
U.S.A.
|
|
Packit |
022b05 |
Phone: +1 303 661 9100
|
|
Packit |
022b05 |
Email: jf.mule@cablelabs.com
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
IETF IPCDN Working Group
|
|
Packit |
022b05 |
General Discussion: ipcdn@ietf.org
|
|
Packit |
022b05 |
Subscribe: http://www.ietf.org/mailman/listinfo/ipcdn
|
|
Packit |
022b05 |
Archive: ftp://ftp.ietf.org/ietf-mail-archive/ipcdn
|
|
Packit |
022b05 |
Co-Chair: Jean-Francois Mule, jf.mule@cablelabs.com
|
|
Packit |
022b05 |
Co-Chair: Richard Woundy, Richard_Woundy@cable.comcast.com"
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"This MIB module defines the basic management object
|
|
Packit |
022b05 |
for the Multimedia Terminal Adapter devices compliant
|
|
Packit |
022b05 |
with PacketCable and IPCablecom requirements.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Copyright (C) The IETF Trust (2006). This version of
|
|
Packit |
022b05 |
this MIB module is part of RFC 4682; see the RFC itself for
|
|
Packit |
022b05 |
full legal notices."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
REVISION "200609180000Z" -- September 18, 2006
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"Initial version, published as RFC 4682."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= { mib-2 140 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
-- Textual Conventions
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
PktcMtaDevProvEncryptAlg ::= TEXTUAL-CONVENTION
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This textual convention defines various types of the
|
|
Packit |
022b05 |
encryption algorithms used for the encryption of the MTA
|
|
Packit |
022b05 |
configuration file. The description of the encryption
|
|
Packit |
022b05 |
algorithm for each enumerated value is as follows:
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
'none(0)' no encryption is used,
|
|
Packit |
022b05 |
'des64CbcMode(1)' DES 64-bit key in CBC mode,
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
't3Des192CbcMode(2)' 3DES 192-bit key in CBC mode,
|
|
Packit |
022b05 |
'aes128CbcMode(3)' AES 128-bit key in CBC mode,
|
|
Packit |
022b05 |
'aes256CbcMode(4)' AES 256-bit key in CBC mode."
|
|
Packit |
022b05 |
SYNTAX INTEGER {
|
|
Packit |
022b05 |
none (0),
|
|
Packit |
022b05 |
des64CbcMode (1),
|
|
Packit |
022b05 |
t3Des192CbcMode (2),
|
|
Packit |
022b05 |
aes128CbcMode (3),
|
|
Packit |
022b05 |
aes256CbcMode (4)
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
-- The MTA MIB module only supports a single Provisioning Server.
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaNotification OBJECT IDENTIFIER ::= { pktcIetfMtaMib 0 }
|
|
Packit |
022b05 |
pktcMtaMibObjects OBJECT IDENTIFIER ::= { pktcIetfMtaMib 1 }
|
|
Packit |
022b05 |
pktcMtaDevBase OBJECT IDENTIFIER ::= { pktcMtaMibObjects 1 }
|
|
Packit |
022b05 |
pktcMtaDevServer OBJECT IDENTIFIER ::= { pktcMtaMibObjects 2 }
|
|
Packit |
022b05 |
pktcMtaDevSecurity OBJECT IDENTIFIER ::= { pktcMtaMibObjects 3 }
|
|
Packit |
022b05 |
pktcMtaDevErrors OBJECT IDENTIFIER ::= { pktcMtaMibObjects 4 }
|
|
Packit |
022b05 |
pktcMtaConformance OBJECT IDENTIFIER ::= { pktcIetfMtaMib 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- The following pktcMtaDevBase group describes the base MTA objects
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevResetNow OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX TruthValue
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object controls the MTA software reset.
|
|
Packit |
022b05 |
Reading this object always returns 'false'. Setting this
|
|
Packit |
022b05 |
object to 'true' causes the device to reset immediately
|
|
Packit |
022b05 |
and the following actions to occur:
|
|
Packit |
022b05 |
1. All connections (if present) are flushed locally.
|
|
Packit |
022b05 |
2. All current actions such as ringing immediately
|
|
Packit |
022b05 |
terminate.
|
|
Packit |
022b05 |
3. Requests for signaling notifications, such as
|
|
Packit |
022b05 |
notification based on digit map recognition, are
|
|
Packit |
022b05 |
flushed.
|
|
Packit |
022b05 |
4. All endpoints are disabled.
|
|
Packit |
022b05 |
5. The provisioning flow is started at step MTA-1.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevResetNow, the agent MUST NOT retain the supplied
|
|
Packit |
022b05 |
value across MTA re-initializations or reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevBase 1 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevSerialNumber OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object specifies the manufacturer's serial
|
|
Packit |
022b05 |
number of this MTA. The value of this object MUST be
|
|
Packit |
022b05 |
identical to the value specified in DHCP option 43,
|
|
Packit |
022b05 |
sub-option 4. The list of sub-options for DHCP option
|
|
Packit |
022b05 |
43 are defined in the PacketCable MTA Device
|
|
Packit |
022b05 |
Provisioning Specification."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevBase 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevSwCurrentVers OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object identifies the software version currently
|
|
Packit |
022b05 |
operating in the MTA.
|
|
Packit |
022b05 |
The MTA MUST return a string descriptive of the current
|
|
Packit |
022b05 |
software load. This object should use the syntax
|
|
Packit |
022b05 |
defined by the individual vendor to identify the software
|
|
Packit |
022b05 |
version. The data presented in this object MUST be
|
|
Packit |
022b05 |
identical to the software version information contained
|
|
Packit |
022b05 |
in the 'sysDescr' MIB object of the MTA. The value of
|
|
Packit |
022b05 |
this object MUST be identical to the value specified in
|
|
Packit |
022b05 |
DHCP option 43, sub-option 6. The list of sub-options for
|
|
Packit |
022b05 |
DHCP option 43 are defined in the PacketCable MTA Device
|
|
Packit |
022b05 |
Provisioning Specification."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= { pktcMtaDevBase 3 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevFQDN OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the Fully Qualified Domain Name for
|
|
Packit |
022b05 |
this MTA. The MTA FQDN is used to uniquely identify the
|
|
Packit |
022b05 |
device to the PacketCable back office elements."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= { pktcMtaDevBase 4 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevEndPntCount OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (1..255)
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the number of physical endpoints for
|
|
Packit |
022b05 |
this MTA."
|
|
Packit |
022b05 |
::= { pktcMtaDevBase 5 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevEnabled OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX TruthValue
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the MTA Admin Status of this device.
|
|
Packit |
022b05 |
If this object is set to 'true', the MTA is
|
|
Packit |
022b05 |
administratively enabled, and the MTA MUST be able to
|
|
Packit |
022b05 |
interact with the PacketCable entities, such as CMS,
|
|
Packit |
022b05 |
Provisioning Server, KDC, and other MTAs and MGs on all
|
|
Packit |
022b05 |
PacketCable interfaces.
|
|
Packit |
022b05 |
If this object is set to 'false', the MTA is
|
|
Packit |
022b05 |
administratively disabled, and the MTA MUST perform the
|
|
Packit |
022b05 |
following actions for all endpoints:
|
|
Packit |
022b05 |
- Shut down all media sessions, if present.
|
|
Packit |
022b05 |
- Shut down Network Control Signaling (NCS)
|
|
Packit |
022b05 |
signaling by following the Restart in
|
|
Packit |
022b05 |
Progress procedures in the PacketCable NCS
|
|
Packit |
022b05 |
specification.
|
|
Packit |
022b05 |
The MTA must execute all actions required to
|
|
Packit |
022b05 |
enable or disable the telephony services for all
|
|
Packit |
022b05 |
endpoints immediately upon receipt of an SNMP SET
|
|
Packit |
022b05 |
operation.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Additionally, the MTA MUST maintain the SNMP Interface
|
|
Packit |
022b05 |
for management and also the SNMP Key management interface.
|
|
Packit |
022b05 |
Also, the MTA MUST NOT continue Kerberized key management
|
|
Packit |
022b05 |
with CMSes until this object is set to 'true'.
|
|
Packit |
022b05 |
Note: MTAs MUST renew the CMS Kerberos tickets according
|
|
Packit |
022b05 |
to the PacketCable Security or IPCablecom Specification.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevEnabled, the agent MUST NOT retain the supplied
|
|
Packit |
022b05 |
value across MTA re-initializations or reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
PacketCable Security Specification;
|
|
Packit |
022b05 |
PacketCable Network-Based Call Signaling Protocol
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevBase 6 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevTypeIdentifier OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object provides the MTA device type identifier. The
|
|
Packit |
022b05 |
value of this object must be a copy of the DHCP option 60
|
|
Packit |
022b05 |
value exchanged between the MTA and the DHCP server. The
|
|
Packit |
022b05 |
DHCP option 60 value contains an ASCII-encoded string
|
|
Packit |
022b05 |
identifying capabilities of the MTA as defined in the
|
|
Packit |
022b05 |
PacketCable MTA Device Provisioning Specification."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" RFC 2132, DHCP Options and BOOTP Vendor Extensions;
|
|
Packit |
022b05 |
PacketCable MTA Device Provisioning Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevBase 7 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvisioningState OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX INTEGER {
|
|
Packit |
022b05 |
pass (1),
|
|
Packit |
022b05 |
inProgress (2),
|
|
Packit |
022b05 |
failConfigFileError (3),
|
|
Packit |
022b05 |
passWithWarnings (4),
|
|
Packit |
022b05 |
passWithIncompleteParsing (5),
|
|
Packit |
022b05 |
failureInternalError (6),
|
|
Packit |
022b05 |
failureOtherReason (7)
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object indicates the completion state of the MTA
|
|
Packit |
022b05 |
device provisioning process.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pass:
|
|
Packit |
022b05 |
If the configuration file could be parsed successfully
|
|
Packit |
022b05 |
and the MTA is able to reflect the same in its
|
|
Packit |
022b05 |
MIB, the MTA MUST return the value 'pass'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
inProgress:
|
|
Packit |
022b05 |
If the MTA is in the process of being provisioned,
|
|
Packit |
022b05 |
the MTA MUST return the value 'inProgress'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
failConfigFileError:
|
|
Packit |
022b05 |
If the configuration file was in error due to incorrect
|
|
Packit |
022b05 |
values in the mandatory parameters, the MTA MUST reject
|
|
Packit |
022b05 |
the configuration file, and the MTA MUST return the value
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
'failConfigFileError'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
passWithWarnings:
|
|
Packit |
022b05 |
If the configuration file had proper values for all the
|
|
Packit |
022b05 |
mandatory parameters but has errors in any of the optional
|
|
Packit |
022b05 |
parameters (this includes any vendor-specific Object
|
|
Packit |
022b05 |
Identifiers (OIDs) that are incorrect or not known
|
|
Packit |
022b05 |
to the MTA), the MTA MUST return the value
|
|
Packit |
022b05 |
'passWithWarnings'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
passWithIncompleteParsing:
|
|
Packit |
022b05 |
If the configuration file is valid but the MTA cannot
|
|
Packit |
022b05 |
reflect the same in its configuration (for example, too
|
|
Packit |
022b05 |
many entries caused memory exhaustion), it must accept
|
|
Packit |
022b05 |
the CMS configuration entries related, and the MTA MUST
|
|
Packit |
022b05 |
return the value 'passWithIncompleteParsing'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
failureInternalError:
|
|
Packit |
022b05 |
If the configuration file cannot be parsed due to an
|
|
Packit |
022b05 |
Internal error, the MTA MUST return the value
|
|
Packit |
022b05 |
'failureInternalError'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
failureOtherReason:
|
|
Packit |
022b05 |
If the MTA cannot accept the configuration file for any
|
|
Packit |
022b05 |
other reason than the ones stated above, the MTA MUST
|
|
Packit |
022b05 |
return the value 'failureOtherReason'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
When a final SNMP INFORM is sent as part of Step 25 of the
|
|
Packit |
022b05 |
MTA Provisioning process, this parameter is also included
|
|
Packit |
022b05 |
in the final INFORM message."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevBase 8 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevHttpAccess OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX TruthValue
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object indicates whether the HTTP protocol is
|
|
Packit |
022b05 |
supported for the MTA configuration file transfer."
