slapmPolicyRuleStatsInProOctets OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "This counter counts the number of in octets that are determined to be within profile." ::= { slapmPolicyRuleStatsEntry 15 } slapmPolicyRuleStatsOutProOctets OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "This counter counts the number of out octets that are determined to be within profile." ::= { slapmPolicyRuleStatsEntry 16 } slapmPolicyRuleStatsMinRate OBJECT-TYPE SYNTAX Unsigned32 UNITS "Kilobits per second" MAX-ACCESS read-only STATUS current DESCRIPTION "The minimum transfer rate defined for this entry." ::= { slapmPolicyRuleStatsEntry 17 } slapmPolicyRuleStatsMaxRate OBJECT-TYPE SYNTAX Unsigned32 UNITS "Kilobits per second" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum transfer rate defined for this entry." ::= { slapmPolicyRuleStatsEntry 18 } slapmPolicyRuleStatsMaxDelay OBJECT-TYPE SYNTAX Unsigned32 UNITS "milliseconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum delay defined for this entry." ::= { slapmPolicyRuleStatsEntry 19 } slapmPolicyRuleStatsTotalRsvpFlows OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only
STATUS current DESCRIPTION "Total number of RSVP flows that have be activated." ::= { slapmPolicyRuleStatsEntry 20 } slapmPolicyRuleStatsActRsvpFlows OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "Current number of active RSVP flows." ::= { slapmPolicyRuleStatsEntry 21 } -- SLA Performance Monitoring Policy Rule Monitor Table slapmPRMonTable OBJECT-TYPE SYNTAX SEQUENCE OF SlapmPRMonEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Provides a method of monitoring policies and their effect at a system." ::= { slapmTableObjects 6 } slapmPRMonEntry OBJECT-TYPE SYNTAX SlapmPRMonEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Defines an entry in the slapmPRMonTable. This table defines which policies should be monitored on a per policy rule basis. An attempt to set any read-create object defined within an slapmPRMonEntry while the value of slapmPRMonRowStatus is active(1) will result in an inconsistentValue error." INDEX { slapmPRMonOwnerIndex, slapmPRMonSystemAddress, slapmPRMonIndex } ::= { slapmPRMonTable 1 } SlapmPRMonEntry ::= SEQUENCE { slapmPRMonOwnerIndex SnmpAdminString, slapmPRMonSystemAddress OCTET STRING, slapmPRMonIndex Unsigned32,
slapmPRMonControl BITS, slapmPRMonStatus SlapmStatus, slapmPRMonInterval Unsigned32, slapmPRMonIntTime DateAndTime, slapmPRMonCurrentInRate Gauge32, slapmPRMonCurrentOutRate Gauge32, slapmPRMonMinRateLow Unsigned32, slapmPRMonMinRateHigh Unsigned32, slapmPRMonMaxRateHigh Unsigned32, slapmPRMonMaxRateLow Unsigned32, slapmPRMonMaxDelayHigh Unsigned32, slapmPRMonMaxDelayLow Unsigned32, slapmPRMonMinInRateNotAchieves Counter32, slapmPRMonMaxInRateExceeds Counter32, slapmPRMonMaxDelayExceeds Counter32, slapmPRMonMinOutRateNotAchieves Counter32, slapmPRMonMaxOutRateExceeds Counter32, slapmPRMonCurrentDelayRate Gauge32, slapmPRMonRowStatus RowStatus } slapmPRMonOwnerIndex OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(0..16)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "To facilitate the provisioning of access control by a security administrator using the View-Based Access Control Model (RFC 2575, VACM) for tables in which multiple users may need to independently create or modify entries, the initial index is used as an 'owner index'. Such an initial index has a syntax of SnmpAdminString, and can thus be trivially mapped to a securityName or groupName as defined in VACM, in accordance with a security policy. All entries in that table belonging to a particular user will have the same value for this initial index. For a given user's entries in a particular table, the object identifiers for the information in these entries will have the same subidentifiers (except for the 'column' subidentifier) up to the end of the encoded owner index. To configure VACM to permit access to this portion of the table, one would create vacmViewTreeFamilyTable entries with the value of vacmViewTreeFamilySubtree including the owner index portion, and vacmViewTreeFamilyMask 'wildcarding' the column subidentifier. More elaborate configurations are possible."
