You are here:

MonitorTools.com > Technical documentation > SNMP > MIB > RFC > SNMPv2-PARTY-MIB
ActiveXperts Network Monitor 2019##AdminFavorites

SNMPv2-PARTY-MIB by vendor RFC

SNMPv2-PARTY-MIB file content

The SNMP protocol is used to for conveying information and commands between agents and managing entities. SNMP uses the User Datagram Protocol (UDP) as the transport protocol for passing data between managers and agents. The reasons for using UDP for SNMP are, firstly it has low overheads in comparison to TCP, which uses a 3-way hand shake for connection. Secondly, in congested networks, SNMP over TCP is a bad idea because TCP in order to maintain reliability will flood the network with retransmissions.

Management information (MIB) is represented as a collection of managed objects. These objects together form a virtual information base called MIB. An agent may implement many MIBs, but all agents must implement a particular MIB called MIB-II [16]. This standard defines variables for things such as interface statistics (interface speeds, MTU, octets sent, octets received, etc.) as well as various other things pertaining to the system itself (system location, system contact, etc.). The main goal of MIB-II is to provide general TCP/IP management information.

Use ActiveXperts Network Monitor 2019 to import vendor-specific MIB files, inclusing SNMPv2-PARTY-MIB.


Vendor: RFC
Mib: SNMPv2-PARTY-MIB  [download]  [view objects]
Tool: ActiveXperts Network Monitor 2019 [download]    (ships with advanced SNMP/MIB tools)
-- WinAgents MIB Extraction Wizard
-- Extracted from rfc1447.txt 16.03.2005 20:20:17

SNMPv2-PARTY-MIB DEFINITIONS ::= BEGIN

IMPORTS
    MODULE-IDENTITY, OBJECT-TYPE, snmpModules,
        Unsigned32
        FROM SNMPv2-SMI
    TEXTUAL-CONVENTION, RowStatus, TruthValue
        FROM SNMPv2-TC
    snmpUDPDomain
        FROM SNMPv2-TM
    MODULE-COMPLIANCE, OBJECT-GROUP
        FROM SNMPv2-CONF;


partyMIB MODULE-IDENTITY
    LAST-UPDATED "9304010000Z"
    ORGANIZATION "IETF SNMP Security Working Group"
    CONTACT-INFO
            "        Keith McCloghrie

             Postal: Hughes LAN Systems
                     1225 Charleston Road
                     Mountain View, CA  94043
                     US

                Tel: +1 415 966 7934
                Fax: +1 415 960 3738

             E-mail: kzm@hls.com"
    DESCRIPTION
            "The MIB module describing SNMPv2 parties."
    ::= { snmpModules 3 }

















-- textual conventions

Party ::= TEXTUAL-CONVENTION
    STATUS       current
    DESCRIPTION
            "Denotes a SNMPv2 party identifier.

            Note that agents may impose implementation
            limitations on the length of OIDs used to identify
            Parties. As such, management stations creating
            new parties should be aware that using an
            excessively long OID may result in the agent
            refusing to perform the set operation and instead
            returning the appropriate error response, e.g.,
            noCreation."
    SYNTAX       OBJECT IDENTIFIER


TAddress ::= TEXTUAL-CONVENTION
    STATUS       current
    DESCRIPTION
            "Denotes a transport service address.

            For snmpUDPDomain, a TAddress is 6 octets long,
            the initial 4 octets containing the IP-address in
            network-byte order and the last 2 containing the
            UDP port in network-byte order.  Consult [5] for
            further information on snmpUDPDomain."
    SYNTAX       OCTET STRING



















Clock ::= TEXTUAL-CONVENTION
    STATUS       current
    DESCRIPTION
            "A party's authentication clock - a non-negative
            integer which is incremented as specified/allowed
            by the party's Authentication Protocol.

            For noAuth, a party's authentication clock is
            unused and its value is undefined.

            For v2md5AuthProtocol, a party's authentication
            clock is a relative clock with 1-second
            granularity."
    SYNTAX       Unsigned32


Context ::= TEXTUAL-CONVENTION
    STATUS       current
    DESCRIPTION
            "Denotes a SNMPv2 context identifier.

            Note that agents may impose implementation
            limitations on the length of OIDs used to identify
            Contexts. As such, management stations creating new
            contexts should be aware that using an excessively
            long OID may result in the agent refusing to
            perform the set operation and instead returning
            the appropriate error response, e.g., noCreation."
    SYNTAX       OBJECT IDENTIFIER



















StorageType ::= TEXTUAL-CONVENTION
    STATUS       current
    DESCRIPTION
            "Describes the memory realization of a conceptual
            row.  A row which is volatile(2) is lost upon
            reboot.  A row which is nonVolatile(3) is backed
            up by stable storage.  A row which is permanent(4)
            cannot be changed nor deleted."
    SYNTAX       INTEGER {
                     other(1),       -- eh?
                     volatile(2),    -- e.g., in RAM
                     nonVolatile(3), -- e.g., in NVRAM
                     permanent(4)    -- e.g., in ROM
                 }


































-- administrative assignments

partyAdmin     OBJECT IDENTIFIER ::= { partyMIB 1 }


-- definitions of security protocols

partyProtocols OBJECT IDENTIFIER ::= { partyAdmin 1 }

-- the protocol without authentication
noAuth         OBJECT IDENTIFIER ::= { partyProtocols 1 }

-- the protocol without privacy
noPriv         OBJECT IDENTIFIER ::= { partyProtocols 2 }

-- the DES Privacy Protocol [4]
desPrivProtocol
               OBJECT IDENTIFIER ::= { partyProtocols 3 }

-- the MD5 Authentication Protocol [4]
v2md5AuthProtocol
               OBJECT IDENTIFIER ::= { partyProtocols 4 }


