A3COM-HUAWEI-IPA-MIB

-- ============================================================================
-- Copyright (C) 2003 by HUAWEI 3COM TECHNOLOGIES.  All rights reserved.
--
-- Description: This MIB is designed for IP Accounting Software
-- Reference:
-- Version: V1.0
-- History:
-- V1.0 created by kongfanhua.
-- ============================================================================
A3COM-HUAWEI-IPA-MIB DEFINITIONS ::= BEGIN

IMPORTS
    MODULE-IDENTITY, OBJECT-TYPE, Counter32, Counter64,
    Integer32, IpAddress
        FROM SNMPv2-SMI
    RowStatus, TEXTUAL-CONVENTION
        FROM SNMPv2-TC
    h3cCommon
        FROM A3COM-HUAWEI-OID-MIB;


h3cIpa MODULE-IDENTITY
       LAST-UPDATED "200411010000Z"
       ORGANIZATION
            "Huawei 3Com Technologies Co., Ltd."
       CONTACT-INFO
            "Platform Team Huawei 3Com Technologies Co., Ltd.
            Hai-Dian District Beijing P.R. China
            http://www.huawei-3com.com
            Zip:100085
            "
       DESCRIPTION
            "
            This MIB is used to acquire ip accounting information.

            The h3cIpaAccountListTable is set by user to define the group of ip address
            which they want to account.
            This module can be enabled in each port,
            which was defined in the h3cIpaIfConfigTable.

            If this module has been enabled, the packets will be accounted
            when crossing the router from the ports having been enabled by user,
            according to whether the source/destination ip address is in h3cIpaAccountListTable
            and what kinds of function(in/out/both/fw) are enabled
            and also whether it is denied by the firewall.
            If it is denied by the firewall, it will be accounted in h3cIpaFWListTable
            If it is accepted by the firewall, and ip source or ip destination is in h3cIpaAccountListTable,
            it will be accounted in h3cIpaIntListTable, otherwise it will be accounted
            in h3cIpaExtListTable.

            And IP Accounting function also differentiates the packets by direction.
            If the packet is inbound, the accounting information can be seen as
              h3cIpaIntListInPackets/h3cIpaIntListInBytes in h3cIpaIntListTable,
              h3cIpaExtListInPackets/h3cIpaExtListInBytes in h3cIpaExtListTable,
              h3cIpaFWListInPackets/h3cIpaFWListInBytes in h3cIpaFWListTable.

            or else the accounting information can be seen as
              h3cIpaIntListOutPackets/h3cIpaIntListOutBytes in h3cIpaIntListTable,
              h3cIpaExtListOutPackets/h3cIpaExtListOutBytes in h3cIpaExtListTable,
              h3cIpaFWListOutPackets/h3cIpaFWListOutBytes in h3cIpaFWListTable.
            "
        ::= { h3cCommon 25 }

   InterfaceIndex ::= TEXTUAL-CONVENTION
       DISPLAY-HINT "d"
       STATUS       current
       DESCRIPTION
               "A unique value, greater than zero, for each interface
               or interface sub-layer in the managed system.  It is
               recommended that values are assigned contiguously
               starting from 1.  The value for each interface sub-
               layer must remain constant at least from one re-
               initialization of the entity's network management
               system to the next re-initialization."
       SYNTAX       Integer32 (1..2147483647)


-- =============================================================================
   -- h3cIpaGlobalConfigTable
   --  The Global Data Set By User of IPA

    h3cIpaGlobalStats OBJECT IDENTIFIER ::= { h3cIpa 1 }

    h3cIpaGlobalEnable OBJECT-TYPE
        SYNTAX      INTEGER {
                        disabled(1),  -- the IPA function is disabled
                        enabled(2)    -- the IPA function is enabled
                       }
           MAX-ACCESS  read-write
        STATUS      current
        DESCRIPTION
               "
               The indication of whether Ip Accounting function is enabled.
               If it is disabled, ip packets will not be accounted.
               "
        DEFVAL        { disabled }
        ::= { h3cIpaGlobalStats 1 }

    h3cIpaTimeOutSeconds OBJECT-TYPE
        SYNTAX      Integer32
        MAX-ACCESS  read-write
        STATUS      current
        DESCRIPTION
               "
               The value of List aging timeout.
               The unit is second.
               If exceeding the interval, the item in h3cIpaIntListTable, h3cIpaExtListTable
               and h3cIpaFWListTable will be removed automaticlly.
               The range is (3600..604800).
               "
        DEFVAL        { 43200 }
        ::= { h3cIpaGlobalStats 2 }