::= { slapmPRMonEntry 1 } slapmPRMonSystemAddress OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0 | 4 | 16)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Address of a system that an Policy definition relates to. A zero length octet string can be used to indicate that only a single system is being represented. Otherwise, the length of the octet string should be 4 for an ipv4 address and 16 for an ipv6 address." ::= { slapmPRMonEntry 2 } slapmPRMonIndex OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS not-accessible STATUS current DESCRIPTION "An slapmPolicyNameTable index, slapmPolicyNameIndex, that points to the unique name associated with a policy rule definition." ::= { slapmPRMonEntry 3 } slapmPRMonControl OBJECT-TYPE SYNTAX BITS { monitorMinRate(0), monitorMaxRate(1), monitorMaxDelay(2), enableAggregateTraps(3), enableSubcomponentTraps(4), monitorSubcomponents(5) } MAX-ACCESS read-create STATUS current DESCRIPTION "The value of this object determines the type and level of monitoring that is applied to a policy rule. The value of this object can't be changed once the table entry that it is a part of is activated via a slapmPRMonRowStatus transition to active state. monitorMinRate(0) - Monitor minimum transfer rate. monitorMaxRate(1) - Monitor maximum transfer rate. monitorMaxDelay(2) - Monitor maximum delay. enableAggregateTraps(3) - The enableAggregateTraps(3) BITS setting enables notification generation when monitoring a policy rule as an
aggregate using the values in the corresponding slapmPRMonStatsEntry. By default this function is not enabled. enableSubcomponentTraps(4) - This BITS setting enables notification generation when monitoring all subcomponents that are mapped to an corresponding slapmPRMonStatsEntry. By default this function is not enabled. monitorSubcomponents(5) - This BITS setting enables monitoring of each subcomponent (typically a TCP connection or UDP listener) individually." DEFVAL { { monitorMinRate, monitorMaxRate, monitorMaxDelay } } ::= { slapmPRMonEntry 4 } slapmPRMonStatus OBJECT-TYPE SYNTAX SlapmStatus MAX-ACCESS read-only STATUS current DESCRIPTION "The value of this object indicates when a monitored value has not meet a threshold or isn't meeting the defined service level. The SlapmStatus TEXTUAL-CONVENTION defines two levels of not meeting a threshold. The first set: slaMinInRateNotAchieved(0), slaMaxInRateExceeded(1), slaMaxDelayExceeded(2), slaMinOutRateNotAchieved(3), slaMaxOutRateExceeded(4) are used to indicate when the SLA as an aggregate is not meeting a threshold while the second set: monitorMinInRateNotAchieved(5), monitorMaxInRateExceeded(6), monitorMaxDelayExceeded(7), monitorMinOutRateNotAchieved(8), monitorMaxOutRateExceeded(9) indicate that at least one subcomponent is not meeting a threshold." ::= { slapmPRMonEntry 5 } slapmPRMonInterval OBJECT-TYPE SYNTAX Unsigned32 (15..86400) -- 15 second min, 24 hour max UNITS "seconds" MAX-ACCESS read-create
STATUS current DESCRIPTION "The number of seconds that defines the sample period." DEFVAL {20} -- 20 seconds ::= { slapmPRMonEntry 6 } slapmPRMonIntTime OBJECT-TYPE SYNTAX DateAndTime MAX-ACCESS read-only STATUS current DESCRIPTION "The timestamp for when the last interval ended." DEFVAL { '0000000000000000'H } ::= { slapmPRMonEntry 7 } slapmPRMonCurrentInRate OBJECT-TYPE SYNTAX Gauge32 UNITS "kilobits per second" MAX-ACCESS read-only STATUS current DESCRIPTION "Using the value of the corresponding slapmPRMonInterval, slapmPolicyRuleStatsInOctets is sampled and then divided by slapmPRMonInterval to determine the current in transfer rate." ::= { slapmPRMonEntry 8 } slapmPRMonCurrentOutRate OBJECT-TYPE SYNTAX Gauge32 UNITS "kilobits per second" MAX-ACCESS read-only STATUS current DESCRIPTION "Using the value of the corresponding slapmPolicyMonInterval, slapmPolicyRuleStatsOutOctets is sampled and then divided by slapmPRMonInterval to determine the current out transfer rate." ::= { slapmPRMonEntry 9 } slapmPRMonMinRateLow OBJECT-TYPE SYNTAX Unsigned32 UNITS "kilobits per second" MAX-ACCESS read-create STATUS current DESCRIPTION "The threshold for generating a slapmPolicyRuleMonNotOkay notification, signalling that a monitored minimum transfer rate has not been meet.
A slapmPolicyRuleMonNotOkay notification is not generated again for an slapmPRMonEntry until the minimum transfer rate exceeds slapmPRMonMinRateHigh (a slapmPolicyRuleMonOkay notification is then transmitted) and then fails below slapmPRMonMinRateLow. This behavior reduces the slapmPolicyRuleMonNotOkay notifications that are transmitted. A value of zero for this object is returned when the slapmPRMonControl monitorMinRate(0) is not enabled. When enabled the default value for this object is the min rate value specified in the associated action definition minus 10%. If the action definition doesn't have a min rate defined then there is no default for this object and a value MUST be specified prior to activating this entry when monitorMinRate(0) is selected. Note: The corresponding slapmPRMonControl BITS setting, enableAggregateTraps(3), MUST be selected in order for any notification relating to this entry to potentially be generated." ::= { slapmPRMonEntry 10 } slapmPRMonMinRateHigh OBJECT-TYPE SYNTAX Unsigned32 UNITS "kilobits per second" MAX-ACCESS read-create STATUS current DESCRIPTION "The threshold for generating a slapmPolicyRuleMonOkay notification, signalling that a monitored minimum transfer rate has increased to an acceptable level. A value of zero for this object is returned when the slapmPRMonControl monitorMinRate(0) is not enabled. When enabled the default value for this object is the min rate value specified in the associated action definition plus 10%. If the action definition doesn't have a min rate defined then there is no default for this object and a value MUST be specified prior to activating this entry when monitorMinRate(0) is selected. Note: The corresponding slapmPRMonControl BITS setting, enableAggregateTraps(3), MUST be selected in order for any notification relating to this entry to
potentially be generated." ::= { slapmPRMonEntry 11 } slapmPRMonMaxRateHigh OBJECT-TYPE SYNTAX Unsigned32 UNITS "kilobits per second" MAX-ACCESS read-create STATUS current DESCRIPTION "The threshold for generating a slapmPolicyRuleMonNotOkay notification, signalling that a monitored maximum transfer rate has been exceeded. A slapmPolicyRuleNotOkay notification is not generated again for an slapmPRMonEntry until the maximum transfer rate fails below slapmPRMonMaxRateLow (a slapmPolicyRuleMonOkay notification is then transmitted) and then raises above slapmPRMonMaxRateHigh. This behavior reduces the slapmPolicyRuleMonNotOkay notifications that are transmitted. A value of zero for this object is returned when the slapmPRMonControl monitorMaxRate(1) is not enabled. When enabled the default value for this object is the max rate value specified in the associated action definition plus 10%. If the action definition doesn't have a max rate defined then there is no default for this object and a value MUST be specified prior to activating this entry when monitorMaxRate(1) is selected. Note: The corresponding slapmPRMonControl BITS setting, enableAggregateTraps(3), MUST be selected in order for any notification relating to this entry to potentially be generated." ::= { slapmPRMonEntry 12 } slapmPRMonMaxRateLow OBJECT-TYPE SYNTAX Unsigned32 UNITS "kilobits per second" MAX-ACCESS read-create STATUS current DESCRIPTION "The threshold for generating a slapmPolicyRuleMonOkay notification, signalling that a monitored maximum transfer rate has fallen to an acceptable level.
