mip6MnBindingExpiredAtCN NOTIFICATION-TYPE OBJECTS { mip6BindingTimeRegistered, mip6BindingCOAType, mip6BindingCOA } STATUS current DESCRIPTION "This notification is sent by a correspondent node when a binding for the mobile node at the correspondent node expired (no timely Binding Updates were received). The MO instances in the notifications will be identified by the mip6BindingHomeAddressType and mip6BindingHomeAddress for the mobile node in the mip6BindingCacheTable. " ::= { mip6Notifications 5 }
-- Conformance information mip6Groups OBJECT IDENTIFIER ::= { mip6Conformance 1 } mip6Compliances OBJECT IDENTIFIER ::= { mip6Conformance 2 } -- Units of conformance mip6SystemGroup OBJECT-GROUP OBJECTS { mip6Capabilities, mip6Status } STATUS current DESCRIPTION " A collection of objects for basic MIPv6 monitoring." ::= { mip6Groups 1 } mip6BindingCacheGroup OBJECT-GROUP OBJECTS { mip6BindingCOAType, mip6BindingCOA, mip6BindingTimeRegistered, mip6BindingTimeGranted, mip6BindingTimeRemaining, mip6BindingMaxSeq, mip6BindingHomeRegn, mip6BindingUsageTS, mip6BindingUsageCount, mip6BindingAdminStatus } STATUS current DESCRIPTION " A collection of objects for monitoring the Binding Cache. " ::= { mip6Groups 2 }
mip6BindingHstGroup OBJECT-GROUP OBJECTS { mip6BindingHstCOAType, mip6BindingHstCOA, mip6BindingHstTimeRegistered, mip6BindingHstTimeExpired, mip6BindingHstHomeRegn, mip6BindingHstUsageTS, mip6BindingHstUsageCount } STATUS current DESCRIPTION " A collection of objects for monitoring the Binding History. This can be used to monitor the movement of the mobile node. " ::= { mip6Groups 3 } mip6TotalTrafficGroup OBJECT-GROUP OBJECTS { mip6InOctets, mip6HCInOctets, mip6InPkts, mip6HCInPkts, mip6OutOctets, mip6HCOutOctets, mip6OutPkts, mip6HCOutPkts, mip6CounterDiscontinuityTime } STATUS current DESCRIPTION " A collection of objects for monitoring the total MIPv6 traffic. " ::= { mip6Groups 4 }
mip6NodeTrafficGroup OBJECT-GROUP OBJECTS { mip6NodeInOctets, mip6HCNodeInOctets, mip6NodeInPkts, mip6HCNodeInPkts, mip6NodeOutOctets, mip6HCNodeOutOctets, mip6NodeOutPkts, mip6HCNodeOutPkts, mip6NodeCtrDiscontinuityTime } STATUS current DESCRIPTION " A collection of objects for monitoring the MIPv6 traffic due to a mobile node. " ::= { mip6Groups 5 } mip6MnSystemGroup OBJECT-GROUP OBJECTS { mip6MnHomeAddressState } STATUS current DESCRIPTION " A collection of objects for basic monitoring of the mobile node. " ::= { mip6Groups 6 } mip6MnConfGroup OBJECT-GROUP OBJECTS { mip6MnDiscoveryRequests, mip6MnDiscoveryReplies, mip6MnDiscoveryTimeouts, mip6MnPrefixSolicitationsSent, mip6MnPrefixAdvsRecd, mip6MnPrefixAdvsIgnored, mip6MnMovedToFN, mip6MnMovedToHN } STATUS current DESCRIPTION " A collection of objects for monitoring the advertisement-related info on the mobile node. " ::= { mip6Groups 7 }
mip6MnRegistrationGroup OBJECT-GROUP OBJECTS { mip6MnBLCOAType, mip6MnBLCOA, mip6MnBLLifeTimeRequested, mip6MnBLLifeTimeGranted, mip6MnBLMaxSeq, mip6MnBLTimeSent, mip6MnBLAccepted, mip6MnBLAcceptedTime, mip6MnBLRetransmissions, mip6MnBLDontSendBUFlag, -- -- Binding Update List -- mip6MnMobilityMessagesSent, mip6MnMobilityMessagesRecd, mip6MnBUsToHA, mip6MnBUAcksFromHA, mip6MnBUsToCN, mip6MnBUAcksFromCN, mip6MnBindingErrorsFromCN, mip6MnICMPErrorsRecd, mip6MnBRRequestsRecd } STATUS current DESCRIPTION " A collection of objects for monitoring the registration statistics for the mobile node. " ::= { mip6Groups 8 }
