::= { tripMIBCompliances 1 }
tripMIBReadOnlyCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for TRIP entities that
implement this MIB module in read only mode. Such TRIP
entities can then only be monitored, but not be
configured via this MIB module.
In read-only mode, the manager will not be able to add,
remove or modify rows to any table, however the TRIP
application may modify, remove or add rows to a table.
There is one INDEX object that cannot be represented in
the form of OBJECT clauses in SMIv2, but for which there
is a compliance requirement, expressed in OBJECT clause
form in this description:
-- OBJECT tripRouteTypeAddrInetType
-- SYNTAX InetAddressType (ipv4(1), ipv6(2),
-- ipv4z(3), ipv6z(4))
-- DESCRIPTION
-- This MIB requires support for global and
-- non-global ipv4 and ipv6 addresses.
--
-- OBJECT tripRouteTypeAddr
-- SYNTAX InetAddress (SIZE (4 | 8 | 16 | 20))
-- DESCRIPTION
-- This MIB requires support for global and
-- non-global IPv4 and IPv6 addresses.
--
"
MODULE -- this module
MANDATORY-GROUPS { tripConfigGroup,
tripPeerTableConfigGroup,
tripRouteGroup,
tripItadTopologyGroup,
tripPeerTableStatsGroup }
GROUP tripNotificationGroup
DESCRIPTION
"This group is OPTIONAL. A TRIP entity can choose not to
send any notifications. If this group is implemented,
the tripNotifObjectGroup MUST also be implemented."
GROUP tripNotifObjectGroup
DESCRIPTION
"This group is OPTIONAL. A TRIP entity can choose not to
send any notifications. If this group is implemented,
the tripNotificationGroup MUST also be implemented."
OBJECT tripCfgItad
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripCfgAdminStatus
MIN-ACCESS not-accessible
DESCRIPTION
"Object is not needed when implemented in read-only mode."
OBJECT tripCfgPort
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripCfgMinItadOriginationInterval
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripCfgMinRouteAdvertisementInterval
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripCfgMaxPurgeTime
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripCfgDisableTime
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripCfgStorage
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripSupportedCommunityItad
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripSupportedCommunityStorage
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripSupportedCommunityRowStatus
SYNTAX RowStatus { active(1) }
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required, and active is the only
status that needs to be supported."
OBJECT tripPeerAdminStatus
MIN-ACCESS not-accessible
DESCRIPTION
"Object is not needed when implemented in read-only mode."
OBJECT tripPeerConnectRetryInterval
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripPeerMaxRetryInterval
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripPeerHoldTimeConfigured
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripPeerKeepAliveConfigured
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripPeerMaxPurgeTime
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripPeerDisableTime
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripPeerStorage
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT tripPeerRowStatus
SYNTAX RowStatus { active(1) }
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required, and active is the only
status that needs to be supported."
MODULE NETWORK-SERVICES-MIB
MANDATORY-GROUPS { applRFC2788Group }
::= { tripMIBCompliances 2 }
--
-- Object and event conformance groups
--
tripConfigGroup OBJECT-GROUP
OBJECTS {
tripCfgProtocolVersion,
tripCfgItad,
tripCfgIdentifier,
tripCfgOperStatus,
tripCfgAdminStatus,
tripCfgAddrIAddrType,
tripCfgAddr,
tripCfgPort,
tripCfgMinItadOriginationInterval,
tripCfgMinRouteAdvertisementInterval,
tripCfgMaxPurgeTime,
tripCfgDisableTime,
tripCfgSendReceiveMode,
tripCfgStorage,
tripSupportedCommunityItad,
tripSupportedCommunityStorage,
tripRouteTypePeer,
tripSupportedCommunityRowStatus
}
STATUS current
DESCRIPTION
"The global objects for configuring trip."
::= { tripMIBGroups 1 }
tripPeerTableConfigGroup OBJECT-GROUP
OBJECTS {
tripPeerIdentifier,
tripPeerState,
tripPeerAdminStatus,
tripPeerNegotiatedVersion,
tripPeerSendReceiveMode,
tripPeerRemoteItad,
tripPeerConnectRetryInterval,
tripPeerMaxRetryInterval,
tripPeerHoldTime,
tripPeerKeepAlive,
tripPeerHoldTimeConfigured,
tripPeerKeepAliveConfigured,
tripPeerMaxPurgeTime,
tripPeerDisableTime,
tripPeerLearned,
tripPeerStorage,
tripPeerRowStatus
}
STATUS current
DESCRIPTION
"The global objects for configuring the TRIP peer
table."
