TIMETRA-SECURITY-MIB

TEXTUAL-CONVENTION

The flow identifier or Flow Label in an IPv6 packet header that may be used to discriminate traffic flows. (RFC3595). The value -1 indicates 'no flowLabel'

TEXTUAL-CONVENTION

The TCpmFilterActionOrDefault data type is an enumerated integer that describes the values used to specify the action to take on the traffic when the filter entry matches. drop (1) packets matching the filter entry are dropped forward (2) packets matching the filter entry are forwarded queue (3) packets matching the filter are sent to queue tCpmFilterQueueId default (4) the disposition of packets matching the filter is determined by the default-action of the filter

TEXTUAL-CONVENTION

TCpmFilterQueueId is an integer value that identifies a CPM queue. The value '0' is used if there is no queue defined

TEXTUAL-CONVENTION

Action to take be taken as a result of matching a profile. deny (1) - matching commands are denied access. allow(2) - matching commands are allowed access. if the none (3) - no action is taken giving way to other profile matching to happen.

TEXTUAL-CONVENTION

The type of the frame for which this mac filter match criteria is defined.

TEXTUAL-CONVENTION

A packet rate limit expressed in packets per second for CPU protection policy parameters. The value -1 means unlimited rate.

TEXTUAL-CONVENTION

A packet rate expressed in packets per second.

TEXTUAL-CONVENTION

A packet rate limit expressed in packets per second. The value -1 means unlimited rate.

TEXTUAL-CONVENTION

A packet rate limit expressed in packets per second for CPU protection policy parameters. The value zero means a limit of zero packets per second. The value -1 means unlimited rate.

TEXTUAL-CONVENTION

The Opcode field within an Ethernet Connectivity Fault Management PDU has this range.

TEXTUAL-CONVENTION

TmnxKeyChainKeyAlgorithm data type is an enumerated integer that indicates the encryption algorithm to be used by the key defined in the keychain.

TEXTUAL-CONVENTION

TmnxKeyChainKeyDirection data type is an enumerated integer that indicates the tcp-stream direction to apply the keychain on.

TEXTUAL-CONVENTION

TmnxKeyChainTcpOptionNum data type is an enumerated integer that indicates the TCP option number to be used in the TCP header.

TEXTUAL-CONVENTION

Action to take be taken as a result of matching the configured criteria in a Management Access Filter. none (0) - no action specified, follow default behavior. permit (1) - packets matching the configured criteria are permitted. deny (2) - packets matching the configured criteria are denied and an ICMP host unreachable message is issued. denyHostUnreachable (3) - packets matching the configured criteria are denied and no ICMP host unreachable message is issued.

TEXTUAL-CONVENTION

The type of the frame for which this mac filter match criteria is defined.

TEXTUAL-CONVENTION

The TmnxMafType data type is an enumerated integer that describes the type of packets a filter applies to.

TEXTUAL-CONVENTION

The TmnxSecRadiusServAlgorithm data type is an enumerated integer that indicates the algorithm used to access the list of configured RADIUS servers: - direct (1): The first server will be used as primary server for all requests, the second as secondary and so on. - round-robin (2): The first server will be used as primary server for the first request, the second server as primary for the second request, and so on. If the router gets to the end of the list, it starts again with the first server.

OBJECT-IDENTITY

OBJECT-IDENTITY

OBJECT-IDENTITY

OBJECT-IDENTITY

OBJECT-TYPE

Table to store the user profiles for access to the commands in the command line interface.

OBJECT-TYPE

Information about a single user profile.

OBJECT-TYPE

The name of the profile is the index to the table.

OBJECT-TYPE

Row Status for the user profile. The deletion of this row has an action of removing the dependent rows in the tmnxUserProfileTable.

OBJECT-TYPE

The action to be given to the user profile in case if none of the entries match the command.

OBJECT-TYPE

The value of tmnxUserProfileLi specifies whether or this profile can be assigned to a user to support Lawful Intercept (LI) operations. This object can only be modified from the SNMPv3 'li' context.

OBJECT-TYPE

Table which stores multiple entries per user profile to define specific action to be taken in case if the command matches the entry.

OBJECT-TYPE

Information about a single user profile.

OBJECT-TYPE

The Secondary index for the table

OBJECT-TYPE

Row Status for the user profile match.

OBJECT-TYPE

User-provided description for the match entry.

OBJECT-TYPE

Action to be used in case if a command matches this entry.

OBJECT-TYPE

Match string to be used for this entry.

OBJECT-TYPE

tmnxUserTable contains configuration information for the system users.

OBJECT-TYPE

tmnxUserEntry is an entry (conceptual row) in the tmnxUserEntry. Each entry represents the configuration for a system user. Entries in this table can be created and deleted via SNMP SET operations to tmnxUserRowStatus.

OBJECT-TYPE

The value of tmnxUserName specifies the name for a system user. This name must be unique amongst the table entries.

OBJECT-TYPE

tmnxUserRowStatus controls the creation and deletion of rows in the table. To create a row in the tmnxUserTable, set tmnxUserRowStatus to createAndGo(4). All objects will take on default values and the agent will change tmnxUserRowStatus to active(1). To delete a row in the tmnxUserTable, set tmnxUserRowStatus to delete(6).

OBJECT-TYPE

The value of tmnxUserPassword specifies the password used to authenticate the user for console and FTP access. tmnxUserPassword and tmnxUserPasswordEncrypted, which indicates whether or not the password string is encrypted, must be set together in the same SNMP request PDU or else the set request will fail with an inconsistentValue error. The value of tmnxUserPassword cannot be more than 20 characters when the value of tmnxUserPasswordEncrypted is 'false'.

OBJECT-TYPE

When the value of tmnxUserPasswordEncrypted is 'true', the password specified by tmnxUserPassword is in the encrypted form. When the value of tmnxUserPasswordEncrypted is 'false', the password specified by tmnxUserPassword is in plain text. tmnxUserPassword and tmnxUserPasswordEncrypted, which indicates whether or not the password string is encrypted, must be set together in the same SNMP request PDU or else the set request will fail with an inconsistentValue error.

OBJECT-TYPE

The value of tmnxUserAccess specifies the type of access the the user is permitted. To allow the user access to the console, FTP or SNMP, set the corresponding bit in tmnxUserAccess. Reset the bit to deny the access. 'li' access allows this user to access CLI commands in the Lawful Intercept (LI) context. The 'li' bit can only be modified from the SNMPv3 'li' context.

OBJECT-TYPE

The value of tmnxUserHomeDirectory specifies the local home directory for the user for console and FTP access.

OBJECT-TYPE

When the value of tmnxUserRestrictedToHome is 'true', the user is not allowed to navigate to directories above his home directory for file access. When the value of tmnxUserRestrictedToHome is 'false', the user is allowed access to directories above his home directory.

OBJECT-TYPE

The value of tmnxUserConsoleLoginExecFile specifies the file that should be executed whenever the user successfully logs in to a console session.

OBJECT-TYPE

When the value of tmnxUserConsoleCannotChangePswd is 'true', the user does not have the privilege to change the password for console and FTP login. When the value of tmnxUserConsoleCannotChangePswd is 'false', the user has the privilege to change the password for console and FTP login.

OBJECT-TYPE

When the value of tmnxUserConsoleNewPswdAtLogin is 'true', the will be forced to change his password at the next console or FTP login. When the value of tmnxUserConsoleNewPswdAtLogin is 'false', the will not be forced to change his password at the next console or FTP login.

OBJECT-TYPE

The value of tmnxUserConsoleMemberProfile1 specifies a user profile that the user has access to. This profile must be a valid row entry in tmnxUserProfileTable. Each user can access a maximum of 8 user profiles. The value of the n-th user profile can be set only if all previous user profiles (1 through (n-1)) are non-empty strings. The order of the user profiles is important. The first user profile has highest precedence, followed by the second and so on.

OBJECT-TYPE

The value of tmnxUserConsoleMemberProfile2 specifies a user profile that the user has access to. This profile must be a valid row entry in tmnxUserProfileTable. Each user can access a maximum of 8 user profiles. The value of the n-th user profile can be set only if all previous user profiles (1 through (n-1)) are non-empty strings. The order of the user profiles is important. The first user profile has highest precedence, followed by the second and so on.

OBJECT-TYPE

The value of tmnxUserConsoleMemberProfile3 specifies a user profile that the user has access to. This profile must be a valid row entry in tmnxUserProfileTable. Each user can access a maximum of 8 user profiles. The value of the n-th user profile can be set only if all previous user profiles (1 through (n-1)) are non-empty strings. The order of the user profiles is important. The first user profile has highest precedence, followed by the second and so on.

OBJECT-TYPE

The value of tmnxUserConsoleMemberProfile4 specifies a user profile that the user has access to. This profile must be a valid row entry in tmnxUserProfileTable. Each user can access a maximum of 8 user profiles. The value of the n-th user profile can be set only if all previous user profiles (1 through (n-1)) are non-empty strings. The order of the user profiles is important. The first user profile has highest precedence, followed by the second and so on.

OBJECT-TYPE

The value of tmnxUserConsoleMemberProfile5 specifies a user profile that the user has access to. This profile must be a valid row entry in tmnxUserProfileTable. Each user can access a maximum of 8 user profiles. The value of the n-th user profile can be set only if all previous user profiles (1 through (n-1)) are non-empty strings. The order of the user profiles is important. The first user profile has highest precedence, followed by the second and so on.

OBJECT-TYPE

The value of tmnxUserConsoleMemberProfile6 specifies a user profile that the user has access to. This profile must be a valid row entry in tmnxUserProfileTable. Each user can access a maximum of 8 user profiles. The value of the n-th user profile can be set only if all previous user profiles (1 through (n-1)) are non-empty strings. The order of the user profiles is important. The first user profile has highest precedence, followed by the second and so on.

OBJECT-TYPE

The value of tmnxUserConsoleMemberProfile7 specifies a user profile that the user has access to. This profile must be a valid row entry in tmnxUserProfileTable. Each user can access a maximum of 8 user profiles. The value of the n-th user profile can be set only if all previous user profiles (1 through (n-1)) are non-empty strings. The order of the user profiles is important. The first user profile has highest precedence, followed by the second and so on.

OBJECT-TYPE

The value of tmnxUserConsoleMemberProfile8 specifies a user profile that the user has access to. This profile must be a valid row entry in tmnxUserProfileTable. Each user can access a maximum of 8 user profiles. The value of the n-th user profile can be set only if all previous user profiles (1 through (n-1)) are non-empty strings. The order of the user profiles is important. The first user profile has highest precedence, followed by the second and so on.

OBJECT-TYPE

The value of tmnxUserAttemptedLogins indicates the number of times the user has attempted to login irrespective of whether the login succeeded or failed.

OBJECT-TYPE

The value of tmnxUserSuccessfulLogins indicates the number of times the user has successfully logged in.

OBJECT-TYPE

The value of tmnxUserPasswordChanged indicates the value of sysUpTime when the login password was last changed.

OBJECT-IDENTITY

OBJECT-TYPE

This table has been replaced with tmnxGenMafTable. The new table allows to define both IPv4 and IPv6 MAFs. The tmnxMafTable has an entry for each Management Access Filter (MAF) configured on the system. Management Access Filters are used to restrict management of this Alcatel-Lucent SROS device by other nodes outside either specific (sub)networks or through designated ports. By default no Management Access Filters are defined and this table will be empty.

OBJECT-TYPE

Each row entry contains information about a Management Access Filter (MAF).

OBJECT-TYPE

The value of tmnxMafName specifies the Management Access Filter (MAF) represented by this row in the tmnxMafTable.

OBJECT-TYPE

The tmnxMafRowStatus object is used to create and delete rows in the tmnxMafTable. The values supported during a set operation are createAndGo(4), createAndWait(5) and destroy(6).

OBJECT-TYPE

The value of tmnxMafDefaultAction specifies the default action for management access in the absence of a specific management access filter entry match. The default action is applied to a packet that does not satisfy any match criteria in any of the management access filter match entries. Before a MAF can be active, a default action must have been specified.

OBJECT-TYPE

The value of tmnxMafAdminState specifies the administrative state for this management access filter. A value of 'outOfService' disables this filter which results in permitting all traffic.

OBJECT-TYPE

This tables has been replaced with the table tmnxIPMafMatchTable which allows for both IPv4 and IPv6 MAF entries. The tmnxMafMatchTable contains filter match criteria associated with Management Access Filters (MAFs) configured on the system.

OBJECT-TYPE

Each row entry contains information about a management access filter entry associated with a specific Management Access Filter (MAF). The filter criter is applied in order according to the value of tmnxMafMatchIndex. The match algorithm is exited upon the first match found and then the action specified is executed. For this reason, entries must be sequenced from most to least explicit. An entry where tmnxMafMatchAction has a value of 'none' is not active.

OBJECT-TYPE

The value of tmnxMafMatchIndex specifies the Management Access Filter Entry (MAFE) represented by this row in the tmnxMafMatchTable. It is associated to a specific Management Access Filter by the value of tmnxMafName index.

OBJECT-TYPE

The tmnxMafMatchRowStatus object is used to create and delete rows in the tmnxMafMatchTable. The values supported during a set operation are createAndGo(4), createAndWait(5) and destroy(6).

OBJECT-TYPE

The value of tmnxMafMatchLastChanged is the timestamp of last change to this row in tmnxMafMatchTable.

OBJECT-TYPE

The value of tmnxMafMatchAction specifies the action to be taken when a packet matches the selection criteria configured in this management access filter entry. Before a filter entry can be active, tmnxMafMatchAction must be assigned some value other than 'none'.

