doc: Add RFC documents

1 files changed, 3979 insertions, 0 deletions

diff --git a/doc/rfc/rfc2758.txt b/doc/rfc/rfc2758.txt
new file mode 100644
index 0000000..f1432f2
--- /dev/null
+++ b/doc/rfc/rfc2758.txt
@@ -0,0 +1,3979 @@
+
+
+
+
+
+
+Network Working Group                                            K. White
+Request for Comments: 2758                                      IBM Corp.
+Category: Experimental                                      February 2000
+
+
+           Definitions of Managed Objects for Service Level
+                   Agreements Performance Monitoring
+
+Status of this Memo
+
+   This memo defines an Experimental Protocol for the Internet
+   community.  It does not specify an Internet standard of any kind.
+   Discussion and suggestions for improvement are requested.
+   Distribution of this memo is unlimited.
+
+Copyright Notice
+
+   Copyright (C) The Internet Society (2000).  All Rights Reserved.
+
+Abstract
+
+   This memo defines a Management Information Base (MIB) for performance
+   monitoring of Service Level Agreements (SLAs) defined via policy
+   definitions.  The MIB defined herein focuses on defining a set of
+   objects for monitoring SLAs and not on replication of the content of
+   the policy definitions being monitored.  The goal of the MIB defined
+   within this document is to defined statistics related to a policy
+   rule definition for reporting on the effect that a policy rule has on
+   a system and to defined a method of monitoring this data.
+
+Table of Contents
+
+   1.0  Introduction  . . . . . . . . . . . . . . . . . . . . . . .   2
+   2.0  The SNMP Network Management Framework   . . . . . . . . . .   2
+   3.0  Structure of the MIB  . . . . . . . . . . . . . . . . . . .   3
+   3.1  Scalar objects  . . . . . . . . . . . . . . . . . . . . . .   4
+   3.2  slapmPolicyNameTable  . . . . . . . . . . . . . . . . . . .   5
+   3.3  slapmPolicyRuleStatsTable   . . . . . . . . . . . . . . . .   6
+   3.4  slapmPRMonTable   . . . . . . . . . . . . . . . . . . . . .   6
+   3.5  slapmSubcomponentTable  . . . . . . . . . . . . . . . . . .   8
+   4.0  Definitions   . . . . . . . . . . . . . . . . . . . . . . .   8
+   5.0  Security Considerations   . . . . . . . . . . . . . . . . .  67
+   6.0  Intellectual Property   . . . . . . . . . . . . . . . . . .  67
+   7.0  Acknowledgments   . . . . . . . . . . . . . . . . . . . . .  68
+   8.0  References  . . . . . . . . . . . . . . . . . . . . . . . .  68
+   9.0  Author's Address  . . . . . . . . . . . . . . . . . . . . .  70
+   10.0  Full Copyright Statement   . . . . . . . . . . . . . . . .  71
+
+
+
+
+White                         Experimental                      [Page 1]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+1.0  Introduction
+
+   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
+   "SHOULD", "SHOULD NOT", "RECOMMENDED",  "MAY", and "OPTIONAL" in this
+   document are to be interpreted as described in RFC 2119, reference
+   [13].
+
+   This document's purpose is to define a MIB module for performance
+   management of Service Level Agreements (SLAs).  It is assumed that an
+   SLA is defined via policy schema definitions.  The policy definitions
+   being modeled with respect to performance management is primarily
+   related to network Quality of Service (QOS).  There are a number of
+   methods that exist for defining and administering policy.  Definition
+   of these methods is considered out side of the scope of this
+   document.
+
+   The MIB module defined within this memo has been modeled using the
+   various versions of the schema definitions being developed within the
+   Policy Framework Working Group in the IETF.  The content of the MIB
+   defined within this memo has evolved along with the Policy Framework
+   Working Group schema definitions.
+
+2.0  The SNMP Network Management Framework
+
+   The SNMP Management Framework presently consists of five major
+   components:
+
+   o  An overall architecture, described in RFC 2571 [7].