    h3cIpaIntListMaxItemNum OBJECT-TYPE
        SYNTAX      Integer32
        MAX-ACCESS  read-write
        STATUS      current
        DESCRIPTION
               "
               The max number of items in h3cIpaIntListTable.
               The range is (0..16384).
               "
        DEFVAL        { 512 }
        ::= { h3cIpaGlobalStats 3 }

    h3cIpaExtListMaxItemNum OBJECT-TYPE
        SYNTAX      Integer32
        MAX-ACCESS  read-write
        STATUS      current
        DESCRIPTION
               "
               The max number of items in h3cIpaExtListTable.
               The range is (0..8192).
               "
        DEFVAL        { 0 }
        ::= { h3cIpaGlobalStats 4 }

    h3cIpaFWListMaxItemNum OBJECT-TYPE
        SYNTAX      Integer32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
               "
               The max number of items in h3cIpaFWListTable.
               "
        ::= { h3cIpaGlobalStats 5 }

     h3cIpaAccountListMaxItemNum OBJECT-TYPE
        SYNTAX      Integer32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
               "
               The max number of items in h3cIpaAccountListTable.
               "
        ::= { h3cIpaGlobalStats 6 }

     h3cIpaAccountListNextIndex OBJECT-TYPE
        SYNTAX      Integer32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
               "
               The next available index for creating rows of h3cIpaAccountListTable.
               If the value is zero, it means the table is full and no available index
               can be used.
               "
        ::= { h3cIpaGlobalStats 7 }

    h3cIpaListCleaningFlag OBJECT-TYPE
        SYNTAX      INTEGER {
                        idle(1),             -- idling
                        cleaningAll(2),      -- clearing all of the tables below.
                        cleaningIntList(3),  -- clearing h3cIpaIntListTable
                        cleaningExtList(4),  -- clearing h3cIpaExtListTable
                        cleaningFWList(5)    -- clearing h3cIpaFWListTable
                    }
          MAX-ACCESS  read-write
        STATUS      current
        DESCRIPTION
               "
               Cleaning List in this module.
               The default value is idle. If user wants to clean some lists, he
               can set the value to 2, 3, 4 and 5 to clean the corresponding list.
               After the operation, the value will return to idle.
               "
        DEFVAL        { idle }
        ::= { h3cIpaGlobalStats 8 }


-- =============================================================================
   -- h3cIpaIfConfigTable
   --  enable or disable and show ip accounting function under interface

     h3cIpaIfConfigTable OBJECT-TYPE
         SYNTAX   SEQUENCE OF H3cIpaIfConfigEntry
         MAX-ACCESS   not-accessible
         STATUS   current
         DESCRIPTION
            "
            Enable or disable the ip accounting inbound/outbound
            function under a particular interface.
            "
         ::= { h3cIpa 2 }

    h3cIpaIfConfigEntry OBJECT-TYPE
         SYNTAX   H3cIpaIfConfigEntry
         MAX-ACCESS   not-accessible
         STATUS   current
         DESCRIPTION
            "
            Entry of the table.
            "
         INDEX { h3cIpaIfConfigIfIndex }
         ::= { h3cIpaIfConfigTable 1 }

    H3cIpaIfConfigEntry ::=
        SEQUENCE {
            h3cIpaIfConfigIfIndex
                InterfaceIndex,
            h3cIpaIfConfigInEnable
                INTEGER,
            h3cIpaIfConfigOutEnable
                INTEGER,
            h3cIpaIfConfigFWEnable
                INTEGER
        }

    h3cIpaIfConfigIfIndex OBJECT-TYPE
        SYNTAX   InterfaceIndex
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
            "It equals to ifIndex"
        ::= { h3cIpaIfConfigEntry 1 }

    h3cIpaIfConfigInEnable OBJECT-TYPE
        SYNTAX      INTEGER {
            disabled(1),  -- inbound packets are not accounted in this interface
            enabled(2)    -- inbound packets are accounted in this interface
        }
        MAX-ACCESS  read-write
        STATUS      current

