hdsl2ShdslEndpointThreshLoopAttenuation OBJECT-TYPE SYNTAX Integer32(-127..128) UNITS "dB" MAX-ACCESS read-create STATUS current DESCRIPTION "This object configures the loop attenuation alarm threshold. When the current value of hdsl2ShdslEndpointCurrAtn reaches or exceeds this threshold, an hdsl2ShdslLoopAttenCrossing MAY be generated." DEFVAL { 0 } ::= { hdsl2ShdslEndpointAlarmConfProfileEntry 2 } hdsl2ShdslEndpointThreshSNRMargin OBJECT-TYPE SYNTAX Integer32(-127..128) UNITS "dB" MAX-ACCESS read-create STATUS current DESCRIPTION "This object configures the SNR margin alarm threshold. When the current value of hdsl2ShdslEndpointCurrSnrMgn reaches or drops below this threshold, a hdsl2ShdslSNRMarginCrossing MAY be generated." DEFVAL { 0 } ::= { hdsl2ShdslEndpointAlarmConfProfileEntry 3 } hdsl2ShdslEndpointThreshES OBJECT-TYPE SYNTAX Hdsl2ShdslPerfIntervalThreshold UNITS "seconds" MAX-ACCESS read-create STATUS current DESCRIPTION "This object configures the threshold for the number of Errored Seconds (ES) within any given 15-minute performance data collection interval. If the value of Errored Seconds in a particular 15-minute collection interval reaches/ exceeds this value, an hdsl2ShdslPerfESThresh MAY be generated. At most, one notification will be sent per interval per endpoint." DEFVAL { 0 } ::= { hdsl2ShdslEndpointAlarmConfProfileEntry 4 } hdsl2ShdslEndpointThreshSES OBJECT-TYPE SYNTAX Hdsl2ShdslPerfIntervalThreshold UNITS "seconds" MAX-ACCESS read-create STATUS current DESCRIPTION
"This object configures the threshold for the number of Severely Errored Seconds (SES) within any given 15-minute performance data collection interval. If the value of Severely Errored Seconds in a particular 15-minute collection interval reaches/exceeds this value, an hdsl2ShdslPerfSESThresh MAY be generated. At most, one notification will be sent per interval per endpoint." DEFVAL { 0 } ::= { hdsl2ShdslEndpointAlarmConfProfileEntry 5 } hdsl2ShdslEndpointThreshCRCanomalies OBJECT-TYPE SYNTAX Integer32 UNITS "detected CRC Anomalies" MAX-ACCESS read-create STATUS current DESCRIPTION "This object configures the threshold for the number of CRC anomalies within any given 15-minute performance data collection interval. If the value of CRC anomalies in a particular 15-minute collection interval reaches/exceeds this value, an hdsl2ShdslPerfCRCanomaliesThresh MAY be generated. At most, one notification will be sent per interval per endpoint." DEFVAL { 0 } ::= { hdsl2ShdslEndpointAlarmConfProfileEntry 6 } hdsl2ShdslEndpointThreshLOSWS OBJECT-TYPE SYNTAX Hdsl2ShdslPerfIntervalThreshold UNITS "seconds" MAX-ACCESS read-create STATUS current DESCRIPTION "This object configures the threshold for the number of Loss of Sync Word (LOSW) Seconds within any given 15-minute performance data collection interval. If the value of LOSW in a particular 15-minute collection interval reaches/exceeds this value, an hdsl2ShdslPerfLOSWSThresh MAY be generated. At most, one notification will be sent per interval per endpoint." DEFVAL { 0 } ::= { hdsl2ShdslEndpointAlarmConfProfileEntry 7 } hdsl2ShdslEndpointThreshUAS OBJECT-TYPE SYNTAX Hdsl2ShdslPerfIntervalThreshold UNITS "seconds" MAX-ACCESS read-create STATUS current DESCRIPTION
"This object configures the threshold for the number of Unavailable Seconds (UAS) within any given 15-minute performance data collection interval. If the value of UAS in a particular 15-minute collection interval reaches/exceeds this value, an hdsl2ShdslPerfUASThresh MAY be generated. At most, one notification will be sent per interval per endpoint." DEFVAL { 0 } ::= { hdsl2ShdslEndpointAlarmConfProfileEntry 8 } hdsl2ShdslEndpointAlarmConfProfileRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object controls creation/deletion of the associated entry in this table as per the semantics of RowStatus. If an active entry is referenced in either hdsl2ShdslSpanConfAlarmProfile or hdsl2ShdslEndpointAlarmConfProfile, the entry MUST remain active until all references are removed." ::= { hdsl2ShdslEndpointAlarmConfProfileEntry 9 } -- Notifications Group -- hdsl2ShdslNotifications OBJECT IDENTIFIER ::= { hdsl2ShdslMIB 0 } hdsl2ShdslLoopAttenCrossing NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurrAtn, hdsl2ShdslEndpointThreshLoopAttenuation } STATUS current DESCRIPTION "This notification indicates that the loop attenuation threshold (as per the hdsl2ShdslEndpointThreshLoopAttenuation value) has been reached/exceeded for the HDSL2/SHDSL segment endpoint." ::= { hdsl2ShdslNotifications 1 } hdsl2ShdslSNRMarginCrossing NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurrSnrMgn, hdsl2ShdslEndpointThreshSNRMargin }