+
+   o  Mechanisms for describing and naming objects and events for the
+      purpose of management.  The first version of this Structure of
+      Management Information (SMI) is called SMIv1 and described in STD
+      16, RFC 1155 [14], STD 16, RFC 1212 [15] and RFC 1215 [16].  The
+      second version, called SMIv2, is described in STD 58, RFC 2578
+      [3], STD 58, RFC 2579 [4] and STD 58, RFC 2580 [5].
+
+   o  Message protocols for transferring management information.  The
+      first version of the SNMP message protocol is called SNMPv1 and
+      described in STD 15, RFC 1157 [1].  A second version of the SNMP
+      message protocol, which is not an Internet standards track
+      protocol, is called SNMPv2c and described in RFC 1901 [17] and RFC
+      1906 [18].  The third version of the message protocol is called
+      SNMPv3 and described in RFC 1906 [18], RFC 2572 [8] and RFC 2574
+      [10].
+
+   o  Protocol operations for accessing management information.  The
+      first set of protocol operations and associated PDU formats is
+      described in STD 15, RFC 1157 [1].  A second set of protocol
+
+
+
+White                         Experimental                      [Page 2]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      operations and associated PDU formats is described in RFC 1905
+      [6].
+
+   o  A set of fundamental applications described in RFC 2573 [9] and
+      the view-based access control mechanism described in RFC 2575
+      [11].
+
+   Managed objects are accessed via a virtual information store, termed
+   the Management Information Base or MIB.  Objects in the MIB are
+   defined using the mechanisms defined in the SMI.
+
+   This memo specifies a MIB module that is compliant to the SMIv2.  A
+   MIB conforming to the SMIv1 can be produced through the appropriate
+   translations.  The resulting translated MIB must be semantically
+   equivalent, except where objects or events are omitted because no
+   translation is possible (use of Counter64).  Some machine readable
+   information in SMIv2 will be converted into textual descriptions in
+   SMIv1 during the translation process.  However, this loss of machine
+   readable information is not considered to change the semantics of the
+   MIB.
+
+3.0  Structure of the MIB
+
+   The SLAPM-MIB consists of the following components:
+
+   o  scalar objects
+
+   o  slapmPolicyNameTable
+
+   o  slapmPolicyRuleStatsTable (equivalent to the deprecated
+      slapmPolicyStatsTable)
+
+   o  slapmPRMonTable (equivalent to the deprecated
+      slapmPolicyMonitorTable)
+
+   o  slapmSubcomponentTable
+
+   Refer to the compliance statement defined within SLAPM-MIB for a
+   definition of what objects and notifications MUST be implemented by
+   all systems as opposed to those that MUST be implemented by end
+   systems only.
+
+   Initially most of the tables defined by the MIB module within this
+   document where directly indexed using a policy's name and a
+   subordinate traffic profile name.  Over time the structure and
+   resulting naming has grown more complex and as such has exceeded the
+   capacity of being used as a direct MIB table index.  As a result of
+   this the original tables (slapmPolicyStatsTable and
+
+
+
+White                         Experimental                      [Page 3]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+   slapmPolicyMonitorTable) have been deprecated and replaced with new
+   tables that use an Unsigned32 index element instead of "names".  A
+   new table has been defined, slapmPolicyNameTable, that maps the
+   Unsigned32 index to a unique name associated with a given policy rule
+   definition.
+
+3.1  Scalar objects
+
+   Global objects defined within SLAPM-MIB:
+
+   o  slapmSpinLock
+
+      Enables multiple management application access to SLAPM-MIB.  An
+      agent MUST implement the slapmSpinLock object to enable management
+      applications to coordinate their use of the SLAPM-MIB.  Management
+      application use of slapmSpinLock is OPTIONAL.
+
+   o  slapmPolicyCountQueries, slapmPolicyCountAccesses,
+      slapmPolicyCountSuccessAccesses, and slapmPolicyCountNotFounds
+
+      Basic statistics on the amount of policy directory access that has
+      occurred at a system.
