Initial commitHEADmain

1 files changed, 792 insertions, 0 deletions

diff --git a/MIBS/cisco/CISCO-IP-URPF-MIB b/MIBS/cisco/CISCO-IP-URPF-MIB
new file mode 100644
index 0000000..98e9a6f
--- /dev/null
+++ b/MIBS/cisco/CISCO-IP-URPF-MIB
@@ -0,0 +1,792 @@
+-- ******************************************************************
+-- CISCO-IP-URPF-MIB
+--   
+-- This module is used for monitoring the state of Unicast Reverse
+-- Path Forwarding (URPF) checking.
+--   
+-- September 2004, Michael Grobelch
+--   
+-- Copyright (c) 2004-2006-2012 by Cisco Systems Inc.
+--   
+-- All rights reserved.
+-- *****************************************************************
+
+CISCO-IP-URPF-MIB DEFINITIONS ::= BEGIN
+
+IMPORTS
+    MODULE-IDENTITY,
+    OBJECT-TYPE,
+    Gauge32,
+    Integer32,
+    Counter32,
+    Unsigned32,
+    NOTIFICATION-TYPE
+        FROM SNMPv2-SMI
+    MODULE-COMPLIANCE,
+    NOTIFICATION-GROUP,
+    OBJECT-GROUP
+        FROM SNMPv2-CONF
+    TEXTUAL-CONVENTION,
+    TimeStamp,
+    TruthValue
+        FROM SNMPv2-TC
+    SnmpAdminString
+        FROM SNMP-FRAMEWORK-MIB
+    ifIndex
+        FROM IF-MIB
+    ciscoMgmt
+        FROM CISCO-SMI;
+
+
+ciscoIpUrpfMIB MODULE-IDENTITY
+    LAST-UPDATED    "201112290000Z"
+    ORGANIZATION    "Cisco System, Inc."
+    CONTACT-INFO
+            "Postal: Cisco Systems, Inc.
+            170 West Tasman Drive
+            San Jose, CA 95134-1706
+            USA
+
+            Tel: +1 800 553-NETS
+
+            E-mail: cs-cef@cisco.com"
+    DESCRIPTION
+        "Unicast Reverse Path Forwarding (URPF) is a function that
+        checks the validity of the source address of IP packets
+        received on an interface. This in an attempt to prevent
+        Denial of Service attacks based on IP address spoofing.
+
+        URPF checks validity of a source address by determining
+        whether the packet would be successfully routed as a
+        destination address. 
+        Based on configuration, the check made
+        can be for existence of any route for the address, or more
+        strictly for a route out the interface on which the packet
+        was received by the device. When a violating packet is
+        detected, it can be dropped. 
+        This MIB allows detection of
+        spoofingevents."
+    REVISION        "201112290000Z"
+    DESCRIPTION
+        "2 New TC are defined to support Dynamic template MIB"
+    REVISION        "200411120000Z"
+    DESCRIPTION
+        "Initial version of this MIB module."
+    ::= { ciscoMgmt 451 }
+
+
+
+-- Textual Conventions
+
+UnicastRpfType ::= TEXTUAL-CONVENTION
+    STATUS          current
+    DESCRIPTION
+        "An enumerated integer-value describing the type of
+        unicast Reverse Path Forwarding (RPF) a system applies to
+        traffic received on an interface. UnicastRpfTypes 'strict' and 
+        'loose' RPF methods are defined in RFC3704.
+
+        'disabled'
+            The system does not perform unicast RPF on packets received
+            by the interface.
+
+        'strict'
+            The system performs strict unicast RPF on packets received
+            by the interface.
+        'loose'
+            The system performs loose unicast RPF on packets received by
+            the interface."
+
+    REFERENCE       "RFC3704 (http://tools.ietf.org/html/rfc3704)"
+    SYNTAX          INTEGER  {
+                        strict(1),
+                        loose(2),
+                        disabled(3)
+                    }
+
+UnicastRpfOptions ::= TEXTUAL-CONVENTION
+    STATUS          current
+    DESCRIPTION
+        "A bit string describing unicast Reverse Path Forwarding (RPF)
+        options:
+
+        'allowDefault'
+            Allows the use of the default route for RPF verification.