OBJECT-TYPE

The value of tmnxMafMatchDescription is a user provided description string for this Management Access Filter Entry. It can consist of any printable, seven-bit ASCII characters up to 80 characters in length.

OBJECT-TYPE

The value of tmnxMafMatchSrcIpAddr specifies IP address used with the value of tmnxMafMatchSrcIpMask to indicate a source IP address range to be used as the match criteria for this Management Access Filter Entry.

OBJECT-TYPE

The value of tmnxMafMatchSrcIpMask specifies the number of bits to match of the source Ip Address.

OBJECT-TYPE

The value of tmnxMafMatchSrcPortType is used to restrict ingress management packets to either the configured management Ethernet port or any other logical port (LAG, port, or channel) on the device. By default, management traffic is accepted on any interface.

OBJECT-TYPE

When tmnxMafMatchSrcPortType has a value of 'port' or 'lag' the value of tmnxMafMatchSrcPortId specifies the port used to restrict ingress management packets. A value of zero indicated that this object is not initialized.

OBJECT-TYPE

The value of tmnxMafMatchDestPort specifies a TCP or UDP port number to be used as a match criteria in this Management Access Filter Entry. A value of zero indicates that this object is not initialized.

OBJECT-TYPE

The value of tmnxMafMatchDestPortMask specifies a mask to be used when the value of tmnxMafMatchDestPort is not equal to zero. The mask allows a range of TCP or UDP port values to be specified for the match criteria in this Management Access Filter Entry. A value of 65535, 0xFFFF, is used to indicate that this object is not initialized.

OBJECT-TYPE

The value of tmnxMafMatchProtocol specifies an IP protocol type to be used in the match criteria for this Management Access Filter Entry. Some well-know protocol numbers are TCP (6), and UDP (7). The value of -1 is used to indicate that this object is not initialized.

OBJECT-TYPE

The value of tmnxMafMatchCount indicates the number of times a management packet has matched this filter entry.

OBJECT-TYPE

The value of tmnxMafMatchRouter specifies a router (VPRN) name or a service-id, expressed as an ASCII numeric string, to be used in the match criteria for the Management Access Filter Entry. The empty string value ''H is used to indicate that this object is not initialized.

OBJECT-TYPE

When the value of tmnxMafMatchLog is 'true', entry match logging is enabled.

OBJECT-TYPE

This value of the object tmnxGenMafTableLastChanged indicates the timestamp of the last change to the tmnxGenMafTable. A value of 0 indicates that no changes were made to this table since the system was last initialized.

OBJECT-TYPE

This table replaces the tmnxMafTable. It allows to define both IPv4 and IPv6 MAFs. The tmnxGenMafTable has an entry for each Management Access Filter (MAF) configured on the system (IPv4 and IPv6). Management Access Filters are used to restrict management of this Alcatel-Lucent SROS device by other nodes outside either specific (sub)networks or through designated ports. By default a single IPv4 and a single IPv6 Management Access Filter is created by the system. No additional filters can be defined by the operator. When a filter is deleted, the system will re-create it with all default settings.

OBJECT-TYPE

Each row entry contains information about a IPv4 or IPv6 Management Access Filter (MAF).

OBJECT-TYPE

The value of tmnxGenMafType specifies the type of packets, destined for CPM, this management access filter applies to.

OBJECT-TYPE

The value of tmnxGenMafName specifies the Management Access Filter (MAF) represented by this row in the tmnxGenMafTable.

OBJECT-TYPE

The tmnxGenMafLastModified object indicates the timestamp of the last change to this row. A value of zero indicates that this row was not modified since the system was last initialized.

OBJECT-TYPE

The tmnxGenMafRowStatus object is used to create and delete rows in the tmnxGenMafTable. The values supported during a set operation are - active(1) - createAndGo(4), - createAndWait(5) which is treated in the same way as createAndGo(4) - destroy(6).

OBJECT-TYPE

The value of tmnxGenMafAdminState specifies the administrative state for this management access filter. A value of 'outOfService' disables this filter which results in permitting all traffic.

OBJECT-TYPE

The value of tmnxGenMafDefaultAction specifies the default action for management access in the absence of a specific management access filter entry match. The default action is applied to a packet that does not satisfy any match criteria in any of the management access filter match entries. Before a MAF can be active, a default action must have been specified. The value denyHostUnreachable is not allowed for Mac Maf filters.

OBJECT-TYPE

This value of the object tmnxMafIPMatchTableLastChanged indicates the timestamp of the last change to the tmnxIPMafMatchTable. A value of 0 indicates that no changes were made to this table since the system was last initialized.

OBJECT-TYPE

This table replaces the tmnxMafMatchTable. It allows to define both IPv4 and IPv6 MAF IP entries. The tmnxIPMafMatchTable contains ipvx filter match criteria associated with Management Access Filters (MAFs) configured on the system.

OBJECT-TYPE

Each row entry contains information about a management access filter entry associated with a specific Management Access Filter (MAF). The filter criter is applied in order according to the value of tmnxIPMafMatchIndex. The match algorithm is exited upon the first match found and then the action specified is executed. For this reason, entries must be sequenced from most to least explicit. An entry where tmnxIPMafMatchAction has a value of 'none' is not active. Rows can only be created for tmnxGenMafType's: - ipv4 (1), and. - ipv6 (2). For mac Maf filters a dedicated table is provided (tmnxMacMafMatchTable).

OBJECT-TYPE

The value of tmnxIPMafMatchIndex specifies the Management Access Filter Entry (MAFE) represented by this row in the tmnxIPMafMatchTable. It is associated to a specific Management Access Filter by the value of tmnxGenMafName index.

OBJECT-TYPE

The tmnxIPMafMatchRowStatus object is used to create and delete rows in the tmnxIPMafMatchTable. Following values are supported: - active(1) - createAndGo(4), - createAndWait(5) which is treated in the same way as createAndGo(4) - destroy(6).

OBJECT-TYPE

The value of tmnxIPMafMatchLastChanged is the timestamp of last change to this row in tmnxIPMafMatchTable.

OBJECT-TYPE

The value of tmnxIPMafMatchAction specifies the action to be taken when a packet matches the selection criteria configured in this management access filter entry. Before a filter entry can be active, tmnxIPMafMatchAction must be assigned some value other than 'none'. The value denyHostUnreachable is not allowed.

OBJECT-TYPE

The value of tmnxIPMafMatchDescription is a user provided description string for this Management Access Filter Entry. It can consist of any printable, seven-bit ASCII characters up to 80 characters in length.

OBJECT-TYPE

The value of tmnxIPMafMatchSrcIpAddrType specifies the type of IP address stored in the object tmnxIPMafMatchSrcIpAddr. If the value of tmnxGenMafType indicates 'ipv4' the only allowed values for this object are 'unknown' or 'ipv4'. If the value of tmnxGenMafType indicates 'ipv6' the only allowed values for this object are 'unknown' or 'ipv6'.

OBJECT-TYPE

The value of tmnxIPMafMatchSrcIpAddr specifies IP address used with the value of tmnxIPMafMatchSrcIpMask to indicate a source IP address range to be used as the match criteria for this Management Access Filter Entry.

OBJECT-TYPE

The value of tmnxIPMafMatchSrcIpMask specifies the number of bits to match of the source Ip Address.

OBJECT-TYPE

The value of tmnxIPMafMatchSrcPortType is used to restrict ingress management packets to either the configured management Ethernet port or any other logical port (LAG, port, or channel) on the device. By default, management traffic is accepted on any interface. Reading the value of tmnxIPMafMatchSrcPortType when it is different from 'any' will cause it to be recalculated based on the value of tmnxIPMafMatchSrcPortId.

OBJECT-TYPE

When tmnxIPMafMatchSrcPortType is set to 'any' then the value of tmnxIPMafMatchSrcPortId will be forced to 503316480 (INVALID_PORT). When tmnxIPMafMatchSrcPortType is set to 'port' or 'lag' then the value of tmnxIPMafMatchSrcPortId specifies the port used to restrict ingress management packets. When tmnxIPMafMatchSrcPortType is set to 'cpm' then the value of tmnxIPMafMatchSrcPortId will be forced to 503316480 (INVALID_PORT).

OBJECT-TYPE

The value of tmnxIPMafMatchDestPort specifies a TCP or UDP port number to be used as a match criteria in this Management Access Filter Entry. A value of zero indicates that this object is not initialized.

OBJECT-TYPE

The value of tmnxIPMafMatchDestPortMask specifies a mask to be used when the value of tmnxIPMafMatchDestPort is not equal to zero. The mask allows a range of TCP or UDP port values to be specified for the match criteria in this Management Access Filter Entry. A value of 65535, 0xFFFF, is used to indicate that this object is not initialized.

OBJECT-TYPE

The value of tmnxIPMafMatchProtNxtHdr specifies for IPv4 MAF the IP protocol field, and for IPv6 the next header type to be used in the match criteria for this Management Access Filter Entry. Some well-know protocol numbers are TCP (6), and UDP (7). The value of -1 is used to indicate that this object is not initialized. The value of -2 is used to indicate udp/tcp protocol matching

OBJECT-TYPE

The value of tmnxIPMafMatchCount indicates the number of times a management packet has matched this filter entry.

OBJECT-TYPE

The value of tmnxIPMafMatchRouter specifies a router (VPRN) name or a service-id, expressed as an ASCII numeric string, to be used in the match criteria for the Management Access Filter Entry. The empty string value ''H is used to indicate that this object is not initialized.

OBJECT-TYPE

The value of tmnxIPMafMatchFlowLabel specifies the flow label to be matched. When the value is '-1', no flow label matching occurs. This object is only meaningfull in case of an IPv6 MAF entry. The value is ignored in IPv4 MAF entries.

OBJECT-TYPE

When the value of tmnxIPMafMatchLog is 'true', entry match logging is enabled.

OBJECT-TYPE

The value of tmnxIPMafMatchL4SrcPort specifies a TCP or UDP port number to be used as a match criteria in this Management Access Filter Entry. A value of zero indicates that this object is not initialized.

OBJECT-TYPE

The value of tmnxIPMafMatchL4SrcPortMask specifies a mask to be used when the value of tmnxIPMafMatchL4SrcPort is not equal to zero. The mask allows a range of TCP or UDP port values to be specified for the match criteria in this Management Access Filter Entry. A value of 65535, 0xFFFF, is used to indicate that this object is not initialized.

OBJECT-TYPE

When the value of tmnxIPMafMatchFragment is 'true', entry match fragmentation is enabled.

OBJECT-TYPE

This value of the object tmnxMafMacMatchTableLastChanged indicates the timestamp of the last change to the tmnxMacMafMatchTable. A value of 0 indicates that no changes were made to this table since the system was last initialized.

OBJECT-TYPE

This table allows to define Mac Maf filter entries. The tmnxMacMafMatchTable contains Mac filter match criteria associated with Management Access Filters (MAFs) configured on the system.

OBJECT-TYPE

Each row entry contains information about a management access filter entry associated with a specific Mac Management Access Filter (MAF). The filter criter is applied in order according to the value of tmnxMacMafMatchIndex. The match algorithm is exited upon the first match found and then the action specified is executed. For this reason, entries must be sequenced from most to least explicit. An entry where tmnxMacMafMatchAction has a value of 'none' is not active.

OBJECT-TYPE

The value of tmnxMacMafMatchIndex specifies the Management Access Filter Entry (MAFE) represented by this row in the tmnxMacMafMatchTable. It is associated to a specific Management Access Filter by the value of tmnxGenMafType and tmnxGenMafName.

OBJECT-TYPE

The tmnxMacMafMatchRowStatus object is used to create and delete rows in the tmnxMacMafMatchTable. The values supported are - active(1) - createAndGo(4), - createAndWait(5) which is treated in the same way as createAndGo(4) - destroy(6).

OBJECT-TYPE

The value of tmnxMacMafMatchLastChanged indicates the timestamp of the last change to this row in tmnxMacMafMatchTable.

OBJECT-TYPE

The value of tmnxMacMafMatchAction specifies the action to be taken when a packet matches the selection criteria configured in this management access filter entry. Before a filter entry can be active, tmnxMacMafMatchAction must be assigned some value other than 'none'. The value denyHostUnreachable is not allowed for this object.

OBJECT-TYPE

The value of tmnxMacMafMatchDescription specifies a user provided description string for this Management Access Filter Entry. It can consist of any printable, seven-bit ASCII characters up to 80 characters in length.

OBJECT-TYPE

The value of the object tmnxMacMafMatchLog specifies whether or not logging is active for this filter entry.

OBJECT-TYPE

The value of tmnxMacMafMatchFrameType specifies the type of mac frame for which we are defining this match criteria.

OBJECT-TYPE

The value of the object tmnxMacMafMatchSvcId specifies the service-id in which the packet is to be received for this entry to match. A value of 0 indicates: any service.

OBJECT-TYPE

The value of the object tmnxMacMafMatchDot1pValue specifies the IEEE 802.1p priority value for this MAC filter entry. Use -1 to disable matching this filter criteria.

OBJECT-TYPE

The value of the object tmnxMacMafMatchDot1pMask specifies the IEEE 802.1p priority mask value for this policy MAC filter entry. Use zero to disable matching, use 7 to match everything.

OBJECT-TYPE

The value of the object tmnxMacMafMatchDsap specifies the MAC DSAP to match for this MAC filter entry. This object has no significance if the object tmnxMacMafMatchFrameType is not set to 802dot2LLC.

OBJECT-TYPE

The value of the object tmnxMacMafMatchDsapMask specifies the MAC DSAP mask for this MAC filter entry. This object has no significance if the object tmnxMacMafMatchFrameType is not set to 802dot2LLC.