STATUS current DESCRIPTION "This notification indicates that the SNR margin threshold (as per the hdsl2ShdslEndpointThreshSNRMargin value) has been reached/exceeded for the HDSL2/SHDSL segment endpoint." ::= { hdsl2ShdslNotifications 2 } hdsl2ShdslPerfESThresh NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurr15MinES, hdsl2ShdslEndpointThreshES } STATUS current DESCRIPTION "This notification indicates that the errored seconds threshold (as per the hdsl2ShdslEndpointThreshES value) has been reached/exceeded for the HDSL2/SHDSL segment endpoint." ::= { hdsl2ShdslNotifications 3 } hdsl2ShdslPerfSESThresh NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurr15MinSES, hdsl2ShdslEndpointThreshSES } STATUS current DESCRIPTION "This notification indicates that the severely errored seconds threshold (as per the hdsl2ShdslEndpointThreshSES value) has been reached/exceeded for the HDSL2/SHDSL segment endpoint." ::= { hdsl2ShdslNotifications 4 } hdsl2ShdslPerfCRCanomaliesThresh NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurr15MinCRCanomalies, hdsl2ShdslEndpointThreshCRCanomalies } STATUS current DESCRIPTION "This notification indicates that the CRC anomalies threshold (as per the hdsl2ShdslEndpointThreshCRCanomalies value) has been reached/exceeded for the HDSL2/SHDSL segment endpoint." ::= { hdsl2ShdslNotifications 5 } hdsl2ShdslPerfLOSWSThresh NOTIFICATION-TYPE
OBJECTS { hdsl2ShdslEndpointCurr15MinLOSWS, hdsl2ShdslEndpointThreshLOSWS } STATUS current DESCRIPTION "This notification indicates that the LOSW Seconds threshold (as per the hdsl2ShdslEndpointThreshLOSWS value) has been reached/exceeded for the HDSL2/SHDSL segment endpoint." ::= { hdsl2ShdslNotifications 6 } hdsl2ShdslPerfUASThresh NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurr15MinUAS, hdsl2ShdslEndpointThreshUAS } STATUS current DESCRIPTION "This notification indicates that the unavailable seconds threshold (as per the hdsl2ShdslEndpointThreshUAS value) has been reached/exceeded for the HDSL2/SHDSL segment endpoint." ::= { hdsl2ShdslNotifications 7 } hdsl2ShdslSpanInvalidNumRepeaters NOTIFICATION-TYPE OBJECTS { hdsl2ShdslSpanConfNumRepeaters } STATUS current DESCRIPTION "This notification indicates that a mismatch has been detected between the number of repeater/regenerator units configured for an HDSL2/SHDSL line via the hdsl2ShdslSpanConfNumRepeaters object and the actual number of repeater/regenerator units discovered via the EOC." ::= { hdsl2ShdslNotifications 8 } hdsl2ShdslLoopbackFailure NOTIFICATION-TYPE OBJECTS { hdsl2ShdslMaintLoopbackConfig } STATUS current DESCRIPTION "This notification indicates that an endpoint maintenance loopback command failed for an HDSL2/SHDSL segment."
::= { hdsl2ShdslNotifications 9 } hdsl2ShdslpowerBackoff NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurrStatus } STATUS current DESCRIPTION "This notification indicates that the bit setting for powerBackoff in the hdsl2ShdslEndpointCurrStatus object for this endpoint has changed." ::= { hdsl2ShdslNotifications 10 } hdsl2ShdsldeviceFault NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurrStatus } STATUS current DESCRIPTION "This notification indicates that the bit setting for deviceFault in the hdsl2ShdslEndpointCurrStatus object for this endpoint has changed." ::= { hdsl2ShdslNotifications 11 } hdsl2ShdsldcContinuityFault NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurrStatus } STATUS current DESCRIPTION "This notification indicates that the bit setting for dcContinuityFault in the hdsl2ShdslEndpointCurrStatus object for this endpoint has changed." ::= { hdsl2ShdslNotifications 12 } hdsl2ShdslconfigInitFailure NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurrStatus } STATUS current DESCRIPTION "This notification indicates that the bit setting for configInitFailure in the hdsl2ShdslEndpointCurrStatus object for this endpoint has changed."
