TIMETRA-RPKI-MIB
AI MIB Summary
The TIMETRA-RPKI-MIB module enables monitoring of Route Origin Validation (ROV) session states and origin validation metrics on Nokia SR OS (SROS) routers. It provides SNMP-accessible counters and status indicators specifically for RPKI session establishment, validation failures, and cache synchronization events.
This document is the SNMP MIB module for the Nokia SROS implementation of origin validation for rpki session.
Copyright 2003-2016 Nokia. All rights reserved. Reproduction of this document is authorized on the condition that the foregoing copyright notice is included.
This SNMP MIB module (Specification) embodies Nokia's proprietary intellectual property. Nokia retains all title and ownership in the Specification, including any revisions.
Nokia grants all interested parties a non-exclusive license to use and distribute an unmodified copy of this Specification in connection with management of Nokia products, and without fee, provided this copyright notice and license appear on all copies.
This Specification is supplied 'as is', and Nokia makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification.
Main OID:
timetraRpkiOriginValidMIBModule.1.3.6.1.4.1.6527.1.1.3.96
57
Objects
Active
Status
7
Dependencies
Imported Objects
Objects
57 total| Object Name |
|---|
timetraRpkiOriginValidMIBModuleThis document is the SNMP MIB module for the Nokia SROS
implementation of origin validation for rpki session.
Copyright 2003-2016 Nokia. All rights reserved.
Reproduction of this document is authorized on the condition that
the foregoing copyright notice is included.
This SNMP MIB module (Specification) embodies Nokia's
proprietary intellectual property. Nokia retains all title and
ownership in the Specification, including any revisions.
Nokia grants all interested parties a non-exclusive
license to use and distribute an unmodified copy of this
Specification in connection with management of Nokia products,
and without fee, provided this copyright notice and license appear
on all copies.
This Specification is supplied 'as is', and Nokia
makes no warranty, either express or implied, as to the use,
operation, condition, or performance of the Specification. MODULE-IDENTITY .1.3.6.1.4.1.6527.1.1.3.96 |
tmnxRpkiConformance OBJECT IDENTIFIER .1.3.6.1.4.1.6527.3.1.1.96 |
tmnxRpkiCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.6527.3.1.1.96.1 |
tmnxRpkiGroups OBJECT IDENTIFIER .1.3.6.1.4.1.6527.3.1.1.96.2 |
tmnxRpkiObjs OBJECT IDENTIFIER .1.3.6.1.4.1.6527.3.1.2.96 |
vRtrRpkiSessInstanceTablevRtrRpkiSessInstanceTable consists of information about each running
instance of Rpki-Session. SEQUENCE OF VRtrRpkiSessInstanceEntry .1.3.6.1.4.1.6527.3.1.2.96.1 |
vRtrRpkiSessInstanceEntryAn entry (conceptual row) in the vRtrRpkiSessInstanceTable.
Each entry represents an instance of Rpki-Session running on
the virtual router. VRtrRpkiSessInstanceEntry .1.3.6.1.4.1.6527.3.1.2.96.1.1 |
vRtrRpkiSessInstanceAddressTypeThe value of vRtrRpkiSessInstanceAddressType indicates the IP address
type of the RPKI session configuration.
vRtrRpkiSessInstanceAddressType supports InetAddressType values
'ipv4 (1)','ipv6 (2)' and 'ipv6z(4)'. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.6527.3.1.2.96.1.1.1 |
vRtrRpkiSessInstanceAddressThe value of vRtrRpkiSessInstanceAddress indicates the IPv4,IPv6 or a
link local address of a local cache server. InetAddress .1.3.6.1.4.1.6527.3.1.2.96.1.1.2 |
vRtrRpkiSessInstanceRowStatusThe value of vRtrRpkiSessInstanceRowStatus specifies the row status for
this RPKI instance for the virtual router. It is used to create and
delete row entries in this table.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.6527.3.1.2.96.1.1.3 |
vRtrRpkiSessInstanceConnectRetryThe value of vRtrRpkiSessInstanceConnectRetry specifies the value
(in seconds) for the RPKI Connect Retry timer.rw BgpConnectRetryTime UNITS "seconds" .1.3.6.1.4.1.6527.3.1.2.96.1.1.4 |
vRtrRpkiSessInstanceDescriptionThe value of vRtrRpkiSessInstanceDescription specifies the textual
description of this RPKI instance.rw DisplayString .1.3.6.1.4.1.6527.3.1.2.96.1.1.5 |
vRtrRpkiSessInstanceHoldTimeThe value of vRtrRpkiSessInstanceHoldTime specifies the length of
time in seconds that the session is to be considered UP without any
indication that the cache server is alive and reachable.
