POLICY-MANAGEMENT-MIB
AI MIB Summary
The POLICY-MANAGEMENT-MIB enables SNMP-based rule-based configuration and management of policy definitions within network infrastructure devices. It facilitates the monitoring and modification of access control lists, traffic shaping rules, and service policies to enforce consistent network behavior across managed nodes.
The MIB module for rule-based configuration of SNMP infrastructures.
Main OID:
policyMgt.1.3.6.1.3.107
59
Objects
Active
Status
3
Dependencies
Imported Objects
Objects
59 total| Object Name |
|---|
policyMgtThe MIB module for rule-based configuration of SNMP infrastructures. MODULE-IDENTITY .1.3.6.1.3.107 |
pmPolicyTableThe policy table. A policy is a pairing of a policyFilter and a policyAction which is used to apply the action to a selected set of elements. SEQUENCE OF PmPolicyEntry .1.3.6.1.3.107.1 |
pmPolicyEntryAn entry in the policy table. PmPolicyEntry .1.3.6.1.3.107.1.1 |
pmPolicyIndexA unique index for this policy entry. Unsigned32 .1.3.6.1.3.107.1.1.1 |
pmPolicyFilterA policyFilter is an expression which results in a boolean value which represents whether or not an element is a member of a set of elements upon which an action is to be performed. The format of this expression is the policy expression language. Filter evaluation stops immediately when any error is detected without executing the policyAction. The policyFilter is evaluated for various elements. Any element for which the policyFilter returns any nonzero value will match the filter and will have the associated policyAction executed on that element.rw UTF8String .1.3.6.1.3.107.1.1.2 |
pmPolicyCalendarA pointer to an entry in the schedTable of the Scheduling MIB [20]. This policy is active when specified by the associated schedule entry. If the value of this object is 0.0, this policy is always active.rw RowPointer (SNMPv2-TC) .1.3.6.1.3.107.1.1.3 |
pmPolicyActionA pmPolicyAction is an operation performed on a set of elements. The format of this expression is the policy expression language. Action evaluation stops immediately when any error is detected.rw UTF8String .1.3.6.1.3.107.1.1.4 |
pmPolicyFilterMaxLatencyEvery element under the control of this agent is re-checked periodically to see if it is under control of this policy by re-running the filter expression for this policy. This object lets the manager control the maximum amount of time that may pass before an element is re-checked. In other words, in any given interval of this duration, all elements must be re-checked. Note that it is an implementation-dependent matter as to how the policy agent schedules the checking of various elements within this interval.rw Unsigned32 UNITS "milliseconds" .1.3.6.1.3.107.1.1.5 |
pmPolicyActionMaxLatencyEvery element that matches this policy's filter and is therefore under control of this policy will have this policy's action executed periodically to ensure that the element remains in the state dictated by the policy. This object lets the manager control the maximum amount of time that may pass before an element has the action run on it. In other words, in any given interval of this duration, all elements under control of this policy must have the action run on them. Note that it is an implementation-dependent matter as to how the policy agent schedules the policy action on various elements within this interval.rw Unsigned32 UNITS "milliseconds" .1.3.6.1.3.107.1.1.6 |
pmPolicyPrecedenceThe order in which policies on the local system are evaluated. A policy with a higher precedence value will be evaluated after a policy with a lower precedence. For example, a policy with a precedence value of 999 will be evaluated after a policy with a precedence value of 998. These values must be unique on the local policy system that realizes this module. The value for a particular policy should be the same across an administrative domain, though that is not mandatory. When the local policy system performs the evaluation in the pmPolicyFilter for the policy identified by this row it will also read the pmTrackingElementToPolicyStatus object for each object returned as a