|
|
Packit |
022b05 |
::= { pktcMtaDevBase 9 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvisioningTimer OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (0..30)
|
|
Packit |
022b05 |
UNITS "minutes"
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the time interval for the provisioning
|
|
Packit |
022b05 |
flow to complete. The MTA MUST finish all provisioning
|
|
Packit |
022b05 |
operations starting from the moment when an MTA receives
|
|
Packit |
022b05 |
its DHCP ACK and ending at the moment when the MTA
|
|
Packit |
022b05 |
downloads its configuration file (e.g., MTA5 to MTA23)
|
|
Packit |
022b05 |
within the period of time set by this object.
|
|
Packit |
022b05 |
Failure to comply with this condition constitutes
|
|
Packit |
022b05 |
a provisioning flow failure. If the object is set to 0,
|
|
Packit |
022b05 |
the MTA MUST ignore the provisioning timer condition.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevProvisioningTimer, the agent MUST NOT retain the
|
|
Packit |
022b05 |
supplied value across MTA re-initializations or reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification."
|
|
Packit |
022b05 |
DEFVAL {10}
|
|
Packit |
022b05 |
::= {pktcMtaDevBase 10}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvisioningCounter OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Counter32
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"This object counts the number of times the
|
|
Packit |
022b05 |
provisioning cycle has looped through step MTA-1."
|
|
Packit |
022b05 |
::= {pktcMtaDevBase 11}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevErrorOidsTable OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SEQUENCE OF PktcMtaDevErrorOidsEntry
|
|
Packit |
022b05 |
MAX-ACCESS not-accessible
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This table contains the list of configuration errors or
|
|
Packit |
022b05 |
warnings the MTA encountered when parsing the
|
|
Packit |
022b05 |
configuration file it received from the Provisioning
|
|
Packit |
022b05 |
Server.
|
|
Packit |
022b05 |
For each error, an entry is created in this table,
|
|
Packit |
022b05 |
containing the configuration parameters the MTA rejected
|
|
Packit |
022b05 |
and the associated reason (e.g., wrong or unknown OID,
|
|
Packit |
022b05 |
inappropriate object values). If the MTA
|
|
Packit |
022b05 |
did not report a provisioning state of 'pass(1)' in
|
|
Packit |
022b05 |
the pktcMtaDevProvisioningState object, this table MUST be
|
|
Packit |
022b05 |
populated for each error or warning instance. Even if
|
|
Packit |
022b05 |
different parameters share the same error type (e.g., all
|
|
Packit |
022b05 |
realm name configuration parameters are invalid), all
|
|
Packit |
022b05 |
observed errors or warnings must be reported as
|
|
Packit |
022b05 |
different instances. Errors are placed into the table in
|
|
Packit |
022b05 |
no particular order. The table MUST be cleared each time
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
the MTA reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification."
|
|
Packit |
022b05 |
::= {pktcMtaDevBase 12 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevErrorOidsEntry OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX PktcMtaDevErrorOidsEntry
|
|
Packit |
022b05 |
MAX-ACCESS not-accessible
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This entry contains the necessary information the MTA MUST
|
|
Packit |
022b05 |
attempt to provide in case of configuration file errors or
|
|
Packit |
022b05 |
warnings."
|
|
Packit |
022b05 |
INDEX { pktcMtaDevErrorOidIndex }
|
|
Packit |
022b05 |
::= {pktcMtaDevErrorOidsTable 1}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
PktcMtaDevErrorOidsEntry ::= SEQUENCE {
|
|
Packit |
022b05 |
pktcMtaDevErrorOidIndex Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevErrorOid SnmpAdminString,
|
|
Packit |
022b05 |
pktcMtaDevErrorValue SnmpAdminString,
|
|
Packit |
022b05 |
pktcMtaDevErrorReason SnmpAdminString
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevErrorOidIndex OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (1..1024)
|
|
Packit |
022b05 |
MAX-ACCESS not-accessible
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object is the index of the MTA configuration error
|
|
Packit |
022b05 |
table. It is an integer value that starts at value '1'
|
|
Packit |
022b05 |
and is incremented for each encountered configuration
|
|
Packit |
022b05 |
file error or warning.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
The maximum number of errors or warnings that can be
|
|
Packit |
022b05 |
recorded in the pktcMtaDevErrorOidsTable is set to 1024 as
|
|
Packit |
022b05 |
a configuration file is usually validated by operators
|
|
Packit |
022b05 |
before deployment. Given the possible number of
|
|
Packit |
022b05 |
configuration parameter assignments in the MTA
|
|
Packit |
022b05 |
configuration file, 1024 is perceived as a sufficient
|
|
Packit |
022b05 |
limit even with future extensions.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
If the number of the errors in the configuration file
|
|
Packit |
022b05 |
exceeds 1024, all errors beyond the 1024th one MUST
|
|
Packit |
022b05 |
be ignored and not be reflected in the
|
|
Packit |
022b05 |
pktcMtaDevErrorOidsTable."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= {pktcMtaDevErrorOidsEntry 1}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevErrorOid OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains a human readable representation
|
|
Packit |
022b05 |
(character string) of the OID corresponding to the
|
|
Packit |
022b05 |
configuration file parameter that caused the particular
|
|
Packit |
022b05 |
error.
|
|
Packit |
022b05 |
For example, if the value of the pktcMtaDevEnabled object
|
|
Packit |
022b05 |
in the configuration file caused an error, then this
|
|
Packit |
022b05 |
object instance will contain the human-readable string of
|
|
Packit |
022b05 |
'1.3.6.1.2.1.140.1.1.6.0'.
|
|
Packit |
022b05 |
If the MTA generated an error because it was not able
|
|
Packit |
022b05 |
to recognize a particular OID, then this object
|
|
Packit |
022b05 |
instance would contain an empty value (zero-length
|
|
Packit |
022b05 |
string).
|
|
Packit |
022b05 |
For example, if the value of an OID in the configuration
|
|
Packit |
022b05 |
file was interpreted by the MTA as being 1.2.3.4.5, and if
|
|
Packit |
022b05 |
the MTA was not able to recognize this OID as a valid one,
|
|
Packit |
022b05 |
this object instance will contain a zero-length string.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
If the number of errors in the configuration file exceeds
|
|
Packit |
022b05 |
1024, then for all subsequent errors, the
|
|
Packit |
022b05 |
pktcMtaDevErrorOid of the table's 1024th entry MUST
|
|
Packit |
022b05 |
contain a human-readable representation of the
|
|
Packit |
022b05 |
pktcMtaDevErrorsTooManyErrors object; i.e., the string
|
|
Packit |
022b05 |
'1.3.6.1.2.1.140.1.1.4.1.0'.
|
|
Packit |
022b05 |
Note that the syntax of this object is SnmpAdminString
|
|
Packit |
022b05 |
instead of OBJECT IDENTIFIER because the object value may
|
|
Packit |
022b05 |
not be a valid OID due to human or configuration tool
|
|
Packit |
022b05 |
encoding errors."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= {pktcMtaDevErrorOidsEntry 2}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevErrorValue OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the value of the OID corresponding to
|
|
Packit |
022b05 |
the configuration file parameter that caused the error.
|
|
Packit |
022b05 |
If the MTA cannot recognize the OID of the
|
|
Packit |
022b05 |
configuration parameter causing the error, then this
|
|
Packit |
022b05 |
object instance contains the OID itself as interpreted
|
|
Packit |
022b05 |
by the MTA in human-readable representation.
|
|
Packit |
022b05 |
If the MTA can recognize the OID but generate an error due
|
|
Packit |
022b05 |
to a wrong value of the parameter, then the object
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
instance contains the erroneous value of the parameter as
|
|
Packit |
022b05 |
read from the configuration file.
|
|
Packit |
022b05 |
In both cases, the value of this object must be
|
|
Packit |
022b05 |
represented in human-readable form as a character string.
|
|
Packit |
022b05 |
For example, if the value of the pktcMtaDevEnabled object
|
|
Packit |
022b05 |
in the configuration file was 3 (invalid value), then the
|
|
Packit |
022b05 |
pktcMtaDevErrorValue object instance will contain the
|
|
Packit |
022b05 |
human-readable (string) representation of value '3'.
|
|
Packit |
022b05 |
Similarly, if the OID in the configuration file has been
|
|
Packit |
022b05 |
interpreted by the MTA as being 1.2.3.4.5 and the MTA
|
|
Packit |
022b05 |
cannot recognize this OID as a valid one, then this
|
|
Packit |
022b05 |
pktcMtaDevErrorValue object instance will contain human
|
|
Packit |
022b05 |
readable (string) representation of value '1.2.3.4.5'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
If the number of errors in the configuration file exceeds
|
|
Packit |
022b05 |
1024, then for all subsequent errors, the
|
|
Packit |
022b05 |
pktcMtaDevErrorValue of the table's 1024th entry MUST
|
|
Packit |
022b05 |
contain a human-readable representation of the
|
|
Packit |
022b05 |
pktcMtaDevErrorsTooManyErrors object; i.e., the string
|
|
Packit |
022b05 |
'1.3.6.1.2.1.140.1.1.4.1.0'."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= {pktcMtaDevErrorOidsEntry 3}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevErrorReason OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object indicates the reason for the error or warning,
|
|
Packit |
022b05 |
as per the MTA's interpretation, in human-readable form.
|
|
Packit |
022b05 |
For example:
|
|
Packit |
022b05 |
'VALUE NOT IN RANGE', 'VALUE DOES NOT MATCH TYPE',
|
|
Packit |
022b05 |
'UNSUPPORTED VALUE', 'LAST 4 BITS MUST BE SET TO ZERO',
|
|
Packit |
022b05 |
'OUT OF MEMORY - CANNOT STORE'.
|
|
Packit |
022b05 |
This object may also contain vendor specific errors for
|
|
Packit |
022b05 |
private vendor OIDs and any proprietary error codes or
|
|
Packit |
022b05 |
messages that can help diagnose configuration errors.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
If the number of errors in the configuration file exceeds
|
|
Packit |
022b05 |
1024, then for all subsequent errors, the
|
|
Packit |
022b05 |
pktcMtaDevErrorReason of the table's 1024th entry MUST
|
|
Packit |
022b05 |
contain a human-readable string indicating the reason
|
|
Packit |
022b05 |
for an error; for example,
|
|
Packit |
022b05 |
'Too many errors in the configuration file'."
|
|
Packit |
022b05 |
::= {pktcMtaDevErrorOidsEntry 4}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- The following group describes server access and parameters used
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
-- for the initial MTA provisioning and bootstrapping phases.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevDhcpServerAddressType OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX InetAddressType
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the Internet address type for the
|
|
Packit |
022b05 |
PacketCable DHCP servers specified in MTA MIB."
|
|
Packit |
022b05 |
DEFVAL { ipv4 }
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 1}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevServerDhcp1 OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX InetAddress
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the Internet Address of the primary
|
|
Packit |
022b05 |
DHCP server the MTA uses during provisioning.
|
|
Packit |
022b05 |
The type of this address is determined by the value of
|
|
Packit |
022b05 |
the pktcMtaDevDhcpServerAddressType object.
|
|
Packit |
022b05 |
When the latter has the value 'ipv4(1)', this object
|
|
Packit |
022b05 |
contains the IP address of the primary DHCP
|
|
Packit |
022b05 |
server. It is provided by the CM to the MTA via the DHCP
|
|
Packit |
022b05 |
option code 122, sub-option 1, as defined in RFC 3495.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
The behavior of this object when the value of
|
|
Packit |
022b05 |
pktcMtaDevDhcpServerAddressType is other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified, but it may be specified
|
|
Packit |
022b05 |
in future versions of this MIB module.