A value of zero for this object is returned when the slapmPRMonControl monitorMaxRate(1) is not enabled. When enabled the default value for this object is the max rate value specified in the associated action definition minus 10%. If the action definition doesn't have a max rate defined then there is no default for this object and a value MUST be specified prior to activating this entry when monitorMaxRate(1) is selected. Note: The corresponding slapmPRMonControl BITS setting, enableAggregateTraps(3), MUST be selected in order for any notification relating to this entry to potentially be generated." ::= { slapmPRMonEntry 13 } slapmPRMonMaxDelayHigh OBJECT-TYPE SYNTAX Unsigned32 UNITS "milliseconds" MAX-ACCESS read-create STATUS current DESCRIPTION "The threshold for generating a slapmPolicyRuleMonNotOkay notification, signalling that a monitored maximum delay rate has been exceeded. A slapmPolicyRuleMonNotOkay notification is not generated again for an slapmPRMonEntry until the maximum delay rate falls below slapmPRMonMaxDelayLow (a slapmPolicyRuleMonOkay notification is then transmitted) and raises above slapmPRMonMaxDelayHigh. This behavior reduces the slapmPolicyRuleMonNotOkay notifications that are transmitted. A value of zero for this object is returned when the slapmPRMonControl monitorMaxDelay(4) is not enabled. When enabled the default value for this object is the max delay value specified in the associated action definition plus 10%. If the action definition doesn't have a max delay defined then there is no default for this object and a value MUST be specified prior to activating this entry when monitorMaxDelay(4) is selected. Note: The corresponding slapmPRMonControl BITS setting, enableAggregateTraps(3), MUST be selected in order for any notification relating to this entry to
potentially be generated." ::= { slapmPRMonEntry 14 } slapmPRMonMaxDelayLow OBJECT-TYPE SYNTAX Unsigned32 UNITS "milliseconds" MAX-ACCESS read-create STATUS current DESCRIPTION "The threshold for generating a slapmPolicyRuleMonOkay notification, signalling that a monitored maximum delay rate has fallen to an acceptable level. A value of zero for this object is returned when the slapmPRMonControl monitorMaxDelay(4) is not enabled. When enabled the default value for this object is the max delay value specified in the associated action definition minus 10%. If the action definition doesn't have a max delay defined then there is no default for this object and a value MUST be specified prior to activating this entry when monitorMaxDelay(4) is selected. Note: The corresponding slapmPRMonControl BITS setting, enableAggregateTraps(3), MUST be selected in order for any notification relating to this entry to potentially be generated." ::= { slapmPRMonEntry 15 } slapmPRMonMinInRateNotAchieves OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of times that a minimum transfer in rate was not achieved." ::= { slapmPRMonEntry 16 } slapmPRMonMaxInRateExceeds OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of times that a maximum transfer in rate was exceeded." ::= { slapmPRMonEntry 17 } slapmPRMonMaxDelayExceeds OBJECT-TYPE
SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of times that a maximum delay in rate was exceeded." ::= { slapmPRMonEntry 18 } slapmPRMonMinOutRateNotAchieves OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of times that a minimum transfer out rate was not achieved." ::= { slapmPRMonEntry 19 } slapmPRMonMaxOutRateExceeds OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of times that a maximum transfer out rate was exceeded." ::= { slapmPRMonEntry 20 } slapmPRMonCurrentDelayRate OBJECT-TYPE SYNTAX Gauge32 UNITS "milliseconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The current delay rate for this entry. This is calculated by taking the average of the TCP round trip times for all associating slapmSubcomponentTable entries within a interval." ::= { slapmPRMonEntry 21 } slapmPRMonRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object allows entries to be created and deleted in the slapmPRMonTable. An entry in this table is deleted by setting this object to destroy(6). Removal of an corresponding (same policy index)