+
+        'allowSelfPing'
+            Allows a router to ping its own interface or interfaces."
+    SYNTAX          BITS {
+                        allowDefault(0),
+                        allowSelfPing(1)
+                    }
+-- MIB Object Definitions
+
+ciscoIpUrpfMIBNotifs  OBJECT IDENTIFIER
+    ::= { ciscoIpUrpfMIB 0 }
+
+ciscoIpUrpfMIBObjects  OBJECT IDENTIFIER
+    ::= { ciscoIpUrpfMIB 1 }
+
+ciscoIpUrpfMIBConformance  OBJECT IDENTIFIER
+    ::= { ciscoIpUrpfMIB 2 }
+
+-- URPF Statistics objects
+
+cipUrpfScalar  OBJECT IDENTIFIER
+    ::= { ciscoIpUrpfMIBObjects 1 }
+
+cipUrpfStatistics  OBJECT IDENTIFIER
+    ::= { ciscoIpUrpfMIBObjects 2 }
+
+cipUrpfInterfaceConfig  OBJECT IDENTIFIER
+    ::= { ciscoIpUrpfMIBObjects 3 }
+
+cipUrpfVrf  OBJECT IDENTIFIER
+    ::= { ciscoIpUrpfMIBObjects 4 }
+
+
+cipUrpfDropRateWindow OBJECT-TYPE
+    SYNTAX          Integer32 (1..600)
+    UNITS           "seconds"
+    MAX-ACCESS      read-write
+    STATUS          current
+    DESCRIPTION
+        "The window of time in the recent past over which the drop
+        count used in the drop rate computation is collected. 
+        This global value applies for the computation of all URPF 
+        rates, global and per-interface. 
+
+        Once the period over which computations have been 
+        performed exceeds cipUrpfDropRateWindow, every time a 
+        computation is performed, the window slides up to end 
+        at the current time and start at cipUrpfDropRateWindow 
+        seconds before. 
+
+        The cipUrpfDropRateWindow must be greater than
+        or equal to the interval between computations 
+        (cipUrpfComputeInterval).
+
+        Since the agent must save the drop count values
+        for each compute interval in order to slide the window,
+        the number of counts saved is the quotient of
+        cipUrpfDropRateWindow divided by cipUrpfComputeInterval."
+    DEFVAL          { 300 } 
+    ::= { cipUrpfScalar 1 }
+
+cipUrpfComputeInterval OBJECT-TYPE
+    SYNTAX          Integer32 (1..120)
+    UNITS           "seconds"
+    MAX-ACCESS      read-write
+    STATUS          current
+    DESCRIPTION
+        "The time between rate computations. This global value
+        applies for the computation of all URPF rates, global
+        and per-interface.
+
+        When the value of cipUrpfComputeInterval is changed,
+        the interval in-progress proceeds as though the value
+        had not changed. The change will apply to the length
+        of subsequent intervals.
+
+        The cipUrpfComputeInterval must be less than or equal 
+        to the cipUrpfDropRateWindow."
+    DEFVAL          { 30 } 
+    ::= { cipUrpfScalar 2 }
+
+cipUrpfDropNotifyHoldDownTime OBJECT-TYPE
+    SYNTAX          Integer32 (1..1000)
+    UNITS           "seconds"
+    MAX-ACCESS      read-write
+    STATUS          current
+    DESCRIPTION
+        "The minimum time between issuance of
+        cipUrpfIfDropRateNotify notifications for a 
+        particular interface and packet forwarding type.
+
+        Notifications are generated for each interface and
+        packet forwarding type that exceeds the drop-rate. 
+        When a Notify is sent because the drop-rate is 
+        exceeded for a particular interface and forwarding
+        type, the time specified by this object is used to 
+        specify the minimum time that must elapse before 
+        another Notify can be sent for that interface and
+        forwarding type. The time is specified globally but 
+        used individually."
+    DEFVAL          { 300 } 
+    ::= { cipUrpfScalar 3 }
+
+cipUrpfTable OBJECT-TYPE
+    SYNTAX          SEQUENCE OF CipUrpfEntry 
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "This table contains summary information for the
+        managed device on URPF dropping."