|
|
Packit |
022b05 |
If this object is of value
|
|
Packit |
022b05 |
0.0.0.0, the MTA MUST stop all provisioning
|
|
Packit |
022b05 |
attempts, as well as all other activities.
|
|
Packit |
022b05 |
If this object is of value 255.255.255.255, it means
|
|
Packit |
022b05 |
that there was no preference given for the primary
|
|
Packit |
022b05 |
DHCP server, and, the MTA must follow the logic of
|
|
Packit |
022b05 |
RFC2131, and the value of DHCP option 122,
|
|
Packit |
022b05 |
sub-option 2, must be ignored."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
RFC 2131, Dynamic Host Configuration Protocol;
|
|
Packit |
022b05 |
RFC 3495, DHCP Option for CableLabs Client Configuration."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevServerDhcp2 OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX InetAddress
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the Internet Address of the secondary
|
|
Packit |
022b05 |
DHCP server the MTA uses during provisioning.
|
|
Packit |
022b05 |
The type of this address is determined by the value of
|
|
Packit |
022b05 |
the pktcMtaDevDhcpServerAddressType object.
|
|
Packit |
022b05 |
When the latter has the value 'ipv4(1)', this object
|
|
Packit |
022b05 |
contains the IP address of the secondary DHCP
|
|
Packit |
022b05 |
server. It is provided by the CM to the MTA via the DHCP
|
|
Packit |
022b05 |
option code 122, sub-option 2, as defined in RFC 3495.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
The behavior of this object when the value of
|
|
Packit |
022b05 |
pktcMtaDevDhcpServerAddressType is other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified, but it may be specified
|
|
Packit |
022b05 |
in future versions of this MIB module.
|
|
Packit |
022b05 |
If there was no secondary DHCP server provided in DHCP
|
|
Packit |
022b05 |
Option 122, sub-option 2, this object must return the value
|
|
Packit |
022b05 |
0.0.0.0."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
RFC 3495, DHCP Option for CableLabs Client Configuration."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 3 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevDnsServerAddressType OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX InetAddressType
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the Internet address type for the
|
|
Packit |
022b05 |
PacketCable DNS servers specified in MTA MIB."
|
|
Packit |
022b05 |
DEFVAL { ipv4 }
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 4}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevServerDns1 OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX InetAddress
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the IP Address of the primary
|
|
Packit |
022b05 |
DNS server to be used by the MTA. The type of this address
|
|
Packit |
022b05 |
is determined by the value of the
|
|
Packit |
022b05 |
pktcMtaDevDnsServerAddressType object.
|
|
Packit |
022b05 |
When the latter has the value 'ipv4(1)', this object
|
|
Packit |
022b05 |
contains the IP address of the primary DNS server.
|
|
Packit |
022b05 |
As defined in RFC 2132, PacketCable-compliant MTAs receive
|
|
Packit |
022b05 |
the IP addresses of the DNS Servers in DHCP option 6.
|
|
Packit |
022b05 |
The behavior of this object when the value of
|
|
Packit |
022b05 |
pktcMtaDevDnsServerAddressType is other than 'ipv4(1)'
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
is not presently specified, but it may be specified
|
|
Packit |
022b05 |
in future versions of this MIB module.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevServerDns1, the agent MUST NOT retain the
|
|
Packit |
022b05 |
supplied value across MTA re-initializations or reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
RFC 2132, DHCP Options and BOOTP Vendor Extensions."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 5 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevServerDns2 OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX InetAddress
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the IP Address of the secondary
|
|
Packit |
022b05 |
DNS server to be used by the MTA. The type of this address
|
|
Packit |
022b05 |
is determined by the value of the
|
|
Packit |
022b05 |
pktcMtaDevDnsServerAddressType object.
|
|
Packit |
022b05 |
When the latter has the value 'ipv4(1)', this object
|
|
Packit |
022b05 |
contains the IP address of the secondary DNS
|
|
Packit |
022b05 |
server. As defined in RFC 2132, PacketCable-compliant MTAs
|
|
Packit |
022b05 |
receive the IP addresses of the DNS Servers in DHCP
|
|
Packit |
022b05 |
option 6.
|
|
Packit |
022b05 |
The behavior of this object when the value of
|
|
Packit |
022b05 |
pktcMtaDevDnsServerAddressType is other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified, but it may be specified
|
|
Packit |
022b05 |
in future versions of this MIB module.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevServerDns2, the agent MUST NOT retain the
|
|
Packit |
022b05 |
supplied value across MTA re-initializations or reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
RFC 2132, DHCP Options and BOOTP Vendor Extensions."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 6 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevTimeServerAddressType OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX InetAddressType
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the Internet address type for the
|
|
Packit |
022b05 |
PacketCable Time servers specified in MTA MIB."
|
|
Packit |
022b05 |
DEFVAL { ipv4 }
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 7}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevTimeServer OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX InetAddress
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the Internet Address of the Time
|
|
Packit |
022b05 |
Server used by an S-MTA for Time Synchronization. The type
|
|
Packit |
022b05 |
of this address is determined by the value of the
|
|
Packit |
022b05 |
pktcMtaDevTimeServerAddressType object.
|
|
Packit |
022b05 |
When the latter has the value 'ipv4(1)', this object
|
|
Packit |
022b05 |
contains the IP address of the Time Server used for Time
|
|
Packit |
022b05 |
Synchronization.
|
|
Packit |
022b05 |
In the case of an S-MTA, this object must be
|
|
Packit |
022b05 |
populated with a value other than 0.0.0.0 as obtained
|
|
Packit |
022b05 |
from DHCP option 4. The protocol by which the time of day
|
|
Packit |
022b05 |
MUST be retrieved is defined in RFC 868.
|
|
Packit |
022b05 |
In the case of an E-MTA, this object must contain a
|
|
Packit |
022b05 |
value of 0.0.0.0 if the address type is 'ipv4(1)' since
|
|
Packit |
022b05 |
an E-MTA does not use the Time Protocol for time
|
|
Packit |
022b05 |
synchronization (an E-MTA uses the time retrieved by the
|
|
Packit |
022b05 |
DOCSIS cable modem).
|
|
Packit |
022b05 |
The behavior of this object when the value of
|
|
Packit |
022b05 |
pktcMtaDevTimeServerAddressType is other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified, but it may be specified in
|
|
Packit |
022b05 |
future versions of this MIB module.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevTimeServer, the agent MUST NOT retain the
|
|
Packit |
022b05 |
supplied value across MTA re-initializations or reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" RFC 868, Time Protocol;
|
|
Packit |
022b05 |
RFC 2131, Dynamic Host Configuration Protocol;
|
|
Packit |
022b05 |
RFC 2132, DHCP Options and BOOTP Vendor Extensions."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 8}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevConfigFile OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object specifies the MTA device configuration file
|
|
Packit |
022b05 |
information, including the access method, the server name,
|
|
Packit |
022b05 |
and the configuration file name. The value of this object
|
|
Packit |
022b05 |
is the Uniform Resource Locator (URL) of the configuration
|
|
Packit |
022b05 |
file for TFTP or HTTP download.
|
|
Packit |
022b05 |
If this object value is a TFTP URL, it must be formatted
|
|
Packit |
022b05 |
as defined in RFC 3617.
|
|
Packit |
022b05 |
If this object value is an HTTP URL, it must be formatted
|
|
Packit |
022b05 |
as defined in RFC 2616.
|
|
Packit |
022b05 |
If the MTA SNMP Enrollment mechanism is used, then the MTA
|
|
Packit |
022b05 |
must download the file provided by the Provisioning Server
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
during provisioning via an SNMP SET on this object.
|
|
Packit |
022b05 |
If the MTA SNMP Enrollment mechanism is not used, this
|
|
Packit |
022b05 |
object MUST contain the URL value corresponding to the
|
|
Packit |
022b05 |
'siaddr' and 'file' fields received in the DHCP ACK to
|
|
Packit |
022b05 |
locate the configuration file: the 'siaddr' and 'file'
|
|
Packit |
022b05 |
fields represent the host and file of the TFTP URL,
|
|
Packit |
022b05 |
respectively. In this case, the MTA MUST return an
|
|
Packit |
022b05 |
'inconsistentValue' error in response to SNMP SET
|
|
Packit |
022b05 |
operations.
|
|
Packit |
022b05 |
The MTA MUST return a zero-length string if the server
|
|
Packit |
022b05 |
address (host part of the URL) is unknown.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevConfigFile, the agent MUST NOT retain the
|
|
Packit |
022b05 |
supplied value across MTA re-initializations or reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
RFC 3617, URI Scheme for TFTP; RFC 2616, HTTP 1.1"
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 9 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevSnmpEntity OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the FQDN of the SNMP entity of the
|
|
Packit |
022b05 |
Provisioning Server. When the MTA SNMP Enrollment
|
|
Packit |
022b05 |
Mechanism is used, this object represents the server that
|
|
Packit |
022b05 |
the MTA communicates with, that it receives the
|
|
Packit |
022b05 |
configuration file URL from, and that it sends the
|
|
Packit |
022b05 |
enrollment notification to. The SNMP entity is also the
|
|
Packit |
022b05 |
destination entity for all the provisioning
|
|
Packit |
022b05 |
notifications. It may be used for post-provisioning
|
|
Packit |
022b05 |
SNMP operations. During the provisioning phase, this
|
|
Packit |
022b05 |
SNMP entity FQDN is supplied to the MTA via DHCP option
|
|
Packit |
022b05 |
122, sub-option 3, as defined in RFC 3495. The MTA must
|
|
Packit |
022b05 |
resolve the FQDN value before its very first network
|
|
Packit |
022b05 |
interaction with the SNMP entity during the provisioning
|
|
Packit |
022b05 |
phase."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
RFC 3495, DHCP Option for CableLabs Client Configuration."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 10 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvConfigHash OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX OCTET STRING (SIZE(20))
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the hash value of the contents of the
|
|
Packit |
022b05 |
configuration file.
|
|
Packit |
022b05 |
The authentication algorithm is Secure Hashing Algorithm
|
|
Packit |
022b05 |
1 (SHA-1), and the length is 160 bits. The hash
|
|
Packit |
022b05 |
calculation MUST follow the requirements defined in the
|
|
Packit |
022b05 |
PacketCable Security Specification. When the MTA SNMP
|
|
Packit |
022b05 |
Enrollment mechanism is used, this hash value is
|
|
Packit |
022b05 |
calculated and sent to the MTA prior to sending the
|
|
Packit |
022b05 |
config file. This object value is then provided by the
|
|
Packit |
022b05 |
Provisioning server via an SNMP SET operation.
|
|
Packit |
022b05 |
When the MTA SNMP Enrollment mechanism is not in use, the
|
|
Packit |
022b05 |
hash value is provided in the configuration file itself,
|
|
Packit |
022b05 |
and it is also calculated by the MTA. This object value
|
|
Packit |
022b05 |
MUST represent the hash value calculated by the MTA.
|
|
Packit |
022b05 |
When the MTA SNMP Enrollment mechanism is not in use, the
|
|
Packit |
022b05 |
MTA must reject all SNMP SET operations on this object and
|
|
Packit |
022b05 |
return an 'inconsistentValue' error.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevProvConfigHash, the agent MUST NOT retain the
|
|
Packit |
022b05 |
supplied value across MTA re-initializations or reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
PacketCable Security Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 11 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvConfigKey OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX OCTET STRING (SIZE(32))
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the key used to encrypt/decrypt
|
|
Packit |
022b05 |
the configuration file when secure SNMPv3 provisioning
|
|
Packit |
022b05 |
is used.