+
+   o  slapmPolicyPurgeTime
+
+      Used to prevent the entries in various SLAPM-MIB tables that
+      relate to a policy definition from immediately being deleted when
+      the corresponding policy definition no longer exists.  This gives
+      management applications time to discover this condition and close
+      out any polled based interval data that may be being collected.
+      All dependent slapmPRMonTable entries are also deleted when its
+      parent slapmPolicyRuleStatsEntry is removed.  Refer to the OBJECT
+      description for slapmPolicyPurgeTime for a more precise
+      description of this function.
+
+   o  slapmPolicyTrapEnable
+
+      This object enables or suppresses generation of
+      slapmPolicyRuleDeleted or slapmPolicyRuleMonDeleted notifications.
+
+   o  slapmPolicyTrapFilter
+
+      This object enables suppression of slapmSubcMonitorNotOkay
+      notifications.
+
+
+
+
+
+
+
+White                         Experimental                      [Page 4]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+3.2  slapmPolicyNameTable
+
+   The slapmPolicyNameTable maps a Unsigned32 index to a unique name
+   associated with a given policy rule definition.
+
+   Currently, the core schema definition being worked on within the
+   Policy Framework working group defines five general classes:
+   policyGroup, policyRule, policyCondition, policyTimePeriodCondition,
+   and policyAction.  "Policies can either be used in a stand-alone
+   fashion or aggregated into policy groups to perform more elaborate
+   functions.  Stand-alone policies are called policy rules.  Policy
+   groups are aggregations of policy rules, or aggregations of policy
+   groups, but not both."  Each policy rule consists of a set of
+   conditions and a set of actions.  Policy rules may be aggregated into
+   policy groups.
+
+   "Instances in a directory are identified by distinguished names
+   (DNs), which provide the same type of hierarchical organization that
+   a file system provides in a computer system.  A distinguished name is
+   a sequence of relative distinguished names (RDNs), where an RDN
+   provides a unique identifier for an instance within the context of
+   its immediate superior, in the same way that a filename provides a
+   unique identifier for a file within the context of the folder in
+   which it resides."
+
+   Each of these instances can also be named to fit in with the existing
+   DEN practice with a commonName (cn) attribute as oppose to the
+   classes name attribute.
+
+   "The cn, or commonName, attribute is an X.500 attribute.  It stands
+   for commonName.  It specifies a user-friendly name by which the
+   object is commonly known.  This name may be ambiguous by itself.
+   This name is used in a limited scope (such as an organization).  It
+   conforms to the naming conventions of the country or culture with
+   which it is associated.  CN is used universally in DEN as the naming
+   attribute for a class."
+
+   An slapmPolicyNameEntry contains a single object,
+   slapmPolicyNameOfRule, that contains the unique name associated with
+   a policy rule instance.  An slapmPolicyNameEntry is indexed by a
+   Unsigned32 index, slapmPolicyNameIndex, that is assigned by the
+   implementation of this MIB.
+
+
+
+
+
+
+
+
+
+White                         Experimental                      [Page 5]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+3.3  slapmPolicyRuleStatsTable
+
+   This table is functionally equivalent to the deprecated
+   slapmPolicyStatsTable. The slapmPolicyStatsTable uses the name of
+   both a policy definition and a traffic profile name to index an
+   entry.  The slapmPolicyRuleStatsTable uses an slapmPolicyNameEntry
+   index (Unsigned32) instead.
+
+   The slapmPolicyRuleStatsTable is the main table defined by SLAPM-MIB.
+   The primary index for this table is slapmPolicyNameSystemAddress that
+   enables support of multiple systems from a single policy agent.  The
+   index element, slapmPolicyNameSystemAddress, value must be either the
+   zero-length octet string when at a policy agent only a single system
+   is being support, 4 octets for a ipv4 address, or 16 octets for a
+   ipv6 address.
+
+   It is possible that on a single system multiple policy agent
+   instances exists.  The Entity MIB, refer to [19], should be used to
+   handle the resulting MIBs.
+
+   With respect to slapmPolicyNameSystemAddress one
+   slapmPolicyRuleStatsEntry exists for each policy rule instance.
