view Side-By-Side changes
Internet Engineering Task Force F. Baker Diffserv Working Group Cisco Systems INTERNET-DRAFT K. Chan ExpiresNovember 2000January 2001 Nortel Networksdraft-ietf-diffserv-mib-03.txtdraft-ietf-diffserv-mib-04.txt A. SmithExtreme Networks May<editor> July 2000 Management Information Base for the Differentiated Services Architecture Status of this Memo This document is an Internet-Draft and is in full conformance with all provisions of Section 10 of RFC 2026. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This document is a product of the IETF's Differentiated Services Working Group. Comments should be addressed to WG's mailing list at diffserv@ietf.org. The charter for Differentiated Services may be found at http://www.ietf.org/html.charters/diffserv-charter.html Copyright (C) The Internet Society (2000). All Rights Reserved. Distribution of this memo is unlimited. Abstract This memo describes a SMIv2 MIB for a device implementing the Differentiated Services Architecture [DSARCH], described in detail by the Differentiated Services RouterConceptualInformal Management Model [MODEL]. Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page 1] Internet Draft Differentiated Services MIBMayJuly 2000 1. The SNMP Management Framework The SNMP Management Framework presently consists of five major components: o An overall architecture, described in RFC 2571 [1]. o Mechanisms for describing and naming objects and events for the purpose of management. The first version of this Structure of Management Information (SMI) is called SMIv1 and described in RFC 1155 [2], RFC 1212 [3] and RFC 1215 [4]. The second version, called SMIv2, is described in RFC 2578 [5], RFC 2579 [6] and RFC 2580 [7]. o Message protocols for transferring management information. The first version of the SNMP message protocol is called SNMPv1 and described in RFC 1157 [8]. A second version of the SNMP message protocol, which is not an Internet standards track protocol, is called SNMPv2c and described in RFC 1901 [9] and RFC 1906 [10]. The third version of the message protocol is called SNMPv3 and described in RFC 1906 [10], RFC 2572 [11] and RFC 2574 [12]. o Protocol operations for accessing management information. The first set of protocol operations and associated PDU formats is described in RFC 1157 [8]. A second set of protocol operations and associated PDU formats is described in RFC 1905 [13]. o A set of fundamental applications described in RFC 2573 [14] and the view-based access control mechanism described in RFC 2575 [15]. A more detailed introduction to the current SNMP Management Framework can be found in RFC 2570 [16]. Managed objects are accessed via a virtual information store, termed the Management Information Base or MIB. Objects in the MIB are defined using the mechanisms defined in the SMI. This memo specifies a MIB module that is compliant to the SMIv2. A MIB conforming to the SMIv1 can be produced through the appropriate translations. The resulting translated MIB must be semantically equivalent, except where objects or events are omitted because no translation is possible (use of Counter64). Some machine-readable information in SMIv2 will be converted into textual descriptions in SMIv1 during the translation process. However, this loss of machine readable information is not considered to change the semantics of the MIB. Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page 2] Internet Draft Differentiated Services MIBMayJuly 2000 2.Structure of this MIBIntroduction 2.1. Relationship to the Diffserv Informal Management Model This MIB is designed according to the Differentiated Servicesimplementation conceptual modelInformal Management Model documented in [MODEL].2.1. OverviewTheconceptualmodel[MODEL] discussesdescribes the waywe model thethat ingress and egress interfaces of an 'n'-portrouter. In this MIB, we model these identically, makingrouter are modelled. It describes thedistinction between them an index variable. Eachconfiguration and management of a Diffserv interfacethen performs some or allin terms ofthe following high-level functions: o Classify each packeta Transmission Control Block (TCB) which contains, by definition, zero or more classifiers, meters, actions, algorithmic droppers, queues and schedulers. These elements are arranged according tosome set of rules o Determine whetherthedataQoS policy being expressed, always in that order. Traffic may be classified; classified traffic may be metered; each streamthe packet is partofis within or outside its rate o Performtraffic identified by aset of resulting actions, possibly including counting the traffic, applicationcombination ofan appropriate drop policyclassifiers andmarkingmeters may have some set ofthe traffic withactions performed on it; it may have dropping algorithms applied and it may ultimately be stored into aDifferentiated Services Code Point (DSCP) as defined in [DSFIELD]. o Enqueuequeue before being scheduled out to its next destination, either onto a link or to another TCB. When thetraffictreatment foroutputa given packet must have any of those elements repeated in a way that breaks theappropriatepermitted sequence {classifier, meter, action, algorithmic dropper, queue,whose scheduler may shape the traffic or simply forward it with some minimum rate or maximum latency.scheduler}, this must be modelled by cascading multiple TCBs. The MIBtherefore contains therepresents this cascade by followingelements: Classifier and Filter Tables A general extensible framework and one example (an IP Six-Tuple Multi-Field Classification Table). Meter Tables A general extensible framework and one example (an exponential weighted moving average meter). Action Tables Absolute Drop, Mark and Count actions.the "Next" attributes of the various elements. They indicate what the next step in Diffserv processing will be, whether it be a classifier, meter, action, algorithmic dropper, queue, scheduler or a decision to now forward a packet. The"multiplexer", "replicator" and "null" actions describedMIB models the individual elements that make up the TCBs - it only refers in[MODEL] are accomplished implicitly by meanspassing to the higher-level concept of a TCB when it is necessary to distinguish of which TCB, of several, a particular element is a part. Literal TCBs are enumerated for Classifier elements: this is necessary to distinguish different, but overlapping, classification policies in different TCBs. However, TCBs are not enumerated for other elements. When a TCB performs no classification theRowPointer structuresliteral TCB of the succeeding elements is not used in their instance (index) as there is no need to distinguish them - each element is unique already. 2.2. Relationship to otherelements. Queue, SchedulerMIBs andAlgorithmic Dropper Tables Queue, SchedulerPolicy Management This MIB provides for direct reporting andAlgorithmic Dropper Tables.manipulation of the most detailed functional elements described by the Diffserv Informal Management Model for management. These elements are instantiated in a very detailed manner, typically indexed by interface, direction and other indices. The concept of "interface" is as for the InterfaceIndex/ifIndex of the IETF Interfaces MIB [IFMIB]. Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page 3] Internet Draft Differentiated Services MIBMayJuly 20002.2. Classifiers The classifierOther MIBs andfilter tables determine how traffic is sorted out. They identify separable classes of traffic, by referencedata structure definitions for policy management mechanisms other than SNMP/SMIv2 are likely toan appropriate filter, which may select anything from an individual micro- flow to aggregates identified by DSCP. The classification is used to send these separate streams to appropriate meters or action elements. For example, to indicate a multi-stage meter, sub-classes of traffic may be sent to different meter stages: e.g.exist inan implementation of the Assured Forwarding (AF) PHB [AF-PHB], AF11 traffic might be sent to the first meter, AF12 traffic might be sent tothesecond and AF13 traffic sent tofuture for thesecond meter stage's out-of-profile action. 2.2.1. Classifier Table The structurepurposes of abstracting theclassifier table, as described in [MODEL], is a sequence of unambiguous tests. Within each stagemodel inthe sequence, it must not be importantother ways. In particular, abstractions inwhich orderthetestsdirection of less detailed definitions of Diffserv functionality aremade. Thislikely e.g. some form of "Per- Hop Behaviour"-based definition involving a template of detailed object values which is applied tofacilitate optimized implementations such as index trees. Orderspecific instances of objects in this MIB semi-automatically. Another possible direction of abstraction ispresent onlyone using a concept of "roles" (often, but not always, applied toresolve ambiguity: for that reasoninterfaces). In this case, it may be possible to re-use thestageobject definitions inthe sequencethis MIB but with different indexing variables e.g. by mechanically replacing ifIndex by some sort of "roleIndex". Work isreferred to here andongoing in[MODEL] asthis area. 2.3. MIB Overview In this MIB, we model the"precedence"ingress and egress portions of a router identically, making theclassifier stage: stages with higher valuesdistinction between them an index variable. Each interface then performs some or all ofprecedence are compared first;theorder of tests for entriesfollowing high-level functions: o Classify each packet according to some set of rules o Determine whether thesame precedencedata stream the packet isunimportant. An important formpart ofclassifieris"everything else": the final stagewithin or outside its rate o Perform a set of resulting actions, possibly including counting theclassifier i.e. the one with the lowest precedence, must be "complete" since the resulttraffic, application of anincomplete classifier is not necessarily deterministic - see [MODEL] section 4.1.2. The definitionappropriate drop policy and marking of theactual filter to be used by the classifier is referenced viatraffic with aRowPointer: this enables the use of any sort of filter table that one might wish to design, standard or proprietary. The filter table may be, but does not need to be,Differentiated Services Code Point (DSCP) as defined inthis MIB module. The classifiers specified here are at[DSFIELD]. o Enqueue theinterface level i.e. they are indexed by ifIndex: theytraffic for output in the appropriate queue, whose scheduler maybe derived fromshape the traffic or simply forward it with somemore general policies e.g. something based on interface roles, but such discussion is outsideminimum rate or maximum latency. The MIB therefore contains thescope of this document. See e.g. [POLTERM] section 4 for a discussion of Roles. 2.2.2. IP Six-Tuplefollowing elements: ClassifierTable This MIB includes a definition for anand Filter Tables A general extensible framework and one example (an IP Six-TupleClassifier, used for IP traffic classification. Entries in this filter table are referencedMulti-Field Classification Table). Meter Tables A general extensible framework and one example (an exponential weighted moving average meter). Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page 4] Internet Draft Differentiated Services MIBMayJuly 2000fromAction Tables Absolute Drop, Mark and Count actions. The "multiplexer", "replicator" and "null" actions described in [MODEL] are accomplished implicitly by means of the RowPointerdiffServClassifierPattern attributes of classifier table entries. A Behavior Aggregate (BA) Classifier, acting only on DSCPs, is a simple formstructures of theIP Six-Tuple Classifier. It is represented by having the diffServSixTupleClfrDscp attribute set to the desired DSCP and allotherclassification attributes set to match-all, their default settings. The alternative approachelements. Queue, Scheduler and Algorithmic Dropper Tables Queue, Scheduler and Algorithmic Dropper Tables. 3. Structure ofproviding a specific definition inthis MIBfor a BA Classifier was discussed and rejected. Each entry in the IP Six-Tuple Classifier Table defines a single filter.3.1. Classifiers Thetextual conventionclassifier and filter tables determine how traffic is sorted out. They identify separable classes ofInetAddress [INETADDR]traffic, by reference to an appropriate filter, which may select anything from an individual micro- flow to aggregates identified by DSCP. The classification is usedfor both IPv4to send these separate streams to appropriate Meter, Action, Queue, Scheduler andIPv6 addressing. The useAlgorithmic Dropper elements. For example, to indicate a multi-stage meter, sub-classes ofIP Six-Tuple Classifiers is discussedtraffic may be sent to different meter stages: e.g. in[DSARCH] and abstract examplesan implementation ofhow theythe Assured Forwarding (AF) PHB [AF-PHB], AF11 traffic might beconfigured are provided in [MODEL]. 2.3. Meters A meter, accordingsent to[MODEL] section 5, measurestherate at which packets making up a stream offirst meter, AF12 trafficpass it, compares this ratemight be sent tosome set of thresholdsthe second andproduces some number (two or more) of potential results. A given packet is said to "conform"AF13 traffic sent to the second meterif, at the time thatstage's out-of-profile action. 3.1.1. Classifier Table The structure of thepacketclassifier table, as described in [MODEL], isbeing looked at,a sequence of unambiguous tests. Within each stage in thestream appears tosequence, it must not bewithinimportant in which order themeter's profile. MIB syntax makes it easiesttests are made. This is todefine this as a sequence of one or more cascaded pass/fail tests, modeled herefacilitate optimized implementations such asif-then-else constructs. Itindex trees. Order isimportantpresent only tounderstandresolve ambiguity: for thatthis way of modelling does not imply anything aboutreason theimplementation being "sequential": multi-rate/multi- profile meters e.g. those designedstage in the sequence is referred tosupport [SRTCM] or [TRTCM], can still be modelled this way even if they, of necessity, share information betweenhere and in [MODEL] as thestages:"precedence" of the classifier stage: stages with higher values of precedence areintroduced merely as a notational convenience incompared first; the orderto simplifyof tests for entries of theMIB structure. 2.3.1. Meter Table The generic meter tablesame precedence isused as a base for all more specific formsunimportant. An important form ofmeter. The definitionclassifier is "everything else": the final stage of thespecific parametersclassifier i.e. the one with the lowest precedence, must be "complete" since the result of an incomplete classifier is not necessarily deterministic - see [MODEL] section 4.1.2. The definition of themeteractual filter to be used by the classifier is referenced via a RowPointer: this enables the use of any sort ofspecific meterfilter table that one might wish to design, standard or proprietary. Thespecific meterfilter table may be, but does not need to be, defined in this MIB module.2.3.2. Token-Bucket Meter Table This is included as an example of a common type of meter. Entries in this table are referenced from the RowPointer diffServMeterSpecificBaker, Chan, Smith ExpiresNovember 2000January 2001 [Page 5] Internet Draft Differentiated Services MIBMayJuly 2000attributes of meter table entries.Theparametersclassifiers specified here arerepresentedat the interface level i.e. they are indexed by ifIndex: they may be derived from some more general policies e.g. something based on interface roles, but such discussion is outside the scope of this document. See e.g. [POLTERM] section 4 for arate diffServTBMeterRate anddiscussion of Roles. 3.1.2. IP Six-Tuple Classifier Table This MIB includes aburst size diffServTBMeterBurstSize. 2.4. Actions Actions include "no action", "mark thedefinition for an IP Six-Tuple Classifier, used for IP trafficwith a DSCP", "drop the traffic" or "count it". Other tasks such as "shape the traffic" or "drop based on some algorithm" are handled elsewhere as queueing mechanisms, rather than actions, consistent with [MODEL]. The "multiplexer", "replicator" and "null" actions describedclassification. Entries in[MODEL]this filter table areaccomplished implicitly by means ofreferenced from the RowPointerstructuresdiffServClassifierPattern attributes of classifier table entries. A Behavior Aggregate (BA) Classifier, acting only on DSCPs, is a simple form of theother elements. This MIB usesIP Six-Tuple Classifier. It is represented by having theAction Table diffServActionTablediffServSixTupleClfrDscp attribute set toorganize one Action's relationship withtheelement(s) beforedesired DSCP andafter it. It allows Actions to be cascaded to enable multiple Actions be appliedall other classification attributes set toa single traffic stream by using each entry's diffServActionNext attribute.match-all, their default settings. Thelast entry's diffServActionNext attribute may point to the next TCB element, normally a Queueing element. The parameters needed for each Action element will depend on the typealternative approach ofAction to be taken. Hence there areproviding a specificAction Tables for all the different Action types. This flexibility allows additional Actions be specifieddefinition infuture revisions ofthisMIB, or in other MIBs and also allowsMIB for a BA Classifier was discussed and rejected. Each entry in the IP Six-Tuple Classifier Table defines a single filter. The textual convention of InetAddress [INETADDR] is used for both IPv4 and IPv6 addressing. The use ofproprietary Actions without impact on those defined here. 2.4.1. DSCP Mark Action Table This ActionIP Six-Tuple Classifiers isapplied to traffic in order to mark it with a Diffserv Codepoint (DSCP) value, specifieddiscussed inthe diffServDscpMarkActTable. Other marking actions[DSARCH] and abstract examples of how they might bespecified elsewhere - theseconfigured areoutsideprovided in [MODEL]. 3.2. Meters A meter, according to [MODEL] section 5, measures thescoperate at which packets making up a stream of traffic pass it, compares thisMIB. 2.4.2. Count Action Table Count Actions are usedrate to some set of thresholds and produces some number (two or more) of potential results. A given packet is said to "conform" tocountthetraffic passing along a particular path throughmeter if, at themodel. If specified, they are likelytime that the packet is being looked at, the stream appears to beplaced first, before other types of Action. For example, when both a Count and an Absolute Dropper Action are specified,within theCount Action needsmeter's profile. MIB syntax makes it easiest tocount the traffic stream before any traffic gets dropped. Note that there are counters contained directly in Algorithmic Dropper elementsdefine this as a sequence of one or more cascaded pass/fail tests, modeled here as if-then-else constructs. It is important toindicate the amountunderstand that this way oftraffic dropped bymodelling does not imply anything about the implementation being "sequential": multi-rate/multi-profile meters e.g. thoseelements. Countersdesigned to support [SRTCM] or [TRTCM], can still be modelled this way even if they, of necessity, share information between the stages: the stages arearranged inintroduced merely as asinglenotational convenience in order to simplify the MIB structure. 3.2.1. Meter Table The generic meter tablebut with separate conformance statementsis used as a base forlow-speed and high-speed interfaces, consistent with [IFMIB].all more specific forms of meter. The definition of parameters specific to the type of meter used Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page 6] Internet Draft Differentiated Services MIBMayJuly 20002.4.3. Absolute Drop Action This action just silently discards all traffic presented to it, without counting it. This action has no additional parameters and soisrepresented only asreferenced via a pointer to adiffServActionTypetable containing those specifics with the instance within that table identified by the same indices as for the base meter table. This enables the use ofdropAlways withoutany sort of specificparameters (diffServActionSpecific value will be null). 2.5. Queueing Elements These include Algorithmic Droppers, Queues and Schedulers. 2.5.1. Algorithmic Dropper Table Algorithmic Droppers have a close relationship with queueing: they are representedmeter table that one might wish to design, standard or proprietary. The specific meter table may be, but does not need to be, defined in this MIBby entries inmodule. 