OBJECT-TYPE

The value of the object tmnxMacMafMatchSrcMAC specifies the source MAC to match for this policy MAC filter entry.

OBJECT-TYPE

The value of the object tmnxMacMafMatchSrcMACMask specifies the source MAC mask value for this policy MAC filter entry. The mask is ANDed with the MAC to match tmnxMacMafMatchSrcMAC. A zero bit means ignore this bit, do not match. A one bit means match this bit with tmnxMacMafMatchSrcMAC. Use the value 00-00-00-00-00-00 to disable this filter criteria.

OBJECT-TYPE

The value of the object tmnxMacMafMatchDstMAC specifies the Destination MAC mask value for this policy MAC filter entry.

OBJECT-TYPE

The value of the object tmnxMacMafMatchDstMACMask specifies the destination MAC mask value for this policy MAC filter entry. The mask is ANDed with the MAC to match tmnxMacMafMatchDstMAC. A zero bit means ignore this bit, do not match. a one bit means match this bit with tmnxMacMafMatchDstMAC. Use the value 00-00-00-00-00-00 to disable this filter criteria.

OBJECT-TYPE

The value of the object tmnxMacMafMatchEtherType specifies the Ethertype for this MAC filter entry. Use -1 to disable matching by this criteria. This object has no significance if the object tmnxMacMafMatchFrameType is not set to Ethernet_II.

OBJECT-TYPE

The value of the object tmnxMacMafMatchSnapOui specifies the MAC SNAP OUI to match. The values zero(2) and nonZero(3) specify what to match. Matching can be disabled by the use of the value off(1). This object has no significance if the object tmnxMacMafMatchFrameType is not set to 802dot2SNAP.

OBJECT-TYPE

The value of the object tmnxMacMafMatchSnapPid specifies the MAC SNAP PID to match for this MAC filter entry. use -1 to disable matching by this criteria. This object has no significance if object tmnxMacMafMatchFrameType is not set to 802dot2SNAP.

OBJECT-TYPE

The value of the object tmnxMacMafMatchSsap specifies the the MAC SSAP to match for this MAC filter entry. This object has no significance if the object tmnxMacMafMatchFrameType is not set to 802dot2LLC.

OBJECT-TYPE

The value of the object tmnxMacMafMatchSsapMask specifies the MAC SSAP mask for this MAC filter entry. use 0 to disable matching by this criteria. This object has no significance if the object tmnxMacMafMatchFrameType is not set to 802dot2LLC.

OBJECT-TYPE

The value of the object tmnxMacMafMatchCfmOpCodeOper specifies which type of opcode checking is to be performed. If different fron none, more info is provided in the objects tmnxMacMafMatchCfmOpCodeValue1 and tmnxMacMafMatchCfmOpCodeValue2. This object has significance only if the object tmnxMacMafMatchFrameType refers to either ieee802.1ag or Y1731.

OBJECT-TYPE

The value of the object tmnxMacMafMatchCfmOpCodeValue1 specifies a cfm opcode. The value of this object is used as per the description for tmnxMacMafMatchCfmOpCodeOper.

OBJECT-TYPE

The value of the object tmnxMacMafMatchCfmOpCodeValue2 specifies a cfm opcode. The value of this object is used as per the description for tmnxMacMafMatchCfmOpCodeOper.

OBJECT-TYPE

The value of tmnxMacMafMatchCount indicates the number of times a management packet has matched this filter entry.

OBJECT-IDENTITY

OBJECT-TYPE

Number of days a user password is valid before the user must change his password. If the value of tmnxPasswordAging is set to '65535', password aging is disabled.

OBJECT-TYPE

The minimum number of characters required in the password.

OBJECT-TYPE

The complexity requirements for the passwords. 'alpha-numeric' - at least one numeric character must be present in the password. 'mixed-case' - at least one upper and one lower case character must be present in the password. 'special-character' - at least one non-alphanumeric character must be present in the password.

OBJECT-TYPE

The maximum number of unsuccessful login attempts allowed for a user. The value of tmnxPasswordAttemptsCount is used with the value of tmnxPasswordAttemptsTime to find out if the user is to be locked out for tmnxPasswordAttemptsLockoutPeriod.

OBJECT-TYPE

This is used in conjunction with tmnxPasswordAttemptsCount to find out if the user is to be locked out for tmnxPasswordAttemptsLockoutPeriod.

OBJECT-TYPE

The number of minutes the user is locked out if the threshold of unsuccessful login attempts has exceeded.

OBJECT-TYPE

The most preferred method to authenticate and authorize a user. If this method fails, the next method in the sequence identified by tmnxPasswordAuthenOrder2 is used.

OBJECT-TYPE

The second method to authenticate and authorize a user.

OBJECT-TYPE

The least preferred method to authenticate and authorize a user.

OBJECT-TYPE

If the value of tmnxPasswordAuthenExitOnReject is set to 'true' and if one of the AAA methods configured in tmnxPasswordAuthenOrder1, tmnxPasswordAuthenOrder2, tmnxPasswordAuthenOrder3 sends a reject, then the next method in the order will not be tried. If the value of this object is set to 'false' and if one AAA method sends a reject, the next AAA method will be attempted. If in this process, all the AAA methods are exhausted, it will be considered as a reject.

OBJECT-TYPE

tmnxAdminPassword is used to configure the password which enables a user to become a system administrator. tmnxAdminPassword and tmnxAdminPasswordEncrypted, which indicates whether or not the password string is encrypted, must be set together in the same SNMP request PDU or else the set request will fail with an inconsistentValue error. The value of tmnxAdminPassword cannot be more than 20 characters when the value of tmnxAdminPasswordEncrypted is 'false'.

OBJECT-TYPE

When the value of tmnxAdminPasswordEncrypted is 'true', the password specified by tmnxAdminPassword is in the encrypted form. When the value of tmnxAdminPasswordEncrypted is 'false', the password specified by tmnxAdminPassword is in plain text. tmnxAdminPassword and tmnxAdminPasswordEncrypted, which indicates whether or not the password string is encrypted, must be set together in the same SNMP request PDU or else the set request will fail with an inconsistentValue error.

OBJECT-TYPE

When the value of tmnxPasswordHealthCheck is 'true', the Radius servers configured in tmnxRadiusServerTable and the 'TacPlus' servers configured in tmnxTacPlusServerTable will be periodically monitored. Each server will be contacted every 30 seconds. If in this process a server is found to be unreachable, or a previously unreachable server starts responding, based on the type of the server, a TIMETRA-SYSTEM-MIB:radiusServerOperStatusChange or a TIMETRA-SYSTEM-MIB:tacplusServerOperStatusChange trap will be sent. When the value of tmnxPasswordHealthCheck is 'false', periodic monitoring of the Radius and Tacplus servers is disabled.

OBJECT-TYPE

The value of tmnxPasswordHealthCheckInterval specifies the polling interval for Radius servers configured in tmnxRadiusServerTable and the 'TacPlus' servers configured in tmnxTacPlusServerTable.

OBJECT-IDENTITY

OBJECT-TYPE

The desired administrative status of the RADIUS protocol operation.

OBJECT-TYPE

When the value of tmnxRadiusAccounting is set to 'TRUE', RADIUS command accounting is enabled.

OBJECT-TYPE

When the value of tmnxRadiusAuthorization is set to 'TRUE', RADIUS command authorization is enabled.

OBJECT-TYPE

Number of attempts to retry contacting the RADIUS server.

OBJECT-TYPE

Number of seconds to wait before timing out a RADIUS server.

OBJECT-TYPE

The UDP port number on which to contact the RADIUS server.

OBJECT-TYPE

The tmnxRadiusServerEntry has an entry for each RADIUS server. The table can have up to a maximum of 5 entries.

OBJECT-TYPE

tmnxRadiusServerEntry is an entry (conceptual row) in the tmnxRadiusServerTable. Each entry represents the configuration for a RADIUS server. Entries in this table can be created and deleted via SNMP SET operations to tmnxRadiusServerRowStatus.

OBJECT-TYPE

The unique value which identifies a specific radius server.

OBJECT-TYPE

The IP address of the RADIUS server. tmnxRadiusServerAddress was made obsolete in 5.0 revision of Alcatel-Lucent SROS series system. Radius servers are now configured using tmnxRadiusServerInetAddress and tmnxRadiusServerInetAddressType objects.

OBJECT-TYPE

The secret key associated with the RADIUS server. The value returned by tmnxRadiusServerSecret is always an empty string. The value of tmnxRadiusServerSecret cannot be set to an empty string.

OBJECT-TYPE

Current status of the RADIUS server.

OBJECT-TYPE

tmnxRadiusServerRowStatus controls the creation and deletion of rows in the table. To create a row in the tmnxRadiusServerTable, set tmnxRadiusServerRowStatus to createAndGo(4). All objects will take on default values and the agent will change tmnxRadiusServerRowStatus to active(1). To delete a row in the tmnxRadiusServerTable, set tmnxRadiusServerRowStatus to delete(6).

OBJECT-TYPE

The value of tmnxRadiusServerInetAddressType specifies the address type of tmnxRadiusServerInetAddress address. The value of tmnxRadiusServerInetAddressType can be either of InetAddressType - 'ipv4' or InetAddressType - 'ipv6' or InetAddressType - 'ipv6z'.

OBJECT-TYPE

The value of tmnxRadiusServerInetAddress specifies the address of the Radius server.

OBJECT-TYPE

tmnxRadiusSourceAddress is used to configure the source address of the Radius packet. It should be a valid unicast address. If this object is configured with the address of the router interface, the Radius client uses it while making a request to the server. If the address is not configured or is not the address of the one of interfaces, the source address is based on the address of the Radius server. If the server address is in-band, the client uses the system ip address. If it is out-of-band, the source address is the address of the management interface. tmnxRadiusSourceAddress was made obsolete in the 4.0 revision of Alcatel-Lucent SROS series systems. The source address of the Radius packet can now be set by creating a tmnxSourceIPEntry for Radius application in the tmnxSourceIPTable.

OBJECT-TYPE

When the value of tmnxRadiusConfigured is set to 'false', all the Radius objects under the tmnxRadiusInfo tree will be set to their default values and all the rows in the tmnxRadiusServerTable will be removed. The value of this object will be set to 'true' if non-default values are set to the Radius objects.

OBJECT-TYPE

The value of tmnxRadiusPEDiscovery specifies whether RADIUS provider edge discovery is enabled for VPLS services. This object was made obsolete in release 5.0.

OBJECT-TYPE

The value of tmnxRadiusPEDiscoveryPassword is used when contacting the RADIUS server for VPLS auto-discovery. This object was made obsolete in release 5.0.

OBJECT-TYPE

The value of tmnxRadiusPEDiscoveryInterval specifies the polling interval for Radius PE discovery in minutes. This object was made obsolete in release 5.0.

OBJECT-TYPE

When tmnxRadiusPEForceDiscovery is set to 'doAction', the RADIUS server is immediately contacted to attempt discovery.

OBJECT-TYPE

The value of tmnxRadiusPEForceDiscoverySvcId specifies a specific service ID to query the RADIUS server about. Reading this object returns the value 0.

OBJECT-TYPE

The UDP port number on which to contact the RADIUS server for accounting requests.

OBJECT-TYPE

The value of tmnxRadiusUseTemplate specifies whether the RADIUS user template is actively applied to the RADIUS user if no VSAs are returned with the auth-accept from the RADIUS server. When the value of tmnxRadiusUseTemplate is set to 'TRUE', the RADIUS user template is actively applied if no VSAs are returned with the auth-accept from the RADIUS server.

OBJECT-TYPE

The value of tmnxRadiusAuthAlgorithm specifies the algorithm used to select a RADIUS server from the list of configured servers (tmnxRadiusServerTable).

OBJECT-TYPE

The tmnxRadiusUserStatsTable is the radius server statistics per user using specific policy. Entries are created and deleted by the system.

OBJECT-TYPE

Information about radius server statistics per user per policy.

OBJECT-TYPE

The tmnxRadiusPolicyName indicates the policy name used by the user to access the radius server.

OBJECT-TYPE

The value of the tmnxRadiusUserServerIndex identifies a specific radius server.

OBJECT-TYPE

The tmnxRadiusUserReqTx indicates the number of requests sent to the radius server from the user using this policy.

OBJECT-TYPE

The tmnxRadiusUserReqRx indicates the number of requests received by the radius server by the user using this policy.

OBJECT-TYPE

The tmnxRadiusUserOpenFail indicates the number of socket open failures to the radius server.

OBJECT-TYPE

The tmnxRadiusUserReqTx indicates the number of socket bind failures to the radius server.

OBJECT-TYPE

The tmnxRadiusUserSendFail indicates the number of socket send failures to the raidus server.

OBJECT-TYPE

The tmnxRadiusUserRecvFail indicates the number of socket receive failures to the raidus server.

OBJECT-TYPE

The tmnxRadiusUserSendTimeout indicates the number of sends which timed-out waiting for reply from the radius server.

OBJECT-TYPE

The tmnxRadiusUserLoginPass indicates the number of authentication succeeded for the user using this policy to the radius server.

OBJECT-TYPE

The tmnxRadiusUserLoginFail indicates the number of authentication failed for the user using this policy to the radius server.

OBJECT-TYPE

The tmnxRadiusUserMd5Fail indicates the number of times authentication failed due to MD5 for the user using this policy to the radius server.

OBJECT-TYPE

The tmnxRadiusUserPending indicates the number of requests pending for the user using this policy to the radius server.

