ACCESSBIND-PIB PIB-DEFINITIONS ::= BEGIN  

   IMPORTS  

       Unsigned32, Integer32, MODULE-IDENTITY,  

       MODULE-COMPLIANCE, OBJECT-TYPE, OBJECT-GROUP, pib  

               FROM COPS-PR-SPPI  

       InstanceId, Prid  

               FROM COPS-PR-SPPI-TC   

       RoleCombination, PrcIdentifier   

               FROM FRAMEWORK-ROLE-PIB  

       InetAddress, InetAddressType  

               FROM INET-ADDRESS-MIB  

       TruthValue, PhysAddress  

               FROM SNMPv2-TC;             

   accessBindPib  MODULE-IDENTITY  

       SUBJECT-CATEGORIES { all }  

       LAST-UPDATED "200107101600Z"             

       ORGANIZATION "IETF RAP WG"  

       CONTACT-INFO "  

                     Walter Weiss 

                     Ellacoya Networks 

                     7 Henry Clay Drive 

                     Merrimack, NH 03054 

                     Phone: 603-879-7364 

                     E-mail: wweiss@ellacoya.com  

                   "  

       DESCRIPTION  

               "A PIB module containing the set of classes to bind  

               authorization and authentication to COPS 

               Provisioning "  

       ::= { pib xxx }    -- xxx to be assigned by IANA 

   --  

   -- The branch OIDs in the AccessBind PIB  

   --  

   capabilityClasses OBJECT IDENTIFIER ::= { accessBindPib 1 } 

   sessionClasses OBJECT IDENTIFIER ::= { accessBindPib 2 }  

   accessorClasses OBJECT IDENTIFIER ::= { accessBindPib 3 }  

   contextClasses OBJECT IDENTIFIER ::= { accessBindPib 4 }  

   authClasses OBJECT IDENTIFIER ::= { accessBindPib 5 }  

   --  

   -- Session Table  

   --  

   sessionTable OBJECT-TYPE  

       SYNTAX         SEQUENCE OF SessionEntry  

       PIB-ACCESS     install-notify   

       STATUS         current  

       DESCRIPTION  

           "An instance of this class is created by the PEP and sent   

            to the PDP. The PDP will fill in the sessionStatus field   

            and send the instance back when sending a decision."  

       ::= { sessionClasses 1 }  

   sessionEntry OBJECT-TYPE  

       SYNTAX         SessionEntry  

       STATUS         current  

       DESCRIPTION  

           "An instance of the sessionTable PRC."  

       PIB-INDEX { sessionId }  

       UNIQUENESS { }   

       ::= { sessionTable 1 }  

   SessionEntry ::= SEQUENCE {  

           sessionId                  InstanceId,  

           sessionStatus              INTEGER,  

           sessionRealm               OCTET STRING,  

           sessionUsername            OCTET STRING,  

           sessionDataPath            Prid,  

           sessionBinding             ReferenceId,  

           sessionAccessor            ReferenceId  

   }  

   sessionId  OBJECT-TYPE  

       SYNTAX         InstanceId  

       STATUS         current  

       DESCRIPTION  

           "An index to uniquely identify an instance of this  

           provisioning class."  

       ::= { sessionEntry 1 }  

   sessionStatus OBJECT-TYPE  

       SYNTAX         INTEGER { 

                                            Pending(0), 

                                            Enabled(1), 

                                            Disabled(2) 

                                        } 

       STATUS         current  

       DESCRIPTION  

           "This attribute is set by the PDP. Set to true(1) if the   

           PDP has authorized the session, else set to false(2)." 

       ::= { sessionEntry 2 }  

   sessionRealm OBJECT-TYPE  

       SYNTAX         OCTET STRING  

       STATUS         current  

       DESCRIPTION  

           "Realm name in which the client is requesting  

           access (sometimes referred to as a domain name." 

       ::= { sessionEntry 3 }  

   sessionUsername OBJECT-TYPE  

       SYNTAX         OCTET STRING  

       STATUS         current  

       DESCRIPTION  

           "Unique user name to identify the client requesting  

           access."  