::= { hdsl2ShdslNotifications 13 } hdsl2ShdslprotocolInitFailure NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurrStatus } STATUS current DESCRIPTION "This notification indicates that the bit setting for protocolInitFailure in the hdsl2ShdslEndpointCurrStatus object for this endpoint has changed." ::= { hdsl2ShdslNotifications 14 } hdsl2ShdslnoNeighborPresent NOTIFICATION-TYPE OBJECTS { hdsl2ShdslEndpointCurrStatus } STATUS current DESCRIPTION "This notification indicates that the bit setting for noNeighborPresent in the hdsl2ShdslEndpointCurrStatus object for this endpoint has changed." ::= { hdsl2ShdslNotifications 15 } hdsl2ShdslLocalPowerLoss NOTIFICATION-TYPE OBJECTS { hdsl2ShdslInvVendorID } STATUS current DESCRIPTION "This notification indicates impending unit failure due to loss of local power (last gasp)." ::= { hdsl2ShdslNotifications 16 } -- conformance information -- hdsl2ShdslConformance OBJECT IDENTIFIER ::= { hdsl2ShdslMIB 3 } hdsl2ShdslGroups OBJECT IDENTIFIER ::= { hdsl2ShdslConformance 1 } hdsl2ShdslCompliances OBJECT IDENTIFIER ::= { hdsl2ShdslConformance 2 } -- agent compliance statements
hdsl2ShdslLineMibCompliance MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for SNMP entities that implement HDSL2 and SHDSL. The version of SHDSL supported in this compliance statement is g.shdsl. **** This compliance statement is deprecated. ****" MODULE MANDATORY-GROUPS { hdsl2ShdslSpanConfGroup, hdsl2ShdslSpanStatusGroup, hdsl2ShdslInventoryGroup, hdsl2ShdslEndpointConfGroup, hdsl2ShdslEndpointCurrGroup, hdsl2Shdsl15MinIntervalGroup, hdsl2Shdsl1DayIntervalGroup, hdsl2ShdslMaintenanceGroup, hdsl2ShdslEndpointAlarmConfGroup, hdsl2ShdslNotificationGroup } GROUP hdsl2ShdslInventoryShdslGroup DESCRIPTION "Support for this group is only required for implementations supporting SHDSL lines." GROUP hdsl2ShdslSpanShdslStatusGroup DESCRIPTION "Support for this group is only required for implementations supporting SHDSL lines." GROUP hdsl2ShdslSpanConfProfileGroup DESCRIPTION "Support for this group is only required for implementations supporting SHDSL lines." OBJECT hdsl2ShdslSpanConfWireInterface SYNTAX INTEGER { twoWire(1), fourWire(2) } DESCRIPTION "An implementation only has to support the range as applicable for the original g.shdsl specification defined in RFC 3276."
OBJECT hdsl2ShdslStatusMaxAttainableLineRate SYNTAX Unsigned32(0..4112000) DESCRIPTION "An implementation only has to support the range as applicable for the original g.shdsl specification defined in RFC 3276." OBJECT hdsl2ShdslStatusActualLineRate SYNTAX Unsigned32(0..4112000) DESCRIPTION "An implementation only has to support the range as applicable for the original g.shdsl specification defined in RFC 3276." OBJECT hdsl2ShdslSpanConfMinLineRate SYNTAX Unsigned32(0..4112000) DESCRIPTION "An implementation only has to support the range as applicable for the original g.shdsl specification defined in RFC 3276." OBJECT hdsl2ShdslSpanConfMaxLineRate SYNTAX Unsigned32(0..4112000) DESCRIPTION "An implementation only has to support the range as applicable for the original g.shdsl specification defined in RFC 3276." ::= { hdsl2ShdslCompliances 1 } hdsl2GshdslbisLineMibCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for SNMP entities that implement HDSL2 and SHDSL. The version of SHDSL supported in this compliance statement is g.shdsl.bis." MODULE MANDATORY-GROUPS { hdsl2ShdslSpanConfGroup, hdsl2ShdslSpanStatusGroup, hdsl2ShdslInventoryGroup, hdsl2ShdslEndpointConfGroup, hdsl2ShdslEndpointCurrGroup, hdsl2Shdsl15MinIntervalGroup, hdsl2Shdsl1DayIntervalGroup, hdsl2ShdslMaintenanceGroup, hdsl2ShdslEndpointAlarmConfGroup,
hdsl2ShdslNotificationGroup } GROUP hdsl2ShdslInventoryShdslGroup DESCRIPTION "Support for this group is only required for implementations supporting SHDSL lines." GROUP hdsl2ShdslSpanShdslStatusGroup DESCRIPTION "Support for this group is only required for implementations supporting SHDSL lines." GROUP hdsl2ShdslSpanConfProfileGroup DESCRIPTION "Support for this group is only required for implementations supporting SHDSL lines." GROUP hdsl2ShdslWirePairGroup DESCRIPTION "Support for this group is only required for implementations supporting SHDSL lines." GROUP hdsl2ShdslPayloadRateGroup DESCRIPTION "Support for this group is only required for implementations supporting SHDSL lines." ::= { hdsl2ShdslCompliances 2 } -- units of conformance -- hdsl2ShdslSpanConfGroup OBJECT-GROUP OBJECTS { hdsl2ShdslSpanConfNumRepeaters, hdsl2ShdslSpanConfProfile, hdsl2ShdslSpanConfAlarmProfile } STATUS current DESCRIPTION "This group supports objects for configuring span-related parameters for HDSL2/SHDSL lines." ::= { hdsl2ShdslGroups 1 } hdsl2ShdslSpanStatusGroup OBJECT-GROUP OBJECTS