OBJECT-TYPE

The tmnxRadiusUserAcctReqTx indicates the number of accounting requests for the user using this policy to the radius server.

OBJECT-TYPE

The tmnxRadiusUserAcctRejRx indicates the number of accounting rejections received for the user using this policy to the radius server.

OBJECT-TYPE

The tmnxRadiusUserAcctConnError indicates the number of accounting connection failures for the user using this policy to the radius server.

OBJECT-TYPE

The tmnxRadiusUserAccChallengePkt indicates the number of packets which challenged access to the user-account from the radius server.

OBJECT-IDENTITY

OBJECT-TYPE

The desired administrative status of the Tacacs+ protocol operation.

OBJECT-TYPE

Number of seconds to wait before timing out a Tacacs+ server.

OBJECT-TYPE

The tmnxTacPlusServerEntry has an entry for each Tacacs+ server. The table can have up to a maximum of 5 entries.

OBJECT-TYPE

tmnxTacPlusServerEntry is an entry (conceptual row) in the tmnxTacPlusServerTable. Each entry represents the configuration for a Tacacs+ server. Entries in this table can be created and deleted via SNMP SET operations to tmnxTacPlusServerRowStatus.

OBJECT-TYPE

The unique value which identifies a specific Tacacs+ server.

OBJECT-TYPE

The IP address of the Tacacs+ server. tmnxTacPlusServerAddress was made obsolete in 5.0 revision of Alcatel-Lucent SROS series system. Tacacs+ servers are now configured using tmnxTacPlusServerInetAddress and tmnxTacPlusServerInetAddressType objects.

OBJECT-TYPE

The secret key associated with the Tacacs+ server. The value returned by tmnxTacPlusServerSecret is always an empty string. The value of tmnxTacPlusServerSecret cannot be set to an empty string.

OBJECT-TYPE

tmnxTacPlusServerRowStatus controls the creation and deletion of rows in the table. To create a row in the tmnxTacPlusServerTable, set tmnxTacPlusServerRowStatus to createAndGo(4). All objects will take on default values and the agent will change tmnxTacPlusServerRowStatus to active(1). To delete a row in the tmnxTacPlusServerTable, set tmnxTacPlusServerRowStatus to delete(6).

OBJECT-TYPE

tmnxTacPlusServerOperStatus indicates the operational status of the TACACS+ server.

OBJECT-TYPE

The value of tmnxTacPlusServerInetAddressType specifies the address type of tmnxTacPlusServerInetAddress address. The value of tmnxTacPlusServerInetAddressType can be either of InetAddressType - 'ipv4' or InetAddressType - 'ipv6' or InetAddressType - 'ipv6z'.

OBJECT-TYPE

The value of tmnxTacPlusServerInetAddress specifies the address of the Tacplus server.

OBJECT-TYPE

The value of tmnxTacPlusServerPort specifies the TCP port on which to contact the Tacplus server.

OBJECT-TYPE

When the value of tmnxTacPlusAccounting is set to 'TRUE', TACACS+ command accounting is enabled.

OBJECT-TYPE

tmnxTacPlusAcctRecType is used to configure the type of accounting record packet that is to be sent to the TACACS+ server. The value indicates whether TACACS+ accounting start and stop packets be sent or just stop packets be sent. TACACS+ start packet is sent whenever the user executes a command. A stop packet is sent whenever the command execution is complete. The default value for this object is 'stopOnly'.

OBJECT-TYPE

When the value of tmnxTacPlusAuthorization is set to 'TRUE', TACACS+ command authorization is enabled.

OBJECT-TYPE

When the value of tmnxTacPlusSingleConnection is set to 'TRUE', a single connection is established with the TACACS+ server. The connection is kept open and is used by all the TELNET/SSH/FTP sessions for AAA operations. This object is obsoleted in release 8.0.

OBJECT-TYPE

tmnxTacPlusSourceAddress is used to configure the source address of the TACACS+ packet. It should be a valid unicast address. If this object is configured with the address of the router interface, the TACACS+ client uses it while making a request to the server. If the address is not configured or is not the address of the one of interfaces, the source address is based on the address of the TACACS+ server. If the server address is in-band, the client uses the system ip address as the source address. If it is out-of-band, the source address is the address of the management interface. tmnxRadiusSourceAddress was made obsolete in the 4.0 revision of Alcatel-Lucent SROS series systems. The source address of the TACACS+ packet can now be set by creating a tmnxSourceIPEntry for TACACS+ application in the tmnxSourceIPTable.

OBJECT-TYPE

When the value of tmnxTacPlusConfigured is set to 'false', all the Tacplus objects under the tmnxTacPlusInfo tree will be set to their default values and all the rows in the tmnxTacPlusServerTable will be removed. The value of this object will be set to 'true' if non-default values are set to the 'TacPlus' objects.

OBJECT-TYPE

The value of tmnxTacplusUseTemplate specifies whether the TACACS+ user template is actively applied to the TACACS+ user. When the value of tmnxTacplusUseTemplate is set to 'TRUE', the TACACS+ user template is actively applied.

OBJECT-IDENTITY

OBJECT-TYPE

tmnxEnableServers is used to enable/disable telnet, SSH, FTP, and telnet v6 servers running on the system. By default, at system startup, only SSH server will be enabled.

OBJECT-TYPE

tmnxTelnetServerOperStatus indicates the operational status of the telnet server. If the value of this object changes, a generic trap TIMETRA-SYSTEM-MIB:tmnxStateChange will be sent.

OBJECT-TYPE

tmnxSSHServerOperStatus indicates the operational status of the SSH server. If the value of this object changes, a generic trap TIMETRA-SYSTEM-MIB:tmnxStateChange will be sent.

OBJECT-TYPE

tmnxFTPServerOperStatus indicates the operational status of the FTP server. If the value of this object changes, a generic trap TIMETRA-SYSTEM-MIB:tmnxStateChange will be sent.

OBJECT-TYPE

The value of tmnxTelnet6ServerOperStatus indicates the operational status of the IPv6 telnet server. If the value of this object changes, a generic trap TIMETRA-SYSTEM-MIB:tmnxStateChange will be sent.

OBJECT-IDENTITY

OBJECT-TYPE

When tmnxCpmPerPeerQueuing is set to 'true', CPM hardware queuing per peer is enabled. This means that when a peering session is established, the router will automatically allocate a separate CPM hardware queue for that peer. When tmnxCpmPerPeerQueuing is set to 'false', CPM hardware queuing per peer is disabled. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

The value of tmnxCpmQueuesTotal indicates the total number of CPM hardware queues. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

The value of tmnxCpmQueuesInUse indicates the number of CPM hardware queues that are in use. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

The tCpmFilterQueueTable has an entry for each CPM filter queue configured on this system. This table is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

Each row entry represents a particular CPM Filter Queue. Entries are created/deleted by user. Entries have a presumed StorageType of nonVolatile.

OBJECT-TYPE

The value of tCpmFilterQueueId is used to index into the tCpmFilterQueueTable. It uniquely identifies a CPM Queue as configured on this system.

OBJECT-TYPE

The value of tCpmFilterQueueRowStatus specifies the row status. It allows entires to be created or deleted in the tCpmFilterQueueEntry table.

OBJECT-TYPE

The value of tCpmFilterQueueLastChanged indicates the timestamp of the last change to this row in tCpmFilterQueueTable.

OBJECT-TYPE

The value of tCpmFilterQueueAdminPIR specifies the Peak Information Rate associated with this queue. This object can only be set to 1 or -1, when the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '8'.

OBJECT-TYPE

The value of tCpmFilterQueueAdminCIR specifies the Committed Information Rate associated with this queue. This object cannot be set when the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '8'.

OBJECT-TYPE

The value of tCpmFilterQueueCBS specifies the Committed Burst Excess associated with this queue. This object cannot be set when the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '8'.

OBJECT-TYPE

The value of tCpmFilterQueueMBS specifies the Maximum Burst Size associated with this queue.

OBJECT-TYPE

The value of tCpmFilterQueueReferences indicates the count of filter entries using this particular queue to forward traffic to the main CPU.

OBJECT-TYPE

The value of tCpmFilterQueueOperPIR indicates the operational value of the Peak Information Rate associated with this queue. This value can be zero if the queue is not instantiated.

OBJECT-TYPE

The value of tCpmFilterQueueOperCIR indicates the operational value of the Committed Information Rate associated with this queue.

OBJECT-IDENTITY

OBJECT-TYPE

The value of tCpmFilterDefaultAction specifies the action to take for packets that do not match any filter entries. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

The value of tCpmIpFilterAdminState specifies the administrative state of the CPM IPv4 filter. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

The value of tCpmIPv6FilterAdminState specifies the administrative state of the CPM IPv6 filter. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

The value of tCpmMacFilterAdminState specifies the administrative state of the CPM Mac filter. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

The tCpmIpFilterTable has an entry for each CPM IPv4 filter entry configured on this system. This table is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

Each row entry represents a particular Cpm Filter match entry. Every Cpm Filter can have zero or more Cpm Filter match entries. A filter entry with no match criteria set will match every packet, and the entry action will be taken. Entries are created/deleted by user. There is no StorageType object, entries have a presumed StorageType of nonVolatile.

OBJECT-TYPE

The value of tCpmIpFilterEntryId is used to index into the tCpmIpFilterTable. It uniquely identifies a CPM filter entry as configured on this system.

OBJECT-TYPE

The value of tCpmIpFilterEntryRowStatus specifies the row status. It allows entries to be created and deleted in the tCpmIpFilterTable.

OBJECT-TYPE

The value of tCpmIpFilterEntryLastChanged indicates the timestamp of the last change to this row in tCpmIpFilterTable.

OBJECT-TYPE

The value of tCpmIpFilterEntryLogId specifies the log in which packets matching this entry should be entered. The value zero indicates that logging is disabled.

OBJECT-TYPE

The value of tCpmIpFilterEntryDescription specifies the user-provided string describing this filter.

OBJECT-TYPE

The value of tCpmIpFilterEntryAction specifies the action to take for packets that match this filter entry. The value default(4) specifies this entry to inherit the behavior defined as the default for the filter in tCpmFilterDefaultAction. The value queue(3) can only be specified if a valid queue id is entered in tCpmIpFilterEntryQueueId.

OBJECT-TYPE

The value of tCpmIpFilterEntryQueueId specifies which queue to put the packet in when tCpmIpFilterEntryAction is queue (3). If the value of tCpmIpFilterEntryAction is different from queue (3) tCpmIpFilterEntryQueueId will be forced by the system to 0, and any change attempt will be silently discarded.

OBJECT-TYPE

The value of tCpmIpFilterEntrySrcIPAddr specifies the IP address to match the source-ip of the packet.

OBJECT-TYPE

The value of tCpmIpFilterEntrySrcIPMask specifies the IP Mask value for this policy Cpm FilterEntry entry. The mask is ANDed with the IP to match the tCpmIpFilterEntrySrcIPAddr.

OBJECT-TYPE

The value of tCpmIpFilterEntryDestIPAddr specifies the IP address to match the destination-ip of the packet.

OBJECT-TYPE

The value of tCpmIpFilterEntryDestIPMask specifies the IP Mask value for this policy Cpm FilterEntry entry. The mask is ANDed with the IP to match the tCpmIpFilterEntryDestIPAddr.

OBJECT-TYPE

The value of tCpmIpFilterEntryProtocol specifies the IP protocol to match. It can be set to -1 to disable matching Cpm protocol. If the protocol is changed, the protocol specific parameters are reset. For instance, if protocol is changed from TCP to UDP, then the objects tCpmIpFilterEntryTcpSyn and tCpmIpFilterEntryTcpAck will be turned off.

OBJECT-TYPE

The value of tCpmIpFilterEntrySrcPort specifies the TCP/UDP port to match the source-port of the packet.

OBJECT-TYPE

The value of tCpmIpFilterEntrySrcPortMask specifies the 16 bit mask to be applied when matching tCpmIpFilterEntrySrcPort.

OBJECT-TYPE

The value of tCpmIpFilterEntryDestPort specifies the TCP/UDP port to match the destination-port of the packet.

OBJECT-TYPE

The value of tCpmIpFilterEntryDestPortMask specifies the 16 bit mask to be applied when matching tCpmIpFilterEntryDestPort.

OBJECT-TYPE

The value of tCpmIpFilterEntryDSCP specifies the DSCP to be matched on the packet.

OBJECT-TYPE

The value of tCpmIpFilterEntryFragment specifies whether fragment matching is enabled. When enabled, this object matches fragmented/unfragmented packets as per the value of the object.

OBJECT-TYPE

The value of tCpmIpFilterEntryOptionPresent specifies whether IP options matching is enabled. When enables, this object matches packets if they have options present or not as per the value of the object.

OBJECT-TYPE

The value of tCpmIpFilterEntryIPOptionValue specifies the specific IP option to match.

OBJECT-TYPE

The value of tCpmIpFilterEntryIPOptionMask specifies the mask that is ANDed with the ip-option in the packet header before being compared to tCpmIpFilterEntryIPOptionValue.

OBJECT-TYPE

The value of tCpmIpFilterEntryMultipleOption specifies whether multiple options are to be matched as per the value of the object.

OBJECT-TYPE

The value of tCpmIpFilterEntryTcpSyn specifies whether a TCP Syn packet should match.

OBJECT-TYPE

The value of tCpmIpFilterEntryTcpAck specifies whether a TCP Ack packet should match.

OBJECT-TYPE

The value of tCpmIpFilterEntryIcmpCode specifies the ICMP code to be matched. tCpmIpFilterEntryIcmpCode complements the object tCpmIpFilterEntryIcmpType. Both of them need to be set to actually enable ICMP Code matching. The value -1 means Icmp code matching is disabled.

