Standard view Table view

SNMP-TLS-TM-MIB

        
The TLS Transport Model MIB
        
Copyright (c) 2010-2011 IETF Trust and the persons identified
as authors of the code.  All rights reserved.
        
Redistribution and use in source and binary forms, with or
without modification, is permitted pursuant to, and subject
to the license terms contained in, the Simplified BSD License
set forth in Section 4.c of the IETF Trust's Legal Provisions
Relating to IETF Documents
(http://trustee.ietf.org/license-info).

Source file: SNMP-TLS-TM-MIB
Last revised: 19 Jul 2011, 00:00 UTC
Identity: snmpTlstmMIB
Base OID: 1.3.6.1.2.1.198

Imported Objects

SNMP-FRAMEWORK-MIB	SnmpAdminString
SNMP-TARGET-MIB	snmpTargetAddrName snmpTargetParamsName
SNMPv2-CONF	MODULE-COMPLIANCE (no object page) NOTIFICATION-GROUP (no object page) OBJECT-GROUP (no object page)
SNMPv2-SMI	Counter32 Gauge32 mib-2 MODULE-IDENTITY (no object page) NOTIFICATION-TYPE (no object page) OBJECT-IDENTITY (no object page) OBJECT-TYPE (no object page) snmpDomains Unsigned32
SNMPv2-TC	AutonomousType RowStatus StorageType TEXTUAL-CONVENTION (no object page) TimeStamp

Net-SNMP examples using the rfc MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity

/usr/bin/snmptranslate -Pud -Ir -On -m 'SNMP-TLS-TM-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'SNMP-TLS-TM-MIB::snmpTlstmMIB'

Walk the MIB subtree

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'SNMP-TLS-TM-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'SNMP-TLS-TM-MIB::snmpTlstmMIB'

How SNMP, Net-SNMP, MIB paths, and variants work

Objects (54)

snmpTlstmMIB		`.1.3.6.1.2.1.198`
snmpTlstmNotifications		`.1.3.6.1.2.1.198.0`
snmpTlstmIdentities		`.1.3.6.1.2.1.198.1`
snmpTlstmCertToTSNMIdentities		`.1.3.6.1.2.1.198.1.1`
snmpTlstmCertSpecified		`.1.3.6.1.2.1.198.1.1.1`
snmpTlstmCertSANRFC822Name		`.1.3.6.1.2.1.198.1.1.2`
snmpTlstmCertSANDNSName		`.1.3.6.1.2.1.198.1.1.3`
snmpTlstmCertSANIpAddress		`.1.3.6.1.2.1.198.1.1.4`
snmpTlstmCertSANAny		`.1.3.6.1.2.1.198.1.1.5`
snmpTlstmCertCommonName		`.1.3.6.1.2.1.198.1.1.6`
snmpTlstmObjects		`.1.3.6.1.2.1.198.2`
snmpTlstmSession		`.1.3.6.1.2.1.198.2.1`
snmpTlstmSessionOpens	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.1`
snmpTlstmSessionInvalidCaches	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.10`
snmpTlstmSessionClientCloses	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.2`
snmpTlstmSessionOpenErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.3`
snmpTlstmSessionAccepts	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.4`
snmpTlstmSessionServerCloses	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.5`
snmpTlstmSessionNoSessions	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.6`
snmpTlstmSessionInvalidClientCertificates	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.7`
snmpTlstmSessionUnknownServerCertificate	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.8`
snmpTlstmSessionInvalidServerCertificates	SNMPv2-SMICounter32	`.1.3.6.1.2.1.198.2.1.9`
snmpTlstmConfig		`.1.3.6.1.2.1.198.2.2`
snmpTlstmCertificateMapping		`.1.3.6.1.2.1.198.2.2.1`
snmpTlstmCertToTSNCount	SNMPv2-SMIGauge32	`.1.3.6.1.2.1.198.2.2.1.1`
snmpTlstmCertToTSNTableLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.198.2.2.1.2`
snmpTlstmCertToTSNTable		`.1.3.6.1.2.1.198.2.2.1.3`
snmpTlstmCertToTSNEntry	snmpTlstmCertToTSNID	`.1.3.6.1.2.1.198.2.2.1.3.1`
snmpTlstmCertToTSNID	Unsigned32	`.1.3.6.1.2.1.198.2.2.1.3.1.1`
snmpTlstmCertToTSNFingerprint r/w	OctetString	`.1.3.6.1.2.1.198.2.2.1.3.1.2`
snmpTlstmCertToTSNMapType r/w	SNMPv2-TCAutonomousType	`.1.3.6.1.2.1.198.2.2.1.3.1.3`
snmpTlstmCertToTSNData r/w	OctetString	`.1.3.6.1.2.1.198.2.2.1.3.1.4`
snmpTlstmCertToTSNStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.198.2.2.1.3.1.5`
snmpTlstmCertToTSNRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.198.2.2.1.3.1.6`
snmpTlstmParamsCount	SNMPv2-SMIGauge32	`.1.3.6.1.2.1.198.2.2.1.4`
snmpTlstmParamsTableLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.198.2.2.1.5`
snmpTlstmParamsTable		`.1.3.6.1.2.1.198.2.2.1.6`
snmpTlstmParamsEntry	SNMP-TARGET-MIBsnmpTargetParamsName	`.1.3.6.1.2.1.198.2.2.1.6.1`
snmpTlstmParamsClientFingerprint r/w	SnmpTLSFingerprint	`.1.3.6.1.2.1.198.2.2.1.6.1.1`
snmpTlstmParamsStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.198.2.2.1.6.1.2`
snmpTlstmParamsRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.198.2.2.1.6.1.3`
snmpTlstmAddrCount	SNMPv2-SMIGauge32	`.1.3.6.1.2.1.198.2.2.1.7`
snmpTlstmAddrTableLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.198.2.2.1.8`
snmpTlstmAddrTable		`.1.3.6.1.2.1.198.2.2.1.9`
snmpTlstmAddrEntry	SNMP-TARGET-MIBsnmpTargetAddrName	`.1.3.6.1.2.1.198.2.2.1.9.1`
snmpTlstmAddrServerFingerprint r/w	SnmpTLSFingerprint	`.1.3.6.1.2.1.198.2.2.1.9.1.1`
snmpTlstmAddrServerIdentity r/w	SNMP-FRAMEWORK-MIBSnmpAdminString	`.1.3.6.1.2.1.198.2.2.1.9.1.2`
snmpTlstmAddrStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.198.2.2.1.9.1.3`
snmpTlstmAddrRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.198.2.2.1.9.1.4`
snmpTlstmConformance		`.1.3.6.1.2.1.198.3`
snmpTlstmCompliances		`.1.3.6.1.2.1.198.3.1`
snmpTlstmGroups		`.1.3.6.1.2.1.198.3.2`
snmpTLSTCPDomain		`.1.3.6.1.6.1.8`
snmpDTLSUDPDomain		`.1.3.6.1.6.1.9`

