Blame mibs/ietf/PKTC-IETF-MTA-MIB

Packit Service 9ccfef
PKTC-IETF-MTA-MIB DEFINITIONS ::= BEGIN
Packit Service 9ccfef
Packit Service 9ccfef
IMPORTS
Packit Service 9ccfef
    MODULE-IDENTITY,
Packit Service 9ccfef
    OBJECT-TYPE,
Packit Service 9ccfef
    OBJECT-IDENTITY,
Packit Service 9ccfef
    Unsigned32,
Packit Service 9ccfef
    Counter32,
Packit Service 9ccfef
    NOTIFICATION-TYPE,
Packit Service 9ccfef
    mib-2
Packit Service 9ccfef
          FROM SNMPv2-SMI                    -- [RFC2578]
Packit Service 9ccfef
    TEXTUAL-CONVENTION,
Packit Service 9ccfef
    RowStatus,
Packit Service 9ccfef
    TruthValue
Packit Service 9ccfef
          FROM SNMPv2-TC                     -- [RFC2579]
Packit Service 9ccfef
    OBJECT-GROUP,
Packit Service 9ccfef
    MODULE-COMPLIANCE,
Packit Service 9ccfef
    NOTIFICATION-GROUP
Packit Service 9ccfef
          FROM SNMPv2-CONF                   -- [RFC2580]
Packit Service 9ccfef
    InetAddressType,
Packit Service 9ccfef
    InetAddress
Packit Service 9ccfef
          FROM INET-ADDRESS-MIB              -- [RFC4001]
Packit Service 9ccfef
    sysDescr
Packit Service 9ccfef
          FROM SNMPv2-MIB                    -- [RFC3418]
Packit Service 9ccfef
    SnmpAdminString
Packit Service 9ccfef
          FROM SNMP-FRAMEWORK-MIB            -- [RFC3411]
Packit Service 9ccfef
    docsDevSoftwareGroupV2
Packit Service 9ccfef
          FROM DOCS-CABLE-DEVICE-MIB         -- [RFC4639]
Packit Service 9ccfef
    DocsX509ASN1DEREncodedCertificate,
Packit Service 9ccfef
    docsBpi2CodeDownloadGroup
Packit Service 9ccfef
          FROM DOCS-IETF-BPI2-MIB            -- [RFC4131]
Packit Service 9ccfef
    LongUtf8String
Packit Service 9ccfef
          FROM SYSAPPL-MIB                   -- [RFC2287]
Packit Service 9ccfef
    ifPhysAddress
Packit Service 9ccfef
          FROM IF-MIB;                       -- [RFC2863]
Packit Service 9ccfef
Packit Service 9ccfef
    pktcIetfMtaMib MODULE-IDENTITY
Packit Service 9ccfef
    LAST-UPDATED "200609180000Z" -- September 18, 2006
Packit Service 9ccfef
    ORGANIZATION "IETF IP over Cable Data Network Working Group"
Packit Service 9ccfef
    CONTACT-INFO
Packit Service 9ccfef
        "Eugene Nechamkin
Packit Service 9ccfef
         Broadcom Corporation,
Packit Service 9ccfef
         200-13711 International Place,
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
         Richmond, BC, V6V 2Z8
Packit Service 9ccfef
         CANADA
Packit Service 9ccfef
         Phone: +1 604 233 8500
Packit Service 9ccfef
         Email: enechamkin@broadcom.com
Packit Service 9ccfef
Packit Service 9ccfef
         Jean-Francois Mule
Packit Service 9ccfef
         Cable Television Laboratories, Inc.
Packit Service 9ccfef
         858 Coal Creek Circle
Packit Service 9ccfef
         Louisville, CO 80027-9750
Packit Service 9ccfef
         U.S.A.
Packit Service 9ccfef
         Phone: +1 303 661 9100
Packit Service 9ccfef
         Email: jf.mule@cablelabs.com
Packit Service 9ccfef
Packit Service 9ccfef
    IETF IPCDN Working Group
Packit Service 9ccfef
         General Discussion: ipcdn@ietf.org
Packit Service 9ccfef
         Subscribe: http://www.ietf.org/mailman/listinfo/ipcdn
Packit Service 9ccfef
         Archive: ftp://ftp.ietf.org/ietf-mail-archive/ipcdn
Packit Service 9ccfef
         Co-Chair: Jean-Francois Mule, jf.mule@cablelabs.com
Packit Service 9ccfef
         Co-Chair: Richard Woundy, Richard_Woundy@cable.comcast.com"
Packit Service 9ccfef
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
       "This MIB module defines the basic management object
Packit Service 9ccfef
        for the Multimedia Terminal Adapter devices compliant
Packit Service 9ccfef
        with PacketCable and IPCablecom requirements.
Packit Service 9ccfef
Packit Service 9ccfef
        Copyright (C) The IETF Trust (2006).  This version of
Packit Service 9ccfef
        this MIB module is part of RFC 4682; see the RFC itself for
Packit Service 9ccfef
        full legal notices."
Packit Service 9ccfef
Packit Service 9ccfef
    REVISION    "200609180000Z"   -- September 18, 2006
Packit Service 9ccfef
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
       "Initial version, published as RFC 4682."
Packit Service 9ccfef
Packit Service 9ccfef
::=  { mib-2 140 }
Packit Service 9ccfef
Packit Service 9ccfef
   -- Textual Conventions
Packit Service 9ccfef
Packit Service 9ccfef
PktcMtaDevProvEncryptAlg  ::= TEXTUAL-CONVENTION
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This textual convention defines various types of the
Packit Service 9ccfef
          encryption algorithms used for the encryption of the MTA
Packit Service 9ccfef
          configuration file.  The description of the encryption
Packit Service 9ccfef
          algorithm for each enumerated value is as follows:
Packit Service 9ccfef
Packit Service 9ccfef
          'none(0)'            no encryption is used,
Packit Service 9ccfef
          'des64CbcMode(1)'    DES 64-bit key in CBC mode,
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          't3Des192CbcMode(2)' 3DES 192-bit key in CBC mode,
Packit Service 9ccfef
          'aes128CbcMode(3)'   AES 128-bit key in CBC mode,
Packit Service 9ccfef
          'aes256CbcMode(4)'   AES 256-bit key in CBC mode."
Packit Service 9ccfef
    SYNTAX      INTEGER  {
Packit Service 9ccfef
                none             (0),
Packit Service 9ccfef
                des64CbcMode     (1),
Packit Service 9ccfef
                t3Des192CbcMode  (2),
Packit Service 9ccfef
                aes128CbcMode    (3),
Packit Service 9ccfef
                aes256CbcMode    (4)
Packit Service 9ccfef
    }
Packit Service 9ccfef
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
-- The MTA MIB module only supports a single Provisioning Server.
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaNotification OBJECT IDENTIFIER ::= { pktcIetfMtaMib 0 }
Packit Service 9ccfef
pktcMtaMibObjects  OBJECT IDENTIFIER ::= { pktcIetfMtaMib 1 }
Packit Service 9ccfef
pktcMtaDevBase     OBJECT IDENTIFIER ::= { pktcMtaMibObjects 1 }
Packit Service 9ccfef
pktcMtaDevServer   OBJECT IDENTIFIER ::= { pktcMtaMibObjects 2 }
Packit Service 9ccfef
pktcMtaDevSecurity OBJECT IDENTIFIER ::= { pktcMtaMibObjects 3 }
Packit Service 9ccfef
pktcMtaDevErrors   OBJECT IDENTIFIER ::= { pktcMtaMibObjects 4 }
Packit Service 9ccfef
pktcMtaConformance  OBJECT IDENTIFIER ::= { pktcIetfMtaMib 2 }
Packit Service 9ccfef
Packit Service 9ccfef
--
Packit Service 9ccfef
-- The following pktcMtaDevBase group describes the base MTA objects
Packit Service 9ccfef
--
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevResetNow  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      TruthValue
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object controls the MTA software reset.
Packit Service 9ccfef
          Reading this object always returns 'false'.  Setting this
Packit Service 9ccfef
          object to 'true' causes the device to reset immediately
Packit Service 9ccfef
          and the following actions to occur:
Packit Service 9ccfef
             1.  All connections (if present) are flushed locally.
Packit Service 9ccfef
             2.  All current actions such as ringing immediately
Packit Service 9ccfef
                 terminate.
Packit Service 9ccfef
             3.  Requests for signaling notifications, such as
Packit Service 9ccfef
                 notification based on digit map recognition, are
Packit Service 9ccfef
                 flushed.
Packit Service 9ccfef
             4.  All endpoints are disabled.
Packit Service 9ccfef
             5.  The provisioning flow is started at step MTA-1.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevResetNow, the agent MUST NOT retain the supplied
Packit Service 9ccfef
          value across MTA re-initializations or reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevBase 1 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevSerialNumber OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object specifies the manufacturer's serial
Packit Service 9ccfef
          number of this MTA.  The value of this object MUST be
Packit Service 9ccfef
          identical to the value specified in DHCP option 43,
Packit Service 9ccfef
          sub-option 4.  The list of sub-options for DHCP option
Packit Service 9ccfef
          43 are defined in the PacketCable MTA Device
Packit Service 9ccfef
          Provisioning Specification."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevBase 2 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevSwCurrentVers OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object identifies the software version currently
Packit Service 9ccfef
          operating in the MTA.
Packit Service 9ccfef
          The MTA MUST return a string descriptive of the current
Packit Service 9ccfef
          software load.  This object should use the syntax
Packit Service 9ccfef
          defined by the individual vendor to identify the software
Packit Service 9ccfef
          version.  The data presented in this object MUST be
Packit Service 9ccfef
          identical to the software version information contained
Packit Service 9ccfef
          in the 'sysDescr' MIB object of the MTA.  The value of
Packit Service 9ccfef
          this object MUST be identical to the value specified in
Packit Service 9ccfef
          DHCP option 43, sub-option 6.  The list of sub-options for
Packit Service 9ccfef
          DHCP option 43 are defined in the PacketCable MTA Device
Packit Service 9ccfef
          Provisioning Specification."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification."
Packit Service 9ccfef
Packit Service 9ccfef
::= { pktcMtaDevBase 3 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevFQDN      OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the Fully Qualified Domain Name for
Packit Service 9ccfef
          this MTA.  The MTA FQDN is used to uniquely identify the
Packit Service 9ccfef
          device to the PacketCable back office elements."
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
    ::= { pktcMtaDevBase 4 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevEndPntCount     OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (1..255)
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the number of physical endpoints for
Packit Service 9ccfef
          this MTA."
Packit Service 9ccfef
    ::= { pktcMtaDevBase 5 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevEnabled     OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      TruthValue
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
         " This object contains the MTA Admin Status of this device.
Packit Service 9ccfef
           If this object is set to 'true', the MTA is
Packit Service 9ccfef
           administratively enabled, and the MTA MUST be able to
Packit Service 9ccfef
           interact with the PacketCable entities, such as CMS,
Packit Service 9ccfef
           Provisioning Server, KDC, and other MTAs and MGs on all
Packit Service 9ccfef
           PacketCable interfaces.
Packit Service 9ccfef
           If this object is set to 'false', the MTA is
Packit Service 9ccfef
           administratively disabled, and the MTA MUST perform the
Packit Service 9ccfef
           following actions for all endpoints:
Packit Service 9ccfef
               - Shut down all media sessions, if present.
Packit Service 9ccfef
               - Shut down Network Control Signaling (NCS)
Packit Service 9ccfef
               signaling by following the Restart in
Packit Service 9ccfef
               Progress procedures in the PacketCable NCS
Packit Service 9ccfef
               specification.
Packit Service 9ccfef
           The MTA must execute all actions required to
Packit Service 9ccfef
           enable or disable the telephony services for all
Packit Service 9ccfef
           endpoints immediately upon receipt of an SNMP SET
Packit Service 9ccfef
           operation.
Packit Service 9ccfef
Packit Service 9ccfef
           Additionally, the MTA MUST maintain the SNMP Interface
Packit Service 9ccfef
           for management and also the SNMP Key management interface.
Packit Service 9ccfef
           Also, the MTA MUST NOT continue Kerberized key management
Packit Service 9ccfef
           with CMSes until this object is set to 'true'.
Packit Service 9ccfef
           Note: MTAs MUST renew the CMS Kerberos tickets according
Packit Service 9ccfef
           to the PacketCable Security or IPCablecom Specification.
