Secure Inter-Domain Routing Working R. Bush
Group Internet Initiative Japan
Internet-Draft B. Wijnen
Intended status: Standards Track RIPE NCC
Expires: January 12, 2012 K. Patel
Cisco Systems
M. Baer
SPARTA
July 11, 2011
Definitions of Managed Objects for RPKI Router Protocol
draft-ymbk-rpki-rtr-protocol-mib-01
Abstract
This document defines a portion of the Management Information Base
(MIB) for use with network management protocols in the Internet
community. In particular, it describes objects used for managing the
RPKI Router protocol.
Status of this Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at http://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on January 12, 2012.
Copyright Notice
Copyright (c) 2011 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
Bush, et al. Expires January 12, 2012 [Page 1]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
This document may contain material from IETF Documents or IETF
Contributions published or made publicly available before November
10, 2008. The person(s) controlling the copyright in some of this
material may not have granted the IETF Trust the right to allow
modifications of such material outside the IETF Standards Process.
Without obtaining an adequate license from the person(s) controlling
the copyright in such materials, this document may not be modified
outside the IETF Standards Process, and derivative works of it may
not be created outside the IETF Standards Process, except to format
it for publication as an RFC or to translate it into languages other
than English.
Bush, et al. Expires January 12, 2012 [Page 2]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.1. Requirements Language . . . . . . . . . . . . . . . . . . 4
2. Internet-Standard Management Framework . . . . . . . . . . . . 4
3. Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
4. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 4
5. Contributors . . . . . . . . . . . . . . . . . . . . . . . . . 10
6. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 11
7. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 11
8. Security Considerations . . . . . . . . . . . . . . . . . . . 11
9. References . . . . . . . . . . . . . . . . . . . . . . . . . . 11
9.1. Normative References . . . . . . . . . . . . . . . . . . . 11
9.2. Informative References . . . . . . . . . . . . . . . . . . 12
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 12
Bush, et al. Expires January 12, 2012 [Page 3]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
1. Introduction
This document defines a portion of the BGP4 Management Information
Base (MIB) for use with network management protocols in the Internet
community. In particular, it extends SNMP MIB and defines objects
used for managing the RPKI Router protocol.
1.1. Requirements Language
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
document are to be interpreted as described in RFC 2119 [RFC2119].
2. Internet-Standard Management Framework
For a detailed overview of the documents that describe the current
Internet-Standard Management Framework, please refer to section 7 of
[RFC3410]. Managed objects are accessed via a virtual information
store, termed the Management Information Base or MIB. MIB objects
are generally accessed through the Simple Network Management Protocol
(SNMP). Objects in the MIB are defined using the mechanisms defined
in the Structure of Management Information (SMI). This document
specifies a MIB module that is compliant to the SMIv2, which is
described in STD 58, [RFC2578], STD 58, [RFC2579] and STD 58,
[RFC2580].
3. Overview
The objects defined in this document are used to control and manage
RPKI Router protocol. The MIB defined in this draft is broken into
two tables: the RPKI Router Peer Table, and the RPKI Router Rceived
Record Table. The RPKI Router PeerTable contains information about
state and current activity of connections with the RPKI Router peers.
The RPKI Router Received Record Table contains IP prefixes and its
record information received from all peers running RPKI Router
protocol.
4. Definitions
RPKI-ROUTER-MIB DEFINITIONS ::= BEGIN
IMPORTS
Bush, et al. Expires January 12, 2012 [Page 4]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE, Integer32,
Unsigned32, mib-2, Counter64
FROM SNMPv2-SMI
InetAddressType, InetAddress, InetAddressPrefixLength
FROM INET-ADDRESS-MIB
TEXTUAL-CONVENTION, DateAndTime, TruthValue
FROM SNMPv2-TC;
rpkiRouter MODULE-IDENTITY
LAST-UPDATED "201107110000Z"
ORGANIZATION "IETF Secure Inter-Domain Routing Working Group
(SIDR)"
CONTACT-INFO "Work Group Email: sidr@ietf.org
Randy Bush
Internet Initiative Japan
5147 Crystal Springs
Bainbridge Island, Washington, 98110
USA
Email: randy@psg.com
Bert Wijnen
RIPE NCC
Schagen 33
3461 GL Linschoten
Netherlands
Email: bwijnen@bwijnen.net
Keyur Patel
Cisco Systems
170 W. Tasman Drive
San Jose, CA 95134
USA
Email: keyupate@cisco.com
Michael Baer
SPARTA
P.O. Box 72682
Davis, CA 95617
USA
Email: michael.baer@sparta.com
"
DESCRIPTION "This MIB contains management objects to support the
Resource Public Key Infrastructure (RPKI) protocol
Bush, et al. Expires January 12, 2012 [Page 5]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
on routers.