        DESCRIPTION
            "
            This object is applicable to h3cIpaIntListTable and h3cIpaExtListTable.
            If the value is disabled, inbound ip packets are not accounted.
            "
        DEFVAL        { disabled }
        ::= { h3cIpaIfConfigEntry 2 }

    h3cIpaIfConfigOutEnable OBJECT-TYPE
        SYNTAX      INTEGER {
            disabled(1),  -- outbound packets are not accounted in this interface
            enabled(2)    -- outbound packets are accounted in this interface
        }
        MAX-ACCESS  read-write
        STATUS      current
        DESCRIPTION
            "
            This object is applicable to h3cIpaIntListTable and h3cIpaExtListTable.
            If the value is disabled, outbound ip packets are not accounted.
            "
        DEFVAL        { disabled }
        ::= { h3cIpaIfConfigEntry 3 }

    h3cIpaIfConfigFWEnable OBJECT-TYPE
        SYNTAX      INTEGER {
            nodirection(1),
            inbound(2),
            outbound(3),
            bidirection(4)
        }
        MAX-ACCESS  read-write
        STATUS      current
        DESCRIPTION
            "
            This object is applicable to h3cIpaFWListTable only.

            If the value is 'inbound', then inbound ip packets which are denied by firewall
            are accounted.
            If the value is 'outbound', then outbound ip packets which were denied by firewall
            are accounted.
            If the value is 'nodirection', neither inbound nor outbound ip packets
            which were denied by firewall are accounted.
            If the value is 'bidirection', both inbound and outbound ip packets which
            were denied by firewall are accounted.
            "
        DEFVAL        { nodirection }
        ::= { h3cIpaIfConfigEntry 4 }

-- =============================================================================
     -- h3cIpaAccountListTable
     -- The function of h3cIpaAccountListTable is to classify the ip packets
     -- h3cIpaAccountListTable is set and deleted by user

    h3cIpaAccountListTable OBJECT-TYPE
        SYNTAX   SEQUENCE OF H3cIpaAccountListEntry
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
            "
            The List is used by user to sort packets into two groups
            by source or destination ip address.
            When source/destination ip address of a packet matches a item in this table,
            the packet is accounted in h3cIpaIntListTable.
            When source/destination ip address of a packet does not match any item
            in this table, the packet is accounted in h3cIpaExtListTable.
            "
         ::= { h3cIpa 3 }

    h3cIpaAccountListEntry OBJECT-TYPE
        SYNTAX   H3cIpaAccountListEntry
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
            "
            Entry of the table.
            "
        INDEX { h3cIpaAccountListIndex }
        ::= { h3cIpaAccountListTable 1 }

    H3cIpaAccountListEntry ::=
        SEQUENCE {
            h3cIpaAccountListIndex
                Integer32,
            h3cIpaAccountListIpAddr
                IpAddress,
            h3cIpaAccountListIpMask
                IpAddress,
            h3cIpaAccountListRowStatus
                RowStatus
        }

    h3cIpaAccountListIndex OBJECT-TYPE
        SYNTAX   Integer32(1..2147483647)
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
            "
            The Index of the table.
            "
        ::= { h3cIpaAccountListEntry 1 }

    h3cIpaAccountListIpAddr OBJECT-TYPE
        SYNTAX      IpAddress
        MAX-ACCESS  read-create
        STATUS      current
        DESCRIPTION
            "
            The IP address to which this entry's addressing information
            pertains.
            "
        ::= { h3cIpaAccountListEntry 2 }

    h3cIpaAccountListIpMask OBJECT-TYPE
        SYNTAX      IpAddress
        MAX-ACCESS  read-create
        STATUS      current
        DESCRIPTION
            "
            The subnet mask associated with the IP address of this
            entry.  The value of the mask is an IP address with all the
            network bits set to 1 and all the hosts bits set to 0.
            "
        ::= { h3cIpaAccountListEntry 3 }

    h3cIpaAccountListRowStatus  OBJECT-TYPE
        SYNTAX RowStatus
        MAX-ACCESS read-create
        STATUS current
        DESCRIPTION
           "
           The row status of the entry,
           Supporting CreateAndGo and Destroy operation.
           "
        ::= { h3cIpaAccountListEntry 4 }