+    ::= { cipUrpfStatistics 1 }
+
+cipUrpfEntry OBJECT-TYPE
+    SYNTAX          CipUrpfEntry
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "If the managed device supports URPF dropping,
+        a row exists for each IP version type (v4 and v6).
+        A row contains summary information on URPF
+        dropping over the entire managed device."
+    INDEX           { cipUrpfIpVersion } 
+    ::= { cipUrpfTable 1 }
+
+CipUrpfEntry ::= SEQUENCE {
+        cipUrpfIpVersion INTEGER,
+        cipUrpfDrops     Counter32,
+        cipUrpfDropRate  Gauge32
+}
+
+cipUrpfIpVersion OBJECT-TYPE
+    SYNTAX          INTEGER  {
+                        ipv4(1),
+                        ipv6(2)
+                    }
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "Specifies the version of IP forwarding on an interface
+        to which the table row URPF counts, rates, and
+        configuration apply." 
+    ::= { cipUrpfEntry 1 }
+
+cipUrpfDrops OBJECT-TYPE
+    SYNTAX          Counter32
+    UNITS           "packets"
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "Sum of dropped IP version cipUrpfIpVersion packets failing
+        a URPF check. This value is the sum of drops of packets 
+        received on all interfaces of the managed device." 
+    ::= { cipUrpfEntry 2 }
+
+cipUrpfDropRate OBJECT-TYPE
+    SYNTAX          Gauge32
+    UNITS           "packets per second"
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "The rate of packet drops of IP version cipUrpfIpVersion
+        packets due to URPF for the managed device. The
+        per-interface drop rate notification is issued on rates
+        exceeding a limit (rising rate). This dropping may indicate
+        an security attack on the network. To determine whether the
+        attack/event is over, the NMS must consult the managed
+        device. This object can be polled to determine the recent
+        drop rate for the managed device as a whole, in addition to
+        querying particular interface objects. 
+        This object is the
+        average rate of dropping over the most recent window of
+        time. The rate is computed by dividing the number of packets
+        dropped over a window by the window time in seconds. The
+        window time is specified by cipUrpfDropRateWindow. Each time
+        the drop rate is computed, and at system startup, a snapshot
+        is taken of the latest value of cipUrpfDrops. Subtracting
+        from this the snapshot of cipUrpfDrops at the start of the
+        current window of time gives the number of packets dropped.
+        The drop rate is computed every cipUrpfComputeInterval
+        seconds. As an example, let cipUrpfDropRateWindow be 300
+        seconds, and cipUrpfComputeInterval 30 seconds. Every 30
+        seconds, the drop count five minutes previous is subtracted
+        from the current drop count, and the result is divided by
+        300 to arrive at the drop rate. 
+        At device start-up, until
+        the device has been up more than cipUrpfDropRateWindow, when
+        drop rate is computed, the value of cipUrpfDrops is divided
+        by the time the device has been up. 
+        After the device has
+        been up for cipUrpfDropRateWindow, when drop rate is
+        computed, the number of packet drops counted from interval
+        start time to the computation time is divided by
+        cipUrpfDropRateWindow. 
+        Changes to cipUrpfDropRateWindow are
+        not reflected in this object until the next computation
+        time. 
+        The rate from the most recent computation is the
+        value fetched until the subsequent computation is
+        performed." 
+    ::= { cipUrpfEntry 3 }
+ 
+
+
+cipUrpfIfMonTable OBJECT-TYPE
+    SYNTAX          SEQUENCE OF CipUrpfIfMonEntry 
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "This table contains information on URPF dropping on
+        an interface."
+    ::= { cipUrpfStatistics 2 }
+
+cipUrpfIfMonEntry OBJECT-TYPE
+    SYNTAX          CipUrpfIfMonEntry
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "If IPv4 packet forwarding is configured on an interface,
+        and is configured to perform URPF checking, a row appears
+        in this table with indices [ifIndex][ipv4]. If IPv4
+        packet forwarding is deconfigured, or URPF checking
+        is deconfigured, the row disappears.