slapmPolicyRuleStatsEntry has the side effect of the automatic deletion an entry in this table. Note that an attempt to set any read-create object defined within an slapmPRMonEntry while the value of slapmPRMonRowStatus is active(1) will result in an inconsistentValue error." ::= { slapmPRMonEntry 22 } -- Notifications slapmMonitoredEventNotAchieved NOTIFICATION-TYPE OBJECTS { slapmPolicyMonitorIntTime, slapmPolicyMonitorControl, slapmPolicyMonitorStatus, slapmPolicyMonitorStatus, slapmPolicyMonitorCurrentInRate, slapmPolicyMonitorCurrentOutRate, slapmPolicyMonitorCurrentDelayRate } STATUS deprecated DESCRIPTION "This notification is generated when an monitored event is not achieved with respect to threshold. This applies only towards monitoring a policy traffic profile as an aggregate via an associating slapmPolicyStatsEntry. The value of slapmPolicyMonitorControl can be examined to determine what is being monitored. The first slapmPolicyMonitorStatus value supplies the current monitor status while the 2nd value supplies the previous status. Note: The corresponding slapmPolicyMonitorControl BITS setting, enableAggregateTraps(3), MUST be selected in order for this notification to potentially be generated." ::= { slapmNotifications 1 } slapmMonitoredEventOkay NOTIFICATION-TYPE OBJECTS { slapmPolicyMonitorIntTime, slapmPolicyMonitorControl, slapmPolicyMonitorStatus, slapmPolicyMonitorStatus, slapmPolicyMonitorCurrentInRate, slapmPolicyMonitorCurrentOutRate,
slapmPolicyMonitorCurrentDelayRate } STATUS deprecated DESCRIPTION "This notification is generated when a monitored event has improved to an acceptable level. This applies only towards monitoring a policy traffic profile as an aggregate via an associating slapmPolicyStatsEntry. The value of slapmPolicyMonitorControl can be examined to determine what is being monitored. The first slapmPolicyMonitorStatus value supplies the current monitor status while the 2nd value supplies the previous status. Note: The corresponding slapmPolicyMonitorControl BITS setting, enableAggregateTraps(3), MUST be selected in order for this notification to potentially be generated." ::= { slapmNotifications 2 } slapmPolicyProfileDeleted NOTIFICATION-TYPE OBJECTS { slapmPolicyStatsActiveConns, slapmPolicyStatsTotalConns, slapmPolicyStatsFirstActivated, slapmPolicyStatsLastMapping, slapmPolicyStatsInOctets, slapmPolicyStatsOutOctets, slapmPolicyStatsConnectionLimit, slapmPolicyStatsCountAccepts, slapmPolicyStatsCountDenies, slapmPolicyStatsInDiscards, slapmPolicyStatsOutDiscards, slapmPolicyStatsInPackets, slapmPolicyStatsOutPackets, slapmPolicyStatsInProfileOctets, slapmPolicyStatsOutProfileOctets, slapmPolicyStatsMinRate, slapmPolicyStatsMaxRate, slapmPolicyStatsMaxDelay } STATUS deprecated DESCRIPTION "A slapmPolicyDeleted notification is sent when a slapmPolicyStatsEntry is deleted if the value of slapmPolicyTrapEnable is enabled(1)." ::= { slapmNotifications 3 }
slapmPolicyMonitorDeleted NOTIFICATION-TYPE OBJECTS { slapmPolicyMonitorStatus, slapmPolicyMonitorInterval, slapmPolicyMonitorIntTime, slapmPolicyMonitorCurrentInRate, slapmPolicyMonitorCurrentOutRate, slapmPolicyMonitorCurrentDelayRate, slapmPolicyMonitorMinRateLow, slapmPolicyMonitorMinRateHigh, slapmPolicyMonitorMaxRateHigh, slapmPolicyMonitorMaxRateLow, slapmPolicyMonitorMaxDelayHigh, slapmPolicyMonitorMaxDelayLow, slapmPolicyMonitorMinInRateNotAchieves, slapmPolicyMonitorMaxInRateExceeds, slapmPolicyMonitorMaxDelayExceeds, slapmPolicyMonitorMinOutRateNotAchieves, slapmPolicyMonitorMaxOutRateExceeds } STATUS deprecated DESCRIPTION "A slapmPolicyMonitorDeleted notification is sent when a slapmPolicyMonitorEntry is deleted if the value of slapmPolicyTrapEnable is enabled(1)." ::= { slapmNotifications 4 } slapmSubcomponentMonitoredEventNotAchieved NOTIFICATION-TYPE OBJECTS { slapmSubcomponentSystemAddress, slapmSubcomponentPolicyName, slapmSubcomponentTrafficProfileName, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorIntTime, slapmSubcomponentMonitorCurrentInRate, slapmSubcomponentMonitorCurrentOutRate, slapmSubcomponentTcpRoundTripTime } STATUS deprecated DESCRIPTION "This notification is generated when a monitored value does not achieved a threshold specification. This applies only towards monitoring the individual components of a policy traffic profile. The value of the corresponding slapmPolicyMonitorControl can be examined to determine what is being monitored. The first slapmSubcomponentMonitorStatus value supplies the current
monitor status while the 2nd value supplies the previous status. Note: The corresponding slapmPolicyMonitorControl BITS setting, enableSubcomponentTraps(4), MUST be selected in order for this notification to potentially be generated." ::= { slapmNotifications 5 } slapmSubcomponentMonitoredEventOkay NOTIFICATION-TYPE OBJECTS { slapmSubcomponentSystemAddress, slapmSubcomponentPolicyName, slapmSubcomponentTrafficProfileName, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorIntTime, slapmSubcomponentMonitorCurrentInRate, slapmSubcomponentMonitorCurrentOutRate, slapmSubcomponentTcpRoundTripTime } STATUS deprecated DESCRIPTION "This notification is generated when a monitored value has reached an acceptable level. Note: The corresponding slapmPolicyMonitorControl BITS setting, enableSubcomponentTraps(3), MUST be selected in order for this notification to potentially be generated." ::= { slapmNotifications 6 } slapmPolicyRuleMonNotOkay NOTIFICATION-TYPE OBJECTS { slapmPRMonIntTime, slapmPRMonControl, slapmPRMonStatus, slapmPRMonStatus, slapmPRMonCurrentInRate, slapmPRMonCurrentOutRate, slapmPRMonCurrentDelayRate } STATUS current DESCRIPTION "This notification is generated when an monitored event is not achieved with respect to a threshold. This applies only towards monitoring a policy rule as an aggregate via an associating slapmPolicyRuleStatsEntry. The value