|
|
Packit |
022b05 |
The value of this object is provided along with the
|
|
Packit |
022b05 |
configuration file information (pktcMtaDevConfigFile)
|
|
Packit |
022b05 |
and hash (pktcMtaDevProvConfigHash) by the Provisioning
|
|
Packit |
022b05 |
Server via SNMP SET once the configuration file has been
|
|
Packit |
022b05 |
created, as defined by the PacketCable Security
|
|
Packit |
022b05 |
specification.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
The privacy algorithm is defined by the
|
|
Packit |
022b05 |
pktcMtaDevProvConfigEncryptAlg MIB object. The
|
|
Packit |
022b05 |
MTA requirements related to the privacy algorithm are
|
|
Packit |
022b05 |
defined in the PacketCable Security Specification.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
If this object is set at any other provisioning step than
|
|
Packit |
022b05 |
that allowed by the PacketCable MTA Device
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Provisioning Specification, the MTA SHOULD return
|
|
Packit |
022b05 |
an 'inconsistentValue' error.
|
|
Packit |
022b05 |
This object must not be used in non secure provisioning
|
|
Packit |
022b05 |
mode. In non-secure provisioning modes, the MTA SHOULD
|
|
Packit |
022b05 |
return an 'inconsistentValue' in response to SNMP SET
|
|
Packit |
022b05 |
operations, and the MTA SHOULD return a zero-length
|
|
Packit |
022b05 |
string in response to SNMP GET operations.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevProvConfigKey, the agent MUST NOT retain the
|
|
Packit |
022b05 |
supplied value across MTA re-initializations or reboots."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
PacketCable Security Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 12 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvConfigEncryptAlg OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX PktcMtaDevProvEncryptAlg
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the encryption algorithm used for
|
|
Packit |
022b05 |
privacy protection of the MTA Configuration File content."
|
|
Packit |
022b05 |
DEFVAL { des64CbcMode }
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 13 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvSolicitedKeyTimeout OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (0..180)
|
|
Packit |
022b05 |
UNITS "seconds"
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines a Kerberos Key Management timer on the
|
|
Packit |
022b05 |
MTA. It is the time period during which the MTA saves the
|
|
Packit |
022b05 |
nonce and Server Kerberos Principal Identifier to match an
|
|
Packit |
022b05 |
AP Request and its associated AP Reply response from the
|
|
Packit |
022b05 |
Provisioning Server.
|
|
Packit |
022b05 |
After the timeout has been exceeded, the client discards
|
|
Packit |
022b05 |
this (nonce, Server Kerberos Principal Identifier) pair,
|
|
Packit |
022b05 |
after which it will no longer accept a matching AP Reply.
|
|
Packit |
022b05 |
This timer only applies when the Provisioning Server
|
|
Packit |
022b05 |
initiated key management for SNMPv3 (with a
|
|
Packit |
022b05 |
Wake Up message).
|
|
Packit |
022b05 |
If this object is set to a zero value, the MTA MUST return
|
|
Packit |
022b05 |
an 'inconsistentValue' in response to SNMP SET operations.
|
|
Packit |
022b05 |
This object should not be used in non-secure provisioning
|
|
Packit |
022b05 |
modes. In non-secure provisioning modes, the MTA MUST
|
|
Packit |
022b05 |
return an 'inconsistentValue' in response to SNMP SET
|
|
Packit |
022b05 |
operations, and the MTA MUST return a zero value in
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
response to SNMP GET operations.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevProvSolicitedKeyTimeout, the agent MUST NOT
|
|
Packit |
022b05 |
retain the supplied value across MTA re-initializations
|
|
Packit |
022b05 |
or reboots."
|
|
Packit |
022b05 |
DEFVAL { 3 }
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 14 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- Unsolicited key updates are retransmitted according to an
|
|
Packit |
022b05 |
-- exponential back-off mechanism using two timers and a maximum
|
|
Packit |
022b05 |
-- retry counter for AS replies.
|
|
Packit |
022b05 |
-- The initial retransmission timer value is the nominal timer
|
|
Packit |
022b05 |
-- value (pktcMtaDevProvUnsolicitedKeyNomTimeout). The
|
|
Packit |
022b05 |
-- retransmissions occur with an exponentially increasing interval
|
|
Packit |
022b05 |
-- that caps at the maximum timeout value
|
|
Packit |
022b05 |
-- (pktcMtaDevProvUnsolicitedKeyMaxTimeout).
|
|
Packit |
022b05 |
-- Retransmissions stop when the maximum retry counter is reached
|
|
Packit |
022b05 |
-- (pktcMtaDevProvUnsolicitedKeyMaxRetries).
|
|
Packit |
022b05 |
-- For example, with values of 3 seconds for the nominal
|
|
Packit |
022b05 |
-- timer, 100 seconds for the maximum timeout, and 8 retries max,
|
|
Packit |
022b05 |
-- and with an exponential value of 2, this results in
|
|
Packit |
022b05 |
-- retransmission intervals will be 3 s, 6 s, 12 s, 24 s, 48 s,
|
|
Packit |
022b05 |
-- 96 s, 100 s, and 100 s;
|
|
Packit |
022b05 |
-- retransmissions then stop because the maximum number of
|
|
Packit |
022b05 |
-- retries (8) has been reached.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- Timeouts for unsolicited key management updates are only
|
|
Packit |
022b05 |
-- pertinent before the first SNMPv3 message is sent between the
|
|
Packit |
022b05 |
-- MTA and the Provisioning Server and before the configuration
|
|
Packit |
022b05 |
-- file is loaded.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvUnsolicitedKeyMaxTimeout OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (0..600)
|
|
Packit |
022b05 |
UNITS "seconds"
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the timeout value that applies to
|
|
Packit |
022b05 |
an MTA-initiated AP-REQ/REP key management exchange with
|
|
Packit |
022b05 |
the Provisioning Server in SNMPv3 provisioning.
|
|
Packit |
022b05 |
It is the maximum timeout value, and it may not be exceeded
|
|
Packit |
022b05 |
in the exponential back-off algorithm. If the DHCP option
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
code 122, sub-option 5, is provided to the MTA, it
|
|
Packit |
022b05 |
overwrites this value.
|
|
Packit |
022b05 |
In non-secure provisioning modes, the MTA MUST
|
|
Packit |
022b05 |
return a zero value in response to SNMP GET
|
|
Packit |
022b05 |
operations."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL {600}
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 15 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvUnsolicitedKeyNomTimeout OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (0..600)
|
|
Packit |
022b05 |
UNITS "seconds"
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the starting value of the timeout
|
|
Packit |
022b05 |
for the AP-REQ/REP Backoff and Retry mechanism
|
|
Packit |
022b05 |
with exponential timeout in SNMPv3 provisioning.
|
|
Packit |
022b05 |
If the DHCP option code 122, sub-option 5, is provided
|
|
Packit |
022b05 |
the MTA, it overwrites this value.
|
|
Packit |
022b05 |
In non-secure provisioning modes, the MTA MUST
|
|
Packit |
022b05 |
return a zero value in response to SNMP GET
|
|
Packit |
022b05 |
operations."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL {3}
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 16}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvUnsolicitedKeyMaxRetries OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (0..32)
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains a retry counter that applies to
|
|
Packit |
022b05 |
an MTA-initiated AP-REQ/REP key management exchange with
|
|
Packit |
022b05 |
the Provisioning Server in secure SNMPv3 provisioning.
|
|
Packit |
022b05 |
It is the maximum number of retries before the MTA stops
|
|
Packit |
022b05 |
attempting to establish a Security Association with
|
|
Packit |
022b05 |
Provisioning Server.
|
|
Packit |
022b05 |
If the DHCP option code 122, sub-option 5, is provided to
|
|
Packit |
022b05 |
the MTA, it overwrites this value.
|
|
Packit |
022b05 |
If this object is set to a zero value, the MTA MUST return
|
|
Packit |
022b05 |
an 'inconsistentValue' in response to SNMP SET operations.
|
|
Packit |
022b05 |
In non-secure provisioning modes, the MTA MUST
|
|
Packit |
022b05 |
return a zero value in response to SNMP GET
|
|
Packit |
022b05 |
operations."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL {8}
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 17 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvKerbRealmName OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString (SIZE(1..255))
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the name of the associated
|
|
Packit |
022b05 |
provisioning Kerberos realm acquired during the MTA4
|
|
Packit |
022b05 |
provisioning step (DHCP Ack) for SNMPv3 provisioning.
|
|
Packit |
022b05 |
The uppercase ASCII representation of the associated
|
|
Packit |
022b05 |
Kerberos realm name MUST be used by both the Manager (SNMP
|
|
Packit |
022b05 |
entity) and the MTA.
|
|
Packit |
022b05 |
The Kerberos realm name for the Provisioning Server is
|
|
Packit |
022b05 |
supplied to the MTA via DHCP option code 122, sub-option 6,
|
|
Packit |
022b05 |
as defined in RFC 3495. In secure SNMP provisioning mode,
|
|
Packit |
022b05 |
the value of the Kerberos realm name for the Provisioning
|
|
Packit |
022b05 |
Server supplied in the MTA configuration file must match
|
|
Packit |
022b05 |
the value supplied in the DHCP option code 122,
|
|
Packit |
022b05 |
sub-option 6. Otherwise, the value of this object must
|
|
Packit |
022b05 |
contain the value supplied in DHCP Option 122,
|
|
Packit |
022b05 |
sub-option 6."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
RFC 3495, DHCP Option for CableLabs Client Configuration."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 18 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvState OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX INTEGER {
|
|
Packit |
022b05 |
operational (1),
|
|
Packit |
022b05 |
waitingForSnmpSetInfo (2),
|
|
Packit |
022b05 |
waitingForTftpAddrResponse (3),
|
|
Packit |
022b05 |
waitingForConfigFile (4)
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the MTA provisioning state.
|
|
Packit |
022b05 |
If the state is:
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
'operational(1)', the device has completed the loading
|
|
Packit |
022b05 |
and processing of the initialization parameters.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
'waitingForSnmpSetInfo(2)', the device is waiting on
|
|
Packit |
022b05 |
its configuration file download access information.
|
|
Packit |
022b05 |
Note that this state is only reported when the MTA
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
SNMP enrollment mechanism is used.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
'waitingForTftpAddrResponse(3)', the device has sent a
|
|
Packit |
022b05 |
DNS request to resolve the server providing the
|
|
Packit |
022b05 |
configuration file, and it is awaiting for a response.
|
|
Packit |
022b05 |
Note that this state is only reported when the MTA
|
|
Packit |
022b05 |
SNMP enrollment mechanism is used.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
'waitingForConfigFile(4)', the device has sent a
|
|
Packit |
022b05 |
request via TFTP or HTTP for the download of its
|
|
Packit |
022b05 |
configuration file, and it is awaiting for a response or
|
|
Packit |
022b05 |
the file download is in progress."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification,
|
|
Packit |
022b05 |
PacketCable Security Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevServer 19 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- The following object group describes the security objects.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevManufacturerCertificate OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX DocsX509ASN1DEREncodedCertificate
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the MTA Manufacturer Certificate.
|
|
Packit |
022b05 |
The object value must be the ASN.1 DER encoding of the MTA
|
|
Packit |
022b05 |
manufacturer's X.509 public key certificate. The MTA
|
|
Packit |
022b05 |
Manufacturer Certificate is issued to each MTA
|
|
Packit |
022b05 |
manufacturer and is installed into each MTA at the time of
|
|
Packit |
022b05 |
manufacture or with a secure code download. The specific
|
|
Packit |
022b05 |
requirements related to this certificate are defined in
|
|
Packit |
022b05 |
the PacketCable or IPCablecom Security specifications."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= {pktcMtaDevSecurity 1}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCertificate OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX DocsX509ASN1DEREncodedCertificate
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the MTA Device Certificate.
|
|
Packit |
022b05 |
The object value must be the ASN.1 DER encoding of the
|
|
Packit |
022b05 |
MTA's X.509 public-key certificate issued by the
|
|
Packit |
022b05 |
manufacturer and installed into the MTA at the time of
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
manufacture or with a secure code download.
|
|
Packit |
022b05 |
This certificate contains the MTA MAC address. The
|
|
Packit |
022b05 |
specific requirements related to this certificate are
|
|
Packit |
022b05 |
defined in the PacketCable or IPCablecom Security
|
|
Packit |
022b05 |
specifications."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevSecurity 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCorrelationId OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains a correlation ID, an arbitrary value
|
|
Packit |
022b05 |
generated by the MTA that will be exchanged as part of the
|
|
Packit |
022b05 |
device capability data to the Provisioning Application.