-- definitions of temporal domains

temporalDomains
               OBJECT IDENTIFIER ::= { partyAdmin 2 }

-- this temporal domain refers to management information
-- at the current time
currentTime    OBJECT IDENTIFIER ::= { temporalDomains 1 }

-- this temporal domain refers to management information
-- upon the next re-initialization of the managed device
restartTime    OBJECT IDENTIFIER ::= { temporalDomains 2 }

-- the temporal domain { cacheTime N } refers to management
-- information that is cached and guaranteed to be at most
-- N seconds old
cacheTime      OBJECT IDENTIFIER ::= { temporalDomains 3 }







-- Definition of Initial Party and Context Identifiers

-- When devices are installed, they need to be configured
-- with an initial set of SNMPv2 parties and contexts.  The
-- configuration of SNMPv2 parties and contexts requires (among
-- other things) the assignment of several OBJECT IDENTIFIERs.
-- Any local network administration can obtain the delegated
-- authority necessary to assign its own OBJECT IDENTIFIERs.
-- However, to provide for those administrations who have not
-- obtained the necessary authority, this document allocates a
-- branch of the naming tree for use with the following
-- conventions.

initialPartyId OBJECT IDENTIFIER ::= { partyAdmin 3 }

initialContextId
               OBJECT IDENTIFIER ::= { partyAdmin 4 }

-- Note these are identified as "initial" party and context
-- identifiers since these allow secure SNMPv2 communication
-- to proceed, thereby allowing further SNMPv2 parties to be
-- configured through use of the SNMPv2 itself.

-- The following definitions identify a party identifier, and
-- specify the initial values of various object instances
-- indexed by that identifier.  In addition, the SNMPv2
-- context, access control policy, and MIB view information
-- assigned, by convention, are identified.




















-- Party Identifiers for use as initial SNMPv2 parties
--       at IP address  a.b.c.d

-- Note that for all OBJECT IDENTIFIERs assigned under
-- initialPartyId, the four sub-identifiers immediately
-- following initialPartyId represent the four octets of
-- an IP address.  Initial party identifiers for other address
-- families are assigned under a different OBJECT IDENTIFIER,
-- as defined elsewhere.

-- Devices which support SNMPv2 as entities acting in an
-- agent role, and accessed via the snmpUDPDomain transport
-- domain, are required to be configured with the appropriate
-- set of the following as implicit assignments as and when
-- they are configured with an IP address.  The appropriate
-- set is all those applicable to the authentication and
-- privacy protocols supported by the device.































--      a noAuth/noPriv party which executes at the agent
-- partyIdentity            = { initialPartyId a b c d 1 }
-- partyIndex               = 1
-- partyTDomain             = snmpUDPDomain
-- partyTAddress            = a.b.c.d, 161
-- partyLocal               = true (in agent's database)
-- partyAuthProtocol        = noAuth
-- partyAuthClock           = 0
-- partyAuthPrivate         = ''H    (the empty string)
-- partyAuthPublic          = ''H    (the empty string)
-- partyAuthLifetime        = 0
-- partyPrivProtocol        = noPriv
-- partyPrivPrivate         = ''H    (the empty string)
-- partyPrivPublic          = ''H    (the empty string)

--      a noAuth/noPriv party which executes at a manager
-- partyIdentity            = { initialPartyId a b c d 2 }
-- partyIndex               = 2
-- partyTDomain             = snmpUDPDomain
-- partyTAddress            = assigned by local administration
-- partyLocal               = false (in agent's database)
-- partyAuthProtocol        = noAuth
-- partyAuthClock           = 0
-- partyAuthPrivate         = ''H    (the empty string)
-- partyAuthPublic          = ''H    (the empty string)
-- partyAuthLifetime        = 0
-- partyPrivProtocol        = noPriv
-- partyPrivPrivate         = ''H    (the empty string)
-- partyPrivPublic          = ''H    (the empty string)



















--      a md5Auth/noPriv party which executes at the agent
-- partyIdentity            = { initialPartyId a b c d 3 }
-- partyIndex               = 3
-- partyTDomain             = snmpUDPDomain
-- partyTAddress            = a.b.c.d, 161
-- partyLocal               = true (in agent's database)
-- partyAuthProtocol        = v2md5AuthProtocol
-- partyAuthClock           = 0
-- partyAuthPrivate         = assigned by local administration
-- partyAuthPublic          = ''H    (the empty string)
-- partyAuthLifetime        = 300
-- partyPrivProtocol        = noPriv
-- partyPrivPrivate         = ''H    (the empty string)
-- partyPrivPublic          = ''H    (the empty string)

--      a md5Auth/noPriv party which executes at a manager
-- partyIdentity            = { initialPartyId a b c d 4 }
-- partyIndex               = 4
-- partyTDomain             = snmpUDPDomain
-- partyTAddress            = assigned by local administration
-- partyLocal               = false (in agent's database)
-- partyAuthProtocol        = v2md5AuthProtocol
-- partyAuthClock           = 0
-- partyAuthPrivate         = assigned by local administration
-- partyAuthPublic          = ''H    (the empty string)
-- partyAuthLifetime        = 300
-- partyPrivProtocol        = noPriv
-- partyPrivPrivate         = ''H    (the empty string)
-- partyPrivPublic          = ''H    (the empty string)



