The default value of vRtrRpkiSessInstanceHoldTime is 600 seconds and
must be set to a value at least 2 times the value of
vRtrRpkiSessInstanceRefreshTime.
When object vRtrRpkiSessInstanceHoldTime is set, object
vRtrRpkiSessInstanceRefreshTime needs to be set as well.
Reception of any PDU from the cache server resets the hold timer.
When the hold-time expires the session is considered to be DOWN and
the stale timer is started.rw BgpHoldTime UNITS "seconds" .1.3.6.1.4.1.6527.3.1.2.96.1.1.6 |
vRtrRpkiSessLocalAddressTypeThe value of vRtrRpkiSessLocalAddressType specifies the type of
vRtrRpkiSessLocalAddress.rw InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.6527.3.1.2.96.1.1.7 |
vRtrRpkiSessLocalAddressThe value of vRtrRpkiSessLocalAddress specifies the address of the local
end of the Rpki session. In order for Rpki to function at least one
peer must be configured. This address is used to validate incoming
connections to the peer and to establish connections to the remote peer.
The default value of vRtrRpkiSessLocalAddress is the system IP address.rw InetAddress .1.3.6.1.4.1.6527.3.1.2.96.1.1.8 |
vRtrRpkiSessInstancePortThe value of vRtrRpkiSessInstancePort specifies the destination port
number to be used to connect the cache server. The default port number
is 323.rw Unsigned32 .1.3.6.1.4.1.6527.3.1.2.96.1.1.9 |
vRtrRpkiSessInstanceRefreshTimeThe value of vRtrRpkiSessInstanceRefreshTime triggers the sending of
periodic Serial Query PDUs for purposes of liveness detection.
The default value of vRtrRpkiSessInstanceRefreshTime is 300 seconds. and
is reset whenever a Reset Query or Serial Query PDU is sent to the
cache server. When the timer expires a new Serial Query PDU is sent
with the last known serial number.
When object vRtrRpkiSessInstanceRefreshTime is set, object
vRtrRpkiSessInstanceHoldTime needs to be set as well.rw Unsigned32 .1.3.6.1.4.1.6527.3.1.2.96.1.1.10 |
vRtrRpkiSessInstanceAdminStateThe value of vRtrRpkiSessInstanceAdminState specifies the
administrative state of Rpki session in this virtual router instance.rw TmnxAdminState (TIMETRA-TC-MIB) .1.3.6.1.4.1.6527.3.1.2.96.1.1.11 |
vRtrRpkiSessInstanceStaleRoutTimThe value of vRtrRpkiSessInstanceStaleRoutTim specifies the maximum
length of time that prefix origin records learned from the cache
server remain valid after the session with the cache server goes
down.
The default value of vRtrRpkiSessInstanceStaleRoutTim is 3600 seconds
(1 hour). When the timer expires all remaining stale entries associated
with the session are deleted.rw Unsigned32 .1.3.6.1.4.1.6527.3.1.2.96.1.1.12 |
vRtrRpkiSessInstanceSessionStateThe value of vRtrRpkiSessInstanceSessionState indicates the current
state of a particular session.ro Enumeration .1.3.6.1.4.1.6527.3.1.2.96.1.1.13 |
vRtrRpkiSessInstanceSessionFlapsThe value of vRtrRpkiSessInstanceSessionFlaps indicates the number of
times the session has transitioned from 'established' state to 'idle'
state.ro Unsigned32 .1.3.6.1.4.1.6527.3.1.2.96.1.1.14 |
vRtrRpkiSessInstanceUptimeThe value of vRtrRpkiSessInstanceUptime indicates the time since this
session is active.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.6527.3.1.2.96.1.1.15 |
vRtrRpkiSessInstanceActIpv4RecThe value of vRtrRpkiSessInstanceActIpv4Rec indicates the number of
active, non-withdrawn IPv4 records.ro Unsigned32 .1.3.6.1.4.1.6527.3.1.2.96.1.1.16 |
vRtrRpkiSessInstanceActIpv6RecThe value of vRtrRpkiSessInstanceActIpv6Rec indicates the number of
active, non-withdrawn IPv6 records.ro Unsigned32 .1.3.6.1.4.1.6527.3.1.2.96.1.1.17 |
vRtrRpkiSessInstanceSerialIdThe value of vRtrRpkiSessInstanceSerialId indicates the serial id
associated with this session.ro Unsigned32 .1.3.6.1.4.1.6527.3.1.2.96.1.1.18 |
vRtrRpkiSessInstanceSessionIdThe value of vRtrRpkiSessInstanceSessionId indicates the session id of
this session.ro Unsigned32 .1.3.6.1.4.1.6527.3.1.2.96.1.1.19 |