Packit Service 9ccfef
           If a value is written into an instance of
Packit Service 9ccfef
           pktcMtaDevEnabled, the agent MUST NOT retain the supplied
Packit Service 9ccfef
           value across MTA re-initializations or reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          PacketCable Security Specification;
Packit Service 9ccfef
          PacketCable Network-Based Call Signaling Protocol
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevBase 6 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevTypeIdentifier     OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object provides the MTA device type identifier.  The
Packit Service 9ccfef
          value of this object must be a copy of the DHCP option 60
Packit Service 9ccfef
          value exchanged between the MTA and the DHCP server.  The
Packit Service 9ccfef
          DHCP option 60 value contains an ASCII-encoded string
Packit Service 9ccfef
          identifying capabilities of the MTA as defined in the
Packit Service 9ccfef
          PacketCable MTA Device Provisioning Specification."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " RFC 2132, DHCP Options and BOOTP Vendor Extensions;
Packit Service 9ccfef
          PacketCable MTA Device Provisioning Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevBase 7 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvisioningState     OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      INTEGER {
Packit Service 9ccfef
                pass                      (1),
Packit Service 9ccfef
                inProgress                (2),
Packit Service 9ccfef
                failConfigFileError       (3),
Packit Service 9ccfef
                passWithWarnings          (4),
Packit Service 9ccfef
                passWithIncompleteParsing (5),
Packit Service 9ccfef
                failureInternalError      (6),
Packit Service 9ccfef
                failureOtherReason        (7)
Packit Service 9ccfef
    }
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object indicates the completion state of the MTA
Packit Service 9ccfef
          device provisioning process.
Packit Service 9ccfef
Packit Service 9ccfef
          pass:
Packit Service 9ccfef
          If the configuration file could be parsed successfully
Packit Service 9ccfef
          and the MTA is able to reflect the same in its
Packit Service 9ccfef
          MIB, the MTA MUST return the value 'pass'.
Packit Service 9ccfef
Packit Service 9ccfef
          inProgress:
Packit Service 9ccfef
          If the MTA is in the process of being provisioned,
Packit Service 9ccfef
          the MTA MUST return the value 'inProgress'.
Packit Service 9ccfef
Packit Service 9ccfef
          failConfigFileError:
Packit Service 9ccfef
          If the configuration file was in error due to incorrect
Packit Service 9ccfef
          values in the mandatory parameters, the MTA MUST reject
Packit Service 9ccfef
          the configuration file, and the MTA MUST return the value
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          'failConfigFileError'.
Packit Service 9ccfef
Packit Service 9ccfef
          passWithWarnings:
Packit Service 9ccfef
          If the configuration file had proper values for all the
Packit Service 9ccfef
          mandatory parameters but has errors in any of the optional
Packit Service 9ccfef
          parameters (this includes any vendor-specific Object
Packit Service 9ccfef
          Identifiers (OIDs) that are incorrect or not known
Packit Service 9ccfef
          to the MTA), the MTA MUST return the value
Packit Service 9ccfef
          'passWithWarnings'.
Packit Service 9ccfef
Packit Service 9ccfef
          passWithIncompleteParsing:
Packit Service 9ccfef
          If the configuration file is valid but the MTA cannot
Packit Service 9ccfef
          reflect the same in its configuration (for example, too
Packit Service 9ccfef
          many entries caused memory exhaustion), it must accept
Packit Service 9ccfef
          the CMS configuration entries related, and the MTA MUST
Packit Service 9ccfef
          return the value 'passWithIncompleteParsing'.
Packit Service 9ccfef
Packit Service 9ccfef
          failureInternalError:
Packit Service 9ccfef
          If the configuration file cannot be parsed due to an
Packit Service 9ccfef
          Internal error, the MTA MUST return the value
Packit Service 9ccfef
          'failureInternalError'.
Packit Service 9ccfef
Packit Service 9ccfef
          failureOtherReason:
Packit Service 9ccfef
          If the MTA cannot accept the configuration file for any
Packit Service 9ccfef
          other reason than the ones stated above, the MTA MUST
Packit Service 9ccfef
          return the value 'failureOtherReason'.
Packit Service 9ccfef
Packit Service 9ccfef
          When a final SNMP INFORM is sent as part of Step 25 of the
Packit Service 9ccfef
          MTA Provisioning process, this parameter is also included
Packit Service 9ccfef
          in the final INFORM message."
Packit Service 9ccfef
       REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevBase 8 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevHttpAccess  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      TruthValue
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object indicates whether the HTTP protocol is
Packit Service 9ccfef
          supported for the MTA configuration file transfer."
Packit Service 9ccfef
    ::= { pktcMtaDevBase 9 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvisioningTimer  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (0..30)
Packit Service 9ccfef
    UNITS       "minutes"
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the time interval for the provisioning
Packit Service 9ccfef
          flow to complete.  The MTA MUST finish all provisioning
Packit Service 9ccfef
          operations starting from the moment when an MTA receives
Packit Service 9ccfef
          its DHCP ACK and ending at the moment when the MTA
Packit Service 9ccfef
          downloads its configuration file (e.g., MTA5 to MTA23)
Packit Service 9ccfef
          within the period of time set by this object.
Packit Service 9ccfef
          Failure to comply with this condition constitutes
Packit Service 9ccfef
          a provisioning flow failure.  If the object is set to 0,
Packit Service 9ccfef
          the MTA MUST ignore the provisioning timer condition.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevProvisioningTimer, the agent MUST NOT retain the
Packit Service 9ccfef
          supplied value across MTA re-initializations or reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification."
Packit Service 9ccfef
    DEFVAL {10}
Packit Service 9ccfef
    ::=  {pktcMtaDevBase 10}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvisioningCounter  OBJECT-TYPE
Packit Service 9ccfef
      SYNTAX      Counter32
Packit Service 9ccfef
      MAX-ACCESS  read-only
Packit Service 9ccfef
      STATUS      current
Packit Service 9ccfef
      DESCRIPTION
Packit Service 9ccfef
            "This object counts the number of times the
Packit Service 9ccfef
            provisioning cycle has looped through step MTA-1."
Packit Service 9ccfef
      ::= {pktcMtaDevBase 11}
Packit Service 9ccfef
Packit Service 9ccfef
 pktcMtaDevErrorOidsTable  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX SEQUENCE OF PktcMtaDevErrorOidsEntry
Packit Service 9ccfef
    MAX-ACCESS not-accessible
Packit Service 9ccfef
    STATUS current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This table contains the list of configuration errors or
Packit Service 9ccfef
          warnings the MTA encountered when parsing the
Packit Service 9ccfef
          configuration file it received from the Provisioning
Packit Service 9ccfef
          Server.
Packit Service 9ccfef
          For each error, an entry is created in this table,
Packit Service 9ccfef
          containing the configuration parameters the MTA rejected
Packit Service 9ccfef
          and the associated reason (e.g., wrong or unknown OID,
Packit Service 9ccfef
          inappropriate object values).  If the MTA
Packit Service 9ccfef
          did not report a provisioning state of 'pass(1)' in
Packit Service 9ccfef
          the pktcMtaDevProvisioningState object, this table MUST be
Packit Service 9ccfef
          populated for each error or warning instance.  Even if
Packit Service 9ccfef
          different parameters share the same error type (e.g., all
Packit Service 9ccfef
          realm name configuration parameters are invalid), all
Packit Service 9ccfef
          observed errors or warnings must be reported as
Packit Service 9ccfef
          different instances.  Errors are placed into the table in
Packit Service 9ccfef
          no particular order.  The table MUST be cleared each time
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          the MTA reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification."
Packit Service 9ccfef
    ::= {pktcMtaDevBase 12 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevErrorOidsEntry  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX PktcMtaDevErrorOidsEntry
Packit Service 9ccfef
    MAX-ACCESS not-accessible
Packit Service 9ccfef
    STATUS current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This entry contains the necessary information the MTA MUST
Packit Service 9ccfef
          attempt to provide in case of configuration file errors or
Packit Service 9ccfef
          warnings."
Packit Service 9ccfef
    INDEX { pktcMtaDevErrorOidIndex }
Packit Service 9ccfef
             ::= {pktcMtaDevErrorOidsTable 1}
Packit Service 9ccfef
Packit Service 9ccfef
PktcMtaDevErrorOidsEntry ::= SEQUENCE {
Packit Service 9ccfef
    pktcMtaDevErrorOidIndex Unsigned32,
Packit Service 9ccfef
    pktcMtaDevErrorOid      SnmpAdminString,
Packit Service 9ccfef
    pktcMtaDevErrorValue    SnmpAdminString,
Packit Service 9ccfef
    pktcMtaDevErrorReason   SnmpAdminString
Packit Service 9ccfef
    }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevErrorOidIndex  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (1..1024)
Packit Service 9ccfef
    MAX-ACCESS  not-accessible
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object is the index of the MTA configuration error
Packit Service 9ccfef
          table.  It is an integer value that starts at value '1'
Packit Service 9ccfef
          and is incremented for each encountered configuration
Packit Service 9ccfef
          file error or warning.
Packit Service 9ccfef
Packit Service 9ccfef
          The maximum number of errors or warnings that can be
Packit Service 9ccfef
          recorded in the pktcMtaDevErrorOidsTable is set to 1024 as
Packit Service 9ccfef
          a configuration file is usually validated by operators
Packit Service 9ccfef
          before deployment.  Given the possible number of
Packit Service 9ccfef
          configuration parameter assignments in the MTA
Packit Service 9ccfef
          configuration file, 1024 is perceived as a sufficient
Packit Service 9ccfef
          limit even with future extensions.
Packit Service 9ccfef
Packit Service 9ccfef
          If the number of the errors in the configuration file
Packit Service 9ccfef
          exceeds 1024, all errors beyond the 1024th one MUST
Packit Service 9ccfef
          be ignored and not be reflected in the
Packit Service 9ccfef
          pktcMtaDevErrorOidsTable."
Packit Service 9ccfef
Packit Service 9ccfef
    ::= {pktcMtaDevErrorOidsEntry 1}
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevErrorOid  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains a human readable representation
Packit Service 9ccfef
          (character string) of the OID corresponding to the
Packit Service 9ccfef
          configuration file parameter that caused the particular
Packit Service 9ccfef
          error.
Packit Service 9ccfef
          For example, if the value of the pktcMtaDevEnabled object
Packit Service 9ccfef
          in the configuration file caused an error, then this
Packit Service 9ccfef
          object instance will contain the human-readable string of
Packit Service 9ccfef
          '1.3.6.1.2.1.140.1.1.6.0'.
Packit Service 9ccfef
          If the MTA generated an error because it was not able
Packit Service 9ccfef
          to recognize a particular OID, then this object
Packit Service 9ccfef
          instance would contain an empty value (zero-length
Packit Service 9ccfef
          string).
Packit Service 9ccfef
          For example, if the value of an OID in the configuration
Packit Service 9ccfef
          file was interpreted by the MTA as being 1.2.3.4.5, and if
Packit Service 9ccfef
          the MTA was not able to recognize this OID as a valid one,
Packit Service 9ccfef
          this object instance will contain a zero-length string.
Packit Service 9ccfef
Packit Service 9ccfef
          If the number of errors in the configuration file exceeds
Packit Service 9ccfef
          1024, then for all subsequent errors, the
Packit Service 9ccfef
          pktcMtaDevErrorOid of the table's 1024th entry MUST
Packit Service 9ccfef
          contain a human-readable representation of the
Packit Service 9ccfef
          pktcMtaDevErrorsTooManyErrors object; i.e., the string
Packit Service 9ccfef
          '1.3.6.1.2.1.140.1.1.4.1.0'.
Packit Service 9ccfef
          Note that the syntax of this object is SnmpAdminString
Packit Service 9ccfef
          instead of OBJECT IDENTIFIER because the object value may
Packit Service 9ccfef
          not be a valid OID due to human or configuration tool
Packit Service 9ccfef
          encoding errors."
Packit Service 9ccfef
Packit Service 9ccfef
    ::= {pktcMtaDevErrorOidsEntry 2}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevErrorValue  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the value of the OID corresponding to
Packit Service 9ccfef
          the configuration file parameter that caused the error.
Packit Service 9ccfef
          If the MTA cannot recognize the OID of the
Packit Service 9ccfef
          configuration parameter causing the error, then this
Packit Service 9ccfef
          object instance contains the OID itself as interpreted
Packit Service 9ccfef
          by the MTA in human-readable representation.
Packit Service 9ccfef
          If the MTA can recognize the OID but generate an error due
Packit Service 9ccfef
          to a wrong value of the parameter, then the object
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          instance contains the erroneous value of the parameter as
Packit Service 9ccfef
          read from the configuration file.
Packit Service 9ccfef
          In both cases, the value of this object must be
Packit Service 9ccfef
          represented in human-readable form as a character string.
Packit Service 9ccfef
          For example, if the value of the pktcMtaDevEnabled object
Packit Service 9ccfef
          in the configuration file was 3 (invalid value), then the
Packit Service 9ccfef
          pktcMtaDevErrorValue object instance will contain the
Packit Service 9ccfef
          human-readable (string) representation of value '3'.
Packit Service 9ccfef
          Similarly, if the OID in the configuration file has been
Packit Service 9ccfef
          interpreted by the MTA as being 1.2.3.4.5 and the MTA
Packit Service 9ccfef
          cannot recognize this OID as a valid one, then this
Packit Service 9ccfef
          pktcMtaDevErrorValue object instance will contain human
Packit Service 9ccfef
          readable (string) representation of value '1.2.3.4.5'.
Packit Service 9ccfef
Packit Service 9ccfef
          If the number of errors in the configuration file exceeds
Packit Service 9ccfef
          1024, then for all subsequent errors, the
Packit Service 9ccfef
          pktcMtaDevErrorValue of the table's 1024th entry MUST
Packit Service 9ccfef
          contain a human-readable representation of the
Packit Service 9ccfef
          pktcMtaDevErrorsTooManyErrors object; i.e., the string
Packit Service 9ccfef
          '1.3.6.1.2.1.140.1.1.4.1.0'."