|
|
Packit |
022b05 |
This random value is used as an identifier to correlate
|
|
Packit |
022b05 |
related events in the MTA provisioning sequence.
|
|
Packit |
022b05 |
This value is intended for use only during the MTA
|
|
Packit |
022b05 |
initialization and configuration file download."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevSecurity 3 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevTelephonyRootCertificate OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX DocsX509ASN1DEREncodedCertificate
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the telephony Service Provider Root
|
|
Packit |
022b05 |
certificate. The object value is the ASN.1 DER encoding of
|
|
Packit |
022b05 |
the IP Telephony Service Provider Root X.509 public key
|
|
Packit |
022b05 |
certificate. This certification is stored in the MTA
|
|
Packit |
022b05 |
non-volatile memory and can be updated with a secure code
|
|
Packit |
022b05 |
download. This certificate is used to validate the initial
|
|
Packit |
022b05 |
AS Reply received by the MTA from the Key Distribution
|
|
Packit |
022b05 |
Center (KDC) during the MTA initialization. The specific
|
|
Packit |
022b05 |
requirements related to this certificate are defined in
|
|
Packit |
022b05 |
the PacketCable or IPCablecom Security specifications."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevSecurity 4 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- Informative Procedures for Setting up Security Associations
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
-- A Security Association may be set up either via configuration or
|
|
Packit |
022b05 |
-- via NCS signaling.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- I. Security association setup via configuration.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- The realm must be configured first. Associated with the realm
|
|
Packit |
022b05 |
-- is a KDC. The realm table (pktcMtaDevRealmTable) indicates
|
|
Packit |
022b05 |
-- information about the realm (e.g., name, organization name) and
|
|
Packit |
022b05 |
-- parameters associated with KDC communications (e.g., grace
|
|
Packit |
022b05 |
-- periods, AS Request/AS Reply adaptive back-off parameters).
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- Once the realm is established, one or more CMS(es) may be
|
|
Packit |
022b05 |
-- defined in the realm. Associated with each CMS
|
|
Packit |
022b05 |
-- entry in the pktcMtaDevCmsTable is an explicit reference
|
|
Packit |
022b05 |
-- to a Realm via the realm name (pktcMtaDevCmsKerbRealmName),
|
|
Packit |
022b05 |
-- the FQDN of the CMS, and parameters associated with IPSec
|
|
Packit |
022b05 |
-- key management with the CMS (e.g., clock skew, AP Request/
|
|
Packit |
022b05 |
-- AP Reply adaptive back-off parameters).
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- II. Security association setup via NCS signaling.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- The procedure of establishing the Security Associations
|
|
Packit |
022b05 |
-- for NCS signaling is described in the PacketCable Security
|
|
Packit |
022b05 |
-- specification.
|
|
Packit |
022b05 |
-- It involves the analysis of the pktcNcsEndPntConfigTable row
|
|
Packit |
022b05 |
-- for the corresponding endpoint number and the correlation of
|
|
Packit |
022b05 |
-- the CMS FQDN from this row with the CMS Table and
|
|
Packit |
022b05 |
-- consequently, with the Realm Table. Both of these tables
|
|
Packit |
022b05 |
-- are defined below. The pktcNcsEndPntConfigTable is defined in
|
|
Packit |
022b05 |
-- the IP over Cable Data Network (IPCDN)
|
|
Packit |
022b05 |
-- NCS Signaling MIB [NCSSIGMIB].
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- III. When the MTA receives wake-up or re-key messages from a
|
|
Packit |
022b05 |
-- CMS, it performs key management based on the corresponding
|
|
Packit |
022b05 |
-- entry in the CMS table. If the matching CMS entry does not
|
|
Packit |
022b05 |
-- exist, it must ignore the wake-up or re-key messages.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- pktcMtaDevRealmTable
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- The pktcMtaDevRealmTable shows the KDC realms. The table is
|
|
Packit |
022b05 |
-- indexed with pktcMtaDevRealmIndex. The Realm Table contains the
|
|
Packit |
022b05 |
-- pktcMtaDevRealmName in conjunction with any server that needs
|
|
Packit |
022b05 |
-- a Security Association with the MTA. Uppercase must be used
|
|
Packit |
022b05 |
-- to compare the pktcMtaDevRealmName content.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmAvailSlot OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (0..64)
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the index number of the first
|
|
Packit |
022b05 |
available entry in the realm table (pktcMtaDevRealmTable).
|
|
Packit |
022b05 |
If all the entries in the realm table have been assigned,
|
|
Packit |
022b05 |
this object contains the value of zero.
|
|
Packit |
022b05 |
A management station should create new entries in the
|
|
Packit |
022b05 |
realm table, using the following procedure:
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
First, issue a management protocol retrieval operation
|
|
Packit |
022b05 |
to determine the value of the first available index in the
|
|
Packit |
022b05 |
realm table (pktcMtaDevRealmAvailSlot).
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Second, issue a management protocol SET operation
|
|
Packit |
022b05 |
to create an instance of the pktcMtaDevRealmStatus
|
|
Packit |
022b05 |
object by setting its value to 'createAndWait(5)'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Third, if the SET operation succeeded, continue
|
|
Packit |
022b05 |
modifying the object instances corresponding to the newly
|
|
Packit |
022b05 |
created conceptual row, without fear of collision with
|
|
Packit |
022b05 |
other management stations. When all necessary conceptual
|
|
Packit |
022b05 |
columns of the row are properly populated (via SET
|
|
Packit |
022b05 |
operations or default values), the management station may
|
|
Packit |
022b05 |
SET the pktcMtaDevRealmStatus object to 'active(1)'."
|
|
Packit |
022b05 |
::= { pktcMtaDevSecurity 5 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmTable OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SEQUENCE OF PktcMtaDevRealmEntry
|
|
Packit |
022b05 |
MAX-ACCESS not-accessible
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the realm table.
|
|
Packit |
022b05 |
The CMS table (pktcMtaDevCmsTable) and the realm table
|
|
Packit |
022b05 |
(pktcMtaDevRealmTable) are used for managing the MTA-CMS
|
|
Packit |
022b05 |
Security Associations. The realm table defines the
|
|
Packit |
022b05 |
Kerberos realms for the Application Servers (CMSes and the
|
|
Packit |
022b05 |
Provisioning Server)."
|
|
Packit |
022b05 |
::= { pktcMtaDevSecurity 6 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmEntry OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX PktcMtaDevRealmEntry
|
|
Packit |
022b05 |
MAX-ACCESS not-accessible
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This table entry object lists the MTA security parameters
|
|
Packit |
022b05 |
for a single Kerberos realm. The conceptual rows MUST NOT
|
|
Packit |
022b05 |
persist across MTA reboots."
|
|
Packit |
022b05 |
INDEX { pktcMtaDevRealmIndex }
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmTable 1 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
PktcMtaDevRealmEntry ::= SEQUENCE {
|
|
Packit |
022b05 |
pktcMtaDevRealmIndex Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevRealmName SnmpAdminString,
|
|
Packit |
022b05 |
pktcMtaDevRealmPkinitGracePeriod Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevRealmTgsGracePeriod Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevRealmOrgName LongUtf8String,
|
|
Packit |
022b05 |
pktcMtaDevRealmUnsolicitedKeyMaxTimeout Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevRealmUnsolicitedKeyNomTimeout Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevRealmUnsolicitedKeyMaxRetries Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevRealmStatus RowStatus
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmIndex OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (1..64)
|
|
Packit |
022b05 |
MAX-ACCESS not-accessible
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the realm table index."
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmEntry 1}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmName OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString (SIZE(1..255))
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object identifies the Kerberos realm name in all
|
|
Packit |
022b05 |
capitals. The MTA MUST prohibit the instantiation of any
|
|
Packit |
022b05 |
two rows with identical Kerberos realm names. The MTA MUST
|
|
Packit |
022b05 |
also verify that any search operation involving Kerberos
|
|
Packit |
022b05 |
realm names is done using the uppercase ASCII
|
|
Packit |
022b05 |
representation of the characters."
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmEntry 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmPkinitGracePeriod OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (15..600)
|
|
Packit |
022b05 |
UNITS "minutes"
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the PKINIT Grace Period. For the
|
|
Packit |
022b05 |
purpose of key management with Application Servers (CMSes
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
or the Provisioning Server), the MTA must utilize the
|
|
Packit |
022b05 |
PKINIT exchange to obtain Application Server tickets. The
|
|
Packit |
022b05 |
MTA may utilize the PKINIT exchange to obtain Ticket
|
|
Packit |
022b05 |
Granting Tickets (TGTs), which are then used to obtain
|
|
Packit |
022b05 |
Application Server tickets in a TGS exchange.
|
|
Packit |
022b05 |
The PKINIT exchange occurs according to the current Ticket
|
|
Packit |
022b05 |
Expiration Time (TicketEXP) and on the PKINIT Grace Period
|
|
Packit |
022b05 |
(PKINITGP). The MTA MUST initiate the PKINIT exchange at
|
|
Packit |
022b05 |
the time: TicketEXP - PKINITGP."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { 15 }
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmEntry 3 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmTgsGracePeriod OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (1..600)
|
|
Packit |
022b05 |
UNITS "minutes"
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the Ticket Granting Server Grace
|
|
Packit |
022b05 |
Period (TGSGP). The Ticket Granting Server (TGS)
|
|
Packit |
022b05 |
Request/Reply exchange may be performed by the MTA
|
|
Packit |
022b05 |
on demand whenever an Application Server ticket is
|
|
Packit |
022b05 |
needed to establish security parameters. If the MTA
|
|
Packit |
022b05 |
possesses a ticket that corresponds to the Provisioning
|
|
Packit |
022b05 |
Server or a CMS that currently exists in the CMS table,
|
|
Packit |
022b05 |
the MTA MUST initiate the TGS Request/Reply exchange
|
|
Packit |
022b05 |
at the time: TicketEXP - TGSGP."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { 10 }
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmEntry 4 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmOrgName OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX LongUtf8String
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the X.500 organization name attribute
|
|
Packit |
022b05 |
as defined in the subject name of the service provider
|
|
Packit |
022b05 |
certificate."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification;
|
|
Packit |
022b05 |
RFCs 3280 and 4630, Internet X.509 Public Key
|
|
Packit |
022b05 |
Infrastructure Certificate and Certificate Revocation List
|
|
Packit |
022b05 |
(CRL) Profile"
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmEntry 5 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmUnsolicitedKeyMaxTimeout OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (1..600)
|
|
Packit |
022b05 |
UNITS "seconds"
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object specifies the maximum time the MTA will
|
|
Packit |
022b05 |
attempt to perform the exponential back-off algorithm.
|
|
Packit |
022b05 |
This timer only applies when the MTA initiated key
|
|
Packit |
022b05 |
management. If the DHCP option code 122, sub-option 4, is
|
|
Packit |
022b05 |
provided to the MTA, it overwrites this value.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Unsolicited key updates are retransmitted according to an
|
|
Packit |
022b05 |
exponential back-off mechanism using two timers and a
|
|
Packit |
022b05 |
maximum retry counter for AS replies.
|
|
Packit |
022b05 |
The initial retransmission timer value is the nominal
|
|
Packit |
022b05 |
timer value (pktcMtaDevRealmUnsolicitedKeyNomTimeout). The
|
|
Packit |
022b05 |
retransmissions occur with an exponentially increasing
|
|
Packit |
022b05 |
interval that caps at the maximum timeout value
|
|
Packit |
022b05 |
(pktcMtaDevRealmUnsolicitedKeyMaxTimeout).
|
|
Packit |
022b05 |
Retransmissions stop when the maximum retry counter is
|
|
Packit |
022b05 |
reached (pktcMatDevRealmUnsolicitedMaxRetries).