vRtrRpkiSessInstanceLastChangeThe value of vRtrRpkiSessInstanceLastChange indicates the sysUpTime
when this row was last modified.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.6527.3.1.2.96.1.1.20 |
vRtrOriginValStaticTablevRtrOriginValStaticTable consists of information about static-entry
under origin-validation. A static-entry can express validity or
invalidity information about an entry. SEQUENCE OF VRtrOriginValStaticEntry .1.3.6.1.4.1.6527.3.1.2.96.2 |
vRtrOriginValStaticEntryAn entry (conceptual row) in the vRtrOriginValStaticTable.Each entry
represents a static-entry about the AS numbers that are authorized to
originate routes for different prefixes. VRtrOriginValStaticEntry .1.3.6.1.4.1.6527.3.1.2.96.2.1 |
vRtrOrigValStaticIpPrefixTypeThe value of vRtrOrigValStaticIpPrefixType specifies
the address type of vRtrOrigValStaticIpPrefix address. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.6527.3.1.2.96.2.1.1 |
vRtrOrigValStaticIpPrefixThe value of vRtrOrigValStaticIpPrefix specifies
the IP address prefix to match for the origin validation. InetAddress .1.3.6.1.4.1.6527.3.1.2.96.2.1.2 |
vRtrOrigValStaticMinPrefixLenThe value of vRtrOrigValStaticMinPrefixLen specifies
the min value of the prefix length for vRtrOrigValStaticIpPrefix,
to match for the aggregation. InetAddressPrefixLength .1.3.6.1.4.1.6527.3.1.2.96.2.1.3 |
vRtrOrigValStaticMaxPrefixLenThe value of vRtrOrigValStaticMaxPrefixLen specifies
the max value of the prefix length for vRtrOrigValStaticIpPrefix,
to match for the aggregation. InetAddressPrefixLength .1.3.6.1.4.1.6527.3.1.2.96.2.1.4 |
vRtrOrigValStaticAS4ByteThe value of vRtrOrigValStaticAS4Byte specifies the autonomous system
number to be advertised to this peer. InetAutonomousSystemNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.6527.3.1.2.96.2.1.5 |
vRtrOrigValStaticRowStatusThe value of vRtrOrigValStaticRowStatus specifies the row status for this
static entry instance for the virtual router. It is used to create and
delete row entries in this table.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.6527.3.1.2.96.2.1.6 |
vRtrOrigValStaticASValidityThe value of vRtrOrigValStaticASValidity specifies whether the route entry
corresponding to the autonomous number is valid (true) or invalid (false).rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.6527.3.1.2.96.2.1.7 |
vRtrOriginValRouteTablevRtrOriginValRouteTable consists of information about the route
database which includes both static and dynamic route information
under origin-validation rpki. SEQUENCE OF VRtrOriginValRouteEntry .1.3.6.1.4.1.6527.3.1.2.96.3 |
vRtrOriginValRouteEntryAn entry (conceptual row) in the vRtrOriginValRouteTable. Each
entry represents the AS numbers that are authorized to originate
routes for different prefixes. Entries cannot be created or
deleted via a SNMP SET operation. VRtrOriginValRouteEntry .1.3.6.1.4.1.6527.3.1.2.96.3.1 |
vRtrOrigValRouteIpPrefixTypeThe value of vRtrOrigValRouteIpPrefixType specify
the address type of vRtrOrigValRouteIpPrefix address. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.6527.3.1.2.96.3.1.1 |
vRtrOrigValRouteIpPrefixThe value of vRtrOrigValRouteIpPrefix specify
the IP address prefix to match for the origin validation. InetAddress .1.3.6.1.4.1.6527.3.1.2.96.3.1.2 |
vRtrOrigValRouteMinPrefixLenThe value of vRtrOrigValRouteMinPrefixLen specify
the min value of the prefix length for vRtrOrigValRouteIpPrefix,
to match for the aggregation. InetAddressPrefixLength .1.3.6.1.4.1.6527.3.1.2.96.3.1.3 |
vRtrOrigValRouteMaxPrefixLenThe value of vRtrOrigValRouteMaxPrefixLen specify
the max value of the prefix length for vRtrOrigValRouteIpPrefix,
to match for the aggregation. InetAddressPrefixLength .1.3.6.1.4.1.6527.3.1.2.96.3.1.4 |
vRtrOrigValRouteAS4ByteThe value of vRtrOrigValRouteAS4Byte specify the autonomous system