--      a md5Auth/desPriv party which executes at the agent
-- partyIdentity            = { initialPartyId a b c d 5 }
-- partyIndex               = 5
-- partyTDomain             = snmpUDPDomain
-- partyTAddress            = a.b.c.d, 161
-- partyLocal               = true (in agent's database)
-- partyAuthProtocol        = v2md5AuthProtocol
-- partyAuthClock           = 0
-- partyAuthPrivate         = assigned by local administration
-- partyAuthPublic          = ''H    (the empty string)
-- partyAuthLifetime        = 300
-- partyPrivProtocol        = desPrivProtocol
-- partyPrivPrivate         = assigned by local administration
-- partyPrivPublic          = ''H    (the empty string)

--      a md5Auth/desPriv party which executes at a manager
-- partyIdentity            = { initialPartyId a b c d 6 }
-- partyIndex               = 6
-- partyTDomain             = snmpUDPDomain
-- partyTAddress            = assigned by local administration
-- partyLocal               = false (in agent's database)
-- partyAuthProtocol        = v2md5AuthProtocol
-- partyAuthClock           = 0
-- partyAuthPrivate         = assigned by local administration
-- partyAuthPublic          = ''H    (the empty string)
-- partyAuthLifetime        = 300
-- partyPrivProtocol        = desPrivProtocol
-- partyPrivPrivate         = assigned by local administration
-- partyPrivPublic          = ''H    (the empty string)



















-- the initial SNMPv2 contexts assigned, by convention, are:

-- contextIdentity          = { initialContextId a b c d 1 }
-- contextIndex             = 1
-- contextLocal             = true (in agent's database)
-- contextViewIndex         = 1
-- contextLocalEntity       = ''H    (the empty string)
-- contextLocalTime         = currentTime
-- contextProxyDstParty     = { 0 0 }
-- contextProxySrcParty     = { 0 0 }
-- contextProxyContext      = { 0 0 }

-- contextIdentity          = { initialContextId a b c d 2 }
-- contextIndex             = 2
-- contextLocal             = true (in agent's database)
-- contextViewIndex         = 2
-- contextLocalEntity       = ''H    (the empty string)
-- contextLocalTime         = currentTime
-- contextProxyDstParty     = { 0 0 }
-- contextProxySrcParty     = { 0 0 }
-- contextProxyContext      = { 0 0 }



























-- The initial access control policy assigned, by
-- convention, is:

-- aclTarget                =   1
-- aclSubject               =   2
-- aclResources             =   1
-- aclPrivileges            =  35 (Get, Get-Next & Get-Bulk)

-- aclTarget                =   2
-- aclSubject               =   1
-- aclResources             =   1
-- aclPrivileges            = 132 (Response & SNMPv2-Trap)

-- aclTarget                =   3
-- aclSubject               =   4
-- aclResources             =   2
-- aclPrivileges            =  43 (Get, Get-Next, Set & Get-Bulk)

-- aclTarget                =   4
-- aclSubject               =   3
-- aclResources             =   2
-- aclPrivileges            =   4 (Response)

-- aclTarget                =   5
-- aclSubject               =   6
-- aclResources             =   2
-- aclPrivileges            =  43 (Get, Get-Next, Set & Get-Bulk)

-- aclTarget                =   6
-- aclSubject               =   5
-- aclResources             =   2
-- aclPrivileges            =   4 (Response)


-- Note that the initial context and access control
-- information assigned above, by default, to the
-- md5Auth/desPriv parties are identical to those assigned to
-- the md5Auth/noPriv parties.  However, each administration
-- may choose to have different authorization policies,
-- depending on whether privacy is used.








-- The initial MIB views assigned, by convention, are:

-- viewIndex                = 1
-- viewSubtree              = system
-- viewMask                 = ''H
-- viewType                 = included

-- viewIndex                = 1
-- viewSubtree              = snmpStats
-- viewMask                 = ''H
-- viewType                 = included

-- viewIndex                = 1
-- viewSubtree              = snmpParties
-- viewMask                 = ''H
-- viewType                 = included

-- viewIndex                = 2
-- viewSubtree              = internet
-- viewMask                 = ''H
-- viewType                 = included


-- Note that full access to the partyTable, contextTable,
-- aclTable, and viewTable gives a manager the ability to
-- configure any parties with any/all capabilities (the
-- equivalent of "root" access).  A lesser manager can be
-- given access only to the partyTable so that it can
-- maintain its own parties, but not increase/decrease
-- their capabilities.  Such a lesser manager can also
-- create new parties but they are of no use to it.

















-- object assignments

partyMIBObjects
               OBJECT IDENTIFIER ::= { partyMIB 2 }


-- the SNMPv2 party database group

snmpParties    OBJECT IDENTIFIER ::= { partyMIBObjects 1 }


partyTable OBJECT-TYPE
    SYNTAX      SEQUENCE OF PartyEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "The SNMPv2 Party database."
    ::= { snmpParties 1 }

partyEntry OBJECT-TYPE
    SYNTAX      PartyEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "Locally held information about a particular
            SNMPv2 party."
    INDEX      { IMPLIED partyIdentity }
    ::= { partyTable 1 }




















PartyEntry ::=
    SEQUENCE {
        partyIdentity        Party,
        partyIndex           INTEGER,
        partyTDomain         OBJECT IDENTIFIER,
        partyTAddress        TAddress,
        partyMaxMessageSize  INTEGER,
        partyLocal           TruthValue,
        partyAuthProtocol    OBJECT IDENTIFIER,
        partyAuthClock       Clock,
        partyAuthPrivate     OCTET STRING,
        partyAuthPublic      OCTET STRING,
        partyAuthLifetime    INTEGER,
        partyPrivProtocol    OBJECT IDENTIFIER,
        partyPrivPrivate     OCTET STRING,
        partyPrivPublic      OCTET STRING,
        partyCloneFrom       Party,
        partyStorageType     StorageType,
        partyStatus          RowStatus
    }

