Initial commitHEADmain

1 files changed, 304 insertions, 0 deletions

diff --git a/MIBS/packetlight/SL-SECU-MIB b/MIBS/packetlight/SL-SECU-MIB
new file mode 100644
index 0000000..844a848
--- /dev/null
+++ b/MIBS/packetlight/SL-SECU-MIB
@@ -0,0 +1,304 @@
+SL-SECU-MIB DEFINITIONS ::= BEGIN
+
+IMPORTS
+    MODULE-IDENTITY, OBJECT-TYPE,
+    Integer32, transmission, IpAddress
+          FROM SNMPv2-SMI
+	InterfaceIndex		               	FROM IF-MIB
+    DisplayString, TruthValue, RowStatus, DateAndTime
+          FROM SNMPv2-TC
+    MODULE-COMPLIANCE, OBJECT-GROUP
+          FROM SNMPv2-CONF
+    slMain				      		   	FROM SL-MAIN-MIB;
+
+--  This is the MIB module for PL security.
+
+
+slSecuMib MODULE-IDENTITY
+	LAST-UPDATED "201105170000Z"
+	ORGANIZATION "PacketLight Networks Ltd."
+	CONTACT-INFO
+		"Omri_Viner@PacketLight.com"
+	DESCRIPTION
+		"This security module. This mib is used to configure the firewall."
+	::= { slMain 24 }
+
+
+SlSecuType ::= TEXTUAL-CONVENTION
+       STATUS       current
+       DESCRIPTION
+       "The security protocol types:
+        	Telnet 	- CLI
+        	SSH  	- Secured Telnet
+        	HTTP 	- Hyper Text
+        	HTTPS	- Secured HTTP
+        	ICMP	- Ping
+        	SNMP	- Simple Network Management (only 161 is supported)
+        	FTP		- File Transfer
+        	TFTP	- Trivial FTP
+        	TL1		- TL1 over Telnet
+        	TL1SSH  - TL1 over SSH
+        	WL		- White list (port number is 0)
+        	SNMPOVERTCP - SNMP over TCP
+        	SFTP	- Client side"
+       SYNTAX       INTEGER {
+            telnet(1),
+            ssh(2),
+            http(3),
+            https(4),
+            icmp(5),
+            snmp(6),
+            ftp(7),
+            tftp(8),
+            tl1(9),
+            tl1ssh(10),
+            wl(11),
+            snmpovertcp(12),  
+            sftp(13)  
+       }
+
+
+slSecuGen	            OBJECT IDENTIFIER ::= { slSecuMib 1 }
+slSecuSelect            OBJECT IDENTIFIER ::= { slSecuMib 2 }
+slSecuWl		        OBJECT IDENTIFIER ::= { slSecuMib 3 }  
+slSecuEncryption	    OBJECT IDENTIFIER ::= { slSecuMib 4 }  
+
+
+-- The Security general part 
+
+slSecuFirewallEnable OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-write
+    STATUS current
+    DESCRIPTION
+       "General Enable/Disable of the firewall operation."
+       ::= { slSecuGen 1 }
+
+
+-- The Security Selection Table 
+
+slSecuSelectTable OBJECT-TYPE
+    SYNTAX  SEQUENCE OF SlSecuSelectEntry
+    MAX-ACCESS  not-accessible
+    STATUS  current
+    DESCRIPTION
+       "The security protocol selection table."
+     ::= { slSecuSelect 1 }
+
+slSecuSelectEntry OBJECT-TYPE
+    SYNTAX  SlSecuSelectEntry
+    MAX-ACCESS  not-accessible
+    STATUS  current
+    DESCRIPTION
+       "An entry in the security selection table."
+    INDEX   { slSecuSelectType }            
+     ::= { slSecuSelectTable 1 }
+
+SlSecuSelectEntry ::=
+    SEQUENCE {
+         slSecuSelectType			  	SlSecuType,
+         slSecuSelectPort				INTEGER,
+         slSecuSelectEnable	  			TruthValue
+    }
+
+slSecuSelectType OBJECT-TYPE
+    SYNTAX  SlSecuType
+    MAX-ACCESS  not-accessible
+    STATUS  current
+    DESCRIPTION
+      "The secutity protocol type"
+     ::= { slSecuSelectEntry 1 }
+
+slSecuSelectPort OBJECT-TYPE
+    SYNTAX  INTEGER
+    MAX-ACCESS  read-only
+    STATUS  current
+    DESCRIPTION
+      "The corresponding port number of the protocol.
+       Port number 0 is used when not applicable/available."
+     ::= { slSecuSelectEntry 2 }
+
+slSecuSelectEnable OBJECT-TYPE
+    SYNTAX  TruthValue
+    MAX-ACCESS  read-write
+    STATUS  current
+    DESCRIPTION
+      "True - Enables the firewall for the corresponding protocol.
+       False - Dsables the firewall for the corresponding protocol.
+       When enabled the firewall blocks the protocol."
+     ::= { slSecuSelectEntry 3 }
+
+
+
+--  IP White List Table
+
+--  The IP white list Table odefine which IP addresses are allowed.
+
+slSecuWlTable OBJECT-TYPE
+    SYNTAX   SEQUENCE OF SlSecuWlEntry
+    MAX-ACCESS not-accessible
+    STATUS   current
+    DESCRIPTION
+       "This white list table."
+    ::= { slSecuWl 1 }
+
+slSecuWlEntry OBJECT-TYPE
+    SYNTAX   SlSecuWlEntry
+    MAX-ACCESS not-accessible
+    STATUS   current
+    DESCRIPTION
+       "A particular IP address."
