Request for Comments: 4363 Nortel Networks
Obsoletes: 2674 D. Harrington
Category: Standards Track Effective Software
January 2006
Definitions of Managed Objects for Bridges with Traffic
Classes, Multicast Filtering, and Virtual LAN Extensions
Status of This Memo
This document specifies an Internet standards track protocol for the
Internet community, and requests discussion and suggestions for
improvements. Please refer to the current edition of the "Internet
Official Protocol Standards" (STD 1) for the standardization state
and status of this protocol. Distribution of this memo is unlimited.
Copyright Notice
Copyright (C) The Internet Society (2006).
Abstract
This memo defines a portion of the Management Information Base (MIB)
for use with network management protocols in TCP/IP-based internets.
In particular, it defines two MIB modules for managing the
capabilities of MAC bridges defined by the IEEE 802.1D-1998 (TM) MAC
Bridges and the IEEE 802.1Q-2003 (TM) Virtual LAN (VLAN) standards
for bridging between Local Area Network (LAN) segments. One MIB
module defines objects for managing the ’Traffic Classes’ and
’Enhanced Multicast Filtering’ components of IEEE 802.1D-1998 and
P802.1t-2001 (TM). The other MIB module defines objects for managing
VLANs, as specified in IEEE 802.1Q-2003, P802.1u (TM), and P802.1v
(TM).
Provisions are made for support of transparent bridging. Provisions
are also made so that these objects apply to bridges connected by
subnetworks other than LAN segments.
This memo supplements RFC 4188 and obsoletes RFC 2674.
Table of Contents
1. The Internet-Standard Management Framework ......................3
2. Overview ........................................................3
2.1. Scope ......................................................3
3. Structure of MIBs ...............................................4
3.1. Structure of Extended Bridge MIB Module ....................5
3.1.1. Relationship to IEEE 802.1D-1998 Manageable
Objects .............................................5
3.1.2. Relationship to IEEE 802.1Q Manageable Objects ......6
3.1.3. The dot1dExtBase Subtree ............................7
3.1.4. The dot1dPriority Subtree ...........................7
3.1.5. The dot1dGarp Subtree ...............................7
3.1.6. The dot1dGmrp Subtree ...............................7
3.1.7. The dot1dTpHCPortTable ..............................8
3.1.8. The dot1dTpPortOverflowTable ........................8
3.2. Structure of Virtual Bridge MIB module .....................8
3.2.1. Relationship to IEEE 802.1Q Manageable Objects ......8
3.2.2. The dot1qBase Subtree ..............................12
3.2.3. The dot1qTp Subtree ................................12
3.2.4. The dot1qStatic Subtree ............................12
3.2.5. The dot1qVlan Subtree ..............................12
3.3. Textual Conventions .......................................12
3.4. Relationship to Other MIBs ................................13
3.4.1. Relationship to the SNMPv2-MIB .....................13
3.4.2. Relationship to the IF-MIB .........................13
3.4.2.1. Layering Model ............................14
3.4.2.2. ifStackTable ..............................15
3.4.2.3. ifRcvAddressTable .........................15
3.4.3. Relationship to the BRIDGE-MIB .....................16
3.4.3.1. The dot1dBase Subtree .....................16
3.4.3.2. The dot1dStp Subtree ......................16
3.4.3.3. The dot1dTp Subtree .......................16
3.4.3.4. The dot1dStatic Subtree ...................17
3.4.3.5. Additions to the BRIDGE-MIB ...............17
4. Definitions for Extended Bridge MIB ............................18
5. Definitions for Virtual Bridge MIB .............................42
6. Acknowledgements ...............................................91
7. Security Considerations ........................................91
8. Normative References ...........................................94
9. Informative References .........................................95
Appendix A. Email from Tony Jeffrey from IEEE .....................96
1. The Internet-Standard Management Framework
For a detailed overview of the documents that describe the current
Internet-Standard Management Framework, please refer to section 7 of
RFC 3410 [RFC3410].
Managed objects are accessed via a virtual information store, termed
the Management Information Base or MIB. MIB objects are generally
accessed through the Simple Network Management Protocol (SNMP).
Objects in the MIB are defined using the mechanisms defined in the
Structure of Management Information (SMI). This memo specifies a MIB
module that is compliant to the SMIv2, which is described in STD 58,
RFC 2578 [RFC2578], STD 58, RFC 2579 [RFC2579] and STD 58, RFC 2580
[RFC2580].
2. Overview
A common device present in many networks is the Bridge. This device
is used to connect Local Area Network segments below the network
layer. These devices are often known as ’layer 2 switches’.
The transparent method of bridging is defined by IEEE 802.1D-1998
[802.1D]. Managed objects for transparent bridging are defined in
the BRIDGE-MIB [BRIDGE-MIB].