partyIdentity OBJECT-TYPE
    SYNTAX      Party
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "A party identifier uniquely identifying a
            particular SNMPv2 party."
    ::= { partyEntry 1 }

partyIndex OBJECT-TYPE
    SYNTAX      INTEGER (1..65535)
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
            "A unique value for each SNMPv2 party.  The value
            for each SNMPv2 party must remain constant at
            least from one re-initialization of the entity's
            network management system to the next re-
            initialization."
    ::= { partyEntry 2 }







partyTDomain OBJECT-TYPE
    SYNTAX      OBJECT IDENTIFIER
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "Indicates the kind of transport service by which
            the party receives network management traffic."
    DEFVAL      { snmpUDPDomain }
    ::= { partyEntry 3 }

partyTAddress OBJECT-TYPE
    SYNTAX      TAddress
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The transport service address by which the party
            receives network management traffic, formatted
            according to the corresponding value of
            partyTDomain.  For snmpUDPDomain, partyTAddress is
            formatted as a 4-octet IP Address concatenated
            with a 2-octet UDP port number."
    DEFVAL      { '000000000000'H }
    ::= { partyEntry 4 }

partyMaxMessageSize OBJECT-TYPE
    SYNTAX      INTEGER (484..65507)
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The maximum length in octets of a SNMPv2 message
            which this party will accept.  For parties which
            execute at an agent, the agent initializes this
            object to the maximum length supported by the
            agent, and does not let the object be set to any
            larger value.  For parties which do not execute at
            the agent, the agent must allow the manager to set
            this object to any legal value, even if it is
            larger than the agent can generate."
    DEFVAL      { 484 }
    ::= { partyEntry 5 }








partyLocal OBJECT-TYPE
    SYNTAX      TruthValue
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "An indication of whether this party executes at
            this SNMPv2 entity.  If this object has a value of
            true(1), then the SNMPv2 entity will listen for
            SNMPv2 messages on the partyTAddress associated
            with this party.  If this object has the value
            false(2), then the SNMPv2 entity will not listen
            for SNMPv2 messages on the partyTAddress
            associated with this party."
    DEFVAL      { false }
    ::= { partyEntry 6 }

partyAuthProtocol OBJECT-TYPE
    SYNTAX      OBJECT IDENTIFIER
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The authentication protocol by which all messages
            generated by the party are authenticated as to
            origin and integrity.  The value noAuth signifies
            that messages generated by the party are not
            authenticated.

            Once an instance of this object is created, its
            value can not be changed."
    DEFVAL      { v2md5AuthProtocol }
    ::= { partyEntry 7 }

















partyAuthClock OBJECT-TYPE
    SYNTAX      Clock
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The authentication clock which represents the
            local notion of the current time specific to the
            party.  This value must not be decremented unless
            the party's private authentication key is changed
            simultaneously."
    DEFVAL      { 0 }
    ::= { partyEntry 8 }




































partyAuthPrivate OBJECT-TYPE
    SYNTAX      OCTET STRING
                -- for v2md5AuthProtocol: (SIZE (16))
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "An encoding of the party's private authentication
            key which may be needed to support the
            authentication protocol.  Although the value of
            this variable may be altered by a management
            operation (e.g., a SNMPv2 Set-Request), its value
            can never be retrieved by a management operation:
            when read, the value of this variable is the zero
            length OCTET STRING.

            The private authentication key is NOT directly
            represented by the value of this variable, but
            rather it is represented according to an encoding.
            This encoding is the bitwise exclusive-OR of the
            old key with the new key, i.e., of the old private
            authentication key (prior to the alteration) with
            the new private authentication key (after the
            alteration).  Thus, when processing a received
            protocol Set operation, the new private
            authentication key is obtained from the value of
            this variable as the result of a bitwise
            exclusive-OR of the variable's value and the old
            private authentication key.  In calculating the
            exclusive-OR, if the old key is shorter than the
            new key, zero-valued padding is appended to the
            old key.  If no value for the old key exists, a
            zero-length OCTET STRING is used in the
            calculation."
    DEFVAL      { ''H }     -- the empty string

    ::= { partyEntry 9 }













partyAuthPublic OBJECT-TYPE
    SYNTAX      OCTET STRING
                -- for v2md5AuthProtocol: (SIZE (0..16))
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "A publically-readable value for the party.

            Depending on the party's authentication protocol,
            this value may be needed to support the party's
            authentication protocol.  Alternatively, it may be
            used by a manager during the procedure for
            altering secret information about a party.  (For
            example, by altering the value of an instance of
            this object in the same SNMPv2 Set-Request used to
            update an instance of partyAuthPrivate, a
            subsequent Get-Request can determine if the Set-
            Request was successful in the event that no
            response to the Set-Request is received, see [4].)

            The length of the value is dependent on the
            party's authentication protocol.  If not used by
            the authentication protocol, it is recommended
            that agents support values of any length up to and
            including the length of the corresponding
            partyAuthPrivate object."
    DEFVAL      { ''H }      -- the empty string

    ::= { partyEntry 10 }




















partyAuthLifetime OBJECT-TYPE
    SYNTAX      INTEGER (0..2147483647)
    UNITS       "seconds"
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The lifetime (in units of seconds) which
            represents an administrative upper bound on
            acceptable delivery delay for protocol messages
            generated by the party.

            Once an instance of this object is created, its
            value can not be changed."
    DEFVAL      { 300 }
    ::= { partyEntry 11 }

partyPrivProtocol OBJECT-TYPE
    SYNTAX      OBJECT IDENTIFIER
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The privacy protocol by which all protocol
            messages received by the party are protected from
            disclosure.  The value noPriv signifies that
            messages received by the party are not protected.