3.2.2. Token-Bucket Meter Table This is included as anAlgorithmic Dropper Table.example of a common type of meter. Entriescontainin this table are referenced from the RowPointer diffServMeterSpecific attributes of meter table entries. The parameters are represented by a"next" attribute which indicates to which queue they sink their traffic. They may also containrate diffServTBMeterRate and apointer to specific detail ofburst size diffServTBMeterBurstSize. 3.3. Actions Actions include "no action", "mark thedrop algorithm. This MIB only definestraffic with a DSCP", "drop thedetail for one drop algorithm, Tail Drop; other algorithmstraffic" or "count it". Other tasks such as "shape the traffic" or "drop based on some algorithm" areoutsidehandled elsewhere as queueing mechanisms, rather than actions, consistent with [MODEL]. The "multiplexer", "replicator" and "null" actions described in [MODEL] are accomplished implicitly by means of thescopeRowPointer structures ofthisthe other elements. This MIBbutuses thegeneral framework is intendedAction Table diffServActionTable toallow for their inclusion in other modules. One generally-applicable parameter of a dropper isorganize one Action's relationship with thespecification of a queue-depth threshold at which some drop action iselement(s) before and after it. It allows Actions to be cascaded to enable multiple Actions be applied tostart. This is represented in this MIB, asabasesingle traffic stream by using each entry's diffServActionNext attribute. The diffServActionNext attribute of theAlgorithmic Dropper entry, by pointing tolast action entry in thequeue for which depth ischain points tobe compared andthethreshold,next element inbytes, to compare against. <ed: is we need to representthe TCB, if any, e.g. adropper as depending on multiple queues then this single-queue pointer and threshold is not adequate: should we leave them here or not? theyQueueing element. It may also point at a next TCB. The parameters needed for each Action element will depend on the type of Action to beusefultaken. Hence there are specific Action Tables formany, but not all, dropper algorithms.> o A Tail Dropper requiresall thespecificationdifferent Action types. This flexibility allows additional Actions be specified in future revisions ofa maximum queue depth threshold: when the queue pointed at by diffServAlgDropQMeasure reaches that depth threshold, diffServAlgDropQThresh, any new traffic arriving atthis MIB, or in other MIBs and also allows for thedropper is discarded. o Random Droppers require more detailed specificationuse of proprietary Actions without impact on those defined here. 3.3.1. DSCP Mark Action Table This Action is applied to traffic in order to mark it with a Diffserv Codepoint (DSCP) value, specified in thecharacteristics of their drop functions. Representations ofdiffServDscpMarkActTable. Other marking actions might be specified elsewhere - thesefunctionsare outside the scope of thisMIB although they should use the available diffServAlgDropQMeasure and diffServAlgDropQThresh parameters where possible. <ed: should we keep this example (next 3 paragraphs) or not? It is not supported by the current MIB.>MIB. Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page 7] Internet Draft Differentiated Services MIBMayJuly 2000As an example of a random dropper, RED-like droppers often have3.3.2. Count Action Table Count Actions are used to count thefunction described astraffic passing along aplot of drop probability (P) against averaged queue length (Q). (Qmin,Pmin) defines the start ofparticular path through thecharacteristic plot. Normally Pmin=0, meaning with average queue length below Qmin, there willmodel. If specified, they are likely to beno drops. (Qmax,Pmax)placed first, before other types of Action. For example, when both a Count and an Absolute Dropper Action are specified, the Count Action needs to count the traffic stream before any traffic gets dropped. Note that there are counters contained directly in Algorithmic Dropper elements to indicate the amount of traffic dropped by those elements. Counters are arranged in a single table but with separate conformance statements for low-speed and high-speed interfaces, consistent with [IFMIB]. 3.3.3. Absolute Drop Action This action just silently discards all traffic presented to it, without counting it. This action has no additional parameters and so is represented only as a diffServActionSpecific pointing to diffServAbsoluteDropAction without any specific parameters. 3.4. Queueing Elements These include Algorithmic Droppers, Queues and Schedulers which are all inter-related in their use of queueing techniques. 3.4.1. Algorithmic Dropper Table Algorithmic Droppers have a close relationship with queueing: they are represented in this MIB by entries in an Algorithmic Dropper Table. Entries contain a diffServAlgDropNext attribute which indicates to which queue they sink their traffic. An Algorithmic Dropper is assumed to operate indiscriminately on all packets that are presented at its input. If it is necessary to perform additional classification on the stream then a separate TCB must be introduced at this point: Classifier elements here can then distinguish the different types of traffic on which dropping is to act and the treatment for each type is described by a separate diffServAlgDropEntry. Algorithmic Droppers may also contain a pointer to specific detail of the drop algorithm. This MIB defines the detail for three drop algorithms: Tail Drop, Head Drop and Random Drop; other algorithms are outside the scope of this MIB modele but the general framework is intended to allow for their inclusion via other MIB modules. Baker, Chan, Smith Expires January 2001 [Page 8] Internet Draft Differentiated Services MIB July 2000 One generally-applicable parameter of a dropper is the specification of a queue-depth threshold at which some drop action is to start. This is represented in this MIB, as a base attribute of the Algorithmic Dropper entry, by pointing to the queue for which depth is to be compared and the depth threshold to compare against. o A Tail Dropper requires the specification of a maximum queue depth threshold: when the queue pointed at by diffServAlgDropQMeasure reaches that depth threshold, diffServAlgDropQThresh, any new traffic arriving at the dropper is discarded. This algorithm uses only parameters that are part of the diffServAlgDropEntry. o A Head Dropper requires the specification of a maximum queue depth threshold: when the queue pointed at by diffServAlgDropQMeasure reaches that depth threshold, diffServAlgDropQThresh, traffic currently at the head of the queue is discarded. This algorithm uses only parameters that are part of the diffServAlgDropEntry. o Random Droppers are recommended as a way to control congestion, in [QUEUEMGMT] and called for in the [AF-PHB]. Various implementations exist, which agree on marking or dropping just enough traffic to communicate with TCP-like protocols about congestion avoidance, but differ markedly on their specific parameters. This MIB attempts to offer a minimal set of controls for any random dropper, but expects that vendors will augment the table with additional controls and status in accordance with their implementation. This algorithm requires additional parameters on top of those in diffServAlgDropEntry: these are discussed below. 3.4.2. Random Dropper Table One example of a random dropper is a RED-like dropper. An example of the representation chosen in this MIB for this element is shown in Figure 1. Random droppers often have their drop probability function described as a plot of drop probability (P) against averaged queue length (Q). (Qmin,Pmin) then defines the start of the characteristic plot. Normally Pmin=0, meaning with average queue length below Qmin, there will be no drops. (Qmax,Pmax) defines a "knee" on the plot, after which point the drop probability become more progressive (greater slope). (Qclip,1) defines the queue length at which all packets will be dropped. Notice this is different from Tail Drop because this uses an averaged queue length.Italthough it is possible for Qclip = Qmax. In the MIB module, diffServRandomDropMinThreshBytes and diffServRandomDropMinThreshPkts represent Qmin. diffServRandomDropMaxThreshBytes and diffServRandomDropMaxThreshPkts represent Qmax. Baker, Chan, Smith Expires January 2001 [Page 9] Internet Draft Differentiated Services MIB July 2000 +-------------+ +-----------+ --->| Next --------+-->| Next ---------> to Scheduler | Thresh=100k | | | Min=none | | Measure -------+ | Max=none | | Type=random | | Pri=10 | | Specif -------+ | Type=fifo | +-------------+ | +-----------+ AlgDrop.3 | Queue.ifIndex.4 | | +--------------+ +-->| Minthresh=10k| | Maxthresh=80k| | Weight=1/16 | | ProbMax= 0.5 | +--------------+ RandomDrop.3 Figure 1: Example Use of the RandomDropTable for Random Droppers diffServRandomDropProbMax represents Pmax. This MIB does not represent Pmin (assumed to be zero unless otherwise represented) or Qclip (assumed to be Qmax unless otherwise represented). Each random dropper specification is associated with a queue. This allows multiple drop processes (of same or different types) be associated with the same queue, as different PHB implementations may require. This also allows for sequences of multiple droppers if necessary. The calculation ofthe averageda smoothed queue length may also have an important bearing on the behaviour of the dropper: parameters may include the sampling interval and the weight of each sample. The performance may be very sensitive to the values of these parameters and a wide range of possible values may be required due to a wide range of link speeds.ThereMost algorithms include a sample weight, represented here by diffServRandomDropInvWeight. Note however that there is ongoing research on this topic, see e.g. [ACTQMGMT]. Additional parameters may be added in an enterprise MIB module, e.g. by using AUGMENTS on this table, to handle aspects of random drop algorithms that are not standardised here. NOTE: Deterministic Droppers can be viewed as a special case of Random Droppers with the drop probability restricted to 0 and 1. Hence Deterministic Droppers might be described by a Random Dropper with Pmin Baker, Chan, Smith Expires January 2001 [Page 10] Internet Draft Differentiated Services MIB July 2000 = 0, Pmax = 1, Qmin = Qmax = Qclip, the averaged queue length at which dropping occurs.Each dropper specification is associated with a queue. This allows multiple drop processes (of same or different types) be associated with the same queue, as different PHB implementations may require. This also allows for sequences of multiple droppers if necessary. 2.5.2.3.4.3. Queues and Schedulers The Queue Table models simple FIFO queues, as described in [MODEL] section 7.1.1. The Scheduler Table allows flexibility in constructing both simple and somewhat more complex queueing hierarchies from those queues. Of course, since TCBs can be cascaded multiple times on an interface, even more complex hierarchies can be constructed that way also. The entries in the Queue Table have attributes which include a specification of the scheduler which services the queue. They are pointed at by the "next" attributes of the upstream elements e.g. diffServMeterSucceedNext. Note that multiple upstream elements may direct their traffic to the same Queue Table entry. For example, the Assured Forwarding PHB suggests that all traffic marked AF11, AF12 or AF13 be placed in the same queue, after metering, without reordering. This would be represented by having the diffServMeterSucceedNext of eachBaker, Chan, Smith Expires November 2000 [Page 8] Internet Draft Differentiated Services MIB May 2000upstream meter point at the same entry in the Queue Table. The Scheduler Table represented in this MIB module contains entries, each of which represents the algorithm in use for servicing the one or more queues that feed it. The [MODEL] section 7.1.2 describes a scheduler with multiple inputs: this is represented in the MIB by including the scheduling parameters associated with a scheduler input in the Queue Table entry that feeds it and having that point at one particular Scheduler Table entry. In this way, sets of Queues can be grouped together as inputs to the same Scheduler. This table serves to represent the example scheduler described in the [MODEL]: other more complex representations might be created outside of this MIB. Each scheduler input, as represented by a Queue Table entry, is assigned a priority with respect to all the other inputs feeding the same scheduler. A higher-priority input will be serviced first over a lower- priority input, assuming that all guarantees have already been met. This priority parameter, used on its own with default values for the other parameters, serves to allow representation of a Strict Priority scheduler. For Weighted Queueing algorithms e.g. WFQ, WRR, the "weight" of a given scheduler input is represented with a Minimum Service Rate leaky-bucket profile which provides guaranteed bandwidth to that input, if required. This is represented, as were token-bucket meters, by a rate diffServQueueMinRateAbs and a burst size diffServQueueMinBurstSize. The rate may, alternatively, be represented by a relative value, as a Baker, Chan, Smith Expires January 2001 [Page 11] Internet Draft Differentiated Services MIB July 2000 fraction of the interface's current line rate, diffServQueueMinRateRel to assist in cases where line rates are variable or where a higher-level policy might be expressed in terms of fractions of network resources. The two rate parameters are inter-related and changes in one may be reflected in the other. An input may also be capable of acting as a non-work-conserving [MODEL] traffic shaper: this is done by defining a Maximum Service Rate leaky- bucket profile in order to limit the scheduler bandwidth available to that input. This is represented, similarly to the minimum rate, by a rate diffServQueueMaxRateAbs and a burst size diffServQueueMaxBurstSize. The rate may, alternatively, be represented by a relative value, as a fraction of the interface's current line rate, diffServQueueMaxRateRel.2.5.3.3.4.4. Example of Algorithmic Droppers, Queues and Schedulers As an example, the hypothetical queue/scheduler configuration shown in [MODEL] section 8.1 is shown in Table 1.Baker, Chan, Smith Expires November 2000 [Page 9] Internet Draft Differentiated Services MIB May 2000 QId MinRate MaxRate Priority Scheduler --- ---------------- ---------------- -------- --------- 1 100kbps/20kbyte none/none 20 Scheduler.1 2 none/none 100kbps/100kbyte 40 Scheduler.1 3 200kbps/20kbyte none/none 20 Scheduler.1 4 none/none none/none 10 Scheduler.1 SchedId Type ------- ------------------ 1 weightedRoundRobin Table 1: Example Queue and Scheduler ParametersQueues 1 and 3 are serviced forlong enough to give them their promised bandwidths and burst sizes, if they need them. Queue 2 is then serviced up to its maximum limit profile. Only then does Queue 4 get an opportunity to send its traffic. As an example of the use of the MIB structures, Figure 1 shows how the example would be represented. 2.5.4. Example of extending this MIB <ed: is it worth having this example here?> One way to extend this MIB structure to accomodate a more complex dropping algorithm might be to define a specific dropper table in another MIB module, pointed at by diffServAlgDropSpecific, containing its own parameters, as shown in figure 2. This algorithm might depend for its operation e.g. on feedback of a queue's depth but pre-processed by some type of smoothing function with its own parameters. The extended table could still use some of the fields of the standard Algorithmic Dropper Table, if relevant, although any divergent uses would have to be well-documented in the extended MIB. 2.6. The use of RowPointer RowPointer is a textual convention used to identify a conceptual row in an SNMP Table by pointing to one of its objects. In this MIB, it is used in two ways: to indicate indirection and to indicate succession. When used for indirection, as in the diffServClassifierTable, the idealong enough to give them their promised bandwidths and burst sizes, if they need them. Queue 2 is then serviced up toallow other MIBs, including proprietary ones,its maximum limit profile. Only then does Queue 4 get an opportunity toidentify new and arcane classifiers - MAC headers, IP4 and IP6 headers, BGP Communities and all sortssend its traffic. As an example ofother things. When used for succession, it answersthequestion "what happens next?". Rather than presume thatuse of thenext table must be as specified inMIB structures, Figure 2 shows how the example would be represented. QId MinRate MaxRate Priority Scheduler --- ---------------- ---------------- -------- --------- 1 100kbps/20kbyte none/none 20 Scheduler.1 2 none/none 100kbps/100kbyte 40 Scheduler.1 3 200kbps/20kbyte none/none 20 Scheduler.1 4 none/none none/none 10 Scheduler.1 SchedId Type ------- ------------------ 1 weightedRoundRobin Table 1: Example Queue and Scheduler Parameters Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page10]12] Internet Draft Differentiated Services MIBMayJuly 2000 +-----------+ ----------------------->| Next -----+ | Min=Profl4| | | Max=none | | | Pri=20 | | | Type=fifo | | +-----------+ | Queue.ifIndex.1 | | +-----------+ +-----------+ | --->| Next -----+--->| Next ------+ | Thresh=1k | | | Min=none | | | Measure -----+ | Max=Profl5| | | Type=Tail | | Pri=40 | | | Spec=none | | Type=fifo | | +----------+ +-----------+ +-----------+ +--->| Next -----> 0.0 Dropper.1 Queue.ifIndex.2 | | Algrm=wrr| or next TCB | +----------+ +-----------+ +-----------+ | Scheduler.ifIndex.1 --->| Next -----+--->| Next -----+ | Thresh=2k | | | Min=Profl3| | | Measure -----+ | Max=none | | | Type=Tail | | Pri=20 | | | Spec=none | | Type=fifo | | +-----------+ +-----------+ | Dropper.2 Queue.ifIndex.3 | | +-----------+ +-----------+ | --->| Next ------+--->| Next -----+ | Thresh=4k | | | Min=none | | Measure -----+ | Max=none | | Type=Tail | | Pri=10 | | Spec=none | | Type=fifo | +-----------+ +-----------+ Dropper.3 Queue.ifIndex.4 Figure1:2: Example of the use of Queueing elementsBaker, Chan, Smith Expires November 2000 [Page 11] Internet Draft Differentiated Services4. Conventions used in this MIBMay 2000 +-----------+ +-----------+ --->| Next ------+--->| Next --------->4.1. The use of RowPointer RowPointer is a textual convention used toScheduler | Thresh=X | | | Min=none | | Measure -----+ | Max=none | | Type=Ext | | Pri=10 | | Spec -----+ | Type=fifo | +-----------+ | +-----------+ Dropper.3 | Queue.ifIndex.4 | | +-------------+ +--->|Smooth1=10 | |Smooth2=2000 | | <etc.> | +-------------+ DropperExt.3 Figure 2: Exampleidentify a conceptual row in an SNMP Table by pointing to one of its objects. In this MIB, it is used in two ways: to indicate indirection and to indicate succession. Baker, Chan, Smith Expires January 2001 [Page 13] Internet Draft Differentiated Services MIB July 2000 When used for indirection as in the diffServClassifierTable, the idea is to allow other MIBs, including proprietary ones, to define new and arcane classifiers - MAC headers, IPv4 and IPv6 headers, BGP Communities and all sorts ofextendingother things - whilst still utilising theMIBstructures of this MIB. This is a form of class inheritance (in "object oriented" language): it allows base object definitions ("classes") to be extended in proprietary or standard ways, in the future, by other documents. When used formore complex dropperssuccession, it answers the question "what happens next?". Rather than presume that the next table must be as specified in the conceptual model [MODEL] and providing its index, the RowPointer takes you to the MIB row representing that thing. In the diffServMeterTable, for example, the diffServMeterFailNext RowPointer might take you to another meter, while the diffServMeterSucceedNext RowPointer would take you to an action.TheNOTE -- the RowPointer construct is used tobuildbuild the TCBs described in [MODEL]: this MIB does not model TCBs directly - it operates at a lower level of abstraction using only individual elements, connected in succession by RowPointers. Therefore, the concept of TCBs enclosing individual functional datapath elements is not applicable to this MIB, although such a concept may be employed by management tools that use this MIB. It is possible that a path through a device following a set of RowPointers is indeterminate i.e. it ends in a dangling RowPointer (or potentially does in the case of a Meter element) should be treated by the agent as if it were operationally deactivated. For example, if an Action element has a dangling diffServActionNext RowPointer that does not point to an existent table entry (and is not zeroDotZero), then none of the subsequent elements in that particular chain should have any effect on the traffic proceeding down this chain and the Classification or Meter element which lead to this Action element is not considered to be active. Other parts of theTCBs describeddevice configuration remain in[MODEL]:effect, of course, but thisMIB does not model TCBs directly - it operates at a lower levelrule simply removes all ambiguity from the operational system. 