number to be advertised to this peer. InetAutonomousSystemNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.6527.3.1.2.96.3.1.5 |
vRtrOrigValRouteTypeThe vRtrOrigValRouteType is an enumerated value that specifies whether
type of the route entry is static or dynamic. Enumeration .1.3.6.1.4.1.6527.3.1.2.96.3.1.6 |
vRtrOrigValRouteRpkiVrIdThe value of vRtrOrigValRouteRpkiVrId specify if the type of the Rpki
Session is base or management. TmnxVRtrID (TIMETRA-TC-MIB) .1.3.6.1.4.1.6527.3.1.2.96.3.1.7 |
vRtrOrigValRouteRpkiAddrTypeThe value of vRtrOrigValRouteRpkiAddrType specify the type of
vRtrRpkiSessLocalAddress. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.6527.3.1.2.96.3.1.8 |
vRtrOrigValRouteRpkiAddressThe value of vRtrOrigValRouteRpkiAddress specify the address of the
local end of the Rpki session. In order for Rpki to function at least
one peer must be configured. This address is used to validate incoming
connections to the peer and to establish connections to the remote peer.
When the value of vRtrOrigValRouteType is static the value of
vRtrOrigValRouteRpkiAddress is null. InetAddress .1.3.6.1.4.1.6527.3.1.2.96.3.1.9 |
vRtrOrigValASRouteValidityThe value of vRtrOrigValASRouteValidity indicates whether the route entry
corresponding to the autonomous number is valid (true) or invalid (false)
if the route is static. Default value for this object is valid(true).ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.6527.3.1.2.96.3.1.10 |
tmnxRpkiNotificationObjs OBJECT IDENTIFIER .1.3.6.1.4.1.6527.3.1.2.96.4 |
tmnxRpkiPeerAddrTypeThe value of tmnxRpkiPeerAddrType indicates the type of address for the
BGP peer represented by tmnxRpkiPeerAddr.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.6527.3.1.2.96.4.1 |
tmnxRpkiPeerAddrThe value of tmnxRpkiPeerAddr indicates the address for the Rpki peer.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.6527.3.1.2.96.4.2 |
tmnxRpkiErrorTypeThe value of tmnxRpkiErrorType indicates the type of the error
message seen on the Rpki session.ro Enumeration .1.3.6.1.4.1.6527.3.1.2.96.4.3 |
tmnxRpkiTrapStatusThe value of tmnxRpkiTrapStatus indicates the state of the trap.ro Enumeration .1.3.6.1.4.1.6527.3.1.2.96.4.4 |
tmnxRpkiNotifyPrefix OBJECT IDENTIFIER .1.3.6.1.4.1.6527.3.1.3.96 |
tmnxRpkiNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.6527.3.1.3.96.0 |
tmnxRpkiNotifySession[CAUSE] A tmnxRpkiNotifySession notification is generated when a rpki
session either comes up or goes down. Possible reasons for this to
happen is listed below:
(a) a session goes down due to hold-timer expiry.
(b) a session goes down due to failure of the TCP connection.
(c) a session goes down due to session ID mismatch.
(d) a session goes down due to sent or received Error Report PDU
containing fatal error code
(e) a session comes up (established state)
[EFFECT] This may remove the routes learned from a particular
rpki server if session goes down. Or start learning routes
from a rpki session which was newly established.
[RECOVERY] There is no recovery required for this notification. NOTIFICATION-TYPE .1.3.6.1.4.1.6527.3.1.3.96.0.1 |
tmnxRpkiStaleTimerExpiry[CAUSE] This notification is generated when a stale timer expires. The
stale timer expires due to the following reasons:
1) The peer goes down, and never comes up within the stale timer
interval
2) Peer goes down and comes backup and refreshes the databases. The
stale timer is expired to remove unrefreshed entries in the database.
3) The peer goes down and comes back again and again goes down before
refreshing any entries. Here again the stale timer is expired due to
unstable connection.
[EFFECT] This may remove the routes learned from a particular
rpki server if session goes down. Or start learning routes
from a rpki session which was newly established.
[RECOVERY] There is no recovery required for this notification. NOTIFICATION-TYPE .1.3.6.1.4.1.6527.3.1.3.96.0.2 |