result of the policy evaluation. If that object is set to modified(3), then the pmPolicyAction shall not be taken on that element. The value of precedence(4), of pmTrackingElementToPolicyStatus is an indication that when an evaluation was performed by another policy, the pmTrackingElementToPolicyStatus was found to have a value of on(1) and that policy had a higher precedence value than the policy that initially set the value of the pmTrackingElementToPolicyStatus to on(1). In this event, the pmTrackingElementToPolicyPrecedence object shall have the value of the pmPolicyIndex for the policy with the higher precedence value entered. If the policy identified by this row of the pmPolicyTable has a higher precedence value than the value found in pmTrackingElementToPolicyPrecedence then the pmPolicyAction should be performed on the element and the pmTrackingElementToPolicyPrecedence object updated with the value of the pmPolicyIndex for this policy. The only exception to these rules is when the policy that has the higher precedence value in not currently running, i.e., the schedule is off.rw Unsigned32 .1.3.6.1.3.107.1.1.7 |
pmPolicyGroupAn administratively assigned string that is used to group policies. Any combination is legal, the pmPolicyGroup object does not constrain precedence. That is precedence is evaluated independent of grouping though adminstrators might group related policies together for clarity.rw UTF8String .1.3.6.1.3.107.1.1.8 |
pmPolicyDescriptionA description of this rule and its significance, typically provided by a human.rw UTF8String .1.3.6.1.3.107.1.1.9 |
pmPolicyMatchesThe number of elements that are currently matched by the associated pmPolicyFilter.rw Gauge32 UNITS "elements" .1.3.6.1.3.107.1.1.10 |
pmPolicyExecutionErrorsThe number of times execution of this policy has been terminated due to run-time errors.ro Counter32 UNITS "errors" .1.3.6.1.3.107.1.1.11 |
pmPolicyDebuggingThe status of debugging for this policy. If this is turned on(1), log entries will be created in the pmDebuggingTable for each run-time error that is experienced by this policy.rw Enumeration .1.3.6.1.3.107.1.1.12 |
pmPolicyStatusThe status of this pmPolicyEntry.rw RowStatus (SNMPv2-TC) .1.3.6.1.3.107.1.1.13 |
pmElementTypeRegTableA registration table for element types managed by this system. SEQUENCE OF PmElementTypeRegEntry .1.3.6.1.3.107.2 |
pmElementTypeRegEntryA registration of an element type. PmElementTypeRegEntry .1.3.6.1.3.107.2.1 |
pmElementTypeRegIndexA unique index for this entry. Unsigned32 .1.3.6.1.3.107.2.1.1 |
pmElementTypeRegOIDPrefixAn OBJECT IDENTIFIER subtree under which all instances of this element type may be found. This OBJECT IDENTIFIER should be specified up to, but not including, any index objects. The agent will discover all instances in the system that are members of the specified subtree. It will then execute policy filters (and potentially policy actions) for each instance discovered. Each invocation of the policy filter will be supplied with a parameter. This is derived by taking the last N sub-identifiers from the discovered instance, where N is: X = number of sub-identifiers in pmElementTypeRegOIDPrefix Y = number of sub-identifiers in discovered instance N = Y - Xrw OBJECT IDENTIFIER .1.3.6.1.3.107.2.1.2 |
pmElementTypeRegNameA descriptive label for this registered type.rw UTF8String .1.3.6.1.3.107.2.1.3 |
pmElementTypeRegRowStatusThe status of this registration entry.rw RowStatus (SNMPv2-TC) .1.3.6.1.3.107.2.1.4 |
pmRoleESTableThe role string table with element as the major index. SEQUENCE OF PmRoleESEntry .1.3.6.1.3.107.3 |
pmRoleESEntryA role string entry associates a role string with an individual element. PmRoleESEntry .1.3.6.1.3.107.3.1 |
pmRoleESElementThe element to which this role string is associated. If the agent assigns new indexes in the MIB table to represent the same underlying element (re-indexing), the agent will modify this value to contain the new index for the underlying element. RowPointer (SNMPv2-TC) .1.3.6.1.3.107.3.1.1 |
