path: root/MIBS/comware/HH3C-NDEC-MIB

-- ==================================================================================
-- Copyright (C) 2002 New H3C Tech. Co., Ltd. All rights reserved.
--
-- Description: This file describes the MIB implementation of ndec
-- Reference:
-- Version: V1.6
-- History:
--  for V1.0
--      Add MODULE-IDENTITY to mib
--  V1.1 2004-9-9 lizhiyong
--      add hh3chipsNDECSAListTable,hh3chikeSATable,hh3chipsIKEPolicyTable,
--      hh3chipsStaticCryptomapTable,hh3chipsTransformNameSetTable,hh3chipsNDECLeaf,
--      modify hh3chipsNDECInfoTable,
--  V1.2 2004-9-14 lizhiyong
--      delete useless comments
--      modify the SYNTAX type of hh3chipsInPac,hh3chipsOutPac,hh3chipsInByte,hh3chipsOutByte
--      and hh3chipsDropPac from Gauge to Counter32.
--      delete the underscore character "_" which is note compliant with ASN.1
--      modify the whole file with SMIv2.
--  V1.3 2004-10-12 updated by gaolong
--      Remove variable value range from table SEQUENCE definition.
--  V1.4 2004-10-21 lizhiyong
--      modify hh3chipsStaticCryptomapMatchAddr range from 1..199 to 1..100000.
--      update the description of hh3chipsNDECBackup node
--  V1.5 2004-11-26 updated by gaolong
--      File description updated
--  V1.6 2007-1-29 updated by liukan
--      Add a new value ealgXNsa in hh3chipsEncAlgorithm type.
-- ===================================================================================
HH3C-NDEC-MIB DEFINITIONS ::= BEGIN

IMPORTS
    IpAddress, Counter32, Gauge32, Integer32 ,Unsigned32 ,NOTIFICATION-TYPE,MODULE-IDENTITY,OBJECT-TYPE
        FROM SNMPv2-SMI
    DisplayString, TruthValue
        FROM SNMPv2-TC
    hh3cmlsr
        FROM HH3C-OID-MIB;

--  HH3C-NDEC-MIB definition


        hh3cNDEC MODULE-IDENTITY
            LAST-UPDATED "200409150000Z"        -- August 15, 2004  GMT
            ORGANIZATION
                "New H3C Tech. Co., Ltd."
            CONTACT-INFO
                "Platform Team New H3C Tech. Co., Ltd.
                Hai-Dian District Beijing P.R. China
                http://www.h3c.com
                Zip:100085
                "
            DESCRIPTION
                "This MIB contains objects to manage the NDEC device.
                "
            REVISION "200409151052Z"        -- August 15, 2004 at 10:52 GMT
            DESCRIPTION
                "The initial version of this MIB module"
            ::= { hh3cmlsr 2 }

--transform         Set authentication/encryption method


hh3chipsNDECSAListTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cHipsNDECSAListEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "The table containing the list of all
        SA entries configured on NDEC by the operator."
    ::= { hh3cNDEC 1 }

hh3chipsNDECSAListEntry OBJECT-TYPE
    SYNTAX Hh3cHipsNDECSAListEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Each entry contains the attributes
        associated with a single NDEC'S SA entry."
    INDEX { hh3chipsPeerIpAddr, hh3chipsProtocol, hh3chipsSPI  }
    ::= { hh3chipsNDECSAListTable 1 }

Hh3cHipsNDECSAListEntry ::= SEQUENCE {
    hh3chipsPeerIpAddr      IpAddress,
    hh3chipsProtocol        INTEGER,
    hh3chipsSPI             Gauge32,
    hh3chipsEncAlgorithm        INTEGER,
    hh3chipsAuthAlgorithm       INTEGER,
    hh3chipsLocalIpAddr         IpAddress,
    hh3chipsSaLifeKBytes        Gauge32,
    hh3chipsSaLifeSecond        Gauge32,
    hh3chipsByCard          TruthValue,
    hh3chipsNegotiateSaMode     INTEGER,
    hh3chipsExpBytes        Gauge32,
    hh3chipsSoftBytes       Gauge32,
    hh3chipsExpTimeout      Gauge32,
    hh3chipsSoftTimeout         Gauge32
    }