OBJECT-TYPE

The value of tCpmIpFilterEntryIcmpType specifies the ICMP type to be matched. The value -1 means Icmp type matching is disabled.

OBJECT-TYPE

The value of tCpmIpFilterEntryVRtrId specifies the virtual router ID to be matched. When the value is '0', no virtual router matching occurs.

OBJECT-TYPE

The value of tCpmIpFilterEntryLogCreated indicates whether the filter log for this filter entry has been instantiated.

OBJECT-TYPE

The value of the object tCpmIpFilterEntrySrcIpPrefixList specifies the ip-prefix-list to be used as match criterion for the source ip address. If the value of this object is empty the values of the objects tCpmIpFilterEntrySrcIPAddr and tCpmIpFilterEntrySrcIPMask will be used as src-ip match criterion. The value specified for this object must correrspond to a prefix-list defined in TIMETRA-FILTER-MIB::tFilterPrefixListTable. When set to a non zero value, the value of the objects tCpmIpFilterEntrySrcIPAddr and tCpmIpFilterEntrySrcIPMask will set to their default values. The value of those object will be set to its default value by the system if a new (non default) value is provided for the objects tCpmIpFilterEntrySrcIPAddr and tCpmIpFilterEntrySrcIPMask. An attempt to set tCpmIpFilterEntrySrcIpPrefixList to a non-default value in combination with setting any of tCpmIpFilterEntrySrcIPAddr or tCpmIpFilterEntrySrcIPMask to (a) non-default value(s) is rejected by the system. Also, setting both tCpmIpFilterEntrySrcIpPrefixList and tCpmIpFilterEntryDstIpPrefixList to non-default values is rejected by the system

OBJECT-TYPE

The value of the object tCpmIpFilterEntryDstIpPrefixList specifies the ip-prefix-list to be used as match criterion for the destination ip address. If the value of this object is empty the values of the objects tCpmIpFilterEntryDestIPAddr and tCpmIpFilterEntryDestIPMask will be used as src-ip match criterion. The value specified for this object must correrspond to a prefix-list defined in TIMETRA-FILTER-MIB::tFilterPrefixListTable. When set to a non zero value, the value of the objects tCpmIpFilterEntryDestIPAddr and tCpmIpFilterEntryDestIPMask will set to their default values. The value of thos object will be set to its default value by the system if a new (non default) value is provided for the objects tCpmIpFilterEntryDestIPAddr and tCpmIpFilterEntryDestIPMask. An attempt to set tCpmIpFilterEntryDstIpPrefixList to a non-default value in combination with setting any of tCpmIpFilterEntryDestIPAddr or tCpmIpFilterEntryDestIPMask to (a) non-default value(s) is rejected by the system. Also, setting both tCpmIpFilterEntryDstIpPrefixList and tCpmIpFilterEntrySrcIpPrefixList to non-default values is rejected by the system

OBJECT-TYPE

The tCpmIpFilterStatsTable has a stats entry for each entry in each CPM filter configured on this system. This table is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

Each row entry represents the statistics related to the tCpmIpFilterEntry indexed by the same tCpmIpFilterEntryId. Entries are created when tCpmIpFilterEntry rows are created.

OBJECT-TYPE

The value of tCpmIpFilterStatsDroppedPkts indicates the number of packets dropped due to the tCpmIpFilterEntry with the same index.

OBJECT-TYPE

The value of tCpmIpFilterStatsForwardedPkts indicates the number of packets forwarded due to the tCpmIpFilterEntry with the same index.

OBJECT-TYPE

The tCpmFilterQueueStatsTable has a stats entry for each CPM filter queue configured on this system. This table is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

Each row entry represents the statistics related to the tCpmFilterQueueEntry indexed by the same tCpmFilterQueueId. Entries are created when tCpmFilterQueueEntry rows are created.

OBJECT-TYPE

The value of tCpmFilterQInProfileDropPkts indicates the number of packets complying to the queue Qos profile dropped from the tCpmFilterQueueEntry with the same index.

OBJECT-TYPE

The value of tCpmFilterQInProfileFwdPkts indicates the number of packets complying to the queue Qos profile forwarded from the tCpmFilterQueueEntry with the same index.

OBJECT-TYPE

The value of tCpmFilterQInProfileDropOctets indicates the number of octets complying to the queue Qos profile dropped from the tCpmFilterQueueEntry with the same index.

OBJECT-TYPE

The value of tCpmFilterQInProfileFwdOctets indicates the number of octets complying to the queue Qos profile forwarded from the tCpmFilterQueueEntry with the same index.

OBJECT-TYPE

The value of tCpmFilterQOutProfileDropPkts indicates the number of packets not complying to the queue Qos profile dropped from the tCpmFilterQueueEntry with the same index.

OBJECT-TYPE

The value of tCpmFilterQOutProfileFwdPkts indicates the number of packets not complying to the queue Qos profile forwarded from the tCpmFilterQueueEntry with the same index.

OBJECT-TYPE

The value of tCpmFilterQOutProfileDropOctets indicates the number of octets not complying to the queue Qos profile dropped from the tCpmFilterQueueEntry with the same index.

OBJECT-TYPE

The value of tCpmFilterQOutProfileFwdOctets indicates the number of octets not complying to the queue Qos profile forwarded from the tCpmFilterQueueEntry with the same index.

OBJECT-TYPE

The tCpmIPv6FilterTable has an entry for each CPM IPv6 filter entry configured on this system. This table is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

Each row entry represents a particular CPM IPv6 filter match entry. The CPM IPv6 Filter can have zero or more CPM IPv6 filter match entries. A filter entry with no match criteria set will match every packet, and the entry action will be taken. Entries are created/deleted by user. There is no StorageType object, entries have a presumed StorageType of nonVolatile.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryId is used to index into the tCpmIPv6FilterTable. It uniquely identifies a CPM IPv6 filter entry as configured on this system.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryRowStatus specifies the row status. It allows entries to be created and deleted in the tCpmIPv6FilterTable.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryLastChanged indicates the timestamp of the last change to this row in tCpmIPv6FilterTable.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryLogId specifies the log in which packets matching this entry should be entered. The value zero indicates that logging is disabled.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryDescription specifies the user-provided string describing this filter entry.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryAction specifies the action to take for packets that match this filter entry. The value default(4) specifies this entry to inherit the behavior defined as the default for the filter in tCpmFilterDefaultAction. The value queue(3) can only be specified if a valid queue id is entered in tCpmIPv6FilterEntryQueueId.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryQueueId specifies which queue to put the packet in when tCpmIPv6FilterEntryAction is queue (3). If the value of tCpmIPv6FilterEntryAction is different from queue (3) tCpmIPv6FilterEntryQueueId will be forced by the system to 0, and any change attempt will be silently discarded.

OBJECT-TYPE

The value of tCpmIPv6FilterEntrySrcIPAddr specifies the IPv6 address to match the source IPv6 address in the packet.

OBJECT-TYPE

tCpmIPv6FilterEntrySrcIPMask holds the IPv6 source address mask for this IPv6 CPM filter entry. The mask specifies the bits to be compared between tCpmIPv6FilterEntrySrcIPAddr and the IPv6 source address in the packet.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryDestIPAddr specifies the IPv6 address to match the destination IPv6 address in the packet.

OBJECT-TYPE

tCpmIPv6FilterEntryDestIPMask holds the IPv6 destination address mask for this IPv6 CPM filter entry. The mask specifies the bits to be compared between tCpmIPv6FilterEntryDestIPAddr and the IPv6 destination address in the packet.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryNextHeader specifies the IPv6 protocol to match. '-1' specifies that the matching has been disabled. To change a protocol, the protocol specific values should be reset. For instance, to change the protocol from TCP(6) to UDP(7), the TCP specific attributes such as tCpmIPv6FilterEntryTcpSyn and tCpmIPv6FilterEntryTcpAck should be reset. Because the match criteria only pertains to the last next-header, the following values are not accepted: 0, 43, 44, 50, 51, and 60.

OBJECT-TYPE

The value of tCpmIPv6FilterEntrySrcPort specifies the TCP/UDP port to match the source-port of the packet.

OBJECT-TYPE

The value of tCpmIPv6FilterEntrySrcPortMask specifies the bits to be compared between tCpmIPv6FilterEntrySrcPort and the TCP/UDP source port in the packet.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryDestPort specifies the TCP/UDP port to match the destination-port of the packet.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryDestPortMask specifies the bits to be compared between tCpmIPv6FilterEntryDestPort and the TCP/UDP source port in the packet.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryDSCP specifies the DSCP to be matched on the packet.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryTcpSyn specifies whether a TCP Syn packet should match.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryTcpAck specifies whether a TCP Ack packet should match.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryIcmpCode specifies the ICMP code to be matched. tCpmIPv6FilterEntryIcmpCode complements the object tCpmIPv6FilterEntryIcmpType. Both of them need to be set to actually enable ICMP matching. The value '-1' means Icmp code matching is disabled.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryIcmpType specifies the ICMP type to be matched. tCpmIPv6FilterEntryIcmpType complements the object tCpmIPv6FilterEntryIcmpCode. Both of them need to be set to actually enable ICMP matching. The value '-1' means Icmp type matching is disabled.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryVRtrId specifies the virtual router ID to be matched. When the value is '0', no virtual router matching occurs.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryLogCreated indicates whether the filter log for this filter entry has been instantiated.

OBJECT-TYPE

The value of tCpmIPv6FilterEntryFlowLabel specifies the flow label to be matched. When the value is '-1', no flow label matching occurs.

OBJECT-TYPE

The tCpmIPv6FilterStatsTable has a stats entry for each entry in each CPM filter configured on this system. This table is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

Each row entry represents the statistics related to the tCpmIPv6FilterEntry indexed by the same tCpmIPv6FilterEntryId. Entries are created when tCpmIPv6FilterEntry rows are created.

OBJECT-TYPE

The value of tCpmIPv6FilterStatsDroppedPkts indicates the number of packets dropped due to the tCpmIPv6FilterEntry with the same index.

OBJECT-TYPE

The value of tCpmIPv6FilterStatsForwardedPkts indicates the number of packets forwarded due to the tCpmIPv6FilterEntry with the same index.

OBJECT-TYPE

The value of tmnxCpmProtPolTableLastChanged indicates the sysUpTime at the time of the last modification of an entry in the tmnxCpmProtPolTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The tmnxCpmProtPolTable has an entry for each CPM Protection policy configured in the system. There are two default policies. CPM Protection policy (254) is the default Access CPM Protection policy. CPM Protection policy (255) is the default Network CPM Protection policy. The default CPM Protection policies are created by the system, and can be modified but cannot be destroyed. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

Each row entry represents the configuration information related to a CPM Protection policy.

OBJECT-TYPE

The value of tmnxCpmProtPolicyId specifies the identification number of the CPM Protection policy.

OBJECT-TYPE

The value of tmnxCpmProtPolRowStatus controls the creation and deletion of rows in this table.

OBJECT-TYPE

The value of tmnxCpmProtPolLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

OBJECT-TYPE

The value of tmnxCpmProtPolDescription specifies the user provided description of this CPM Protection policy. The default CPM Protection policies 254 and 255 have a default description which can be modified by the user.

OBJECT-TYPE

The value of tmnxCpmProtPolPerSrcRateLimit specifies the packet arrival rate limit to be applied to each source of packets. Objects referring to this CPM Protection policy that do not support per-source rate limiting, may ignore the tmnxCpmProtPolPerSrcRateLimit.

OBJECT-TYPE

The value of tmnxCpmProtPolOverallRateLimit specifies the overall packet arrival rate limit to be applied to all sources of packets. A default value of -1, specifies an unrestricted packet arrival rate on the interface. The value of tmnxCpmProtPolOverallRateLimit is equal to 6000 for the default access policy (policy 254).

OBJECT-TYPE

The value of tmnxCpmProtPolAlarm specifies if a notification must be issued when one of the packet arrival rate limits is crossed. A value of 'true' specifies that a notification must be issued.

OBJECT-TYPE

The value of tmnxCpmProtPolOutProfileRate specifies the threshold value at which incoming control packets are marked out of profile. A default value of -1 specifies absence of a set threshold on the interface. The value of tmnxCpmProtPolOutProfileRate is 6000 for the default access policy (policy 254).

OBJECT-TYPE

The value of tmnxCpmProtPolLimDhcpCiAddrZero specifies whether or not to apply per-source rate limiting to DHCP packets containing Client IP address zero (e.g., for IPv4, ciaddr = 0.0.0.0). For example, suppose a SAP has the following configuration: a) TIMETRA-SAP-MIB::sapCpmProtMonitorIP = 'true', and b) TIMETRA-SAP-MIB::sapCpmProtPolicyId = 7. Then, if the tmnxCpmProtPolLimDhcpCiAddrZero value for CPM Protection policy 7 is 'true', DHCP packets arriving at the SAP are rate limited using tmnxCpmProtPolPerSrcRateLimit, whether or not the ciaddr field is zero. On the other hand, with the same SAP configuration, if the tmnxCpmProtPolLimDhcpCiAddrZero value for CPM Protection policy 7 is 'false', DHCP packets arriving at the SAP with ciaddr zero are exempt from the tmnxCpmProtPolPerSrcRateLimit. The value of this object is irrelevant if the SAP's TIMETRA-SAP-MIB::sapCpmProtMonitorIP value is 'false'.