{ hdsl2ShdslStatusNumAvailRepeaters } STATUS current DESCRIPTION "This group supports objects for retrieving span-related status for HDSL2/SHDSL lines." ::= { hdsl2ShdslGroups 2 } hdsl2ShdslInventoryShdslGroup OBJECT-GROUP OBJECTS { hdsl2ShdslInvTransmissionModeCapability } STATUS current DESCRIPTION "This group supports objects for retrieving SHDSL-specific inventory information." ::= { hdsl2ShdslGroups 3 } hdsl2ShdslSpanShdslStatusGroup OBJECT-GROUP OBJECTS { hdsl2ShdslStatusMaxAttainableLineRate, hdsl2ShdslStatusActualLineRate, hdsl2ShdslStatusTransmissionModeCurrent } STATUS current DESCRIPTION "This group supports objects for retrieving SHDSL-specific span-related status." ::= { hdsl2ShdslGroups 4 } hdsl2ShdslInventoryGroup OBJECT-GROUP OBJECTS { hdsl2ShdslInvVendorID, hdsl2ShdslInvVendorModelNumber, hdsl2ShdslInvVendorSerialNumber, hdsl2ShdslInvVendorEOCSoftwareVersion, hdsl2ShdslInvStandardVersion, hdsl2ShdslInvVendorListNumber, hdsl2ShdslInvVendorIssueNumber, hdsl2ShdslInvVendorSoftwareVersion, hdsl2ShdslInvEquipmentCode, hdsl2ShdslInvVendorOther } STATUS current
DESCRIPTION "This group supports objects that provide unit inventory information about the units in HDSL2/SHDSL lines." ::= { hdsl2ShdslGroups 5 } hdsl2ShdslEndpointConfGroup OBJECT-GROUP OBJECTS { hdsl2ShdslEndpointCurrAtn } STATUS current DESCRIPTION "This group supports objects for configuring parameters for segment endpoints in HDSL2/SHDSL lines." ::= { hdsl2ShdslGroups 6 } hdsl2ShdslEndpointCurrGroup OBJECT-GROUP OBJECTS { hdsl2ShdslEndpointCurrAtn, hdsl2ShdslEndpointCurrSnrMgn, hdsl2ShdslEndpointCurrStatus, hdsl2ShdslEndpointES, hdsl2ShdslEndpointSES, hdsl2ShdslEndpointCRCanomalies, hdsl2ShdslEndpointLOSWS, hdsl2ShdslEndpointUAS, hdsl2ShdslEndpointCurr15MinTimeElapsed, hdsl2ShdslEndpointCurr15MinES, hdsl2ShdslEndpointCurr15MinSES, hdsl2ShdslEndpointCurr15MinCRCanomalies, hdsl2ShdslEndpointCurr15MinLOSWS, hdsl2ShdslEndpointCurr15MinUAS, hdsl2ShdslEndpointCurr1DayTimeElapsed, hdsl2ShdslEndpointCurr1DayES, hdsl2ShdslEndpointCurr1DaySES, hdsl2ShdslEndpointCurr1DayCRCanomalies, hdsl2ShdslEndpointCurr1DayLOSWS, hdsl2ShdslEndpointCurr1DayUAS } STATUS current DESCRIPTION "This group supports objects that provide current status and performance measurements relating to segment endpoints in HDSL2/SHDSL lines." ::= { hdsl2ShdslGroups 7 } hdsl2Shdsl15MinIntervalGroup OBJECT-GROUP
OBJECTS { hdsl2Shdsl15MinIntervalES, hdsl2Shdsl15MinIntervalSES, hdsl2Shdsl15MinIntervalCRCanomalies, hdsl2Shdsl15MinIntervalLOSWS, hdsl2Shdsl15MinIntervalUAS } STATUS current DESCRIPTION "This group supports objects that maintain historic performance measurements relating to segment endpoints in HDSL2/SHDSL lines in 15-minute intervals." ::= { hdsl2ShdslGroups 8 } hdsl2Shdsl1DayIntervalGroup OBJECT-GROUP OBJECTS { hdsl2Shdsl1DayIntervalMoniSecs, hdsl2Shdsl1DayIntervalES, hdsl2Shdsl1DayIntervalSES, hdsl2Shdsl1DayIntervalCRCanomalies, hdsl2Shdsl1DayIntervalLOSWS, hdsl2Shdsl1DayIntervalUAS } STATUS current DESCRIPTION "This group supports objects that maintain historic performance measurements relating to segment endpoints in HDSL2/SHDSL lines in 1-day intervals." ::= { hdsl2ShdslGroups 9 } hdsl2ShdslMaintenanceGroup OBJECT-GROUP OBJECTS { hdsl2ShdslMaintLoopbackConfig, hdsl2ShdslMaintTipRingReversal, hdsl2ShdslMaintPowerBackOff, hdsl2ShdslMaintSoftRestart, hdsl2ShdslMaintLoopbackTimeout, hdsl2ShdslMaintUnitPowerSource } STATUS current DESCRIPTION "This group supports objects that provide support for maintenance actions for HDSL2/SHDSL lines." ::= { hdsl2ShdslGroups 10 }