+
+        If IPv6 packet forwarding is configured on an interface,
+        and is configured to perform URPF checking, a row appears
+        in the table with indices [ifIndex][ipv6].  If IPv6
+        packet forwarding is deconfigured, or URPF checking
+        is deconfigured, the row disappears."
+    INDEX           {
+                        ifIndex,
+                        cipUrpfIfIpVersion
+                    } 
+    ::= { cipUrpfIfMonTable 1 }
+
+CipUrpfIfMonEntry ::= SEQUENCE {
+        cipUrpfIfIpVersion         INTEGER,
+        cipUrpfIfDrops             Counter32,
+        cipUrpfIfSuppressedDrops   Counter32,
+        cipUrpfIfDropRate          Gauge32,
+        cipUrpfIfDiscontinuityTime TimeStamp
+}
+
+cipUrpfIfIpVersion OBJECT-TYPE
+    SYNTAX          INTEGER  {
+                        ipv4(1),
+                        ipv6(2)
+                    }
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "Specifies the version of IP forwarding on an interface
+        to which the table row URPF counts, rates, and 
+        configuration apply." 
+    ::= { cipUrpfIfMonEntry 1 }
+
+cipUrpfIfDrops OBJECT-TYPE
+    SYNTAX          Counter32
+    UNITS           "packets"
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "The number of IP packets of version cipUrpfIfIpVersion
+        failing the URPF check and dropped by the managed device
+        on a particular interface.
+
+        Discontinuities in the value of this variable can occur 
+        at re-initialization of the management system, and at 
+        other times as indicated by the values of 
+        cipUrpfIfDiscontinuityTime." 
+    ::= { cipUrpfIfMonEntry 2 }
+
+cipUrpfIfSuppressedDrops OBJECT-TYPE
+    SYNTAX          Counter32
+    UNITS           "packets"
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "The number of IP packets of version cipUrpfIfIpVersion
+        failing the URPF check but given a reprieve and not 
+        dropped by the managed device. Depending on the 
+        device configuration and capabilities, the following 
+        cases may cause incrementing of the counter: 
+        - if the managed device is configured to allow self-pings 
+          and the managed device pings itself.
+        - if the managed device is configured for loose URPF (if any
+          interface has a route to the source), and the strict
+          case fails while the loose case passes.
+        - DHCP Request packets (src 0.0.0.0 dst 255.255.255.255) 
+          will pass after initially being marked for drop.
+        - RIP routing on unnumbered interfaces will pass after 
+          initially being marked for drop.
+        - multicast packets will pass after initially being marked 
+          for drop
+        - ACL's can be applied to permit packets after initially 
+          being marked for drop.
+
+        Discontinuities in the value of this variable can occur 
+        at re-initialization of the management system, and at 
+        other times as indicated by the values of 
+        cipUrpfIfDiscontinuityTime." 
+    ::= { cipUrpfIfMonEntry 3 }
+
+cipUrpfIfDropRate OBJECT-TYPE
+    SYNTAX          Gauge32
+    UNITS           "packets/second"
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "The rate of packet drops of IP version cipUrpfIfIpVersion
+        packets due to URPF on the interface. 
+
+        This object is the average rate of dropping over the most 
+        recent interval of time. The rate is computed by dividing
+        the number of packets dropped over an interval by the 
+        interval time in seconds. Each time the drop rate
+        is computed, and at system startup, a snapshot is taken
+        of the latest value of cipUrpfIfDrops. Subtracting from this
+        the snapshot of cipUrpfIfDrops at the start of the current
+        interval of time gives the number of packets dropped.
+        The drop rate is computed every cipUrpfComputeInterval
+        seconds.
+
+        When drop rate is computed, if time since the creation of 
+        a row in cipUrpfIfMonTable is less than 
+        cipUrpfDropRateWindow, the value of cipUrpfIfDrops is 
+        divided by the time since row was created.
+
+        After the row has been in existence for 
+        cipUrpfDropRateWindow, when drop rate is computed, the 
+        number of packet drops counted on the interface from 
+        interval start time to the computation time is divided 
+        by cipUrpfDropRateWindow.
+
+        Changes to cipUrpfDropRateWindow are not reflected in this
+        object until the next computation time.
