SNMP-COMMUNITY-MIB DEFINITIONS ::= BEGIN

IMPORTS

    IpAddress,

    MODULE-IDENTITY,

    OBJECT-TYPE,

    Integer32,

    snmpModules

        FROM SNMPv2-SMI

    RowStatus,

    StorageType

        FROM SNMPv2-TC

    SnmpAdminString,

    SnmpEngineID

        FROM SNMP-FRAMEWORK-MIB

    SnmpTagValue,

    snmpTargetAddrEntry

        FROM SNMP-TARGET-MIB

    MODULE-COMPLIANCE,

    OBJECT-GROUP

        FROM SNMPv2-CONF;

snmpCommunityMIB MODULE-IDENTITY

    LAST-UPDATED "200003060000Z"          -- 6 Mar 2000, midnight

    ORGANIZATION "SNMPv3 Working Group"

    CONTACT-INFO "WG-email:   snmpv3@lists.tislabs.com

                  Subscribe:  majordomo@lists.tislabs.com

                              In msg body:  subscribe snmpv3

                  Chair:      Russ Mundy

                              TIS Labs at Network Associates

                  Postal:     3060 Washington Rd

                              Glenwood MD 21738

                              USA

                  Email:      mundy@tislabs.com

                  Phone:      +1-301-854-6889

                  Co-editor:  Rob Frye

                              CoSine Communications

                  Postal:     1200 Bridge Parkway

                              Redwood City, CA 94065

                              USA

                  E-mail:     rfrye@cosinecom.com

                  Phone:      +1 703 725 1130

                  Co-editor:  David B. Levi

                              Nortel Networks

                  Postal:     3505 Kesterwood Drive

                              Knoxville, TN 37918

                  E-mail:     dlevi@nortelnetworks.com

                  Phone:      +1 423 686 0432

                  Co-editor:  Shawn A. Routhier

                              Integrated Systems Inc.

                  Postal:     333 North Ave 4th Floor

                              Wakefield, MA 01880

                  E-mail:     sar@epilogue.com

                  Phone:      +1 781 245 0804

                  Co-editor:  Bert Wijnen

                              Lucent Technologies

                  Postal:     Schagen 33

                              3461 GL Linschoten

                              Netherlands

                  Email:      bwijnen@lucent.com

                  Phone:      +31-348-407-775

                 "

        DESCRIPTION

            "This MIB module defines objects to help support coexistence

             between SNMPv1, SNMPv2c, and SNMPv3."

        REVISION "200003060000Z" -- 6 Mar 2000

        DESCRIPTION "This version published as RFC 2576."

        REVISION "199905130000Z" -- 13 May 1999

        DESCRIPTION "The Initial Revision"

    ::= { snmpModules 18 }

-- Administrative assignments ****************************************

snmpCommunityMIBObjects     OBJECT IDENTIFIER ::= { snmpCommunityMIB 1 }

snmpCommunityMIBConformance OBJECT IDENTIFIER ::= { snmpCommunityMIB 2 }

--

-- The snmpCommunityTable contains a database of community strings.

-- This table provides mappings between community strings, and the

-- parameters required for View-based Access Control.

--

snmpCommunityTable OBJECT-TYPE

    SYNTAX       SEQUENCE OF SnmpCommunityEntry

    MAX-ACCESS   not-accessible

    STATUS       current

    DESCRIPTION

        "The table of community strings configured in the SNMP

         engine's Local Configuration Datastore (LCD)."

    ::= { snmpCommunityMIBObjects 1 }

snmpCommunityEntry OBJECT-TYPE

    SYNTAX       SnmpCommunityEntry

    MAX-ACCESS   not-accessible

    STATUS       current

    DESCRIPTION

        "Information about a particular community string."

    INDEX       { IMPLIED snmpCommunityIndex }

    ::= { snmpCommunityTable 1 }

SnmpCommunityEntry ::= SEQUENCE {

    snmpCommunityIndex               SnmpAdminString,

    snmpCommunityName                OCTET STRING,

    snmpCommunitySecurityName        SnmpAdminString,

    snmpCommunityContextEngineID     SnmpEngineID,

    snmpCommunityContextName         SnmpAdminString,

    snmpCommunityTransportTag        SnmpTagValue,

    snmpCommunityStorageType         StorageType,

    snmpCommunityStatus              RowStatus

}

snmpCommunityIndex OBJECT-TYPE

    SYNTAX      SnmpAdminString (SIZE(1..32))

    MAX-ACCESS  not-accessible

    STATUS      current

    DESCRIPTION

        "The unique index value of a row in this table."

    ::= { snmpCommunityEntry 1 }

snmpCommunityName OBJECT-TYPE

    SYNTAX       OCTET STRING

    MAX-ACCESS   read-create

    STATUS       current

    DESCRIPTION

        "The community string for which a row in this table

         represents a configuration."

    ::= { snmpCommunityEntry 2 }

snmpCommunitySecurityName OBJECT-TYPE

    SYNTAX       SnmpAdminString (SIZE(1..32))

    MAX-ACCESS   read-create

    STATUS       current

    DESCRIPTION

        "A human readable string representing the corresponding

         value of snmpCommunityName in a Security Model

         independent format."