Packit Service 9ccfef
Packit Service 9ccfef
    ::= {pktcMtaDevErrorOidsEntry 3}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevErrorReason  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object indicates the reason for the error or warning,
Packit Service 9ccfef
          as per the MTA's interpretation, in human-readable form.
Packit Service 9ccfef
          For example:
Packit Service 9ccfef
          'VALUE NOT IN RANGE', 'VALUE DOES NOT MATCH TYPE',
Packit Service 9ccfef
          'UNSUPPORTED VALUE', 'LAST 4 BITS MUST BE SET TO ZERO',
Packit Service 9ccfef
          'OUT OF MEMORY - CANNOT STORE'.
Packit Service 9ccfef
          This object may also contain vendor specific errors for
Packit Service 9ccfef
          private vendor OIDs and any proprietary error codes or
Packit Service 9ccfef
          messages that can help diagnose configuration errors.
Packit Service 9ccfef
Packit Service 9ccfef
          If the number of errors in the configuration file exceeds
Packit Service 9ccfef
          1024, then for all subsequent errors, the
Packit Service 9ccfef
          pktcMtaDevErrorReason of the table's 1024th entry MUST
Packit Service 9ccfef
          contain a human-readable string indicating the reason
Packit Service 9ccfef
          for an error; for example,
Packit Service 9ccfef
          'Too many errors in the configuration file'."
Packit Service 9ccfef
    ::= {pktcMtaDevErrorOidsEntry 4}
Packit Service 9ccfef
Packit Service 9ccfef
--
Packit Service 9ccfef
-- The following group describes server access and parameters used
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
-- for the initial MTA provisioning and bootstrapping phases.
Packit Service 9ccfef
--
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevDhcpServerAddressType  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      InetAddressType
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the Internet address type for the
Packit Service 9ccfef
          PacketCable DHCP servers specified in MTA MIB."
Packit Service 9ccfef
    DEFVAL { ipv4 }
Packit Service 9ccfef
    ::= { pktcMtaDevServer 1}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevServerDhcp1   OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      InetAddress
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the Internet Address of the primary
Packit Service 9ccfef
          DHCP server the MTA uses during provisioning.
Packit Service 9ccfef
          The type of this address is determined by the value of
Packit Service 9ccfef
          the pktcMtaDevDhcpServerAddressType object.
Packit Service 9ccfef
          When the latter has the value 'ipv4(1)', this object
Packit Service 9ccfef
          contains the IP address of the primary DHCP
Packit Service 9ccfef
          server.  It is provided by the CM to the MTA via the DHCP
Packit Service 9ccfef
          option code 122, sub-option 1, as defined in RFC 3495.
Packit Service 9ccfef
Packit Service 9ccfef
          The behavior of this object when the value of
Packit Service 9ccfef
          pktcMtaDevDhcpServerAddressType is other than 'ipv4(1)'
Packit Service 9ccfef
          is not presently specified, but it may be specified
Packit Service 9ccfef
          in future versions of this MIB module.
Packit Service 9ccfef
          If this object is of value
Packit Service 9ccfef
          0.0.0.0, the MTA MUST stop all provisioning
Packit Service 9ccfef
          attempts, as well as all other activities.
Packit Service 9ccfef
          If this object is of value 255.255.255.255, it means
Packit Service 9ccfef
          that there was no preference given for the primary
Packit Service 9ccfef
          DHCP server, and, the MTA must follow the logic of
Packit Service 9ccfef
          RFC2131, and the value of DHCP option 122,
Packit Service 9ccfef
          sub-option 2, must be ignored."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          RFC 2131, Dynamic Host Configuration Protocol;
Packit Service 9ccfef
          RFC 3495, DHCP Option for CableLabs Client Configuration."
Packit Service 9ccfef
    ::= { pktcMtaDevServer 2 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevServerDhcp2  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      InetAddress
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the Internet Address of the secondary
Packit Service 9ccfef
          DHCP server the MTA uses during provisioning.
Packit Service 9ccfef
          The type of this address is determined by the value of
Packit Service 9ccfef
          the pktcMtaDevDhcpServerAddressType object.
Packit Service 9ccfef
          When the latter has the value 'ipv4(1)', this object
Packit Service 9ccfef
          contains the IP address of the secondary DHCP
Packit Service 9ccfef
          server.  It is provided by the CM to the MTA via the DHCP
Packit Service 9ccfef
          option code 122, sub-option 2, as defined in RFC 3495.
Packit Service 9ccfef
Packit Service 9ccfef
          The behavior of this object when the value of
Packit Service 9ccfef
          pktcMtaDevDhcpServerAddressType is other than 'ipv4(1)'
Packit Service 9ccfef
          is not presently specified, but it may be specified
Packit Service 9ccfef
          in future versions of this MIB module.
Packit Service 9ccfef
          If there was no secondary DHCP server provided in DHCP
Packit Service 9ccfef
          Option 122, sub-option 2, this object must return the value
Packit Service 9ccfef
          0.0.0.0."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          RFC 3495, DHCP Option for CableLabs Client Configuration."
Packit Service 9ccfef
          ::= { pktcMtaDevServer 3 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevDnsServerAddressType  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      InetAddressType
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the Internet address type for the
Packit Service 9ccfef
          PacketCable DNS servers specified in MTA MIB."
Packit Service 9ccfef
    DEFVAL { ipv4 }
Packit Service 9ccfef
    ::= { pktcMtaDevServer 4}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevServerDns1  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      InetAddress
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the IP Address of the primary
Packit Service 9ccfef
          DNS server to be used by the MTA.  The type of this address
Packit Service 9ccfef
          is determined by the value of the
Packit Service 9ccfef
          pktcMtaDevDnsServerAddressType object.
Packit Service 9ccfef
          When the latter has the value 'ipv4(1)', this object
Packit Service 9ccfef
          contains the IP address of the primary DNS server.
Packit Service 9ccfef
          As defined in RFC 2132, PacketCable-compliant MTAs receive
Packit Service 9ccfef
          the IP addresses of the DNS Servers in DHCP option 6.
Packit Service 9ccfef
          The behavior of this object when the value of
Packit Service 9ccfef
          pktcMtaDevDnsServerAddressType is other than 'ipv4(1)'
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          is not presently specified, but it may be specified
Packit Service 9ccfef
          in future versions of this MIB module.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevServerDns1, the agent MUST NOT retain the
Packit Service 9ccfef
          supplied value across MTA re-initializations or reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          RFC 2132, DHCP Options and BOOTP Vendor Extensions."
Packit Service 9ccfef
    ::= { pktcMtaDevServer 5 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevServerDns2  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      InetAddress
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the IP Address of the secondary
Packit Service 9ccfef
          DNS server to be used by the MTA.  The type of this address
Packit Service 9ccfef
          is determined by the value of the
Packit Service 9ccfef
          pktcMtaDevDnsServerAddressType object.
Packit Service 9ccfef
          When the latter has the value 'ipv4(1)', this object
Packit Service 9ccfef
          contains the IP address of the secondary DNS
Packit Service 9ccfef
          server.  As defined in RFC 2132, PacketCable-compliant MTAs
Packit Service 9ccfef
          receive the IP addresses of the DNS Servers in DHCP
Packit Service 9ccfef
          option 6.
Packit Service 9ccfef
          The behavior of this object when the value of
Packit Service 9ccfef
          pktcMtaDevDnsServerAddressType is other than 'ipv4(1)'
Packit Service 9ccfef
          is not presently specified, but it may be specified
Packit Service 9ccfef
          in future versions of this MIB module.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevServerDns2, the agent MUST NOT retain the
Packit Service 9ccfef
          supplied value across MTA re-initializations or reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          RFC 2132, DHCP Options and BOOTP Vendor Extensions."
Packit Service 9ccfef
    ::= { pktcMtaDevServer 6 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevTimeServerAddressType  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      InetAddressType
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the Internet address type for the
Packit Service 9ccfef
          PacketCable Time servers specified in MTA MIB."
Packit Service 9ccfef
    DEFVAL { ipv4 }
Packit Service 9ccfef
    ::= { pktcMtaDevServer 7}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevTimeServer   OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      InetAddress
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the Internet Address of the Time
Packit Service 9ccfef
          Server used by an S-MTA for Time Synchronization.  The type
Packit Service 9ccfef
          of this address is determined by the value of the
Packit Service 9ccfef
          pktcMtaDevTimeServerAddressType object.
Packit Service 9ccfef
          When the latter has the value 'ipv4(1)', this object
Packit Service 9ccfef
          contains the IP address of the Time Server used for Time
Packit Service 9ccfef
          Synchronization.
Packit Service 9ccfef
          In the case of an S-MTA, this object must be
Packit Service 9ccfef
          populated with a value other than 0.0.0.0 as obtained
Packit Service 9ccfef
          from DHCP option 4.  The protocol by which the time of day
Packit Service 9ccfef
          MUST be retrieved is defined in RFC 868.
Packit Service 9ccfef
          In the case of an E-MTA, this object must contain a
Packit Service 9ccfef
          value of 0.0.0.0 if the address type is 'ipv4(1)' since
Packit Service 9ccfef
          an E-MTA does not use the Time Protocol for time
Packit Service 9ccfef
          synchronization (an E-MTA uses the time retrieved by the
Packit Service 9ccfef
          DOCSIS cable modem).
Packit Service 9ccfef
          The behavior of this object when the value of
Packit Service 9ccfef
          pktcMtaDevTimeServerAddressType is other than 'ipv4(1)'
Packit Service 9ccfef
          is not presently specified, but it may be specified in
Packit Service 9ccfef
          future versions of this MIB module.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevTimeServer, the agent MUST NOT retain the
Packit Service 9ccfef
          supplied value across MTA re-initializations or reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " RFC 868, Time Protocol;
Packit Service 9ccfef
          RFC 2131, Dynamic Host Configuration Protocol;
Packit Service 9ccfef
          RFC 2132, DHCP Options and BOOTP Vendor Extensions."
Packit Service 9ccfef
    ::= { pktcMtaDevServer 8}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevConfigFile  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object specifies the MTA device configuration file
Packit Service 9ccfef
          information, including the access method, the server name,
Packit Service 9ccfef
          and the configuration file name.  The value of this object
Packit Service 9ccfef
          is the Uniform Resource Locator (URL) of the configuration
Packit Service 9ccfef
          file for TFTP or HTTP download.
Packit Service 9ccfef
          If this object value is a TFTP URL, it must be formatted
Packit Service 9ccfef
          as defined in RFC 3617.
Packit Service 9ccfef
          If this object value is an HTTP URL, it must be formatted
Packit Service 9ccfef
          as defined in RFC 2616.
Packit Service 9ccfef
          If the MTA SNMP Enrollment mechanism is used, then the MTA
Packit Service 9ccfef
          must download the file provided by the Provisioning Server
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          during provisioning via an SNMP SET on this object.
Packit Service 9ccfef
          If the MTA SNMP Enrollment mechanism is not used, this
Packit Service 9ccfef
          object MUST contain the URL value corresponding to the
Packit Service 9ccfef
          'siaddr' and 'file' fields received in the DHCP ACK to
Packit Service 9ccfef
          locate the configuration file: the 'siaddr' and 'file'
Packit Service 9ccfef
          fields represent the host and file of the TFTP URL,
Packit Service 9ccfef
          respectively.  In this case, the MTA MUST return an
Packit Service 9ccfef
          'inconsistentValue' error in response to SNMP SET
Packit Service 9ccfef
          operations.
Packit Service 9ccfef
          The MTA MUST return a zero-length string if the server
Packit Service 9ccfef
          address (host part of the URL) is unknown.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevConfigFile, the agent MUST NOT retain the
Packit Service 9ccfef
          supplied value across MTA re-initializations or reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          RFC 3617, URI Scheme for TFTP; RFC 2616, HTTP 1.1"
Packit Service 9ccfef
    ::= { pktcMtaDevServer 9 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevSnmpEntity  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the FQDN of the SNMP entity of the
Packit Service 9ccfef
          Provisioning Server.  When the MTA SNMP Enrollment
Packit Service 9ccfef
          Mechanism is used, this object represents the server that
Packit Service 9ccfef
          the MTA communicates with, that it receives the
Packit Service 9ccfef
          configuration file URL from, and that it sends the
Packit Service 9ccfef
          enrollment notification to.  The SNMP entity is also the
Packit Service 9ccfef
          destination entity for all the provisioning
Packit Service 9ccfef
          notifications.  It may be used for post-provisioning
Packit Service 9ccfef
          SNMP operations.  During the provisioning phase, this
Packit Service 9ccfef
          SNMP entity FQDN is supplied to the MTA via DHCP option
Packit Service 9ccfef
          122, sub-option 3, as defined in RFC 3495.  The MTA must
Packit Service 9ccfef
          resolve the FQDN value before its very first network
Packit Service 9ccfef
          interaction with the SNMP entity during the provisioning
Packit Service 9ccfef
          phase."
Packit Service 9ccfef
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          RFC 3495, DHCP Option for CableLabs Client Configuration."