of slapmPRMonControl can be examined to determine what is being monitored. The first slapmPRMonStatus value supplies the current monitor status while the 2nd value supplies the previous status. Note: The corresponding slapmPRMonControl BITS setting, enableAggregateTraps(3), MUST be selected in order for this notification to potentially be generated." ::= { slapmNotifications 7 } slapmPolicyRuleMonOkay NOTIFICATION-TYPE OBJECTS { slapmPRMonIntTime, slapmPRMonControl, slapmPRMonStatus, slapmPRMonStatus, slapmPRMonCurrentInRate, slapmPRMonCurrentOutRate, slapmPRMonCurrentDelayRate } STATUS current DESCRIPTION "This notification is generated when a monitored event has improved to an acceptable level. This applies only towards monitoring a policy rule as an aggregate via an associating slapmPolicyRuleStatsEntry. The value of slapmPRMonControl can be examined to determine what is being monitored. The first slapmPRMonStatus value supplies the current monitor status while the 2nd value supplies the previous status. Note: The corresponding slapmPRMonControl BITS setting, enableAggregateTraps(3), MUST be selected in order for this notification to potentially be generated." ::= { slapmNotifications 8 } slapmPolicyRuleDeleted NOTIFICATION-TYPE OBJECTS { slapmPolicyRuleStatsActiveConns, slapmPolicyRuleStatsTotalConns, slapmPolicyRuleStatsLActivated, slapmPolicyRuleStatsLastMapping, slapmPolicyRuleStatsInOctets,
slapmPolicyRuleStatsOutOctets, slapmPolicyRuleStatsConnLimit, slapmPolicyRuleStatsCountAccepts, slapmPolicyRuleStatsCountDenies, slapmPolicyRuleStatsInDiscards, slapmPolicyRuleStatsOutDiscards, slapmPolicyRuleStatsInPackets, slapmPolicyRuleStatsOutPackets, slapmPolicyRuleStatsInProOctets, slapmPolicyRuleStatsOutProOctets, slapmPolicyRuleStatsMinRate, slapmPolicyRuleStatsMaxRate, slapmPolicyRuleStatsMaxDelay, slapmPolicyRuleStatsTotalRsvpFlows, slapmPolicyRuleStatsActRsvpFlows } STATUS current DESCRIPTION "A slapmPolicyRuleDeleted notification is sent when a slapmPolicyRuleStatsEntry is deleted if the value of slapmPolicyTrapEnable is enabled(1)." ::= { slapmNotifications 9 } slapmPolicyRuleMonDeleted NOTIFICATION-TYPE OBJECTS { slapmPRMonControl, slapmPRMonStatus, slapmPRMonInterval, slapmPRMonIntTime, slapmPRMonCurrentInRate, slapmPRMonCurrentOutRate, slapmPRMonCurrentDelayRate, slapmPRMonMinRateLow, slapmPRMonMinRateHigh, slapmPRMonMaxRateHigh, slapmPRMonMaxRateLow, slapmPRMonMaxDelayHigh, slapmPRMonMaxDelayLow, slapmPRMonMinInRateNotAchieves, slapmPRMonMaxInRateExceeds, slapmPRMonMaxDelayExceeds, slapmPRMonMinOutRateNotAchieves, slapmPRMonMaxOutRateExceeds } STATUS current DESCRIPTION "A slapmPolicyRuleMonDeleted notification is sent when a slapmPRMonEntry is deleted if the value of
slapmPolicyTrapEnable is enabled(1)." ::= { slapmNotifications 10 } slapmSubcMonitorNotOkay NOTIFICATION-TYPE OBJECTS { slapmSubcomponentSystemAddress, slapmSubcomponentPolicyRuleIndex, slapmPRMonControl, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorIntTime, slapmSubcomponentMonitorCurrentInRate, slapmSubcomponentMonitorCurrentOutRate, slapmSubcomponentTcpRoundTripTime } STATUS current DESCRIPTION "This notification is generated when a monitored value does not achieved a threshold specification. This applies only towards monitoring the individual components of a policy rule. The value of the corresponding slapmPRMonControl can be examined to determine what is being monitored. The first slapmSubcomponentMonitorStatus value supplies the current monitor status while the 2nd value supplies the previous status. Note: The corresponding slapmPRMonControl BITS setting, enableSubcomponentTraps(4), MUST be selected in order for this notification to potentially be generated." ::= { slapmNotifications 11 } slapmSubcMonitorOkay NOTIFICATION-TYPE OBJECTS { slapmSubcomponentSystemAddress, slapmSubcomponentPolicyRuleIndex, slapmPRMonControl, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorIntTime, slapmSubcomponentMonitorCurrentInRate, slapmSubcomponentMonitorCurrentOutRate, slapmSubcomponentTcpRoundTripTime } STATUS current DESCRIPTION "This notification is generated when a monitored value