-- =============================================================================
     -- h3cIpaIntListTable
     -- for showing accounting information of packet not match h3cIpaAccountListTable

    h3cIpaIntListTable OBJECT-TYPE
        SYNTAX   SEQUENCE OF H3cIpaIntListEntry
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
            "
            If matching the ip address recorded in h3cIpaAccountListTable
            and not denied by the firewall, the packets will be accounted
            in this list.
            "
        ::= { h3cIpa 4 }

    h3cIpaIntListEntry OBJECT-TYPE
        SYNTAX   H3cIpaIntListEntry
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
            "
            Entry of the table.
            "
        INDEX { h3cIpaIntListIpSrc,
                h3cIpaIntListIpDst,
                h3cIpaIntListProtocol
              }
        ::= { h3cIpaIntListTable 1 }

    H3cIpaIntListEntry ::=
        SEQUENCE {
            h3cIpaIntListIpSrc
                IpAddress,
            h3cIpaIntListIpDst
                IpAddress,
            h3cIpaIntListProtocol
                Integer32,
            h3cIpaIntListInPackets
                Counter32,
            h3cIpaIntListInBytes
                Counter64,
            h3cIpaIntListOutPackets
                Counter32,
            h3cIpaIntListOutBytes
                Counter64
        }

    h3cIpaIntListIpSrc OBJECT-TYPE
        SYNTAX      IpAddress
        MAX-ACCESS  not-accessible
        STATUS      current
        DESCRIPTION
            "
            Source IP-address of these accounted packets.
            "
        ::= { h3cIpaIntListEntry 1 }

    h3cIpaIntListIpDst OBJECT-TYPE
        SYNTAX      IpAddress
        MAX-ACCESS  not-accessible
        STATUS      current
        DESCRIPTION
            "
            Destination IP-address of these accounted packets.
            "
        ::= { h3cIpaIntListEntry 2 }

    h3cIpaIntListProtocol OBJECT-TYPE
        SYNTAX Integer32(0..2147483647)
        MAX-ACCESS  not-accessible
        STATUS      current
        DESCRIPTION
            "
            The type of these accounted IP packets defined in RFC 1700.
            "
        ::= { h3cIpaIntListEntry 3 }

    h3cIpaIntListInPackets OBJECT-TYPE
        SYNTAX      Counter32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of inbound packets in h3cIpaIntListTable.
            "
        ::= { h3cIpaIntListEntry 4 }

    h3cIpaIntListInBytes OBJECT-TYPE
        SYNTAX      Counter64
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of inbound bytes in h3cIpaIntListTable.
            "
        ::= { h3cIpaIntListEntry 5 }

    h3cIpaIntListOutPackets OBJECT-TYPE
        SYNTAX      Counter32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of outbound Packets in h3cIpaIntListTable.
            "
        ::= { h3cIpaIntListEntry 6 }

    h3cIpaIntListOutBytes OBJECT-TYPE
        SYNTAX      Counter64
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of outbound bytes in h3cIpaIntListTable.
            "
        ::= { h3cIpaIntListEntry 7 }

-- =============================================================================
    -- h3cIpaExtListTable
    -- for showing accounting information of packet not match h3cIpaAccountListTable

    h3cIpaExtListTable OBJECT-TYPE
        SYNTAX   SEQUENCE OF H3cIpaExtListEntry
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
            "
            If mismatching the ip address recorded in the h3cIpaAccountListTable
            and not denied by the firewall, the packets will be accounted
            in this list.
            "
        ::= { h3cIpa 5 }

    h3cIpaExtListEntry OBJECT-TYPE
        SYNTAX   H3cIpaExtListEntry
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
           "
           Entry of the table.
           "
        INDEX { h3cIpaExtListIpSrc,
                h3cIpaExtListIpDst,
                h3cIpaExtListProtocol
              }
        ::= { h3cIpaExtListTable 1 }

    H3cIpaExtListEntry ::=
        SEQUENCE {
            h3cIpaExtListIpSrc
                IpAddress,
            h3cIpaExtListIpDst
                IpAddress,
            h3cIpaExtListProtocol
                Integer32,
            h3cIpaExtListInPackets
                Counter32,
            h3cIpaExtListInBytes
                Counter64,
            h3cIpaExtListOutPackets
                Counter32,
            h3cIpaExtListOutBytes
                Counter64
        }

    h3cIpaExtListIpSrc OBJECT-TYPE
        SYNTAX      IpAddress
        MAX-ACCESS  not-accessible
        STATUS      current
        DESCRIPTION
            "
            Source IP-address of these accounted packets.
            "
        ::= { h3cIpaExtListEntry 1 }