Packit Service 9ccfef
    ::= { pktcMtaDevServer 10 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvConfigHash  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      OCTET STRING (SIZE(20))
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the hash value of the contents of the
Packit Service 9ccfef
          configuration file.
Packit Service 9ccfef
          The authentication algorithm is Secure Hashing Algorithm
Packit Service 9ccfef
          1 (SHA-1), and the length is 160 bits.  The hash
Packit Service 9ccfef
          calculation MUST follow the requirements defined in the
Packit Service 9ccfef
          PacketCable Security Specification.  When the MTA SNMP
Packit Service 9ccfef
          Enrollment mechanism is used, this hash value is
Packit Service 9ccfef
          calculated and sent to the MTA prior to sending the
Packit Service 9ccfef
          config file.  This object value is then provided by the
Packit Service 9ccfef
          Provisioning server via an SNMP SET operation.
Packit Service 9ccfef
          When the MTA SNMP Enrollment mechanism is not in use, the
Packit Service 9ccfef
          hash value is provided in the configuration file itself,
Packit Service 9ccfef
          and it is also calculated by the MTA.  This object value
Packit Service 9ccfef
          MUST represent the hash value calculated by the MTA.
Packit Service 9ccfef
          When the MTA SNMP Enrollment mechanism is not in use, the
Packit Service 9ccfef
          MTA must reject all SNMP SET operations on this object and
Packit Service 9ccfef
          return an 'inconsistentValue' error.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevProvConfigHash, the agent MUST NOT retain the
Packit Service 9ccfef
          supplied value across MTA re-initializations or reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          PacketCable Security Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevServer 11 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvConfigKey  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      OCTET STRING (SIZE(32))
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the key used to encrypt/decrypt
Packit Service 9ccfef
          the configuration file when secure SNMPv3 provisioning
Packit Service 9ccfef
          is used.
Packit Service 9ccfef
          The value of this object is provided along with the
Packit Service 9ccfef
          configuration file information (pktcMtaDevConfigFile)
Packit Service 9ccfef
          and hash (pktcMtaDevProvConfigHash) by the Provisioning
Packit Service 9ccfef
          Server via SNMP SET once the configuration file has been
Packit Service 9ccfef
          created, as defined by the PacketCable Security
Packit Service 9ccfef
          specification.
Packit Service 9ccfef
Packit Service 9ccfef
          The privacy algorithm is defined by the
Packit Service 9ccfef
          pktcMtaDevProvConfigEncryptAlg MIB object.  The
Packit Service 9ccfef
          MTA requirements related to the privacy algorithm are
Packit Service 9ccfef
          defined in the PacketCable Security Specification.
Packit Service 9ccfef
Packit Service 9ccfef
          If this object is set at any other provisioning step than
Packit Service 9ccfef
          that allowed by the PacketCable MTA Device
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          Provisioning Specification, the MTA SHOULD return
Packit Service 9ccfef
          an 'inconsistentValue' error.
Packit Service 9ccfef
          This object must not be used in non secure provisioning
Packit Service 9ccfef
          mode.  In non-secure provisioning modes, the MTA SHOULD
Packit Service 9ccfef
          return an 'inconsistentValue' in response to SNMP SET
Packit Service 9ccfef
          operations, and the MTA SHOULD return a zero-length
Packit Service 9ccfef
          string in response to SNMP GET operations.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevProvConfigKey, the agent MUST NOT retain the
Packit Service 9ccfef
          supplied value across MTA re-initializations or reboots."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          PacketCable Security Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevServer 12 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvConfigEncryptAlg   OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      PktcMtaDevProvEncryptAlg
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the encryption algorithm used for
Packit Service 9ccfef
          privacy protection of the MTA Configuration File content."
Packit Service 9ccfef
    DEFVAL { des64CbcMode }
Packit Service 9ccfef
    ::= { pktcMtaDevServer 13 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvSolicitedKeyTimeout  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (0..180)
Packit Service 9ccfef
    UNITS       "seconds"
Packit Service 9ccfef
    MAX-ACCESS  read-write
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines a Kerberos Key Management timer on the
Packit Service 9ccfef
          MTA.  It is the time period during which the MTA saves the
Packit Service 9ccfef
          nonce and Server Kerberos Principal Identifier to match an
Packit Service 9ccfef
          AP Request and its associated AP Reply response from the
Packit Service 9ccfef
          Provisioning Server.
Packit Service 9ccfef
          After the timeout has been exceeded, the client discards
Packit Service 9ccfef
          this (nonce, Server Kerberos Principal Identifier) pair,
Packit Service 9ccfef
          after which it will no longer accept a matching AP Reply.
Packit Service 9ccfef
          This timer only applies when the Provisioning Server
Packit Service 9ccfef
          initiated key management for SNMPv3 (with a
Packit Service 9ccfef
          Wake Up message).
Packit Service 9ccfef
          If this object is set to a zero value, the MTA MUST return
Packit Service 9ccfef
          an 'inconsistentValue' in response to SNMP SET operations.
Packit Service 9ccfef
          This object should not be used in non-secure provisioning
Packit Service 9ccfef
          modes.  In non-secure provisioning modes, the MTA MUST
Packit Service 9ccfef
          return an 'inconsistentValue' in response to SNMP SET
Packit Service 9ccfef
          operations, and the MTA MUST return a zero value in
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          response to SNMP GET operations.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevProvSolicitedKeyTimeout, the agent MUST NOT
Packit Service 9ccfef
          retain the supplied value across MTA re-initializations
Packit Service 9ccfef
          or reboots."
Packit Service 9ccfef
    DEFVAL { 3 }
Packit Service 9ccfef
    ::= { pktcMtaDevServer 14 }
Packit Service 9ccfef
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
--
Packit Service 9ccfef
--  Unsolicited key updates are retransmitted according to an
Packit Service 9ccfef
--  exponential back-off mechanism using two timers and a maximum
Packit Service 9ccfef
--  retry counter for AS replies.
Packit Service 9ccfef
--  The initial retransmission timer value is the nominal timer
Packit Service 9ccfef
--  value (pktcMtaDevProvUnsolicitedKeyNomTimeout).  The
Packit Service 9ccfef
--  retransmissions occur with an exponentially increasing interval
Packit Service 9ccfef
--  that caps at the maximum timeout value
Packit Service 9ccfef
--  (pktcMtaDevProvUnsolicitedKeyMaxTimeout).
Packit Service 9ccfef
--  Retransmissions stop when the maximum retry counter is reached
Packit Service 9ccfef
--  (pktcMtaDevProvUnsolicitedKeyMaxRetries).
Packit Service 9ccfef
--  For example, with values of 3 seconds for the nominal
Packit Service 9ccfef
--  timer, 100 seconds for the maximum timeout, and 8 retries max,
Packit Service 9ccfef
--  and with an exponential value of 2, this results in
Packit Service 9ccfef
--  retransmission intervals will be 3 s, 6 s, 12 s, 24 s, 48 s,
Packit Service 9ccfef
--  96 s, 100 s, and 100 s;
Packit Service 9ccfef
--  retransmissions then stop because the maximum number of
Packit Service 9ccfef
--  retries (8) has been reached.
Packit Service 9ccfef
--
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
--
Packit Service 9ccfef
--  Timeouts for unsolicited key management updates are only
Packit Service 9ccfef
--  pertinent before the first SNMPv3 message is sent between the
Packit Service 9ccfef
--  MTA and the Provisioning Server and before the configuration
Packit Service 9ccfef
--  file is loaded.
Packit Service 9ccfef
--
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvUnsolicitedKeyMaxTimeout  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (0..600)
Packit Service 9ccfef
    UNITS       "seconds"
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the timeout value that applies to
Packit Service 9ccfef
          an MTA-initiated AP-REQ/REP key management exchange with
Packit Service 9ccfef
          the Provisioning Server in SNMPv3 provisioning.
Packit Service 9ccfef
          It is the maximum timeout value, and it may not be exceeded
Packit Service 9ccfef
          in the exponential back-off algorithm.  If the DHCP option
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          code 122, sub-option 5, is provided to the MTA, it
Packit Service 9ccfef
          overwrites this value.
Packit Service 9ccfef
          In non-secure provisioning modes, the MTA MUST
Packit Service 9ccfef
          return a zero value in response to SNMP GET
Packit Service 9ccfef
          operations."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL {600}
Packit Service 9ccfef
    ::= { pktcMtaDevServer 15 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvUnsolicitedKeyNomTimeout  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (0..600)
Packit Service 9ccfef
    UNITS       "seconds"
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the starting value of the timeout
Packit Service 9ccfef
          for the AP-REQ/REP Backoff and Retry mechanism
Packit Service 9ccfef
          with exponential timeout in SNMPv3 provisioning.
Packit Service 9ccfef
          If the DHCP option code 122, sub-option 5, is provided
Packit Service 9ccfef
          the MTA, it overwrites this value.
Packit Service 9ccfef
          In non-secure provisioning modes, the MTA MUST
Packit Service 9ccfef
          return a zero value in response to SNMP GET
Packit Service 9ccfef
          operations."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL {3}
Packit Service 9ccfef
    ::= { pktcMtaDevServer 16}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvUnsolicitedKeyMaxRetries  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (0..32)
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains a retry counter that applies to
Packit Service 9ccfef
          an MTA-initiated AP-REQ/REP key management exchange with
Packit Service 9ccfef
          the Provisioning Server in secure SNMPv3 provisioning.
Packit Service 9ccfef
          It is the maximum number of retries before the MTA stops
Packit Service 9ccfef
          attempting to establish a Security Association with
Packit Service 9ccfef
          Provisioning Server.
Packit Service 9ccfef
          If the DHCP option code 122, sub-option 5, is provided to
Packit Service 9ccfef
          the MTA, it overwrites this value.
Packit Service 9ccfef
          If this object is set to a zero value, the MTA MUST return
Packit Service 9ccfef
          an 'inconsistentValue' in response to SNMP SET operations.
Packit Service 9ccfef
          In non-secure provisioning modes, the MTA MUST
Packit Service 9ccfef
          return a zero value in response to SNMP GET
Packit Service 9ccfef
          operations."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL {8}
Packit Service 9ccfef
    ::= { pktcMtaDevServer 17 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvKerbRealmName  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString (SIZE(1..255))
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the name of the associated
Packit Service 9ccfef
          provisioning Kerberos realm acquired during the MTA4
Packit Service 9ccfef
          provisioning step (DHCP Ack) for SNMPv3 provisioning.
Packit Service 9ccfef
          The uppercase ASCII representation of the associated
Packit Service 9ccfef
          Kerberos realm name MUST be used by both the Manager (SNMP
Packit Service 9ccfef
          entity) and the MTA.
Packit Service 9ccfef
          The Kerberos realm name for the Provisioning Server is
Packit Service 9ccfef
          supplied to the MTA via DHCP option code 122, sub-option 6,
Packit Service 9ccfef
          as defined in RFC 3495.  In secure SNMP provisioning mode,
Packit Service 9ccfef
          the value of the Kerberos realm name for the Provisioning
Packit Service 9ccfef
          Server supplied in the MTA configuration file must match
Packit Service 9ccfef
          the value supplied in the DHCP option code 122,
Packit Service 9ccfef
          sub-option 6.  Otherwise, the value of this object must
Packit Service 9ccfef
          contain the value supplied in DHCP Option 122,
Packit Service 9ccfef
          sub-option 6."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          RFC 3495, DHCP Option for CableLabs Client Configuration."
Packit Service 9ccfef
    ::= { pktcMtaDevServer 18 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvState  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      INTEGER  {
Packit Service 9ccfef
                operational                (1),
Packit Service 9ccfef
                waitingForSnmpSetInfo      (2),
Packit Service 9ccfef
                waitingForTftpAddrResponse (3),
Packit Service 9ccfef
                waitingForConfigFile       (4)
Packit Service 9ccfef
    }
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the MTA provisioning state.
Packit Service 9ccfef
          If the state is:
Packit Service 9ccfef
Packit Service 9ccfef
            'operational(1)', the device has completed the loading
Packit Service 9ccfef
             and processing of the initialization parameters.
Packit Service 9ccfef
Packit Service 9ccfef
            'waitingForSnmpSetInfo(2)', the device is waiting on
Packit Service 9ccfef
             its configuration file download access information.
Packit Service 9ccfef
             Note that this state is only reported when the MTA
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
             SNMP enrollment mechanism is used.
Packit Service 9ccfef
Packit Service 9ccfef
            'waitingForTftpAddrResponse(3)', the device has sent a
Packit Service 9ccfef
             DNS request to resolve the server providing the
Packit Service 9ccfef
             configuration file, and it is awaiting for a response.
Packit Service 9ccfef
             Note that this state is only reported when the MTA
Packit Service 9ccfef
             SNMP enrollment mechanism is used.
Packit Service 9ccfef
Packit Service 9ccfef
            'waitingForConfigFile(4)', the device has sent a
Packit Service 9ccfef
            request via TFTP or HTTP for the download of its
Packit Service 9ccfef
            configuration file, and it is awaiting for a response or
Packit Service 9ccfef
            the file download is in progress."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification,
Packit Service 9ccfef
          PacketCable Security Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevServer 19 }
Packit Service 9ccfef
Packit Service 9ccfef
    --
Packit Service 9ccfef
    -- The following object group describes the security objects.