The original IEEE 802.1D is augmented by IEEE 802.1Q-2003 [802.1Q] to
provide support for ’virtual bridged LANs’ where a single bridged
physical LAN network may be used to support multiple logical bridged
LANs, each of which offers a service approximately the same as that
defined by IEEE 802.1D. Such virtual LANs (VLANs) are an integral
feature of switched LAN networks. A VLAN can be viewed as a group of
end-stations on multiple LAN segments and can communicate as if they
were on a single LAN. IEEE 802.1Q defines port-based Virtual LANs
where membership is determined by the bridge port on which data
frames are received, and port-and-protocol-based Virtual LANs where
membership is determined by the bridge port on which frames are
received and the protocol identifier of the frame. This memo defines
the objects needed for the management of port-based VLANs in bridge
entities.
This memo supplements RFC 4188 [BRIDGE-MIB] and obsoletes RFC 2674
[RFC2674].
2.1. Scope
The MIB modules defined in this document include a comprehensive set
of managed objects that attempts to match the set defined in IEEE
802.1D and IEEE 802.1Q. However, to be consistent with the spirit of
the SNMP Framework, a subjective judgement was made to omit the
objects from those standards most ’costly’ to implement in an agent
and least ’essential’ for fault and configuration management. The
omissions are described in Section 3 below.
Historical note:
The original BRIDGE-MIB [RFC1493] used the following principles for
determining inclusion of an object in the BRIDGE-MIB module:
(1) Start with a small set of essential objects and add only as
further objects are needed.
(2) Require that objects be essential for either fault or
configuration management.
(3) Consider evidence of current use and/or utility.
(4) Limit the total number of objects.
(5) Exclude objects that are simply derivable from others in this
or other MIBs.
(6) Avoid causing critical sections to be heavily instrumented.
The guideline that was followed is one counter per critical
section per layer.
3. Structure of MIBs
This document defines objects that supplement those in the BRIDGE-MIB
module [BRIDGE-MIB]. Section 3.4.3 of the present document contains
some recommendations regarding usage of objects in the BRIDGE-MIB by
devices implementing the enhancements defined here.
An extended bridge MIB module P-BRIDGE-MIB defines managed objects
for the traffic class and multicast filtering enhancements defined by
IEEE 802.1D-1998 [802.1D], including the Restricted Group
Registration control defined by IEEE P802.1t [802.1t].
A virtual bridge MIB module Q-BRIDGE-MIB defines managed objects for
the Virtual LAN bridging enhancements defined by IEEE 802.1Q-2003
[802.1Q], including the Restricted VLAN Registration control, defined
by IEEE P802.1u [802.1u], and the VLAN Classification by Protocol and
Port enhancement, defined by IEEE P802.1v [802.1v].
3.1. Structure of Extended Bridge MIB Module
Objects in this MIB are arranged into subtrees. Each subtree is
organized as a set of related objects. The overall structure and
assignment of objects to their subtrees is shown below.
3.1.1. Relationship to IEEE 802.1D-1998 Manageable Objects
This section contains a cross-reference to the objects defined in
IEEE 802.1D-1998 [802.1D]. It also details those objects that are
not considered necessary in this MIB module.
Some objects defined by IEEE 802.1D-1998 have been included in the
virtual bridge MIB module rather than this one: entries in
dot1qTpGroupTable, dot1qForwardAllTable, and
dot1qForwardUnregisteredTable are required for virtual bridged LANs
with additional indexing (e.g., per-VLAN, per-Filtering-Database
(per-FDB)) and so are not defined here. Instead, devices that do not
implement virtual bridged LANs but do implement the Extended
Forwarding Services defined by IEEE 802.1D (i.e., dynamic learning of
multicast group addresses and group service requirements in the
filtering database) should implement these tables with a fixed value
for dot1qFdbId (the value 1 is recommended) or dot1qVlanIndex (the
value 1 is recommended). Devices that support Extended Filtering
Services should support dot1qTpGroupTable, dot1qForwardAllTable, and
dot1qForwardUnregisteredTable.