+    INDEX { slSecuWlIp }
+    ::= { slSecuWlTable 1 }
+
+SlSecuWlEntry ::=
+    SEQUENCE {
+        slSecuWlIp
+            IpAddress,
+        slSecuWlMask
+            IpAddress,
+        slSecuWlStatus
+            RowStatus
+    }
+
+slSecuWlIp OBJECT-TYPE
+    SYNTAX   IpAddress
+    MAX-ACCESS read-only
+    STATUS   current
+    DESCRIPTION
+       "The IP address to allow"
+    ::= { slSecuWlEntry 1 }
+
+slSecuWlMask OBJECT-TYPE
+    SYNTAX   IpAddress
+    MAX-ACCESS read-only
+    STATUS   current
+    DESCRIPTION
+       "Indicate the mask to be logical-ANDed with the
+       destination  address  before  being compared to
+       the value  in  the  slSecuWlIp field."
+    ::= { slSecuWlEntry 2 }
+
+slSecuWlStatus OBJECT-TYPE
+    SYNTAX   RowStatus
+    MAX-ACCESS read-create
+    STATUS   current
+    DESCRIPTION
+       "The row status variable, used according to
+       row installation and removal conventions."
+    ::= { slSecuWlEntry 3 }
+
+
+-- *******************************************
+--
+-- The Encryption Table
+--
+-- *******************************************
+	
+slSecuEncryptionTable OBJECT-TYPE
+	SYNTAX  SEQUENCE OF SlSecuEncryptionEntry
+	MAX-ACCESS  		not-accessible
+	STATUS  			current
+	DESCRIPTION
+		"The encryption table. This table has an entry per transponder."
+	::= { slSecuEncryption 1 }
+
+slSecuEncryptionEntry OBJECT-TYPE
+	SYNTAX  SlSecuEncryptionEntry
+	MAX-ACCESS  not-accessible
+	STATUS  current
+	DESCRIPTION
+		"This entry is used to control the necryption per transponder."
+	INDEX   { slSecuEncryptionIfIndex }
+	::= { slSecuEncryptionTable 1 }
+
+SlSecuEncryptionEntry ::=
+	SEQUENCE {
+		slSecuEncryptionIfIndex				InterfaceIndex,
+		slSecuEncryptionEnable				TruthValue,
+		slSecuEncryptionStatus				INTEGER,
+		slSecuEncryptionForceInit			INTEGER,
+		slSecuEncryptionPreShared			DisplayString,
+		slSecuEncryptionKeyExchangePeriod	INTEGER,
+		slSecuEncryptionLock				TruthValue,
+		slSecuEncryptionProtectedStatus		INTEGER
+	}	
+
+slSecuEncryptionIfIndex OBJECT-TYPE
+    SYNTAX      InterfaceIndex
+    MAX-ACCESS  read-only
+    STATUS      current
+    DESCRIPTION
+        "The Interface Index of the uplink port."
+    ::= { slSecuEncryptionEntry 1 }
+
+slSecuEncryptionEnable OBJECT-TYPE
+	SYNTAX        TruthValue
+	MAX-ACCESS    read-write
+	STATUS        current
+	DESCRIPTION
+		"Enable/Disable the encryption on this uplink."
+	::= { slSecuEncryptionEntry 2 }
+
+slSecuEncryptionStatus OBJECT-TYPE
+	SYNTAX        INTEGER {
+		init(1),      --- init/link-failure state
+		exchange(2),  --- public key exchange state
+		kdf(3),       --- key derivation function state
+		active(4)     --- active state
+	}
+	MAX-ACCESS    read-only
+	STATUS        current
+	DESCRIPTION
+		"The state of the encryption finite state machine."
+	::= { slSecuEncryptionEntry 3 }
+
+slSecuEncryptionForceInit OBJECT-TYPE
+	SYNTAX        INTEGER
+	MAX-ACCESS    read-write
+	STATUS        current
+	DESCRIPTION
+		"Writing this valiable forces init to the encryption state machine."
+	::= { slSecuEncryptionEntry 4 }
+
+slSecuEncryptionPreShared OBJECT-TYPE
+	SYNTAX        DisplayString 
+	MAX-ACCESS    read-write
+	STATUS        current
+	DESCRIPTION
+		"The pre-shared secret. 
+		Either the pre-shared key, or the shared secret to avoid Mitm when using DH public key exchange."
+	::= { slSecuEncryptionEntry 5 }
+
+slSecuEncryptionKeyExchangePeriod OBJECT-TYPE
+	SYNTAX        INTEGER 
+	MAX-ACCESS    read-write
+	STATUS        current
+	DESCRIPTION
+		"The Key Exchage Period, specified in minutes.
+		The value 0 means to perform the key exchange only once at link establishment."
+	::= { slSecuEncryptionEntry 6 }
+
+slSecuEncryptionLock OBJECT-TYPE
+	SYNTAX        TruthValue
+	MAX-ACCESS    read-write
+	STATUS        current
+	DESCRIPTION
+		"Lock/Unlock the encrypted service for this uplink."
+	::= { slSecuEncryptionEntry 7 }
+
+slSecuEncryptionProtectedStatus OBJECT-TYPE
+	SYNTAX        INTEGER {
+		init(1),      --- init/link-failure state
+		exchange(2),  --- public key exchange state
+		kdf(3),       --- key derivation function state
+		active(4)     --- active state
+	}
+	MAX-ACCESS    read-only
+	STATUS        current
+	DESCRIPTION
+		"The protected port state of the encryption finite state machine."
+	::= { slSecuEncryptionEntry 8 }
+
+
+END