Packit Service 9ccfef
    --
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevManufacturerCertificate  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      DocsX509ASN1DEREncodedCertificate
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the MTA Manufacturer Certificate.
Packit Service 9ccfef
          The object value must be the ASN.1 DER encoding of the MTA
Packit Service 9ccfef
          manufacturer's X.509 public key certificate.  The MTA
Packit Service 9ccfef
          Manufacturer Certificate is issued to each MTA
Packit Service 9ccfef
          manufacturer and is installed into each MTA at the time of
Packit Service 9ccfef
          manufacture or with a secure code download.  The specific
Packit Service 9ccfef
          requirements related to this certificate are defined in
Packit Service 9ccfef
          the PacketCable or IPCablecom Security specifications."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
Packit Service 9ccfef
    ::= {pktcMtaDevSecurity 1}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCertificate  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      DocsX509ASN1DEREncodedCertificate
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the MTA Device Certificate.
Packit Service 9ccfef
          The object value must be the ASN.1 DER encoding of the
Packit Service 9ccfef
          MTA's X.509 public-key certificate issued by the
Packit Service 9ccfef
          manufacturer and installed into the MTA at the time of
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          manufacture or with a secure code download.
Packit Service 9ccfef
          This certificate contains the MTA MAC address.  The
Packit Service 9ccfef
          specific requirements related to this certificate are
Packit Service 9ccfef
          defined in the PacketCable or IPCablecom Security
Packit Service 9ccfef
          specifications."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevSecurity 2 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCorrelationId  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains a correlation ID, an arbitrary value
Packit Service 9ccfef
          generated by the MTA that will be exchanged as part of the
Packit Service 9ccfef
          device capability data to the Provisioning Application.
Packit Service 9ccfef
          This random value is used as an identifier to correlate
Packit Service 9ccfef
          related events in the MTA provisioning sequence.
Packit Service 9ccfef
          This value is intended for use only during the MTA
Packit Service 9ccfef
          initialization and configuration file download."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevSecurity 3 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevTelephonyRootCertificate  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      DocsX509ASN1DEREncodedCertificate
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the telephony Service Provider Root
Packit Service 9ccfef
          certificate.  The object value is the ASN.1 DER encoding of
Packit Service 9ccfef
          the IP Telephony Service Provider Root X.509 public key
Packit Service 9ccfef
          certificate.  This certification is stored in the MTA
Packit Service 9ccfef
          non-volatile memory and can be updated with a secure code
Packit Service 9ccfef
          download.  This certificate is used to validate the initial
Packit Service 9ccfef
          AS Reply received by the MTA from the Key Distribution
Packit Service 9ccfef
          Center (KDC) during the MTA initialization.  The specific
Packit Service 9ccfef
          requirements related to this certificate are defined in
Packit Service 9ccfef
          the PacketCable or IPCablecom Security specifications."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevSecurity 4 }
Packit Service 9ccfef
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
--
Packit Service 9ccfef
--   Informative Procedures for Setting up Security Associations
Packit Service 9ccfef
--
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
--   A Security Association may be set up either via configuration or
Packit Service 9ccfef
--   via NCS signaling.
Packit Service 9ccfef
--
Packit Service 9ccfef
--   I.   Security association setup via configuration.
Packit Service 9ccfef
--
Packit Service 9ccfef
--   The realm must be configured first.  Associated with the realm
Packit Service 9ccfef
--   is a KDC.  The realm table (pktcMtaDevRealmTable) indicates
Packit Service 9ccfef
--   information about the realm (e.g., name, organization name) and
Packit Service 9ccfef
--   parameters associated with KDC communications (e.g., grace
Packit Service 9ccfef
--   periods, AS Request/AS Reply adaptive back-off parameters).
Packit Service 9ccfef
--
Packit Service 9ccfef
--   Once the realm is established, one or more CMS(es) may be
Packit Service 9ccfef
--   defined in the realm.  Associated with each CMS
Packit Service 9ccfef
--   entry in the pktcMtaDevCmsTable is an explicit reference
Packit Service 9ccfef
--   to a Realm via the realm name (pktcMtaDevCmsKerbRealmName),
Packit Service 9ccfef
--   the FQDN of the CMS, and parameters associated with IPSec
Packit Service 9ccfef
--   key management with the CMS (e.g., clock skew, AP Request/
Packit Service 9ccfef
--   AP Reply adaptive back-off parameters).
Packit Service 9ccfef
--
Packit Service 9ccfef
--   II.  Security association setup via NCS signaling.
Packit Service 9ccfef
--
Packit Service 9ccfef
--   The procedure of establishing the Security Associations
Packit Service 9ccfef
--   for NCS signaling is described in the PacketCable Security
Packit Service 9ccfef
--   specification.
Packit Service 9ccfef
--   It involves the analysis of the pktcNcsEndPntConfigTable row
Packit Service 9ccfef
--   for the corresponding endpoint number and the correlation of
Packit Service 9ccfef
--   the CMS FQDN from this row with the CMS Table and
Packit Service 9ccfef
--   consequently, with the Realm Table.  Both of these tables
Packit Service 9ccfef
--   are defined below.  The pktcNcsEndPntConfigTable is defined in
Packit Service 9ccfef
--   the IP over Cable Data Network (IPCDN)
Packit Service 9ccfef
--   NCS Signaling MIB [NCSSIGMIB].
Packit Service 9ccfef
--
Packit Service 9ccfef
--   III.  When the MTA receives wake-up or re-key messages from a
Packit Service 9ccfef
--   CMS, it performs key management based on the corresponding
Packit Service 9ccfef
--   entry in the CMS table.  If the matching CMS entry does not
Packit Service 9ccfef
--   exist, it must ignore the wake-up or re-key messages.
Packit Service 9ccfef
--
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
--
Packit Service 9ccfef
--   pktcMtaDevRealmTable
Packit Service 9ccfef
--
Packit Service 9ccfef
--   The pktcMtaDevRealmTable shows the KDC realms.  The table is
Packit Service 9ccfef
--   indexed with pktcMtaDevRealmIndex.  The Realm Table contains the
Packit Service 9ccfef
--   pktcMtaDevRealmName in conjunction with any server that needs
Packit Service 9ccfef
--   a Security Association with the MTA.  Uppercase must be used
Packit Service 9ccfef
--   to compare the pktcMtaDevRealmName content.
Packit Service 9ccfef
--
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmAvailSlot   OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (0..64)
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the index number of the first
Packit Service 9ccfef
          available entry in the realm table (pktcMtaDevRealmTable).
Packit Service 9ccfef
          If all the entries in the realm table have been assigned,
Packit Service 9ccfef
          this object contains the value of zero.
Packit Service 9ccfef
          A management station should create new entries in the
Packit Service 9ccfef
          realm table, using the following procedure:
Packit Service 9ccfef
Packit Service 9ccfef
          First, issue a management protocol retrieval operation
Packit Service 9ccfef
          to determine the value of the first available index in the
Packit Service 9ccfef
          realm table (pktcMtaDevRealmAvailSlot).
Packit Service 9ccfef
Packit Service 9ccfef
          Second, issue a management protocol SET operation
Packit Service 9ccfef
          to create an instance of the pktcMtaDevRealmStatus
Packit Service 9ccfef
          object by setting its value to 'createAndWait(5)'.
Packit Service 9ccfef
Packit Service 9ccfef
          Third, if the SET operation succeeded, continue
Packit Service 9ccfef
          modifying the object instances corresponding to the newly
Packit Service 9ccfef
          created conceptual row, without fear of collision with
Packit Service 9ccfef
          other management stations.  When all necessary conceptual
Packit Service 9ccfef
          columns of the row are properly populated (via SET
Packit Service 9ccfef
          operations or default values), the management station may
Packit Service 9ccfef
          SET the pktcMtaDevRealmStatus object to 'active(1)'."
Packit Service 9ccfef
    ::= {  pktcMtaDevSecurity 5 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmTable  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SEQUENCE OF PktcMtaDevRealmEntry
Packit Service 9ccfef
    MAX-ACCESS  not-accessible
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the realm table.
Packit Service 9ccfef
          The CMS table (pktcMtaDevCmsTable) and the realm table
Packit Service 9ccfef
          (pktcMtaDevRealmTable) are used for managing the MTA-CMS
Packit Service 9ccfef
          Security Associations.  The realm table defines the
Packit Service 9ccfef
          Kerberos realms for the Application Servers (CMSes and the
Packit Service 9ccfef
          Provisioning Server)."
Packit Service 9ccfef
    ::= {  pktcMtaDevSecurity 6 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmEntry  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      PktcMtaDevRealmEntry
Packit Service 9ccfef
    MAX-ACCESS  not-accessible
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This table entry object lists the MTA security parameters
Packit Service 9ccfef
          for a single Kerberos realm.  The conceptual rows MUST NOT
Packit Service 9ccfef
          persist across MTA reboots."
Packit Service 9ccfef
    INDEX { pktcMtaDevRealmIndex }
Packit Service 9ccfef
::= { pktcMtaDevRealmTable 1 }
Packit Service 9ccfef
Packit Service 9ccfef
PktcMtaDevRealmEntry ::= SEQUENCE {
Packit Service 9ccfef
    pktcMtaDevRealmIndex                    Unsigned32,
Packit Service 9ccfef
    pktcMtaDevRealmName                     SnmpAdminString,
Packit Service 9ccfef
    pktcMtaDevRealmPkinitGracePeriod        Unsigned32,
Packit Service 9ccfef
    pktcMtaDevRealmTgsGracePeriod           Unsigned32,
Packit Service 9ccfef
    pktcMtaDevRealmOrgName                  LongUtf8String,
Packit Service 9ccfef
    pktcMtaDevRealmUnsolicitedKeyMaxTimeout Unsigned32,
Packit Service 9ccfef
    pktcMtaDevRealmUnsolicitedKeyNomTimeout Unsigned32,
Packit Service 9ccfef
    pktcMtaDevRealmUnsolicitedKeyMaxRetries Unsigned32,
Packit Service 9ccfef
    pktcMtaDevRealmStatus                   RowStatus
Packit Service 9ccfef
    }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmIndex  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (1..64)
Packit Service 9ccfef
    MAX-ACCESS  not-accessible
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the realm table index."
Packit Service 9ccfef
    ::= { pktcMtaDevRealmEntry 1}
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmName  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString (SIZE(1..255))
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object identifies the Kerberos realm name in all
Packit Service 9ccfef
          capitals.  The MTA MUST prohibit the instantiation of any
Packit Service 9ccfef
          two rows with identical Kerberos realm names.  The MTA MUST
Packit Service 9ccfef
          also verify that any search operation involving Kerberos
Packit Service 9ccfef
          realm names is done using the uppercase ASCII
Packit Service 9ccfef
          representation of the characters."
Packit Service 9ccfef
    ::= { pktcMtaDevRealmEntry 2 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmPkinitGracePeriod  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (15..600)
Packit Service 9ccfef
    UNITS       "minutes"
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the PKINIT Grace Period.  For the
Packit Service 9ccfef
         purpose of key management with Application Servers (CMSes
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
         or the Provisioning Server), the MTA must utilize the
Packit Service 9ccfef
         PKINIT exchange to obtain Application Server tickets.  The
Packit Service 9ccfef
         MTA may utilize the PKINIT exchange to obtain Ticket
Packit Service 9ccfef
         Granting Tickets (TGTs), which are then used to obtain
Packit Service 9ccfef
         Application Server tickets in a TGS exchange.
Packit Service 9ccfef
         The PKINIT exchange occurs according to the current Ticket
Packit Service 9ccfef
         Expiration Time (TicketEXP) and on the PKINIT Grace Period
Packit Service 9ccfef
         (PKINITGP).  The MTA MUST initiate the PKINIT exchange at
Packit Service 9ccfef
         the time: TicketEXP - PKINITGP."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { 15 }
Packit Service 9ccfef
    ::= { pktcMtaDevRealmEntry 3 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmTgsGracePeriod  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (1..600)
Packit Service 9ccfef
    UNITS       "minutes"
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the Ticket Granting Server Grace
Packit Service 9ccfef
          Period (TGSGP).  The Ticket Granting Server (TGS)
Packit Service 9ccfef
          Request/Reply exchange may be performed by the MTA
Packit Service 9ccfef
          on demand whenever an Application Server ticket is
Packit Service 9ccfef
          needed to establish security parameters.  If the MTA
Packit Service 9ccfef
          possesses a ticket that corresponds to the Provisioning
Packit Service 9ccfef
          Server or a CMS that currently exists in the CMS table,
Packit Service 9ccfef
          the MTA MUST initiate the TGS Request/Reply exchange
Packit Service 9ccfef
          at the time: TicketEXP - TGSGP."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { 10 }
Packit Service 9ccfef
    ::= { pktcMtaDevRealmEntry 4 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmOrgName  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      LongUtf8String
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the X.500 organization name attribute
Packit Service 9ccfef
          as defined in the subject name of the service provider
Packit Service 9ccfef
          certificate."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification;
Packit Service 9ccfef
          RFCs 3280 and 4630, Internet X.509 Public Key
Packit Service 9ccfef
          Infrastructure Certificate and Certificate Revocation List
Packit Service 9ccfef
          (CRL) Profile"
Packit Service 9ccfef
    ::= { pktcMtaDevRealmEntry 5 }
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmUnsolicitedKeyMaxTimeout  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (1..600)
Packit Service 9ccfef
    UNITS       "seconds"
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object specifies the maximum time the MTA will
Packit Service 9ccfef
          attempt to perform the exponential back-off algorithm.