4.2. Conceptual row creation and deletion A number ofabstraction using only individual elements, connectedconceptual tables defined insuccession by RowPointers. Therefore,this MIB use as an index an arbitrary integer value, unique across theconceptscope ofTCBs enclosed in other more functional TCBs is not applicablethe agent. In order tothis MIB, although suchhelp with multi-manager row-creation problems, aconcept maymechanism must beemployed by management tools that use this MIB.provided to allow a manager to obtain unique values for such an index and to ensure that, when used, the manager knows whether it got what it wanted or not. Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page12]14] Internet Draft Differentiated Services MIBMayJuly 20003.Typically, such a table has an associated NextFree variable e.g. diffServClassifierNextFree which provides a suitable value for the index of the next row to be created e.g. diffServClassifierId. A special value, 0, is used to indicate that no more entries can be created by the agent. The table also has a columnar Status attribute with RowStatus syntax [6]. If a manager attempts to create a conceptual row in the table (by a SET operation that contains a varbind setting the Status to a value of either createAndGo or createAndWait) and if the agent has sufficient resources and has no other conceptual row with the same indices, the agent will create the row and return success. If the agent has insufficient resources or such a row is already existent then it returns an error. A manager must be prepared to try again in such circumstances, probably by re-reading the NextFree to obtain a new index value in case a second manager had got in between the first manager's read of the NextFree value and the first manager's row-creation attempt. The use of RowStatus is covered in more detail in [6]. 5. Editorial information <this section will be removed before publication>3.1.5.1. Open Issues resolved inthis draftprevious drafts (0) Terminology is more in line with [MODEL], [POLTERM] and [DSTERM]. Discarder -> "Algorithmic Dropper", "Monitor" -> "Counter" "Classifier element" -> "Filter" (1) Cascaded token-buckets is not equivalent to multi-rate token- bucket: do we need to fix this by allowing a multi-rate TB in the MIB? Or, by defining cascaded buckets to mean "multi-rate". (assume the latter - see text in 2.3) (2) Markers: model only describes DSCP-markers: do we need to be able to extend this to other sorts (e.g. 802.1p), even if we do not represent them in this MIB today? (yes). No MIB changes, just words. (3) Counters: should specific blocks include their own or is a "counter action", as described in the Model, sufficient to count all paths through a device? (as appropriate). Per-queue counters are derivable from "action" ones. Per-classifier counters: may feed through from clasifiers to distinct counter actions. Baker, Chan, Smith Expires January 2001 [Page 15] Internet Draft Differentiated Services MIB July 2000 (4) Queue Sets: are these generally applicable? (no). The example in section 2.5.1 is hard to follow: we should describe this example in [MODEL] and then show how it maps to MIB in the MIB draft. - DONE (5) Do we need scheduling units of "packets"? (NO) Should we use "kbps" or just "bps" for rates? DONE - all rates are in kbps. (6) Are "absolute" rates sufficient or should we include "relative to line speed" ones as well? (yes) - DONE - explained that these are interrelated. (7) Scheduler weights vs. rates vs. priorities: this is confusing - suggest we stick to rates and priorities (see Model draft 7.1.2) - DONE. (8) Queue Measure table: o This allows for RIO - multiple averaging functions for the same queue: is this needed? OUT OF SCOPE.Baker, Chan, Smith Expires November 2000 [Page 13] Internet Draft Differentiated Services MIB May 2000o mixes config with status objects - split these? N/A. o do we need floating-point representation for "weight"? N/A. o do we need MIB visibility for average queue depth? N/A. o do we need MIB-configurable averaging functions (sample weight/interval)? (maybe just "sample weight") - NO: averaging functions will be left out although framework allows for their inclusion separately. (9) Counter compliance: paste text from IF-MIB re line-speeds. Do you still have to do the low-speed counters for fast interfaces? YES. DONE. (10) Meters: are these mandatory for compliance? NO (11) Discussion material: move most of this to Model draft e.g. most of 3.1, 3.3, "Dropper/discarder" part of 3.4, nearly all of 3.5. Just leave the "how does the MIB map from the Model" parts in the MIB draft, no general discussion. DONE. (12) Counters: merged in 32-bit and 64-bit counters - conformance statements sort out which ones must be implemented. This is consistent with [IFMIB]. DONE. Baker, Chan, Smith Expires January 2001 [Page 16] Internet Draft Differentiated Services MIB July 2000 (13) Droppers: we used to have a common "dropper" table that represented all of: dropAlways, randomDrop, tailDrop with just some parameters valid for the simpler ones. A simpler representation is to define specific dropper tables for each type (e.g. a single OID to point at for dropAlways since it is always the last action in a chain) but this would mean a larger number of (simpler) MIB objects. CHANGES: dropAlways is still an Action but the others are moved to a diffServAlgDropTable. This table can handletail/head drop. Other algorithms, specifically RED, are out of scope for now but can be added using the framework defined here.tail/head/random drop - others by extension. (14) Should TBMeterTable just AUGMENT the MeterTable, should it use same indices or are separate structures linked by RowPointers preferable?SAME INDICES - DONE.(same indices without RowPointer). (15) Do we need to model multiple queues feeding back into a single dropper algorithm? (yes). If so, the current single-queue pointer and threshold will not beadequate -adequate - should we leave them in? They will be useful for many, but not all, dropper algorithms. (yes) (17) We have concepts of "inbound" and "outbound" directions: but if we have a series of multiple TCBs on a given interface for the same direction (allowed by the model) then we do not have a way to indicate "this is the 1st one". Moreover, it is a somewhat convoluted process to then find the 2nd, 3rd etc. ones - you would have to follow the RowPointers to get there: should we explicitly have an index to enable/help these lookup operations? Note: this is not the same issue as needing a "precedence" for each filter entry of a classifier (yes - added another index to classifiers to represent what TCB they operate at for a given interface/direction). 5.2. Open Issues resolved in this draft (13) Droppers: slight change to previous resolution. MIB can now handle tail/head/random drop using diffServAlgDropTable and diffServRandomDropTable. (18) Should manager be allowed to create Queue elements or should agent be in control of this? (the former) (19) Should manager be allowed to create Scheduler elements or shouldwe leave them in? They willagent beusefulin control of this? (the former) (20) Related to (17) above, do we also need a "TCB index" formany, but not all, dropper algorithms. (yes)elements other than classifiers? (no) Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page14]17] Internet Draft Differentiated Services MIBMayJuly 2000(17) We have concepts(21) Do we need diffServAlgDropType of"inbound"both "headDrop" and"outbound" directions: but if"tailDrop" or should wehavejust represent the tail dropper by placing aseriesdropper after the queue instead ofmultiple TCBs on a given interface forbefore thesame direction (allowedqueue, as linked by themodel) thendiffServQNext and diffServAlgDropNext RowPointers? (the former - dropper is always in front of the queue in this model). (22) Do wedo not have a wayneed toindicate "this issupport RED algorithms for algorithm parameter configuration and monitoring? If so, what variables are needed? (Added diffServRandomDropTable). (24) diffServAlgDropQThreshold needs UNITS (Bytes). (25) Dangling RowPointers: should we mandate that these are never permitted? Or just define the1st one". Moreover,behaviour if they do dangle? (We define it such that elements that have dangling pointers, as well as upstream elements that point to them, are considered "not activated") (26) Discontinuity times for MIB counters - isa somewhat convoluted processifCounterDiscontinuityTime adequate? (no: added diffServCountActDiscontTime). (27) How do we handle dropper algorithms that require additional classification information in order to do their job? If a Classifier is needed thenfindcreate a new TCB for it at the2nd, 3rd etc. ones - you would have to followpoint just before theRowPointers to get there: should we explicitly have an indexdropper: use ordinary Classifier elements in this TCB. (28) Indexing of table entries and uniqueness hints: is TestAndIncr the correct tool toenable/help these lookup operations? Note: thisuse? (no: RowStatus isnotthesame issue as needing a "precedence"right tool foreach filter entry ofensuring uniqueness; use aclassifier (yes) - added another index to classifiers to represent what "level" they operate at forNextFree variable as agiven interface/direction. 3.2.hint). (32) Miscellaneous clarifications - thanks Bob. 5.3. Still Open Issues (16)How shouldShould the creation of counter actions be under the control of manager or agent: should a diffServActionEntry and diffServCountActEntry appear by magic(the device surely knows(does the agent know what counters it can and cannot maintain on a given interface)?(assume no)(no) Ifnot,no, should diffServCountActEntry appear magically when a diffServAction element is created which points at the diffServCountActTable (then would be no need for diffServCountActStatus)?(assume no) (18) Should manager be allowed to create Queue elements or should agent be in control(no) (23) Do daughter entries ofthis? (the former) (19) Should manager be allowedderived table entries need tocreate Scheduler elements or should agentexist independently of the parent? Examples are diffServMeterEntry/diffServTBMeterEntry, Baker, Chan, Smith Expires January 2001 [Page 18] Internet Draft Differentiated Services MIB July 2000 diffServActionEntry/diffServCountActEntry and diffServAlgDropEntry/diffServRandomDropEntry (assume they must bein controlindependent ofthis? (the former) (20)the equivalent entry in diffServMeterTable which points at the TB table - needs diffServTBMeterStatus: daughters must be created explicitly by manager). (30) Related to (17)above, do we also need- multi-manager creation of TCBs: diffServClassifierId is unique across the agent, for all values of diffServClassifierTcb but there is no "next free" variable to report the next TCB to use. This can lead to a"level" indexrace condition when 2 managers are duelling to create entries with the same value of diffServClassifierTcb. There are also legitimate reasons forelements other than classifiers? (no) (21) Do we need diffServAlgDropTypedifferent managers to be "creating" the *same* TCB so a conventional "next free" is not a good solution. Is this a rare enough occurence given a suitable choice ofboth "headDrop"diffServClassifierTcb e.g. pseudo-random? (yes). (31) When inheritance is needed and"tailDrop" or should we just representparent/daughter share indexing, thetail dropper by placingparent often points to the daughter using adropper after"Specific" attribute e.g. diffServMeterSpecific, diffServActionSpecific, diffServAlgDropSpecific. If this is a RowPointer and points to thequeue instead of beforeassociated row in thequeue, as linkeddaughter's table, there is redundant information which gives scope for additional error cases. So, wherever possible, should we remove this redundant information by making thediffServQNext and diffServAlgDropNext RowPointers? (the former). (22) Do we need"Specific" attribute point only tosupport RED algorithms for algorithm parameter configurationthe base of the daughter table andmonitoring? If so, what variables are needed? Baker, Chan, Smith Expires November 2000 [Page 15] Internet Draft Differentiated Servicesmake it an OBJECT IDENTIFIER? The con is that this is an unusual use of MIBMay 2000 4.pointers (point at table base, not individual entries). 6. MIB Definition DIFF-SERV-MIB DEFINITIONS ::= BEGIN IMPORTS Unsigned32, Counter32, Counter64, OBJECT-TYPE, MODULE-IDENTITY, OBJECT-IDENTITY, zeroDotZero, mib-2 FROM SNMPv2-SMI TEXTUAL-CONVENTION, RowStatus, RowPointer,TestAndIncrTimeStamp FROM SNMPv2-TC MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF ifIndex FROM IF-MIB InetAddressType, InetAddress FROM INET-ADDRESS-MIB Baker, Chan, Smith Expires January 2001 [Page 19] Internet Draft Differentiated Services MIB July 2000 BurstSize FROM INTEGRATED-SERVICES-MIB; diffServMib MODULE-IDENTITY LAST-UPDATED"200005110000Z""200007130000Z" ORGANIZATION "IETF Diffserv WG" CONTACT-INFO " Brian Carpenter (co-chair of DiffservWG) c/o iCAIR 1890 Maple Ave, #150 Evanston, IL 60201, USA Phone: +1 847 467 7811 E-mail: brian@icair.org Kathie Nichols (co-chairWG) c/o iCAIR 1890 Maple Ave, #150 Evanston, IL 60201, USA Phone: +1 847 467 7811 E-mail: brian@icair.org Kathleen Nichols (co-chair of Diffserv WG) Packet Design E-mail: nichols@packetdesign.com Fred Baker (author) Cisco Systems 519 Lado Drive Santa Barbara, CA 93111, USA E-mail: fred@cisco.com Kwok Ho Chan (author) Nortel Networks 600 Technology Park Drive Billerica, MA 01821, USA E-mail: khchan@nortelnetworks.com Andrew Smith (author) E-mail: ah_smith@pacbell.net" DESCRIPTION "This MIB defines the objects necessary to manage a device that uses the Differentiated Services Architecture described in RFC 2475 and the Informal Management Model for DiffServ Routers in draft-ietf-diffserv-model-04.txt." REVISION "200007130000Z" DESCRIPTION "Initial version, published as RFC xxxx." ::= { mib-2 12345 } -- anybody who uses this unassigned -- number deserves the wrath of IANA diffServObjects OBJECT IDENTIFIER ::= { diffServMib 1 } diffServTables OBJECT IDENTIFIER ::= { diffServMib 2 } diffServMIBConformance OBJECT IDENTIFIER ::= { diffServMib 3 } Baker, Chan, Smith Expires January 2001 [Page 20] Internet Draft Differentiated Services MIB July 2000 -- These textual conventions have no effect on either the syntax -- nor the semantics of any managed object. Objects defined -- using this convention are always encoded by means of the -- rules that define their primitive type. Dscp ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "The IP header Diffserv Code-Point that may be used for discriminating or marking a traffic stream. The value -1 is used to indicate a wildcard i.e. any value." SYNTAX INTEGER (-1 | 0..63) SixTupleClfrL4Port ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "A value indicating a Layer-4 protocol port number." SYNTAX INTEGER (0..65535) IfDirection ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Specifies a direction ofDiffserv WG) Cisco Systems 170 W. Tasman Drive San Jose, CA 95134-1706, USA Phone: +1 408 525 4857 E-mail: kmn@cisco.com Fred Baker (author) Cisco Systems 519 Lado Drive Santa Barbara, CA 93111, USA E-mail: fred@cisco.com Kwok Ho Chan (author) Nortel Networks 600 Technology Park Drivedata travel on an interface. 'inbound' traffic is operated on during reception from the interface, while 'outbound' traffic is operated on prior to transmission on the interface." SYNTAX INTEGER { inbound(1), -- ingress interface outbound(2) -- egress interface } Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page16]21] Internet Draft Differentiated Services MIBMayJuly 2000Billerica, MA 01821, USA E-mail: khchan@nortelnetworks.com Andrew Smith (author) Extreme Networks 3585 Monroe St. Santa Clara, CA 95051, USA E-mail: andrew@extremenetworks.com"-- -- Classifiers -- -- -- Classifier Table -- -- The Classifier Table allows us to enumerate the relationship -- between arbitrary classifiers and the subsequent downstream -- Diffserv elements. diffServClassifierTable OBJECT-TYPE SYNTAX SEQUENCE OF DiffServClassifierEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION"This MIB"The classifier table defines theobjects necessaryclassifiers that are applied tomanagetraffic arriving at this interface in adevice that uses the Differentiated Services Architecture describedparticular direction. Specific classifiers are defined by RowPointers inRFC 2475 andtheConceptual Modelentries of this table which identify entries in filter tables of specific types, e.g. Multi-Field Classifiers (MFCs) forDiffServ RoutersIP are defined indraft-ietf- diffserv-model-03.txt." REVISION "200005110000Z" DESCRIPTION "Initial version, published as RFC xxxx."the diffServSixTupleClfrTable. Other classifier types may be defined elsewhere." REFERENCE "[MODEL] section 4.1" ::= {mib-2 12345diffServTables 1 }-- anybody who uses this unassigned -- number deservesdiffServClassifierEntry OBJECT-TYPE SYNTAX DiffServClassifierEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry in thewrathclassifier table describes a single element ofIANA diffServObjects OBJECT IDENTIFIERthe classifier." INDEX { ifIndex, diffServClassifierIfDirection, diffServClassifierTcb, diffServClassifierId } ::= {diffServMibdiffServClassifierTable 1 }diffServTables OBJECT IDENTIFIERDiffServClassifierEntry ::= SEQUENCE {diffServMib 2diffServClassifierIfDirection IfDirection, diffServClassifierTcb Unsigned32, diffServClassifierId Unsigned32, diffServClassifierFilter RowPointer, diffServClassifierNext RowPointer, diffServClassifierPrecedence Unsigned32, diffServClassifierStatus RowStatus Baker, Chan, Smith Expires January 2001 [Page 22] Internet Draft Differentiated Services MIB July 2000 }diffServMIBConformance OBJECT IDENTIFIERdiffServClassifierIfDirection OBJECT-TYPE SYNTAX IfDirection MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifies the direction for which this classifier entry applies on this interface." ::= {diffServMib 3diffServClassifierEntry 1 }-- These textual conventions have no effect on either the syntax -- nordiffServClassifierTcb OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifies thesemanticsTCB ofany managed object. Objects defined -- usingwhich thisconvention are always encoded by meansclassifier element is a part. Lower numbers indicate an element that belongs to a classifier that is part ofthe -- rulesa TCB thatdefine their primitive type. Dscp ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "The IP header Diffserv Code-Pointis, at least conceptually, applied to traffic before those with higher numbers - this is necessary to resolve ambiguity in cases where different TCBs contain filters thatmay be usedoverlap with each other. A manager wanting to create a new TCB should either first search this table fordiscriminating or markingexisting entries and pick atraffic stream. Thevalue-1for this variable that isusednot currently represented - some form of pseudo- random choice is likely toindicateminimise collisions. After successful creation of awildcard i.e. any value." SYNTAX INTEGER (-1 | 0..63) SixTupleClfrL4Port ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "Aconceptual row using the chosen value, the manager should check again that there are no other rows with this valueindicatingthat have been created by aLayer-4 protocol port number." SYNTAX INTEGER (0..65535) IfDirectiondifferent manager that could, potentially, interfere with the classifier elements that are desired." ::=TEXTUAL-CONVENTION{ diffServClassifierEntry 2 } diffServClassifierId OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS not-accessible STATUS currentBaker, Chan, Smith Expires November 2000 [Page 17] Internet Draft Differentiated Services MIB May 2000DESCRIPTION"Specifies a direction of data travel on an interface. 