       ::= { sessionEntry 4 }  

   sessionDataPath OBJECT-TYPE  

       SYNTAX         Prid 

       STATUS         current  

       DESCRIPTION  

           "This attribute references the first functional data path  

           element to process data flow for this session. It is  

           first assigned by the PEP with the  

           accessorElementDefaultSessionDataPath in the  

           accessorElement and may optionally be reassigned by the 

           PDP." 

       ::= { sessionEntry 5 }  

   sessionBinding  OBJECT-TYPE  

       SYNTAX         ReferenceId  

       PIB-REFERENCES { sessionEntry } 

       STATUS         current  

       DESCRIPTION  

           "This attribute allows a PEP to indicate to the PDP that  

           this session was generated downstream on the data path  

           from a session for which an PEP has previously generated  

           an authorization request. This allows the PDP to  

           reference additional knowledge acquired from the previous  

           session such as the credentials or interface data. "  

       ::= { sessionEntry 6 }  

   sessionAccessor OBJECT-TYPE  

       SYNTAX         ReferenceId 

       PIB-REFERENCES { accessorEntry }    

       STATUS         current  

       DESCRIPTION  

           "This attribute references the instance of the previously  

            provisioned Accessor that resulted in this PEP Access  

            Request."  

       ::= { sessionEntry 7 }  

   -- 

   -- Accessor Table 

   -- 

   accessorTable OBJECT-TYPE   

     SYNTAX          SEQUENCE OF AccessorEntry 

     PIB-ACCESS      install   

     STATUS          current   

     DESCRIPTION   

           "The AccessorTable identifies when the PEP should send an  

           access or authentication request to the PDP. As a  

           result of this request, a new session may be started.  

           Hence, the AccessorTable can be said to create or remove  

           SessionTable entries. "  

     ::= { accessorClasses 1 }   

   accessorEntry OBJECT-TYPE   

     SYNTAX  AccessorEntry 

     STATUS  current   

     DESCRIPTION   

          " An instance of this class defines the circumstances for  

          generating an access request, and provides the means for  

          specifying the contents of the PEP Access Request."   

     PIB-INDEX { accessorId } 

     UNIQUENESS {    accessorRequestAuth, 

                     accessorAccElmRef, 

                     accessorAuthProtocol, 

                     accessorAuthContext, 

                     accessorDefaultDataPath 

                } 

     ::= { accessorTable 1}   

   AccessorEntry::= SEQUENCE {   

     accessorId                      InstanceId,   

     accessorRequestAuth             TruthValue, 

     accessorAccElmRef               ReferenceId, 

     accessorAuthProtocol            TagReferenceId, 

     accessorAuthContext             TagReferenceId, 

     accessorDefaultDataPath         Prid 

   }   

   accessorId OBJECT-TYPE  

     SYNTAX    InstanceId     

     STATUS        current  

     DESCRIPTION  

          " An arbitrary integer index that uniquely identifies  

          an instance of the accessorTable class."  

      ::= { accessorEntry 1} 

   accessorRequestAuth OBJECT-TYPE  

     SYNTAX        TruthValue 

     STATUS        current  

     DESCRIPTION  

          "Indicates whether or not authentication is required for 

          this session. TRUE indicates that authorization is 

          required."  

        ::= { accessorEntry 2} 

   accessorAccElmRef OBJECT-TYPE  

     SYNTAX        ReferenceId 

     PIB-REFERENCES { accessorElementEntry } 

     STATUS        current  

     DESCRIPTION  

          "A reference to an AccessorElementTable instance which  

          determines the scope (criteria for generating a new  

          request) and interim forwarding behavior."  

        ::= { accessorEntry 3} 

   accessorAuthProtocol OBJECT-TYPE  

     SYNTAX        TagReferenceId 

     PIB-TAG       { accessorAuthProtocolGroup } 

     STATUS        current  

     DESCRIPTION  

          "Identifies a list of accessorAuthProtocolTable entries  

          associated with this accessor instance."  