has reached an acceptable level. Note: The corresponding slapmPRMonControl BITS setting, enableSubcomponentTraps(3), MUST be selected in order for this notification to potentially be generated." ::= { slapmNotifications 12 } -- Conformance information -- Compliance statements slapmCompliances OBJECT IDENTIFIER ::= { slapmConformance 1 } slapmGroups OBJECT IDENTIFIER ::= { slapmConformance 2 } -- Compliance statements slapmCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for the SLAPM-MIB." MODULE -- this module MANDATORY-GROUPS { slapmBaseGroup2, slapmNotGroup2 } GROUP slapmEndSystemGroup2 DESCRIPTION "The contents of this group is required by end-system implementations." GROUP slapmEndSystemNotGroup2 DESCRIPTION "The contents of this group is required by end-system implementations." GROUP slapmBaseGroup DESCRIPTION "The contents of this group has been deprecated in favor of the new slapmBaseGroup2. Older implementations of this MIB would continue its support of the contents of this group." GROUP slapmNotGroup DESCRIPTION "The contents of this group has been deprecated in favor of the new slapmNotGroup2. Older implementations of this MIB would continue its support of the contents of this group." GROUP slapmOptionalGroup DESCRIPTION "The contents of this group has been deprecated."
GROUP slapmEndSystemGroup DESCRIPTION "The contents of this group has been deprecated in favor of the new slapmEndSystemGroup2. Older implementations of this MIB would continue its support of the contents of this group." GROUP slapmEndSystemNotGroup DESCRIPTION "The contents of this group has been deprecated in favor of the new slapmEndSystemNotGroup2. Older implementations of this MIB would continue its support of the contents of this group." ::= { slapmCompliances 1 } -- MIB groupings slapmBaseGroup OBJECT-GROUP OBJECTS { slapmSpinLock, slapmPolicyCountQueries, slapmPolicyCountAccesses, slapmPolicyCountSuccessAccesses, slapmPolicyCountNotFounds, slapmPolicyPurgeTime, slapmPolicyTrapEnable, slapmPolicyStatsOperStatus, slapmPolicyStatsActiveConns, slapmPolicyStatsFirstActivated, slapmPolicyStatsLastMapping, slapmPolicyStatsInOctets, slapmPolicyStatsOutOctets, slapmPolicyStatsConnectionLimit, slapmPolicyStatsTotalConns, slapmPolicyStatsCountAccepts, slapmPolicyStatsCountDenies, slapmPolicyStatsInDiscards, slapmPolicyStatsOutDiscards, slapmPolicyStatsInPackets, slapmPolicyStatsOutPackets, slapmPolicyStatsMinRate, slapmPolicyStatsMaxRate, slapmPolicyStatsMaxDelay, slapmPolicyMonitorControl, slapmPolicyMonitorStatus, slapmPolicyMonitorInterval, slapmPolicyMonitorIntTime, slapmPolicyMonitorCurrentInRate, slapmPolicyMonitorCurrentOutRate,
slapmPolicyMonitorMinRateLow, slapmPolicyMonitorMinRateHigh, slapmPolicyMonitorMaxRateHigh, slapmPolicyMonitorMaxRateLow, slapmPolicyMonitorMaxDelayHigh, slapmPolicyMonitorMaxDelayLow, slapmPolicyMonitorMinInRateNotAchieves, slapmPolicyMonitorMaxInRateExceeds, slapmPolicyMonitorMaxDelayExceeds, slapmPolicyMonitorMinOutRateNotAchieves, slapmPolicyMonitorMaxOutRateExceeds, slapmPolicyMonitorCurrentDelayRate, slapmPolicyMonitorRowStatus } STATUS deprecated DESCRIPTION "The group of objects defined by this MIB that are required for all implementations to be compliant." ::= { slapmGroups 1 } slapmOptionalGroup OBJECT-GROUP OBJECTS { slapmPolicyStatsInProfileOctets, slapmPolicyStatsOutProfileOctets } STATUS deprecated DESCRIPTION "The group of objects defined by this MIB that are optional." ::= { slapmGroups 2 } slapmEndSystemGroup OBJECT-GROUP OBJECTS { slapmPolicyTrapFilter, slapmSubcomponentProtocol, slapmSubcomponentSystemAddress, slapmSubcomponentPolicyName, slapmSubcomponentTrafficProfileName, slapmSubcomponentLastActivity, slapmSubcomponentInOctets, slapmSubcomponentOutOctets, slapmSubcomponentTcpOutBufferedOctets, slapmSubcomponentTcpInBufferedOctets, slapmSubcomponentTcpReXmts, slapmSubcomponentTcpRoundTripTime, slapmSubcomponentTcpRoundTripVariance, slapmSubcomponentInPdus, slapmSubcomponentOutPdus,
slapmSubcomponentApplName, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorIntTime, slapmSubcomponentMonitorCurrentOutRate, slapmSubcomponentMonitorCurrentInRate } STATUS deprecated DESCRIPTION "The group of objects defined by this MIB that are required for end system implementations." ::= { slapmGroups 3 } slapmNotGroup NOTIFICATION-GROUP NOTIFICATIONS { slapmMonitoredEventNotAchieved, slapmMonitoredEventOkay, slapmPolicyProfileDeleted, slapmPolicyMonitorDeleted } STATUS deprecated DESCRIPTION "The group of notifications defined by this MIB that MUST be implemented." ::= { slapmGroups 4 } slapmEndSystemNotGroup NOTIFICATION-GROUP NOTIFICATIONS { slapmSubcomponentMonitoredEventNotAchieved, slapmSubcomponentMonitoredEventOkay } STATUS deprecated DESCRIPTION "The group of objects defined by this MIB that are required for end system implementations." ::= { slapmGroups 5 } slapmBaseGroup2 OBJECT-GROUP OBJECTS { slapmSpinLock, slapmPolicyCountQueries, slapmPolicyCountAccesses, slapmPolicyCountSuccessAccesses, slapmPolicyCountNotFounds, slapmPolicyPurgeTime, slapmPolicyTrapEnable, slapmPolicyNameOfRule, slapmPolicyRuleStatsOperStatus, slapmPolicyRuleStatsActiveConns,