'inbound' traffic is operated on during reception from"A classifier ID that enumerates theinterface, while 'outbound' traffic is operated on prior to transmission onclassifier elements. The set of such identifiers spans theinterface." SYNTAX INTEGERwhole agent. Managers should obtain new values for row creation in this table by reading diffServClassifierNextFree." ::= {inbound(1), -- ingress interface outbound(2) -- egress interfacediffServClassifierEntry 3 } diffServClassifierFilter OBJECT-TYPE SYNTAX RowPointer Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page18]23] Internet Draft Differentiated Services MIBMayJuly 2000-- -- Classifiers -- -- -- Classifier Table -- -- The Classifier Table allows usMAX-ACCESS read-create STATUS current DESCRIPTION "A pointer toenumeratea valid entry in another table that describes therelationship -- between arbitrary classifiers andapplicable classification filter, e.g. an entry in diffServSixTupleClfrTable. If thesubsequent downstream -- Diffserv elements. diffServClassifierTablerow pointed to does not exist, the classifier is ignored. The value zeroDotZero is interpreted to match anything not matched by another classifier - only one such entry may exist in this table." DEFVAL { zeroDotZero } ::= { diffServClassifierEntry 4 } diffServClassifierNext OBJECT-TYPE SYNTAXSEQUENCE OF DiffServClassifierEntryRowPointer MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"The classifier table defines"This selects theclassifiers that a system appliesnext datapath element toincoming traffic. Specific classifiers are defined by RowPointers inhandle packets matching theentries of this table which identify entries infiltertables of specific types, e.g. Multi-Field Classifiers (MFCs) for IP are definedpattern. For example, this can point to an entry in a meter, action, algorithmic dropper or queue table. If the row pointed to does not exist, thediffServSixTupleClfrTable. Otherclassifiertypes may be defined elsewhere." REFERENCE "[MODEL] section 4.1"element is ignored." ::= {diffServTables 1 }diffServClassifierEntry 5 } diffServClassifierPrecedence OBJECT-TYPE SYNTAXDiffServClassifierEntryUnsigned32 MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"An entry"The relative precedence in which classifiers are applied: higher numbers represent classifiers with higher precedence. Classifiers with the same precedence must be unambiguous i.e. they must define non-overlapping patterns, and are considered to be applied simultaneously to the traffic stream. Classifiers with different precedence may overlap in their filters: the classifier with the highest precedence that matches is taken. On a given interface, there must be a complete classifier in place at all times for the first TCB (lowest value of diffServClassifierTcb) in the ingress direction. This means that there will always be one or more filters that match every possible pattern that could be presented in an incoming packet. There is no such requirement for subsequent TCBs in theclassifier table describes a single element ofingress direction, nor for any TCB in theclassifier." INDEX { ifIndex, diffServClassifierIfDirection, diffServClassifierLevel, diffServClassifierId } ::= { diffServClassifierTable 1 } DiffServClassifierEntry ::= SEQUENCE { diffServClassifierIfDirection IfDirection, diffServClassifierLevel Unsigned32, diffServClassifierId INTEGER, diffServClassifierFilter RowPointer, diffServClassifierNext RowPointer, diffServClassifierPrecedence Unsigned32, diffServClassifierStatus RowStatus }egress direction." Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page19]24] Internet Draft Differentiated Services MIBMayJuly 2000diffServClassifierIfDirection OBJECT-TYPE SYNTAX IfDirection MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifies the direction for this classifier entry on the interface."DEFVAL { 0 } ::= { diffServClassifierEntry16 }diffServClassifierLeveldiffServClassifierStatus OBJECT-TYPE SYNTAXUnsigned32RowStatus MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"Specifies the level of"The RowStatus variable controls theTCB of which this classifier element is a part. Lower numbers indicate an element that belongs to a classifier that is partactivation, deactivation, or deletion of aTCB thatclassifier. Any writable variable may be modified whether the row isapplied to traffic before those with higher numbers."active or notInService." ::= { diffServClassifierEntry27 }diffServClassifierIddiffServClassifierNextFree OBJECT-TYPE SYNTAXINTEGER (0..2147483647)Unsigned32 MAX-ACCESSnot-accessibleread-only STATUS current DESCRIPTION"A classifier ID"This object yields a value when read thatenumerates the classifier elements. The set of such identifiers spans the whole agent - managers should obtain new valuesis currently-unused for a diffServClassifierId instance. If a configuring system attempts to create a new rowcreationinthis table bythe diffServClassifierTable usingdiffServClassifierUnique."this value, that operation will fail if the value has, in the meantime, been used to create another row that is currently valid." ::= {diffServClassifierEntry 3diffServObjects 1 }diffServClassifierFilter-- -- IP Six-Tuple Classification Table -- -- Classification based on 6 different fields in the IP -- header. This is intended to be IP-version-independent. -- diffServSixTupleClfrTable OBJECT-TYPE SYNTAXRowPointerSEQUENCE OF DiffServSixTupleClfrEntry MAX-ACCESSread-createnot-accessible STATUS current DESCRIPTION "Apointer to a valid entry in anothertable of IP Six-Tuple Classifier filter entries thatdescribes the applicable classification filter, e.g. an entry in diffServSixTupleClfrTable. If the row pointed to does not exist, the classifier is ignored. The value zeroDotZero is interpreted to match anything not matched by another classifier - only one such entrya system mayexist in this table." DEFVAL { zeroDotZero }use to identify IP traffic." REFERENCE "[MODEL] section 4.2.2" ::= {diffServClassifierEntry 4diffServTables 2 } diffServSixTupleClfrEntry OBJECT-TYPE SYNTAX DiffServSixTupleClfrEntry MAX-ACCESS not-accessible Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page20]25] Internet Draft Differentiated Services MIBMayJuly 2000diffServClassifierNext OBJECT-TYPE SYNTAX RowPointer MAX-ACCESS read-createSTATUS current DESCRIPTION"This selects the next datapath element to handle packets matching the filter pattern. For example, this can point to an"An IP Six-Tuple Classifier entryindescribes ameter or action table." ::=single filter." INDEX {diffServClassifierEntry 5diffServSixTupleClfrId }diffServClassifierPrecedence OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "The relative precedence in which classifiers are applied: higher numbers represent classifiers with higher precedence. Classifiers with the same precedence must be unambiguous i.e. they must define non-overlapping patterns. Classifiers with different precedence may overlap in their filters: the classifier with the highest precedence that matches is taken. On a given interface, there must be a complete classifier in place at all times. This means that there must be always be one or more filters that match every possible pattern that could be presented in an inclming packet." DEFVAL::= {0diffServSixTupleClfrTable 1 } DiffServSixTupleClfrEntry ::= SEQUENCE {diffServClassifierEntry 6diffServSixTupleClfrId Unsigned32, diffServSixTupleClfrDstAddrType InetAddressType, diffServSixTupleClfrDstAddr InetAddress, diffServSixTupleClfrDstAddrMask Unsigned32, diffServSixTupleClfrSrcAddrType InetAddressType, diffServSixTupleClfrSrcAddr InetAddress, diffServSixTupleClfrSrcAddrMask Unsigned32, diffServSixTupleClfrDscp Dscp, diffServSixTupleClfrProtocol INTEGER, diffServSixTupleClfrDstL4PortMin SixTupleClfrL4Port, diffServSixTupleClfrDstL4PortMax SixTupleClfrL4Port, diffServSixTupleClfrSrcL4PortMin SixTupleClfrL4Port, diffServSixTupleClfrSrcL4PortMax SixTupleClfrL4Port, diffServSixTupleClfrStatus RowStatus }diffServClassifierStatusdiffServSixTupleClfrId OBJECT-TYPE SYNTAXRowStatusUnsigned32 MAX-ACCESSread-createnot-accessible STATUS current DESCRIPTION"The RowStatus variable controls"A unique identifier for theactivation, deactivation, or deletion of a classifier. Any writable variablefilter. Filters may bemodified whethershared by multiple interfaces in the same system. Managers should obtain new values for rowis active or notInService."creation in this table by reading diffServSixTupleClfrNextFree." ::= {diffServClassifierEntry 7diffServSixTupleClfrEntry 1 }diffServClassifierUniquediffServSixTupleClfrDstAddrType OBJECT-TYPE SYNTAXTestAndIncrInetAddressType MAX-ACCESSread-writeread-create STATUS current DESCRIPTION "ThediffServClassifierUnique object yields a unique new value for diffServClassifierId when read and subsequently set. This value must be tested for uniqueness and can betype of IP destination address used byathis classifier entry." ::= { diffServSixTupleClfrEntry 2 } diffServSixTupleClfrDstAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page21]26] Internet Draft Differentiated Services MIBMayJuly 2000configuring systemDESCRIPTION "The IP address toobtain a unique value for diffServClassifierId for purposes of row creation inmatch against thediffServClassifierTable."packet's destination IP address." ::= {diffServObjects 1diffServSixTupleClfrEntry 3 }-- --diffServSixTupleClfrDstAddrMask OBJECT-TYPE SYNTAX Unsigned32 UNITS "bits" MAX-ACCESS read-create STATUS current DESCRIPTION "The length of a mask for the matching of the destination IPSix-Tuple Classification Table -- -- Classification based on 6 different fieldsaddress. Masks are constructed by setting bits in sequence from theIP -- header. This is intendedmost-significant bit downwards for diffServSixTupleClfrDstAddrMask bits length. All other bits in the mask, up tobe IP-version-independent. -- diffServSixTupleClfrTablethe number needed to fill the length of the address diffServSixTupleClfrDstAddr are cleared to zero. A zero bit in the mask then means that the corresponding bit in the address always matches." DEFVAL {0} ::= { diffServSixTupleClfrEntry 4 } diffServSixTupleClfrSrcAddrType OBJECT-TYPE SYNTAXSEQUENCE OF DiffServSixTupleClfrEntryInetAddressType MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"A table"The type of IPSix-Tuple Classifier filter entries that a system may use to identify IP traffic." REFERENCE "[MODEL] section 4.2.2"source address used by this classifier entry." ::= {diffServTables 2 }diffServSixTupleClfrEntry 5 } diffServSixTupleClfrSrcAddr OBJECT-TYPE SYNTAXDiffServSixTupleClfrEntryInetAddress MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"An"The IPSix-Tuple Classifier entry describes a single filter." INDEX { diffServSixTupleClfrId }address to match against the source IP address of each packet." ::= {diffServSixTupleClfrTable 1diffServSixTupleClfrEntry 6 }DiffServSixTupleClfrEntry ::= SEQUENCE { diffServSixTupleClfrId INTEGER, diffServSixTupleClfrDstAddrType InetAddressType, diffServSixTupleClfrDstAddr InetAddress, diffServSixTupleClfrDstAddrMask Unsigned32, diffServSixTupleClfrSrcAddrType InetAddressType, diffServSixTupleClfrSrcAddr InetAddress,diffServSixTupleClfrSrcAddrMaskUnsigned32, diffServSixTupleClfrDscp Dscp, diffServSixTupleClfrProtocol INTEGER, diffServSixTupleClfrDstL4PortMin SixTupleClfrL4Port, diffServSixTupleClfrDstL4PortMax SixTupleClfrL4Port, diffServSixTupleClfrSrcL4PortMin SixTupleClfrL4Port, diffServSixTupleClfrSrcL4PortMax SixTupleClfrL4Port, diffServSixTupleClfrStatus RowStatusOBJECT-TYPE SYNTAX Unsigned32 UNITS "bits" MAX-ACCESS read-create STATUS current DESCRIPTION "The length of a mask for the matching of the source IP address. Masks are constructed by setting bits in sequence from the most- Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page22]27] Internet Draft Differentiated Services MIBMayJuly 2000 significant bit downwards for diffServSixTupleClfrSrcAddrMask bits length. All other bits in the mask, up to the number needed to fill the length of the address diffServSixTupleClfrSrcAddr are cleared to zero. A zero bit in the mask then means that the corresponding bit in the address always matches." DEFVAL {0} ::= { diffServSixTupleClfrEntry 7 }diffServSixTupleClfrIddiffServSixTupleClfrDscp OBJECT-TYPE SYNTAX Dscp MAX-ACCESS read-create STATUS current DESCRIPTION "The value that the DSCP in the packet must have to match this entry. A value of -1 indicates that a specific DSCP value has not been defined and thus all DSCP values are considered a match." DEFVAL {-1} ::= { diffServSixTupleClfrEntry 8 } diffServSixTupleClfrProtocol OBJECT-TYPE SYNTAX INTEGER(0..2147483647)(0..255) MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"A unique id for"The IP protocol to match against thefilter. Filters may be shared by multiple interfacesIPv4 protocol number in thesame system."packet. A value of zero means match all." DEFVAL {0} ::= { diffServSixTupleClfrEntry19 }diffServSixTupleClfrDstAddrTypediffServSixTupleClfrDstL4PortMin OBJECT-TYPE SYNTAXInetAddressTypeSixTupleClfrL4Port MAX-ACCESS read-create STATUS current DESCRIPTION "Thetype of IPminimum value that the layer-4 destinationaddress used byport number in the packet must have in order to match this classifier entry." DEFVAL {0} ::= { diffServSixTupleClfrEntry210 }diffServSixTupleClfrDstAddrdiffServSixTupleClfrDstL4PortMax OBJECT-TYPE SYNTAXInetAddressSixTupleClfrL4Port MAX-ACCESS read-create STATUS current DESCRIPTION "TheIP addressmaximum value that the layer-4 destination port number in the packet must have in order to matchagainstthis classifier entry. This value must be equal to or greater that thepacket's destination IP address."value specified Baker, Chan, Smith Expires January 2001 [Page 28] Internet Draft Differentiated Services MIB July 2000 for this entry in diffServSixTupleClfrDstL4PortMin." DEFVAL {65535} ::= { diffServSixTupleClfrEntry311 }diffServSixTupleClfrDstAddrMaskdiffServSixTupleClfrSrcL4PortMin OBJECT-TYPE SYNTAXUnsigned32SixTupleClfrL4Port MAX-ACCESS read-create STATUS current DESCRIPTION "Thelength of a mask for the matching of the destination IP address. Masks are constructed by setting bits in sequence from the most-significant bit downwards for diffServSixTupleClfrDstAddrMask bits length. All other bits in the mask, up tominimum value that the layer-4 source port numberneeded to fill the length of the address diffServSixTupleClfrDstAddr are cleared to zero. A zero bitin themask then means that the corresponding bitpacket must have inthe address always matches."order to match this classifier entry." DEFVAL {0} ::= { diffServSixTupleClfrEntry412 }diffServSixTupleClfrSrcAddrTypediffServSixTupleClfrSrcL4PortMax OBJECT-TYPE SYNTAXInetAddressType Baker, Chan, Smith Expires November 2000 [Page 23] Internet Draft Differentiated Services MIB May 2000SixTupleClfrL4Port MAX-ACCESS read-create STATUS current DESCRIPTION "Thetype of IPmaximum value that the layer-4 sourceaddress used byport number in the packet must have in oder to match this classifier entry. This value must be equal to or greater that the value specified for thisclassifier entry."entry in dsSixTupleIpSrcL4PortMin." DEFVAL {65535} ::= { diffServSixTupleClfrEntry513 }diffServSixTupleClfrSrcAddrdiffServSixTupleClfrStatus OBJECT-TYPE SYNTAXInetAddressRowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "TheIP address to match againstRowStatus variable controls thesource IP addressactivation, deactivation, or deletion ofeach packet."a classifier. Any writable variable may be modified whether the row is active or notInService." ::= { diffServSixTupleClfrEntry614 }diffServSixTupleClfrSrcAddrMaskdiffServSixTupleClfrNextFree OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESSread-createread-only STATUS current DESCRIPTION"The length of"This object yields amaskvalue when read that is currently-unused for a diffServSixTupleClfrId instance. If a configuring system attempts to create a new row in thematching ofdiffServSixTupleClfrTable using this value, that operation will fail if thesource IP address. Masks are constructed by setting bitsvalue has, insequence fromthemost- significant bit downwardsmeantime, been used to create another row that is currently valid." Baker, Chan, Smith Expires January 2001 [Page 29] Internet Draft Differentiated Services MIB July 2000 ::= { diffServObjects 2 } Baker, Chan, Smith Expires January 2001 [Page 30] Internet Draft Differentiated Services MIB July 2000 -- -- Meters -- -- This MIB includes definitions fordiffServSixTupleClfrSrcAddrMask bits length. All other bits in the mask, upa generic Meter -- Table as well as specific definitions for Token- -- Bucket Meters, as one example of possible meters. -- diffServMeterTable OBJECT-TYPE SYNTAX SEQUENCE OF DiffServMeterEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table enumerates generic meters that a system may use tothe number neededpolice a stream of traffic. The traffic stream tofillbe metered is determined by thelengthelement(s) upstream of theaddress diffServSixTupleClfrSrcAddrmeter i.e. by the object(s) that point to each entry in this table. This may include all traffic on an interface. Specific meter details areclearedtozero. A zero bit in the mask then means that the corresponding bitbe found inthe address always matches." DEFVAL {0}diffServMeterSpecific." REFERENCE "[MODEL] section 5.1" ::= {diffServSixTupleClfrEntry 7diffServTables 3 }diffServSixTupleClfrDscpdiffServMeterEntry OBJECT-TYPE SYNTAXDscpDiffServMeterEntry MAX-ACCESSread-createnot-accessible STATUS current DESCRIPTION"The value that the DSCP"An entry in thepacket must have to match this entry. A value of -1 indicates that a specific DSCP value has not been defined and thus all DSCP values are consideredmeter table describing amatch." DEFVAL {-1}single meter." INDEX { ifIndex, diffServMeterIfDirection, diffServMeterId } ::= {diffServSixTupleClfrEntry 8diffServMeterTable 1 }diffServSixTupleClfrProtocolDiffServMeterEntry ::= SEQUENCE { diffServMeterIfDirection IfDirection, diffServMeterId Unsigned32, diffServMeterSucceedNext RowPointer, diffServMeterFailNext RowPointer, diffServMeterSpecific OBJECT IDENTIFIER, diffServMeterStatus RowStatus } diffServMeterIfDirection OBJECT-TYPE SYNTAXINTEGER (0..255)IfDirection MAX-ACCESSread-createnot-accessible STATUS currentDESCRIPTION "The IP protocol to match against the IPv4 protocol number in theBaker, Chan, Smith ExpiresNovember 2000January 2001 [Page24]31] Internet Draft Differentiated Services MIBMayJuly 2000packet. A value of zero means match all." DEFVAL {0} ::= { diffServSixTupleClfrEntry 9 } diffServSixTupleClfrDstL4PortMin OBJECT-TYPE SYNTAX SixTupleClfrL4Port MAX-ACCESS read-create STATUS currentDESCRIPTION"The minimum value that the layer-4 destination port number in"Specifies thepacket must have in order to matchdirection for which thisclassifier entry." DEFVAL {0}meter entry applies on this interface." ::= {diffServSixTupleClfrEntry 10diffServMeterEntry 1 }diffServSixTupleClfrDstL4PortMaxdiffServMeterId OBJECT-TYPE SYNTAXSixTupleClfrL4PortUnsigned32 MAX-ACCESSread-createnot-accessible STATUS current DESCRIPTION"The maximum value that the layer-4 destination port number in the packet must have in order to match this classifier"This identifies a meter entry.This value must be equal to or greater that the value specifiedManagers should obtain new values forthis entryrow creation indiffServSixTupleClfrDstL4PortMin." DEFVAL {65535}this table by reading diffServMeterNextFree." ::= {diffServSixTupleClfrEntry 11diffServMeterEntry 2 }diffServSixTupleClfrSrcL4PortMindiffServMeterSucceedNext OBJECT-TYPE SYNTAXSixTupleClfrL4PortRowPointer MAX-ACCESS read-create STATUS current DESCRIPTION"The minimum value that"If thelayer-4 source port number intraffic does conform to thepacket must have in ordermeter, this indicates the next datapath element tomatchhandle the traffic e.g. an Action or another Meter datapath element. The value zeroDotZero in thisclassifier entry."variable indicates no further Diffserv treatment is performed on this traffic by the current interface for this interface direction. If the row pointed to does not exist, the meter element is considered inactive." DEFVAL{0}{ zeroDotZero } ::= {diffServSixTupleClfrEntry 12diffServMeterEntry 3 }diffServSixTupleClfrSrcL4PortMaxdiffServMeterFailNext OBJECT-TYPE SYNTAXSixTupleClfrL4PortRowPointer MAX-ACCESS read-create STATUS current DESCRIPTION"The maximum value that the layer-4 source port number in"If thepacket must have in odertraffic does not conform tomatchthe meter, thisclassifier entry. This value must be equalindicates the next datapath element toor greater thathandle the traffic e.g. an Action or Meter datapath element. The valuespecifiedzeroDotZero in this variable indicates no further Diffserv treatment is performed on this traffic by the current interface for thisentry in dsSixTupleIpSrcL4PortMin."interface direction. If the row pointed to does not exist, the meter element is considered inactive." DEFVAL{65535}{ zeroDotZero } ::= {diffServSixTupleClfrEntry 13diffServMeterEntry 4 } diffServMeterSpecific OBJECT-TYPE Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page25]32] Internet Draft Differentiated Services MIBMayJuly 2000diffServSixTupleClfrStatusSYNTAX OBJECT IDENTIFIER MAX-ACCESS read-create STATUS current DESCRIPTION "This indicates the behaviour of the meter by pointing to a table containing detailed parameters. Note that entries in that specific table must be managed explicitly. One example of a valid object would be diffServTBMeterTable, whose entries are indexed by the same variables as this table, for describing an instance of a token-bucket meter." ::= { diffServMeterEntry 5 } diffServMeterStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The RowStatus variable controls the activation, deactivation, or deletion of aclassifier.meter. Any writable variable may be modified whether the row is active or notInService." ::= {diffServSixTupleClfrEntry 14diffServMeterEntry 6 }diffServSixTupleClfrUniquediffServMeterNextFree OBJECT-TYPE SYNTAXTestAndIncrUnsigned32 MAX-ACCESSread-writeread-only STATUS current DESCRIPTION"The diffServSixTupleClfrUnique"This object yields aunique newvaluefor diffServSixTupleClfrIdwhen readand subsequently set. This value must be testedthat is currently-unused foruniqueness and can be used bya diffServMeterId instance. If a configuring system attempts toobtaincreate aunique value for diffServSixTupleClfrId for purposes ofnew rowcreationin thediffServSixTupleClfrTable."diffServMeterTable using this value, that operation will fail if the value has, in the meantime, been used to create another row that is currently valid." ::= { diffServObjects23 }Baker, Chan, Smith Expires November 2000 [Page 26] Internet Draft Differentiated Services MIB May 2000-- --Meters -- -- This MIB includes definitions for a genericToken-Bucket Meter--Tableas well as specific definitions for Token- -- Bucket Meters, as one example of possible meters.