+   Entries in this table are not administered via SNMP.  An agent
+   implementation for this table MUST reflect its current set of policy
+   rule instances via table entries.  The mechanisms for policy
+   administration are outside of the scope of this memo.
+
+3.4  slapmPRMonTable
+
+   This table is functionally equivalent to the deprecated
+   slapmPolicyMonitorTable. The slapmPolicyMonitorTable uses the name of
+   both a policy definition and a traffic profile name to index an
+   entry.  The slapmPRMonTable uses an slapmPolicyNameEntry index
+   (Unsigned32) instead.
+
+   The slapmPRMonTable provides a method of monitoring the effect of SLA
+   policy being used at a system.  A management application creates an
+   slapmPRMonEntry for each collection that it requires.  The value of
+   the BITS slapmPRMonControl object determines what type of monitoring
+   occurs, at what level to monitor and whether trap support is enabled:
+
+   o  monitorMinRate(0)
+
+      Use the value of slapmPRMonInterval as the interval to determine
+      current traffic in and out rates, using slapmPRMonCurrentInRate
+      and slapmPRMonCurrentOutRate, that can be compared to
+      slapmPRMonMinRateLow for determining when to generate a
+      slapmPolicyRuleMonNotOkay notification.  The notification
+
+
+
+White                         Experimental                      [Page 6]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      slapmPolicyRuleMonOkay is generated when the problem is resolved.
+      This can be determined by comparing the current rates to
+      slapmPRMonMinRateHigh.
+
+   o  monitorMaxRate(1)
+
+      Use the value of slapmPRMonInterval as the interval to determine
+      current traffic in and out rate, using slapmPRMonCurrentInRate and
+      slapmPRMonCurrentOutRate, that can be compared to
+      slapmPRMonMaxRateHigh for determining when to generate a
+      slapmPolicyRuleMonNotOkay notification. The notification
+      slapmPolicyRuleMonOkay is generated when the problem is resolved.
+      This can be determined by comparing the current rates to
+      slapmPRMonMaxRateLow.
+
+   o  monitorMaxDelay(2)
+
+      Use the value of slapmPRMonInterval as the interval to determine
+      the current delay.  This can be calculated on an aggregate level
+      by averaging the round trip times for all TCP connections
+      associated with the policy definition.  For an individual
+      subcomponent its round trip time can be used directly.  Compare
+      this value to slapmPRMonMaxDelayHigh for determining when to
+      generate a slapmPolicyRuleMonNotOkay notification.  The
+      notification slapmPolicyRuleMonOkay is generated when the problem
+      is resolved.  This can be determined by comparing the current
+      rates to slapmPRMonMaxDelayLow.
+
+      UDP subcomponents don't support max delay monitoring.
+
+   o  enableAggregateTraps(3)
+
+      The slapmPRMonitorControl BITS setting, enableAggregateTraps(3),
+      MUST be set in order for any notifications relating to
+      slapmPolicyRuleStatsTable monitoring to be generated.
+
+   o  enableSubcomponentTraps(4)
+
+      This slapmPRMonControl BITS setting MUST be set in order for any
+      notifications relating to slapmSubcomponetTable monitoring to be
+      generated.  The slapmPRMonControl BITS setting
+      monitorSubcomponents(5) MUST be selected in order for this setting
+      to be allowed.
+
+   o  monitorSubcomponents(5)
+
+      If selected monitor slapmSubcomponentTable entries individually.
+      Note: aggregate policy rule monitoring is always enabled.
+
+
+
+White                         Experimental                      [Page 7]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+   The index element slapmPRMonOwnerIndex is used as the first index in
+   slapmPRMonTable in order to enable SNMP VACM security control.  The
+   slapmPRMonTable is the only table that supports SNMP RowStatus
+   operations.
+
+3.5  slapmSubcomponentTable
+
+   Entries are made into this table for the protocol entities (policy
+   traffic profile subcomponents) to indicate actual policy rule usage,
+   provide general statistics at either a TCP connection or UDP listener
+   level, and enable subcomponent monitoring.