Extended Bridge MIB Name IEEE 802.1D-1998 Name
dot1dExtBase Bridge
dot1dDeviceCapabilities
dot1dExtendedFilteringServices
dot1dTrafficClasses
dot1dTrafficClassesEnabled
dot1dGmrpStatus .ApplicantAdministrativeControl
dot1dPriority
dot1dPortPriorityTable
dot1dPortDefaultUserPriority .UserPriority
dot1dPortNumTrafficClasses
dot1dUserPriorityRegenTable .UserPriorityRegenerationTable
dot1dUserPriority
dot1dRegenUserPriority
dot1dTrafficClassTable .TrafficClassTable
dot1dTrafficClassPriority
dot1dTrafficClass
dot1dPortOutboundAccessPriorityTable
.OutboundAccessPriorityTable
dot1dPortOutboundAccessPriority
dot1dGarp
dot1dPortGarpTable
dot1dPortGarpJoinTime .JoinTime
dot1dPortGarpLeaveTime .LeaveTime
dot1dPortGarpLeaveAllTime .LeaveAllTime
dot1dGmrp
dot1dPortGmrpTable
dot1dPortGmrpStatus .ApplicantAdministrativeControl
dot1dPortGmrpFailedRegistrations .FailedRegistrations
dot1dPortGmrpLastPduOrigin .OriginatorOfLastPDU
dot1dPortRestrictedGroupRegistration
Restricted Group Registration
(Ref. IEEE 802.1t 10.3.2.3)
dot1dTp
dot1dTpHCPortTable
dot1dTpHCPortInFrames .BridgePort.FramesReceived
dot1dTpHCPortOutFrames .ForwardOutBound
dot1dTpHCPortInDiscards .DiscardInbound
dot1dTpPortOverflowTable
dot1dTpPortInOverflowFrames .BridgePort.FramesReceived
dot1dTpPortOutOverflowFrames .ForwardOutBound
dot1dTpPortInOverflowDiscards .DiscardInbound
The following IEEE 802.1D-1998 management objects have not been
included in the Bridge MIB for the indicated reasons.
IEEE 802.1D-1998 Object Disposition
Bridge.StateValue not considered useful
Bridge.ApplicantAdministrativeControl
not provided per-attribute
(e.g., per-VLAN, per-Group).
Only per-{device,port,application}
control is provided in this MIB.
notify group registration failure not considered useful
(IEEE 802.1t 14.10.1.2)
3.1.2. Relationship to IEEE 802.1Q Manageable Objects
This section contains section number cross-references to manageable
objects defined in IEEE 802.1Q-2003 [802.1Q]. These objects have
been included in this MIB as they provide a natural fit with the IEEE
802.1D objects with which they are co-located.
Extended Bridge MIB Name IEEE 802.1Q-2003 Section and Name
dot1dExtBase Bridge
dot1dDeviceCapabilities
dot1qStaticEntryIndividualPort 5.2 implementation options
dot1qIVLCapable
dot1qSVLCapable
dot1qHybridCapable
dot1qConfigurablePvidTagging 12.10.1.1 read bridge vlan
config
dot1dLocalVlanCapable
dot1dPortCapabilitiesTable
dot1dPortCapabilities
dot1qDot1qTagging 5.2 implementation options
dot1qConfigurableAcceptableFrameTypes
5.2 implementation options
dot1qIngressFiltering 5.2 implementation options
3.1.3. The dot1dExtBase Subtree
This subtree contains the objects that are applicable to all bridges
implementing the traffic class and multicast filtering features of
IEEE 802.1D-1998 [802.1D]. It includes per-device configuration of
Generic Attribute Registration Protocol (GARP) and GARP Multicast
Registration Protocol (GMRP) protocols.
3.1.4. The dot1dPriority Subtree
This subtree contains the objects for configuring and reporting
status of priority-based queuing mechanisms in a bridge. This
includes per-port user_priority treatment, mapping of user_priority
in frames into internal traffic classes, and outbound user_priority
and access_priority.
3.1.5. The dot1dGarp Subtree
This subtree contains the objects for configuring and reporting on
operation of the Generic Attribute Registration Protocol (GARP).
3.1.6. The dot1dGmrp Subtree
This subtree contains the objects for configuring and reporting on
operation of the GARP Multicast Registration Protocol (GMRP).
3.1.7. The dot1dTpHCPortTable
This table extends the dot1dTp subtree from the BRIDGE-MIB
[BRIDGE-MIB] and contains the objects for reporting port-bridging
statistics for high-capacity network interfaces.
3.1.8. The dot1dTpPortOverflowTable
This table extends the dot1dTp subtree from the BRIDGE-MIB
[BRIDGE-MIB] and contains the objects for reporting the upper bits of
port-bridging statistics for high-capacity network interfaces for
when 32-bit counters are inadequate.
3.2. Structure of Virtual Bridge MIB module
Objects in this MIB are arranged into subtrees. Each subtree is
organized as a set of related objects. The overall structure and
assignment of objects to their subtrees is shown below. Some
manageable objects defined in the BRIDGE-MIB [BRIDGE-MIB] need to be
indexed differently when they are used in a VLAN bridging
environment: these objects are, therefore, effectively duplicated by
new objects with different indexing, which are defined in the Virtual
Bridge MIB.
3.2.1. Relationship to IEEE 802.1Q Manageable Objects
This section contains section-number cross-references to manageable
objects defined in clause 12 of IEEE 802.1Q-2003 [802.1Q]. It also
details those objects that are not considered necessary in this MIB
module.