OBJECT-TYPE

The value of tmnxCpmProtDropUncfgdProtocolMsg specifies the administrative state of the protocol protection facility. When the value of this object is set to 'inService (2)', network control protocol traffic is dropped if it is received on an interface where the protocol is not configured. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The value of tmnxCpmProtLinkRateLimit specifies the link-specific packet arrival rate limit to be applied to link-level protocols such as LACP. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The value of tmnxCpmProtExcdTableLastChanged indicates the sysUpTime at the time of the last add, change, or delete of a row in the tmnxCpmProtExcdTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

tmnxCpmProtExcdTable has a row for each <service ID, SAP, source MAC address> triple that has exceeded the per-source rate limit configured for the <service ID, SAP> pair. MAC-layer per-source rate limiting is enabled for a <service ID, SAP> pair by setting TIMETRA-SAP-MIB::sapCpmProtMonitorMac to 'true'. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

Each row contains statistics for a MAC packet stream that has exceeded its per-source rate limit. A row is created by the system the first time a <service ID, SAP, source MAC address> triple exceeds its per-source rate limit. The row is updated by the system on subsequent violations. Rows are deleted when a clear operation is requested on the underlying statistics.

OBJECT-TYPE

The value of tmnxCpmProtExcdMac indicates the MAC address of a source which has exceeded its per-source rate limit.

OBJECT-TYPE

The value of tmnxCpmProtExcdPeriods indicates the number of times a per-source rate limit violation was detected for this source. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtExcdTimeStarted indicates the sysUpTime at the time of the creation of this row.

OBJECT-TYPE

The value of tmnxCpmProtExcdTime indicates the sysUpTime at the time of the last update of this row.

OBJECT-TYPE

The value of tmnxCpmProtViolPortTableLastChgd indicates the sysUpTime at the time of the last modification of an entry in the tmnxCpmProtViolPortTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The tmnxCpmProtViolPortTable has an entry for each port where either the link-specific packet arrival rate limit or the per-port overall packet rate limit was violated. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

Each row entry represents the information related to a port where the link-specific packet arrival rate limit was violated. Rows are created or removed automatically by the system.

OBJECT-TYPE

The value of tmnxCpmProtViolPortPeriods indicates the number of times the link-specific rate limit violation was detected at this port. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtViolPortTimeStarted indicates the sysUpTime when the link-specific rate limit violation was detected the first time at this port.

OBJECT-TYPE

The value of tmnxCpmProtViolPortTime indicates the sysUpTime when the link-specific rate limit violation was detected the last time at this port.

OBJECT-TYPE

The value of tmnxCpmProtViolPortAggPeriods indicates the number of times the per-port overall rate limit violation was detected at this port.

OBJECT-TYPE

The value of tmnxCpmProtViolPortAggTimeStart indicates the sysUpTime when the per-port overall rate limit violation was detected the first time at this port.

OBJECT-TYPE

The value of tmnxCpmProtViolPortAggTime indicates the sysUpTime when the per-port overall rate limit violation was detected the last time at this port.

OBJECT-TYPE

The value of tmnxCpmProtViolIfTableLastChgd indicates the sysUpTime at the time of the last modification of an entry in the tmnxCpmProtViolIfTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The tmnxCpmProtViolIfTable has an entry for each router interface where the overall packet arrival rate limit was violated. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

Each row entry represents the information related to a router interface where the overall packet arrival rate limit was violated. Rows are created or removed automatically by the system.

OBJECT-TYPE

The value of tmnxCpmProtViolIfPeriods indicates the number of times the rate limit violation was detected at this router interface. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtViolIfTimeStarted indicates the sysUpTime at the time of the creation of this entry.

OBJECT-TYPE

The value of tmnxCpmProtViolIfTime indicates the sysUpTime at the time of the last modification of this entry.

OBJECT-TYPE

The value of tmnxCpmProtViolSapTableLastChgd indicates the sysUpTime at the time of the last modification of an entry in the tmnxCpmProtViolSapTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The tmnxCpmProtViolSapTable has an entry for each SAP where the overall packet arrival rate limit was violated. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

Each row entry represents the information related to a SAP where the overall packet arrival rate limit was violated. Rows are created or removed automatically by the system.

OBJECT-TYPE

The value of tmnxCpmProtViolSapPeriods indicates the number of times the rate limit violation was detected at this SAP. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtViolSapTimeStarted indicates the sysUpTime at the time of the creation of this entry.

OBJECT-TYPE

The value of tmnxCpmProtViolSapTime indicates the sysUpTime at the time of the last update of this entry.

OBJECT-TYPE

The value of tmnxCpmProtPortOverallRateLimit specifies the per-port packet arrival rate limit to be applied to all protocol messages that are to be processed by the CPM. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The value of tmnxCpmProtDetectPeriod indicates the length of a packet arrival rate limit detection period. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The tCpmMacFilterTable has an entry for each CPM Mac filter entry configured on this system. This table is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

Each row entry represents a particular Cpm Mac Filter match entry. The Cpm Mac Filter can have zero or more Cpm Mac Filter match entries. A filter entry with no match criteria set will match every packet, and the entry action will be taken. Entries are created/deleted by user.

OBJECT-TYPE

The value of tCpmMacFltrEntryId is used to index into the tCpmMacFilterTable. It uniquely identifies a CPM Mac filter entry as configured on this system.

OBJECT-TYPE

The value of tCpmMacFltrEntryRowStatus specifies the row status. It allows entries to be created and deleted in the tCpmMacFilterTable.

OBJECT-TYPE

The value of tCpmMacFltrEntryLastChanged indicates the timestamp of the last change to this row in tCpmMacFilterTable.

OBJECT-TYPE

The value of tCpmMacFltrEntryLogId specifies the log in which packets matching this entry should be entered. The value zero indicates that logging is disabled.

OBJECT-TYPE

The value of tCpmMacFltrEntryDescription specifies the user-provided string describing this filter entry.

OBJECT-TYPE

The value of tCpmMacFltrEntryAction specifies the action to take for packets that match this filter entry. The value default(4) specifies this entry to inherit the behavior defined as the default for the filter in tCpmFilterDefaultAction. The value queue(3) can only be specified if a valid queue id is entered in tCpmMacFltrEntryQueueId.

OBJECT-TYPE

The value of tCpmMacFltrEntryQueueId specifies which queue to put the packet in when tCpmMacFltrEntryAction is queue (3). If the value of tCpmMacFltrEntryAction is different from queue (3) tCpmMacFltrEntryQueueId will be forced by the system to 0, and any change attempt will be silently discarded.

OBJECT-TYPE

The value of tCpmMacFltrEntryFrameType specifies the type of mac frame for which we are defining this match criteria. The value 'none' means that this entry is not matching on any enthernet frame. The value 'e802dot1ag(4)' is depricated, and replaced by e802dot2LLC(1).

OBJECT-TYPE

The value of the object tCpmMacFltrEntrySvcId specifies the service-id in which the packet is to be received for this entry to match. A value of 0 indicates: any service.

OBJECT-TYPE

Filtering on dot1p bits is currently not offered on cpm-mac filters. All set actions on this object will therefore be ignored.

OBJECT-TYPE

Filtering on dot1p bits is currently not offered on cpm-mac filters. All set actions on this object will therefore be ignored.

OBJECT-TYPE

The value of the object tCpmMacFltrEntryDsap specifies the MAC DSAP to match for this MAC filter entry. This object has no significance if the object tCpmMacFltrEntryFrameType is not set to 802dot2LLC.

OBJECT-TYPE

The value of the object tCpmMacFltrEntryDsapMask specifies the MAC DSAP mask for this MAC filter entry. This object has no significance if the object tCpmMacFltrEntryFrameType is not set to 802dot2LLC.

OBJECT-TYPE

The value of the object tCpmMacFltrEntrySrcMAC specifies the source MAC to match for this policy MAC filter entry.

OBJECT-TYPE

The value of the object tCpmMacFltrEntrySrcMACMask specifies the source MAC mask value for this policy MAC filter entry. The mask is ANDed with the MAC to match tCpmMacFltrEntrySrcMAC. A zero bit means ignore this bit, do not match. A one bit means match this bit with tCpmMacFltrEntrySrcMAC. Use the value 00-00-00-00-00-00 to disable this filter criteria.

OBJECT-TYPE

The value of the object tCpmMacFltrEntryDstMAC specifies the Destination MAC mask value for this policy MAC filter entry.

OBJECT-TYPE

The value of the object tCpmMacFltrEntryDstMACMask specifies the destination MAC mask value for this policy MAC filter entry. The mask is ANDed with the MAC to match tCpmMacFltrEntryDstMAC. A zero bit means ignore this bit, do not match. a one bit means match this bit with tCpmMacFltrEntryDstMAC. Use the value 00-00-00-00-00-00 to disable this filter criteria.

OBJECT-TYPE

The value of the object tCpmMacFltrEntryEtherType specifies the Ethertype for this MAC filter entry. Use -1 to disable matching by this criteria. This object has no significance if the object tCpmMacFltrEntryFrameType is not set to Ethernet_II.

OBJECT-TYPE

The value of the object tCpmMacFltrEntrySsap specifies the the MAC SSAP to match for this MAC filter entry. This object has no significance if the object tCpmMacFltrEntryFrameType is not set to 802dot2LLC.

OBJECT-TYPE

The value of the object tCpmMacFltrEntrySsapMask specifies the MAC SSAP mask for this MAC filter entry. use 0 to disable matching by this criteria. This object has no significance if the object tCpmMacFltrEntryFrameType is not set to 802dot2LLC.

OBJECT-TYPE

The value of the object tCpmMacFltrEntryCfmOpCodeOper specifies which type of opcode checking is to be performed. If different fron none, more info is provided in the objects tCpmMacFltrEntryCfmOpCodeValue1 and tCpmMacFltrEntryCfmOpCodeValue2. This object has significance only if the object tCpmMacFltrEntryFrameType refers to either ieee802.1ag or Y1731.

OBJECT-TYPE

The value of the object tCpmMacFltrEntryCfmOpCodeValue1 specifies a cfm opcode. The value of this object is used as per the description for tCpmMacFltrEntryCfmOpCodeOper.

OBJECT-TYPE

The value of the object tCpmMacFltrEntryCfmOpCodeValue2 specifies a cfm opcode. The value of this object is used as per the description for tCpmMacFltrEntryCfmOpCodeOper.

OBJECT-TYPE

The value of tCpmMacFltrEntryLogCreated indicates whether the filter log for this filter entry has been instantiated.

OBJECT-TYPE

The tCpmMacFilterStatsTable has a stats entry of the CPM Mac filter configured on this system. This table is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5'.

OBJECT-TYPE

Each row entry represents the statistics related to the tCpmMacFilterEntry indexed by the same tCpmMacFltrEntryId. Entries are created when tCpmMacFilterEntry rows are created.

OBJECT-TYPE

The value of tCpmMacFilterStatsDroppedPkts indicates the number of packets dropped due to the tCpmMacFilterEntry with the same index.

OBJECT-TYPE

The value of tCpmMacFilterStatsForwardedPkts indicates the number of packets forwarded due to the tCpmMacFilterEntry with the same index.

OBJECT-TYPE

The value of tmnxCpmProtAllowShamLinkPackets specifies whether OSPF sham-link traffic will be allowed over VPRN transport tunnels. When the value of this object is set to 'true (1)', OSPF sham-link traffic will be allowed even if OSPF is not configured. When the value of this object is set to 'false (2)', OSPF sham-link traffic is dropped if it is received on an interface where the protocol is not configured. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The tmnxCpmProtViolVdoSvcTable has an entry for each client address of a RTCP control traffic in VPLS service where the per-source rate limit was violated.

OBJECT-TYPE

Each row entry represents the information related to a client address of a RTCP control traffic in VPLS service where the per-source rate limit was violated. Rows are created or removed automatically by the system.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoSvcCltAddrType indicates the type of address represented by tmnxCpmProtViolVdoSvcCltAddr.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoSvcCltAddr indicates the client IP address of a RTCP control traffic in VPLS service where the per-source rate limit was violated.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoSvcPeriods indicates the number of times the per-source rate limit violation was detected for this client. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoSvcTimeStarted indicates the sysUpTime at the time of the creation of this entry.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoSvcTime indicates the sysUpTime at the time of the last update of this entry.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoSvcVrtrIfIndex specifies the secondary index in the TIMETRA-VRTR-MIB::vRtrIfTable corresponding to the video interface where the per-source rate limit was violated. The value of primary index TIMETRA-VRTR-MIB::vRtrIfTable will be equal to the virtual router identifier of vpls-management which is 4094.

OBJECT-TYPE

The tmnxCpmProtViolVdoVrtrTable has an entry for each client address of a RTCP control traffic in router context where the per-source rate limit was violated.

OBJECT-TYPE

Each row entry represents the information related to a client address of a RTCP control traffic in router context where the per-source rate limit was violated. Rows are created or removed automatically by the system.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoVrtrCltAdrType indicates the type of address represented by tmnxCpmProtViolVdoVrtrCltAddr.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoSvcCltAddr indicates the client IP address of a RTCP control traffic in router context where the per-source rate limit was violated.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoVrtrPeriods indicates the number of times the per-source rate limit violation was detected for this client. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoVrtrTimeStart indicates the sysUpTime at the time of the creation of this entry.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoVrtrTime indicates the sysUpTime at the time of the last update of this entry.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoVrtrSvcId indicates the row index in the TIMETRA-SERV-MIB::svcBaseInfoTable corresponding to the service where the per-source rate limit was violated.