        ::= { accessorEntry 4} 

   accessorAuthContext OBJECT-TYPE  

     SYNTAX       TagReferenceId  

     PIB-TAG       { contextDataGroup } 

     STATUS        current  

     DESCRIPTION  

          "Identifies a list of ContextDataTable entries  

          associated with this accessor instance."  

        ::= { accessorEntry 5} 

   accessorDefaultDataPath OBJECT-TYPE  

     SYNTAX        Prid 

     STATUS        current  

     DESCRIPTION  

          "The data path for æout of scopeÆ traffic."  

       ::= { accessorEntry 6} 

   -- 

   -- AccessorElement Table 

   -- 

   accessorElementTable OBJECT-TYPE   

     SYNTAX          SEQUENCE OF AccessorElementEntry 

     PIB-ACCESS      install   

     STATUS          current   

     DESCRIPTION   

           "This table defines the criteria to be used to generate  

           an access request. It also defines the interim forwarding  

           behavior pending a decision from the server."  

     ::= { accessorClasses 2 }   

  accessorElementEntry OBJECT-TYPE   

     SYNTAX  AccessorElementEntry 

     STATUS  current   

     DESCRIPTION   

          "An instance of this class defines request trigger  

          criteria and interim forwarding behavior for packets."   

     PIB-INDEX { accessorElementId } 

     UNIQUENESS { accessorElementScope } 

     ::= { accessorElementTable 1}   

   AccessorElementEntry::= SEQUENCE {   

     accessorElementId                      InstanceId, 

     accessorElementScope                   TagReferenceId, 

     accessorElementInterimFwdBehavior      INTEGER, 

     accessorElementDefaultSessionDataPath  Prid 

   } 

   accessorElementId OBJECT-TYPE  

     SYNTAX        InstanceId 

     STATUS        current  

     DESCRIPTION  

          "An arbitrary integer index that uniquely identifies an  

          instance of the accessorElementTable class."   

        ::= { accessorElementEntry 1} 

   accessorElementScope OBJECT-TYPE  

     SYNTAX        TagReferenceId 

     PIB-TAG       { accessorSessionScopeGroup } 

     STATUS        current  

     DESCRIPTION  

          "Identifies a list of AccessorSessionScopeTable instances  

          associated with an instance of this class. This list  

          defines the criteria for partitioning various portions of  

          traffic into distinct sessions."  

        ::= { accessorElementEntry 2} 

   accessorElementInterimFwdBehavior OBJECT-TYPE  

     SYNTAX INTEGER { 

                       DROP (0), 

                       FORWARD (1), 

                       QUEUE (2) 

                     } 

     STATUS        current  

     DESCRIPTION  

          "The forwarding behavior to use while awaiting a PDP  

          Access Response message."  

        ::= { accessorElementEntry 3} 

   accessorElementDefaultSessionDataPath OBJECT-TYPE  

     SYNTAX        Prid 

     STATUS        current  

     DESCRIPTION  

          "The default data path for each session while waiting for 

a  

          PDP Access Response message."  

        ::= { accessorElementEntry 4} 

-- 

-- AccessorSessionScope Table 

-- 

   accessorSessionScopeTable OBJECT-TYPE   

     SYNTAX          SEQUENCE OF AccessorSessionScopeEntry 

     PIB-ACCESS      install   

     STATUS          current   

     DESCRIPTION   

           "This class defines the criteria to be used for  

           partitioning various portions of traffic into distinct  

           sessions."  

     ::= { accessorClasses 3 }   

   accessorSessionScopeEntry OBJECT-TYPE   

     SYNTAX  AccessorSessionScopeEntry 

     STATUS  current   

     DESCRIPTION   

          "An instance of this class defines an individual criterion  

          to be used towards generating an access request."   

