Standard view Table view

IEEE8021-DEVID-MIB

        The MIB module for managing an IEEE 802.1AR DevID (Secure Device
Identifier) Module. A DevID comprises: a DevID secret (a private
key) stored confidentially by the DevID module and accessible only 
through operations provided by the module; a DevID certificate 
containing the corresponding public key and a subject name that 
identifies the device; and a (possibly null) certificate chain. Use 
of the DevID module signing operations allows the device to prove 
possession of the DevID secret, and thus assert its identity in
authentication protocols. An initial IDevID provided by the
device supplier can be used directly or can be used to provision
one or more locally significant LDevIDs that reflect authorization 
decisions by the local network administrator with certificate fields 
that record those decisions.
An SNMP agent can manage a network element comprising one or  
many devices. They can include component (such as individual line 
cards in a chassis) or aggregate devices (such as the chassis and 
its current complement of cards). In each case a DevID module binds
DevIDs secrets and certificates to the device whose identity they can be
used to assert: they remain attached to a component device if it is
removed from the network  element, and are not retained by the SNMP
agent. The entPhysicalIndex defined by the ENTITY-MIB identifies each
device managed by the agent and is used to index tables of managed
objects for each device with a DevID module, so ENTITY-MIB objects are
correlated with and can supplement DevID information cryptographically
bound to the device.
The initial version of this ieee8021DevIDMIB used the object name
prefix 'devID' rather than 'ieee8021DevI' as recommended by 
RFC 4181. The 'devID' prefix has been retained for backwards 
compatibility and internal consistency.
Source file
IEEE8021-DEVID-MIB
Last revised
Identity
ieee8021DevIDMIB
Base OID
1.3.111.2.802.1.1.17
Imported Objects
ENTITY-MIB entPhysicalIndex PhysicalIndex
SNMP-FRAMEWORK-MIB SnmpAdminString
SNMPv2-CONF MODULE-COMPLIANCE OBJECT-GROUP
SNMPv2-SMI Counter32 MODULE-IDENTITY OBJECT-TYPE Unsigned32
SNMPv2-TC TEXTUAL-CONVENTION TruthValue
Net-SNMP examples using the rfc MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'IEEE8021-DEVID-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'IEEE8021-DEVID-MIB::ieee8021DevIDMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'IEEE8021-DEVID-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'IEEE8021-DEVID-MIB::ieee8021DevIDMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (58)
ieee8021DevIDMIB
.1.3.111.2.802.1.1.17
devIDMIBNotifications
.1.3.111.2.802.1.1.17.0
devIDMIBObjects
.1.3.111.2.802.1.1.17.1
devIDGlobalMIBObjects
.1.3.111.2.802.1.1.17.1.1
devIDMgmtMIBObjects
.1.3.111.2.802.1.1.17.1.2
devIDPublicKeyCount obsolete
SNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.17.1.2.1
devIDPublicKeyTable obsolete
.1.3.111.2.802.1.1.17.1.2.2
devIDPublicKeyEntry obsolete
ENTITY-MIBentPhysicalIndex
 .1.3.111.2.802.1.1.17.1.2.2.1
devIDPublicKeyIndex obsolete
Unsigned32
 .1.3.111.2.802.1.1.17.1.2.2.1.1