hh3chipsPeerIpAddr OBJECT-TYPE
    SYNTAX IpAddress
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The peer IP address of this SA entry.
        "
    ::= { hh3chipsNDECSAListEntry 1 }

hh3chipsProtocol OBJECT-TYPE
      SYNTAX INTEGER {
          ipsecEsp(50),
          ipsecAh(51)
      }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The Protocol of this SA entry.
        "
    ::= { hh3chipsNDECSAListEntry 2 }

hh3chipsSPI OBJECT-TYPE
    SYNTAX Gauge32(256..4294967295)
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The SPI of this SA entry.
        "
    ::= { hh3chipsNDECSAListEntry 3 }

hh3chipsEncAlgorithm OBJECT-TYPE
    SYNTAX INTEGER {
        ealgNone(1),
        ealgDescbc(2),
        ealg3desCbc(3),
        ealgXBlf(4),
        ealgXCast(5),
        ealgXSkipjack(6),
        ealgXAes(7),
        ealgXQc5(8),
        ealgXNsa(9)
    }

    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The encrypt algorithm of this SA entry.
        "
    ::= { hh3chipsNDECSAListEntry 4 }

hh3chipsAuthAlgorithm OBJECT-TYPE
    SYNTAX INTEGER {
        aalgNone(1),
        aalgMd5Hmac(2),
        aalgSha1Hmac(3),
        aalgMd5Hmac96(4),
        aalgSha1Hmac96(5),
        aalgXRipeMd160Hmac96(6),
        aalgXMd5(7),
        aalgXSha1(8)
       }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The authentication algorithm of this SA entry.
        "
    ::= { hh3chipsNDECSAListEntry 5 }

hh3chipsLocalIpAddr OBJECT-TYPE
    SYNTAX IpAddress
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The local IP address of this SA entry.
        "
    ::= { hh3chipsNDECSAListEntry 6 }

hh3chipsSaLifeKBytes OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The lifetime of this SA entry in bytes.
        "
    ::= { hh3chipsNDECSAListEntry 7 }

hh3chipsSaLifeSecond OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The lifetime of this SA entry in seconds.
        "
    ::= { hh3chipsNDECSAListEntry 8 }

hh3chipsByCard OBJECT-TYPE
    SYNTAX TruthValue
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The flag of this SA on NDEC or not.
        "
    ::= { hh3chipsNDECSAListEntry 9 }


hh3chipsNegotiateSaMode OBJECT-TYPE
    SYNTAX INTEGER {
        none(1),
        isakmp(2),
        manual(3)
    }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The type of key used by the IPSec Phase-2 Tunnel.
        "
    ::= { hh3chipsNDECSAListEntry 10 }

hh3chipsExpBytes OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object specifies the lifetime in bytes
        of the tunnels generated using this
        policy specification."
    ::= { hh3chipsNDECSAListEntry 11 }

hh3chipsSoftBytes OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object specifies the lifetime in bytes
        of the tunnels generated using this
        policy specification."
    ::= { hh3chipsNDECSAListEntry 12 }

hh3chipsExpTimeout OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object specifies the lifetime in seconds
        of the tunnels generated using this
        policy specification."
    ::= { hh3chipsNDECSAListEntry 13 }

hh3chipsSoftTimeout OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object specifies the lifetime in seconds
        of the tunnels generated using this
        policy specification."
    ::= { hh3chipsNDECSAListEntry 14 }


 hh3chikeSATable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cHikeSAEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "The table containing IKE SA entities
        configured on NDEC by the operator.
        "

    ::= { hh3cNDEC 2 }

hh3chikeSAEntry OBJECT-TYPE
    SYNTAX Hh3cHikeSAEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Each entry contains the attributes
        associated with a single IKE SA entity."
    INDEX { hh3chikeConnId }
    ::= { hh3chikeSATable 1 }