+
+        The rate from the  most recent computation is the value 
+        fetched until the subsequent computation is performed." 
+    ::= { cipUrpfIfMonEntry 4 }
+
+cipUrpfIfDiscontinuityTime OBJECT-TYPE
+    SYNTAX          TimeStamp
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "The value of sysUpTime on the most recent
+        occasion at which this interface's  counters
+        suffered  a discontinuity.
+        If no such discontinuities have occurred
+        since the last re-initialization of the
+        local management subsystem, then this
+        object contains a value of zero." 
+    ::= { cipUrpfIfMonEntry 5 }
+ 
+
+
+cipUrpfIfConfTable OBJECT-TYPE
+    SYNTAX          SEQUENCE OF CipUrpfIfConfEntry 
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "This table contains statistics information on URPF on
+        an interface."
+    ::= { cipUrpfInterfaceConfig 1 }
+
+cipUrpfIfConfEntry OBJECT-TYPE
+    SYNTAX          CipUrpfIfConfEntry
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "A row exists in this table if a row exists
+        in cipUrpfIfMonTable."
+    AUGMENTS           { cipUrpfIfMonEntry  } 
+    ::= { cipUrpfIfConfTable 1 }
+
+CipUrpfIfConfEntry ::= SEQUENCE {
+        cipUrpfIfDropRateNotifyEnable    TruthValue,
+        cipUrpfIfNotifyDropRateThreshold Unsigned32,
+        cipUrpfIfNotifyDrHoldDownReset   TruthValue,
+        cipUrpfIfCheckStrict             INTEGER,
+        cipUrpfIfWhichRouteTableID       INTEGER,
+        cipUrpfIfVrfName                 SnmpAdminString
+}
+
+cipUrpfIfDropRateNotifyEnable OBJECT-TYPE
+    SYNTAX          TruthValue
+    MAX-ACCESS      read-write
+    STATUS          current
+    DESCRIPTION
+        "This object specifies whether the system produces the
+        cipUrpfIfDropRateNotify notification as a result of URPF 
+        dropping of version cipUrpfIfIpVersion IP packets on this 
+        interface. A false value prevents such notifications from 
+        being generated by this system."
+    DEFVAL          { false } 
+    ::= { cipUrpfIfConfEntry 1 }
+
+cipUrpfIfNotifyDropRateThreshold OBJECT-TYPE
+    SYNTAX          Unsigned32
+    UNITS           "packets/second"
+    MAX-ACCESS      read-write
+    STATUS          current
+    DESCRIPTION
+        "When the calculated rate of URPF packet drops
+        (cipUrpfIfDropRate) meets or exceeds the value 
+        specified by this object, a cipUrpfIfDropRateNotify 
+        notification is sent if cipUrpfIfDropRateNotifyEnable 
+        is set to true, and no such notification for the
+        IP version has been sent for this interface for the 
+        hold-down period.
+
+        Note that due to the calculation used for drop rate, 
+        if there are less than n drop events in an n-second
+        period the notification will not be generated. To allow
+        for the detection of a small number of drop events, the
+        value 0 (zero) is used to indicate that if any drop events
+        occur during the interval, a notification is generated."
+    DEFVAL          { 1000 } 
+    ::= { cipUrpfIfConfEntry 2 }
+
+cipUrpfIfNotifyDrHoldDownReset OBJECT-TYPE
+    SYNTAX          TruthValue
+    MAX-ACCESS      read-write
+    STATUS          current
+    DESCRIPTION
+        "Setting this object to true causes the five-minute
+        hold-down timer for emitting URPF drop rate 
+        notifications for IP version cipUrpfIfIpVersion on 
+        the interface to be short-circuited.  If a notification 
+        is due and would be emitted for the interface if the 
+        five-minutes elapsed, setting this object will cause 
+        the notification to be sent.
+
+        This is a trigger, and doesn't hold information. It is
+        set and an action is performed. Therefore a get for 
+        this object always returns false."
+    DEFVAL          { false } 
+    ::= { cipUrpfIfConfEntry 3 }
+
+cipUrpfIfCheckStrict OBJECT-TYPE
+    SYNTAX          INTEGER  {
+                        strict(1),
+                        loose(2)
+                    }
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "Interface configuration indicating the strictness of
+        the reachability check performed 
+        on the interface.