+
+4.0  Definitions
+
+SLAPM-MIB DEFINITIONS ::= BEGIN
+
+   IMPORTS
+      MODULE-IDENTITY, OBJECT-TYPE,
+      experimental, Integer32, NOTIFICATION-TYPE,
+      Gauge32, Counter32, Unsigned32
+          FROM SNMPv2-SMI                  -- RFC2578
+      TEXTUAL-CONVENTION, RowStatus,
+      TestAndIncr, DateAndTime
+          FROM SNMPv2-TC                   -- RFC2579
+      MODULE-COMPLIANCE, OBJECT-GROUP,
+      NOTIFICATION-GROUP
+          FROM SNMPv2-CONF                 -- RFC2580
+      SnmpAdminString
+          FROM SNMP-FRAMEWORK-MIB;         -- RFC2571
+
+   slapmMIB MODULE-IDENTITY
+      LAST-UPDATED "200001240000Z"          -- 24 January 2000
+      ORGANIZATION "International Business Machines Corp."
+      CONTACT-INFO
+          "Kenneth White
+
+          International Business Machines Corporation
+          Network Computing Software Division
+          Research Triangle Park, NC, USA
+
+          E-mail: wkenneth@us.ibm.com"
+      DESCRIPTION
+          "The Service Level Agreement Performance Monitoring MIB
+          (SLAPM-MIB) provides data collection and monitoring
+          capabilities for Service Level Agreements (SLAs)
+          policy definitions."
+
+      --  Revision history
+
+
+
+White                         Experimental                      [Page 8]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      REVISION     "200001240000Z"         -- 24 January 2000
+      DESCRIPTION
+          "This version published as RFC 2758."
+
+      ::= { experimental 88 }
+
+   -- Textual Conventions
+
+   SlapmNameType ::= TEXTUAL-CONVENTION
+      STATUS  deprecated
+      DESCRIPTION
+          "The textual convention for naming entities
+          within this MIB.  The actual contents of an object
+          defined using this textual convention should consist
+          of the distinguished name portion of an name.
+          This is usually the right-most
+          portion of the name.  This convention is necessary,
+          since names within this MIB can be used as index
+          items and an instance identifier is limited to 128
+          subidentifiers.
+
+          This textual convention has been deprecated.  All of the
+          tables defined within this MIB that use this textual
+          convention have been deprecated as well since the method
+          of using a portion of the name (either of a policy
+          definition or of a traffic profile) has been replaced
+          by using an Unsigned32 index.  The new slapmPolicyNameTable
+          would then map the Unsigned32 index to a real name."
+      SYNTAX  SnmpAdminString (SIZE(0..32))
+
+   SlapmStatus ::= TEXTUAL-CONVENTION
+      STATUS  current
+      DESCRIPTION
+          "The textual convention for defining the various
+          slapmPRMonTable (or old slapmPolicyMonitorTable)
+          and the slapmSubcomponentTable states for actual policy
+          rule traffic monitoring."
+      SYNTAX  BITS {
+                     slaMinInRateNotAchieved(0),
+                     slaMaxInRateExceeded(1),
+                     slaMaxDelayExceeded(2),
+                     slaMinOutRateNotAchieved(3),
+                     slaMaxOutRateExceeded(4),
+                     monitorMinInRateNotAchieved(5),
+                     monitorMaxInRateExceeded(6),
+                     monitorMaxDelayExceeded(7),
+                     monitorMinOutRateNotAchieved(8),
+                     monitorMaxOutRateExceeded(9)
+
+
+
+White                         Experimental                      [Page 9]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+                   }
+
+   SlapmPolicyRuleName ::= TEXTUAL-CONVENTION
+      DISPLAY-HINT "1024t"
+      STATUS  current
+      DESCRIPTION
+          "To facilitate internationalization, this TC
+          represents information taken from the ISO/IEC IS
+          10646-1 character set, encoded as an octet string
+          using the UTF-8 character encoding scheme described
+          in RFC 2044.   For strings in 7-bit US-ASCII,
+          there is no impact since the UTF-8 representation
+          is identical to the US-ASCII encoding."