Hh3cHikeSAEntry ::= SEQUENCE {
    hh3chikeConnId  Integer32,
    hh3chikePeerIpAddr  IpAddress,
    hh3chikeFlag        DisplayString,
    hh3chikePhase       INTEGER,
    hh3chikeDoi         INTEGER,
    hh3chikeClearSA     TruthValue
     }

hh3chikeConnId OBJECT-TYPE
    SYNTAX Integer32(0..65535)
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The identifier of IKE SA connection."
    ::= { hh3chikeSAEntry 1 }

hh3chikePeerIpAddr OBJECT-TYPE
    SYNTAX IpAddress
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The peer IP address of this IKE SA.
        "
    ::= { hh3chikeSAEntry 2 }

hh3chikeFlag OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The status of this IKE SA.
        "
    ::= { hh3chikeSAEntry 3 }

hh3chikePhase OBJECT-TYPE
    SYNTAX INTEGER{
        unkown(1),
        phase1(2),
        phase2(3)
    }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The phase of this IKE SA.
        "
    ::= { hh3chikeSAEntry 4 }

hh3chikeDoi OBJECT-TYPE
   SYNTAX INTEGER{
        unkown(1),
        ipsec(2)
       }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The domain of this IKE SA
        "
    ::= { hh3chikeSAEntry 5 }

hh3chikeClearSA OBJECT-TYPE
    SYNTAX TruthValue
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "Clear this IKE SA or not.
        "
    ::= { hh3chikeSAEntry 6 }


hh3chipsIKEPolicyTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cHipsIKEPolicyEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "List of all ISAKMP policy entries."
    ::= { hh3cNDEC 3 }

hh3chipsIKEPolicyEntry OBJECT-TYPE
    SYNTAX Hh3cHipsIKEPolicyEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Each entry includes the properties of a ISAKMP Policy entry."
    INDEX { hh3chipsIsakmpPolPriority }
    ::= { hh3chipsIKEPolicyTable 1 }

Hh3cHipsIKEPolicyEntry ::= SEQUENCE {
    hh3chipsIsakmpPolPriority   Integer32,
    hh3chipsIsakmpPolEncr       INTEGER,
    hh3chipsIsakmpPolHash       INTEGER,
    hh3chipsIsakmpPolAuth       INTEGER,
    hh3chipsIsakmpPolGroup      INTEGER,
    hh3chipsIsakmpPolLifetime   Gauge32
    }

hh3chipsIsakmpPolPriority OBJECT-TYPE
    SYNTAX Integer32(0..65535)
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "ISAKMP Policy entry's priority."
    ::= { hh3chipsIKEPolicyEntry 1 }

hh3chipsIsakmpPolEncr OBJECT-TYPE
    SYNTAX INTEGER {
        ikeEncryptNone(1),
        ikeEncryptDesCbc(2),
        ikeEncryptIdeaCbc(3),
        ikeEncryptBlowfishcbc(4),
        ikeEncryptRc5R16B64cbc(5),
        ikeEncrypt3DesCbc(6),
        ikeEncryptCastCbc(7)
    }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The specified encryption transform. It is used by
        Internet Key Exchange(IKE) tunnels to protect the ISAKMP
        PDUs."
    ::= { hh3chipsIKEPolicyEntry 2 }

hh3chipsIsakmpPolHash OBJECT-TYPE
    SYNTAX INTEGER {
        ikeHashNone(1),
        ikeHashMd5(2),
        ikeHashSha(3),
        ikeHashTiger(4)
        }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The specified hash transform. It is used by
        Internet Key Exchange(IKE) tunnels to protect the ISAKMP
        PDUs."
    ::= { hh3chipsIKEPolicyEntry 3 }

hh3chipsIsakmpPolAuth OBJECT-TYPE
    SYNTAX INTEGER {
        ikeAuthPreNone(1),
        ikeAuthPreShared(2) ,
        ikeAuthDss(3),
        ikeAuthRsaSig(4),
        ikeAuthRsaEnc(5),
        ikeAuthRsaEncRev(6)
        }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The specified peer authentication method.
        The local entity would authenticate the peer using
        the method specified by this object when this policy
        entity is selected to negotiate with a peer."
    ::= { hh3chipsIKEPolicyEntry 4 }

hh3chipsIsakmpPolGroup OBJECT-TYPE
    SYNTAX INTEGER {
        none(1),
        dhGroup1(2),
        dhGroup2(3)
    }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object is used to specify the Oakley group
        which is used for Diffie Hellman exchange in the
        Main Mode.
        The local entity selects the group specified by
        this object to perform Diffie Hellman exchange with
        the peer when this policy item is chosen to negotiate
        the Main Mode with an IKE peer."
    ::= { hh3chipsIKEPolicyEntry 5 }