            Once an instance of this object is created, its
            value can not be changed."
    DEFVAL      { noPriv }
    ::= { partyEntry 12 }


















partyPrivPrivate OBJECT-TYPE
    SYNTAX      OCTET STRING
                -- for desPrivProtocol: (SIZE (16))
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "An encoding of the party's private encryption key
            which may be needed to support the privacy
            protocol.  Although the value of this variable may
            be altered by a management operation (e.g., a
            SNMPv2 Set-Request), its value can never be
            retrieved by a management operation: when read,
            the value of this variable is the zero length
            OCTET STRING.

            The private encryption key is NOT directly
            represented by the value of this variable, but
            rather it is represented according to an encoding.
            This encoding is the bitwise exclusive-OR of the
            old key with the new key, i.e., of the old private
            encryption key (prior to the alteration) with the
            new private encryption key (after the alteration).
            Thus, when processing a received protocol Set
            operation, the new private encryption key is
            obtained from the value of this variable as the
            result of a bitwise exclusive-OR of the variable's
            value and the old private encryption key.  In
            calculating the exclusive-OR, if the old key is
            shorter than the new key, zero-valued padding is
            appended to the old key.  If no value for the old
            key exists, a zero-length OCTET STRING is used in
            the calculation."
    DEFVAL      { ''H }     -- the empty string

    ::= { partyEntry 13 }














partyPrivPublic OBJECT-TYPE
    SYNTAX      OCTET STRING
                -- for desPrivProtocol: (SIZE (0..16))
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "A publically-readable value for the party.

            Depending on the party's privacy protocol, this
            value may be needed to support the party's privacy
            protocol.  Alternatively, it may be used by a
            manager as a part of its procedure for altering
            secret information about a party.  (For example,
            by altering the value of an instance of this
            object in the same SNMPv2 Set-Request used to
            update an instance of partyPrivPrivate, a
            subsequent Get-Request can determine if the Set-
            Request was successful in the event that no
            response to the Set-Request is received, see [4].)

            The length of the value is dependent on the
            party's privacy protocol.  If not used by the
            privacy protocol, it is recommended that agents
            support values of any length up to and including
            the length of the corresponding partyPrivPrivate
            object."
    DEFVAL      { ''H }     -- the empty string

    ::= { partyEntry 14 }




















partyCloneFrom OBJECT-TYPE
    SYNTAX      Party
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The identity of a party to clone authentication
            and privacy parameters from.  When read, the value
            { 0 0 } is returned.

            This value must be written exactly once, when the
            associated instance of partyStatus either does not
            exist or has the value `notReady'.  When written,
            the value identifies a party, the cloning party,
            whose status column has the value `active'.  The
            cloning party is used in two ways.

            One, if instances of the following objects do not
            exist for the party being created, then they are
            created with values identical to those of the
            corresponding objects for the cloning party:

                 partyAuthProtocol
                 partyAuthPublic
                 partyAuthLifetime
                 partyPrivProtocol
                 partyPrivPublic

            Two, instances of the following objects are
            updated using the corresponding values of the
            cloning party:

                 partyAuthPrivate
                 partyPrivPrivate

            (e.g., the value of the cloning party's instance
            of the partyAuthPrivate object is XOR'd with the
            value of the partyAuthPrivate instances of the
            party being created.)"
    ::= { partyEntry 15 }









partyStorageType OBJECT-TYPE
    SYNTAX      StorageType
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The storage type for this conceptual row in the
            partyTable."
    DEFVAL      { nonVolatile }
    ::= { partyEntry 16 }

partyStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The status of this conceptual row in the
            partyTable.

            A party is not qualified for activation until
            instances of all columns of its partyEntry row
            have an appropriate value.  In particular:

              A value must be written to the Party's
              partyCloneFrom object.

              If the Party's partyAuthProtocol object has the
              value md5AuthProtocol, then the corresponding
              instance of partyAuthPrivate must contain a
              secret of the appropriate length.  Further, at
              least one management protocol set operation
              updating the value of the party's
              partyAuthPrivate object must be successfully
              processed, before the partyAuthPrivate column is
              considered appropriately configured.

              If the Party's partyPrivProtocol object has the
              value desPrivProtocol, then the corresponding
              instance of partyPrivPrivate must contain a
              secret of the appropriate length.  Further, at
              least one management protocol set operation
              updating the value of the party's
              partyPrivPrivate object must be successfully
              processed, before the partyPrivPrivate column is
              considered appropriately configured.




           Until instances of all corresponding columns are
           appropriately configured, the value of the
           corresponding instance of the partyStatus column is
           `notReady'."
    ::= { partyEntry 17 }











































-- the SNMPv2 contexts database group

snmpContexts   OBJECT IDENTIFIER ::= { partyMIBObjects 2 }


contextTable OBJECT-TYPE
    SYNTAX      SEQUENCE OF ContextEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "The SNMPv2 Context database."
    ::= { snmpContexts 1 }

contextEntry OBJECT-TYPE
    SYNTAX      ContextEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "Locally held information about a particular
            SNMPv2 context."
    INDEX      { IMPLIED contextIdentity }
    ::= { contextTable 1 }