hdsl2ShdslEndpointAlarmConfGroup OBJECT-GROUP OBJECTS { hdsl2ShdslEndpointAlarmConfProfile, hdsl2ShdslEndpointThreshLoopAttenuation, hdsl2ShdslEndpointThreshSNRMargin, hdsl2ShdslEndpointThreshES, hdsl2ShdslEndpointThreshSES, hdsl2ShdslEndpointThreshCRCanomalies, hdsl2ShdslEndpointThreshLOSWS, hdsl2ShdslEndpointThreshUAS, hdsl2ShdslEndpointAlarmConfProfileRowStatus } STATUS current DESCRIPTION "This group supports objects that allow configuration of alarm thresholds for various performance parameters for HDSL2/SHDSL lines." ::= { hdsl2ShdslGroups 11 } hdsl2ShdslNotificationGroup NOTIFICATION-GROUP NOTIFICATIONS { hdsl2ShdslLoopAttenCrossing, hdsl2ShdslSNRMarginCrossing, hdsl2ShdslPerfESThresh, hdsl2ShdslPerfSESThresh, hdsl2ShdslPerfCRCanomaliesThresh, hdsl2ShdslPerfLOSWSThresh, hdsl2ShdslPerfUASThresh, hdsl2ShdslSpanInvalidNumRepeaters, hdsl2ShdslLoopbackFailure, hdsl2ShdslpowerBackoff, hdsl2ShdsldeviceFault, hdsl2ShdsldcContinuityFault, hdsl2ShdslconfigInitFailure, hdsl2ShdslprotocolInitFailure, hdsl2ShdslnoNeighborPresent, hdsl2ShdslLocalPowerLoss } STATUS current DESCRIPTION "This group supports notifications of significant conditions associated with HDSL2/SHDSL lines." ::= { hdsl2ShdslGroups 12 } hdsl2ShdslSpanConfProfileGroup OBJECT-GROUP OBJECTS
{ hdsl2ShdslSpanConfWireInterface, hdsl2ShdslSpanConfMinLineRate, hdsl2ShdslSpanConfMaxLineRate, hdsl2ShdslSpanConfPSD, hdsl2ShdslSpanConfTransmissionMode, hdsl2ShdslSpanConfRemoteEnabled, hdsl2ShdslSpanConfPowerFeeding, hdsl2ShdslSpanConfCurrCondTargetMarginDown, hdsl2ShdslSpanConfWorstCaseTargetMarginDown, hdsl2ShdslSpanConfCurrCondTargetMarginUp, hdsl2ShdslSpanConfWorstCaseTargetMarginUp, hdsl2ShdslSpanConfUsedTargetMargins, hdsl2ShdslSpanConfReferenceClock, hdsl2ShdslSpanConfLineProbeEnable, hdsl2ShdslSpanConfProfileRowStatus } STATUS current DESCRIPTION "This group supports objects that constitute configuration profiles for configuring span-related parameters in SHDSL lines." ::= { hdsl2ShdslGroups 13 } hdsl2ShdslWirePairGroup OBJECT-GROUP OBJECTS { hdsl2ShdslEndpointCurrTipRingReversal, hdsl2ShdslEndpointCurrActivationState } STATUS current DESCRIPTION "This group supports objects that provide the status of SHDSL-specific wire pairs." ::= { hdsl2ShdslGroups 14 } hdsl2ShdslPayloadRateGroup OBJECT-GROUP OBJECTS { hdsl2ShdslStatusMaxAttainablePayloadRate, hdsl2ShdslStatusActualPayloadRate } STATUS current DESCRIPTION "This group supports objects for retrieving payload rates that exclude any framing overhead." ::= { hdsl2ShdslGroups 15 }
END4. Implementation Analysis
A management application that supports RFC 3276 could mistakenly flag a unit that responds with a rate or wire pair that exceeds the ranges and/or enumerations specified in RFC 3276. For example, a G.shdsl.bis line with four wire pairs would report statistics for wire pairs that do not exist in RFC 3276. That is, a GET-NEXT request issues with the object identifier: hdsl2ShdslEndpointCurrAtn.1.1.1.2 might return hdsl2ShdslEndpointCurrAtn.1.1.1.3 = 0 with a G.shdsl.bis unit and hdsl2ShdslEndpointCurrSnrMgn.1.1.1.1 = 0 with an HDSL2 unit as these objects are indexed by INDEX { ifIndex, hdsl2ShdslInvIndex, hdsl2ShdslendpointSide, hdsl2ShdslEndpointWirePair } A management application intended to manage G.shdsl.bis agents SHOULD be modified to accept this sequence. One should note that this same unmodified management application is still capable of managing G.shdsl.bis agents albeit to the degree of G.SHDSL (non-bis) limitations. That is, it can create and monitor configurations limited to two wire pairs with an upper-rate limit of 4112000 bits/second.5. Security Considerations
There are a number of management objects defined in this MIB module with a MAX-ACCESS clause of read-write and/or read-create. Such objects may be considered sensitive or vulnerable in some network environments. The support for SET operations in a non-secure environment without proper protection can have a negative effect on network operations. These are the tables and objects and their sensitivity/vulnerability:
o hdsl2ShdslSpanConfTable The table consists of the following objects that support SET operations: * hdsl2ShdslSpanConfNumRepeaters * hdsl2ShdslSpanConfProfile * hdsl2ShdslSpanConfAlarmProfile Unauthorized changes to hdsl2ShdslSpanConfNumRepeaters could result in an hdsl2ShdslSpanInvalidNumRepeaters notification. Note the discussion on hdsl2ShdslSpanInvalidNumRepeaters in the Notifications section above. Unauthorized changes to hdsl2ShdslSpanConfProfile could have an adverse operational effect on a span. Reference the hdsl2ShdslSpanConfProfileTable discussion below. Unauthorized changes to hdsl2ShdslSpanConfAlarmProfile could have a contrary effect on notifications. Reference the hdsl2ShdslEndpointAlarmConfProfileTable discussion below. o hdsl2ShdslEndpointConfTable This table contains one object, hdsl2ShdslEndpointAlarmConfProfile, that supports SET operations. Unauthorized changes could have an undesirable notifications. Reference the hdsl2ShdslEndpointAlarmConfProfileTable discussion below. o hdsl2ShdslEndpointMaintTable The table consists of the following objects that support SET operations: * hdsl2ShdslMaintLoopbackConfig * hdsl2ShdslMaintPowerBackoff * hdsl2ShdslMaintSoftRestart Unauthorized changes to hdsl2ShdslMaintLoopbackConfig could prevent end-to-end data transfer due to an activation of a loopback. Unauthorized changes to hdsl2ShdslMaintPowerBackoff could result in an increased in bundle interference.
Unauthorized changes to hdsl2ShdslMaintSoftRestart could result in a temporary interruption of end-to-end data transfer as the result of the triggering of a soft restart. o hdsl2ShdslUnitMaintTable This table contains one object, hdsl2ShdslMaintLoopbackTimeout, that supports SET operations. An unauthorized change to this object could result in the timeout value for loopbacks being increased, decreased, or disabled. o hdsl2ShdslSpanConfProfileTable The table consists of the following objects that support SET operations: * hdsl2ShdslSpanConfWireInterface * hdsl2ShdslSpanConfMinLineRate * hdsl2ShdslSpanConfMaxLineRate * hdsl2ShdslSpanConfPSD * hdsl2ShdslSpanConfTransmissionMode * hdsl2ShdslSpanConfRemoteEnabled * hdsl2ShdslSpanConfPowerFeeding * hdsl2ShdslSpanConfCurrCondTargetMarginDown * hdsl2ShdslSpanConfWorstCaseTargetMarginDown * hdsl2ShdslSpanConfCurrCondTargetMarginUp * hdsl2ShdslSpanConfWorstCaseTargetMarginUp * hdsl2ShdslSpanConfUsedTargetMargins * hdsl2ShdslSpanConfReferenceClock * hdsl2ShdslSpanConfLineProbeEnable * hdsl2ShdslSpanConfProfileRowStatus Setting any of the objects to an incorrect value could have an adverse operational effect on a span. Unauthorized changes to the hdsl2ShdslSpanConfWireInterface could result in the failure of a span to achieve activation to a state that would permit data flow. For example, setting this object to six-wire or eight-wire operation when one of the units in the span only supports two-wire or four-wire operation would likely prevent an expected end-to-end data transfer capability. Unauthorized changes to hdsl2ShdslSpanConfMinLineRate or hdsl2ShdslSpanConfMaxLineRate could have an adverse effect on performance. The range of allowable line rates could be altered such that the span may not be able to train to a line rate that
would permit any end-user data to traverse the span or the span could train to a line rate that is either greater than or less than the line rate that the provider has pledged. Unauthorized changes to hdsl2ShdslSpanConfPSD or hdsl2ShdslSpanConfTransmissionMode could have a detrimental effect on loop reach, performance, or spectral compatibility. Unauthorized changes to hdsl2ShdslSpanConfRemoteEnable could alter the remote management ability of units. Unauthorized changes to hdsl2ShdslSpanConfPowerFeeding could shutdown units that are expected to be fed power remotely. Changing the configuration such that wetting current is not supplied may result in corrosion of electrical contacts. Unauthorized changes to hdsl2ShdslSpanConfCurrCondTargetMarginDown, hdsl2ShdslSpanConfWorstCaseTargetMarginDown, hdsl2ShdslSpanConfCurrCondTargetMarginUp, hdsl2ShdslSpanConfWorstCaseTargetMarginUp, or hdsl2ShdslSpanConfUsedTargetMargins could result in invalid parameters used to determine if a data rate can be supported under current and worst-case noise. Unauthorized changes to hdsl2ShdslSpanConfReferenceClock could result in the selection of a clock source that might either prevent any data from being transferred or impair data transfer. In addition, an increase in CRC anomalies may be experienced. Unauthorized changes to hdsl2ShdslSpanConfLineProbeEnable could have a negative effect on selecting the optimum rate or power level based on current line conditions. Unauthorized changes to row status could result in unwanted profiles being created or brought into service. Also, changes to the row status could result in profiles being inadvertently deleted or taken out of service. o hdsl2ShdslEndpointAlarmConfProfileTable The table consists of the following objects that support SET operations: * hdsl2ShdslEndpointThreshLoopAttenuation * hdsl2ShdslEndpointThreshSNRMargin * hdsl2ShdslEndpointThreshES * hdsl2ShdslEndpointThreshSES