Note: Unlike IEEE 802.1D-1998, IEEE 802.1Q-2003 [802.1Q] did not
define exact syntax for a set of managed objects. The following
cross-references indicate the section numbering of the descriptions
of management operations from clause 12 in the latter document.
Virtual Bridge MIB object IEEE 802.1Q-2003 Reference
dot1qBase
dot1qVlanVersionNumber 12.10.1.1 read bridge vlan config
dot1qMaxVlanId 12.10.1.1 read bridge vlan config
dot1qMaxSupportedVlans 12.10.1.1 read bridge vlan config
dot1qNumVlans
dot1qGvrpStatus 12.9.2.1/2 read/set garp
applicant controls
dot1qTp
dot1qFdbTable
dot1qFdbId
dot1qFdbDynamicCount 12.7.1.1.3 read filtering d/base
dot1qTpFdbTable
dot1qTpFdbAddress
dot1qTpFdbPort
dot1qTpFdbStatus
dot1qTpGroupTable 12.7.7.1 read filtering entry
dot1qTpGroupAddress
dot1qTpGroupEgressPorts
dot1qTpGroupLearnt
dot1qForwardAllTable 12.7.7.1 read filtering entry
dot1qForwardAllPorts
dot1qForwardAllStaticPorts
dot1qForwardAllForbiddenPorts
dot1qForwardUnregisteredTable 12.7.7.1 read filtering entry
dot1qForwardUnregisteredPorts
dot1qForwardUnregisteredStaticPorts
dot1qForwardUnregisteredForbiddenPorts
dot1qStatic
dot1qStaticUnicastTable 12.7.7.1 create/delete/read
filtering entry
12.7.6.1 read permanent database
dot1qStaticUnicastAddress
dot1qStaticUnicastReceivePort
dot1qStaticUnicastAllowedToGoTo
dot1qStaticUnicastStatus
dot1qStaticMulticastTable 12.7.7.1 create/delete/read
filtering entry
12.7.6.1 read permanent database
dot1qStaticMulticastAddress
dot1qStaticMulticastReceivePort
dot1qStaticMulticastStaticEgressPorts
dot1qStaticMulticastForbiddenEgressPorts
dot1qStaticMulticastStatus
dot1qVlan
dot1qVlanNumDeletes
dot1qVlanCurrentTable 12.10.2.1 read vlan configuration
12.10.3.5 read VID to FID
allocations
12.10.3.6 read FID allocated to
VID
12.10.3.7 read VIDs allocated to
FID
dot1qVlanTimeMark
dot1qVlanIndex
dot1qVlanFdbId
dot1qVlanCurrentEgressPorts
dot1qVlanCurrentUntaggedPorts
dot1qVlanStatus
dot1qVlanCreationTime
dot1qVlanStaticTable 12.7.7.1/2/3 create/delete/read
filtering entry
12.7.6.1 read permanent database
12.10.2.2 create vlan config
12.10.2.3 delete vlan config
dot1qVlanStaticName 12.4.1.3 set bridge name
dot1qVlanStaticEgressPorts
dot1qVlanForbiddenEgressPorts
dot1qVlanStaticUntaggedPorts
dot1qVlanStaticRowStatus
dot1qNextFreeLocalVlanIndex
dot1qPortVlanTable 12.10.1.1 read bridge vlan
configuration
dot1qPvid 12.10.1.2 configure PVID values
dot1qPortAcceptableFrameTypes 12.10.1.3 configure acceptable
frame types parameter
dot1qPortIngressFiltering 12.10.1.4 configure ingress
filtering parameters
dot1qPortGvrpStatus 12.9.2.2 read/set garp applicant
controls
dot1qPortGvrpFailedRegistrations
dot1qPortGvrpLastPduOrigin
dot1qPortRestrictedVlanRegistration
IEEE 802.1u 11.2.3.2.3
Restricted VLAN Registration
dot1qPortVlanStatisticsTable 12.6.1.1 read forwarding port
counters
dot1qTpVlanPortInFrames
dot1qTpVlanPortOutFrames
dot1qTpVlanPortInDiscards
dot1qTpVlanPortInOverflowFrames
dot1qTpVlanPortOutOverflowFrames
dot1qTpVlanPortInOverflowDiscards
dot1qPortVlanHCStatisticsTable 12.6.1.1 read forwarding port
counters
dot1qTpVlanPortHCInFrames
dot1qTpVlanPortHCOutFrames
dot1qTpVlanPortHCInDiscards
dot1qLearningConstraintsTable 12.10.3.1/3/4 read/set/delete
vlan learning constraints
12.10.3.2 read vlan learning
constraints for VID