devIDPublicKeyEnabled obsolete r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.17.1.2.2.1.2
devIDPublicKeyAlgorithm obsolete
DevIDAlgorithmIdentifier
 .1.3.111.2.802.1.1.17.1.2.2.1.3
devIDPublicKeyPubkeySHA1Hash obsolete
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.111.2.802.1.1.17.1.2.2.1.4
devIDPublicKeyErrStatus obsolete
DevIDErrorStatus
 .1.3.111.2.802.1.1.17.1.2.2.1.5
devIDCredentialCount obsolete
SNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.17.1.2.3
devIDCredentialTable obsolete
.1.3.111.2.802.1.1.17.1.2.4
devIDCredentialEntry obsolete
devIDCredentialIndex
 .1.3.111.2.802.1.1.17.1.2.4.1
devIDCredentialIndex obsolete
Unsigned32
 .1.3.111.2.802.1.1.17.1.2.4.1.1
devIDCredentialErrStatus obsolete
DevIDErrorStatus
 .1.3.111.2.802.1.1.17.1.2.4.1.10
devIDCredentialEnabled obsolete r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.17.1.2.4.1.2
devIDCredentialSHA1Hash obsolete
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.111.2.802.1.1.17.1.2.4.1.3
devIDCredentialSerialNumber obsolete
OctetString
 .1.3.111.2.802.1.1.17.1.2.4.1.4
devIDCredentialIssuer obsolete
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.111.2.802.1.1.17.1.2.4.1.5
devIDCredentialSubject obsolete
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.111.2.802.1.1.17.1.2.4.1.6
devIDCredentialSubjectAltName obsolete
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.111.2.802.1.1.17.1.2.4.1.7
devIDCredentialEntityIndex obsolete
ENTITY-MIBPhysicalIndex
 .1.3.111.2.802.1.1.17.1.2.4.1.8
devIDCredentialPubkeyIndex obsolete
SNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.17.1.2.4.1.9
devIDStatisticsTable
.1.3.111.2.802.1.1.17.1.2.5
devIDStatisticsEntry
ENTITY-MIBentPhysicalIndex
 .1.3.111.2.802.1.1.17.1.2.5.1
devIDStatisticKeyGenerationCount
SNMPv2-SMICounter32
 .1.3.111.2.802.1.1.17.1.2.5.1.1
devIDStatisticKeyInsertionCount
SNMPv2-SMICounter32
 .1.3.111.2.802.1.1.17.1.2.5.1.2
devIDStatisticKeyDeletionCount
SNMPv2-SMICounter32
 .1.3.111.2.802.1.1.17.1.2.5.1.3
devIDStatisticCSRGenerationCount deprecated
SNMPv2-SMICounter32
 .1.3.111.2.802.1.1.17.1.2.5.1.4
devIDStatisticCredentialInsertionCount obsolete
SNMPv2-SMICounter32
 .1.3.111.2.802.1.1.17.1.2.5.1.5
devIDStatisticCredentialDeletionCount obsolete
SNMPv2-SMICounter32
 .1.3.111.2.802.1.1.17.1.2.5.1.6
devIDStatisticCertInsertionCount
SNMPv2-SMICounter32
 .1.3.111.2.802.1.1.17.1.2.5.1.7
devIDStatisticCertDeletionCount
SNMPv2-SMICounter32
 .1.3.111.2.802.1.1.17.1.2.5.1.8
devIDModuleTable
.1.3.111.2.802.1.1.17.1.2.6
devIDModuleEntry
ENTITY-MIBentPhysicalIndex
 .1.3.111.2.802.1.1.17.1.2.6.1
devIDModuleSupportsLDevIDs
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.17.1.2.6.1.1
devIDModuleGeneratesLDevIDKeys
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.17.1.2.6.1.2
devIDModuleInsertsLDevIDKeys
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.17.1.2.6.1.3
devIDCertTable
.1.3.111.2.802.1.1.17.1.2.7
devIDCertEntry
ENTITY-MIBentPhysicalIndexdevIDCertFingerprint
 .1.3.111.2.802.1.1.17.1.2.7.1
devIDCertFingerprint
DevIDFingerprint
 .1.3.111.2.802.1.1.17.1.2.7.1.1
devIDCertPublicKeyInfoFprint
DevIDFingerprint