::= { tripMIBGroups 2 }
tripPeerTableStatsGroup OBJECT-GROUP
OBJECTS {
tripPeerInUpdates,
tripPeerOutUpdates,
tripPeerInTotalMessages,
tripPeerOutTotalMessages,
tripPeerFsmEstablishedTransitions,
tripPeerFsmEstablishedTime,
tripPeerInUpdateElapsedTime,
tripPeerStateChangeTime
}
STATUS current
DESCRIPTION
"The global statistics the TRIP peer table."
::= { tripMIBGroups 3 }
tripRouteGroup OBJECT-GROUP
OBJECTS {
tripRouteTRIBMask,
tripRouteAddressSequenceNumber,
tripRouteAddressOriginatorId,
tripRouteNextHopServerIAddrType,
tripRouteNextHopServer,
tripRouteNextHopServerPort,
tripRouteNextHopServerItad,
tripRouteMultiExitDisc,
tripRouteLocalPref,
tripRouteAdvertisementPath,
tripRouteRoutedPath,
tripRouteAtomicAggregate,
tripRouteUnknown,
tripRouteWithdrawn,
tripRouteConverted,
tripRouteReceivedTime,
tripRouteCommunityItad
}
STATUS current
DESCRIPTION
"The global objects for configuring route attribute."
::= { tripMIBGroups 4 }
tripItadTopologyGroup OBJECT-GROUP
OBJECTS {
tripItadTopologySeqNum,
tripItadTopologyId
}
STATUS current
DESCRIPTION
"The objects that define the TRIP ITAD topology."
::= { tripMIBGroups 5 }
tripNotificationGroup NOTIFICATION-GROUP
NOTIFICATIONS {
tripConnectionEstablished,
tripConnectionDropped,
tripFSM,
tripOpenMessageError,
tripUpdateMessageError,
tripHoldTimerExpired,
tripConnectionCollision,
tripCease,
tripNotificationErr
}
STATUS current
DESCRIPTION
"A collection of notifications defined for TRIP."
::= { tripMIBGroups 6 }
tripNotifObjectGroup OBJECT-GROUP
OBJECTS {
tripNotifApplIndex,
tripNotifPeerAddrInetType,
tripNotifPeerAddr,
tripNotifPeerErrCode,
tripNotifPeerErrSubcode
}
STATUS current
DESCRIPTION
"The collection of objects that specify information for
TRIP notifications."
::= { tripMIBGroups 7 }
END
7. Security Considerations
The managed objects in this MIB module contain sensitive information
since, collectively, they allow tracing and influencing of
connections in TRIP devices and provide information of their
connection characteristics. As such, improper manipulation of the
objects represented by this MIB module MAY result in denial of
service to a large number of available routes.
There are a number of management objects defined in this MIB module
that have a MAX-ACCESS clause of read-write and/or read-create. Such
objects MAY be considered sensitive or vulnerable in some network
environments. The support for SET operations in a non-secure
environment without proper protection can have a negative effect on
network operations. These objects include:
tripCfgItad:
Improper setting of tripCfgItad value can make all peer
connections drop and not be re-established.
tripCfgAdminStatus:
Improper setting of tripCfgAdminStatus from up to down will cause
the TRIP Location Server stop processing TRIP messages.
tripCfgPort:
Improper setting of tripCfgPort can cause the failure of a peer
establishing a connection.
tripCfgMinItadOriginationInterval,
tripCfgMinRouteAdvertisementInterval:
Improper configuration of these values MAY adversely affect local
and global convergence of the routes advertised by this TRIP
Location Server.
tripPeerAdminStatus:
Improper setting of tripPeerAdminStatus from up to down can cause
significant disruption of the connectivity to the destination via
the applicable remote TRIP Location Server peer.
tripPeerConnectRetryInterval,tripPeerMaxRetryInterval:
Improper configuration of these values can cause connections to be
disrupted for extremely long time periods when otherwise they
would be restored in a relatively short period of time.
tripPeerHoldTimeConfigured, tripPeerKeepAliveConfigured:
Improper configuration of these value can make TRIP peer sessions
more fragile and less resilient to denial of service attacks.
There are a number of managed objects in this MIB module that contain
sensitive information regarding the operation of a network. For
example, a TRIP Location Server peer’s local and remote addresses
might be sensitive for ISPs who want to keep interface addresses on
TRIP Location Server confidential so as to prevent TRIP Location
Server addresses used for a denial of service attack or address
spoofing.
Therefore, it is thus important to control even GET access to these
objects and possibly to even encrypt the values of these object when
sending them over the network via SNMP. Not all versions of SNMP
provide features for such a secure environment.