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
For example, with values of 3 seconds for the nominal
|
|
Packit |
022b05 |
timer, 20 seconds for the maximum timeout, and 5 retries
|
|
Packit |
022b05 |
max, retransmission intervals will be 3 s, 6 s,
|
|
Packit |
022b05 |
12 s, 20 s, and 20 s, and retransmissions then stop because
|
|
Packit |
022b05 |
the maximum number of retries has been reached."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { 100 }
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmEntry 6 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmUnsolicitedKeyNomTimeout OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (100..600000)
|
|
Packit |
022b05 |
UNITS "milliseconds"
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object specifies the initial timeout value
|
|
Packit |
022b05 |
for the AS-REQ/AS-REP exponential back-off and retry
|
|
Packit |
022b05 |
mechanism. If the DHCP option code 122, sub-option 4, is
|
|
Packit |
022b05 |
provided to the MTA, it overwrites this value.
|
|
Packit |
022b05 |
This value should account for the average roundtrip
|
|
Packit |
022b05 |
time between the MTA and the KDC, as well as the
|
|
Packit |
022b05 |
processing delay on the KDC.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Unsolicited key updates are retransmitted according to an
|
|
Packit |
022b05 |
exponential back-off mechanism using two timers and a
|
|
Packit |
022b05 |
maximum retry counter for AS replies.
|
|
Packit |
022b05 |
The initial retransmission timer value is the nominal
|
|
Packit |
022b05 |
timer value (pktcMtaDevRealmUnsolicitedKeyNomTimeout). The
|
|
Packit |
022b05 |
retransmissions occur with an exponentially increasing
|
|
Packit |
022b05 |
interval that caps at the maximum timeout value
|
|
Packit |
022b05 |
(pktcMtaDevRealmUnsolicitedKeyMaxTimeout).
|
|
Packit |
022b05 |
Retransmissions stop when the maximum retry counter is
|
|
Packit |
022b05 |
reached (pktcMatDevRealmUnsolicitedMaxRetries).
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
For example, with values of 3 seconds for the nominal
|
|
Packit |
022b05 |
timer, 20 seconds for the maximum timeout, and 5 retries
|
|
Packit |
022b05 |
max, in retransmission intervals will be 3 s, 6 s,
|
|
Packit |
022b05 |
12 s, 20 s, and 20 s; retransmissions then stop because
|
|
Packit |
022b05 |
the maximum number of retries has been reached."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { 3000 }
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmEntry 7 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmUnsolicitedKeyMaxRetries OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (0..1024)
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object specifies the maximum number of retries the
|
|
Packit |
022b05 |
MTA attempts to obtain a ticket from the KDC.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Unsolicited key updates are retransmitted according to an
|
|
Packit |
022b05 |
exponential back-off mechanism using two timers and a
|
|
Packit |
022b05 |
maximum retry counter for AS replies.
|
|
Packit |
022b05 |
The initial retransmission timer value is the nominal
|
|
Packit |
022b05 |
timer value (pktcMtaDevRealmUnsolicitedKeyNomTimeout). The
|
|
Packit |
022b05 |
retransmissions occur with an exponentially increasing
|
|
Packit |
022b05 |
interval that caps at the maximum timeout value
|
|
Packit |
022b05 |
(pktcMtaDevRealmUnsolicitedKeyMaxTimeout).
|
|
Packit |
022b05 |
Retransmissions stop when the maximum retry counter is
|
|
Packit |
022b05 |
reached (pktcMatDevRealmUnsolicitedMaxRetries).
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
For example, with values of 3 seconds for the nominal
|
|
Packit |
022b05 |
timer, 20 seconds for the maximum timeout, and 5 retries
|
|
Packit |
022b05 |
max, retransmission intervals will be 3 s, 6 s,
|
|
Packit |
022b05 |
12 s, 20 s, and 20 s; retransmissions then stop because
|
|
Packit |
022b05 |
the maximum number of retries has been reached."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { 5 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmEntry 8 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevRealmStatus OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX RowStatus
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the row status of this realm in the
|
|
Packit |
022b05 |
realm table (pktcMtaDevRealmTable).
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
An entry in this table is not qualified for activation
|
|
Packit |
022b05 |
until the object instances of all corresponding columns
|
|
Packit |
022b05 |
have been initialized, either by default values, or via
|
|
Packit |
022b05 |
explicit SET operations. Until all object instances in
|
|
Packit |
022b05 |
this row are initialized, the status value for this realm
|
|
Packit |
022b05 |
must be 'notReady(3)'.
|
|
Packit |
022b05 |
In particular, two columnar objects must be explicitly
|
|
Packit |
022b05 |
SET: the realm name (pktcMtaDevRealmName) and the
|
|
Packit |
022b05 |
organization name (pktcMtaDevRealmOrgName). Once these 2
|
|
Packit |
022b05 |
objects have been set and the row status is SET to
|
|
Packit |
022b05 |
'active(1)', the MTA MUST NOT allow any modification of
|
|
Packit |
022b05 |
these 2 object values.
|
|
Packit |
022b05 |
The value of this object has no effect on whether other
|
|
Packit |
022b05 |
columnar objects in this row can be modified."
|
|
Packit |
022b05 |
::= { pktcMtaDevRealmEntry 9 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- The CMS table, pktcMtaDevCmsTable
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- The CMS table and the realm table (pktcMtaDevRealmTable) are used
|
|
Packit |
022b05 |
-- for managing the MTA signaling security. The CMS table defines
|
|
Packit |
022b05 |
-- the CMSes the MTA is allowed to communicate with and contains
|
|
Packit |
022b05 |
-- the parameters describing the SA establishment between the MTA
|
|
Packit |
022b05 |
-- and a CMS.
|
|
Packit |
022b05 |
-- The CMS table is indexed by pktcMtaDevCmsIndex. The table
|
|
Packit |
022b05 |
-- contains the CMS FQDN (pktcMtaDevCmsFQDN) and the associated
|
|
Packit |
022b05 |
-- Kerberos realm name (pktcMtaDevCmsKerbRealmName) so that the MTA
|
|
Packit |
022b05 |
-- can find the corresponding Kerberos realm name in the
|
|
Packit |
022b05 |
-- pktcMtaDevRealmTable.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsAvailSlot OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (0..128)
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
" This object contains the index number of the first
|
|
Packit |
022b05 |
available entry in the CMS table (pktcMtaDevCmsTable).
|
|
Packit |
022b05 |
If all the entries in the CMS table have been assigned,
|
|
Packit |
022b05 |
this object contains the value of zero.
|
|
Packit |
022b05 |
A management station should create new entries in the
|
|
Packit |
022b05 |
CMS table, using the following procedure:
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
First, issue a management protocol retrieval operation
|
|
Packit |
022b05 |
to determine the value of the first available index in the
|
|
Packit |
022b05 |
CMS table (pktcMtaDevCmsAvailSlot).
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Second, issue a management protocol SET operation
|
|
Packit |
022b05 |
to create an instance of the pktcMtaDevCmsStatus
|
|
Packit |
022b05 |
object by setting its value to 'createAndWait(5)'.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Third, if the SET operation succeeded, continue
|
|
Packit |
022b05 |
modifying the object instances corresponding to the newly
|
|
Packit |
022b05 |
created conceptual row, without fear of collision with
|
|
Packit |
022b05 |
other management stations. When all necessary conceptual
|
|
Packit |
022b05 |
columns of the row are properly populated (via SET
|
|
Packit |
022b05 |
operations or default values), the management station may
|
|
Packit |
022b05 |
SET the pktcMtaDevCmsStatus object to 'active(1)'."
|
|
Packit |
022b05 |
::= { pktcMtaDevSecurity 7 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsTable OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SEQUENCE OF PktcMtaDevCmsEntry
|
|
Packit |
022b05 |
MAX-ACCESS not-accessible
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the CMS table.
|
|
Packit |
022b05 |
The CMS table (pktcMtaDevCmsTable) and the realm table
|
|
Packit |
022b05 |
(pktcMtaDevRealmTable) are used for managing security
|
|
Packit |
022b05 |
between the MTA and CMSes. Each CMS table entry defines
|
|
Packit |
022b05 |
a CMS the managed MTA is allowed to communicate with
|
|
Packit |
022b05 |
and contains security parameters for key management with
|
|
Packit |
022b05 |
that CMS."
|
|
Packit |
022b05 |
::= { pktcMtaDevSecurity 8 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsEntry OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX PktcMtaDevCmsEntry
|
|
Packit |
022b05 |
MAX-ACCESS not-accessible
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This table entry object lists the MTA key management
|
|
Packit |
022b05 |
parameters used when establishing Security Associations
|
|
Packit |
022b05 |
with a CMS. The conceptual rows MUST NOT persist across
|
|
Packit |
022b05 |
MTA reboots."
|
|
Packit |
022b05 |
INDEX { pktcMtaDevCmsIndex }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsTable 1 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
PktcMtaDevCmsEntry ::= SEQUENCE {
|
|
Packit |
022b05 |
pktcMtaDevCmsIndex Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevCmsFqdn SnmpAdminString,
|
|
Packit |
022b05 |
pktcMtaDevCmsKerbRealmName SnmpAdminString,
|
|
Packit |
022b05 |
pktcMtaDevCmsMaxClockSkew Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevCmsSolicitedKeyTimeout Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevCmsUnsolicitedKeyMaxTimeout Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevCmsUnsolicitedKeyNomTimeout Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevCmsUnsolicitedKeyMaxRetries Unsigned32,
|
|
Packit |
022b05 |
pktcMtaDevCmsIpsecCtrl TruthValue,
|
|
Packit |
022b05 |
pktcMtaDevCmsStatus RowStatus
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsIndex OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (1..128)
|
|
Packit |
022b05 |
MAX-ACCESS not-accessible
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the CMS table index."
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 1 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsFqdn OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString (SIZE(1..255))
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object specifies the CMS FQDN. The MTA must
|
|
Packit |
022b05 |
prohibit the instantiation of any two rows with identical
|
|
Packit |
022b05 |
FQDNs. The MTA must also verify that any search and/or
|
|
Packit |
022b05 |
comparison operation involving a CMS FQDN is case
|
|
Packit |
022b05 |
insensitive. The MTA must resolve the CMS FQDN as required
|
|
Packit |
022b05 |
by the corresponding PacketCable Specifications."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable MTA Device Provisioning Specification;
|
|
Packit |
022b05 |
PacketCable Security Specification;
|
|
Packit |
022b05 |
PacketCable Network-Based Call Signaling Protocol
|
|
Packit |
022b05 |
Specification."
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsKerbRealmName OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX SnmpAdminString (SIZE(1..255))
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object identifies the Kerberos realm name in uppercase
|
|
Packit |
022b05 |
characters associated with the CMS defined in this
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
conceptual row. The object value is a reference
|
|
Packit |
022b05 |
point to the corresponding Kerberos realm name in the
|
|
Packit |
022b05 |
realm table (pktcMtaDevRealmTable)."