hh3chipsIsakmpPolLifetime OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the lifetime of the IKE tunnels in seconds."
    ::= { hh3chipsIKEPolicyEntry 6 }


hh3chipsStaticCryptomapTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cHipsStaticCryptomapEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "The table includes the list of the member cryptomaps
        of the cryptomap sets which are set on the specific entity."
    ::= { hh3cNDEC 4 }

hh3chipsStaticCryptomapEntry OBJECT-TYPE
    SYNTAX Hh3cHipsStaticCryptomapEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Each entry contains  properites of a single static cryptomap entry.
        The members of dynamic cryptomap sets, which may be linked with the
        parent static cryptomap set, are not included in this table."
    INDEX { hh3chipsStaticCryptomapName,hh3chipsStaticCryptomapSN }
    ::= { hh3chipsStaticCryptomapTable 1 }

Hh3cHipsStaticCryptomapEntry ::= SEQUENCE {
    hh3chipsStaticCryptomapName         DisplayString,
    hh3chipsStaticCryptomapSN       Integer32,
    hh3chipsStaticCryptomapNegMode      INTEGER,
    hh3chipsStaticCryptomapMatchAddr    INTEGER,
    hh3chipsStaticCryptomapPeerIpAddr   IpAddress,
    hh3chipsStaticCryptomapTransforName     DisplayString,
    hh3chipsStaticCryptomapLifetime     Gauge32,
    hh3chipsStaticCryptomapLifesize     Gauge32,
    hh3chipsStaticCryptomapLocalIpAddr  IpAddress,
    hh3chipsIfNameUsed              DisplayString,
    hh3chipsInAHSPI             Gauge32,
    hh3chipsInESPSPI            Gauge32,
    hh3chipsOutAHSPI            Gauge32,
    hh3chipsOutESPSPI           Gauge32,
    hh3chipsInAhHexKeyString        DisplayString,
    hh3chipsInEspCipherHexKeyString     DisplayString,
    hh3chipsInEspAuthenHexKeyString     DisplayString,
    hh3chipsInAhStringKeyString         DisplayString,
    hh3chipsInEspStringKeyString        DisplayString,
    hh3chipsOutAhHexKeyString       DisplayString,
    hh3chipsOutEspCipherHexKeyString    DisplayString,
    hh3chipsOutEspAuthenHexKeyString    DisplayString,
    hh3chipsOutAhStringKeyString        DisplayString,
    hh3chipsOutEspStringKeyString       DisplayString
    }



hh3chipsStaticCryptomapName OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The name of the cryptomap entry in the
        cryptomap set. This is the first index
        component of this table."
    ::= { hh3chipsStaticCryptomapEntry 1 }

hh3chipsStaticCryptomapSN OBJECT-TYPE
    SYNTAX Integer32(0..65535)
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The sequence number of the cryptomap entry in the
        cryptomap set. This is the second index component
        of this table."
    ::= { hh3chipsStaticCryptomapEntry 2 }

hh3chipsStaticCryptomapNegMode OBJECT-TYPE
    SYNTAX INTEGER {
            none(1),
            isakmp(2),
            manual(3)
           }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Type of the cryptomap entry. This object may be an ISAKMP
        cryptomap or manual."
    ::= { hh3chipsStaticCryptomapEntry 3 }

hh3chipsStaticCryptomapMatchAddr OBJECT-TYPE
    SYNTAX INTEGER(1..100000)
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The access list number entered by the operatoir
        while creating this cryptomap. "
    ::= { hh3chipsStaticCryptomapEntry 4 }

hh3chipsStaticCryptomapPeerIpAddr OBJECT-TYPE
    SYNTAX IpAddress
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The IP address of the current peer. Traffic protected by
        this cryptomap is protected by a tunnel terminating
        at the device whose IP address is the value of this object."
    ::= { hh3chipsStaticCryptomapEntry 5 }

hh3chipsStaticCryptomapTransforName OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The transform associated with this cryptomap entry."
    ::= { hh3chipsStaticCryptomapEntry 6 }