SNMPv1 by itself is not a secure environment. Even if the network
itself is secure (for example by using IPSec), even then, there is no
control as to who on the secure network is allowed to access and
GET/SET (read/change/create/delete) the objects in this MIB module.
It is RECOMMENDED that the implementers consider the security
features as provided by the SNMPv3 framework (see [RFC3410], section
8), including full support for the SNMPv3 cryptographic mechanisms
(for authentication and privacy).
Further, deployment of SNMP versions prior to SNMPv3 is NOT
RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to
enable cryptographic security. It is then a customer/operator
responsibility to ensure that the SNMP entity giving access to an
instance of this MIB module is properly configured to give access to
the objects only to those principals (users) that have legitimate
rights to indeed GET or SET (change/create/delete) them.
8. References
8.1. Normative References
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", BCP 14, RFC 2119, March 1997.
[RFC2579] McCloghrie, K., Perkins, D., and J. Schoenwaelder, "Textual
Conventions for SMIv2", STD 58, RFC 2579, April 1999.
[RFC2580] McCloghrie, K., Perkins, D., and J. Schoenwaelder,
"Conformance Statements for SMIv2", STD 58, RFC 2580, April
1999.
[RFC2788] Freed, N. and S. Kille, "Network Services Monitoring MIB",
RFC 2788, March 2000.
[RFC3219] Rosenberg, J., Salama, H., and M. Squire, "Telephony
Routing over IP (TRIP)", RFC 3219, January 2002.
[RFC3291] Daniele, M., Haberman, B., Routhier, S., and J.
Schoenwaelder, "Textual Conventions for Internet Network
Addresses", RFC 3291, May 2002.
[RFC2578] McCloghrie, K., Perkins, D., and J. Schoenwaelder,
"Structure of Management Information Version 2 (SMIv2)",
STD 58, RFC 2578, April 1999.
8.2. Informative References
[RFC1657] Willis, S., Burruss, J., and J. Chu, Ed., "Definitions of
Managed Objects for the Fourth Version of the Border
Gateway Protocol (BGP-4) using SMIv2", RFC 1657, July 1994.
[RFC1771] Rekhter, Y. and T. Li, "Border Gateway Protocol 4 (BGP-4)",
RFC 1771, March 1995.
[RFC3410] Case, J., Mundy, R., Partain, D., and B. Stewart,
"Introduction and Applicability Statements for Internet-
Standard Management Framework", RFC 3410, December 2002.
9. Acknowledgments
The authors wish to thank Bert Wijnen, Dan Romascanu, and Jonathan
Rosenberg for their insightful comments and suggestions.
Thanks to Kevin Lingle for his invaluable comments, help with MIB
things and great ideas.
10. Authors’ Addresses
David Zinman
Editor
265 Ridley Blvd
Toronto ON M5M 4N8
Canada
Phone: +1 416 433 4298
EMail: dzinman@rogers.com
David Walker
Sedna Wireless Inc.
495 March Road, Suite 500
Ottawa, ON K2K 3G1
Canada
Phone: +1 613 878 8142
EMail: david.walker@sedna-wireless.com
Jianping Jiang
Syndesis Limited
30 Fulton Way
Richmond Hill, ON L4B 1J5
Canada
Phone: +1 905 886-7818 x2515
EMail: jjiang@syndesis.com
11. Full Copyright Statement
Copyright (C) The Internet Society (2004).
This document is subject to the rights, licenses and restrictions
contained in BCP 78, and except as set forth therein, the authors
retain all their rights.
This document and the information contained herein are provided on an
"AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/S HE
REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE
INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF
THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Intellectual Property
The IETF takes no position regarding the validity or scope of any
Intellectual Property Rights or other rights that might be claimed to
pertain to the implementation or use of the technology described in
this document or the extent to which any license under such rights
might or might not be available; nor does it represent that it has
made any independent effort to identify any such rights. Information
on the IETF’s procedures with respect to rights in IETF Documents can
be found in BCP 78 and BCP 79.
Copies of IPR disclosures made to the IETF Secretariat and any
assurances of licenses to be made available, or the result of an
attempt made to obtain a general license or permission for the use of
such proprietary rights by implementers or users of this
specification can be obtained from the IETF on-line IPR repository at
http://www.ietf.org/ipr.
The IETF invites any interested party to bring to its attention any
copyrights, patents or patent applications, or other proprietary
rights that may cover technology that may be required to implement
this standard. Please address the information to the IETF at ietf-
ipr@ietf.org.
Acknowledgement
Funding for the RFC Editor function is currently provided by the
Internet Society.