+      SYNTAX  OCTET STRING (SIZE (0..1024))
+
+   -- Top-level structure of the MIB
+
+   slapmNotifications  OBJECT IDENTIFIER ::= { slapmMIB 0 }
+   slapmObjects        OBJECT IDENTIFIER ::= { slapmMIB 1 }
+   slapmConformance    OBJECT IDENTIFIER ::= { slapmMIB 2 }
+
+   -- All scalar objects
+
+   slapmBaseObjects    OBJECT IDENTIFIER ::= { slapmObjects 1 }
+
+   -- Scalar Object Definitions
+
+   slapmSpinLock OBJECT-TYPE
+      SYNTAX      TestAndIncr
+      MAX-ACCESS  read-write
+      STATUS      current
+      DESCRIPTION
+         "An advisory lock used to allow cooperating applications
+         to coordinate their use of the contents of this MIB.  This
+         typically occurs when an application seeks to create an
+         new entry or alter an existing entry in
+         slapmPRMonTable (or old slapmPolicyMonitorTable).  A
+         management implementation MAY utilize the slapmSpinLock to
+         serialize its changes or additions.  This usage is not
+         required.   However, slapmSpinLock MUST be supported by
+         agent implementations."
+     ::= { slapmBaseObjects 1 }
+
+   slapmPolicyCountQueries OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+
+
+
+White                         Experimental                     [Page 10]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         "The total number of times that a policy lookup occurred
+         with respect to a policy agent.
+         This is the number of times that a reference was made to
+         a policy definition at a system and includes the number
+         of times that a policy repository was accessed,
+         slapmPolicyCountAccesses.  The object
+         slapmPolicyCountAccesses should be less than
+         slapmPolicyCountQueries when policy definitions are
+         cached at a system."
+      ::= { slapmBaseObjects 2 }
+
+   slapmPolicyCountAccesses OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Total number of times that a policy repository was
+          accessed with respect to a policy agent.
+          The value of this object should be less than
+          slapmPolicyCountQueries, since typically policy entries
+          are cached to minimize repository accesses."
+      ::= { slapmBaseObjects 3 }
+
+   slapmPolicyCountSuccessAccesses OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Total number of successful policy repository accesses
+         with respect to a policy agent."
+      ::= { slapmBaseObjects 4 }
+
+   slapmPolicyCountNotFounds OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Total number of policy repository accesses,
+         with respect to a policy agent, that
+         resulted in an entry not being located."
+      ::= { slapmBaseObjects 5 }
+
+   slapmPolicyPurgeTime OBJECT-TYPE
+      SYNTAX      Integer32 (0..3600)  -- maximum of 1 hour
+      UNITS       "seconds"
+      MAX-ACCESS  read-write
+      STATUS      current
+      DESCRIPTION
+
+
+
+White                         Experimental                     [Page 11]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         "The purpose of this object is to define the amount
+         of time (in seconds) to wait before removing an
+         slapmPolicyRuleStatsEntry (or old slapmPolicyStatsEntry)
+         when a system detects that the associated policy
+         definition has been deleted.  This gives any polling
+         management applications time to complete their last poll
+         before an entry is removed.  An slapmPolicyRuleStatsEntry
+         (or old slapmPolicyStatsEntry) enters the
+         deleteNeeded(3) state via slapmPolicyRuleStatsOperStatus
+         (or old slapmPolicyStatsOperStatus) when a system first
+         detects that the entry needs to be removed.
+
+         Once slapmPolicyPurgeTime has expired for an entry in
+         deleteNeeded(3) state it is removed a long with any
+         dependent slapmPRMonTable (or slapmPolicyMonitorTable)
+         entries.
+
+         A value of 0 for this option disables this function and
+         results in the automatic purging of slapmPRMonTable
+         (or slapmPolicyTable) entries upon transition into
+         deleteNeeded(3) state.
+
+         A slapmPolicyRuleDeleted (or slapmPolicyProfileDeleted)
+         notification is sent when an slapmPolicyRuleStatsEntry (or
+         slapmPolicyStatsEntry) is removed.  Dependent
+         slapmPRMonTable (or slapmPolicyMonitorTable)
+         deletion results in a slapmPolicyRuleMonDeleted (or
+         slapmPolicyMonitorDeleted) notification being sent.