hh3chipsStaticCryptomapLifetime OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the lifetime of the IPSec SA which is
        created using this IPSec policy entry."
    ::= { hh3chipsStaticCryptomapEntry 7 }

hh3chipsStaticCryptomapLifesize OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object identifies the lifesize of the IPSec SAs
        generated using this IPSec policy entry.
        Lifesize means maximum traffic in bytes that may be carried.
        "
    ::= { hh3chipsStaticCryptomapEntry 8 }

hh3chipsStaticCryptomapLocalIpAddr OBJECT-TYPE
    SYNTAX IpAddress
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The value of this object is the local IP address of the
        IPSec SAs generated using this IPSec policy entry.
        "
    ::= { hh3chipsStaticCryptomapEntry 9 }


   hh3chipsIfNameUsed OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the name of the
        interface which uses this IPSec policy entry.
        "
    ::= { hh3chipsStaticCryptomapEntry 10 }


hh3chipsInAHSPI OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the inbound AH SPI
        IPSec SAs generated using this IPSec policy entry."
    ::= { hh3chipsStaticCryptomapEntry 11 }

hh3chipsInESPSPI OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the inbound ESP SPI
        IPSec SAs generated using this IPSec policy entry.
       "
    ::= { hh3chipsStaticCryptomapEntry 12 }

hh3chipsOutAHSPI OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the outbound AH SPI
        IPSec SAs generated using this IPSec policy entry.
       "
    ::= { hh3chipsStaticCryptomapEntry 13 }

hh3chipsOutESPSPI OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the outbound ESP SPI
        IPSec SAs generated using this IPSec policy entry.
       "
    ::= { hh3chipsStaticCryptomapEntry 14 }

hh3chipsInAhHexKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the inbound AH authentication key
        IPSec SAs generated using this IPSec policy entry.
        The AH authentication key is in hex.
       "
    ::= { hh3chipsStaticCryptomapEntry 15 }

 hh3chipsInEspCipherHexKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the inbound ESP authentication key
       IPSec SAs generated using this IPSec policy entry.
       The ESP authentication key is hex.
       "
    ::= { hh3chipsStaticCryptomapEntry 16 }

 hh3chipsInEspAuthenHexKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the inbound ESP authentication key
        IPSec SAs generated using this IPSec policy entry.
        The ESP authentication key is hex.
       "
    ::= { hh3chipsStaticCryptomapEntry 17 }


 hh3chipsInAhStringKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the inbound ESP authentication key
        IPSec SAs generated using this IPSec policy entry.
        The key is in string.
       "
    ::= { hh3chipsStaticCryptomapEntry 18 }
 hh3chipsInEspStringKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the inbound ESP authentication key
        IPSec SAs generated using this IPSec policy entry.
        The key is in string.
       "
    ::= { hh3chipsStaticCryptomapEntry 19 }
 hh3chipsOutAhHexKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the outbound AH authentication key
        IPSec SAs generated using this IPSec policy entry.
        The key is in hex.
       "
    ::= { hh3chipsStaticCryptomapEntry 20 }
 hh3chipsOutEspCipherHexKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the outbound ESP authentication key
        IPSec SAs generated using this IPSec policy entry.
        The key is in hex.
       "
    ::= { hh3chipsStaticCryptomapEntry 21 }
 hh3chipsOutEspAuthenHexKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the outbound ESP authentication key
        IPSec SAs generated using this IPSec policy entry.
        The key is in hex.
       "
    ::= { hh3chipsStaticCryptomapEntry 22 }
 hh3chipsOutAhStringKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the outbound AH authentication key
        IPSec SAs generated using this IPSec policy entry.
        The key is in string.
       "
    ::= { hh3chipsStaticCryptomapEntry 23 }

  hh3chipsOutEspStringKeyString OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the outbound ESP authentication key
        IPSec SAs generated using this IPSec policy entry.
        The key is in string.
       "
    ::= { hh3chipsStaticCryptomapEntry 24 }


hh3chipsTransformNameSetTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cHipsTransformNameSetEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Transform set table."
    ::= { hh3cNDEC 5 }

hh3chipsTransformNameSetEntry OBJECT-TYPE
    SYNTAX Hh3cHipsTransformNameSetEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Each entry refers to properties of a transform."
    INDEX { hh3chipsTransformName }
    ::= { hh3chipsTransformNameSetTable 1 }