* hdsl2ShdslEndpointThreshCRCanomalies * hdsl2ShdslEndpointThreshLOSWS * hdsl2ShdslEndpointThreshUAS * hdsl2ShdslEndpointAlarmConfProfileRowStatus Increasing any of the threshold values could result in a notification being suppressed or deferred. Setting a threshold to 0 could result in a notification being suppressed. Suppressing or deferring a notification could prevent the timely delivery of important diagnostic information. Decreasing any of the threshold values could result in a notification being sent from the network falsely reporting a threshold crossing. Changing a threshold value could also have an impact on the amount of notifications the agent sends. This document adds a paragraph, which was not in RFC 3276 [RFC3276], to the Notifications section that provides general guidance to the rate limiting of notifications. Agent implementations not adhering to the rate- limiting desires could result in notifications being generated at an uncontrolled rate. Unauthorized changes to a threshold value could result in an undesired notification rate. Unauthorized changes to row status could result in unwanted profiles being created or brought into service. Also, changes to the row status could result in profiles being inadvertently deleted or taken out of service. Some of the readable objects in this MIB module (i.e., objects with a MAX-ACCESS other than not-accessible) may be considered sensitive or vulnerable in some network environments. It is thus important to control even GET and/or NOTIFY access to these objects and possibly to even encrypt the values of these objects when sending them over the network via SNMP. These are the tables and objects and their sensitivity/vulnerability: o hdsl2ShdslInventoryTable Access to these objects would allow an intruder to obtain information about which vendor's equipment is in use on the network. Further, such information is considered sensitive in many environments for competitive reasons. * hdsl2ShdslInvVendorID * hdsl2ShdslInvVendorModelNumber * hdsl2ShdslInvVendorSerialNumber * hdsl2ShdslInvVendorEOCSoftwareVersion * hdsl2ShdslInvStandardVersion * hdsl2ShdslInvVendorListNumber
* hdsl2ShdslInvVendorIssueNumber * hdsl2ShdslInvVendorSoftwareVersion * hdsl2ShdslInvEquipmentCode * hdsl2ShdslInvVendorOther * hdsl2ShdslInvTransmissionModeCapability SNMP versions prior to SNMPv3 did not include adequate security. Even if the network itself is secure (for example by using IPsec), even then, there is no control as to who on the secure network is allowed to access and GET/SET (read/change/create/delete) the objects in this MIB module. It is RECOMMENDED that implementers consider the security features as provided by the SNMPv3 framework (see [RFC3410], Section 8), including full support for the SNMPv3 cryptographic mechanisms (for authentication and privacy). Further, deployment of SNMP versions prior to SNMPv3 is NOT RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to enable cryptographic security. It is then a customer/operator responsibility to ensure that the SNMP entity giving access to an instance of this MIB module is properly configured to give access to the objects only to those principals (users) that have legitimate rights to indeed GET or SET (change/create/delete) them.6. Acknowledgements
The authors are deeply grateful to the authors of the ADSL LINE MIB (RFC 2662 [RFC2662]), Gregory Bathrick and Faye Ly, as much of the text and structure of this document originate in their documents. The authors are also grateful to the authors of FR MFR MIB (RFC 3020 [RFC3020]), Prayson Pate, Bob Lynch, and Kenneth Rehbehn, as the majority of the Security Considerations section was lifted from their document. The authors also acknowledge the importance of the contributions and suggestions regarding interface indexing structures received from David Horton of CITR. The authors are extremely thankful to Bert Wijnen, Randy Presuhn, and C. M. Heard for their extensive review and the many suggestions they provided.