     PIB-INDEX { accessorSessionScopeId } 

     UNIQUENESS { accessorSessionScopeGroup, 

                  accessorSessionScopeScopeRef 

                } 

     ::= { accessorSessionScopeTable 1}   

   AccessorSessionScopeEntry::= SEQUENCE { 

     accessorSessionScopeId         InstanceId, 

     accessorSessionScopeGroup      TagId, 

     accessorSessionScopeFilter     Prid, 

     accessorSessionScopePrecedence INTEGER 

   } 

   accessorSessionScopeId    OBJECT-TYPE  

     SYNTAX        InstanceId 

     STATUS        current  

     DESCRIPTION  

          "An arbitrary integer index that uniquely identifies an  

          instance of the accessorSessionScopeTable class."  

        ::= { accessorSessionScopeEntry 1} 

   accessorSessionScopeGroup  OBJECT-TYPE  

     SYNTAX        TagId 

     STATUS        current  

     DESCRIPTION  

          "Represents the binding between the accessorElementTable  

           and the accessorSessionScope entries. A group of  

           accessorSessionScope entries constitutes the criteria for  

           partitioning various portions of traffic into distinct  

           sessions."  

        ::= { accessorSessionScopeEntry 2} 

   accessorSessionScopeFilter   OBJECT-TYPE  

     SYNTAX        Prid 

     STATUS        current  

     DESCRIPTION  

          "Pointer to a filter to be used as the criteria."  

        ::= { accessorSessionScopeEntry 3} 

   accessorSessionScopePrecedence OBJECT-TYPE  

     SYNTAX        INTEGER 

     STATUS        current  

     DESCRIPTION  

          "Represents the precedence of this criterion with respect  

          to other criteria within the same group. When the  

          precedence is unique, the instance represents an  

          alternative criteria (an ORing function). When the  

          precedence for two or more instances of the  

          accessorSessionScope class is the same, the attributes  

          within all the instances are treated collectively as a  

          single filter criteria."  

        ::= { accessorSessionScopeEntry 4} 

   --  

   -- AccessorAuthProtocol Table 

   -- 

   accessorAuthProtocolTable OBJECT-TYPE   

     SYNTAX          SEQUENCE OF AccessorAuthProtocolEntry 

     PIB-ACCESS      install   

     STATUS          current   

     DESCRIPTION   

           "This class lists the authentication protocols that can  

           be used for an access request originating from a  

           particular instance of the accessorTable."  

     ::= { accessorClasses 4 }   

   accessorAuthProtocolEntry OBJECT-TYPE   

     SYNTAX  AccessorAuthProtocolEntry 

     STATUS  current   

     DESCRIPTION   

          "An instance of this class describes an authentication  

          protocol that may be used for an access request. Instances  

          of this class that share the same TagId value collectively  

          constitute a list of authentication protocols that may be  

          used for a given access request"   

     PIB-INDEX { accessorAuthProtocolId } 

     UNIQUENESS { accessorAuthProtocolGroup, 

                  accessorAuthProtocolAuthMechanism 

                } 

     ::= { accessorAuthProtocolTable 1}   

   AccessorAuthProtocolEntry::= SEQUENCE { 

     accessorAuthProtocolId          InstanceId, 

     accessorAuthProtocolGroup       TagId, 

     accessorAuthProtocolAuthMechanism INTEGER 

   } 

   accessorAuthProtocolId    OBJECT-TYPE  

     SYNTAX        InstanceId 

     STATUS        current  

     DESCRIPTION  

          "An arbitrary integer index that uniquely identifies an  

          instance of the ContextDataTable class."  

     ::= { accessorAuthProtocolEntry 1} 

   accessorAuthProtocolGroup OBJECT-TYPE  

     SYNTAX        TagId 

     STATUS        current  

     DESCRIPTION  

          "Represents a binding between an accessorTable instance  

          and a list of accessorAuthProtocolTable instances."  

     ::= { accessorAuthProtocolEntry 2} 

   accessorAuthProtocolAuthMechanism OBJECT-TYPE  

     SYNTAX        INTEGER { 

                               PAP (0), 

                               CHAP (1), 

                               EAP-MD5(2), 

                               EAP-TLS(3) 

                             } 

     STATUS        current  

     DESCRIPTION  

          "The authentication protocol that may be used for an  

          access request."  