    h3cIpaExtListIpDst OBJECT-TYPE
        SYNTAX      IpAddress
        MAX-ACCESS  not-accessible
        STATUS      current
        DESCRIPTION
            "
            Destination IP-address of these accounted packets.
            "
        ::= { h3cIpaExtListEntry 2 }

    h3cIpaExtListProtocol OBJECT-TYPE
        SYNTAX Integer32(0..2147483647)
        MAX-ACCESS  not-accessible
        STATUS      current
        DESCRIPTION
            "
            The value indicates the value of the 'protocol' field
            which is part of ip packet header.
            "
        ::= { h3cIpaExtListEntry 3 }

    h3cIpaExtListInPackets OBJECT-TYPE
        SYNTAX      Counter32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of inbound packets in h3cIpaExtListTable.
            "
        ::= { h3cIpaExtListEntry 4 }

    h3cIpaExtListInBytes OBJECT-TYPE
        SYNTAX      Counter64
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of inbound bytes in h3cIpaExtListTable.
            "
        ::= { h3cIpaExtListEntry 5 }

    h3cIpaExtListOutPackets OBJECT-TYPE
        SYNTAX      Counter32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of outbound packets in h3cIpaExtListTable.
            "
        ::= { h3cIpaExtListEntry 6 }

    h3cIpaExtListOutBytes OBJECT-TYPE
        SYNTAX      Counter64
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of outbound bytes in h3cIpaExtListTable.
            "
        ::= { h3cIpaExtListEntry 7 }

-- =============================================================================
    -- h3cIpaFWListTable
    -- for showing accounting information of packet denied by the firewall

    h3cIpaFWListTable OBJECT-TYPE
        SYNTAX   SEQUENCE OF H3cIpaFWListEntry
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
            "
            If the packet is denied by the firewall,
            it will be accounted in this list.
            "
        ::= { h3cIpa 6 }

    h3cIpaFWListEntry OBJECT-TYPE
        SYNTAX   H3cIpaFWListEntry
        MAX-ACCESS   not-accessible
        STATUS   current
        DESCRIPTION
            "
            Entry of the table.
            "
        INDEX { h3cIpaFWListIpSrc,
                h3cIpaFWListIpDst
              }
        ::= { h3cIpaFWListTable 1 }

    H3cIpaFWListEntry ::=
        SEQUENCE {
            h3cIpaFWListIpSrc
                IpAddress,
            h3cIpaFWListIpDst
                IpAddress,
            h3cIpaFWListInPackets
                Counter32,
            h3cIpaFWListInBytes
                Counter64,
            h3cIpaFWListOutPackets
                Counter32,
            h3cIpaFWListOutBytes
                Counter64
        }

    h3cIpaFWListIpSrc OBJECT-TYPE
        SYNTAX      IpAddress
        MAX-ACCESS  not-accessible
        STATUS      current
        DESCRIPTION
             "
             Source IP-address of these accounted packets.
             "
        ::= { h3cIpaFWListEntry 1 }

    h3cIpaFWListIpDst OBJECT-TYPE
        SYNTAX      IpAddress
        MAX-ACCESS  not-accessible
        STATUS      current
        DESCRIPTION
             "
             Destination IP-address of these accounted packets.
             "
        ::= { h3cIpaFWListEntry 2 }

    h3cIpaFWListInPackets OBJECT-TYPE
        SYNTAX      Counter32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
             "
             The number of outbound packets in h3cIpaFWListTable.
             "
        ::= { h3cIpaFWListEntry 3 }

    h3cIpaFWListInBytes OBJECT-TYPE
        SYNTAX      Counter64
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of inbound bytes in h3cIpaFWListTable.
            "
        ::= { h3cIpaFWListEntry 4 }

    h3cIpaFWListOutPackets OBJECT-TYPE
        SYNTAX      Counter32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION
            "
            The number of outbound packets in h3cIpaFWListTable.
            "
        ::= { h3cIpaFWListEntry 5 }

   h3cIpaFWListOutBytes OBJECT-TYPE
       SYNTAX      Counter64
       MAX-ACCESS  read-only
       STATUS      current
       DESCRIPTION
           "
           The number of outbound bytes in h3cIpaFWListTable.
           "
       ::= { h3cIpaFWListEntry 6 }

END