    ::= { snmpCommunityEntry 3 }

snmpCommunityContextEngineID OBJECT-TYPE

    SYNTAX       SnmpEngineID

    MAX-ACCESS   read-create

    STATUS       current

    DESCRIPTION

        "The contextEngineID indicating the location of the

         context in which management information is accessed

         when using the community string specified by the

         corresponding instance of snmpCommunityName.

         The default value is the snmpEngineID of the entity in

         which this object is instantiated."

    ::= { snmpCommunityEntry 4 }

snmpCommunityContextName OBJECT-TYPE

    SYNTAX       SnmpAdminString (SIZE(0..32))

    MAX-ACCESS   read-create

    STATUS       current

    DESCRIPTION

        "The context in which management information is accessed

         when using the community string specified by the corresponding

         instance of snmpCommunityName."

    DEFVAL      { ''H }   -- the empty string

    ::= { snmpCommunityEntry 5 }

snmpCommunityTransportTag OBJECT-TYPE

    SYNTAX       SnmpTagValue

    MAX-ACCESS   read-create

    STATUS       current

    DESCRIPTION

        "This object specifies a set of transport endpoints

         from which a command responder application will accept

         management requests.  If a management request containing

         this community is received on a transport endpoint other

         than the transport endpoints identified by this object,

         the request is deemed unauthentic.

         The transports identified by this object are specified

         in the snmpTargetAddrTable.  Entries in that table

         whose snmpTargetAddrTagList contains this tag value

         are identified.

         If the value of this object has zero-length, transport

         endpoints are not checked when authenticating messages

         containing this community string."

    DEFVAL      { ''H }   -- the empty string

    ::= { snmpCommunityEntry 6 }

snmpCommunityStorageType OBJECT-TYPE

    SYNTAX       StorageType

    MAX-ACCESS   read-create

    STATUS       current

    DESCRIPTION

        "The storage type for this conceptual row in the

         snmpCommunityTable.  Conceptual rows having the value

         'permanent' need not allow write-access to any

         columnar object in the row."

    ::= { snmpCommunityEntry 7 }

snmpCommunityStatus OBJECT-TYPE

    SYNTAX       RowStatus

    MAX-ACCESS   read-create

    STATUS       current

    DESCRIPTION

        "The status of this conceptual row in the snmpCommunityTable.

         An entry in this table is not qualified for activation

         until instances of all corresponding columns have been

         initialized, either through default values, or through

         Set operations.  The snmpCommunityName and

         snmpCommunitySecurityName objects must be explicitly set.

         There is no restriction on setting columns in this table

         when the value of snmpCommunityStatus is active(1)."

    ::= { snmpCommunityEntry 8 }

--

-- The snmpTargetAddrExtTable

--

snmpTargetAddrExtTable OBJECT-TYPE

    SYNTAX       SEQUENCE OF SnmpTargetAddrExtEntry

    MAX-ACCESS   not-accessible

    STATUS       current

    DESCRIPTION

        "The table of mask and mms values associated with the

         snmpTargetAddrTable.

         The snmpTargetAddrExtTable augments the

         snmpTargetAddrTable with a transport address mask value

         and a maximum message size value.  The transport address

         mask allows entries in the snmpTargetAddrTable to define

         a set of addresses instead of just a single address.

         The maximum message size value allows the maximum

         message size of another SNMP entity to be configured for

         use in SNMPv1 (and SNMPv2c) transactions, where the

         message format does not specify a maximum message size."

    ::= { snmpCommunityMIBObjects 2 }

snmpTargetAddrExtEntry OBJECT-TYPE

    SYNTAX       SnmpTargetAddrExtEntry

    MAX-ACCESS   not-accessible

    STATUS       current

    DESCRIPTION

        "Information about a particular mask and mms value."

    AUGMENTS       { snmpTargetAddrEntry }

    ::= { snmpTargetAddrExtTable 1 }

SnmpTargetAddrExtEntry ::= SEQUENCE {

    snmpTargetAddrTMask              OCTET STRING,

    snmpTargetAddrMMS                Integer32

}

snmpTargetAddrTMask OBJECT-TYPE

    SYNTAX      OCTET STRING (SIZE (0..255))

    MAX-ACCESS  read-create

    STATUS      current

    DESCRIPTION

        "The mask value associated with an entry in the

         snmpTargetAddrTable.  The value of this object must

         have the same length as the corresponding instance of

         snmpTargetAddrTAddress, or must have length 0.  An

         attempt to set it to any other value will result in

         an inconsistentValue error.

         The value of this object allows an entry in the

         snmpTargetAddrTable to specify multiple addresses.

         The mask value is used to select which bits of

         a transport address must match bits of the corresponding

         instance of snmpTargetAddrTAddress, in order for the

         transport address to match a particular entry in the

         snmpTargetAddrTable.  Bits which are 1 in the mask

         value indicate bits in the transport address which

         must match bits in the snmpTargetAddrTAddress value.

         Bits which are 0 in the mask indicate bits in the

         transport address which need not match.  If the

         length of the mask is 0, the mask should be treated

         as if all its bits were 1 and its length were equal

         to the length of the corresponding value of

         snmpTargetAddrTable.