mip6CnStatsGroup OBJECT-GROUP OBJECTS { mip6CnBURequestsAccepted, mip6CnBURequestsRejected, mip6CnBCEntryCreationTime, mip6CnBUAcceptedTime, mip6CnBURejectionTime, mip6CnBURejectionCode, mip6CnCtrDiscontinuityTime } STATUS current DESCRIPTION " A collection of objects for monitoring the control messages and corresponding statistics for each mobile node communicating with the correspondent node. " ::= { mip6Groups 9 } mip6HaSystemGroup OBJECT-GROUP OBJECTS { mip6HaAdvsRecd, mip6HaAdvsSent, mip6HaAdvPreference, mip6HaAdvLifetime, mip6HaPrefixAdv, mip6HaPrefixSolicitation, mip6HaMCastCtlMsgSupport } STATUS current DESCRIPTION " A collection of objects for monitoring the advertisement-related parameters and statistics for the home agent. " ::= { mip6Groups 10 }
mip6HaListGroup OBJECT-GROUP OBJECTS { mip6HaPreference, mip6HaRecvLifeTime, mip6HaRecvTimeStamp, mip6HaGaGlobalAddressType, mip6HaGaGlobalAddress } STATUS current DESCRIPTION " A collection of objects for monitoring the Home Agent List on the home agent. " ::= { mip6Groups 11 } mip6HaStatsGroup OBJECT-GROUP OBJECTS { mip6HaBURequestsAccepted, mip6HaBURequestsDenied, mip6HaBCEntryCreationTime, mip6HaBUAcceptedTime, mip6HaBURejectionTime, mip6HaRecentBURejectionCode, mip6HaCtrDiscontinuityTime } STATUS current DESCRIPTION " A collection of objects for monitoring registration-related statistics on the home agent. " ::= { mip6Groups 12 }
mip6CnGlobalStatsGroup OBJECT-GROUP OBJECTS { mip6CnHomeTestInitsRecd, mip6CnHomeTestsSent, mip6CnCareOfTestInitsRecd, mip6CnCareOfTestsSent, mip6CnBUsRecd, mip6CnBUAcksSent, mip6CnBRsSent, mip6CnBindingErrors, mip6CnBUsAccepted, mip6CnBUsRejected, mip6CnReasonUnspecified, mip6CnInsufficientResource, mip6CnHomeRegnNotSupported, mip6CnSeqNumberOutOfWindow, mip6CnExpiredHomeNonceIndex, mip6CnExpiredCareOfNonceIndex, mip6CnExpiredNonce, mip6CnRegTypeChangeDisallowed } STATUS current DESCRIPTION " A collection of objects for monitoring advertisement and registration statistics on a correspondent node. " ::= { mip6Groups 13 }
mip6HaGlobalStatsGroup OBJECT-GROUP OBJECTS { mip6HaHomeTestInitsRecd, mip6HaHomeTestsSent, mip6HaBUsRecd, mip6HaBUAcksSent, mip6HaBRAdviceSent, mip6HaBUsAccepted, mip6HaPrefDiscoverReqd, mip6HaReasonUnspecified, mip6HaAdmProhibited, mip6HaInsufficientResource, mip6HaHomeRegnNotSupported, mip6HaNotHomeSubnet, mip6HaNotHomeAgentForThisMN, mip6HaDupAddrDetectionFailed, mip6HaSeqNumberOutOfWindow, mip6HaExpiredHomeNonceIndex, mip6HaRegTypeChangeDisallowed } STATUS current DESCRIPTION " A collection of objects for monitoring advertisement and registration statistics on a home agent. " ::= { mip6Groups 14 } mip6BindingCacheCtlGroup OBJECT-GROUP OBJECTS { mip6BindingAdminStatus } STATUS current DESCRIPTION "A collection of objects for controlling the Binding Cache. " ::= { mip6Groups 15 }
mip6NotificationGroup NOTIFICATION-GROUP NOTIFICATIONS { mip6MnRegistered, mip6MnDeRegistered, mip6MnCOAChanged, mip6MnBindingExpiredAtHA, mip6MnBindingExpiredAtCN } STATUS current DESCRIPTION "A collection of notifications from a home agent or correspondent node to the Manager about the status of a mobile node. " ::= { mip6Groups 16 } -- Compliance statements
mip6CoreCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB. " MODULE -- this module MANDATORY-GROUPS { mip6SystemGroup } ::= { mip6Compliances 1 } mip6Compliance2 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support monitoring of the Binding Cache and the Total Traffic. There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- " MODULE -- this module MANDATORY-GROUPS { mip6SystemGroup, mip6BindingCacheGroup, mip6TotalTrafficGroup } ::= { mip6Compliances 2 }