pmRoleESStringThe role string that is associated with an element through this table. A role string is an administratively specified characteristic of a managed element (for example, an interface). It is a selector for policy rules, to determine the applicability of the rule to a particular managed element. UTF8String .1.3.6.1.3.107.3.1.2 |
pmRoleESStatusThe status of this role string.rw RowStatus (SNMPv2-TC) .1.3.6.1.3.107.3.1.3 |
pmRoleSETableA read-only version of the role string table with roleString as the major index. The purpose of this table is to make it easy to retrieve all elements that share a common string. SEQUENCE OF PmRoleSEEntry .1.3.6.1.3.107.4 |
pmRoleSEEntryA role string entry associates a role string with an individual element. PmRoleSEEntry .1.3.6.1.3.107.4.1 |
pmRoleSEStringThe role string that is associated with an element through this table. A role string is an administratively specified characteristic of a managed element (for example, an interface). It is a selector for policy rules, to determine the applicability of the rule to a particular managed element. UTF8String .1.3.6.1.3.107.4.1.1 |
pmRoleSEElementThe element to which this role string is associated. If the agent assigns new indexes in the MIB table to represent the same underlying element (re-indexing), the agent will modify this value to contain the new index for the underlying element.ro RowPointer (SNMPv2-TC) .1.3.6.1.3.107.4.1.2 |
pmCapabilitiesTableThe pmCapabilitiesTable contains a description of the inherent capabilities of the system. SEQUENCE OF PmCapabilitiesEntry .1.3.6.1.3.107.5 |
pmCapabilitiesEntryThe description of a capability or limitation of a capability of the system. An entry will exist for each domain and mechanism specific ability the system has. In the case of a domain specific capability with no mechanism specific parameters, the pmCapabilitiesSubType and all other columns may be null. Entries will exist that contain values for the pmCapabilitiesRestrictOID, pmCapabilitiesRestrictType, pmCapabilitiesRestrictValue and pmCapabilitiesRestrictString objects only when an implementation is reporting a mechanism specific restriction. Multiple entries are possible when more than one restriction for a type or subtype are needed. PmCapabilitiesEntry .1.3.6.1.3.107.5.1 |
pmCapabilitiesIndexA unique index for this entry. Unsigned32 .1.3.6.1.3.107.5.1.1 |
pmCapabilitiesTypeThe type of the capability represented by this entry. The IANA will publish the list of identifiers that are valid values for this object.ro OBJECT IDENTIFIER .1.3.6.1.3.107.5.1.2 |
pmCapabilitiesSubTypeThe sub type of capability is a pointer to a mechanism specific set of capabilities supporting a base technology. In the case of DIFFSERV, the OID value here would be the base OID of the Differentiated Services Policy MIB Module.ro OBJECT IDENTIFIER .1.3.6.1.3.107.5.1.3 |
pmCapabilitiesModificationOIDThe OID of the object that is either not supported, supported with one or more limitations, or expanded by an implementation specific module. If this columnar object is other than null then there must be at least an entry in pmCapabilitiesModificationType. Note that this need not be a leaf node or scalar object. If an entire table is not supported, this value can be the base OID for the table.ro OBJECT IDENTIFIER .1.3.6.1.3.107.5.1.4 |
pmCapabilitiesModificationTypeAn unsupported value indicates that the OID in pmCapabilitiesModificationOID is not supported on this system. A value of 1 indicates that the OID is supported but with restricted values These constraints are described in the pmCapabilitiesModificationValue and pmCapabilitiesModificationString objects. A value of 2 indicates a vendor specific extension to a standard. The OID of the new object is pmCapabilitiesModificationOID. For some implementations, additional functions may be provided. addvalue indicates that this row of the table describes an additional value that the object can take. The specific value is in the pmCapabilitiesModificationValue. The values of 4 and 5 indicate restrictions or the removal of restrictions for the object identified.ro Enumeration .1.3.6.1.3.107.5.1.5 |