Hh3cHipsTransformNameSetEntry ::= SEQUENCE {
    hh3chipsTransformName       DisplayString,
    hh3chipsTransformMode       INTEGER,
    hh3chipsTransformProtocol   INTEGER,
    hh3chipsAH          INTEGER,
    hh3chipsEespEn          INTEGER,
    hh3chipsEspAu           INTEGER,
    hh3chipsIsCardTransform     TruthValue
    }


hh3chipsTransformName OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Name of the transform entry."
    ::= { hh3chipsTransformNameSetEntry 1 }

hh3chipsTransformMode OBJECT-TYPE
    SYNTAX INTEGER {
        tunnel(1),
        transport(2)
    }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Mode of the transform entry."
    ::= { hh3chipsTransformNameSetEntry 2 }

hh3chipsTransformProtocol OBJECT-TYPE
    SYNTAX INTEGER {
                    ipsecNone(1),
                    ipsecAhNew(2),
                    ipsecAhEspNew(3),
                    ipsecAhEspOld(4),
                    ipsecAhOld(5),
                    ipsecEspNew(6),
                    ipsecEspAhNew(7),
                    ipsecEspAhOld(8),
                    ipsecEspOld(9)
                    }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Transform protocol."
    ::= { hh3chipsTransformNameSetEntry 3 }

hh3chipsAH OBJECT-TYPE
    SYNTAX INTEGER {
        aalgNone(1),
        aalgMd5Hmac(2),
        aalgSha1Hmac(3),
        aalgMd5Hmac96(4),
        aalgSha1Hmac96(5),
        aalgXRipeMd160Hmac96(6),
        aalgXMd5(7),
        aalgXSha1(8)
       }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Algorithm of AH protocol."
    ::= { hh3chipsTransformNameSetEntry 4 }


hh3chipsEespEn OBJECT-TYPE
    SYNTAX INTEGER {
        ealgNone(1),
        ealgDescbc(2),
        ealg3desCbc(3),
        ealgXBlf(4),
        ealgXCast(5),
        ealgXSkipjack(6),
        ealgXAes(7),
        ealgXQc5(8)
    }

    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Encryption algorithm of ESP protocol."
    ::= { hh3chipsTransformNameSetEntry 5 }

hh3chipsEspAu OBJECT-TYPE
    SYNTAX INTEGER {
        aalgNone(1),
        aalgMd5Hmac(2),
        aalgSha1Hmac(3),
        aalgMd5Hmac96(4),
        aalgSha1Hmac96(5),
        aalgXRipeMd160Hmac96(6),
        aalgXMd5(7),
        aalgXSha1(8)
       }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Authentication algorithm of ESP protocol."
    ::= { hh3chipsTransformNameSetEntry 6 }


hh3chipsIsCardTransform OBJECT-TYPE
    SYNTAX TruthValue
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This object indicates the flag of the NDEC is used for
        IPSec SAs generated using this IPSec policy entry.
       "
    ::= { hh3chipsTransformNameSetEntry 7 }


hh3chipsNDECInfoTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cHipsNDECInfoEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Table of NDEC set."
    ::= { hh3cNDEC 6 }

hh3chipsNDECInfoEntry OBJECT-TYPE
    SYNTAX Hh3cHipsNDECInfoEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Properties of each NDEC.
        "
    INDEX { hh3chipsCardSlot }
    ::= { hh3chipsNDECInfoTable 1 }

Hh3cHipsNDECInfoEntry ::= SEQUENCE {
    hh3chipsCardSlot        INTEGER,
    hh3chipsInPac           Counter32,
    hh3chipsOutPac          Counter32,
    hh3chipsInByte          Counter32,
    hh3chipsOutByte         Counter32,
    hh3chipsDropPac         Counter32,
    hh3chipsCardStatus          INTEGER,
    hh3chipsCardHardVer         DisplayString,
    hh3chipsCardSoftVer         DisplayString,
    hh3chipsCardCPLDVer         DisplayString,
    hh3chipsCardOperate         INTEGER,
    hh3chipsDropPacInUnitTime   Gauge32
    }