ContextEntry ::=
    SEQUENCE {
        contextIdentity         Context,
        contextIndex            INTEGER,
        contextLocal            TruthValue,
        contextViewIndex        INTEGER,
        contextLocalEntity      OCTET STRING,
        contextLocalTime        OBJECT IDENTIFIER,
        contextProxyDstParty    Party,
        contextProxySrcParty    Party,
        contextProxyContext     OBJECT IDENTIFIER,
        contextStorageType      StorageType,
        contextStatus           RowStatus
    }











contextIdentity OBJECT-TYPE
    SYNTAX      Context
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "A context identifier uniquely identifying a
            particular SNMPv2 context."
    ::= { contextEntry 1 }

contextIndex OBJECT-TYPE
    SYNTAX      INTEGER (1..65535)
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
            "A unique value for each SNMPv2 context.  The
            value for each SNMPv2 context must remain constant
            at least from one re-initialization of the
            entity's network management system to the next
            re-initialization."
    ::= { contextEntry 2 }

contextLocal OBJECT-TYPE
    SYNTAX      TruthValue
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "An indication of whether this context is realized
            by this SNMPv2 entity."
    DEFVAL      { true }
    ::= { contextEntry 3 }


















contextViewIndex OBJECT-TYPE
    SYNTAX      INTEGER (0..65535)
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "If the value of an instance of this object is
            zero, then this corresponding conceptual row in
            the contextTable refers to a SNMPv2 context which
            identifies a proxy relationship; the values of the
            corresponding instances of the
            contextProxyDstParty, contextProxySrcParty, and
            contextProxyContext objects provide further
            information on the proxy relationship.

            Otherwise, if the value of an instance of this
            object is greater than zero, then this
            corresponding conceptual row in the contextTable
            refers to a SNMPv2 context which identifies a MIB
            view of a locally accessible entity; the value of
            the instance identifies the particular MIB view
            which has the same value of viewIndex; and the
            value of the corresponding instances of the
            contextLocalEntity and contextLocalTime objects
            provide further information on the local entity
            and its temporal domain."
    ::= { contextEntry 4 }






















contextLocalEntity OBJECT-TYPE
    SYNTAX      OCTET STRING
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "If the value of the corresponding instance of the
            contextViewIndex is greater than zero, then the
            value of an instance of this object identifies the
            local entity whose management information is in
            the SNMPv2 context's MIB view.  The empty string
            indicates that the MIB view contains the SNMPv2
            entity's own local management information;
            otherwise, a non-empty string indicates that the
            MIB view contains management information of some
            other local entity, e.g., 'Repeater1'."
    DEFVAL      { ''H }     -- the empty string

    ::= { contextEntry 5 }

contextLocalTime OBJECT-TYPE
    SYNTAX      OBJECT IDENTIFIER
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "If the value of the corresponding instance of the
            contextViewIndex is greater than zero, then the
            value of an instance of this object identifies the
            temporal context of the management information in
            the MIB view."
    DEFVAL      { currentTime }
    ::= { contextEntry 6 }


















contextProxyDstParty OBJECT-TYPE
    SYNTAX      Party
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "If the value of the corresponding instance of the
            contextViewIndex is equal to zero, then the value
            of an instance of this object identifies a SNMPv2
            party which is the proxy destination of a proxy
            relationship.

            If the value of the corresponding instance of the
            contextViewIndex is greater than zero, then the
            value of an instance of this object is { 0 0 }."
    ::= { contextEntry 7 }

contextProxySrcParty OBJECT-TYPE
    SYNTAX      Party
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "If the value of the corresponding instance of the
            contextViewIndex is equal to zero, then the value
            of an instance of this object identifies a SNMPv2
            party which is the proxy source of a proxy
            relationship.

            Interpretation of an instance of this object
            depends upon the value of the transport domain
            associated with the SNMPv2 party used as the proxy
            destination in this proxy relationship.

            If the value of the corresponding instance of the
            contextViewIndex is greater than zero, then the
            value of an instance of this object is { 0 0 }."
    ::= { contextEntry 8 }












contextProxyContext OBJECT-TYPE
    SYNTAX      OBJECT IDENTIFIER
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "If the value of the corresponding instance of the
            contextViewIndex is equal to zero, then the value
            of an instance of this object identifies the
            context of a proxy relationship.

            Interpretation of an instance of this object
            depends upon the value of the transport domain
            associated with the SNMPv2 party used as the proxy
            destination in this proxy relationship.

            If the value of the corresponding instance of the
            contextViewIndex is greater than zero, then the
            value of an instance of this object is { 0 0 }."
    ::= { contextEntry 9 }

contextStorageType OBJECT-TYPE
    SYNTAX      StorageType
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The storage type for this conceptual row in the
            contextTable."
    DEFVAL      { nonVolatile }
    ::= { contextEntry 10 }



















contextStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The status of this conceptual row in the
            contextTable.

            A context is not qualified for activation until
            instances of all corresponding columns have the
            appropriate value.  In  particular, if the
            context's contextViewIndex is greater than zero,
            then the viewStatus column of the associated
            conceptual row(s) in the viewTable must have the
            value `active'.  Until instances of all
            corresponding columns are appropriately
            configured, the value of the corresponding
            instance of the contextStatus column is
            `notReady'."
    ::= { contextEntry 11 }




























-- the SNMPv2 access privileges database group

snmpAccess     OBJECT IDENTIFIER ::= { partyMIBObjects 3 }


aclTable OBJECT-TYPE
    SYNTAX      SEQUENCE OF AclEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "The access privileges database."
    ::= { snmpAccess 1 }

aclEntry OBJECT-TYPE
    SYNTAX      AclEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "The access privileges for a particular subject
            SNMPv2 party when asking a particular target
            SNMPv2 party to access a particular SNMPv2
            context."
    INDEX      { aclTarget, aclSubject, aclResources }
    ::= { aclTable 1 }