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 3 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsMaxClockSkew OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (1..1800)
|
|
Packit |
022b05 |
UNITS "seconds"
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object specifies the maximum allowable clock skew
|
|
Packit |
022b05 |
between the MTA and the CMS defined in this row."
|
|
Packit |
022b05 |
DEFVAL { 300 }
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 4 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsSolicitedKeyTimeout OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (100..30000)
|
|
Packit |
022b05 |
UNITS "milliseconds"
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines a Kerberos Key Management timer on the
|
|
Packit |
022b05 |
MTA. It is the time period during which the MTA saves the
|
|
Packit |
022b05 |
nonce and Server Kerberos Principal Identifier to match an
|
|
Packit |
022b05 |
AP Request and its associated AP Reply response from the
|
|
Packit |
022b05 |
CMS. This timer only applies when the CMS initiated key
|
|
Packit |
022b05 |
management (with a Wake Up message or a Rekey message)."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { 1000 }
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 5 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- Unsolicited key updates are retransmitted according to an
|
|
Packit |
022b05 |
-- exponential back-off mechanism using two timers and a maximum
|
|
Packit |
022b05 |
-- retry counter for AS replies.
|
|
Packit |
022b05 |
-- The initial retransmission timer value is the nominal timer
|
|
Packit |
022b05 |
-- value (pktcMtaDevCmsUnsolicitedKeyNomTimeout). The
|
|
Packit |
022b05 |
-- retransmissions occur with an exponentially increasing interval
|
|
Packit |
022b05 |
-- that caps at the maximum timeout value
|
|
Packit |
022b05 |
-- (pktcMtaDevCmsUnsolicitedKeyMaxTimeout).
|
|
Packit |
022b05 |
-- Retransmissions stop when the maximum retry counter is reached
|
|
Packit |
022b05 |
-- (pktcMatDevCmsUnsolicitedMaxRetries).
|
|
Packit |
022b05 |
-- For example, with values of 3 seconds for the nominal
|
|
Packit |
022b05 |
-- timer, 20 seconds for the maximum timeout, and 5 retries max,
|
|
Packit |
022b05 |
-- retransmission intervals will be 3 s, 6 s, 12 s,
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
-- 20 s, and 20 s; retransmissions then stop due to the
|
|
Packit |
022b05 |
-- maximum number of retries reached.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
--=================================================================
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsUnsolicitedKeyMaxTimeout OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (1..600)
|
|
Packit |
022b05 |
UNITS "seconds"
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the timeout value that only applies
|
|
Packit |
022b05 |
to an MTA-initiated key management exchange. It is the
|
|
Packit |
022b05 |
maximum timeout, and it may not be exceeded in the
|
|
Packit |
022b05 |
exponential back-off algorithm."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { 600 }
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 6 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsUnsolicitedKeyNomTimeout OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (100..30000)
|
|
Packit |
022b05 |
UNITS "milliseconds"
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the starting value of the timeout
|
|
Packit |
022b05 |
for an MTA-initiated key management. It should account for
|
|
Packit |
022b05 |
the average roundtrip time between the MTA and the CMS and
|
|
Packit |
022b05 |
the processing time on the CMS."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { 500 }
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 7 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsUnsolicitedKeyMaxRetries OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX Unsigned32 (0..1024)
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object contains the maximum number of retries before
|
|
Packit |
022b05 |
the MTA stops attempting to establish a Security
|
|
Packit |
022b05 |
Association with the CMS."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
" PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { 5 }
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 8 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsIpsecCtrl OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX TruthValue
|
|
Packit |
022b05 |
MAX-ACCESS read-only
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object specifies the MTA IPSec control flag.
|
|
Packit |
022b05 |
If the object value is 'true', the MTA must use Kerberos
|
|
Packit |
022b05 |
Key Management and IPsec to communicate with this CMS. If
|
|
Packit |
022b05 |
it is 'false', IPSec Signaling Security and Kerberos key
|
|
Packit |
022b05 |
management are disabled for this specific CMS."
|
|
Packit |
022b05 |
DEFVAL { true }
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 9 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsStatus OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX RowStatus
|
|
Packit |
022b05 |
MAX-ACCESS read-create
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines the row status associated with this
|
|
Packit |
022b05 |
particular CMS in the CMS table (pktcMtaDevCmsTable).
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
An entry in this table is not qualified for activation
|
|
Packit |
022b05 |
until the object instances of all corresponding columns
|
|
Packit |
022b05 |
have been initialized, either by default values or via
|
|
Packit |
022b05 |
explicit SET operations. Until all object instances in
|
|
Packit |
022b05 |
this row are initialized, the status value for this realm
|
|
Packit |
022b05 |
must be 'notReady(3)'.
|
|
Packit |
022b05 |
In particular, two columnar objects must be SET: the
|
|
Packit |
022b05 |
CMS FQDN (pktcMtaDevCmsFqdn) and the Kerberos realm name
|
|
Packit |
022b05 |
(pktcMtaDevCmsKerbRealmName). Once these 2 objects have
|
|
Packit |
022b05 |
been set and the row status is SET to 'active(1)', the MTA
|
|
Packit |
022b05 |
MUST NOT allow any modification of these 2 object values.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
The value of this object has no effect on
|
|
Packit |
022b05 |
whether other columnar objects in this row can be
|
|
Packit |
022b05 |
modified."
|
|
Packit |
022b05 |
::= { pktcMtaDevCmsEntry 10 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevResetKrbTickets OBJECT-TYPE
|
|
Packit |
022b05 |
SYNTAX BITS {
|
|
Packit |
022b05 |
invalidateProvOnReboot (0),
|
|
Packit |
022b05 |
invalidateAllCmsOnReboot (1)
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
MAX-ACCESS read-write
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This object defines a Kerberos Ticket Control Mask that
|
|
Packit |
022b05 |
instructs the MTA to invalidate the specific Application
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Server Kerberos ticket(s) that are stored locally in the
|
|
Packit |
022b05 |
MTA NVRAM (non-volatile or persistent memory).
|
|
Packit |
022b05 |
If the MTA does not store Kerberos tickets in NVRAM, it
|
|
Packit |
022b05 |
MUST ignore setting of this object and MUST report a BITS
|
|
Packit |
022b05 |
value of zero when the object is read.
|
|
Packit |
022b05 |
If the MTA supports Kerberos tickets storage in NVRAM, the
|
|
Packit |
022b05 |
object value is encoded as follows:
|
|
Packit |
022b05 |
- Setting the invalidateProvOnReboot bit (bit 0) to 1
|
|
Packit |
022b05 |
means that the MTA MUST invalidate the Kerberos
|
|
Packit |
022b05 |
Application Ticket(s) for the Provisioning Application
|
|
Packit |
022b05 |
at the next MTA reboot if secure SNMP provisioning mode
|
|
Packit |
022b05 |
is used. In non-secure provisioning modes, the MTA MUST
|
|
Packit |
022b05 |
return an 'inconsistentValue' in response to SNMP SET
|
|
Packit |
022b05 |
operations with a bit 0 set to 1.
|
|
Packit |
022b05 |
- Setting the invalidateAllCmsOnReboot bit (bit 1) to 1
|
|
Packit |
022b05 |
means that the MTA MUST invalidate the Kerberos
|
|
Packit |
022b05 |
Application Ticket(s) for all CMSes currently assigned
|
|
Packit |
022b05 |
to the MTA endpoints.
|
|
Packit |
022b05 |
If a value is written into an instance of
|
|
Packit |
022b05 |
pktcMtaDevResetKrbTickets, the agent MUST retain the
|
|
Packit |
022b05 |
supplied value across an MTA re-initialization or
|
|
Packit |
022b05 |
reboot."
|
|
Packit |
022b05 |
REFERENCE
|
|
Packit |
022b05 |
"PacketCable Security Specification."
|
|
Packit |
022b05 |
DEFVAL { { } }
|
|
Packit |
022b05 |
::= { pktcMtaDevSecurity 9 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- The following group, pktcMtaDevErrors, defines an OID
|
|
Packit |
022b05 |
-- corresponding to error conditions encountered during the MTA
|
|
Packit |
022b05 |
-- provisioning.
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevErrorsTooManyErrors OBJECT-IDENTITY
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"This object defines the OID corresponding to the error
|
|
Packit |
022b05 |
condition when too many errors are encountered in the
|
|
Packit |
022b05 |
MTA configuration file during provisioning."
|
|
Packit |
022b05 |
::= { pktcMtaDevErrors 1 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvisioningEnrollment NOTIFICATION-TYPE
|
|
Packit |
022b05 |
OBJECTS {
|
|
Packit |
022b05 |
sysDescr,
|
|
Packit |
022b05 |
pktcMtaDevSwCurrentVers,
|
|
Packit |
022b05 |
pktcMtaDevTypeIdentifier,
|
|
Packit |
022b05 |
ifPhysAddress,
|
|
Packit |
022b05 |
pktcMtaDevCorrelationId
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This INFORM notification is issued by the MTA to initiate
|
|
Packit |
022b05 |
the PacketCable provisioning process when the MTA SNMP
|
|
Packit |
022b05 |
enrollment mechanism is used.
|
|
Packit |
022b05 |
It contains the system description, the current software
|
|
Packit |
022b05 |
version, the MTA device type identifier, the MTA MAC
|
|
Packit |
022b05 |
address (obtained in the MTA ifTable in the ifPhysAddress
|
|
Packit |
022b05 |
object that corresponds to the ifIndex 1), and a
|
|
Packit |
022b05 |
correlation ID."
|
|
Packit |
022b05 |
::= { pktcMtaNotification 1 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevProvisioningStatus NOTIFICATION-TYPE
|
|
Packit |
022b05 |
OBJECTS {
|
|
Packit |
022b05 |
ifPhysAddress,
|
|
Packit |
022b05 |
pktcMtaDevCorrelationId,
|
|
Packit |
022b05 |
pktcMtaDevProvisioningState
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" This INFORM notification may be issued by the MTA to
|
|
Packit |
022b05 |
confirm the completion of the PacketCable provisioning
|
|
Packit |
022b05 |
process, and to report its provisioning completion
|
|
Packit |
022b05 |
status.
|
|
Packit |
022b05 |
It contains the MTA MAC address (obtained in the MTA
|
|
Packit |
022b05 |
ifTable in the ifPhysAddress object that corresponds
|
|
Packit |
022b05 |
to the ifIndex 1), a correlation ID and the MTA
|
|
Packit |
022b05 |
provisioning state as defined in
|
|
Packit |
022b05 |
pktcMtaDevProvisioningState."
|
|
Packit |
022b05 |
::= { pktcMtaNotification 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
-- Compliance Statements
|
|
Packit |
022b05 |
--
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaCompliances OBJECT IDENTIFIER ::= { pktcMtaConformance 1 }
|
|
Packit |
022b05 |
pktcMtaGroups OBJECT IDENTIFIER ::= { pktcMtaConformance 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaBasicCompliance MODULE-COMPLIANCE
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" The compliance statement for MTA devices that implement
|
|
Packit |
022b05 |
PacketCable or IPCablecom requirements.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
This compliance statement applies to MTA implementations
|
|
Packit |
022b05 |
that support PacketCable 1.0 or IPCablecom requirements,
|
|
Packit |
022b05 |
which are not IPv6-capable at the time of this
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
RFC publication."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
MODULE -- Unconditionally mandatory groups for MTAs
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
MANDATORY-GROUPS {
|
|
Packit |
022b05 |
pktcMtaGroup,
|
|
Packit |
022b05 |
pktcMtaNotificationGroup
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevDhcpServerAddressType
|
|
Packit |
022b05 |
SYNTAX InetAddressType { ipv4(1) }
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" Support for address types other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified and therefore is not
|
|
Packit |
022b05 |
required. It may be defined in future versions of
|
|
Packit |
022b05 |
this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevDnsServerAddressType
|
|
Packit |
022b05 |
SYNTAX InetAddressType { ipv4(1) }
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" Support for address types other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified and therefore is not
|
|
Packit |
022b05 |
required. It may be defined in future versions of
|
|
Packit |
022b05 |
this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevTimeServerAddressType
|
|
Packit |
022b05 |
SYNTAX InetAddressType { ipv4(1) }
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" Support for address types other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified and therefore is not
|
|
Packit |
022b05 |
required. It may be defined in future versions of
|
|
Packit |
022b05 |
this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevServerDhcp1
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevServerDhcp2
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevServerDns1
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevServerDns2
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevTimeServer
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevProvConfigEncryptAlg
|
|
Packit |
022b05 |
SYNTAX PktcMtaDevProvEncryptAlg
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support
|
|
Packit |
022b05 |
values of none(0) and des64Cbcmode(1).
|
|
Packit |
022b05 |
An IV of zero is used to encrypt in des64Cbcmode, and
|
|
Packit |
022b05 |
the length of pktcMtaDevProvConfigKey is 64 bits, as
|
|
Packit |
022b05 |
defined in the PacketCable Security specification.