Packit Service 9ccfef
          This timer only applies when the MTA initiated key
Packit Service 9ccfef
          management.  If the DHCP option code 122, sub-option 4, is
Packit Service 9ccfef
          provided to the MTA, it overwrites this value.
Packit Service 9ccfef
Packit Service 9ccfef
          Unsolicited key updates are retransmitted according to an
Packit Service 9ccfef
          exponential back-off mechanism using two timers and a
Packit Service 9ccfef
          maximum retry counter for AS replies.
Packit Service 9ccfef
          The initial retransmission timer value is the nominal
Packit Service 9ccfef
          timer value (pktcMtaDevRealmUnsolicitedKeyNomTimeout).  The
Packit Service 9ccfef
          retransmissions occur with an exponentially increasing
Packit Service 9ccfef
          interval that caps at the maximum timeout value
Packit Service 9ccfef
          (pktcMtaDevRealmUnsolicitedKeyMaxTimeout).
Packit Service 9ccfef
          Retransmissions stop when the maximum retry counter is
Packit Service 9ccfef
          reached (pktcMatDevRealmUnsolicitedMaxRetries).
Packit Service 9ccfef
Packit Service 9ccfef
          For example, with values of 3 seconds for the nominal
Packit Service 9ccfef
          timer, 20 seconds for the maximum timeout, and 5 retries
Packit Service 9ccfef
          max, retransmission intervals will be 3 s, 6 s,
Packit Service 9ccfef
          12 s, 20 s, and 20 s, and retransmissions then stop because
Packit Service 9ccfef
          the maximum number of retries has been reached."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { 100 }
Packit Service 9ccfef
    ::= { pktcMtaDevRealmEntry 6 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmUnsolicitedKeyNomTimeout  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (100..600000)
Packit Service 9ccfef
    UNITS       "milliseconds"
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object specifies the initial timeout value
Packit Service 9ccfef
          for the AS-REQ/AS-REP exponential back-off and retry
Packit Service 9ccfef
          mechanism.  If the DHCP option code 122, sub-option 4, is
Packit Service 9ccfef
          provided to the MTA, it overwrites this value.
Packit Service 9ccfef
          This value should account for the average roundtrip
Packit Service 9ccfef
          time between the MTA and the KDC, as well as the
Packit Service 9ccfef
          processing delay on the KDC.
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          Unsolicited key updates are retransmitted according to an
Packit Service 9ccfef
          exponential back-off mechanism using two timers and a
Packit Service 9ccfef
          maximum retry counter for AS replies.
Packit Service 9ccfef
          The initial retransmission timer value is the nominal
Packit Service 9ccfef
          timer value (pktcMtaDevRealmUnsolicitedKeyNomTimeout).  The
Packit Service 9ccfef
          retransmissions occur with an exponentially increasing
Packit Service 9ccfef
          interval that caps at the maximum timeout value
Packit Service 9ccfef
          (pktcMtaDevRealmUnsolicitedKeyMaxTimeout).
Packit Service 9ccfef
          Retransmissions stop when the maximum retry counter is
Packit Service 9ccfef
          reached (pktcMatDevRealmUnsolicitedMaxRetries).
Packit Service 9ccfef
Packit Service 9ccfef
          For example, with values of 3 seconds for the nominal
Packit Service 9ccfef
          timer, 20 seconds for the maximum timeout, and 5 retries
Packit Service 9ccfef
          max, in retransmission intervals will be 3 s, 6 s,
Packit Service 9ccfef
          12 s, 20 s, and 20 s; retransmissions then stop because
Packit Service 9ccfef
          the maximum number of retries has been reached."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { 3000 }
Packit Service 9ccfef
    ::= { pktcMtaDevRealmEntry 7 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmUnsolicitedKeyMaxRetries  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (0..1024)
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object specifies the maximum number of retries the
Packit Service 9ccfef
          MTA attempts to obtain a ticket from the KDC.
Packit Service 9ccfef
Packit Service 9ccfef
          Unsolicited key updates are retransmitted according to an
Packit Service 9ccfef
          exponential back-off mechanism using two timers and a
Packit Service 9ccfef
          maximum retry counter for AS replies.
Packit Service 9ccfef
          The initial retransmission timer value is the nominal
Packit Service 9ccfef
          timer value (pktcMtaDevRealmUnsolicitedKeyNomTimeout).  The
Packit Service 9ccfef
          retransmissions occur with an exponentially increasing
Packit Service 9ccfef
          interval that caps at the maximum timeout value
Packit Service 9ccfef
          (pktcMtaDevRealmUnsolicitedKeyMaxTimeout).
Packit Service 9ccfef
          Retransmissions stop when the maximum retry counter is
Packit Service 9ccfef
          reached (pktcMatDevRealmUnsolicitedMaxRetries).
Packit Service 9ccfef
Packit Service 9ccfef
          For example, with values of 3 seconds for the nominal
Packit Service 9ccfef
          timer, 20 seconds for the maximum timeout, and 5 retries
Packit Service 9ccfef
          max, retransmission intervals will be 3 s, 6 s,
Packit Service 9ccfef
          12 s, 20 s, and 20 s; retransmissions then stop because
Packit Service 9ccfef
          the maximum number of retries has been reached."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { 5 }
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
    ::= { pktcMtaDevRealmEntry 8 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevRealmStatus     OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      RowStatus
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the row status of this realm in the
Packit Service 9ccfef
          realm table (pktcMtaDevRealmTable).
Packit Service 9ccfef
Packit Service 9ccfef
          An entry in this table is not qualified for activation
Packit Service 9ccfef
          until the object instances of all corresponding columns
Packit Service 9ccfef
          have been initialized, either by default values, or via
Packit Service 9ccfef
          explicit SET operations.  Until all object instances in
Packit Service 9ccfef
          this row are initialized, the status value for this realm
Packit Service 9ccfef
          must be 'notReady(3)'.
Packit Service 9ccfef
          In particular, two columnar objects must be explicitly
Packit Service 9ccfef
          SET: the realm name (pktcMtaDevRealmName) and the
Packit Service 9ccfef
          organization name (pktcMtaDevRealmOrgName).  Once these 2
Packit Service 9ccfef
          objects have been set and the row status is SET to
Packit Service 9ccfef
          'active(1)', the MTA MUST NOT allow any modification of
Packit Service 9ccfef
          these 2 object values.
Packit Service 9ccfef
          The value of this object has no effect on whether other
Packit Service 9ccfef
          columnar objects in this row can be modified."
Packit Service 9ccfef
    ::= { pktcMtaDevRealmEntry 9 }
Packit Service 9ccfef
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
--
Packit Service 9ccfef
--  The CMS table, pktcMtaDevCmsTable
Packit Service 9ccfef
--
Packit Service 9ccfef
-- The CMS table and the realm table (pktcMtaDevRealmTable) are used
Packit Service 9ccfef
-- for managing the MTA signaling security.  The CMS table defines
Packit Service 9ccfef
-- the CMSes the MTA is allowed to communicate with and contains
Packit Service 9ccfef
-- the parameters describing the SA establishment between the MTA
Packit Service 9ccfef
-- and a CMS.
Packit Service 9ccfef
-- The CMS table is indexed by pktcMtaDevCmsIndex.  The table
Packit Service 9ccfef
-- contains the CMS FQDN (pktcMtaDevCmsFQDN) and the associated
Packit Service 9ccfef
-- Kerberos realm name (pktcMtaDevCmsKerbRealmName) so that the MTA
Packit Service 9ccfef
-- can find the corresponding Kerberos realm name in the
Packit Service 9ccfef
-- pktcMtaDevRealmTable.
Packit Service 9ccfef
--
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsAvailSlot   OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (0..128)
Packit Service 9ccfef
    MAX-ACCESS  read-only
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
        " This object contains the index number of the first
Packit Service 9ccfef
          available entry in the CMS table (pktcMtaDevCmsTable).
Packit Service 9ccfef
          If all the entries in the CMS table have been assigned,
Packit Service 9ccfef
          this object contains the value of zero.
Packit Service 9ccfef
          A management station should create new entries in the
Packit Service 9ccfef
          CMS table, using the following procedure:
Packit Service 9ccfef
Packit Service 9ccfef
          First, issue a management protocol retrieval operation
Packit Service 9ccfef
          to determine the value of the first available index in the
Packit Service 9ccfef
          CMS table (pktcMtaDevCmsAvailSlot).
Packit Service 9ccfef
Packit Service 9ccfef
          Second, issue a management protocol SET operation
Packit Service 9ccfef
          to create an instance of the pktcMtaDevCmsStatus
Packit Service 9ccfef
          object by setting its value to 'createAndWait(5)'.
Packit Service 9ccfef
Packit Service 9ccfef
          Third, if the SET operation succeeded, continue
Packit Service 9ccfef
          modifying the object instances corresponding to the newly
Packit Service 9ccfef
          created conceptual row, without fear of collision with
Packit Service 9ccfef
          other management stations.  When all necessary conceptual
Packit Service 9ccfef
          columns of the row are properly populated (via SET
Packit Service 9ccfef
          operations or default values), the management station may
Packit Service 9ccfef
          SET the pktcMtaDevCmsStatus object to 'active(1)'."
Packit Service 9ccfef
    ::= {  pktcMtaDevSecurity 7 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsTable  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SEQUENCE OF PktcMtaDevCmsEntry
Packit Service 9ccfef
    MAX-ACCESS  not-accessible
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the CMS table.
Packit Service 9ccfef
          The CMS table (pktcMtaDevCmsTable) and the realm table
Packit Service 9ccfef
          (pktcMtaDevRealmTable) are used for managing security
Packit Service 9ccfef
          between the MTA and CMSes.  Each CMS table entry defines
Packit Service 9ccfef
          a CMS the managed MTA is allowed to communicate with
Packit Service 9ccfef
          and contains security parameters for key management with
Packit Service 9ccfef
          that CMS."
Packit Service 9ccfef
    ::= {  pktcMtaDevSecurity 8 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsEntry  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      PktcMtaDevCmsEntry
Packit Service 9ccfef
    MAX-ACCESS  not-accessible
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This table entry object lists the MTA key management
Packit Service 9ccfef
          parameters used when establishing Security Associations
Packit Service 9ccfef
          with a CMS.  The conceptual rows MUST NOT persist across
Packit Service 9ccfef
          MTA reboots."
Packit Service 9ccfef
    INDEX { pktcMtaDevCmsIndex }
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
    ::= { pktcMtaDevCmsTable 1 }
Packit Service 9ccfef
Packit Service 9ccfef
PktcMtaDevCmsEntry ::= SEQUENCE {
Packit Service 9ccfef
    pktcMtaDevCmsIndex                        Unsigned32,
Packit Service 9ccfef
    pktcMtaDevCmsFqdn                         SnmpAdminString,
Packit Service 9ccfef
    pktcMtaDevCmsKerbRealmName                SnmpAdminString,
Packit Service 9ccfef
    pktcMtaDevCmsMaxClockSkew                 Unsigned32,
Packit Service 9ccfef
    pktcMtaDevCmsSolicitedKeyTimeout          Unsigned32,
Packit Service 9ccfef
    pktcMtaDevCmsUnsolicitedKeyMaxTimeout     Unsigned32,
Packit Service 9ccfef
    pktcMtaDevCmsUnsolicitedKeyNomTimeout     Unsigned32,
Packit Service 9ccfef
    pktcMtaDevCmsUnsolicitedKeyMaxRetries     Unsigned32,
Packit Service 9ccfef
    pktcMtaDevCmsIpsecCtrl                    TruthValue,
Packit Service 9ccfef
    pktcMtaDevCmsStatus                       RowStatus
Packit Service 9ccfef
    }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsIndex  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (1..128)
Packit Service 9ccfef
    MAX-ACCESS  not-accessible
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the CMS table index."
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 1 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsFqdn  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString (SIZE(1..255))
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object specifies the CMS FQDN.  The MTA must
Packit Service 9ccfef
          prohibit the instantiation of any two rows with identical
Packit Service 9ccfef
          FQDNs.  The MTA must also verify that any search and/or
Packit Service 9ccfef
          comparison operation involving a CMS FQDN is case
Packit Service 9ccfef
          insensitive.  The MTA must resolve the CMS FQDN as required
Packit Service 9ccfef
           by the corresponding PacketCable Specifications."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable MTA Device Provisioning Specification;
Packit Service 9ccfef
          PacketCable Security Specification;
Packit Service 9ccfef
          PacketCable Network-Based Call Signaling Protocol
Packit Service 9ccfef
          Specification."