        ::= { accessorAuthProtocolEntry 3} 

   --  

   -- ContextData Table 

   --  

contextDataTable OBJECT-TYPE   

     SYNTAX          SEQUENCE OF ContextDataEntry 

     PIB-ACCESS      install   

     STATUS          current   

     DESCRIPTION   

           "This class points to the context information to be  

           included with an access request."  

     ::= { contextClasses 1 }   

  contextDataEntry OBJECT-TYPE   

     SYNTAX  ContextDataEntry 

     STATUS  current   

     DESCRIPTION   

          "An instance of this class contains the type description  

          (COPS-PR OID) of the class which needs to be filled in by  

          the PEP and included with a PEP access request."   

     PIB-INDEX { contextDataId } 

     UNIQUENESS { } 

     ::= { contextDataTable 1}   

   ContextDataEntry::= SEQUENCE { 

     contextDataId            InstanceId, 

     contextDataGroup         TagId, 

     contextDataSessionRef    ReferenceId, 

     contextDataIfElement     PrcIdentifier, 

     contextDataEncapsulation INTEGER 

   } 

   contextDataId     OBJECT-TYPE  

     SYNTAX        InstanceId 

     STATUS        current  

     DESCRIPTION  

          "An arbitrary integer index that uniquely identifies an   

          instance of the contextDataTable class."  

        ::= { contextDataEntry 1} 

   contextDataGroup  OBJECT-TYPE  

     SYNTAX        TagId 

     STATUS        current  

     DESCRIPTION  

          "Defines the grouping of contextData instances  

          that are applicable to a given Accessor. This attribute  

          MUST NOT be specified when the instance is used in  

          Session-specific contextData Request message."  

        ::= { contextDataEntry 2} 

   contextDataSessionRef     OBJECT-TYPE  

     SYNTAX        ReferenceId 

     PIB-REFERENCES { sessionEntry } 

     STATUS        current  

     DESCRIPTION  

          "This attribute is used to specify the Session for which  

           the ContextData is being requested with a Session- 

           specific ContextData Request. This attribute MUST NOT be  

           specified when the instance of the ContextData class is  

           used in an Accessor Provisioning Decision message." 

        ::= { contextDataEntry 3} 

   contextDataIfElement      OBJECT-TYPE  

     SYNTAX        PrcIdentifier 

     STATUS        current  

     DESCRIPTION  

          "The OID of a class whose instance is to be included with  

          the PEP access request or Session-specific ContextData  

          Response."  

        ::= { contextDataEntry 4} 

   contextDataEncapsulation OBJECT-TYPE  

     SYNTAX        INTEGER 

     STATUS        current  

     DESCRIPTION  

          "This attribute allows one to distinguish between inner  

           and outer headers when there are multiple encapsulated  

           headers of the same type in a packet.  

           A value of: 

           0 means all headers, 

           positive number ænÆ means the ænÆth header starting  

           from the outermost, 

           negative number ænÆ means the ænÆth header starting from  

           the innermost."  

        ::= { contextDataEntry 5} 

   -- 

   -- Layer 3 Header Data PRC 

   -- 

   ctxtL3HdrTable OBJECT-TYPE  

       SYNTAX         SEQUENCE OF ctxtL3HdrEntry  

       PIB-ACCESS     notify   

       STATUS         current  

       DESCRIPTION  

           "An instance of this class is created by the PEP and sent   

            to the PDP to provide the PDP with information it  

            requested in the ContextData PRC. The PDP uses  

            this PRC to make Authentication/Provisioning decisions."  

       ::= { contextClasses 2 }  

   ctxtL3HdrEntry OBJECT-TYPE  

       SYNTAX         CtxtL3HdrEntry 

       STATUS         current  

       DESCRIPTION  

           "An instance of the ctxtL3HdrTable PRC."  