mip6Compliance3 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support monitoring of the Binding Cache, the Binding History, the total traffic, and the mobile node-wide traffic. There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHstHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the -- mip6BindingHstHomeAddress object. -- -- OBJECT mip6BindingHstHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the -- mip6BindingHstHomeAddress object. -- " MODULE -- this module MANDATORY-GROUPS { mip6SystemGroup, mip6BindingCacheGroup, mip6BindingHstGroup, mip6TotalTrafficGroup, mip6NodeTrafficGroup }
::= { mip6Compliances 3 } mip6CoreReadOnlyCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB without support for read-write (i.e., in read-only mode). " MODULE -- this module MANDATORY-GROUPS { mip6SystemGroup } OBJECT mip6Status MIN-ACCESS read-only DESCRIPTION "Write access is not required." ::= { mip6Compliances 4 } mip6ReadOnlyCompliance2 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB without support for read-write (i.e., in read-only mode) and support monitoring of the Binding Cache and Total Traffic. There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- " MODULE -- this module
MANDATORY-GROUPS { mip6SystemGroup, mip6BindingCacheGroup, mip6TotalTrafficGroup } OBJECT mip6Status MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6BindingAdminStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." ::= { mip6Compliances 5 } mip6ReadOnlyCompliance3 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB without support for read-write (i.e., in read-only mode) and support monitoring of the Binding Cache, the Binding History, the total traffic, and the mobile node-wide traffic. There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHstHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the -- mip6BindingHstHomeAddress object. --
-- OBJECT mip6BindingHstHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the -- mip6BindingHstHomeAddress object. -- " MODULE -- this module MANDATORY-GROUPS { mip6SystemGroup, mip6BindingCacheGroup, mip6BindingHstGroup, mip6TotalTrafficGroup, mip6NodeTrafficGroup } OBJECT mip6Status MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6BindingAdminStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." ::= { mip6Compliances 6 } mip6MnCoreCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support monitoring of the basic mobile node functionality. There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6MnHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6MnHomeAddress -- object. -- -- OBJECT mip6MnHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global
-- ipv6 addresses for the mip6MnHomeAddress -- object. -- " MODULE -- this module MANDATORY-GROUPS { mip6MnSystemGroup } ::= { mip6Compliances 7 } mip6MnCompliance2 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support monitoring of the mobile node functionality specifically the Discovery- and Registration-related statistics, There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6MnHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6MnHomeAddress -- object. -- -- OBJECT mip6MnHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6MnHomeAddress -- object. -- -- OBJECT mip6MnBLNodeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6MnBLNodeAddress -- object. -- -- OBJECT mip6MnBLNodeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6MnBLNodeAddress -- object.