Copyright (c) 2011 IETF Trust and the persons
identified as authors of the code. All rights
reserved.
Redistribution and use in source and binary forms,
with or without modification, is permitted pursuant
to, and subject to the license terms contained in,
the Simplified BSD License set forth in Section 4.c
of the IETF Trust's Legal Provisions Relating to
IETF Documents
(http://trustee.ietf.org/license-info)."
REVISION "201107110000Z"
DESCRIPTION "Decond version of RPKI Router MIB."
::= { mib-2 XXX } -- XXX to be assigned by IANA
rpkiRouterMIB OBJECT IDENTIFIER ::= { rpkiRouter 1 }
rpkiRouterNotifications OBJECT IDENTIFIER ::= { rpkiRouterMIB 0 }
rpkiRPeerTable OBJECT-TYPE
SYNTAX SEQUENCE OF RpkiRPeerTableEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table lists the RPKI peers known to this system."
::= { rpkiRouterMIB 1 }
rpkiRPeerTableEntry OBJECT-TYPE
SYNTAX RpkiRPeerTableEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the rpkiPeerTable. It holds management objects
associated with a RPKI Peer."
INDEX { rpkiRPTRemoteAddressType, rpkiRPTRemoteAddress,
rpkiRPTRemoteAddressPort }
::= { rpkiRPeerTable 1 }
RpkiRPeerTableEntry ::= SEQUENCE {
rpkiRPTRemoteAddressType InetAddressType,
rpkiRPTRemoteAddress InetAddress,
rpkiRPTRemoteAddressPort Integer32,
rpkiRPTLocalAddressType InetAddressType,
rpkiRPTLocalAddress InetAddress,
Bush, et al. Expires January 12, 2012 [Page 6]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
rpkiRPTLocalAddressPort Integer32,
rpkiRPTConnectProtocol INTEGER,
rpkiRPTConnectionStatus INTEGER,
rpkiRPTMsgsFromPeer Counter64,
rpkiRPTMsgsToPeer Counter64,
rpkiRPTActiveRecords Unsigned32,
rpkiRPTRecordsAnnounced Unsigned32,
rpkiRPTRecordssWithdrawn Unsigned32,
rpkiRPTHighestSerialNum Unsigned32,
rpkiRPTNonce Integer32,
rpkiRPTStalePathTimer Integer32,
rpkiRPTStalePathTimeRemaining Integer32,
rpkiRPTRefreshTimer Integer32,
rpkiRPTRefreshTimeRemaining Integer32
}
-- XXX needs more objects, see Keyurs email S:first cut, RFC4273
rpkiRPTRemoteAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The network address type of the remote peer."
::= { rpkiRPeerTableEntry 1 }
rpkiRPTRemoteAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The network address of the remote peer."
::= { rpkiRPeerTableEntry 2 }
rpkiRPTRemoteAddressPort OBJECT-TYPE
SYNTAX Integer32 (0..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The network address port of the remote peer."
::= { rpkiRPeerTableEntry 3 }
rpkiRPTLocalAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The network address type of the local connection to the
Bush, et al. Expires January 12, 2012 [Page 7]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
remote peer."
::= { rpkiRPeerTableEntry 4 }
rpkiRPTLocalAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The network address of the local connection to the remote
peer."
::= { rpkiRPeerTableEntry 5 }
rpkiRPTLocalAddressPort OBJECT-TYPE
SYNTAX Integer32 (0..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The network address port of local connection to the remote
peer."
::= { rpkiRPeerTableEntry 6 }
rpkiRPTConnectProtocol OBJECT-TYPE
SYNTAX INTEGER { ssh(1), tcp(2) }
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The protocol used to connect to the peer"
::= { rpkiRPeerTableEntry 7 }
rpkiRPTConnectionStatus OBJECT-TYPE
SYNTAX INTEGER { up(1), down(2) }
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The RPKI connection status for this peer."
::= { rpkiRPeerTableEntry 8 }
rpkiRPTMsgsFromPeer OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Number of messages received from peer."
::= { rpkiRPeerTableEntry 9 }
rpkiRPTMsgsToPeer OBJECT-TYPE
SYNTAX Counter64
Bush, et al. Expires January 12, 2012 [Page 8]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Number of messages sent to the peer."