slapmPolicyRuleStatsTotalConns, slapmPolicyRuleStatsLActivated, slapmPolicyRuleStatsLastMapping, slapmPolicyRuleStatsInOctets, slapmPolicyRuleStatsOutOctets, slapmPolicyRuleStatsConnLimit, slapmPolicyRuleStatsCountAccepts, slapmPolicyRuleStatsCountDenies, slapmPolicyRuleStatsInDiscards, slapmPolicyRuleStatsOutDiscards, slapmPolicyRuleStatsInPackets, slapmPolicyRuleStatsOutPackets, slapmPolicyRuleStatsInProOctets, slapmPolicyRuleStatsOutProOctets, slapmPolicyRuleStatsMinRate, slapmPolicyRuleStatsMaxRate, slapmPolicyRuleStatsMaxDelay, slapmPolicyRuleStatsTotalRsvpFlows, slapmPolicyRuleStatsActRsvpFlows, slapmPRMonControl, slapmPRMonStatus, slapmPRMonInterval, slapmPRMonIntTime, slapmPRMonCurrentInRate, slapmPRMonCurrentOutRate, slapmPRMonMinRateLow, slapmPRMonMinRateHigh, slapmPRMonMaxRateHigh, slapmPRMonMaxRateLow, slapmPRMonMaxDelayHigh, slapmPRMonMaxDelayLow, slapmPRMonMinInRateNotAchieves, slapmPRMonMaxInRateExceeds, slapmPRMonMaxDelayExceeds, slapmPRMonMinOutRateNotAchieves, slapmPRMonMaxOutRateExceeds, slapmPRMonCurrentDelayRate, slapmPRMonRowStatus } STATUS current DESCRIPTION "The group of objects defined by this MIB that are required for all implementations to be compliant." ::= { slapmGroups 6 } slapmEndSystemGroup2 OBJECT-GROUP OBJECTS { slapmPolicyTrapFilter,
slapmSubcomponentProtocol, slapmSubcomponentSystemAddress, slapmSubcomponentLastActivity, slapmSubcomponentInOctets, slapmSubcomponentOutOctets, slapmSubcomponentTcpOutBufferedOctets, slapmSubcomponentTcpInBufferedOctets, slapmSubcomponentTcpReXmts, slapmSubcomponentTcpRoundTripTime, slapmSubcomponentTcpRoundTripVariance, slapmSubcomponentInPdus, slapmSubcomponentOutPdus, slapmSubcomponentApplName, slapmSubcomponentMonitorStatus, slapmSubcomponentMonitorIntTime, slapmSubcomponentMonitorCurrentOutRate, slapmSubcomponentMonitorCurrentInRate, slapmSubcomponentPolicyRuleIndex } STATUS current DESCRIPTION "The group of objects defined by this MIB that are required for end system implementations." ::= { slapmGroups 7 } slapmNotGroup2 NOTIFICATION-GROUP NOTIFICATIONS { slapmPolicyRuleMonNotOkay, slapmPolicyRuleMonOkay, slapmPolicyRuleDeleted, slapmPolicyRuleMonDeleted } STATUS current DESCRIPTION "The group of notifications defined by this MIB that MUST be implemented." ::= { slapmGroups 8 } slapmEndSystemNotGroup2 NOTIFICATION-GROUP NOTIFICATIONS { slapmSubcMonitorNotOkay, slapmSubcMonitorOkay } STATUS current DESCRIPTION "The group of objects defined by this MIB that are required for end system implementations." ::= { slapmGroups 9 }
END5.0 Security Considerations
Certain management information in the MIB defined by this document may be considered sensitive in some network environments. Therefore, authentication of received SNMP requests and controlled access to management information SHOULD be employed in such environments. The method for this authentication is a function of the SNMP Administrative Framework, and has not been expanded by this MIB. To facilitate the provisioning of access control by a security administrator using the View-Based Access Control Model (VACM) defined in RFC 2575 [11] for tables in which multiple users may need to independently create or modify entries, the initial index is used as an "owner index" (refer to slapmPRMonOwnerIndex in an slapmPRMonEntry). Such an initial index has a syntax of SnmpAdminString, and can thus be trivially mapped to a securityName or groupName as defined in VACM, in accordance with a security policy. All entries in related tables belonging to a particular user will have the same value for this initial index. For a given user's entries in a particular table, the object identifiers for the information in these entries will have the same subidentifiers (except for the "column" subidentifier) up to the end of the encoded owner index. To configure VACM to permit access to this portion of the table, one would create vacmViewTreeFamilyTable entries with the value of vacmViewTreeFamilySubtree including the owner index portion, and vacmViewTreeFamilyMask "wildcarding" the column subidentifier. More elaborate configurations are possible. The VACM access control mechanism described above provides control It is RECOMMENDED that the slapmPRMonTable (equivalent to the deprecated slapmPolicyMonitorTable) and the slapmSubcomponentTable not be supported in insecure environments.6.0 Intellectual Property