-- " MODULE -- this module MANDATORY-GROUPS { mip6MnSystemGroup, mip6MnConfGroup, mip6MnRegistrationGroup, mip6TotalTrafficGroup } ::= { mip6Compliances 8 } mip6CnCoreCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support monitoring of the basic correspondent node functionality. " MODULE -- this module MANDATORY-GROUPS { mip6CnGlobalStatsGroup, mip6TotalTrafficGroup } ::= { mip6Compliances 9 } mip6CnCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support monitoring of the basic correspondent node functionality. There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object.
" MODULE -- this module MANDATORY-GROUPS { mip6CnGlobalStatsGroup, mip6CnStatsGroup, mip6TotalTrafficGroup } ::= { mip6Compliances 10 } mip6HaCoreCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support monitoring of the basic home agent functionality. " MODULE -- this module MANDATORY-GROUPS { mip6HaSystemGroup } ::= { mip6Compliances 11 } mip6HaCompliance2 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support monitoring of the home agent functionality specifically the Home Agent List and the home-agent-registration-related statistics, There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6HaLinkLocalAddressType
-- SYNTAX InetAddressType { ipv6z(4) } -- DESCRIPTION -- This MIB module requires support for local -- ipv6 addresses for the mip6HaLinkLocalAddress -- object. -- -- OBJECT mip6HaLinkLocalAddress -- SYNTAX InetAddress (SIZE(20)) -- DESCRIPTION -- This MIB module requires support for local -- ipv6 addresses for the mip6HaLinkLocalAddress -- object. -- " MODULE -- this module MANDATORY-GROUPS { mip6HaSystemGroup, mip6HaListGroup, mip6HaStatsGroup, mip6HaGlobalStatsGroup, mip6TotalTrafficGroup } ::= { mip6Compliances 12 } mip6HaCompliance3 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support monitoring and control of the home agent functionality specifically the Home Agent List and the home-agent-registration-related statistics, There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress
-- object. -- -- OBJECT mip6HaLinkLocalAddressType -- SYNTAX InetAddressType { ipv6z(4) } -- DESCRIPTION -- This MIB module requires support for local -- ipv6 addresses for the mip6HaLinkLocalAddress -- object. -- -- OBJECT mip6HaLinkLocalAddress -- SYNTAX InetAddress (SIZE(20)) -- DESCRIPTION -- This MIB module requires support for local -- ipv6 addresses for the mip6HaLinkLocalAddress -- object. -- " MODULE -- this module MANDATORY-GROUPS { mip6HaSystemGroup, mip6HaListGroup, mip6HaStatsGroup, mip6HaGlobalStatsGroup, mip6BindingCacheCtlGroup, mip6TotalTrafficGroup } ::= { mip6Compliances 13 }
mip6HaCoreReadOnlyCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB without support for read-write (i.e., in read-only mode) and support monitoring of the basic home agent functionality. " MODULE -- this module MANDATORY-GROUPS { mip6HaSystemGroup } OBJECT mip6HaAdvPreference MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaAdvLifetime MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaPrefixAdv MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaPrefixSolicitation MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaMCastCtlMsgSupport MIN-ACCESS read-only DESCRIPTION "Write access is not required." ::= { mip6Compliances 14 }
mip6HaReadOnlyCompliance2 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB without support for read-write (i.e., in read-only mode) and support monitoring of the home agent functionality specifically the Home Agent List and the home-agent-registration-related statistics. There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6HaLinkLocalAddressType -- SYNTAX InetAddressType { ipv6z(4) } -- DESCRIPTION -- This MIB module requires support for local -- ipv6 addresses for the mip6HaLinkLocalAddress -- object. -- -- OBJECT mip6HaLinkLocalAddress -- SYNTAX InetAddress (SIZE(20)) -- DESCRIPTION -- This MIB module requires support for local -- ipv6 addresses for the mip6HaLinkLocalAddress -- object. -- " MODULE -- this module MANDATORY-GROUPS { mip6HaSystemGroup, mip6HaListGroup, mip6HaStatsGroup, mip6HaGlobalStatsGroup,
mip6TotalTrafficGroup } OBJECT mip6HaAdvPreference MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaAdvLifetime MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaPrefixAdv MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaPrefixSolicitation MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaMCastCtlMsgSupport MIN-ACCESS read-only DESCRIPTION "Write access is not required." ::= { mip6Compliances 15 }