         This object may not be modified while the value of the

         corresponding instance of snmpTargetAddrRowStatus is

         active(1).  An attempt to set this object in this case

         will result in an inconsistentValue error."

    DEFVAL { ''H }

    ::= { snmpTargetAddrExtEntry 1 }

snmpTargetAddrMMS OBJECT-TYPE

    SYNTAX      Integer32 (0|484..2147483647)

    MAX-ACCESS  read-create

    STATUS      current

    DESCRIPTION

        "The maximum message size value associated with an entry

         in the snmpTargetAddrTable."

    DEFVAL { 484 }

    ::= { snmpTargetAddrExtEntry 2 }

--

-- The snmpTrapAddress and snmpTrapCommunity objects are included

-- in notifications that are forwarded by a proxy, which were

-- originally received as SNMPv1 Trap messages.

--

snmpTrapAddress OBJECT-TYPE

    SYNTAX      IpAddress

    MAX-ACCESS  accessible-for-notify

    STATUS      current

    DESCRIPTION

        "The value of the agent-addr field of a Trap PDU which

         is forwarded by a proxy forwarder application using

         an SNMP version other than SNMPv1.  The value of this

         object SHOULD contain the value of the agent-addr field

         from the original Trap PDU as generated by an SNMPv1

         agent."

    ::= { snmpCommunityMIBObjects 3 }

snmpTrapCommunity OBJECT-TYPE

    SYNTAX      OCTET STRING

    MAX-ACCESS  accessible-for-notify

    STATUS      current

    DESCRIPTION

        "The value of the community string field of an SNMPv1

         message containing a Trap PDU which is forwarded by a

         a proxy forwarder application using an SNMP version

         other than SNMPv1.  The value of this object SHOULD

         contain the value of the community string field from

         the original SNMPv1 message containing a Trap PDU as

         generated by an SNMPv1 agent."

    ::= { snmpCommunityMIBObjects 4 }

-- Conformance Information *******************************************

snmpCommunityMIBCompliances OBJECT IDENTIFIER

                            ::= { snmpCommunityMIBConformance 1 }

snmpCommunityMIBGroups      OBJECT IDENTIFIER

                            ::= { snmpCommunityMIBConformance 2 }

-- Compliance statements

snmpCommunityMIBCompliance MODULE-COMPLIANCE

    STATUS       current

    DESCRIPTION

        "The compliance statement for SNMP engines which

         implement the SNMP-COMMUNITY-MIB."

    MODULE       -- this module

        MANDATORY-GROUPS { snmpCommunityGroup }

        OBJECT           snmpCommunityName

        MIN-ACCESS       read-only

        DESCRIPTION     "Write access is not required."

        OBJECT           snmpCommunitySecurityName

        MIN-ACCESS       read-only

        DESCRIPTION     "Write access is not required."

        OBJECT           snmpCommunityContextEngineID

        MIN-ACCESS       read-only

        DESCRIPTION     "Write access is not required."

        OBJECT           snmpCommunityContextName

        MIN-ACCESS       read-only

        DESCRIPTION     "Write access is not required."

        OBJECT           snmpCommunityTransportTag

        MIN-ACCESS       read-only

        DESCRIPTION     "Write access is not required."

        OBJECT           snmpCommunityStorageType

        MIN-ACCESS       read-only

        DESCRIPTION     "Write access is not required."

        OBJECT           snmpCommunityStatus

        MIN-ACCESS       read-only

        DESCRIPTION     "Write access is not required."

    ::= { snmpCommunityMIBCompliances 1 }

snmpProxyTrapForwardCompliance MODULE-COMPLIANCE

    STATUS       current

    DESCRIPTION

        "The compliance statement for SNMP engines which

         contain a proxy forwarding application which is

         capable of forwarding SNMPv1 traps using SNMPv2c

         or SNMPv3."

    MODULE       -- this module

        MANDATORY-GROUPS { snmpProxyTrapForwardGroup }

    ::= { snmpCommunityMIBCompliances 2 }

snmpCommunityGroup OBJECT-GROUP

    OBJECTS {

        snmpCommunityName,

        snmpCommunitySecurityName,

        snmpCommunityContextEngineID,

        snmpCommunityContextName,

        snmpCommunityTransportTag,

        snmpCommunityStorageType,

        snmpCommunityStatus,

        snmpTargetAddrTMask,

        snmpTargetAddrMMS

    }

    STATUS       current

    DESCRIPTION

        "A collection of objects providing for configuration

         of community strings for SNMPv1 (and SNMPv2c) usage."

    ::= { snmpCommunityMIBGroups 1 }

snmpProxyTrapForwardGroup OBJECT-GROUP

    OBJECTS {

        snmpTrapAddress,

        snmpTrapCommunity

    }

    STATUS       current

    DESCRIPTION

        "Objects which are used by proxy forwarding applications

         when translating traps between SNMP versions.  These are

         used to preserve SNMPv1-specific information when

         translating to SNMPv2c or SNMPv3."

    ::= { snmpCommunityMIBGroups 3 }

END