OBJECT-TYPE

The value of tmnxCpmProtViolVdoVrtrIfIndex specifies the secondary index in the TIMETRA-VRTR-MIB::vRtrIfTable corresponding to the video interface where the per-source rate limit was violated. The value of vRtrID specifies the primary index in the TIMETRA-VRTR-MIB::vRtrIfTable.

OBJECT-TYPE

The value of tmnxCpmProtEthCfmPolTableLastChg indicates the value of the sysUpTime object when the last change was made to tmnxCpmProtEthCfmPolTable. A value of 0 indicates that no changes were made to tmnxCpmProtEthCfmPolTable since the system was last initialized.

OBJECT-TYPE

tmnxCpmProtEthCfmPolTable contains configurable rules (similar to an Access Control List) used to rate limit the flow of Ethernet Connectivity Fault Management packets. The table can be used to minimize the impact of an Eth-CFM Denial of Service attack. The table extends tmnxCpmProtPolTable, by allowing several <rate-limit, eth-cfm-level, eth-cfm-opcode> triples to be defined for a CPM protection policy. For example, tmnxCpmProtEthCfmPolTable could contain the following information (where the column labels for the table's index objects are in upper case): POLICY ID ENTRY NUM Level Opcode Rate Limit --------- --------- ----- ------ ---------- 250 10 {4} {10} 100 packets/sec 250 20 {4,6} {1,3} 200 packets/sec 250 30 {0-7} {0-255} 300 packets/sec {0-7} indicates {0, 1, 2, 3, 4, 5, 6, 7}. Suppose the example configuration above is in place, and an Eth-CFM PDU arrives on a SAP which has Policy ID 250 configured against it. If the PDU contains level=4 and opcode=1, the 200 packets/sec rate limit is applied. Within a Policy ID, the first row (i.e. the row with the lowest entry number) matching the PDU applies. Therefore, the third row in the example applies a 300 packets/sec limit to any PDU which does not match the first or second row. At most four Policy IDs can have rows in this table. At most 10 rows are supported per Policy ID. If the user chooses well-spaced tmnxCpmProtEthCfmPolEntryNum values (e.g. 10, 20, 30) when initially creating the rows for a particular tmnxCpmProtPolicyId, it will be possible to add rows in the gaps later, without reconfiguration. A prerequisite for creating a row in this table: a row with the same tmnxCpmProtPolicyId must exist in tmnxCpmProtPolTable. Deleting a row in tmnxCpmProtPolTable deletes all the rows in this table with matching tmnxCpmProtPolicyId values.

OBJECT-TYPE

Each row specifies a set of Ethernet CFM packets to be rate limited, and the associated rate limit. Table rows are created and destroyed using tmnxCpmProtEthCfmPolRowStatus.

OBJECT-TYPE

The value of tmnxCpmProtEthCfmPolEntryNum specifies a user-selected entry number. This index exists to allow multiple tmnxCpmProtEthCfmPolTable rows for one tmnxCpmProtPolicyId.

OBJECT-TYPE

The value of tmnxCpmProtEthCfmPolRowStatus specifies the row status of this tmnxCpmProtEthCfmPolEntry.

OBJECT-TYPE

The value of tmnxCpmProtEthCfmPolLastChanged indicates the value of the sysUpTime object when the last change was made to this row. A value of 0 indicates that no changes were made to this row since the system was last initialized.

OBJECT-TYPE

The value of tmnxCpmProtEthCfmPolLevelSet specifies a set of MEG (Maintenance Entity Group) Level values. At least one Level must be specified (i.e. the empty set is not supported). The rate limit specified by tmnxCpmProtEthCfmPolRateLimit applies to an Eth-CFM PDU if: a) tmnxCpmProtPolicyId is configured against the PDU stream containing the PDU, and b) the PDU's MEL (MEG Level) value is an element of tmnxCpmProtEthCfmPolLevelSet, and c) the PDU's Opcode value is an element of tmnxCpmProtEthCfmPolOpCodeSet.

OBJECT-TYPE

The value of tmnxCpmProtEthCfmPolOpCodeSet specifies a set of Eth-CFM PDU Opcode values to be matched against the Opcode field of an Eth-CFM PDU which is subject to rate limiting. At least one Opcode must be specified (i.e. the empty set is not supported). This object works in conjunction with tmnxCpmProtEthCfmPolLevelSet, as described in the tmnxCpmProtEthCfmPolLevelSet DESCRIPTION.

OBJECT-TYPE

The value of tmnxCpmProtEthCfmPolRateLimit specifies the rate limit to be enforced for the Eth-CFM packet stream specified by tmnxCpmProtPolicyId, tmnxCpmProtEthCfmPolLevelSet, and tmnxCpmProtEthCfmPolOpCodeSet.

OBJECT-TYPE

The value of tmnxCpmProtViolSdpBindTblLastChg indicates the sysUpTime at the time of the last modification of an entry in the tmnxCpmProtViolSdpBindTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object is zero.

OBJECT-TYPE

tmnxCpmProtViolSdpBindTable has a row for each SDP binding, where the overall packet arrival rate limit was violated.

OBJECT-TYPE

Each row contains the statistics for an SDP binding where the overall packet arrival rate limit was violated. Rows are created or removed automatically by the system.

OBJECT-TYPE

The value of tmnxCpmProtViolSdpBindPeriods indicates the number of times a rate limit violation was detected at this SDP binding. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtViolSdpBindTimeStartd indicates the sysUpTime at the time of the creation of this entry.

OBJECT-TYPE

The value of tmnxCpmProtViolSdpBindTime indicates the sysUpTime at the time of the last update of this entry.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindTblLastChg indicates the sysUpTime at the time of the last modification of an entry in the tmnxCpmProtExcdSdpBindTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object is zero.

OBJECT-TYPE

tmnxCpmProtExcdSdpBindTable has a row for each SDP binding and source MAC address pair that has exceeded its per-source rate limit. The equivalent table for SAPs is tmnxCpmProtExcdTable.

OBJECT-TYPE

Each row contains the statistics for a PDU stream that has exceeded its per-source rate limit. Rows are created or removed automatically by the system.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindMac specifies the MAC address of the source.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindPeriods indicates the number of times a per-source rate limit violation was detected for this source. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindTimeStartd indicates the sysUpTime at the time of the creation of this entry.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindTime indicates the sysUpTime at the time of the last update of this entry.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindEcmTblLChg indicates the sysUpTime at the time of the last modification of an entry in the tmnxCpmProtExcdSdpBindEcmTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object is zero.

OBJECT-TYPE

tmnxCpmProtExcdSdpBindEcmTable has a row for each Ethernet Connectivity Fault Management (Eth-CFM) PDU stream, served by an SDP binding, that has exceeded its Eth-CFM rate limit.

OBJECT-TYPE

Each row contains the statistics for an Eth-CFM PDU stream that has exceeded its Eth-CFM rate limit. Rows are created or removed automatically by the system.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindEcmMac specifies a source MAC address. The Eth-CFM PDU stream matching the MAC address (and matching the other index values of this table) has exceeded its Eth-CFM rate limit. The manager must provide the all-zero MAC address to get a row for a stream which is Eth-CFM rate limited using the 'ethCfmMonitorAggregate(1)' option of the sdpBindCpmProtEthCfmMonitorFlags object.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindEcmLevel specifies an Eth-CFM domain level. The Eth-CFM PDU stream matching the domain level (and matching the other index values of this table) has exceeded its Eth-CFM rate limit.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindEcmOpCode specifies an Eth-CFM opcode (e.g. Continuity Check Message == 1). The Eth-CFM PDU stream matching the opcode (and matching the other index values of this table) has exceeded its Eth-CFM rate limit.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindEcmPeriods indicates the number of times a rate limit violation was detected for this source. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindEcmStarted indicates the sysUpTime at the time of the creation of this entry.

OBJECT-TYPE

The value of tmnxCpmProtExcdSdpBindEcmTime indicates the sysUpTime at the time of the last update of this entry.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapEcmTblLChg indicates the sysUpTime at the time of the last modification of an entry in the tmnxCpmProtExcdSapEcmTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object is zero.

OBJECT-TYPE

tmnxCpmProtExcdSapEcmTable has a row for each Ethernet Connectivity Fault Management (Eth-CFM) PDU stream, served by a SAP, that has exceeded its Eth-CFM rate limit.

OBJECT-TYPE

Each row contains the statistics for an Eth-CFM PDU stream that has exceeded its Eth-CFM rate limit. Rows are created or removed automatically by the system.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapEcmMac specifies a source MAC address. The Eth-CFM PDU stream matching the MAC address (and matching the other index values of this table) has exceeded its Eth-CFM rate limit. The manager must provide the all-zero MAC address to get a row for a stream which is Eth-CFM rate limited using the 'ethCfmMonitorAggregate(1)' option of the sapCpmProtEthCfmMonitorFlags object.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapEcmLevel specifies an Eth-CFM domain level. The Eth-CFM PDU stream matching the domain level (and matching the other index values of this table) has exceeded its Eth-CFM rate limit.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapEcmOpCode specifies an Eth-CFM opcode (e.g. Continuity Check Message == 1). The Eth-CFM PDU stream matching the opcode (and matching the other index values of this table) has exceeded its Eth-CFM rate limit.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapEcmPeriods indicates the number of times a rate limit violation was detected for this source. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapEcmStarted indicates the sysUpTime at the time of the creation of this entry.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapEcmTime indicates the sysUpTime at the time of the last update of this entry.

OBJECT-TYPE

The value of tmnxCpmVprnNwExceptions specifies whether the MPLS exception messages are allowed to be received on all VPRN instances. When the value of tmnxCpmVprnNwExceptions is set to 'true', the MPLS exception messages are allowed to be received on all VPRN instances in the system from all network interfaces. When the value of tmnxCpmVprnNwExceptions is set to 'false', the MPLS exception messages are not allowed to be received on all VPRN instances in the system from all network interfaces.

OBJECT-TYPE

The value of tmnxCpmNumVprnNwExceptions specifies the number of MPLS exception messages allowed to be received in the time frame specified by tmnxCpmVprnNwExceptionsTime.

OBJECT-TYPE

The value of tmnxCpmVprnNwExceptionsTime specifies the time frame in seconds that is used to limit the number of MPLS exception messages issued per time frame.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapIpTableLastChg indicates the sysUpTime at the time of the last add, change, or delete of a row in the tmnxCpmProtExcdSapIpTable. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero.

OBJECT-TYPE

tmnxCpmProtExcdSapIpTable has a row for each <service ID, SAP, source IP address> triple that has exceeded the per-source rate limit configured for the <service ID, SAP> pair. IP-layer per-source rate limiting is enabled for a <service ID, SAP> pair by setting TIMETRA-SAP-MIB::sapCpmProtMonitorIP to 'true'.

OBJECT-TYPE

Each row contains statistics for an IP packet stream that has exceeded its per-source rate limit. A row is created by the system the first time a <service ID, SAP, source IP address> triple exceeds its per-source rate limit. The row is updated by the system on subsequent violations. Rows are deleted when a clear operation is requested on the underlying statistics.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapIpAddrType indicates the address type of tmnxCpmProtExcdSapIpAddr. 'ipv4(1)' is the only supported value.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapIpAddr indicates the IP address of a source which has exceeded its per-source rate limit.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapIpPeriods indicates the number of times a per-source rate limit violation was detected for this source. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapIpStarted indicates the sysUpTime at the time of the creation of this row.

OBJECT-TYPE

The value of tmnxCpmProtExcdSapIpTime indicates the sysUpTime at the time of the last update of this row.

OBJECT-IDENTITY

OBJECT-TYPE

tmnxPassHashReadVersion specifies the password hash version accepted by the system while executing commands. The value 'all' overrides this check and hence allows all supported versions to be accepted.

OBJECT-TYPE

tmnxPassHashWriteVersion specifies the hash version to be used while saving the configuration files.

OBJECT-IDENTITY

OBJECT-TYPE

tmnxSSHServerPreserveKey specifies the persistence of the SSH server host key. A value of 'true' specifies that the host key will be saved by the server and restored following a system reboot. The SSH client also saves the host key and restores it following a system reboot. A value of 'false' specifies that the host key will be held in memory by both the SSH server and the SSH client and is not restored following a system reboot.

OBJECT-TYPE

tmnxSSHServerVersion specifies the SSH protocol version that will be by supported by the SSH server. A value of tmnxSSHServerVersion 'version1' specifies that the SSH server will only accept connections from clients that support SSH protocol version 1. A value of 'both' specifies that the SSH server will accept connections from clients supporting either SSH protocol version 1, or SSH protocol version 2 or both.

OBJECT-TYPE

The tmnxSourceIPEntry has an entry for the source IP to be used by the specified protocol.

OBJECT-TYPE

tmnxSourceIPEntry is an entry (conceptual row) in the tmnxSourceIPTable. Each entry represents the source IP address to be used by the specified application for a particular Virtual Router instance. Entries in this table can be created and deleted via SNMP SET operations to tmnxSourceIPRowStatus.

OBJECT-TYPE

The value of tmnxSourceIPProtoApp specifies the application which should use the source-IP address specified by the value of tmnxSourceIPAddress. tmnxSourceIPAddressType must be 'ipv6 (2)' when setting the value of this object to 'telnet6 (14)', 'ftp6 (15)', 'radius6 (16)', 'tacplus6 (17)', 'snmpTrap6 (18)', 'syslog6 (19)', 'icmpPing6 (20)', 'traceRoute6 (21)' or 'dns6 (22)'.

OBJECT-TYPE

The value of tmnxSourceIPRowStatus is used to create or destroy entries in this table. A row entry for a particular vRtrID with tmnxSourceIPProtoApp set to any value can be created only if the value of tmnxSourceIPAddress or tmnxSourceIPIfIndex is specified.