+        - strict: check that source addr is reachable via 
+                  the interface it came in on.
+        - loose : check that source addr is reachable via 
+                  some interface on the device." 
+    ::= { cipUrpfIfConfEntry 4 }
+
+cipUrpfIfWhichRouteTableID OBJECT-TYPE
+    SYNTAX          INTEGER  {
+                        default(1),
+                        vrf(2)
+                    }
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "Interface configuration indicating the routing table
+        consulted for the reachability check:
+        - default: the non-private routing table for of the 
+                   managed system.
+        - vrf   : a particular VPN routing table." 
+    ::= { cipUrpfIfConfEntry 5 }
+
+cipUrpfIfVrfName OBJECT-TYPE
+    SYNTAX          SnmpAdminString (SIZE  (0..32))
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "If the value of cipUrpfIfWhichRouteTableID is 'vrf',
+        the name of the VRF Table. Otherwise a zero-length
+        string." 
+    ::= { cipUrpfIfConfEntry 6 }
+ 
+
+
+cipUrpfVrfTable OBJECT-TYPE
+    SYNTAX          SEQUENCE OF CipUrpfVrfEntry 
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "This table enables indexing URPF drop statistics
+        by Virtual Routing and Forwarding instances."
+    ::= { cipUrpfVrf 1 }
+
+cipUrpfVrfEntry OBJECT-TYPE
+    SYNTAX          CipUrpfVrfEntry
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "An entry exists for a VRF if and only if the VRF
+        is associated with an interface that is configured
+        to perform IP URPF checking using the routing table 
+        for that VRF."
+    INDEX           { cipUrpfVrfName } 
+    ::= { cipUrpfVrfTable 1 }
+
+CipUrpfVrfEntry ::= SEQUENCE {
+        cipUrpfVrfName SnmpAdminString
+}
+
+cipUrpfVrfName OBJECT-TYPE
+    SYNTAX          SnmpAdminString (SIZE  (0..32))
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "This field is used to specify the VRF Table
+        name." 
+    ::= { cipUrpfVrfEntry 1 }
+ 
+
+
+cipUrpfVrfIfTable OBJECT-TYPE
+    SYNTAX          SEQUENCE OF CipUrpfVrfIfEntry 
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "This table contains statistics information for interfaces
+        performing URPF using VRF table to determine reachability."
+    ::= { cipUrpfStatistics 3 }
+
+cipUrpfVrfIfEntry OBJECT-TYPE
+    SYNTAX          CipUrpfVrfIfEntry
+    MAX-ACCESS      not-accessible
+    STATUS          current
+    DESCRIPTION
+        "An entry exists for a VRF and interface if and only
+        if the VRF associated with the interface is configured 
+        to perform IP URPF checking using the routing 
+        table for the VRF."
+    INDEX           {
+                        cipUrpfVrfName,
+                        ifIndex
+                    } 
+    ::= { cipUrpfVrfIfTable 1 }
+
+CipUrpfVrfIfEntry ::= SEQUENCE {
+        cipUrpfVrfIfDrops             Counter32,
+        cipUrpfVrfIfDiscontinuityTime TimeStamp
+}
+
+cipUrpfVrfIfDrops OBJECT-TYPE
+    SYNTAX          Counter32
+    UNITS           "packets"
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "The number of packets failing the URPF check for a VRF on
+        the interface and dropped by the managed device.
+
+        Discontinuities in the value of this variable can occur 
+        at re-initialization of the management system, and at 
+        other times as indicated by the values of 
+        cipUrpfVrfIfDiscontinuityTime." 
+    ::= { cipUrpfVrfIfEntry 2 }
+
+cipUrpfVrfIfDiscontinuityTime OBJECT-TYPE
+    SYNTAX          TimeStamp
+    MAX-ACCESS      read-only
+    STATUS          current
+    DESCRIPTION
+        "The value of sysUpTime on the most recent occasion at
+        which the URPF counters for this VRF on this interface 
+        suffered  a discontinuity.  If no such discontinuities 
+        have occurred since the last re-initialization of the
+        local management subsystem, then this object contains a 
+        value of zero." 