--diffServMeterTablediffServTBMeterTable OBJECT-TYPE SYNTAX SEQUENCE OFDiffServMeterEntryDiffServTBMeterEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table enumeratesgenericspecific token-bucket meters that a system may use to police a stream ofclassifiedtraffic.The traffic stream toSuch meters are modelled here as having a single rate and a burst size. Baker, Chan, Smith Expires January 2001 [Page 33] Internet Draft Differentiated Services MIB July 2000 Multiple meter elements may bemeteredlogically cascaded using their diffServMeterSucceedNext pointers if a multi-rate token bucket isdetermined by the classifier upstreamneeded. One example of this might be for an AF PHB implementation that used two-rate meters. Such cascading ofthemeteri.e. by the object(s)elements of specific type of token-bucket indicates forwarding behaviour thatpointis functionally equivalent toeach entrya multi- rate meter: the sequential nature of the representation is merely a notational convenience for this MIB. Entries in this tableusingshare indexing with aRowPointer. This may include all traffic on an interface. Specific meter details are toparent diffServMeterEntry although they must befound inmanaged (e.g. created/deleted) by explicit management action, independently of the associated value of diffServMeterSpecific." REFERENCE "[MODEL] section5.1"5.1.3" ::= { diffServTables34 }diffServMeterEntrydiffServTBMeterEntry OBJECT-TYPE SYNTAXDiffServMeterEntryDiffServTBMeterEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entryin the meter table describingthat describes a singlemeter."token-bucket meter, indexed by the same variables as a diffServMeterEntry." INDEX { ifIndex, diffServMeterIfDirection, diffServMeterId } ::= {diffServMeterTablediffServTBMeterTable 1 }DiffServMeterEntryDiffServTBMeterEntry ::= SEQUENCE {diffServMeterIfDirection IfDirection, diffServMeterId INTEGER, diffServMeterSucceedNext RowPointer, diffServMeterFailNext RowPointer, diffServMeterSpecific OBJECT IDENTIFIER, diffServMeterStatusdiffServTBMeterRate Unsigned32, diffServTBMeterBurstSize BurstSize diffServTBMeterStatus RowStatus }diffServMeterIfDirectiondiffServTBMeterRate OBJECT-TYPE SYNTAXIfDirectionUnsigned32 UNITS "kilobits per second" MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION "The token-bucket rate, in kilobits per second (kbps)." ::= { diffServTBMeterEntry 1 } diffServTBMeterBurstSize OBJECT-TYPE SYNTAX BurstSize UNITS "Bytes" MAX-ACCESS read-create Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page27]34] Internet Draft Differentiated Services MIBMayJuly 2000 STATUS current DESCRIPTION"Specifies the direction for this meter entry on"The maximum number of bytes in a single transmission burst. The interval over which theinterface."burst is to be measured can be derived as diffServTBMeterBurstSize*8*1000/diffServTBMeterRate." ::= {diffServMeterEntry 1diffServTBMeterEntry 2 }diffServMeterIddiffServTBMeterStatus OBJECT-TYPE SYNTAXINTEGER (0..2147483647)RowStatus MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"This identifies"The RowStatus variable controls the activation, deactivation, or deletion of ameter entry."meter. Any writable variable may be modified whether the row is active or notInService." ::= {diffServMeterEntry 2diffServTBMeterEntry 3 }diffServMeterSucceedNextBaker, Chan, Smith Expires January 2001 [Page 35] Internet Draft Differentiated Services MIB July 2000 -- -- Actions -- -- -- The Action Table allows enumeration of the different -- types of actions to be applied to a traffic flow. -- diffServActionTable OBJECT-TYPE SYNTAXRowPointerSEQUENCE OF DiffServActionEntry MAX-ACCESSread-createnot-accessible STATUS current DESCRIPTION"If the traffic does conform"The Action Table enumerates actions that can be performed tothea stream of traffic. Multiple actions can be concatenated. For example, after marking a stream of traffic exiting from a meter,this indicates the next datapath element to handlea device can then perform a count action of thetraffic e.g. an Actionconforming or non-conforming traffic. Specific actions are indicated by diffServActionSpecific which points to anotherMeter datapath element. The value zeroDotZeroobject which describes the action inthis variable indicates nofurtherDiffserv treatment is performed on this traffic by the current interface for this interface direction." DEFVAL { zeroDotZero }detail." REFERENCE "[MODEL] section 6." ::= {diffServMeterEntry 3diffServTables 5 }diffServMeterFailNextdiffServActionEntry OBJECT-TYPE SYNTAXRowPointerDiffServActionEntry MAX-ACCESSread-createnot-accessible STATUS current DESCRIPTION"If the traffic does not conform to"An entry in themeter, this indicatesaction table describing thenext datapath elementactions applied tohandle the traffic e.g. an Action or Meter datapath element. The value zeroDotZero in this variable indicates no further Diffserv treatment is performed on thistrafficby the current interface for this interface direction." DEFVALarriving at its input." INDEX {zeroDotZeroifIndex, diffServActionIfDirection, diffServActionId } ::= {diffServMeterEntry 4diffServActionTable 1 }diffServMeterSpecific OBJECT-TYPE SYNTAXDiffServActionEntry ::= SEQUENCE { diffServActionIfDirection IfDirection, diffServActionId Unsigned32, diffServActionNext RowPointer, diffServActionSpecific OBJECTIDENTIFIER MAX-ACCESS read-create STATUS current DESCRIPTION "This indicates the behaviour of the meter by pointing to an object containing detailed parameters. One example of a valid object would be diffServTBMeterTable, whose entries are indexedIDENTIFIER, diffServActionStatus RowStatus } diffServActionIfDirection OBJECT-TYPE Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page28]36] Internet Draft Differentiated Services MIBMayJuly 2000bySYNTAX IfDirection MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifies thesame variables as this table,direction fordescribing an instance of a token-bucket meter."which this action entry applies on this interface." ::= {diffServMeterEntry 5diffServActionEntry 1 }diffServMeterStatusdiffServActionId OBJECT-TYPE SYNTAXRowStatusUnsigned32 MAX-ACCESSread-createnot-accessible STATUS current DESCRIPTION"The RowStatus variable controls the activation, deactivation, or deletion of a meter. Any writable variable may be modified whether"This identifies the action entry. Managers should obtain new values for rowis active or notInService."creation in this table by reading diffServActionNextFree." ::= {diffServMeterEntry 6diffServActionEntry 2 }diffServMeterUniquediffServActionNext OBJECT-TYPE SYNTAXTestAndIncrRowPointer MAX-ACCESSread-writeread-create STATUS current DESCRIPTION "ThediffServMeterUnique object yields a unique new value for diffServMeterId when read and subsequently set. This value must be tested for uniqueness and can be used by a configuring systemNext pointer indicates the next datapath element toobtainhandle the traffic. For example, auniquequeue datapath element. The value zeroDotZero in this variable indicates no further DiffServ treatment is performed on this flow by the current interface fordiffServMeterId for purposes ofthis interface direction. If the rowcreation inpointed to does not exist, thediffServMeterTable."action element is considered inactive." DEFVAL { zeroDotZero } ::= {diffServObjectsdiffServActionEntry 3 }-- -- Token-Bucket Meter Table -- diffServTBMeterTablediffServActionSpecific OBJECT-TYPE SYNTAXSEQUENCE OF DiffServTBMeterEntryOBJECT IDENTIFIER MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"This table enumerates specific token-bucket meters that a system may use"A pointer topolice a stream of traffic. Such meters are modelled here as having a single rate and a burst size. Multiple meter elements may be logically cascaded if a multi-rate token bucket is neededan object instance providing additional information fora given Per-Hop Behavior. One examplethe type ofsuch a PHB might be for an AF implementation. This is not meantaction indicated by this action table entry. For the standard actions defined by this MIB module, this should point toimply that cascadingone ofsuch elements is functionally equivalent tothe following: amulti-rate meter, it is merelydiffServDscpMarkActEntry, aconvenience for this MIB representation. Entries in this table share indexing with thosediffServCountActEntry, the diffServAbsoluteDropAction OID. For other actions, it may point to an object instance defined inthe basesome other MIB." ::= { diffServActionEntry 4 } Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page29]37] Internet Draft Differentiated Services MIBMayJuly 2000diffServTBMeterTable: they appear in and are deleted from this table whenever they " REFERENCE "[MODEL] section 5.1.3" ::= { diffServTables 4 } diffServTBMeterEntrydiffServActionStatus OBJECT-TYPE SYNTAXDiffServTBMeterEntryRowStatus MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"An entry that describes a single token-bucket meter, indexed by"The RowStatus variable controls thesame variables as a diffServMeterEntry." INDEX { ifIndex, diffServMeterIfDirection, diffServMeterId } ::= { diffServTBMeterTable 1 } DiffServTBMeterEntryactivation, deactivation or deletion of an action element. Any writable variable may be modified whether the row is active or notInService." ::=SEQUENCE{diffServTBMeterRate Unsigned32, diffServTBMeterBurstSize BurstSize, diffServTBMeterStatus RowStatusdiffServActionEntry 5 }diffServTBMeterRatediffServActionNextFree OBJECT-TYPE SYNTAX Unsigned32UNITS "kilobits per second"MAX-ACCESSread-createread-only STATUS current DESCRIPTION"The token-bucket rate,"This object yields a value when read that is currently-unused for a diffServActionId instance. If a configuring system attempts to create a new row inkilobits per second (kbps)."the diffServActionTable using this value, that operation will fail if the value has, in the meantime, been used to create another row that is currently valid." ::= {diffServTBMeterEntry 1diffServObjects 4 }diffServTBMeterBurstSize-- DSCP Mark Action Table -- -- Rows of this table are pointed to by diffServAction to -- provide detailed parameters specific to the DSCP -- Mark action. diffServDscpMarkActTable OBJECT-TYPE SYNTAXBurstSize UNITS "Bytes"SEQUENCE OF DiffServDscpMarkActEntry MAX-ACCESSread-createnot-accessible STATUS current DESCRIPTION"The maximum number"This table enumerates specific DSCPs used for marking or remarking the DSCP field ofbytes in a single transmission burst.IP packets. Theinterval over which the burst is to be measured canentries of this table may bederived as diffServTBMeterBurstSize*8*1000/diffServTBMeterRate."referenced by a diffServActionSpecific attribute that points to diffServDscpMarkActTable." REFERENCE "[MODEL] section 6.1" ::= {diffServTBMeterEntry 2diffServTables 6 }diffServTBMeterStatusdiffServDscpMarkActEntry OBJECT-TYPE SYNTAXRowStatusDiffServDscpMarkActEntry MAX-ACCESSread-createnot-accessible STATUS current Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page30]38] Internet Draft Differentiated Services MIBMayJuly 2000 DESCRIPTION"The RowStatus variable controls"An entry in theactivation, deactivation, or deletion ofDSCP mark action table that describes ameter. Any writable variable may be modified whether the row is active or notInService."single DSCP used for marking." INDEX { diffServDscpMarkActDscp } ::= {diffServTBMeterEntry 3diffServDscpMarkActTable 1 }Baker, Chan, Smith Expires November 2000 [Page 31] Internet Draft Differentiated Services MIB May 2000 -- -- Actions -- -- -- TheDiffServDscpMarkActEntry ::= SEQUENCE { diffServDscpMarkActDscp Dscp } diffServDscpMarkActDscp OBJECT-TYPE SYNTAX Dscp MAX-ACCESS read-only STATUS current DESCRIPTION "The DSCP that this ActionTable allows enumerationuses for marking/remarking traffic. Note that a DSCP value of -1 is not permitted in this table. It is quite possible that thedifferent -- types of actionsonly packets subject tobe appliedthis Action are already marked with this DSCP. Note also that Diffserv may result in packet remarking both on ingress to atraffic flow.network and on egress from it and it is quite possible that ingress and egress would occur in the same router." ::= { diffServDscpMarkActEntry 1 } --diffServActionTable-- Count Action Table -- diffServCountActTable OBJECT-TYPE SYNTAX SEQUENCE OFDiffServActionEntryDiffServCountActEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION"The Action Table enumerates actions that can be performed to a stream of traffic. Multiple actions can be concatenated. For example, after marking a stream of traffic exiting from a meter, a device can then perform a count action of the conforming or non-conforming traffic. Specific actions are indicated by diffServActionSpecific which points to another object which describes"This table contains counters for all the traffic passing through an actionin further detail."element." REFERENCE "[MODEL] section6."6.5" ::= { diffServTables57 }diffServActionEntrydiffServCountActEntry OBJECT-TYPE SYNTAXDiffServActionEntryDiffServCountActEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry in the count action tabledescribing the actions applied tothat describes a single set of trafficarriving at its input." INDEX { ifIndex, diffServActionIfDirection, diffServActionId } ::= { diffServActionTable 1 } DiffServActionEntry ::= SEQUENCE { diffServActionIfDirection IfDirection, diffServActionId INTEGER, diffServActionNext RowPointer, diffServActionSpecific RowPointer, diffServActionStatus RowStatus } diffServActionIfDirection OBJECT-TYPEcounters. Entries in this table share indexing with Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page32]39] Internet Draft Differentiated Services MIBMayJuly 2000SYNTAX IfDirection MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifiesthose in thedirection for this action entry onbase diffServActionTable although they must be managed (e.g. created/deleted) by explicit management action, independently of theinterface."associated value of diffServActionSpecific." INDEX { ifIndex, diffServActionIfDirection, diffServActionId } ::= {diffServActionEntrydiffServCountActTable 1 }diffServActionId OBJECT-TYPE SYNTAX INTEGER (0..2147483647) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Action Id enumerates the Action entry."DiffServCountActEntry ::= SEQUENCE {diffServActionEntry 2diffServCountActOctets Counter32, diffServCountActHCOctets Counter64, diffServCountActPkts Counter32, diffServCountActHCPkts Counter64, diffServCountActDiscontTime TimeStamp, diffServCountActStatus RowStatus }diffServActionNextdiffServCountActOctets OBJECT-TYPE SYNTAXRowPointerCounter32 MAX-ACCESSread-createread-only STATUS current DESCRIPTION "TheNext pointer indicates the next datapath element to handlenumber of octets at thetraffic. For example, a queueAction datapath element.The value zeroDotZero inOn high speed devices, thisvariable indicates no further DiffServ treatment is performed onobject implements the least significant 32 bits of diffServcountActHCOctets. Discontinuities in the value of thisflowcounter can occur at re- initialization of the management system and at other times as indicated by thecurrent interfacevalue of diffServCountActDiscontTime for thisinterface direction." DEFVAL { zeroDotZero }entry." ::= {diffServActionEntry 3diffServCountActEntry 1 }diffServActionSpecificdiffServCountActHCOctets OBJECT-TYPE SYNTAXRowPointerCounter64 MAX-ACCESSread-createread-only STATUS currentDESCRIPTION "Pointer to a MIB table providing additional information for the type of action indicated by this action table entry. ForDESCRIPTION "The number of octets at thestandard actions defined by this MIB module, thisAction datapath element. This object shouldpoint to an entrybe used on high speed interfaces. Discontinuities inone ofthediffServDscpMarkActTable, diffServCountActTable tables or tovalue of this counter can occur at re- initialization of thediffServAbsoluteDropAction OID. For other actions, it may point to a table defined in somemanagement system and at otherMIB."times as indicated by the value of diffServCountActDiscontTime for this entry." ::= {diffServActionEntry 4diffServCountActEntry 2 }diffServActionStatusdiffServCountActPkts OBJECT-TYPE SYNTAXRowStatus MAX-ACCESS read-create STATUS currentCounter32 Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page33]40] Internet Draft Differentiated Services MIBMayJuly 2000 MAX-ACCESS read-only STATUS current DESCRIPTION "TheRowStatus variable controlsnumber of packets at theactivation, deactivation, or deletionAction datapath element. On high speed devices, this object implements the least significant 32 bits ofa meter. Any writable variable may be modified whetherdiffServcountActHCPkts. Discontinuities in therow is active or notInService."value of this counter can occur at re- initialization of the management system and at other times as indicated by the value of diffServCountActDiscontTime for this entry." ::= {diffServActionEntry 5diffServCountActEntry 3 }diffServActionUniquediffServCountActHCPkts OBJECT-TYPE SYNTAXTestAndIncrCounter64 MAX-ACCESSread-writeread-only STATUS current DESCRIPTION "ThediffServActionUnique object yields a unique new value for diffServActionId when read and subsequently set. This value must be tested for uniqueness.number of packets at the Action datapath element. This objectallows a configuring system to obtain a uniqueshould be used on high speed interfaces. Discontinuities in the valuefor diffServActionId for purposes of row creation." ::= { diffServObjects 4 } -- DSCP Mark Action Table -- -- Rowsof thistable are pointed tocounter can occur at re- initialization of the management system and at other times as indicated bydiffServAction to -- provide detailed parameters specific totheDSCP -- Mark action. diffServDscpMarkActTablevalue of diffServCountActDiscontTime for this entry." ::= { diffServCountActEntry 4 } diffServCountActDiscontTime OBJECT-TYPE SYNTAXSEQUENCE OF DiffServDscpMarkActEntryTimeStamp MAX-ACCESSnot-accessibleread-only STATUS current DESCRIPTION"This table enumerates specific DSCPs used for marking or remarking"The value of sysUpTime on theDSCP fieldmost recent occasion at which any one or more ofIP packets. The entriesthis entry's counters suffered a discontinuity. If no such discontinuities have occurred since the last re- initialization of the local management subsystem, then thistable may be referenced byobject contains adiffServActionSpecific attribute that points to diffServDscpMarkActTable." REFERENCE "[MODEL] section 6.1"zero value." ::= {diffServTables 6diffServCountActEntry 5 }diffServDscpMarkActEntrydiffServCountActStatus OBJECT-TYPE SYNTAXDiffServDscpMarkActEntryRowStatus MAX-ACCESSnot-accessibleread-create STATUS current DESCRIPTION"An entry in"The RowStatus variable controls theDSCP mark action table describes a single DSCP used for marking." INDEX { diffServDscpMarkActDscp } ::= { diffServDscpMarkActTable 1 }activation, deactivation, or deletion of this entry. Any writable variable may be modified whether the row is active or notInService." Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page34]41] Internet Draft Differentiated Services MIBMayJuly 2000DiffServDscpMarkActEntry::=SEQUENCE{diffServDscpMarkActDscp DscpdiffServCountActEntry 6 }diffServDscpMarkActDscp OBJECT-TYPE SYNTAX Dscp MAX-ACCESS read-onlydiffServAbsoluteDropAction OBJECT-IDENTITY STATUS current DESCRIPTION"The DSCP that this Action uses for marking/remarking traffic. Note that it is quite possible that"This object identifier may be used as theonly packets subjectvalue of a diffServActionSpecific pointer in order to indicate that all packets following thisActionpath arealready marked with this DSCP. Diffserv may result in packet remarking both on ingresstoa network and on egress and itbe dropped unconditionally at this point. It isquite possiblelikely, but not required, thatingress and egress would occur in the same router."this action will be preceded by a counter action." ::= {diffServDscpMarkActEntry 1diffServObjects 6 } Baker, Chan, Smith Expires January 2001 [Page 42] Internet Draft Differentiated Services MIB July 2000 -- --Count ActionAlgorithmic Drop Table --diffServCountActTablediffServAlgDropTable OBJECT-TYPE SYNTAX SEQUENCE OFDiffServCountActEntryDiffServAlgDropEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION"This"The algorithmic drop table containscounters for all the traffic passing throughentries describing anaction element."element that drops packets according to some algorithm." REFERENCE "[MODEL] section6.5"7.1.3" ::= { diffServTables78 }diffServCountActEntrydiffServAlgDropEntry OBJECT-TYPE SYNTAXDiffServCountActEntryDiffServAlgDropEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entryin the count action tabledescribes asingle setprocess that drops packets according to some algorithm. Further details oftraffic counters. This entry is indexed inthesame way as a diffServActionEntry. An entry should existalgorithm type are to be found inthis table for every diffServActionEntry that has a diffServActionSpecific pointingdiffServAlgDropType and may be pointed tothis table."by diffServAlgDropSpecific." INDEX { ifIndex,diffServActionIfDirection, diffServActionIddiffServAlgDropIfDirection, diffServAlgDropId } ::= {diffServCountActTablediffServAlgDropTable 1 } DiffServAlgDropEntry ::= SEQUENCE { diffServAlgDropIfDirection IfDirection, diffServAlgDropId Unsigned32, diffServAlgDropType INTEGER, diffServAlgDropNext RowPointer, diffServAlgDropQMeasure RowPointer, diffServAlgDropQThreshold Unsigned32, diffServAlgDropSpecific OBJECT IDENTIFIER, diffServAlgDropOctets Counter32, diffServAlgDropHCOctets Counter64, diffServAlgDropPkts Counter32, diffServAlgDropHCPkts Counter64, diffServAlgDropStatus RowStatus } diffServAlgDropIfDirection OBJECT-TYPE SYNTAX IfDirection MAX-ACCESS not-accessible STATUS current Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page35]43] Internet Draft Differentiated Services MIBMayJuly 2000DiffServCountActEntryDESCRIPTION "Specifies the direction for which this algorithmic dropper entry applies on this interface." ::=SEQUENCE{diffServCountActOctets Counter32, diffServCountActHCOctets Counter64, diffServCountActPkts Counter32, diffServCountActHCPkts Counter64, diffServCountActStatus RowStatusdiffServAlgDropEntry 1 }diffServCountActOctetsdiffServAlgDropId OBJECT-TYPE SYNTAXCounter32Unsigned32 MAX-ACCESSread-onlynot-accessible STATUS current DESCRIPTION"The number of octets at the Action datapath element. On high speed devices, this object implements the least significant 32 bits of diffServcountActHCOctets. Discontinuities in the value of this counter can occur at re- initialization of the management system and at other times as indicated by"This identifies thevalue of ifCounterDiscontinuityTime appropriate todrop action entry. Managers should obtain new values for row creation in thisinterface."table by reading diffServAlgDropNextFree." ::= {diffServCountActEntry 1diffServAlgDropEntry 2 }diffServCountActHCOctetsdiffServAlgDropType OBJECT-TYPE SYNTAXCounter64INTEGER { other(1), tailDrop(2), headDrop(3), randomDrop(4) } MAX-ACCESSread-onlyread-create STATUS current DESCRIPTION "Thenumbertype ofoctets at the Action datapath element. This object should bealgorithm usedon high speed interfaces. Discontinuities in theby this dropper. A value of tailDrop(2) or headDrop(3) represents an algorithm that is completely specified by thiscounter can occur at re- initializationMIB. A value ofthe management system and atother(1) requires further specification in some othertimesMIB module. The tailDrop(2) algorithm is described asindicated byfollows: diffServAlgDropQThreshold represents thevaluedepth ofifCounterDiscontinuityTime appropriate to this interface." ::= { diffServCountActEntry 2 } diffServCountActPkts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUSthe queue diffServAlgDropQMeasure at which all newly arriving packets will be dropped. The headDrop(3) algorithm is described as follows: if a packet arrives when the currentDESCRIPTION "The numberdepth of the queue diffServAlgDropQMeasure is at diffServAlgDropQThreshold, packets currently at theAction datapath element. On high speed devices, this object implementshead of theleast significant 32 bitsqueue are dropped to make room for the new packet to be enqueued at the tail ofdiffServcountActHCPkts. Discontinuities inthevaluequeue. The randomDrop(4) algorithm is described as follows: on packet arrival, an algorithm is executed which may randomly drop the packet, or drop other packet(s) from the queue in its place. The specifics of the algorithm may be proprietary. For thiscounter can occuralgorithm, an associated diffServRandomDropEntry is indicated by pointing diffServAlgDropSpecific atre-the diffServRandomDropTable. The relevant entry in that table is selected by the common indexing of the two tables. For this algorithm, diffServAlgQThreshold is understood to be the absolute maximum size of the queue and additional parameters are described in Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page36]44] Internet Draft Differentiated Services MIBMayJuly 2000initialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime appropriate to this interface."diffServRandomDropTable." ::= {diffServCountActEntrydiffServAlgDropEntry 3 }diffServCountActHCPktsdiffServAlgDropNext OBJECT-TYPE SYNTAXCounter64RowPointer MAX-ACCESSread-onlyread-create STATUS current DESCRIPTION "Thenumber of packets atNext pointer indicates theActionnext datapathelement. This object should be used on high speed interfaces. Discontinuities inelement to handle the traffic e.g. a queue datapath element. The valueofzeroDotZero in thiscounter can occur at re- initialization of the management system and at other times as indicatedvariable indicates no further DiffServ treatment is performed on this flow by thevalue of ifCounterDiscontinuityTime appropriate tocurrent interface for thisinterface."interface direction. If the row pointed to does not exist, the algorithmic dropper element is considered inactive." ::= {diffServCountActEntrydiffServAlgDropEntry 4 }diffServCountActStatusdiffServAlgDropQMeasure OBJECT-TYPE SYNTAXRowStatusRowPointer MAX-ACCESS read-create STATUS current DESCRIPTION"The RowStatus variable controls"Points to an entry in theactivation, deactivation, or deletion of this entry. Any writable variable may be modifieddiffServQueueTable to indicate the queue that a drop algorithm is to monitor when deciding whether to drop a packet. If the row pointed to does not exist, the algorithmic dropper element isactive or notInService."considered inactive." ::= {diffServCountActEntrydiffServAlgDropEntry 5 }diffServAbsoluteDropAction OBJECT-IDENTITYdiffServAlgDropQThreshold OBJECT-TYPE SYNTAX Unsigned32 UNITS "Bytes" MAX-ACCESS read-create STATUS current DESCRIPTION"This object identifier may be used as"A threshold on thevalue of a diffServActionSpecific pointerdepth inorder to indicate that all packets following this path are to be dropped unconditionallybytes of the queue being measured atthis point. Itwhich a trigger islikely, but not required, thatgenerated to the dropping algorithm. For the tailDrop(2) or headDrop(3) algorithms, this represents the depth of the queue diffServAlgDropQMeasure at which the drop action willbe preceded by a counter action."take place. Other algorithms will need to define their own semantics for this threshold." ::= {diffServObjectsdiffServAlgDropEntry 6 } diffServAlgDropSpecific OBJECT-TYPE SYNTAX OBJECT IDENTIFIER MAX-ACCESS read-create Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page37]45] Internet Draft Differentiated Services MIBMayJuly 2000-- -- Algorithmic Drop Table -- diffServAlgDropTable OBJECT-TYPE SYNTAX SEQUENCE OF DiffServAlgDropEntry MAX-ACCESS not-accessibleSTATUS current DESCRIPTION"The algorithmic drop table contains entries describing a process that drops packets according"Points tosome algorithm." REFERENCE "[MODEL] section 7.1.3" ::= { diffServTables 8 } diffServAlgDropEntry OBJECT-TYPE SYNTAX DiffServAlgDropEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry describesaprocesstable (not an entry in the table) defined elsewhere thatdrops packets according to someprovides further detail regarding a drop algorithm.Algorithms described here include: tailDrop(2), headDrop(3) and other(1). Specifically, Random Drop algorithms are not directly representedEntries in such a table are indexed by the same variables as thisMIBdiffServAlgDropEntry butcannote that those entries must beindicated by an entrymanaged independently of those in thistabletable. Entries with diffServAlgDropTypeofequal to other(1)and extensions, pointedmay have this point toby diffServAlgDropSpecific,a table defined insome otheranother MIBmodule that parallels entries inmodule. Entries with diffServAlgDropType equal to randomDrop(4) must have thistable e.g. by usingpoint to diffServRandomDropTable. For all other algorithms, this should take thesame index attribute(s)." INDEX { ifIndex, diffServAlgDropIfDirection, diffServAlgDropId } ::= { diffServAlgDropTable 1 } DiffServAlgDropEntryvalue zeroDotzero." ::=SEQUENCE{diffServAlgDropIfDirection IfDirection, diffServAlgDropId INTEGER, diffServAlgDropType INTEGER, diffServAlgDropNext RowPointer, diffServAlgDropQMeasure RowPointer, diffServAlgDropQThreshold Unsigned32, diffServAlgDropSpecific OBJECT IDENTIFIER, diffServAlgDropOctets Counter32, diffServAlgDropHCOctets Counter64, diffServAlgDropPkts Counter32, diffServAlgDropHCPkts Counter64, diffServAlgDropStatus RowStatus } Baker, Chan, Smith Expires November 2000 [Page 38] Internet Draft Differentiated Services MIB May 2000 diffServAlgDropIfDirectiondiffServAlgDropEntry 7 } diffServAlgDropOctets OBJECT-TYPE SYNTAXIfDirectionCounter32 MAX-ACCESSnot-accessibleread-only STATUS current DESCRIPTION"Specifies"The number of octets that have been dropped by this drop process. On high speed devices, this object implements thedirection forleast significant 32 bits of diffServAlgDropHCOctets. Discontinuities in the value of thisalgorithmic dropper entry oncounter can occur at re- initialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime appropriate to this interface." ::= { diffServAlgDropEntry18 }diffServAlgDropIddiffServAlgDropHCOctets OBJECT-TYPE SYNTAXINTEGER (0..2147483647)Counter64 MAX-ACCESSnot-accessibleread-only STATUS current DESCRIPTION"Drop Action Id enumerates"The number of octets that have been dropped by this drop process. This object should be used on high speed interfaces. Discontinuities in theDrop Action entry."value of this counter can occur at re- initialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime appropriate to this interface." ::= { diffServAlgDropEntry29 }diffServAlgDropTypediffServAlgDropPkts OBJECT-TYPE Baker, Chan, Smith Expires January 2001 [Page 46] Internet Draft Differentiated Services MIB July 2000 SYNTAXINTEGER { other(1), tailDrop(2), headDrop(3) }Counter32 MAX-ACCESSread-createread-only STATUS current DESCRIPTION "Thetype of algorithm used by this dropper. A valuenumber oftailDrop(2) or headDrop(3) represents an algorithmpackets thatis completely specifiedhave been dropped by thisMIB. A value of other(1) requires further specification in some other MIB module. The tailDrop(2) algorithm is described as follows: diffServAlgDropQThreshold representsdrop process. On high speed devices, this object implements thedepthleast significant 32 bits of diffServAlgDropHCPkts. Discontinuities in thequeue diffServAlgDropQMeasure at which all newly arriving packets will be dropped. The headDrop(3) algorithm is described as follows: if a packet arrives when the current depthvalue ofthe queue diffServAlgDropQMeasure is at diffServAlgDropQThreshold, the packet currentlythis counter can occur atthe headre- initialization of thequeue is droppedmanagement system andthe new packet is enqueuedat other times as indicated by thetailvalue ofthe queue."ifCounterDiscontinuityTime appropriate to this interface." ::= { diffServAlgDropEntry310 }diffServAlgDropNextdiffServAlgDropHCPkts OBJECT-TYPE SYNTAXRowPointerCounter64 MAX-ACCESSread-createread-only STATUS current DESCRIPTION "TheNext pointer indicates the next datapath element to handle the traffic e.g. a queue datapath element. The value zeroDotZero innumber of packets that have been dropped by thisvariable indicates no further DiffServ treatment is Baker, Chan, Smith Expires November 2000 [Page 39] Internet Draft Differentiated Services MIB May 2000 performeddrop process. This object should be used on high speed interfaces. Discontinuities in the value of thisflowcounter can occur at re- initialization of the management system and at other times as indicated by thecurrent interface forvalue of ifCounterDiscontinuityTime appropriate to thisinterface direction."interface." ::= { diffServAlgDropEntry411 }diffServAlgDropQMeasurediffServAlgDropStatus OBJECT-TYPE SYNTAXRowPointerRowStatus MAX-ACCESS read-create STATUS current DESCRIPTION"Points to an entry in"The RowStatus variable controls thediffServQueueTable to indicateactivation, deactivation, or deletion of this entry. Any writable variable may be modified whether thequeue that a drop algorithmrow isto monitor when deciding whether to drop a packet."active or notInService." ::= { diffServAlgDropEntry512 }diffServAlgDropQThresholddiffServAlgDropNextFree OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESSread-createread-only STATUS current DESCRIPTION"A threshold on the depth of the queue being measured at which"This object yields atriggervalue when read that isgeneratedcurrently-unused for a diffServAlgDropId instance. If a configuring system attempts to create a new row in thedropping algorithm. For the tailDrop(2) or headDrop(3) algorithms, this represents the depth of the queue diffServAlgDropQMeasure at which the drop action will take place. Other algorithms will need to define their own semantics fordiffServAlgDropTable using thisthreshold."value, that operation will fail if the value has, in the Baker, Chan, Smith Expires January 2001 [Page 47] Internet Draft Differentiated Services MIB July 2000 meantime, been used to create another row that is currently valid." ::= {diffServAlgDropEntry 6diffServObjects 7 }diffServAlgDropSpecificdiffServRandomDropTable OBJECT-TYPE SYNTAXOBJECT IDENTIFIERSEQUENCE OF DiffServRandomDropEntry MAX-ACCESSread-createnot-accessible STATUS current DESCRIPTION"Points to a"The random drop table(not an entry inaugments thetable) defined elsewhere that provides further detail regarding aalgorithmic dropalgorithm described as diffServAlgDropType other(1).table. It contains entriesin suchdescribing a process that drops packets randomly. This tableareis intended to beindexedpointed to by thesame variables as this diffServAlgDropEntry. For algorithms specified fullyassociated diffServAlgDropSpecific in such cases." REFERENCE "[MODEL] section 7.1.3" ::= { diffServTables 9 } diffServRandomDropEntry OBJECT-TYPE SYNTAX DiffServRandomDropEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry describes a process that drops packets according to a random algorithm. Entries in thisMIB module, this should taketable share indexing with a parent diffServAlgDropEntry although they must be managed (e.g. created/deleted) by explicit management action, independently of the associated valuezeroDotzero."of diffServAlgDropSpecific." INDEX { ifIndex, diffServAlgDropIfDirection, diffServAlgDropId } ::= {diffServAlgDropEntry 7diffServRandomDropTable 1 }diffServAlgDropOctetsDiffServRandomDropEntry ::= SEQUENCE { diffServRandomDropMinThreshBytes Unsigned32, diffServRandomDropMinThreshPkts Unsigned32, diffServRandomDropMaxThreshBytes Unsigned32, diffServRandomDropMaxThreshPkts Unsigned32, diffServRandomDropInvWeight Unsigned32, diffServRandomDropProbMax Unsigned32, diffServRandomDropStatus RowStatus } diffServRandomDropMinThreshBytes OBJECT-TYPE SYNTAXCounter32Unsigned32 UNITS "bytes" MAX-ACCESSread-onlyread-create STATUS currentDESCRIPTIONBaker, Chan, Smith ExpiresNovember 2000January 2001 [Page40]48] Internet Draft Differentiated Services MIBMayJuly 2000 DESCRIPTION "Thenumber of octets that have been dropped by this drop process. On high speed devices, this object implements the least significant 32 bits of diffServAlgDropHCOctets. Discontinuitiesaverage queue depth inthe valuebytes, beyond which traffic has a non-zero probability of being dropped. Changes in thiscounter can occur at re- initialization of the management system and at other times as indicated byvariable may or may not be reflected in the reported valueof ifCounterDiscontinuityTime appropriate to this interface."of diffServRandomDropMinThreshPkts." ::= {diffServAlgDropEntry 8diffServRandomDropEntry 1 }diffServAlgDropHCOctetsdiffServRandomDropMinThreshPkts OBJECT-TYPE SYNTAXCounter64Unsigned32 UNITS "packets" MAX-ACCESSread-onlyread-create STATUS current DESCRIPTION "Thenumberaverage queue depth in packets, beyond which traffic has a non-zero probability ofoctets that have been dropped bybeing dropped. Changes in thisdrop process. This object shouldvariable may or may not beused on high speed interfaces. Discontinuitiesreflected in the reported value ofthis counter can occur at re- initialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime appropriate to this interface."diffServRandomDropMinThreshBytes." ::= {diffServAlgDropEntry 9diffServRandomDropEntry 2 }diffServAlgDropPktsdiffServRandomDropMaxThreshBytes OBJECT-TYPE SYNTAXCounter32Unsigned32 UNITS "bytes" MAX-ACCESSread-onlyread-create STATUS current DESCRIPTION "Thenumberaverage queue depth beyond which traffic has a probability indicated by diffServRandomDropInvMaxProb ofpackets that have beenbeing droppedby this drop process. On high speed devices,or marked. Note that thisobject implementsdiffers from theleast significant 32 bits of diffServAlgDropHCPkts. Discontinuitiesphysical queue limit, which is stored in diffServAlgDropQThreshold. Changes inthe value ofthiscounter can occur at re- initialization of the management system and at other times as indicated byvariable may or may not be reflected in the reported value ofifCounterDiscontinuityTime appropriate to this interface."diffServRandomDropMaxThreshPkts." ::= {diffServAlgDropEntry 10diffServRandomDropEntry 3 }diffServAlgDropHCPktsdiffServRandomDropMaxThreshPkts OBJECT-TYPE SYNTAXCounter64Unsigned32 UNITS "packets" MAX-ACCESSread-onlyread-create STATUS current DESCRIPTION "Thenumberaverage queue depth beyond which traffic has a probability indicated by diffServRandomDropInvMaxProb ofpackets that have beenbeing droppedbyor marked. Note that thisdrop process. This object shoulddiffers from the physical queue limit, which is stored in diffServAlgDropQThreshold. Changes