OBJECT-TYPE

The value of tmnxSourceIPAddressType specifies the address type of tmnxSourceIPAddress address. The value of tmnxSourceIPAddressType can be either of InetAddressType - 'ipv4' or InetAddressType - 'ipv6'.

OBJECT-TYPE

The value of tmnxSourceIPAddress specifies the source address that should be used in all unsolicited packets sent by the application specified by the value of tmnxSourceIPProtoApp. For the value specified by tmnxSourceIPProtoApp, either of tmnxSourceIPAddress or tmnxSourceIPIfIndex can be specified, but not both.

OBJECT-TYPE

tmnxSourceIPIfIndex specifies the interface index whose IP address should be used in all unsolicited packets sent by the application specified by the value of tmnxSourceIPProtoApp. For the value specified by tmnxSourceIPProtoApp, either of tmnxSourceIPAddress or tmnxSourceIPIfIndex can be specified, but not both.

OBJECT-TYPE

The value of tmnxSourceIPOperStatus indicates the state of tmnxSourceIPEntry. A value of 'up' indicates that the IP address specified by tmnxSourceIPAddress will be used for all unsolicited packets sent by the application specified by the value of tmnxSourceIPProtoApp.

OBJECT-TYPE

tmnxUserTemplateTable contains configuration information for the template of a system user.

OBJECT-TYPE

tmnxUserTemplateEntry is an entry (conceptual row) in the tmnxUserTemplateTable. Each entry represents the configuration for the template of a system user. Entries in this table cannot be created or deleted.

OBJECT-TYPE

The value of tmnxTemplateName specifies the name of the template from which a system user can be derived. This name must be unique amongst the table entries.

OBJECT-TYPE

The value of tmnxTemplateAccess specifies the type of access permitted to the user derived from this template. To allow this user access to the console or FTP, set the corresponding bit in tmnxTemplateAccess. Reset the bit to deny the access.

OBJECT-TYPE

The value of tmnxTemplateHomeDirectory specifies the local home directory on FTP and console access of the user derived from this template.

OBJECT-TYPE

When the value of tmnxTemplateRestrictedToHome is 'true', the user derived from this template is not allowed to navigate to directories above his home directory for file access. When the value of tmnxTemplateRestrictedToHome is 'false', the access is allowed to directories above the home directory.

OBJECT-TYPE

The value of tmnxTemplateConsoleLoginExecFile specifies the file that should be executed whenever the user derived from this template has successfully logged in to a console session.

OBJECT-TYPE

The value of tmnxTemplateProfile specifies the user profile entry from the tmnxUserProfileTable that will be applied to the user derived from this template. For users authenticated by TACACS+, the profile specified by tmnxTemplateProfile will only apply if TACACS+ command authorization is disabled as specified by tmnxTacPlusAuthorization being set to 'false'.

OBJECT-TYPE

The tmnxKeyChainEntry has an entry for a particular configured keychain used by the protocol session.

OBJECT-TYPE

tmnxKeyChainEntry is an entry (conceptual row) in the tmnxKeyChainTable. Each entry represents the keychain configuration which will be applied to a protocol session. Entries in this table can be created and deleted via SNMP SET operations to tmnxKeyChainRowStatus.

OBJECT-TYPE

The value of tmnxKeyChainName specifies a unique keychain name which identifies this particular keychain entry.

OBJECT-TYPE

The value of tmnxKeyChainRowStatus is used to create or destroy entries in this table.

OBJECT-TYPE

The value of tmnxKeyChainDescription specifies the description of the key chain identified by the keychain name tmnxKeyChainName.

OBJECT-TYPE

The value of tmnxKeyChainSendTcpOptionNum specifies the TCP option value to use in the TCP header of packets being sent by the router to another device. The value of tmnxKeyChainSendTcpOptionNum is valid only when tmnxKeyChainAuthenticationKey is used to sign and/or authenticate the TCP protocol stream.

OBJECT-TYPE

The value of tmnxKeyChainReceiveTcpOptionNum specifies the TCP option value to check for in the TCP header of packets being received by the router. The value of tmnxKeyChainReceiveTcpOptionNum is valid only when tmnxKeyChainAuthenticationKey is used to sign and/or authenticate the TCP protocol stream.

OBJECT-TYPE

The value of tmnxKeyChainAdminState specifies the desired administrative state of the keychain. If the value is 'outOfService' the keychain capabilities are disabled but the keychain configuration parameters are retained.

OBJECT-TYPE

The value of tmnxKeyChainOperState indicates the operational state of the keychain. A value of 'inService' indicates that the key chain can be used to sign and/or authenticate protocol streams.

OBJECT-TYPE

The tmnxKeyChainKeyEntry has an entry for a particular configured key that will be used in a particular keychain defined by tmnxKeyChainEntry in tmnxKeyChainTable.

OBJECT-TYPE

tmnxKeyChainKeyEntry is an entry (conceptual row) in the tmnxKeyChainKeyTable. Each entry represents the key configuration which will be applied to a keychain. Entries in this table can be created and deleted via SNMP SET operations to tmnxKeyChainKeyRowStatus.

OBJECT-TYPE

The value of tmnxKeyChainKeyDirection is used to specify the protocol-stream direction to encrypt. A value of 'send' specifies that this key entry will be used to sign protocol packets that are being sent by the router to another device. A value of 'receive' specifies this key entry will be used to authenticate protocol packets that are being received by the router. A value of 'send-receive' specifies that this key will be used to sign protocol packet that are being sent by the router to another device, as well as to authenticate protocol packets that are being received by the router.

OBJECT-TYPE

The value of tmnxKeyChainKeyID specifies a key id which is used along with tmnxKeyChainName and tmnxKeyChainKeyDirection to uniquely identify this particular key entry. A value of 255 identifies this as a 'null-key' entry which enables the transition from an unauthenticated session to an enhanced authentication session.

OBJECT-TYPE

The value of tmnxKeyChainKeyRowStatus is used to create or destroy entries in this table. tmnxKeyChainAuthenticationKey and tmnxKeyChainKeyAlgorithm must be set in the same SNMP request PDU as tmnxKeyChainKeyRowStatus during row creation else the set request will fail with an inconsistentValue error.

OBJECT-TYPE

The value of tmnxKeyChainAuthenticationKey specifies the key that will be used by the encryption algorithm specified by tmnxKeyChainKeyAlgorithm. tmnxKeyChainAuthenticationKey is used to sign and authenticate a protocol packet. The value of tmnxKeyChainAuthenticationKey can be any combination of letters or numbers. Note that the string may contain embedded nulls. tmnxKeyChainAuthenticationKey and tmnxKeyChainKeyAlgorithm, which indicates the encryption algorithm to be used, must be set together in the same SNMP request PDU or else the set request will fail with an inconsistentValue error. When read, tmnxKeyChainAuthenticationKey always returns an Octet string of length zero.

OBJECT-TYPE

The value of tmnxKeyChainKeyAlgorithm specifies the algorithm that will be used to sign and/or authenticate the protocol stream. tmnxKeyChainAuthenticationKey and tmnxKeyChainKeyAlgorithm, which indicates the encryption algorithm to be used, must be set together in the same SNMP request PDU or else the set request will fail with an inconsistentValue error.

OBJECT-TYPE

The value of tmnxKeyChainKeyBeginTime specifies the calendar date and time after which the key specified by tmnxKeyChainAuthenticationKey will be used to sign and/or authenticate the protocol stream. If no date and time is set, tmnxKeyChainKeyBeginTime is represented by a DateAndTime string with all NULLs and the key is not valid by default.

OBJECT-TYPE

The value of tmnxKeyChainKeyEndTime specifies the calendar date and time after which the key specified by tmnxKeyChainAuthenticationKey is no longer eligible to sign and/or authenticate the protocol stream. tmnxKeyChainKeyEndTime is not applicable when tmnxKeyChainKeyDirection is set to 'send' or 'send-receive'. If no date and time is set, tmnxKeyChainKeyEndTime is represented by a DateAndTime string with all NULLs and the key is valid indefinitely.

OBJECT-TYPE

The value of tmnxKeyChainKeyTolerance specifies the number of seconds that a eligible receive key should overlap with the active send key. tmnxKeyChainKeyTolerance is valid only when tmnxKeyChainKeyDirection is set to 'send-receive' or 'receive'.

OBJECT-TYPE

The value of tmnxKeyChainKeyAdminState specifies the desired administrative state of the particular key in the keychain. When the value is 'outOfService' the keychain capabilities are disabled but the particular key's configuration parameters are retained.

OBJECT-IDENTITY

OBJECT-TYPE

tmnxKeyChainAuthFailReason is used by tmnxKeyChainAuthFailure to notify the reason for the keychain authentication failure.

OBJECT-TYPE

The value of the object tmnxKeyChainAuthAddrType indicates the address type (ipv4 or ipv6) of the source address in the authentication packet.

OBJECT-TYPE

The value of the object tmnxKeyChainAuthAddr indicates the source address in the authentication packet.

OBJECT-TYPE

tmnxMD5AuthFailReason is used by tmnxMD5AuthFailure to notify the reason for the MD5 authentication failure.

OBJECT-TYPE

The value of the object tmnxMD5AuthAddrType indicates the address type (ipv4 or ipv6) of the source address in the authentication packet.

OBJECT-TYPE

The value of the object tmnxMD5AuthAddr indicates the source address in the authentication packet.

OBJECT-TYPE

The value of the object tmnxMD5AuthKey indicates the MD5 key used for authentication.

OBJECT-TYPE

The value of the object tmnxCpmProtPolId indicates the policy index of the cpm protection policy.

OBJECT-TYPE

The value of the object tmnxSecNotifFailureReason indicates the reason for the generation of the notification.

OBJECT-TYPE

The value of the object tmnxSecNotifFile indicates the file associated with the notification.

OBJECT-TYPE

The value of the object tmnxSecNotifTunnelName indicates the name of tunnel associated with the notification.

OBJECT-TYPE

The value of the object tmnxSecNotifCert indicates the certificate name associated with the notification.

OBJECT-IDENTITY

OBJECT-TYPE

The value of tmnxCpmProtViolMacAddress indicates the MAC address of the source. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-TYPE

The value of tmnxCpmProtViolMacPeriods indicates the number of times the per-source rate limit violation was detected for this source. The sampling interval length is indicated by the object tmnxCpmProtDetectPeriod. This object is not supported on SR-1 and ESS-1, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '5', and 7710, where the value of TIMETRA-CHASSIS-MIB::tmnxChassisType is '7' or '9'.

OBJECT-IDENTITY

OBJECT-TYPE

The tmnxPkiMaxCertChainDepth specifies maximum depth of certificate chain verification.

OBJECT-TYPE

This value of the object tmnxPkiCAProfileTableLastChanged indicates the timestamp of the last change to the tmnxPkiCAProfileTable. A value of zero indicates that no changes were made to this table since the system was last initialized.

OBJECT-TYPE

The tmnxPkiCAProfileTable is the Certificate-Authority profile table. Entries are created and deleted by the user.

OBJECT-TYPE

Information about a single Certificate-Authority profile.

OBJECT-TYPE

The tmnxPkiCAProfile specifies the name of the Certificate-Authority profile.

OBJECT-TYPE

The tmnxPkiCAProfileRowStatus specifies Row-Status for the Certificate-Authority profile.

OBJECT-TYPE

The value of tmnxPkiCAProfileLastChanged is the timestamp of last change to this row in tmnxPkiCAProfileTable.

OBJECT-TYPE

The tmnxPkiCAProfileDescr specifies the description of the Certificate-Authority profile.

OBJECT-TYPE

The tmnxPkiCAProfileCRLFile specifies the location and name of the Certificate Revoke List (CRL) file.

OBJECT-TYPE

The tmnxPkiCAProfileCertFile specifies the location and name of the Certificate file.

OBJECT-TYPE

The tmnxPkiCAProfileAdminState specifies the adminstrative state of this Certificate-Authority profile.

OBJECT-TYPE

The value of tmnxPkiCAProfileOperState indicates the current operational status of this Certificate-Authority profile.

OBJECT-TYPE

The value of tmnxPkiCAProfileOperFlags indicates the reason that this Certificate-Authority profile is not in service. I.e., tmnxPkiCAProfileOperState has the value 'outOfService': adminDown - tmnxPkiCAProfileAdminState is 'outOfService' invalidCrl - CRL file is invalid or could not be found. invalidCert - Cert file is invalid could not be found.

OBJECT-IDENTITY

OBJECT-TYPE

The tmnxCertMgrAuthFailed indicates the number of authentication failures using the certificates.

OBJECT-TYPE

The tmnxCertMgrAuthPassed indicates the number of authentication checks passed using the certificates.

OBJECT-TYPE

The tmnxCertMgrTotalAuth indicates the number of authentication attempts using the certificates.

OBJECT-IDENTITY

OBJECT-IDENTITY

OBJECT-TYPE

The value of tmnxUserActionUserName specifies the user name on which the action applies.

OBJECT-TYPE

When tmnxUserActionUnlock is set to 'doAction', the user specified in tmnxUserActionUserName can make again tmnxPasswordAttemptsCount unsuccessful login attempts before he is locked out for tmnxPasswordAttemptsLockoutPeriod minutes, and his exponential backoff period is reset to 1 second if slcLoginExponentialBackOff is set to 'true'. The value of tmnxUserActionUserName must be set to a non-empty string in the same SNMP SET PDU when setting tmnxUserActionUnlock to 'doAction'.

OBJECT-IDENTITY

OBJECT-IDENTITY