       PIB-INDEX { ctxtL3HdrId }  

       UNIQUENESS { }   

       ::= { ctxtL3HdrTable 1 }  

   CtxtL3HdrEntry::= SEQUENCE {  

           ctxtL3HdrId               InstanceId,  

           ctxtL3HdrSrcAddrType        InetAddressType,  

           ctxtL3HdrSrcAddr            InetAddress,  

           ctxtL3HdrDstAddrType        InetAddressType,  

           ctxtL3HdrDstAddr            InetAddress,  

           ctxtL3HdrProtocol           Unsigned32,  

           ctxtL3HdrSrcPort            Unsigned32,  

           ctxtL3HdrDstPort            Unsigned32,  

           ctxtL3HdrDscp               Unsigned32,  

           ctxtL3HdrEcn                TruthValue,  

           ctxtL3HdrIpOpt              TruthValue,  

           ctxtL3HdrEncap              Integer32 

   }  

   ctxtL3HdrId  OBJECT-TYPE  

       SYNTAX         InstanceId  

       STATUS         current  

       DESCRIPTION  

           "An index to uniquely identify an instance of this  

           provisioning class."  

       ::= { ctxtL3HdrEntry 1 }  

   ctxtL3HdrSrcAddrType OBJECT-TYPE  

       SYNTAX         InetAddressType 

       STATUS         current  

       DESCRIPTION  

           "The address type enumeration value [INETADDR] to specify   

            the type of the packet's source L3 address)." 

       ::= { ctxtL3HdrEntry 2 }  

   ctxtL3HdrSrcAddr OBJECT-TYPE  

       SYNTAX         InetAddress  

       STATUS         current  

       DESCRIPTION  

           " The packet's source L3 address."  

       ::= { ctxtL3HdrEntry 3 }  

   ctxtL3HdrDstAddrType OBJECT-TYPE  

       SYNTAX         InetAddressType 

       STATUS         current  

       DESCRIPTION  

           "The address type enumeration value [INETADDR] to specify   

            the type of the packet's destination L3 address."  

       ::= { ctxtL3HdrEntry 4 }  

   ctxtL3HdrDstAddr OBJECT-TYPE  

       SYNTAX         InetAddress  

       STATUS         current  

       DESCRIPTION  

           "The packet's destination L3 address."  

       ::= { ctxtL3HdrEntry 5 }  

   ctxtL3HdrProtocol OBJECT-TYPE  

       SYNTAX         Unsigned32 

       STATUS         current  

       DESCRIPTION  

           "The packet's protocol field."  

       ::= { ctxtL3HdrEntry 6 }  

   ctxtL3HdrSrcPort  OBJECT-TYPE  

       SYNTAX         Unsigned32 

       STATUS         current  

       DESCRIPTION  

           "This attribute binds an existing upstream session to  

           this session instance."  

       ::= { ctxtL3HdrEntry 7 } 

   ctxtL3HdrDstPort  OBJECT-TYPE  

       SYNTAX         Unsigned32 

       STATUS         current  

       DESCRIPTION  

           "This attribute binds an existing upstream session to  

           this session instance."  

       ::= { ctxtL3HdrEntry 8 } 

   ctxtL3HdrDscp  OBJECT-TYPE  

       SYNTAX         Unsigned32 

       STATUS         current  

       DESCRIPTION  

           "."  

       ::= { ctxtL3HdrEntry 9 } 

   ctxtL3HdrEcn  OBJECT-TYPE  

       SYNTAX         TruthValue  

       STATUS         current  

       DESCRIPTION  

           "PEP sets this attribute to true(1) if ECN capable."  

       ::= { ctxtL3HdrEntry 10 } 

   ctxtL3HdrIpOpt  OBJECT-TYPE  

       SYNTAX         OCTET STRING  

       STATUS         current  

       DESCRIPTION  

           "IP Options field in the packet."  

       ::= { ctxtL3HdrEntry 11 } 

   ctxtL3HdrEncap  OBJECT-TYPE  

       SYNTAX         Integer32  

       STATUS         current  

       DESCRIPTION  

           "This attribute specifies which encapsulated header is  

           being described. The sign on this value will be the same   

           as the value specified in the ContextData  

           instance that requested this header. If the original  

           ContextData instance specified a  

           ContextDataEncapsulation value of zero (meaning  

           return all headers), then all instances of this attribute  

           MUST be expressed as positive numbers.  