+         These notifications are suppressed if the value of
+         slapmPolicyTrapEnable is disabled(2)."
+      DEFVAL { 900 }  -- 15 minute default purge time
+      ::= { slapmBaseObjects 6 }
+
+   slapmPolicyTrapEnable OBJECT-TYPE
+      SYNTAX      INTEGER { enabled(1), disabled(2) }
+      MAX-ACCESS  read-write
+      STATUS      current
+      DESCRIPTION
+         "Indicates whether slapmPolicyRuleDeleted and
+         slapmPolicyRuleMonDeleted (or slapmPolicyProfileDeleted
+         and slapmPolicyMonitorDeleted) notifications should be
+         generated by this system."
+      DEFVAL { disabled }
+      ::= { slapmBaseObjects 7 }
+
+   slapmPolicyTrapFilter   OBJECT-TYPE
+      SYNTAX      Integer32 (0..64)
+      UNITS       "intervals"
+
+
+
+White                         Experimental                     [Page 12]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      MAX-ACCESS  read-write
+      STATUS      current
+      DESCRIPTION
+         "The purpose of this object is to suppress unnecessary
+         slapmSubcMonitorNotOkay (or
+         slapmSubcomponentMonitoredEventNotAchieved), for example,
+         notifications.  Basically, a monitored event has to
+         not meet its SLA requirement for the number of
+         consecutive intervals indicated by the value of this
+         object."
+      DEFVAL { 3 }
+      ::= { slapmBaseObjects 8 }
+
+   slapmTableObjects    OBJECT IDENTIFIER ::= { slapmObjects 2 }
+
+   -- Sla Performance Monitoring Policy Statistics Table
+
+   slapmPolicyStatsTable OBJECT-TYPE
+      SYNTAX SEQUENCE OF SlapmPolicyStatsEntry
+      MAX-ACCESS not-accessible
+      STATUS deprecated
+      DESCRIPTION
+          "Provides statistics on all policies known at a
+          system.
+
+          This table has been deprecated and replaced with
+          the slapmPolicyRuleStatsTable.  Older implementations of
+          this MIB are expected to continue their support of this
+          table."
+     ::= { slapmTableObjects 1 }
+
+   slapmPolicyStatsEntry OBJECT-TYPE
+      SYNTAX SlapmPolicyStatsEntry
+      MAX-ACCESS not-accessible
+      STATUS deprecated
+      DESCRIPTION
+          "Defines an entry in the slapmPolicyStatsTable.  This table
+          defines a set of statistics that is kept on a per system,
+          policy and traffic profile basis.  A policy can be
+          defined to contain multiple traffic profiles that map to
+          a single action.
+
+          Entries in this table are not created or deleted via SNMP
+          but reflect the set of policy definitions known at a system."
+      INDEX {
+             slapmPolicyStatsSystemAddress,
+             slapmPolicyStatsPolicyName,
+             slapmPolicyStatsTrafficProfileName
+
+
+
+White                         Experimental                     [Page 13]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+            }
+      ::= { slapmPolicyStatsTable 1 }
+
+   SlapmPolicyStatsEntry ::=
+      SEQUENCE {
+          slapmPolicyStatsSystemAddress      OCTET STRING,
+          slapmPolicyStatsPolicyName         SlapmNameType,
+          slapmPolicyStatsTrafficProfileName SlapmNameType,
+          slapmPolicyStatsOperStatus         INTEGER,
+          slapmPolicyStatsActiveConns        Gauge32,
+          slapmPolicyStatsTotalConns         Counter32,
+          slapmPolicyStatsFirstActivated     DateAndTime,
+          slapmPolicyStatsLastMapping        DateAndTime,
+          slapmPolicyStatsInOctets           Counter32,
+          slapmPolicyStatsOutOctets          Counter32,
+          slapmPolicyStatsConnectionLimit    Integer32,
+          slapmPolicyStatsCountAccepts       Counter32,
+          slapmPolicyStatsCountDenies        Counter32,
+          slapmPolicyStatsInDiscards         Counter32,
+          slapmPolicyStatsOutDiscards        Counter32,
+          slapmPolicyStatsInPackets          Counter32,
+          slapmPolicyStatsOutPackets         Counter32,
+          slapmPolicyStatsInProfileOctets    Counter32,
+          slapmPolicyStatsOutProfileOctets   Counter32,
+          slapmPolicyStatsMinRate            Integer32,
+          slapmPolicyStatsMaxRate            Integer32,
+          slapmPolicyStatsMaxDelay           Integer32
+      }
+
+   slapmPolicyStatsSystemAddress OBJECT-TYPE
+      SYNTAX      OCTET STRING (SIZE(0 | 4 | 16))
+      MAX-ACCESS  not-accessible
+      STATUS      deprecated
+      DESCRIPTION
+         "Address of a system that an Policy definition relates to.