|
|
Packit |
022b05 |
Other encryption types may be defined in future
|
|
Packit |
022b05 |
versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevRealmOrgName
|
|
Packit |
022b05 |
SYNTAX LongUtf8String (SIZE (1..384))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"The Organization Name field in X.509 certificates
|
|
Packit |
022b05 |
can contain up to 64 UTF-8 encoded characters,
|
|
Packit |
022b05 |
as defined in RFCs 3280 and 4630. Therefore, compliant
|
|
Packit |
022b05 |
devices are only required to support Organization
|
|
Packit |
022b05 |
Name values of up to 64 UTF-8 encoded characters.
|
|
Packit |
022b05 |
Given that RFCs 3280 and 4630 define the UTF-8 encoding,
|
|
Packit |
022b05 |
compliant devices must support a maximum size of 384
|
|
Packit |
022b05 |
octets for pktcMtaDevRealmOrgName. The calculation of
|
|
Packit |
022b05 |
384 octets comes from the RFC 3629 UTF-8 encoding
|
|
Packit |
022b05 |
definition whereby the UTF-8 encoded characters
|
|
Packit |
022b05 |
are encoded as sequences of 1 to 6 octets,
|
|
Packit |
022b05 |
assuming that code points as high as 0x7ffffffff
|
|
Packit |
022b05 |
might be used. Subsequent versions of Unicode and ISO
|
|
Packit |
022b05 |
10646 have limited the upper bound to 0x10ffff.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
Consequently, the current version of UTF-8, defined in
|
|
Packit |
022b05 |
RFC 3629, does not require more than four octets to
|
|
Packit |
022b05 |
encode a valid code point."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= { pktcMtaCompliances 1 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaGroup OBJECT-GROUP
|
|
Packit |
022b05 |
OBJECTS {
|
|
Packit |
022b05 |
pktcMtaDevResetNow,
|
|
Packit |
022b05 |
pktcMtaDevSerialNumber,
|
|
Packit |
022b05 |
pktcMtaDevSwCurrentVers,
|
|
Packit |
022b05 |
pktcMtaDevFQDN,
|
|
Packit |
022b05 |
pktcMtaDevEndPntCount,
|
|
Packit |
022b05 |
pktcMtaDevEnabled,
|
|
Packit |
022b05 |
pktcMtaDevProvisioningCounter,
|
|
Packit |
022b05 |
pktcMtaDevErrorOid,
|
|
Packit |
022b05 |
pktcMtaDevErrorValue,
|
|
Packit |
022b05 |
pktcMtaDevErrorReason,
|
|
Packit |
022b05 |
pktcMtaDevTypeIdentifier,
|
|
Packit |
022b05 |
pktcMtaDevProvisioningState,
|
|
Packit |
022b05 |
pktcMtaDevHttpAccess,
|
|
Packit |
022b05 |
pktcMtaDevCertificate,
|
|
Packit |
022b05 |
pktcMtaDevCorrelationId,
|
|
Packit |
022b05 |
pktcMtaDevManufacturerCertificate,
|
|
Packit |
022b05 |
pktcMtaDevDhcpServerAddressType,
|
|
Packit |
022b05 |
pktcMtaDevDnsServerAddressType,
|
|
Packit |
022b05 |
pktcMtaDevTimeServerAddressType,
|
|
Packit |
022b05 |
pktcMtaDevProvConfigEncryptAlg,
|
|
Packit |
022b05 |
pktcMtaDevServerDhcp1,
|
|
Packit |
022b05 |
pktcMtaDevServerDhcp2,
|
|
Packit |
022b05 |
pktcMtaDevServerDns1,
|
|
Packit |
022b05 |
pktcMtaDevServerDns2,
|
|
Packit |
022b05 |
pktcMtaDevTimeServer,
|
|
Packit |
022b05 |
pktcMtaDevConfigFile,
|
|
Packit |
022b05 |
pktcMtaDevSnmpEntity,
|
|
Packit |
022b05 |
pktcMtaDevRealmPkinitGracePeriod,
|
|
Packit |
022b05 |
pktcMtaDevRealmTgsGracePeriod,
|
|
Packit |
022b05 |
pktcMtaDevRealmAvailSlot,
|
|
Packit |
022b05 |
pktcMtaDevRealmName,
|
|
Packit |
022b05 |
pktcMtaDevRealmOrgName,
|
|
Packit |
022b05 |
pktcMtaDevRealmUnsolicitedKeyMaxTimeout,
|
|
Packit |
022b05 |
pktcMtaDevRealmUnsolicitedKeyNomTimeout,
|
|
Packit |
022b05 |
pktcMtaDevRealmUnsolicitedKeyMaxRetries,
|
|
Packit |
022b05 |
pktcMtaDevRealmStatus,
|
|
Packit |
022b05 |
pktcMtaDevCmsAvailSlot,
|
|
Packit |
022b05 |
pktcMtaDevCmsFqdn,
|
|
Packit |
022b05 |
pktcMtaDevCmsKerbRealmName,
|
|
Packit |
022b05 |
pktcMtaDevCmsUnsolicitedKeyMaxTimeout,
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaDevCmsUnsolicitedKeyNomTimeout,
|
|
Packit |
022b05 |
pktcMtaDevCmsUnsolicitedKeyMaxRetries,
|
|
Packit |
022b05 |
pktcMtaDevCmsSolicitedKeyTimeout,
|
|
Packit |
022b05 |
pktcMtaDevCmsMaxClockSkew,
|
|
Packit |
022b05 |
pktcMtaDevCmsIpsecCtrl,
|
|
Packit |
022b05 |
pktcMtaDevCmsStatus,
|
|
Packit |
022b05 |
pktcMtaDevResetKrbTickets,
|
|
Packit |
022b05 |
pktcMtaDevProvUnsolicitedKeyMaxTimeout,
|
|
Packit |
022b05 |
pktcMtaDevProvUnsolicitedKeyNomTimeout,
|
|
Packit |
022b05 |
pktcMtaDevProvUnsolicitedKeyMaxRetries,
|
|
Packit |
022b05 |
pktcMtaDevProvKerbRealmName,
|
|
Packit |
022b05 |
pktcMtaDevProvSolicitedKeyTimeout,
|
|
Packit |
022b05 |
pktcMtaDevProvConfigHash,
|
|
Packit |
022b05 |
pktcMtaDevProvConfigKey,
|
|
Packit |
022b05 |
pktcMtaDevProvState,
|
|
Packit |
022b05 |
pktcMtaDevProvisioningTimer,
|
|
Packit |
022b05 |
pktcMtaDevTelephonyRootCertificate
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" A collection of objects for managing PacketCable or
|
|
Packit |
022b05 |
IPCablecom MTA implementations."
|
|
Packit |
022b05 |
::= { pktcMtaGroups 1 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaNotificationGroup NOTIFICATION-GROUP
|
|
Packit |
022b05 |
NOTIFICATIONS {
|
|
Packit |
022b05 |
pktcMtaDevProvisioningStatus,
|
|
Packit |
022b05 |
pktcMtaDevProvisioningEnrollment
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" A collection of notifications dealing with the change of
|
|
Packit |
022b05 |
MTA provisioning status."
|
|
Packit |
022b05 |
::= { pktcMtaGroups 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaBasicSmtaCompliance MODULE-COMPLIANCE
|
|
Packit |
022b05 |
STATUS current
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" The compliance statement for S-MTA devices
|
|
Packit |
022b05 |
that implement PacketCable or IPCablecom requirements.
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
This compliance statement applies to S-MTA implementations
|
|
Packit |
022b05 |
that support PacketCable or IPCablecom requirements,
|
|
Packit |
022b05 |
which are not IPv6-capable at the time of this
|
|
Packit |
022b05 |
RFC publication."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
MODULE -- Unconditionally Mandatory Groups for S-MTA devices
|
|
Packit |
022b05 |
MANDATORY-GROUPS {
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
pktcMtaGroup,
|
|
Packit |
022b05 |
pktcMtaNotificationGroup
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevDhcpServerAddressType
|
|
Packit |
022b05 |
SYNTAX InetAddressType { ipv4(1) }
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" Support for address types other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified and therefore is not
|
|
Packit |
022b05 |
required. It may be defined in future versions of
|
|
Packit |
022b05 |
this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevDnsServerAddressType
|
|
Packit |
022b05 |
SYNTAX InetAddressType { ipv4(1) }
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" Support for address types other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified and therefore is not
|
|
Packit |
022b05 |
required. It may be defined in future versions of
|
|
Packit |
022b05 |
this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevTimeServerAddressType
|
|
Packit |
022b05 |
SYNTAX InetAddressType { ipv4(1) }
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
" Support for address types other than 'ipv4(1)'
|
|
Packit |
022b05 |
is not presently specified and therefore is not
|
|
Packit |
022b05 |
required. It may be defined in future versions of
|
|
Packit |
022b05 |
this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevServerDhcp1
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevServerDhcp2
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevServerDns1
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevServerDns2
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevTimeServer
|
|
Packit |
022b05 |
SYNTAX InetAddress (SIZE(4))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support IPv4
|
|
Packit |
022b05 |
addresses. Other address types support may be defined in
|
|
Packit |
022b05 |
future versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevProvConfigEncryptAlg
|
|
Packit |
022b05 |
SYNTAX PktcMtaDevProvEncryptAlg
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"An implementation is only required to support
|
|
Packit |
022b05 |
values of none(0) and des64Cbcmode(1).
|
|
Packit |
022b05 |
An IV of zero is used to encrypt in des64Cbcmode, and
|
|
Packit |
022b05 |
the length of pktcMtaDevProvConfigKey is 64 bits, as
|
|
Packit |
022b05 |
defined in the PacketCable Security specification.
|
|
Packit |
022b05 |
Other encryption types may be defined in future
|
|
Packit |
022b05 |
versions of this MIB module."
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
OBJECT pktcMtaDevRealmOrgName
|
|
Packit |
022b05 |
SYNTAX LongUtf8String (SIZE (1..384))
|
|
Packit |
022b05 |
DESCRIPTION
|
|
Packit |
022b05 |
"The Organization Name field in X.509 certificates
|
|
Packit |
022b05 |
can contain up to 64 UTF-8 encoded characters, as
|
|
Packit |
022b05 |
defined in RFCs 3280 and 4630. Therefore, compliant
|
|
Packit |
022b05 |
devices are only required to support Organization
|
|
Packit |
022b05 |
Name values of up to 64 UTF-8 encoded characters.
|
|
Packit |
022b05 |
Given that RFCs 3280 and 4630 define the UTF-8 encoding,
|
|
Packit |
022b05 |
compliant devices must support a maximum size of 384
|
|
Packit |
022b05 |
octets for pktcMtaDevRealmOrgName. The calculation of
|
|
Packit |
022b05 |
384 octets comes from the RFC 3629 UTF-8 encoding
|
|
Packit |
022b05 |
definition whereby the UTF-8 encoded characters
|
|
Packit |
022b05 |
are encoded as sequences of 1 to 6 octets,
|
|
Packit |
022b05 |
assuming that code points as high as 0x7ffffffff
|
|
Packit |
022b05 |
might be used. Subsequent versions of Unicode and ISO
|
|
Packit |
022b05 |
10646 have limited the upper bound to 0x10ffff.
|
|
Packit |
022b05 |
Consequently, the current version of UTF-8, defined in
|
|
Packit |
022b05 |
RFC 3629 does not require more than four octets to
|
|
Packit |
022b05 |
encode a valid code point."
|
|
Packit |
022b05 |
MODULE DOCS-CABLE-DEVICE-MIB
|
|
Packit |
022b05 |
MANDATORY-GROUPS {
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
docsDevSoftwareGroupV2
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
MODULE DOCS-IETF-BPI2-MIB
|
|
Packit |
022b05 |
MANDATORY-GROUPS {
|
|
Packit |
022b05 |
docsBpi2CodeDownloadGroup
|
|
Packit |
022b05 |
}
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
::= { pktcMtaCompliances 2 }
|
|
Packit |
022b05 |
|
|
Packit |
022b05 |
END
|