 .1.3.111.2.802.1.1.17.1.2.7.1.2
devIDCertIDevID
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.17.1.2.7.1.3
devIDCertKeyEnabled
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.17.1.2.7.1.4
devIDCertEnabled
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.17.1.2.7.1.5
devIDCert
OctetString
 .1.3.111.2.802.1.1.17.1.2.7.1.6
devIDChainTable
.1.3.111.2.802.1.1.17.1.2.8
devIDChainEntry
ENTITY-MIBentPhysicalIndexdevIDCertFingerprintdevIDChainCertIndex
 .1.3.111.2.802.1.1.17.1.2.8.1
devIDChainCertIndex
SNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.17.1.2.8.1.1
devIDChainCertFingerprint
DevIDFingerprint
 .1.3.111.2.802.1.1.17.1.2.8.1.2
devIDChainCert
OctetString
 .1.3.111.2.802.1.1.17.1.2.8.1.3
devIDStatsMIBObjects
.1.3.111.2.802.1.1.17.1.3
devIDMIBConformance
.1.3.111.2.802.1.1.17.2
devIDMIBCompliances
.1.3.111.2.802.1.1.17.2.1
devIDMIBGroups
.1.3.111.2.802.1.1.17.2.2
Dependencies (7) 5 direct · 2 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. SNMPv2-TCrfc
  3. IANA-ENTITY-MIBrfc
  4. SNMPv2-CONFrfc
  5. SNMP-FRAMEWORK-MIBrfc
  6. UUID-TC-MIBrfc
  7. ENTITY-MIBrfc
  8. IEEE8021-DEVID-MIBrfcselected
Type Definitions (3)
DevIDAlgorithmIdentifier
Enumeration
rsaEncryption(1)
idecPublicKey(2)
DevIDErrorStatus
Enumeration
none(1)
internalError(2)
DevIDFingerprint
OctetString range: 0..49
Conformance Groups (4)
devIDMIBObjectGroup obsolete
devIDPublicKeyCount devIDPublicKeyEnabled devIDPublicKeyAlgorithm devIDPublicKeyPubkeySHA1Hash devIDPublicKeyErrStatus devIDCredentialCount devIDCredentialEnabled devIDCredentialSHA1Hash devIDCredentialSerialNumber devIDCredentialIssuer devIDCredentialSubject devIDCredentialSubjectAltName devIDCredentialEntityIndex devIDCredentialPubkeyIndex devIDCredentialErrStatus devIDStatisticKeyGenerationCount devIDStatisticKeyInsertionCount devIDStatisticKeyDeletionCount devIDStatisticCSRGenerationCount devIDStatisticCredentialInsertionCount devIDStatisticCredentialDeletionCount
A collection of objects providing public key
manageability, credential manageability and stats.
 .1.3.111.2.802.1.1.17.2.2.1
devIDMIBModuleGroup
devIDModuleSupportsLDevIDs devIDModuleGeneratesLDevIDKeys devIDModuleInsertsLDevIDKeys
DevID MIB objects describing module capabilities.
 .1.3.111.2.802.1.1.17.2.2.2
devIDMIBCertificateGroup
devIDCertPublicKeyInfoFprint devIDCertIDevID devIDCertKeyEnabled devIDCertEnabled devIDCert devIDChainCertFingerprint devIDChainCert
DevID MIB objects for DevID public key,
certificate, and certificate chain inventory operations.
 .1.3.111.2.802.1.1.17.2.2.3
devIDMIBAuditGroup
devIDStatisticKeyGenerationCount devIDStatisticKeyInsertionCount devIDStatisticKeyDeletionCount devIDStatisticCertInsertionCount devIDStatisticCertDeletionCount
DevID MIB objects supporting DevID operation auditing.
 .1.3.111.2.802.1.1.17.2.2.4
Compliance Statements (2)

OID .1.3.111.2.802.1.1.17.2.1.1
Module Compliance for DevID MIB-2009.
Required groups
mandatory devIDMIBObjectGroup

OID .1.3.111.2.802.1.1.17.2.1.2
Module Compliance for DevID MIB-2018.
Required groups
mandatory devIDMIBModuleGroup
mandatory devIDMIBCertificateGroup
mandatory devIDMIBAuditGroup