           A value of: 

           positive number ænÆ means the ænÆth header starting  

           from the outermost, 

           negative number ænÆ means the ænÆth header starting from  

           the innermost."  

       ::= { ctxtL3HdrEntry 12 } 

-- 

-- 802.1 Header Data PRC 

-- 

ctxt802HdrTable OBJECT-TYPE  

       SYNTAX         SEQUENCE OF Ctxt802HdrEntry  

       PIB-ACCESS     notify   

       STATUS         current  

       DESCRIPTION  

           "An instance of this class is created by the PEP and sent   

            to the PDP to provide the PDP with information it  

            requested in the ContextData PRC. The PDP uses  

            this PRC to make Authorization/Provisioning decisions."  

       ::= { contextClasses 3 }  

   ctxt802HdrEntry OBJECT-TYPE  

       SYNTAX         Ctxt802HdrEntry 

       STATUS         current  

       DESCRIPTION  

           "An instance of the ctxt802HdrTable PRC."  

       PIB-INDEX { ctxt802HdrId }  

       UNIQUENESS { }   

       ::= { ctxt802HdrTable 1 }  

   Ctxt802HdrEntry::= SEQUENCE {  

           ctxt802HdrId               InstanceId,  

           ctxt802HdrSrcAddr          PhysAddress,  

           ctxt802HdrDstAddr          PhysAddress,  

           ctxt802HdrProtocol         Unsigned32,  

           ctxt802HdrPriority         BITS,  

           ctxt802HdrVlan             Unsigned32,  

           ctxt802HdrEncap            Integer32 

   }  

   ctxt802HdrId  OBJECT-TYPE  

       SYNTAX         InstanceId  

       STATUS         current  

       DESCRIPTION  

           "An index to uniquely identify an instance of this  

           provisioning class."  

       ::= { ctxt802HdrEntry 1 }  

   ctxt802HdrSrcAddr OBJECT-TYPE  

       SYNTAX         PhysAddress  

       STATUS         current  

       DESCRIPTION  

           " The packet's source MAC address."  

       ::= { ctxt802HdrEntry 2 }    

   ctxt802HdrDstAddr OBJECT-TYPE  

       SYNTAX         PhysAddress 

       STATUS         current  

       DESCRIPTION  

           "The packet's destination MAC address."  

       ::= { ctxt802HdrEntry 3 }  

   ctxt802HdrProtocol OBJECT-TYPE  

       SYNTAX         Unsigned32 (0..'ffff'h) 

       STATUS         current  

       DESCRIPTION  

           "The L2 packet's protocol field."  

       ::= { ctxt802HdrEntry 4 }  

   ctxt802HdrPriority OBJECT-TYPE  

       SYNTAX         Unsigned32 (0..7) 

       STATUS         current  

       DESCRIPTION  

           "The L2 packet's priority field. This attribute is only    

           valid for packets using the 802.1q header extension."  

       ::= { ctxt802HdrEntry 5 }  

   ctxt802HdrVlan OBJECT-TYPE  

       SYNTAX         Unsigned32 (1..4094) 

       STATUS         current  

       DESCRIPTION  

           "The L2 packet's VLAN field. This attribute is only valid  

           for packets using the 802.1q header extension."  

       ::= { ctxt802HdrEntry 6 }  

   ctxt802HdrEncap OBJECT-TYPE  

       SYNTAX         Integer32 

       STATUS         current  

       DESCRIPTION  

           "This attribute specifies which encapsulated header is  

           being described. The sign on this value will be the same  

           as the value specified in the ContextData  

           instance that requested this header. If the original  

           ContextData instance specified an  

           ContextDataEncapsulation value of zero (meaning  

           return all headers), then all instances of this attribute  

           MUST be expressed as positive numbers.  

           A value of: 

           positive number ænÆ means the ænÆth header starting  

           from the outermost, 

           negative number ænÆ means the ænÆth header starting from  

           the innermost."  

       ::= { ctxt802HdrEntry 7 } 

   --