mip6HaReadOnlyCompliance3 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB without support for read-write (i.e., in read-only mode) and support monitoring and control of the home agent functionality specifically the Home Agent List and the home-agent-registration-related statistics, There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description: -- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6HaLinkLocalAddressType -- SYNTAX InetAddressType { ipv6z(4) } -- DESCRIPTION -- This MIB module requires support for local -- ipv6 addresses for the mip6HaLinkLocalAddress -- object. -- -- OBJECT mip6HaLinkLocalAddress -- SYNTAX InetAddress (SIZE(20)) -- DESCRIPTION -- This MIB module requires support for local -- ipv6 addresses for the mip6HaLinkLocalAddress -- object. -- " MODULE -- this module MANDATORY-GROUPS { mip6HaSystemGroup, mip6HaListGroup, mip6HaStatsGroup, mip6HaGlobalStatsGroup,
mip6BindingCacheCtlGroup, mip6TotalTrafficGroup } OBJECT mip6HaAdvPreference MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaAdvLifetime MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaPrefixAdv MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaPrefixSolicitation MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6HaMCastCtlMsgSupport MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT mip6BindingAdminStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." ::= { mip6Compliances 16 } mip6NotificationCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement the MOBILEIPV6-MIB and support Notification from home agent or correspondent node to management stations about the mobile node status. There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which there are compliance requirements, expressed in OBJECT clause form in this description:
-- OBJECT mip6BindingHomeAddressType -- SYNTAX InetAddressType { ipv6(2) } -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. -- -- OBJECT mip6BindingHomeAddress -- SYNTAX InetAddress (SIZE(16)) -- DESCRIPTION -- This MIB module requires support for global -- ipv6 addresses for the mip6BindingHomeAddress -- object. " MODULE -- this module MANDATORY-GROUPS { mip6NotificationGroup } ::= { mip6Compliances 17 } END
6. Security Considerations
There are a number of management objects defined in this MIB module with a MAX-ACCESS clause of read-write. Such objects may be considered sensitive or vulnerable in some network environments. The support for SET operations in a non-secure environment without proper protection can have a negative effect on network operations. These are the tables and objects and the corresponding sensitivity/vulnerability: mip6Status: The value of this object is used to enable or disable the MIPv6 functionality on a MIPv6 entity. Access to this MO may be abused to disrupt the MIPv6 communication. mip6HaAdvPreference: Access to this object may be abused to force MNs into selecting the wrong HA. mip6HaAdvLifetime: Access to this object may be abused to set the advertised lifetime to incorrect values. That will have an adverse impact on the MIPv6 communication. mip6BindingAdminStatus: The value of this object is used to control the status of a Binding Cache entry. Access to this object may be abused to deny Mobile IPv6 connectivity to a legitimate user or to grant Mobile IPv6 connectivity to an illegal user. mip6HaPrefixAdv: The value of this object indicates whether the home agent will send ICMP Mobile Prefix Advertisements to the mobile node. Access to this object may be abused to send unwanted/wrong prefix information or to deny the mobile node from receiving information about the changes in the home prefixes. This may result in disruption of the Mobile IPv6 connectivity. mip6HaPrefixSolicitation: The value of this object indicates whether the home agent should respond to ICMP Mobile Prefix Solicitation messages from a mobile node. Access to this object may be abused to deny the mobile node information about its home prefix. This may result in disruption of the Mobile IPv6 connectivity. mip6HaMCastCtlMsgSupport: The value of this object decides whether the home agent should process the multicast group membership control messages it receives from mobile nodes. Access to this object may be used to subvert administrate policy on multicasting or to disrupt the multicast communication with the mobile node.