Other contributions were received from the following: Matt Beanland (Extel Communications) Philip Bergstresser (Adtran) Steve Blackwell (Centillium) Umberto Bonollo (NEC Australia) John Egan (Metalink BroadBand) Yagal Hachmon (RAD) Mark Johnson (Red Point) Sharon Mantin (Orckit) Moti Morgenstern (ECI) Raymond Murphy (Ericsson) Lee Nipper (Verilink) Randy Presuhn (BMC Software) Katy Sherman (Orckit) Mike Sneed (ECI) Jon Turney (DSL Solutions) Aron Wahl (Memotec) Bert Wijnen (Lucent) Jim Wilson (for Mindspeed) Michael Wrobel (Memotec)7. References
7.1. Normative References
[G.991.2] Blackwell, S., "Single-Pair High-Speed Digital Subscriber Line (SHDSL) Transceivers", ITU-T G.991.2, December 2003. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC2578] McCloghrie, K., Perkins, D., and J. Schoenwaelder, "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999. [RFC2579] McCloghrie, K., Perkins, D., and J. Schoenwaelder, "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999. [RFC2580] McCloghrie, K., Perkins, D., and J. Schoenwaelder, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999. [RFC2863] McCloghrie, K. and F. Kastenholz, "The Interfaces Group MIB", RFC 2863, June 2000.
[RFC3411] Harrington, D., Presuhn, R., and B. Wijnen, "An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks", STD 62, RFC 3411, December 2002. [RFC3593] Tesink, K., "Textual Conventions for MIB Modules Using Performance History Based on 15 Minute Intervals", RFC 3593, September 2003. [T1E1.4] American National Standards Institute, "ANSI T1E1.4/2000- 006", February 2000.7.2. Informative References
[RFC2662] Bathrick, G. and F. Ly, "Definitions of Managed Objects for the ADSL Lines", RFC 2662, August 1999. [RFC3020] Pate, P., Lynch, B., and K. Rehbehn, "Definitions of Managed Objects for Monitoring and Controlling the UNI/NNI Multilink Frame Relay Function", RFC 3020, December 2000. [RFC3276] Ray, B. and R. Abbi, "Definitions of Managed Objects for High Bit-Rate DSL - 2nd generation (HDSL2) and Single-Pair High-Speed Digital Subscriber Line (SHDSL) Lines Processing", RFC 3276, May 2002. [RFC3410] Case, J., Mundy, R., Partain, D., and B. Stewart, "Introduction and Applicability Statements for Internet- Standard Management Framework", RFC 3410, December 2002. [RFC3418] Presuhn, R., "Management Information Base (MIB) for the Simple Network Management Protocol (SNMP)", STD 62, RFC 3418, December 2002.
Authors' Addresses
Clay Sikes Zhone Technologies, Inc. Florida Design Center 8454 126th Ave. N. Largo, FL 33773 US Phone: +1 727 530 8257 Fax: +1 727 532 5698 EMail: csikes@zhone.com Bob Ray PESA Switching Systems, Inc. 330-A Wynn Drive Huntsville, AL 35805 US Phone: +1 256 726 9200 ext. 142 Fax: +1 256 726 9271 EMail: rray@pesa.com Rajesh Abbi Alcatel USA 2301 Sugar Bush Road Raleigh, NC 27612 US Phone: +1 919-850-6194 Fax: +1 919-850-6670 EMail: Rajesh.Abbi@alcatel.com
Full Copyright Statement Copyright (C) The Internet Society (2005). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Intellectual Property The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and BCP 79. Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf- ipr@ietf.org. Acknowledgement Funding for the RFC Editor function is currently provided by the Internet Society.