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 2 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsKerbRealmName  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      SnmpAdminString (SIZE(1..255))
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object identifies the Kerberos realm name in uppercase
Packit Service 9ccfef
          characters associated with the CMS defined in this
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          conceptual row.  The object value is a reference
Packit Service 9ccfef
          point to the corresponding Kerberos realm name in the
Packit Service 9ccfef
          realm table (pktcMtaDevRealmTable)."
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 3 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsMaxClockSkew    OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (1..1800)
Packit Service 9ccfef
    UNITS       "seconds"
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object specifies the maximum allowable clock skew
Packit Service 9ccfef
          between the MTA and the CMS defined in this row."
Packit Service 9ccfef
    DEFVAL { 300 }
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 4 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsSolicitedKeyTimeout  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (100..30000)
Packit Service 9ccfef
    UNITS       "milliseconds"
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines a Kerberos Key Management timer on the
Packit Service 9ccfef
          MTA.  It is the time period during which the MTA saves the
Packit Service 9ccfef
          nonce and Server Kerberos Principal Identifier to match an
Packit Service 9ccfef
          AP Request and its associated AP Reply response from the
Packit Service 9ccfef
          CMS.  This timer only applies when the CMS initiated key
Packit Service 9ccfef
          management (with a Wake Up message or a Rekey message)."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { 1000 }
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 5 }
Packit Service 9ccfef
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
--
Packit Service 9ccfef
--  Unsolicited key updates are retransmitted according to an
Packit Service 9ccfef
--  exponential back-off mechanism using two timers and a maximum
Packit Service 9ccfef
--  retry counter for AS replies.
Packit Service 9ccfef
--  The initial retransmission timer value is the nominal timer
Packit Service 9ccfef
--  value (pktcMtaDevCmsUnsolicitedKeyNomTimeout).  The
Packit Service 9ccfef
--  retransmissions occur with an exponentially increasing interval
Packit Service 9ccfef
--  that caps at the maximum timeout value
Packit Service 9ccfef
--  (pktcMtaDevCmsUnsolicitedKeyMaxTimeout).
Packit Service 9ccfef
--  Retransmissions stop when the maximum retry counter is reached
Packit Service 9ccfef
--  (pktcMatDevCmsUnsolicitedMaxRetries).
Packit Service 9ccfef
--  For example, with values of 3 seconds for the nominal
Packit Service 9ccfef
--  timer, 20 seconds for the maximum timeout, and 5 retries max,
Packit Service 9ccfef
--  retransmission intervals will be 3 s, 6 s, 12 s,
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
--  20 s, and 20 s; retransmissions then stop due to the
Packit Service 9ccfef
--  maximum number of retries reached.
Packit Service 9ccfef
--
Packit Service 9ccfef
--=================================================================
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsUnsolicitedKeyMaxTimeout  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (1..600)
Packit Service 9ccfef
    UNITS       "seconds"
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the timeout value that only applies
Packit Service 9ccfef
          to an MTA-initiated key management exchange.  It is the
Packit Service 9ccfef
          maximum timeout, and it may not be exceeded in the
Packit Service 9ccfef
          exponential back-off algorithm."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { 600 }
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 6 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsUnsolicitedKeyNomTimeout  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (100..30000)
Packit Service 9ccfef
    UNITS       "milliseconds"
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the starting value of the timeout
Packit Service 9ccfef
          for an MTA-initiated key management.  It should account for
Packit Service 9ccfef
          the average roundtrip time between the MTA and the CMS and
Packit Service 9ccfef
          the processing time on the CMS."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { 500 }
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 7 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsUnsolicitedKeyMaxRetries  OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      Unsigned32 (0..1024)
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object contains the maximum number of retries before
Packit Service 9ccfef
          the MTA stops attempting to establish a Security
Packit Service 9ccfef
          Association with the CMS."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        " PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { 5 }
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 8 }
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsIpsecCtrl     OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX        TruthValue
Packit Service 9ccfef
    MAX-ACCESS    read-only
Packit Service 9ccfef
    STATUS        current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object specifies the MTA IPSec control flag.
Packit Service 9ccfef
          If the object value is 'true', the MTA must use Kerberos
Packit Service 9ccfef
          Key Management and IPsec to communicate with this CMS.  If
Packit Service 9ccfef
          it is 'false', IPSec Signaling Security and Kerberos key
Packit Service 9ccfef
          management are disabled for this specific CMS."
Packit Service 9ccfef
    DEFVAL { true }
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 9 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevCmsStatus     OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      RowStatus
Packit Service 9ccfef
    MAX-ACCESS  read-create
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines the row status associated with this
Packit Service 9ccfef
          particular CMS in the CMS table (pktcMtaDevCmsTable).
Packit Service 9ccfef
Packit Service 9ccfef
          An entry in this table is not qualified for activation
Packit Service 9ccfef
          until the object instances of all corresponding columns
Packit Service 9ccfef
          have been initialized, either by default values or via
Packit Service 9ccfef
          explicit SET operations.  Until all object instances in
Packit Service 9ccfef
          this row are initialized, the status value for this realm
Packit Service 9ccfef
          must be 'notReady(3)'.
Packit Service 9ccfef
          In particular, two columnar objects must be SET: the
Packit Service 9ccfef
          CMS FQDN (pktcMtaDevCmsFqdn) and the Kerberos realm name
Packit Service 9ccfef
          (pktcMtaDevCmsKerbRealmName).  Once these 2 objects have
Packit Service 9ccfef
          been set and the row status is SET to 'active(1)', the MTA
Packit Service 9ccfef
          MUST NOT allow any modification of these 2 object values.
Packit Service 9ccfef
Packit Service 9ccfef
          The value of this object has no effect on
Packit Service 9ccfef
          whether other columnar objects in this row can be
Packit Service 9ccfef
          modified."
Packit Service 9ccfef
    ::= { pktcMtaDevCmsEntry 10 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevResetKrbTickets   OBJECT-TYPE
Packit Service 9ccfef
    SYNTAX      BITS {
Packit Service 9ccfef
                         invalidateProvOnReboot   (0),
Packit Service 9ccfef
                         invalidateAllCmsOnReboot (1)
Packit Service 9ccfef
                }
Packit Service 9ccfef
    MAX-ACCESS   read-write
Packit Service 9ccfef
    STATUS    current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This object defines a Kerberos Ticket Control Mask that
Packit Service 9ccfef
          instructs the MTA to invalidate the specific Application
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          Server Kerberos ticket(s) that are stored locally in the
Packit Service 9ccfef
          MTA NVRAM (non-volatile or persistent memory).
Packit Service 9ccfef
          If the MTA does not store Kerberos tickets in NVRAM, it
Packit Service 9ccfef
          MUST ignore setting of this object and MUST report a BITS
Packit Service 9ccfef
          value of zero when the object is read.
Packit Service 9ccfef
          If the MTA supports Kerberos tickets storage in NVRAM, the
Packit Service 9ccfef
          object value is encoded as follows:
Packit Service 9ccfef
          - Setting the invalidateProvOnReboot bit (bit 0) to 1
Packit Service 9ccfef
            means that the MTA MUST invalidate the Kerberos
Packit Service 9ccfef
            Application Ticket(s) for the Provisioning Application
Packit Service 9ccfef
            at the next MTA reboot if secure SNMP provisioning mode
Packit Service 9ccfef
            is used.  In non-secure provisioning modes, the MTA MUST
Packit Service 9ccfef
            return an 'inconsistentValue' in response to SNMP SET
Packit Service 9ccfef
            operations with a bit 0 set to 1.
Packit Service 9ccfef
          - Setting the invalidateAllCmsOnReboot bit (bit 1) to 1
Packit Service 9ccfef
            means that the MTA MUST invalidate the Kerberos
Packit Service 9ccfef
            Application Ticket(s) for all CMSes currently assigned
Packit Service 9ccfef
            to the MTA endpoints.
Packit Service 9ccfef
          If a value is written into an instance of
Packit Service 9ccfef
          pktcMtaDevResetKrbTickets, the agent MUST retain the
Packit Service 9ccfef
          supplied value across an MTA re-initialization or
Packit Service 9ccfef
          reboot."
Packit Service 9ccfef
    REFERENCE
Packit Service 9ccfef
        "PacketCable Security Specification."
Packit Service 9ccfef
    DEFVAL { {   } }
Packit Service 9ccfef
    ::= {  pktcMtaDevSecurity 9 }
Packit Service 9ccfef
Packit Service 9ccfef
--
Packit Service 9ccfef
-- The following group, pktcMtaDevErrors, defines an OID
Packit Service 9ccfef
-- corresponding to error conditions encountered during the MTA
Packit Service 9ccfef
-- provisioning.
Packit Service 9ccfef
--
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevErrorsTooManyErrors OBJECT-IDENTITY
Packit Service 9ccfef
    STATUS     current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        "This object defines the OID corresponding to the error
Packit Service 9ccfef
         condition when too many errors are encountered in the
Packit Service 9ccfef
         MTA configuration file during provisioning."
Packit Service 9ccfef
       ::= { pktcMtaDevErrors  1 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvisioningEnrollment  NOTIFICATION-TYPE
Packit Service 9ccfef
    OBJECTS {
Packit Service 9ccfef
            sysDescr,
Packit Service 9ccfef
            pktcMtaDevSwCurrentVers,
Packit Service 9ccfef
            pktcMtaDevTypeIdentifier,
Packit Service 9ccfef
            ifPhysAddress,
Packit Service 9ccfef
            pktcMtaDevCorrelationId
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
    }
Packit Service 9ccfef
    STATUS   current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This INFORM notification is issued by the MTA to initiate
Packit Service 9ccfef
          the PacketCable provisioning process when the MTA SNMP
Packit Service 9ccfef
          enrollment mechanism is used.
Packit Service 9ccfef
          It contains the system description, the current software
Packit Service 9ccfef
          version, the MTA device type identifier, the MTA MAC
Packit Service 9ccfef
          address (obtained in the MTA ifTable in the ifPhysAddress
Packit Service 9ccfef
          object that corresponds to the ifIndex 1), and a
Packit Service 9ccfef
          correlation ID."
Packit Service 9ccfef
    ::= { pktcMtaNotification 1 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaDevProvisioningStatus  NOTIFICATION-TYPE
Packit Service 9ccfef
    OBJECTS {
Packit Service 9ccfef
            ifPhysAddress,
Packit Service 9ccfef
            pktcMtaDevCorrelationId,
Packit Service 9ccfef
            pktcMtaDevProvisioningState
Packit Service 9ccfef
    }
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " This INFORM notification may be issued by the MTA to
Packit Service 9ccfef
          confirm the completion of the PacketCable provisioning
Packit Service 9ccfef
          process, and to report its provisioning completion
Packit Service 9ccfef
          status.
Packit Service 9ccfef
          It contains the MTA MAC address (obtained in the MTA
Packit Service 9ccfef
          ifTable in the ifPhysAddress object that corresponds
Packit Service 9ccfef
          to the ifIndex 1), a correlation ID and the MTA
Packit Service 9ccfef
          provisioning state as defined in
Packit Service 9ccfef
          pktcMtaDevProvisioningState."
Packit Service 9ccfef
    ::= { pktcMtaNotification 2 }
Packit Service 9ccfef
Packit Service 9ccfef
--
Packit Service 9ccfef
-- Compliance Statements
Packit Service 9ccfef
--
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaCompliances  OBJECT IDENTIFIER ::= { pktcMtaConformance 1 }
Packit Service 9ccfef
pktcMtaGroups       OBJECT IDENTIFIER ::= { pktcMtaConformance 2 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaBasicCompliance MODULE-COMPLIANCE
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " The compliance statement for MTA devices that implement
Packit Service 9ccfef
          PacketCable or IPCablecom requirements.
Packit Service 9ccfef
Packit Service 9ccfef
          This compliance statement applies to MTA implementations
Packit Service 9ccfef
          that support PacketCable 1.0 or IPCablecom requirements,
Packit Service 9ccfef
          which are not IPv6-capable at the time of this
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
          RFC publication."
Packit Service 9ccfef
Packit Service 9ccfef
    MODULE  -- Unconditionally mandatory groups for MTAs
Packit Service 9ccfef
Packit Service 9ccfef
        MANDATORY-GROUPS {
Packit Service 9ccfef
            pktcMtaGroup,
Packit Service 9ccfef
            pktcMtaNotificationGroup
Packit Service 9ccfef
        }
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT  pktcMtaDevDhcpServerAddressType
Packit Service 9ccfef
            SYNTAX      InetAddressType { ipv4(1) }
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                " Support for address types other than 'ipv4(1)'
Packit Service 9ccfef
            is not presently specified and therefore is not
Packit Service 9ccfef
            required.  It may be defined in future versions of
Packit Service 9ccfef
            this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT  pktcMtaDevDnsServerAddressType
Packit Service 9ccfef
            SYNTAX      InetAddressType { ipv4(1) }
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                " Support for address types other than 'ipv4(1)'
Packit Service 9ccfef
            is not presently specified and therefore is not
Packit Service 9ccfef
            required.  It may be defined in future versions of
Packit Service 9ccfef
            this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT  pktcMtaDevTimeServerAddressType
Packit Service 9ccfef
            SYNTAX      InetAddressType { ipv4(1) }
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                " Support for address types other than 'ipv4(1)'
Packit Service 9ccfef
            is not presently specified and therefore is not
Packit Service 9ccfef
            required.  It may be defined in future versions of
Packit Service 9ccfef
            this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevServerDhcp1
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevServerDhcp2
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevServerDns1
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevServerDns2
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevTimeServer
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevProvConfigEncryptAlg
Packit Service 9ccfef
            SYNTAX  PktcMtaDevProvEncryptAlg
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support
Packit Service 9ccfef
            values of none(0) and des64Cbcmode(1).