::= { rpkiRPeerTableEntry 10 }
rpkiRPTActiveRecords OBJECT-TYPE
SYNTAX Unsigned32(0..4294967295)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Number of active records received from the peer."
::= { rpkiRPeerTableEntry 11 }
rpkiRPTRecordsAnnounced OBJECT-TYPE
SYNTAX Unsigned32(0..4294967295)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The total number of records announced by the peer."
::= { rpkiRPeerTableEntry 12 }
rpkiRPTRecordssWithdrawn OBJECT-TYPE
SYNTAX Unsigned32(0..4294967295)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The total number of records withdrawn by the peer."
::= { rpkiRPeerTableEntry 13 }
rpkiRPTHighestSerialNum OBJECT-TYPE
SYNTAX Unsigned32(0..4294967295)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The highest serial number of data received from the peer.
Note: this value wraps back to zero."
REFERENCE "RFC1982"
::= { rpkiRPeerTableEntry 14 }
rpkiRPTNonce OBJECT-TYPE
SYNTAX Integer32(0..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Nonce associated with the peer. Note: "
::= { rpkiRPeerTableEntry 15 }
Bush, et al. Expires January 12, 2012 [Page 9]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
rpkiRPTStalePathTimer OBJECT-TYPE
SYNTAX Integer32
UNITS "seconds"
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The number of seconds configured for the stale path timer."
::= { rpkiRPeerTableEntry 16 }
rpkiRPTStalePathTimeRemaining OBJECT-TYPE
SYNTAX Integer32
UNITS "seconds"
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The number of seconds remaining of the stale path timer for
this peer."
::= { rpkiRPeerTableEntry 17 }
rpkiRPTRefreshTimer OBJECT-TYPE
SYNTAX Integer32
UNITS "seconds"
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The number of seconds configured for the refresh timer."
::= { rpkiRPeerTableEntry 18 }
rpkiRPTRefreshTimeRemaining OBJECT-TYPE
SYNTAX Integer32
UNITS "seconds"
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The number of seconds remaining of the refresh timer for
this peer."
::= { rpkiRPeerTableEntry 19 }
END
5. Contributors
Bush, et al. Expires January 12, 2012 [Page 10]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
6. Acknowledgements
7. IANA Considerations
The MIB module in this document will required an IANA assigned OBJECT
IDENTIFIER within the SMI Numbers registry. For example, replacing
XXX below:
Descriptor OBJECT IDENTIFIER value
---------- -----------------------
rpkiRouter { mib-2 XXX }
8. Security Considerations
9. References
9.1. Normative References
[I-D.ietf-sidr-rpki-rtr]
Bush, R. and R. Austein, "The RPKI/Router Protocol",
draft-ietf-sidr-rpki-rtr-13 (work in progress), June 2011.
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", BCP 14, RFC 2119, March 1997.
[RFC2578] McCloghrie, K., Ed., Perkins, D., Ed., and J.
Schoenwaelder, Ed., "Structure of Management Information
Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.
[RFC2579] McCloghrie, K., Ed., Perkins, D., Ed., and J.
Schoenwaelder, Ed., "Textual Conventions for SMIv2",
STD 58, RFC 2579, April 1999.
[RFC2580] McCloghrie, K., Perkins, D., and J. Schoenwaelder,
"Conformance Statements for SMIv2", STD 58, RFC 2580,
April 1999.
[RFC2842] Chandra, R. and J. Scudder, "Capabilities Advertisement
with BGP-4", RFC 2842, May 2000.
[RFC3410] Case, J., Mundy, R., Partain, D., and B. Stewart,
"Introduction and Applicability Statements for Internet-
Standard Management Framework", RFC 3410, December 2002.
Bush, et al. Expires January 12, 2012 [Page 11]
Internet-Draft MIB Extension for RPKI Router Protocol July 2011
9.2. Informative References
[RFC4271] Rekhter, Y., Li, T., and S. Hares, "A Border Gateway
Protocol 4 (BGP-4)", RFC 4271, January 2006.
Authors' Addresses
Randy Bush
Internet Initiative Japan
5147 Crystal Springs
Bainbridge Island, Washington 98110
USA
Email: randy@psg.com
Bert Wijnen
RIPE NCC
Schagen 33
3461 GL Linschoten
Netherlands
Email: bwijnen@bwijnen.net
Keyur Patel
Cisco Systems
170 W. Tasman Drive
San Jose, CA 95134
USA
Email: keyupate@cisco.com
Michael Baer
SPARTA
P.O. Box 72682
Davis, CA 95617
USA
Email: michael.baer@sparta.com
Bush, et al. Expires January 12, 2012 [Page 12]