AclEntry ::=
    SEQUENCE {
        aclTarget        INTEGER,
        aclSubject       INTEGER,
        aclResources     INTEGER,
        aclPrivileges    INTEGER,
        aclStorageType   StorageType,
        aclStatus        RowStatus
    }














aclTarget OBJECT-TYPE
    SYNTAX      INTEGER (1..65535)
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "The value of an instance of this object
            identifies a SNMPv2 party which is the target of
            an access control policy, and has the same value
            as the instance of the partyIndex object for that
            party."
    ::= { aclEntry 1 }

aclSubject OBJECT-TYPE
    SYNTAX      INTEGER (1..65535)
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "The value of an instance of this object
            identifies a SNMPv2 party which is the subject of
            an access control policy, and has the same value
            as the instance of the partyIndex object for that
            SNMPv2 party."
    ::= { aclEntry 2 }

aclResources OBJECT-TYPE
    SYNTAX      INTEGER (1..65535)
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "The value of an instance of this object
            identifies a SNMPv2 context in an access control
            policy, and has the same value as the instance of
            the contextIndex object for that SNMPv2 context."
    ::= { aclEntry 3 }














aclPrivileges OBJECT-TYPE
    SYNTAX      INTEGER (0..255)
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The access privileges which govern what
            management operations a particular target party
            may perform with respect to a particular SNMPv2
            context when requested by a particular subject
            party.  These privileges are specified as a sum of
            values, where each value specifies a SNMPv2 PDU
            type by which the subject party may request a
            permitted operation.  The value for a particular
            PDU type is computed as 2 raised to the value of
            the ASN.1 context-specific tag for the appropriate
            SNMPv2 PDU type.  The values (for the tags defined
            in [5]) are defined in [3] as:

             Get         :   1
             GetNext     :   2
             Response    :   4
             Set         :   8
             unused      :  16
             GetBulk     :  32
             Inform      :  64
             SNMPv2-Trap : 128

            The null set is represented by the value zero."
    DEFVAL      { 35 }      -- Get, Get-Next & Get-Bulk

    ::= { aclEntry 4 }

aclStorageType OBJECT-TYPE
    SYNTAX      StorageType
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The storage type for this conceptual row in the
            aclTable."
    DEFVAL      { nonVolatile }
    ::= { aclEntry 5 }








aclStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The status of this conceptual row in the
            aclTable."
    ::= { aclEntry 6 }








































-- the MIB view database group

snmpViews      OBJECT IDENTIFIER ::= { partyMIBObjects 4 }


viewTable OBJECT-TYPE
    SYNTAX      SEQUENCE OF ViewEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "Locally held information about the MIB views
            known to this SNMPv2 entity.

            Each SNMPv2 context which is locally accessible
            has a single MIB view which is defined by two
            collections of view subtrees: the included view
            subtrees, and the excluded view subtrees.  Every
            such subtree, both included and excluded, is
            defined in this table.

            To determine if a particular object instance is in
            a particular MIB view, compare the object
            instance's OBJECT IDENTIFIER with each of the MIB
            view's entries in this table.  If none match, then
            the object instance is not in the MIB view.  If
            one or more match, then the object instance is
            included in, or excluded from, the MIB view
            according to the value of viewType in the entry
            whose value of viewSubtree has the most sub-
            identifiers.  If multiple entries match and have
            the same number of sub-identifiers, then the
            lexicographically greatest instance of viewType
            determines the inclusion or exclusion.

            An object instance's OBJECT IDENTIFIER X matches
            an entry in this table when the number of sub-
            identifiers in X is at least as many as in the
            value of viewSubtree for the entry, and each sub-
            identifier in the value of viewSubtree matches its
            corresponding sub-identifier in X.  Two sub-
            identifiers match either if the corresponding bit
            of viewMask is zero (the 'wild card' value), or if
            they are equal.

            Due to this 'wild card' capability, we introduce



            the term, a 'family' of view subtrees, to refer to
            the set of subtrees defined by a particular
            combination of values of viewSubtree and viewMask.
            In the case where no 'wild card' is defined in
            viewMask, the family of view subtrees reduces to a
            single view subtree."
    ::= { snmpViews 1 }

viewEntry OBJECT-TYPE
    SYNTAX      ViewEntry
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "Information on a particular family of view
            subtrees included in or excluded from a particular
            SNMPv2 context's MIB view.

            Implementations must not restrict the number of
            families of view subtrees for a given MIB view,
            except as dictated by resource constraints on the
            overall number of entries in the viewTable."
    INDEX      { viewIndex, IMPLIED viewSubtree }
    ::= { viewTable 1 }

ViewEntry ::=
    SEQUENCE {
        viewIndex        INTEGER,
        viewSubtree      OBJECT IDENTIFIER,
        viewMask         OCTET STRING,
        viewType         INTEGER,
        viewStorageType  StorageType,
        viewStatus       RowStatus
    }















viewIndex OBJECT-TYPE
    SYNTAX      INTEGER (1..65535)
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "A unique value for each MIB view.  The value for
            each MIB view must remain constant at least from
            one re-initialization of the entity's network
            management system to the next re-initialization."
    ::= { viewEntry 1 }

viewSubtree OBJECT-TYPE
    SYNTAX      OBJECT IDENTIFIER
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
            "A MIB subtree."
    ::= { viewEntry 2 }

viewMask OBJECT-TYPE
    SYNTAX      OCTET STRING (SIZE (0..16))
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The bit mask which, in combination with the
            corresponding instance of viewSubtree, defines a
            family of view subtrees.

            Each bit of this bit mask corresponds to a sub-
            identifier of viewSubtree, with the most
            significant bit of the i-th octet of this octet
            string value (extended if necessary, see below)
            corresponding to the (8*i - 7)-th sub-identifier,
            and the least significant bit of the i-th octet of
            this octet string corresponding to the (8*i)-th
            sub-identifier, where i is in the range 1 through
            16.

            Each bit of this bit mask specifies whether or not
            the corresponding sub-identifiers must match when
            determining if an OBJECT IDENTIFIER is in this
            family of view subtrees; a '1' indicates that an
            exact match must occur; a '0' indicates 'wild
            card', i.e., any sub-identifier value matches.