Packit Service 9ccfef
            An IV of zero is used to encrypt in des64Cbcmode, and
Packit Service 9ccfef
            the length of pktcMtaDevProvConfigKey is 64 bits, as
Packit Service 9ccfef
            defined in the PacketCable Security specification.
Packit Service 9ccfef
            Other encryption types may be defined in future
Packit Service 9ccfef
            versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT pktcMtaDevRealmOrgName
Packit Service 9ccfef
            SYNTAX LongUtf8String (SIZE (1..384))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "The Organization Name field in X.509 certificates
Packit Service 9ccfef
            can contain up to 64 UTF-8 encoded characters,
Packit Service 9ccfef
            as defined in RFCs 3280 and 4630.  Therefore, compliant
Packit Service 9ccfef
            devices are only required to support Organization
Packit Service 9ccfef
            Name values of up to 64 UTF-8 encoded characters.
Packit Service 9ccfef
            Given that RFCs 3280 and 4630 define the UTF-8 encoding,
Packit Service 9ccfef
            compliant devices must support a maximum size of 384
Packit Service 9ccfef
            octets for pktcMtaDevRealmOrgName.  The calculation of
Packit Service 9ccfef
            384 octets comes from the RFC 3629 UTF-8 encoding
Packit Service 9ccfef
            definition whereby the UTF-8 encoded characters
Packit Service 9ccfef
            are encoded as sequences of 1 to 6 octets,
Packit Service 9ccfef
            assuming that code points as high as 0x7ffffffff
Packit Service 9ccfef
            might be used.  Subsequent versions of Unicode and ISO
Packit Service 9ccfef
            10646 have limited the upper bound to 0x10ffff.
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
            Consequently, the current version of UTF-8, defined in
Packit Service 9ccfef
            RFC 3629, does not require more than four octets to
Packit Service 9ccfef
            encode a valid code point."
Packit Service 9ccfef
Packit Service 9ccfef
    ::= { pktcMtaCompliances 1 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaGroup OBJECT-GROUP
Packit Service 9ccfef
    OBJECTS {
Packit Service 9ccfef
            pktcMtaDevResetNow,
Packit Service 9ccfef
            pktcMtaDevSerialNumber,
Packit Service 9ccfef
            pktcMtaDevSwCurrentVers,
Packit Service 9ccfef
            pktcMtaDevFQDN,
Packit Service 9ccfef
            pktcMtaDevEndPntCount,
Packit Service 9ccfef
            pktcMtaDevEnabled,
Packit Service 9ccfef
            pktcMtaDevProvisioningCounter,
Packit Service 9ccfef
            pktcMtaDevErrorOid,
Packit Service 9ccfef
            pktcMtaDevErrorValue,
Packit Service 9ccfef
            pktcMtaDevErrorReason,
Packit Service 9ccfef
            pktcMtaDevTypeIdentifier,
Packit Service 9ccfef
            pktcMtaDevProvisioningState,
Packit Service 9ccfef
            pktcMtaDevHttpAccess,
Packit Service 9ccfef
            pktcMtaDevCertificate,
Packit Service 9ccfef
            pktcMtaDevCorrelationId,
Packit Service 9ccfef
            pktcMtaDevManufacturerCertificate,
Packit Service 9ccfef
            pktcMtaDevDhcpServerAddressType,
Packit Service 9ccfef
            pktcMtaDevDnsServerAddressType,
Packit Service 9ccfef
            pktcMtaDevTimeServerAddressType,
Packit Service 9ccfef
            pktcMtaDevProvConfigEncryptAlg,
Packit Service 9ccfef
            pktcMtaDevServerDhcp1,
Packit Service 9ccfef
            pktcMtaDevServerDhcp2,
Packit Service 9ccfef
            pktcMtaDevServerDns1,
Packit Service 9ccfef
            pktcMtaDevServerDns2,
Packit Service 9ccfef
            pktcMtaDevTimeServer,
Packit Service 9ccfef
            pktcMtaDevConfigFile,
Packit Service 9ccfef
            pktcMtaDevSnmpEntity,
Packit Service 9ccfef
            pktcMtaDevRealmPkinitGracePeriod,
Packit Service 9ccfef
            pktcMtaDevRealmTgsGracePeriod,
Packit Service 9ccfef
            pktcMtaDevRealmAvailSlot,
Packit Service 9ccfef
            pktcMtaDevRealmName,
Packit Service 9ccfef
            pktcMtaDevRealmOrgName,
Packit Service 9ccfef
            pktcMtaDevRealmUnsolicitedKeyMaxTimeout,
Packit Service 9ccfef
            pktcMtaDevRealmUnsolicitedKeyNomTimeout,
Packit Service 9ccfef
            pktcMtaDevRealmUnsolicitedKeyMaxRetries,
Packit Service 9ccfef
            pktcMtaDevRealmStatus,
Packit Service 9ccfef
            pktcMtaDevCmsAvailSlot,
Packit Service 9ccfef
            pktcMtaDevCmsFqdn,
Packit Service 9ccfef
            pktcMtaDevCmsKerbRealmName,
Packit Service 9ccfef
            pktcMtaDevCmsUnsolicitedKeyMaxTimeout,
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
            pktcMtaDevCmsUnsolicitedKeyNomTimeout,
Packit Service 9ccfef
            pktcMtaDevCmsUnsolicitedKeyMaxRetries,
Packit Service 9ccfef
            pktcMtaDevCmsSolicitedKeyTimeout,
Packit Service 9ccfef
            pktcMtaDevCmsMaxClockSkew,
Packit Service 9ccfef
            pktcMtaDevCmsIpsecCtrl,
Packit Service 9ccfef
            pktcMtaDevCmsStatus,
Packit Service 9ccfef
            pktcMtaDevResetKrbTickets,
Packit Service 9ccfef
            pktcMtaDevProvUnsolicitedKeyMaxTimeout,
Packit Service 9ccfef
            pktcMtaDevProvUnsolicitedKeyNomTimeout,
Packit Service 9ccfef
            pktcMtaDevProvUnsolicitedKeyMaxRetries,
Packit Service 9ccfef
            pktcMtaDevProvKerbRealmName,
Packit Service 9ccfef
            pktcMtaDevProvSolicitedKeyTimeout,
Packit Service 9ccfef
            pktcMtaDevProvConfigHash,
Packit Service 9ccfef
            pktcMtaDevProvConfigKey,
Packit Service 9ccfef
            pktcMtaDevProvState,
Packit Service 9ccfef
            pktcMtaDevProvisioningTimer,
Packit Service 9ccfef
            pktcMtaDevTelephonyRootCertificate
Packit Service 9ccfef
    }
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " A collection of objects for managing PacketCable or
Packit Service 9ccfef
          IPCablecom MTA implementations."
Packit Service 9ccfef
    ::= { pktcMtaGroups 1 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaNotificationGroup          NOTIFICATION-GROUP
Packit Service 9ccfef
    NOTIFICATIONS {
Packit Service 9ccfef
                  pktcMtaDevProvisioningStatus,
Packit Service 9ccfef
                  pktcMtaDevProvisioningEnrollment
Packit Service 9ccfef
    }
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " A collection of notifications dealing with the change of
Packit Service 9ccfef
          MTA provisioning status."
Packit Service 9ccfef
    ::= { pktcMtaGroups 2 }
Packit Service 9ccfef
Packit Service 9ccfef
pktcMtaBasicSmtaCompliance MODULE-COMPLIANCE
Packit Service 9ccfef
    STATUS      current
Packit Service 9ccfef
    DESCRIPTION
Packit Service 9ccfef
        " The compliance statement for S-MTA devices
Packit Service 9ccfef
          that implement PacketCable or IPCablecom requirements.
Packit Service 9ccfef
Packit Service 9ccfef
          This compliance statement applies to S-MTA implementations
Packit Service 9ccfef
          that support PacketCable or IPCablecom requirements,
Packit Service 9ccfef
          which are not IPv6-capable at the time of this
Packit Service 9ccfef
          RFC publication."
Packit Service 9ccfef
Packit Service 9ccfef
   MODULE -- Unconditionally Mandatory Groups for S-MTA devices
Packit Service 9ccfef
        MANDATORY-GROUPS {
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
            pktcMtaGroup,
Packit Service 9ccfef
            pktcMtaNotificationGroup
Packit Service 9ccfef
        }
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT  pktcMtaDevDhcpServerAddressType
Packit Service 9ccfef
            SYNTAX      InetAddressType { ipv4(1) }
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                " Support for address types other than 'ipv4(1)'
Packit Service 9ccfef
            is not presently specified and therefore is not
Packit Service 9ccfef
            required.  It may be defined in future versions of
Packit Service 9ccfef
            this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT  pktcMtaDevDnsServerAddressType
Packit Service 9ccfef
            SYNTAX      InetAddressType { ipv4(1) }
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                " Support for address types other than 'ipv4(1)'
Packit Service 9ccfef
            is not presently specified and therefore is not
Packit Service 9ccfef
            required.  It may be defined in future versions of
Packit Service 9ccfef
            this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT  pktcMtaDevTimeServerAddressType
Packit Service 9ccfef
            SYNTAX      InetAddressType { ipv4(1) }
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                " Support for address types other than 'ipv4(1)'
Packit Service 9ccfef
            is not presently specified and therefore is not
Packit Service 9ccfef
            required.  It may be defined in future versions of
Packit Service 9ccfef
            this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevServerDhcp1
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevServerDhcp2
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevServerDns1
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevServerDns2
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevTimeServer
Packit Service 9ccfef
            SYNTAX  InetAddress (SIZE(4))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support IPv4
Packit Service 9ccfef
            addresses.  Other address types support may be defined in
Packit Service 9ccfef
            future versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT    pktcMtaDevProvConfigEncryptAlg
Packit Service 9ccfef
            SYNTAX  PktcMtaDevProvEncryptAlg
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "An implementation is only required to support
Packit Service 9ccfef
            values of none(0) and des64Cbcmode(1).
Packit Service 9ccfef
            An IV of zero is used to encrypt in des64Cbcmode, and
Packit Service 9ccfef
            the length of pktcMtaDevProvConfigKey is 64 bits, as
Packit Service 9ccfef
            defined in the PacketCable Security specification.
Packit Service 9ccfef
            Other encryption types may be defined in future
Packit Service 9ccfef
            versions of this MIB module."
Packit Service 9ccfef
Packit Service 9ccfef
        OBJECT pktcMtaDevRealmOrgName
Packit Service 9ccfef
            SYNTAX LongUtf8String (SIZE (1..384))
Packit Service 9ccfef
            DESCRIPTION
Packit Service 9ccfef
                 "The Organization Name field in X.509 certificates
Packit Service 9ccfef
            can contain up to 64 UTF-8 encoded characters, as
Packit Service 9ccfef
            defined in RFCs 3280 and 4630.  Therefore, compliant
Packit Service 9ccfef
            devices are only required to support Organization
Packit Service 9ccfef
            Name values of up to 64 UTF-8 encoded characters.
Packit Service 9ccfef
            Given that RFCs 3280 and 4630 define the UTF-8 encoding,
Packit Service 9ccfef
            compliant devices must support a maximum size of 384
Packit Service 9ccfef
            octets for pktcMtaDevRealmOrgName.  The calculation of
Packit Service 9ccfef
            384 octets comes from the RFC 3629 UTF-8 encoding
Packit Service 9ccfef
            definition whereby the UTF-8 encoded characters
Packit Service 9ccfef
            are encoded as sequences of 1 to 6 octets,
Packit Service 9ccfef
            assuming that code points as high as 0x7ffffffff
Packit Service 9ccfef
            might be used.  Subsequent versions of Unicode and ISO
Packit Service 9ccfef
            10646 have limited the upper bound to 0x10ffff.
Packit Service 9ccfef
            Consequently, the current version of UTF-8, defined in
Packit Service 9ccfef
            RFC 3629 does not require more than four octets to
Packit Service 9ccfef
            encode a valid code point."
Packit Service 9ccfef
    MODULE DOCS-CABLE-DEVICE-MIB
Packit Service 9ccfef
        MANDATORY-GROUPS {
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
Packit Service 9ccfef
            docsDevSoftwareGroupV2
Packit Service 9ccfef
        }
Packit Service 9ccfef
Packit Service 9ccfef
    MODULE DOCS-IETF-BPI2-MIB
Packit Service 9ccfef
        MANDATORY-GROUPS {
Packit Service 9ccfef
            docsBpi2CodeDownloadGroup
Packit Service 9ccfef
        }
Packit Service 9ccfef
Packit Service 9ccfef
     ::= { pktcMtaCompliances 2 }
Packit Service 9ccfef
Packit Service 9ccfef
END