hh3chipsCardSlot OBJECT-TYPE
    SYNTAX INTEGER(0..7)
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Slot number of NDEC ."
    ::= { hh3chipsNDECInfoEntry 1 }

hh3chipsInPac OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Total packets of the NDEC recieved."
    ::= { hh3chipsNDECInfoEntry 2 }

hh3chipsOutPac OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Total packets of the NDEC sent."
    ::= { hh3chipsNDECInfoEntry 3 }

hh3chipsInByte OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Total bytes of the NDEC sent."
    ::= { hh3chipsNDECInfoEntry 4 }

hh3chipsOutByte OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Total bytes of the NDEC sent."
    ::= { hh3chipsNDECInfoEntry 5 }

hh3chipsDropPac OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Total packets of the NDEC dropped ."
    ::= { hh3chipsNDECInfoEntry 6 }

hh3chipsCardStatus OBJECT-TYPE
    SYNTAX INTEGER{
        ecStateInvalid(1),  -- status exeception
        ecStateReady(2),    -- status normal
        ecStateResetting(3) ,   -- card is reseting
        ecStateProgramUpdating(4),   --card is loading
        ecStateDisable(5)         -- card is forbidden
    }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "State of the NDEC."
    ::= { hh3chipsNDECInfoEntry 7 }

hh3chipsCardHardVer OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Hardware version of the NDEC."
    ::= { hh3chipsNDECInfoEntry 8 }

hh3chipsCardSoftVer OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Software version of the NDEC."
    ::= { hh3chipsNDECInfoEntry 9 }

hh3chipsCardCPLDVer OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "CPLD version of the NDEC."
    ::= { hh3chipsNDECInfoEntry 10 }

hh3chipsCardOperate OBJECT-TYPE
    SYNTAX INTEGER {
        cardClearStatic(1),
        cardReset(2),
        cardSynTime(3),
        cardSysLogOn(4),
        cardSysLogOff(5),
        cardSysLogClear(6)
    }
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
         "The version of the NDEC's CPLD.
         cardClearStatic(1): clear the statistics of the card
         cardReset(2): rest the card
         cardSynTime(3): synchoronize the clock of the card
         cardSysLogOn(4):turn on the log of the card
         cardSysLogOff(5):turn off the log of the card
         cardSysLogClear(6):clear the log of the card"
    ::= { hh3chipsNDECInfoEntry 11 }

hh3chipsDropPacInUnitTime OBJECT-TYPE
    SYNTAX Gauge32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
         "Dropped packets in unit interval."
    ::= { hh3chipsNDECInfoEntry 12 }


hh3chipsNDECLeaf OBJECT IDENTIFIER ::= { hh3cNDEC 7 }

hh3chipsNDECConnections OBJECT-TYPE
    SYNTAX INTEGER
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Total connections of the system at this time."
    ::= { hh3chipsNDECLeaf 1 }

hh3chipsNDECBackup OBJECT-TYPE
    SYNTAX INTEGER
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The flag that NDEC using backup. The value 1 represents using backup
        The value 0 represents not using backup"
    ::= { hh3chipsNDECLeaf 2 }


hh3chipsTraps OBJECT IDENTIFIER ::= { hh3cNDEC 8 }

hh3chipsNDECNormalResetTrap NOTIFICATION-TYPE
     OBJECTS { hh3chipsCardSlot,hh3chipsCardHardVer,
     hh3chipsCardSoftVer,hh3chipsCardCPLDVer }
     STATUS  current
     DESCRIPTION
          "This trap is generated when the NDEC card is reset."
    ::= { hh3chipsTraps 1 }

hh3chipsNDECStateChangeTrap NOTIFICATION-TYPE
     OBJECTS { hh3chipsCardSlot,hh3chipsCardStatus       }
     STATUS  current
     DESCRIPTION
         "This trap is generated when the NDEC card's state changes."
    ::= { hh3chipsTraps 2 }

hh3chipsNDECFlowTrap NOTIFICATION-TYPE
     OBJECTS { hh3chipsCardSlot,hh3chipsDropPacInUnitTime }
     STATUS  current
     DESCRIPTION
         "This trap is generated when a NDEC card is overloaded."
    ::= { hh3chipsTraps 3 }

END