in this variable may or may not beused on high speed interfaces.reflected in the reported value of diffServRandomDropMaxThreshBytes." ::= { diffServRandomDropEntry 4 } Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page41]49] Internet Draft Differentiated Services MIBMayJuly 2000DiscontinuitiesdiffServRandomDropInvWeight OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "The weighting of past history in affecting thevaluecalculation ofthis counter can occur at re- initializationthe current queue average. The moving average of the queue depth uses the inverse of this value as themanagement systemfactor for the new queue depth, andat other timesone minus that inverse asindicated bythevaluefactor for the historical average. Implementations may choose to limit the acceptable set ofifCounterDiscontinuityTime appropriatevalues to a specified set, such as powers of 2." ::= { diffServRandomDropEntry 5 } diffServRandomDropProbMax OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "The worst case random drop probability, expressed in drops per thousand packets. For example, if every packet may be dropped in the worst case (100%), thisinterface."has the value 1000. Alternatively, if in the worst case one percent (1%) of traffic may be dropped, it has the value 10." ::= {diffServAlgDropEntry 11diffServRandomDropEntry 6 }diffServAlgDropStatusdiffServRandomDropStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The RowStatus variable controls the activation, deactivation, or deletion of this entry. Any writable variable may be modified whether the row is active or notInService." ::= {diffServAlgDropEntry 12 } -- This object allows a configuring system to obtain a -- unique value for diffServAlgDropId for purposes of -- configuration. diffServAlgDropUnique OBJECT-TYPE SYNTAX TestAndIncr MAX-ACCESS read-write STATUS current DESCRIPTION "This object yields a unique new value for diffServAlgDropId when read and subsequently set. This value must be tested for uniqueness and can be used by a configuring system to obtain a unique value for diffServAlgDropId for purposes of row creation in the diffServAlgDropTable." ::= { diffServObjectsdiffServRandomDropEntry 7 } Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page42]50] Internet Draft Differentiated Services MIBMayJuly 2000 -- -- Queue Table -- diffServQTable OBJECT-TYPE SYNTAX SEQUENCE OF DiffServQEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The Queue Table enumerates the individual queues on an interface." ::= { diffServTables910 } diffServQEntry OBJECT-TYPE SYNTAX DiffServQEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry in the Queue Table describes a single queue in one direction on an interface." INDEX { ifIndex, diffServQIfDirection, diffServQId } ::= { diffServQTable 1 } DiffServQEntry ::= SEQUENCE { diffServQIfDirection IfDirection, diffServQIdINTEGER,Unsigned32, diffServQNext RowPointer, diffServQPriority Unsigned32, diffServQMinRateAbs Unsigned32, diffServQMinRateRel Unsigned32, diffServQMaxRateAbs Unsigned32, diffServQMaxRateRel Unsigned32, diffServQStatus RowStatus } diffServQIfDirection OBJECT-TYPE SYNTAX IfDirection MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifies the direction for which this queue entry applies onthethis interface." ::= { diffServQEntry 1 } diffServQId OBJECT-TYPE SYNTAXINTEGER (0..2147483647)Unsigned32 MAX-ACCESS not-accessibleSTATUS currentBaker, Chan, Smith ExpiresNovember 2000January 2001 [Page43]51] Internet Draft Differentiated Services MIBMayJuly 2000 STATUS current DESCRIPTION "The Queue Id enumerates the Queueentry."entry. Managers should obtain new values for row creation in this table by reading diffServQNextFree." ::= { diffServQEntry 2 } diffServQNext OBJECT-TYPE SYNTAX RowPointer MAX-ACCESS read-create STATUS current DESCRIPTION "The Next pointer indicates the next datapath element to handle the traffic e.g. a scheduler datapathelement."element. If the row pointed to does not exist, the queue element is considered inactive." ::= { diffServQEntry 3 } diffServQPriority OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "The priority of this queue, to be used as a parameter to the next scheduler element downstream from this one." ::= { diffServQEntry 4 } diffServQMinRateAbs OBJECT-TYPE SYNTAX Unsigned32 UNITS "kilobits per second" MAX-ACCESS read-create STATUS current DESCRIPTION "The minimum absolute rate, in kilobits/sec, that a downstream scheduler element should allocate to this queue. If the value is zero, then there is effectively no minimum rate guarantee. If the value is non-zero, the scheduler will assure the servicing of this queue to at least this rate. Note that this attribute's value is coupled to that of diffServQMinRateRel: changes to one will affect the value of the other. They are linked by the following equation: diffServQMinRateRel = diffServQMinRateAbs * 10,000,000/ifSpeed or, if appropriate: Baker, Chan, Smith Expires January 2001 [Page 52] Internet Draft Differentiated Services MIB July 2000 diffServQMinRateRel = diffServQMinRateAbs * 10 / ifHighSpeed" REFERENCE "ifSpeed, ifHighSpeed from [IFMIB]" ::= { diffServQEntry 5 }Baker, Chan, Smith Expires November 2000 [Page 44] Internet Draft Differentiated Services MIB May 2000diffServQMinRateRel OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "The minimum rate that a downstream scheduler element should allocate to this queue, relative to the maximum rate of the interface as reported by ifSpeed or ifHighSpeed, in units of 1/10,000 of 1. If the value is zero, then there is effectively no minimum rate guarantee. If the value is non-zero, the scheduler will assure the servicing of this queue to at least this rate. Note that this attribute's value is coupled to that of diffServQMinRateAbs: changes to one will affect the value of the other. They are linked by the following equation: diffServQMinRateAbs = ifSpeed * diffServQMinRateRel/10,000,000 or, if appropriate: diffServQMinRateAbs = ifHighSpeed * diffServQMinRateRel / 10" REFERENCE "ifSpeed, ifHighSpeed from [IFMIB]" ::= { diffServQEntry 6 } diffServQMaxRateAbs OBJECT-TYPE SYNTAX Unsigned32 UNITS "kilobits per second" MAX-ACCESS read-create STATUS current DESCRIPTION "The maximum rate in kilobits/sec that a downstream scheduler element should allocate to this queue. If the value is zero, then there is effectively no maximum rate limit and that the scheduler should attempt to be work-conserving for this queue. If the value is non-zero, the scheduler will limit the servicing of this queue to, at most, this rate in a non-work-conserving manner. Note that this attribute's value is coupled to that of diffServQMaxRateRel: changes to one will affect the value of the other. They are linkedby the following equation: diffServQMaxRateRel = diffServQMaxRateAbs * 10,000,000/ifSpeed or, if appropriate:by the following equation: Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page45]53] Internet Draft Differentiated Services MIBMayJuly 2000 diffServQMaxRateRel = diffServQMaxRateAbs * 10,000,000/ifSpeed or, if appropriate: diffServQMaxRateRel = diffServQMaxRateAbs * 10 / ifHighSpeed" REFERENCE "ifSpeed, ifHighSpeed from [IFMIB]" ::= { diffServQEntry 7 } diffServQMaxRateRel OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "The maximum rate that a downstream scheduler element should allocate to this queue, relative to the maximum rate of the interface as reported by ifSpeed or ifHighSpeed, in units of 1/10,000 of 1. If the value is zero, then there is effectively no maximum rate limit and the scheduler should attempt to be work-conserving for this queue. If the value is non-zero, the scheduler will limit the servicing of this queue to, at most, this rate in a non-work-conserving manner. Note that this attribute's value is coupled to that of diffServQMaxRateAbs: changes to one will affect the value of the other. They are linked by the following equation: diffServQMaxRateAbs = ifSpeed * diffServQMaxRateRel/10,000,000 or, if appropriate: diffServQMaxRateAbs = ifHighSpeed * diffServQMaxRateRel / 10" REFERENCE "ifSpeed, ifHighSpeed from [IFMIB]" ::= { diffServQEntry 8 } diffServQStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The RowStatus variable controls the activation, deactivation, or deletion of a queue. Any writable variable may be modified whether the row is active or notInService." ::= { diffServQEntry 9 }diffServQUniquediffServQNextFree OBJECT-TYPESYNTAX TestAndIncr MAX-ACCESS read-write STATUS current DESCRIPTIONBaker, Chan, Smith ExpiresNovember 2000January 2001 [Page46]54] Internet Draft Differentiated Services MIBMayJuly 2000"The diffServQUniqueSYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object yields aunique newvaluefor diffServQIdwhen readand subsequently set. This value must be testedthat is currently-unused foruniqueness and can be used bya diffServQId instance. If a configuring system attempts toobtaincreate aunique value for diffServQId for purposes ofnew rowcreationin thediffServQTable."diffServQTable using this value, that operation will fail if the value has, in the meantime, been used to create another row that is currently valid." ::= { diffServObjects 8 } -- -- Scheduler Table -- -- The Scheduler Table is used for representing packet schedulers: -- it provides flexibility for multiple scheduling algorithms, each -- servicing multiple queues, to be used on the same logical/physical -- interface. diffServSchedulerTable OBJECT-TYPE SYNTAX SEQUENCE OF DiffServSchedulerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The Scheduler Table enumerates packet schedulers. Multiple scheduling algorithms can be used on a given interface, with each algorithm described by one diffServSchedulerEntry." REFERENCE "[MODEL] section 7.1.2" ::= { diffServTables1011 } diffServSchedulerEntry OBJECT-TYPE SYNTAX DiffServSchedulerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry in the Scheduler Table describing a single instance of a scheduling algorithm." INDEX { ifIndex, diffServSchedulerIfDirection, diffServSchedulerId } ::= { diffServSchedulerTable 1 } DiffServSchedulerEntry ::= SEQUENCE { diffServSchedulerIfDirection IfDirection, diffServSchedulerIdINTEGER,Unsigned32, diffServSchedulerMethod INTEGER,diffServSchedulerNext RowPointer, diffServSchedulerStatus RowStatus }Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page47]55] Internet Draft Differentiated Services MIBMayJuly 2000 diffServSchedulerNext RowPointer, diffServSchedulerStatus RowStatus } diffServSchedulerIfDirection OBJECT-TYPE SYNTAX IfDirection MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifies the direction for which this scheduler entry applies onthethis interface." ::= { diffServSchedulerEntry 1 } diffServSchedulerId OBJECT-TYPE SYNTAXINTEGER (0..2147483647)Unsigned32 MAX-ACCESS not-accessible STATUS current DESCRIPTION"The Scheduler Id enumerates"This identifies theScheduler entry."scheduler entry. Managers should obtain new values for row creation in this table by reading diffServSchedulerNextFree." ::= { diffServSchedulerEntry 2 } diffServSchedulerMethod OBJECT-TYPE SYNTAX INTEGER { other(1), -- not listed here priorityq(2), -- Priority Queueing wrr(3) -- Weighed Round Robin } MAX-ACCESS read-create STATUS current DESCRIPTION "The scheduling algorithm used by this Scheduler. A value of priorityq(2) is used to indicate strict priority queueing: only the diffServQPriority attributes of the queues feeding this scheduler are used when determining the next packet to schedule. A value of wrr(3) indicates weighted round-robin scheduling. Packets are scheduled from each of the queues feeding this scheduler according to all of the parameters of the diffServQueue entry." REFERENCE "[MODEL] section 7.1.2" ::= { diffServSchedulerEntry 3 } Baker, Chan, Smith Expires January 2001 [Page 56] Internet Draft Differentiated Services MIB July 2000 diffServSchedulerNext OBJECT-TYPE SYNTAX RowPointer MAX-ACCESS read-create STATUS current DESCRIPTION "Selects the next data path component, which can be anotherBaker, Chan, Smith Expires November 2000 [Page 48] Internet Draft Differentiated Services MIB May 2000 Schedulerscheduler or other TC elements. One usage of multipleserial Schedulersscheduler elements in series is for Class Base Queueing (CBQ). The value zeroDotZero in this variable indicates no further DiffServ treatment is performed on this flow by the current interface for this interface direction. For example, for an inbound interface the value zeroDotZero indicates that the packet flow has now completed inbound DiffServ treatment and should be forwarded on to the appropriate outboundinterface."interface. If the row pointed to does not exist, the scheduler element is considered inactive." DEFVAL { zeroDotZero } ::= { diffServSchedulerEntry 4 } diffServSchedulerStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The RowStatus variable controls the activation, deactivation, or deletion of a queue. Any writable variable may be modified whether the row is active or notInService." ::= { diffServSchedulerEntry 5 }diffServSchedulerUniquediffServSchedulerNextFree OBJECT-TYPE SYNTAXTestAndIncrUnsigned32 MAX-ACCESSread-writeread-only STATUS current DESCRIPTION"The diffServSchedulerUnique"This object yields aunique newvaluefor diffServSchedulerIdwhen readand subsequently set. This value must be testedthat is currently-unused foruniqueness and can be used bya diffServSchedulerId instance. If a configuring system attempts toobtaincreate aunique value for diffServSchedulerId for purposes ofnew rowcreationin thediffServSchedulerTable."diffServSchedulerTable using this value, that operation will fail if the value has, in the meantime, been used to create another row that is currently valid." ::= { diffServObjects 9 } Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page49]57] Internet Draft Differentiated Services MIBMayJuly 2000 -- -- MIB Compliance statements. -- diffServMIBCompliances OBJECT IDENTIFIER ::= { diffServMIBConformance 1 } diffServMIBGroups OBJECT IDENTIFIER ::= { diffServMIBConformance 2 } diffServMIBCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "This MIB may be implemented as a read-only or as a read-create MIB. As a result, it may be used for monitoring or for configuration." MODULE -- This Module MANDATORY-GROUPS { diffServMIBClassifierGroup, diffServMIBSixTupleClfrGroup, diffServMIBActionGroup, diffServMIBAlgDropGroup, diffServMIBQueueGroup, diffServMIBSchedulerGroup } -- The groups: -- diffServMIBCounterGroup -- diffServMIBHCCounterGroup -- diffServMIBVHCCounterGroup -- -- are mutually exclusive; at most one of these groups is implemented -- for a particular interface. When any of these groups is implemented -- for a particular interface, then ifCounterDiscontinuityGroup from -- [IFMIB] must also be implemented for that interface. -- note that the diffServMIBStaticGroup is -- mandatory for implementations that implement a -- read-write or read-create mode. GROUP diffServMIBCounterGroup DESCRIPTION "This group is mandatory for table objects indexed by ifIndex for which the value of the corresponding instance of ifSpeed is less than or equal to 20,000,000 bits/second." GROUP diffServMIBHCCounterGroup DESCRIPTION "This group is mandatory for table objects indexed by ifIndex for which the value of the corresponding instance of ifSpeed is greater than 20,000,000 bits/second." GROUP diffServMIBVHCCounterGroup DESCRIPTION Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page50]58] Internet Draft Differentiated Services MIBMayJuly 2000 "This group is mandatory for table objects indexed by ifIndex for which the value of the corresponding instance of ifSpeed is greater than 650,000,000 bits/second." GROUP diffServMIBMeterGroup DESCRIPTION "This group is mandatory for devices that implement metering functions." GROUP diffServMIBTokenBucketMeterGroup DESCRIPTION "This group is mandatory for devices that implement token-bucket metering functions." GROUP diffServMIBDscpMarkActionGroup DESCRIPTION "This group is mandatory for devices that implement DSCP-Marking functions." GROUP diffServMIBRandomDropGroup DESCRIPTION "This group is mandatory for devices that implement Random Drop functions." GROUP diffServMIBStaticGroup DESCRIPTION "This group is mandatory for devices that allow creation of rows in any of the writable tables of this MIB." OBJECT diffServClassifierFilter MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServClassifierNext MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServClassifierPrecedence MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServClassifierStatus MIN-ACCESS read-only DESCRIPTION"Write access is not required." OBJECT diffServSixTupleClfrDstAddrType MIN-ACCESS read-only DESCRIPTIONBaker, Chan, Smith ExpiresNovember 2000January 2001 [Page51]59] Internet Draft Differentiated Services MIBMayJuly 2000 "Write access is not required." OBJECTdiffServSixTupleClfrDstAddrdiffServSixTupleClfrDstAddrType MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrDstAddrMaskdiffServSixTupleClfrDstAddr MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrSrcAddrTypediffServSixTupleClfrDstAddrMask MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrSrcAddrdiffServSixTupleClfrSrcAddrType MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrSrcAddrMaskdiffServSixTupleClfrSrcAddr MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrDscpdiffServSixTupleClfrSrcAddrMask MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrProtocoldiffServSixTupleClfrDscp MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrSrcL4PortMindiffServSixTupleClfrProtocol MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrSrcL4PortMaxdiffServSixTupleClfrSrcL4PortMin MIN-ACCESS read-only DESCRIPTION "Write access is not required." Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page52]60] Internet Draft Differentiated Services MIBMayJuly 2000 OBJECTdiffServSixTupleClfrDstL4PortMindiffServSixTupleClfrSrcL4PortMax MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrDstL4PortMaxdiffServSixTupleClfrDstL4PortMin MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSixTupleClfrStatusdiffServSixTupleClfrDstL4PortMax MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServMeterSucceedNextdiffServSixTupleClfrStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServMeterFailNextdiffServMeterSucceedNext MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServMeterSpecificdiffServMeterFailNext MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServMeterStatusdiffServMeterSpecific MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServTBMeterRatediffServMeterStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServTBMeterBurstSizediffServTBMeterRate MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServTBMeterStatusdiffServTBMeterBurstSize MIN-ACCESS read-only Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page53]61] Internet Draft Differentiated Services MIBMayJuly 2000 DESCRIPTION "Write access is not required." OBJECTdiffServActionNextdiffServTBMeterStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServActionSpecificdiffServActionNext MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServActionStatusdiffServActionSpecific MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServCountActStatusdiffServActionStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServAlgDropTypediffServCountActStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServAlgDropNextdiffServAlgDropType MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServAlgDropQMeasurediffServAlgDropNext MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServAlgDropQThresholddiffServAlgDropQMeasure MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServAlgDropSpecificdiffServAlgDropQThreshold MIN-ACCESS read-only DESCRIPTION "Write access is not required." Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page54]62] Internet Draft Differentiated Services MIBMayJuly 2000 OBJECTdiffServAlgDropStatusdiffServAlgDropSpecific MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServQNextdiffServAlgDropStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServQPrioritydiffServRandomDropMinThreshBytes MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServQMinRateAbsdiffServRandomDropMaxThreshPkts MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServQMinRateReldiffServRandomDropMinThreshBytes MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServQMaxRateAbsdiffServRandomDropMaxThreshPkts MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServQMaxRateReldiffServRandomDropInvWeight MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServQueueStatusdiffServRandomDropProbMax MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSchedulerMethoddiffServRandomDropStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECTdiffServSchedulerNextdiffServQNext MIN-ACCESS read-only Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page55]63] Internet Draft Differentiated Services MIBMayJuly 2000 DESCRIPTION "Write access is not required." OBJECT diffServQPriority MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServQMinRateAbs MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServQMinRateRel MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServQMaxRateAbs MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServQMaxRateRel MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServQueueStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServSchedulerMethod MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServSchedulerNext MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT diffServSchedulerStatus MIN-ACCESS read-only DESCRIPTION "Write access is not required." Baker, Chan, Smith Expires January 2001 [Page 64] Internet Draft Differentiated Services MIB July 2000 ::= { diffServMIBCompliances 1 } Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page56]65] Internet Draft Differentiated Services MIBMayJuly 2000 diffServMIBClassifierGroup OBJECT-GROUP OBJECTS { diffServClassifierFilter, diffServClassifierNext, diffServClassifierPrecedence, diffServClassifierStatus } STATUS current DESCRIPTION "The Classifier Group defines the MIB Objects that describe a generic classifier element." ::= { diffServMIBGroups 1 } diffServMIBSixTupleClfrGroup OBJECT-GROUP OBJECTS { diffServSixTupleClfrDstAddrType, diffServSixTupleClfrDstAddr, diffServSixTupleClfrDstAddrMask, diffServSixTupleClfrDstAddrType, diffServSixTupleClfrSrcAddrType, diffServSixTupleClfrSrcAddrMask, diffServSixTupleClfrDscp, diffServSixTupleClfrProtocol, diffServSixTupleClfrDstL4PortMin, diffServSixTupleClfrDstL4PortMax, diffServSixTupleClfrSrcL4PortMin, diffServSixTupleClfrSrcL4PortMax, diffServSixTupleClfrStatus } STATUS current DESCRIPTION "The Six-tuple Classifier Group defines the MIB Objects that describe a classifier element for matching on 6 fields of an IP and upper-layer protocol header." ::= { diffServMIBGroups 2 } diffServMIBMeterGroup OBJECT-GROUP OBJECTS { diffServMeterSucceedNext, diffServMeterFailNext, diffServMeterSpecific, diffServMeterStatus } STATUS current DESCRIPTION "The Meter Group defines the objects used in describing a generic meter element." ::= { diffServMIBGroups 3 } diffServMIBTokenBucketMeterGroup OBJECT-GROUP OBJECTS { diffServTBMeterRate,diffServTBMeterBurstSize,diffServTBMeterBurstSize diffServTBMeterStatus } STATUS current DESCRIPTION Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page57]66] Internet Draft Differentiated Services MIBMayJuly 2000 "The Token-Bucket Meter Group defines the objects used in describing a single-rate token bucket meter element." ::= { diffServMIBGroups 4 } diffServMIBActionGroup OBJECT-GROUP OBJECTS { diffServActionNext, diffServActionSpecific, diffServActionStatus } STATUS current DESCRIPTION "The Action Group defines the objects used in describing a generic action element." ::= { diffServMIBGroups 5 } diffServMIBDscpMarkActionGroup OBJECT-GROUP OBJECTS { diffServDscpMarkActDscp } STATUS current DESCRIPTION "The DSCP Mark Action Group defines the objects used in describing a DSCP Marking Action element." ::= { diffServMIBGroups 6 } diffServMIBCounterGroup OBJECT-GROUP OBJECTS { diffServCountActOctets, diffServCountActPkts, diffServCountActStatus, diffServAlgDropOctets, diffServAlgDropPkts } STATUS current DESCRIPTION "A collection of objects providing information specific to non- high speed (non-high speed interfaces transmit and receive at speeds less than or equal to 20,000,000 bits/second) packet- oriented network interfaces." ::= { diffServMIBGroups 7 } diffServMIBHCCounterGroup OBJECT-GROUP OBJECTS { diffServCountActOctets, diffServCountActHCOctets, diffServCountActPkts, diffServCountActStatus, diffServAlgDropOctets, diffServAlgDropHCOctets, diffServAlgDropPkts } STATUS current Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page58]67] Internet Draft Differentiated Services MIBMayJuly 2000 DESCRIPTION "A collection of objects providing information specific to non- high speed (non-high speed interfaces transmit and receive at speeds less than or equal to 20,000,000 bits/second) packet- oriented network interfaces." ::= { diffServMIBGroups 8 } diffServMIBVHCCounterGroup OBJECT-GROUP OBJECTS { diffServCountActOctets, diffServCountActHCOctets, diffServCountActPkts, diffServCountActHCPkts, diffServCountActStatus, diffServAlgDropOctets, diffServAlgDropHCOctets, diffServAlgDropPkts, diffServAlgDropHCPkts } STATUS current DESCRIPTION "A collection of objects providing information specific to non- high speed (non-high speed interfaces transmit and receive at speeds less than or equal to 20,000,000 bits/second) packet- oriented network interfaces." ::= { diffServMIBGroups 9 } diffServMIBAlgDropGroup OBJECT-GROUP OBJECTS { diffServAlgDropType, diffServAlgDropNext, diffServAlgDropQMeasure, diffServAlgDropQThreshold, diffServAlgDropSpecific, diffServAlgDropStatus } STATUS current DESCRIPTION "The Algorithmic Drop Group contains the objects that describe algorithmic dropper operation and configuration." ::= { diffServMIBGroups1010 } diffServMIBRandomDropGroup OBJECT-GROUP OBJECTS { diffServRandomDropMinThreshBytes, diffServRandomDropMinThreshPkts, diffServRandomDropMaxThreshBytes, diffServRandomDropMaxThreshPkts, diffServRandomDropInvWeight, diffServRandomDropProbMax diffServRandomDropStatus } STATUS current DESCRIPTION "The Random Drop Group augments the Algorithmic Drop Group for Baker, Chan, Smith Expires January 2001 [Page 68] Internet Draft Differentiated Services MIB July 2000 random dropper operation and configuration." ::= { diffServMIBGroups 11 } diffServMIBQueueGroup OBJECT-GROUP OBJECTS { diffServQPriority, diffServQNext, diffServQMinRateAbs, diffServQMinRateRel, diffServQMaxRateAbs, diffServQMaxRateRel, diffServQStatus } STATUS current DESCRIPTION "The Queue Group contains the objects that describe an interface's queues." ::= { diffServMIBGroups1112 }Baker, Chan, Smith Expires November 2000 [Page 59] Internet Draft Differentiated Services MIB May 2000diffServMIBSchedulerGroup OBJECT-GROUP OBJECTS { diffServSchedulerMethod, diffServSchedulerNext, diffServSchedulerStatus } STATUS current DESCRIPTION "The Scheduler Group contains the objects that describe packet schedulers on interfaces." ::= { diffServMIBGroups1213 } diffServMIBStaticGroup OBJECT-GROUP OBJECTS {diffServClassifierUnique, diffServSixTupleClfrUnique, diffServMeterUnique, diffServActionUnique, diffServAlgDropUnique, diffServQUnique, diffServSchedulerUniquediffServClassifierNextFree, diffServSixTupleClfrNextFree, diffServMeterNextFree, diffServActionNextFree, diffServAlgDropNextFree, diffServQNextFree, diffServSchedulerNextFree } STATUS current DESCRIPTION "The Static Group contains readable scalar objects used in creating uniqueenumerationsidentifiers for classifiers, meters, actions and queues. These are required whenever row creation operations on such tables are supported." ::= { diffServMIBGroups1314 } END Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page60]69] Internet Draft Differentiated Services MIBMayJuly 20005.7. Acknowledgments This MIB builds on all the work that has gone into theconceptual modelInformal Management Model fordiffservDiffserv routers. It has been developed with the active involvement of many people, but most notably Yoram Bernet, Steve Blake, Brian Carpenter, Dave Durham, Jeremy Greene, Dan Grossman, Roch Guerin, Scott Hahn, Keith McCloghrie, Bob Moore, Kathleen Nichols, PingPanPan, Nabil Seddigh and Bert Wijnen.6.8. Security Considerations It is clear that this MIB is potentially useful for configuration, and anything that can be configured can be misconfigured, with potentially disastrous effect. At this writing, no security holes have been identified beyond those that SNMP Security is itself intended to address. These relate primarily to controlled access to sensitive information and the ability to configure a device - or which might result from operator error, which is beyond the scope of any security architecture. There are a number of management objects defined in this MIB that have a MAX-ACCESS clause of read-write and/or read-create. Such objects may be considered sensitive or vulnerable in some network environments. The support for SET operations in a non-secure environment without proper protection can have a negative effect on network operations. The use of SNMP Version 3 is recommended over prior versions for configuration control as its security model is improved. There are a number of managed objects in this MIB that may contain information that may be sensitive from a business perspective, in that they may represent a customer's service contract or the filters that the service provider chooses to apply to a customer's ingress or egress traffic. There are no objects which are sensitive in their own right, such as passwords or monetary amounts. It may be important to control even GET access to these objects and possibly to even encrypt the values of these object when sending them over the network via SNMP. Not all versions of SNMP provide features for such a secure environment. SNMPv1 by itself is not a secure environment. Even if the network itself is secure (for example by using IPSec), even then, there is no control as to who on the secure network is allowed to access and GET/SET (read/change/create/delete) the objects in this MIB. Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page61]70] Internet Draft Differentiated Services MIBMayJuly 2000 It is recommended that the implementers consider the security features as provided by the SNMPv3 framework. Specifically, the use of the User- based Security Model [12] and the View-based Access Control Model [15] is recommended. It is then a customer/user responsibility to ensure that the SNMP entity giving access to an instance of this MIB, is properly configured to give access to the objects only to those principals (users) that have legitimate rights to indeed GET or SET (change/create/delete) them.7.9. References [1] Harrington, D., Presuhn, R., and B. Wijnen, "An Architecture for Describing SNMP Management Frameworks", RFC 2571, Cabletron Systems, Inc., BMC Software, Inc., IBM T. J. Watson Research, April 1999 [2] Rose, M., and K. McCloghrie, "Structure and Identification of Management Information for TCP/IP-based Internets", RFC 1155, STD 16, Performance Systems International, Hughes LAN Systems, May 1990 [3] Rose, M., and K. McCloghrie, "Concise MIB Definitions", RFC 1212, STD 16, Performance Systems International, Hughes LAN Systems, March 1991 [4] M. Rose, "A Convention for Defining Traps for use with the SNMP", RFC 1215, Performance Systems International, March 1991 [5] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., and S. Waldbusser, "Structure of Management Information Version 2 (SMIv2)", RFC 2578, STD 58, Cisco Systems, SNMPinfo, TU Braunschweig, SNMP Research, First Virtual Holdings, International Network Services, April 1999 [6] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., and S. Waldbusser, "Textual Conventions for SMIv2", RFC 2579, STD 58, Cisco Systems, SNMPinfo, TU Braunschweig, SNMP Research, First Virtual Holdings, International Network Services, April 1999 [7] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., and S. Waldbusser, "Conformance Statements for SMIv2", RFC 2580, STD 58, Cisco Systems, SNMPinfo, TU Braunschweig, SNMP Research, First Virtual Holdings, International Network Services, April 1999 [8] Case, J., Fedor, M., Schoffstall, M., and J. Davin, "Simple Network Management Protocol", RFC 1157, STD 15, SNMP Research, Performance Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page62]71] Internet Draft Differentiated Services MIBMayJuly 2000 Systems International, Performance Systems International, MIT Laboratory for Computer Science, May 1990. [9] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Introduction to Community-based SNMPv2", RFC 1901, SNMP Research, Inc., Cisco Systems, Inc., Dover Beach Consulting, Inc., International Network Services, January 1996. [10] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Transport Mappings for Version 2 of the Simple Network Management Protocol (SNMPv2)", RFC 1906, SNMP Research, Inc., Cisco Systems, Inc., Dover Beach Consulting, Inc., International Network Services, January 1996. [11] Case, J., Harrington D., Presuhn R., and B. Wijnen, "Message Processing and Dispatching for the Simple Network Management Protocol (SNMP)", RFC 2572, SNMP Research, Inc., Cabletron Systems, Inc., BMC Software, Inc., IBM T. J. Watson Research, April 1999 [12] Blumenthal, U., and B. Wijnen, "User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)", RFC 2574, IBM T. J. Watson Research, April 1999 [13] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Protocol Operations for Version 2 of the Simple Network Management Protocol (SNMPv2)", RFC 1905, SNMP Research, Inc., Cisco Systems, Inc., Dover Beach Consulting, Inc., International Network Services, January 1996. [14] Levi, D., Meyer, P., and B. Stewart, "SNMPv3 Applications", RFC 2573, SNMP Research, Inc., Secure Computing Corporation, Cisco Systems, April 1999 [15] Wijnen, B., Presuhn, R., and K. McCloghrie, "View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP)", RFC 2575, IBM T. J. Watson Research, BMC Software, Inc., Cisco Systems, Inc., April 1999 [16] Case, J., Mundy, R., Partain, D., and B. Stewart, "Introduction to Version 3 of the Internet-standard Network Management Framework", RFC 2570, SNMP Research, Inc., TIS Labs at Network Associates, Inc., Ericsson, Cisco Systems, April 1999 [ACTQMGMT] V. Firoiu, M. Borden "A Study of Active Queue Management for Congestion Control", March 2000, In IEEE Infocom 2000, http://www.ieee-infocom.org/2000/papers/405.pdf Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page63]72] Internet Draft Differentiated Services MIBMayJuly 2000 [AF-PHB] J. Heinanen, F. Baker, W. Weiss, J. Wroclawski, "Assured Forwarding PHB Group.", RFC 2597, June 1999. [DSARCH] S. Blake, D. Black, M. Carlson, E. Davies, Z. Wang, W. Weiss, "An Architecture for Differentiated Service", RFC 2475, December 1998. [DSFIELD] K. Nichols, S. Blake, F. Baker, D. Black, "Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers", RFC 2474, December 1998. [DSPIB] M. Fine, K. McCloghrie, J. Seligson, K. Chan, S. Hahn, A. Smith, "Differentiated Services Policy Information Base", Internet Draft <draft-ietf-diffserv-pib-00.txt>, March2000, draft-ietf-diffserv-pib-00.txt2000 [DSTERMS] D. Grossman, "New Terminology for Diffserv", Internet Draft <draft- ietf-diffserv-new-terms-02.txt>, November 1999. [EF-PHB] V. Jacobson, K. Nichols, K. Poduri, "An Expedited Forwarding PHB." RFC 2598, June 1999. [IFMIB] K. McCloghrie, F. Kastenholz, "The Interfaces Group MIB using SMIv2", RFC 2233, November 1997. [INETADDRESS] Daniele, M., Haberman, B., Routhier, S., Schoenwaelder, J., "Textual Conventions for Internet Network Addresses.",Internet Draft <draft-ops-endpoint-mib-08.txt>, AprilRFC 2851, June 2000. [INTSERVMIB] F. Baker, J. Krawczyk, A. Sastry, "Integrated Services Management Information Base using SMIv2", RFC 2213, September 1997. [MODEL] Y. Bernet, S. Blake, A. Smith, D. Grossman,"A Conceptual"An Informal Management Model for Diffserv Routers", Internet Draft <draft-ietf-diffserv-model-03.txt>, Maymodel-04.txt>, July 2000. [POLTERM] F. Reichmeyer, D. Grossman, J. Strassner, M. Condell, "A Common Terminology for Policy Management", Internet Draft <draft- Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page64]73] Internet Draft Differentiated Services MIBMayJuly 2000 reichmeyer-polterm-terminology-00.txt>, March 20008.[QUEUEMGMT] B. Braden et al., "Recommendations on Queue Management and Congestion Avoidance in the Internet", RFC 2309, April 1998. [RED93] "Random Early Detection", 1993. 10. Authors' Addresses Fred Baker Cisco Systems 519 Lado Drive Santa Barbara, California 93111 fred@cisco.com Kwok Ho Chan Nortel Networks 600 Technology Park Drive Billerica, MA 01821 khchan@nortelnetworks.com Andrew SmithExtreme Networks 3585 Monroe Street Santa Clara, CA 95051 USA andrew@extremenetworks.comah_smith@pacbell.net Table of Contents 1 The SNMP Management Framework ................................... 2 2 Introduction .................................................... 3 2.1 Relationship to the Diffserv Informal Management Model ........ 3 2.2 Relationship to other MIBs and Policy Management .............. 3 2.3 MIB Overview .................................................. 4 3 Structure of this MIB ...........................................3 2.1 Overview ...................................................... 3 2.25 3.1 Classifiers ...................................................4 2.2.15 3.1.1 Classifier Table ............................................4 2.2.25 3.1.2 IP Six-Tuple Classifier Table ...............................4 2.36 3.2 Meters ........................................................5 2.3.16 3.2.1 Meter Table .................................................5 2.3.26 3.2.2 Token-Bucket Meter Table ....................................5 2.47 3.3 Actions .......................................................6 2.4.17 3.3.1 DSCP Mark Action Table ......................................6 2.4.27 3.3.2 Count Action Table ..........................................6 2.4.38 Baker, Chan, Smith Expires January 2001 [Page 74] Internet Draft Differentiated Services MIB July 2000 3.3.3 Absolute Drop Action ........................................7 2.58 3.4 Queueing Elements .............................................7 2.5.18 3.4.1 Algorithmic Dropper Table ...................................7 2.5.28 3.4.2 Random Dropper Table ........................................ 9 3.4.3 Queues and Schedulers .......................................8 2.5.311 3.4.4 Example of Algorithmic Droppers, Queues and Schedulers ......9 2.5.4 Example of extending12 4 Conventions used in this MIB............................... 10 Baker, Chan, Smith Expires November 2000 [Page 65] Internet Draft Differentiated Services MIB May 2000 2.6.................................... 13 4.1 The use of RowPointer .........................................10 313 4.2 Conceptual row creation and deletion .......................... 14 5 Editorial information ...........................................13 3.115 5.1 Open Issues resolved in previous drafts ....................... 15 5.2 Open Issues resolved in this draft ............................13 3.217 5.3 Still Open Issues .............................................15 418 6 MIB Definition ..................................................16 519 7 Acknowledgments .................................................61 670 8 Security Considerations .........................................61 770 9 References ......................................................62 871 10 Authors' Addresses.............................................. 65............................................. 74 Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page66]75] Internet Draft Differentiated Services MIBMayJuly 20009.11. Full Copyright Copyright (C) The Internet Society (2000). All Rights Reserved. This document and translations of it may be copied and furnished to others, and derivative works that comment on or otherwise explain it or assist in its implmentation may be prepared, copied, published and distributed, in whole or in part, without restriction of any kind, provided that the above copyright notice and this paragraph are included on all such copies and derivative works. However, this document itself may not be modified in any way, such as by removing the copyright notice or references to the Internet Society or other Internet organizations, except as needed for the purpose of developing Internet standards in which case the procedures for copyrights defined in the Internet Standards process must be followed, or as required to translate it into languages other than English. The limited permissions granted above are perpetual and will not be revoked by the Internet Society or its successors or assigns. This document and the information contained herein is provided on an "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Baker, Chan, Smith ExpiresNovember 2000January 2001 [Page67]76] ----