+    ::= { cipUrpfVrfIfEntry 3 }
+ 
+
+
+-- URPF Notification objects
+
+cipUrpfIfDropRateNotify NOTIFICATION-TYPE
+    OBJECTS         { cipUrpfIfDropRate }
+    STATUS          current
+    DESCRIPTION
+        "This notification is generated when
+        cipUrpfIfDropRateNotifyEnable is set to true and
+        the calculated URPF drop rate (cipUrpfIfDropRate) 
+        exceeds the notification threshold drop rate 
+        (cipUrpfIfNotifyDropRateThreshold). Note the 
+        exceptional value of 0 for threshold allows notification 
+        generation if any drop events occur in an interval.
+
+        After generating this notification, another such
+        notification will not be sent out for a minimum of five 
+        minutes (note the exception to this provided by 
+        cipUrpfIfNotifyDrHoldDownReset).
+
+        The object value present in the notification is the 
+        the drop rate that exceeded the threshold."
+   ::= { ciscoIpUrpfMIBNotifs 1 }
+-- Conformance Information Definition
+
+ciscoIpUrpfMIBCompliances  OBJECT IDENTIFIER
+    ::= { ciscoIpUrpfMIBConformance 1 }
+
+ciscoIpUrpfMIBGroups  OBJECT IDENTIFIER
+    ::= { ciscoIpUrpfMIBConformance 2 }
+
+
+ciscoIpUrpfMIBCompliance MODULE-COMPLIANCE
+    STATUS          current
+    DESCRIPTION
+        "An SNMP entity can implement this module to
+        provide URPF problem diagnosis information."
+    MODULE          -- this module
+    MANDATORY-GROUPS {
+                        ciscoIpUrpfMIBMainObjectGroup,
+                        ciscoIpUrpfMIBNotifyGroup
+                    }
+
+    GROUP           ciscoIpUrpfMIBVrfObjectGroup
+    DESCRIPTION
+        "This group is mandatory for all implementations
+        that need to index URPF statistics by VRF interfaces."
+    ::= { ciscoIpUrpfMIBCompliances 1 }
+
+ciscoIpUrpfMIBMainObjectGroup OBJECT-GROUP
+    OBJECTS         {
+                        cipUrpfDropRateWindow,
+                        cipUrpfComputeInterval,
+                        cipUrpfDropNotifyHoldDownTime,
+                        cipUrpfDrops,
+                        cipUrpfDropRate,
+                        cipUrpfIfDrops,
+                        cipUrpfIfSuppressedDrops,
+                        cipUrpfIfDropRate,
+                        cipUrpfIfDropRateNotifyEnable,
+                        cipUrpfIfNotifyDropRateThreshold,
+                        cipUrpfIfNotifyDrHoldDownReset,
+                        cipUrpfIfCheckStrict,
+                        cipUrpfIfDiscontinuityTime
+                    }
+    STATUS          current
+    DESCRIPTION
+        "The collection of common counter objects, those
+        needed by other objects, and the common interface 
+        table."
+    ::= { ciscoIpUrpfMIBGroups 1 }
+
+ciscoIpUrpfMIBVrfObjectGroup OBJECT-GROUP
+    OBJECTS         {
+                        cipUrpfVrfName,
+                        cipUrpfIfWhichRouteTableID,
+                        cipUrpfIfVrfName,
+                        cipUrpfVrfIfDrops,
+                        cipUrpfVrfIfDiscontinuityTime
+                    }
+    STATUS          current
+    DESCRIPTION
+        "The collection of objects needed to index by
+        VRF."
+    ::= { ciscoIpUrpfMIBGroups 2 }
+
+ciscoIpUrpfMIBNotifyGroup NOTIFICATION-GROUP
+   NOTIFICATIONS    { cipUrpfIfDropRateNotify }
+    STATUS          current
+    DESCRIPTION
+        "The collection of objects which are used to specify
+        notifications for URPF."
+    ::= { ciscoIpUrpfMIBGroups 6 }
+
+END
+
+
+
+
+
+