pmCapabilitiesModificationValueIf the value of pmCapabilitiesModificationType is 0, this object will be null since 0 indicates no support for the object at all. A value of 1 in the pmCapabilitiesModificationType will be further modified by a single integer value in this object that corresponds to enumerated integer values that are not supported by the system for the object that is identified in this row. This value can also represent the limit values in the pmCapabilitiesModificationType object.ro Integer32 .1.3.6.1.3.107.5.1.6 |
pmCapabilitiesModificationStringAny additional details or description or parameters needed.ro OCTET STRING .1.3.6.1.3.107.5.1.7 |
pmTrackingPolicyToElementTableThe pmTrackingPolicyToElementTable describes what elements are under control of a policy. SEQUENCE OF PmTrackingPolicyToElementEntry .1.3.6.1.3.107.6 |
pmTrackingPolicyToElementEntryAn entry in the pmTrackingPolicyToElementTable. The pmPolicyIndex in the index specifies the policy tracked by this entry. PmTrackingPolicyToElementEntry .1.3.6.1.3.107.6.1 |
pmTrackingPolicyToElementElementThe element this policy is configuring. RowPointer (SNMPv2-TC) .1.3.6.1.3.107.6.1.1 |
pmTrackingPolicyToElementStatusThe status of this policy-element relationship. This value will be 1 if the associated policyFilter returned 1 for this element and if the calendar for the policy is active. Entries will only exist in this table if their status is on(1). Thus, on(1) is the only value of this object that can be retrieved. This object exists so that it can serve as the 'payload' in the varbind instead of the pmTrackingPolicyToElementElement object which is much longer and is already in the index (it would otherwise be duplicated).ro Enumeration .1.3.6.1.3.107.6.1.2 |
pmTrackingElementToPolicyTableThe pmTrackingElementToPolicyTable describes what policies are controlling an element. SEQUENCE OF PmTrackingElementToPolicyEntry .1.3.6.1.3.107.7 |
pmTrackingElementToPolicyEntryAn entry in the pmTrackingElementToPolicyTable. The pmPolicyIndex in the index specifies the policy tracked by this entry. PmTrackingElementToPolicyEntry .1.3.6.1.3.107.7.1 |
pmTrackingElementToPolicyElementThe element this policy is configuring. RowPointer (SNMPv2-TC) .1.3.6.1.3.107.7.1.1 |
pmTrackingElementToPolicyStatusThe status of this policy-element relationship. This value will be 1 if the associated policyFilter returned 1 for this element and if the calendar for the policy is active. Entries will not exist in this table if their status would be off(0). A policy can be forcibly disabled on a particular element by setting this value to forceOff(2). The agent should then act as if the policyFilter failed for this element. The forceOff(2) state will persist (even across reboots) until this value is set to on(1) by a management request. Even if the policyFilter later fails for this element, this value will stay in the forceOff(2) state.rw Enumeration .1.3.6.1.3.107.7.1.2 |
pmDebuggingTableThe pmDebuggingPolicyTable logs debugging messages when policies experience runtime errors. SEQUENCE OF PmDebuggingEntry .1.3.6.1.3.107.8 |
pmDebuggingEntryAn entry in the pmDebuggingTable. The pmPolicyIndex in the index specifies the policy that encountered the error that led to this log entry. PmDebuggingEntry .1.3.6.1.3.107.8.1 |
pmDebuggingElementThe element the policy was executing on when it encountered the error that led to this log entry.ro RowPointer (SNMPv2-TC) .1.3.6.1.3.107.8.1.1 |
pmDebuggingLogIndexA unique index for this log entry amongst other log entries for this policy/element combination.ro Unsigned32 .1.3.6.1.3.107.8.1.2 |
pmDebuggingMessageAn error message generated by the expression runtime system.ro UTF8String .1.3.6.1.3.107.8.1.3 |
pmConformance OBJECT IDENTIFIER .1.3.6.1.3.107.20 |
pmCompliances OBJECT IDENTIFIER .1.3.6.1.3.107.20.1 |
pmComplianceDescribes the requirements for conformance to the Policy-Based Management MIB Unknown .1.3.6.1.3.107.20.1.1 |
pmGroups OBJECT IDENTIFIER .1.3.6.1.3.107.20.2 |
pmPolicyManagementGroupObjects that allow for the creation and management of configuration policies. Unknown .1.3.6.1.3.107.20.2.1 |
pmBaseFunctionLibrary OBJECT IDENTIFIER .1.3.6.1.3.107.20.2.2 |