Dependencies (5) 5 direct Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree

SNMP-TLS-TM-MIBrfcselected
- SNMP-FRAMEWORK-MIBrfc1 symbol
  - SNMPv2-CONFrfc2 symbols
    - SNMPv2-SMIrfc3 symbols
  - SNMPv2-SMIrfcshared4 symbols
  - SNMPv2-TCrfc1 symbol
    - SNMPv2-SMIrfcshared1 symbol
- SNMP-TARGET-MIBrfc2 symbols
  - SNMP-FRAMEWORK-MIBrfcshared4 symbols
  - SNMPv2-CONFrfcshared2 symbols
  - SNMPv2-SMIrfcshared5 symbols
  - SNMPv2-TCrfcshared7 symbols
- SNMPv2-CONFrfcshared3 symbols
- SNMPv2-SMIrfcshared9 symbols
- SNMPv2-TCrfcshared5 symbols

Dependency-first compile order

Type Definitions (2)

SnmpTLSAddress	OctetString	`range: 1..255`
SnmpTLSFingerprint	OctetString	`range: 0..255`

Conformance Groups (4)

snmpTlstmStatsGroup	snmpTlstmSessionOpens snmpTlstmSessionClientCloses snmpTlstmSessionOpenErrors snmpTlstmSessionAccepts snmpTlstmSessionServerCloses snmpTlstmSessionNoSessions snmpTlstmSessionInvalidClientCertificates snmpTlstmSessionUnknownServerCertificate snmpTlstmSessionInvalidServerCertificates snmpTlstmSessionInvalidCaches A collection of objects for maintaining statistical information of an SNMP engine that implements the SNMP TLS Transport Model.	`.1.3.6.1.2.1.198.3.2.1`
snmpTlstmIncomingGroup	snmpTlstmCertToTSNCount snmpTlstmCertToTSNTableLastChanged snmpTlstmCertToTSNFingerprint snmpTlstmCertToTSNMapType snmpTlstmCertToTSNData snmpTlstmCertToTSNStorageType snmpTlstmCertToTSNRowStatus A collection of objects for maintaining incoming connection certificate mappings to tmSecurityNames of an SNMP engine that implements the SNMP TLS Transport Model.	`.1.3.6.1.2.1.198.3.2.2`
snmpTlstmOutgoingGroup	snmpTlstmParamsCount snmpTlstmParamsTableLastChanged snmpTlstmParamsClientFingerprint snmpTlstmParamsStorageType snmpTlstmParamsRowStatus snmpTlstmAddrCount snmpTlstmAddrTableLastChanged snmpTlstmAddrServerFingerprint snmpTlstmAddrServerIdentity snmpTlstmAddrStorageType snmpTlstmAddrRowStatus A collection of objects for maintaining outgoing connection certificates to use when opening connections as a result of SNMP-TARGET-MIB settings.	`.1.3.6.1.2.1.198.3.2.3`
snmpTlstmNotificationGroup	snmpTlstmServerCertificateUnknown snmpTlstmServerInvalidCertificate Notifications	`.1.3.6.1.2.1.198.3.2.4`

Compliance Statements (1)

OID .1.3.6.1.2.1.198.3.1.1

The compliance statement for SNMP engines that support the
SNMP-TLS-TM-MIB

Required groups

mandatory	snmpTlstmStatsGroup
mandatory	snmpTlstmIncomingGroup
mandatory	snmpTlstmOutgoingGroup
mandatory	snmpTlstmNotificationGroup

Notifications / Traps (2)

Name	OID	Description
snmpTlstmServerCertificateUnknown snmpTlstmSessionUnknownServerCertificate	`.1.3.6.1.2.1.198.0.1`	Notification that the server certificate presented by an SNMP over (D)TLS server was invalid because no configured fingerprint or CA was acceptable to validate it. This may be because there was no entry in the snmpTlstmAddrTable or because no path could be found to known Certification Authority. To avoid notification loops, this notification MUST NOT be sent to servers that themselves have triggered the notification.
snmpTlstmServerInvalidCertificate snmpTlstmAddrServerFingerprint snmpTlstmSessionInvalidServerCertificates	`.1.3.6.1.2.1.198.0.2`	Notification that the server certificate presented by an SNMP over (D)TLS server could not be validated even if the fingerprint or expected validation path was known. That is, a cryptographic validation error occurred during certificate validation processing. To avoid notification loops, this notification MUST NOT be sent to servers that themselves have triggered the notification.