Some of the readable objects in this MIB module (i.e., objects with a MAX-ACCESS other than not-accessible) may be considered sensitive or vulnerable in some network environments. It is thus important to control even GET and/or NOTIFY access to these objects and possibly to even encrypt the values of these objects when sending them over the network via SNMP. These are the tables and objects and their sensitivity/vulnerability: The address-related objects in this MIB may be considered to be particularly sensitive and/or private. The care-of-address-related objects reveal the location and movement of the mobile node. This information may be considered to be private and sensitive and must be carefully handled. mip6BindingHstCOAType mip6BindingHstCOA mip6MnBLCOAType mip6MnBLCOA The mobile node's home-address- and home-agent-related information may be considered to be sensitive too as these may provide clues to a malicious party on ways to disrupt the mobile nodes communication channels. mip6BindingHstHomeAddressType, mip6BindingHstHomeAddress, mip6MnHomeAddressType, mip6MnHomeAddress The correspondent node's address-related MOs will reveal the nodes with whom the mobile node is corresponding. This information may be considered private and sensitive. mip6MnBLNodeAddressType, mip6MnBLNodeAddress SNMP versions prior to SNMPv3 did not include adequate security. Even if the network itself is secure (for example by using IPSec), even then, there is no control as to who on the secure network is allowed to access and GET/SET (read/change/create/delete) the objects in this MIB module. It is RECOMMENDED that implementors consider the security features as provided by the SNMPv3 framework (see [RFC3410], section 8), including full support for the SNMPv3 cryptographic mechanisms (for authentication and privacy). Further, deployment of SNMP versions prior to SNMPv3 is NOT RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to enable cryptographic security. It is then a customer/operator
responsibility to ensure that the SNMP entity giving access to an instance of this MIB module is properly configured to give access to the objects only to those principals (users) that have legitimate rights to indeed GET or SET (change/create/delete) them.7. IANA Considerations
IANA has assigned a base arc in the 'mib-2' (standards track) OID tree for the 'mip6MIB' MODULE-IDENTITY defined in the Mobile-IPv6 MIB. The mib-2 number is 133 for mip6MIB.8. References
8.1. Normative References
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirements Levels", BCP 14, RFC 2119, March 1997. [RFC2578] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., and S. Waldbusser, "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999. [RFC2579] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., and S. Waldbusser, "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999. [RFC2580] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., and S. Waldbusser, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999. [RFC3775] Johnson, D., Perkins, C., and Arkko J., Mobility Support in IPv6" RFC 3775, June 2004. [RFC4293] Routhier, S., Ed., "Management Information Base for the Internet Protocol (IP)", RFC 4293, April 2006. [RFC4001] Daniele, M., Haberman, B., Routhier, S., and J. Schoenwaelder, "Textual Conventions for Internet Network Addresses", RFC 4001, February 2005.
8.2. Informative References
[RFC3410] Case, J., Mundy, R., Partain, D., and B. Stewart, "Introduction and Applicability Statements for Internet-Standard Management Framework", RFC 3410, December 2002. [RFC4087] Thaler, D., "IP Tunnel MIB", RFC 4087, June 2005.9. Acknowledgements
The following groups and individuals have contributed to this document with discussions and comments: WIDE-netman group C.M. Heard
Authors' Addresses
Glenn Mansfield Keeni Cyber Solutions Inc. 6-6-3 Minami Yoshinari Aoba-ku, Sendai 989-3204 Japan Phone: +81-22-303-4012 EMail: glenn@cysols.com Kenichi Nagami INTEC NetCore Inc. 1-3-3, Shin-suna Koto-ku, Tokyo, 135-0075 Japan Phone: +81-3-5665-5069 EMail: nagami@inetcore.com Kazuhide Koide Tohoku University 2-1-1, Katahira Aoba-ku, Sendai, 980-8577 Japan Phone: +81-22-217-5454 EMail: koide@shiratori.riec.tohoku.ac.jp Sri Gundavelli Cisco Systems 170 W.Tasman Drive, San Jose, CA 95134 USA Phone: +1-408-527-6109 EMail: sgundave@cisco.com
Full Copyright Statement Copyright (C) The Internet Society (2006). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Intellectual Property The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and BCP 79. Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf-ipr@ietf.org. Acknowledgement Funding for the RFC Editor function is provided by the IETF Administrative Support Activity (IASA).