            Thus, the OBJECT IDENTIFIER X of an object
            instance is contained in a family of view subtrees
            if the following criteria are met:

                 for each sub-identifier of the value of
                 viewSubtree, either:

                      the i-th bit of viewMask is 0, or

                      the i-th sub-identifier of X is equal to
                      the i-th sub-identifier of the value of
                      viewSubtree.

            If the value of this bit mask is M bits long and
            there are more than M sub-identifiers in the
            corresponding instance of viewSubtree, then the
            bit mask is extended with 1's to be the required
            length.

            Note that when the value of this object is the
            zero-length string, this extension rule results in
            a mask of all-1's being used (i.e., no 'wild
            card'), and the family of view subtrees is the one
            view subtree uniquely identified by the
            corresponding instance of viewSubtree."
    DEFVAL      { ''H }
    ::= { viewEntry 3 }





















viewType OBJECT-TYPE
    SYNTAX      INTEGER  {
                    included(1),
                    excluded(2)
                }
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The status of a particular family of view
            subtrees within the particular SNMPv2 context's
            MIB view.  The value 'included(1)' indicates that
            the corresponding instances of viewSubtree and
            viewMask define a family of view subtrees included
            in the MIB view.  The  value 'excluded(2)'
            indicates that the corresponding instances of
            viewSubtree and viewMask define a family of view
            subtrees excluded from the MIB view."
    DEFVAL      { included }
    ::= { viewEntry 4 }

viewStorageType OBJECT-TYPE
    SYNTAX      StorageType
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The storage type for this conceptual row in the
            viewTable."
    DEFVAL      { nonVolatile }
    ::= { viewEntry 5 }

viewStatus OBJECT-TYPE
    SYNTAX      RowStatus
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
            "The status of this conceptual row in the
            viewTable."
    ::= { viewEntry 6 }










-- conformance information

partyMIBConformance
               OBJECT IDENTIFIER ::= { partyMIB 3 }

partyMIBCompliances
               OBJECT IDENTIFIER ::= { partyMIBConformance 1 }
partyMIBGroups
               OBJECT IDENTIFIER ::= { partyMIBConformance 2 }


-- compliance statements

unSecurableCompliance MODULE-COMPLIANCE
    STATUS  current
    DESCRIPTION
            "The compliance statement for SNMPv2 entities
            which implement the Party MIB, but do not support
            any authentication or privacy protocols (i.e.,
            only the noAuth and noPriv protocols are
            supported)."
    MODULE  -- this module
        MANDATORY-GROUPS { partyMIBGroup }
    ::= { partyMIBCompliances 1 }


partyNoPrivacyCompliance MODULE-COMPLIANCE
    STATUS  current
    DESCRIPTION
            "The compliance statement for SNMPv2 entities
            which implement the Party MIB, and support an
            authentication protocol, but do not support any
            privacy protocols (i.e., only the noAuth,
            v2md5AuthProtocol, and noPriv protocols are
            supported)."
    MODULE  -- this module
        MANDATORY-GROUPS { partyMIBGroup }
    ::= { partyMIBCompliances 2 }










partyPrivacyCompliance MODULE-COMPLIANCE
    STATUS  current
    DESCRIPTION
            "The compliance statement for SNMPv2 entities
            which implement the Party MIB, support an
            authentication protocol, and support a privacy
            protocol ONLY for the purpose of accessing
            security parameters.

            For all aclTable entries authorizing a subject
            and/or target SNMPv2 party whose privacy protocol
            is desPrivProtocol, to be used in accessing a
            SNMPv2 context, the MIB view for that SNMPv2
            context shall include only those objects
            subordinate to partyMIBObjects, or a subset
            thereof, e.g.,

                 viewSubtree = { partyMIBObjects }
                 viewMask    = ''H
                 viewType    = { included }

            Any attempt to configure an entry in the
            partyTable, the contextTable, the aclTable or the
            viewTable such that a party using the
            desPrivProtocol would be authorized for use in
            accessing objects outside of the partyMIBObjects
            subtree shall result in the appropriate error
            response (e.g., wrongValue or inconsistentValue)."
    MODULE  -- this module
        MANDATORY-GROUPS { partyMIBGroup }
    ::= { partyMIBCompliances 3 }

















fullPrivacyCompliance MODULE-COMPLIANCE
    STATUS  current
    DESCRIPTION
            "The compliance statement for SNMPv2 entities
            which implement the Party MIB, support an
            authentication protocol, and support a privacy
            protocol without restrictions on its use."
    MODULE  -- this module
        MANDATORY-GROUPS { partyMIBGroup }
    ::= { partyMIBCompliances 4 }


-- units of conformance

partyMIBGroup OBJECT-GROUP
  OBJECTS { partyIndex, partyTDomain, partyTAddress,
            partyMaxMessageSize, partyLocal,
            partyAuthProtocol, partyAuthClock,
            partyAuthPrivate, partyAuthPublic,
            partyAuthLifetime, partyPrivProtocol,
            partyPrivPrivate, partyPrivPublic,
            partyStorageType, partyStatus,
            partyCloneFrom,
            contextIndex, contextLocal,
            contextViewIndex, contextLocalEntity,
            contextLocalTime, contextStorageType,
            contextStatus, aclTarget, aclSubject,
            aclPrivileges, aclStorageType, aclStatus,
            viewMask, viewType, viewStorageType, viewStatus }
  STATUS  current
  DESCRIPTION
          "The collection of objects allowing the
          description and configuration of SNMPv2 parties.

          Note that objects which support proxy
          relationships are not included in this conformance
          group."
  ::= { partyMIBGroups 1 }


END