The IETF takes no position regarding the validity or scope of any intellectual property or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; neither does it represent that it has made any effort to identify any such rights. Information on the IETF's procedures with respect to rights in standards-track and standards-related documentation can be found in BCP-11. Copies of claims of rights made available for publication and any assurances of
licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF Secretariat. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights which may cover technology that may be required to practice this standard. Please address the information to the IETF Executive Director.7.0 Acknowledgments
This document is an individual submission and not the product of any IETF working group. Special thanks should be given to Robert Moore of IBM for his numerous reviews.8.0 References
[1] Case, J., Fedor, M., Schoffstall, M. and J. Davin, "Simple Network Management Protocol", STD 15, RFC 1157, May 1990. [2] McCloghrie, K. and M. Rose, Editors, "Management Information Base for Network Management of TCP/IP-based internets: MIB-II", STD 17, RFC 1213, March 1991. [3] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999. [4] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999. [5] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999. [6] Case, J., McCloghrie, K., Rose, M. and Waldbusser, S., "Protocol Operations for Version 2 of the Simple Network Management Protocol (SNMPv2)", RFC 1905, January 1996. [7] Harrington D., Presuhn, R. and B. Wijnen, "An Architecture for Describing SNMP Management Frameworks", RFC 2571, April 1999. [8] Case, J., Harrington D., Presuhn, R. and B. Wijnen, "Message Processing and Dispatching for the Simple Network Management Protocol (SNMP)", RFC 2572, April 1999.
[9] Levi D., Meyer P. and B. Stewart, "SNMPv3 Applications", RFC 2573, April 1999. [10] Blumenthal, U. and B. Wijnen, "User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)", RFC 2574, April 1999. [11] Wijnen, B., Presuhn, R. and K. McCloghrie, "View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP)", RFC 2575, April 1999. [12] Hovey, R. and S. Bradner, "The Organizations Involved in the IETF Standards Process", BCP 11, RFC 2028, October 1996. [13] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [14] Rose, M. and K. McCloghrie, "Structure and Identification of Management Information for TCP/IP-based Internets", STD 16, RFC 1155, May 1990. [15] Rose, M. and K. McCloghrie, "Concise MIB Definitions", STD 16, RFC 1212, March 1991. [16] Rose, M., "A Convention for Defining Traps for use with the SNMP", RFC 1215, March 1991. [17] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Introduction to Community-based SNMPv2", RFC 1901, January 1996. [18] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Transport Mappings for Version 2 of the Simple Network Management Protocol (SNMPv2)", RFC 1906, January 1996. [19] McCloghrie, K. and A. Bierman, "Entity MIB using SMIv2", RFC 2037, October 1996. [20] Bradner, S., "The Internet Standards Process -- Revision 3", BCP 9, RFC 2026, October 1996.
9.0 Author's Address
Kenneth D. White Dept. BRQA/Bldg. 501/G114 IBM Corporation P.O.Box 12195 3039 Cornwallis Research Triangle Park, NC 27709, USA EMail: wkenneth@us.ibm.com
10.0 Full Copyright Statement
Copyright (C) The Internet Society (2000). All Rights Reserved. This document and translations of it may be copied and furnished to others, and derivative works that comment on or otherwise explain it or assist in its implementation may be prepared, copied, published and distributed, in whole or in part, without restriction of any kind, provided that the above copyright notice and this paragraph are included on all such copies and derivative works. However, this document itself may not be modified in any way, such as by removing the copyright notice or references to the Internet Society or other Internet organizations, except as needed for the purpose of developing Internet standards in which case the procedures for copyrights defined in the Internet Standards process must be followed, or as required to translate it into languages other than English. The limited permissions granted above are perpetual and will not be revoked by the Internet Society or its successors or assigns. This document and the information contained herein is provided on an "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Acknowledgement Funding for the RFC Editor function is currently provided by the Internet Society.