+         A zero length octet string must be used to indicate that
+         only a single system is being represented.
+         Otherwise, the length of the octet string must be
+         4 for an ipv4 address or 16 for an ipv6 address."
+      ::= { slapmPolicyStatsEntry 1 }
+
+   slapmPolicyStatsPolicyName OBJECT-TYPE
+      SYNTAX      SlapmNameType
+      MAX-ACCESS  not-accessible
+      STATUS      deprecated
+      DESCRIPTION
+         "Policy name that this entry relates to."
+      ::= { slapmPolicyStatsEntry 2 }
+
+
+
+White                         Experimental                     [Page 14]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+   slapmPolicyStatsTrafficProfileName OBJECT-TYPE
+      SYNTAX      SlapmNameType
+      MAX-ACCESS  not-accessible
+      STATUS      deprecated
+      DESCRIPTION
+         "The name of a traffic profile that is associated with
+         a policy."
+      ::= { slapmPolicyStatsEntry 3 }
+
+   slapmPolicyStatsOperStatus OBJECT-TYPE
+      SYNTAX      INTEGER {
+                             inactive(1),
+                             active(2),
+                             deleteNeeded(3)
+                          }
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The state of a policy entry:
+
+           inactive(1)      - An policy entry was either defined
+                              by local system definition or
+                              discovered via a directory search
+                              but has not been activated (not
+                              currently being used).
+           active(2)        - Policy entry is being used to affect
+                              traffic flows.
+           deleteNeeded(3)  - Either though local implementation
+                              dependent methods or by discovering
+                              that the directory entry corresponding
+                              to this table entry no longer
+                              exists and slapmPolicyPurgeTime needs
+                              to expire before attempting to remove
+                              the corresponding slapmPolicyStatsEntry
+                              and any dependent slapmPolicyMonitor
+                              table entries.
+         Note: a policy traffic profile in a state other than
+         active(1) is not being used to affect traffic flows."
+      ::= { slapmPolicyStatsEntry 4 }
+
+   slapmPolicyStatsActiveConns OBJECT-TYPE
+      SYNTAX      Gauge32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The number of active TCP connections that are
+         affected by the corresponding policy entry."
+      ::= { slapmPolicyStatsEntry 5 }
+
+
+
+White                         Experimental                     [Page 15]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+   slapmPolicyStatsTotalConns OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The number of total TCP connections that are
+         affected by the corresponding policy entry."
+      ::= { slapmPolicyStatsEntry 6 }
+
+   slapmPolicyStatsFirstActivated OBJECT-TYPE
+      SYNTAX      DateAndTime
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The timestamp for when the corresponding policy entry
+         is activated.  The value of this object serves as
+         the discontinuity event indicator when polling entries
+         in this table.  The value of this object is updated on
+         transition of slapmPolicyStatsOperStatus into the active(2)
+         state."
+      DEFVAL { '0000000000000000'H }
+      ::= { slapmPolicyStatsEntry 7 }
+
+   slapmPolicyStatsLastMapping OBJECT-TYPE
+      SYNTAX      DateAndTime
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The timestamp for when the last time
+         that the associated policy entry was used."
+      DEFVAL { '0000000000000000'H }
+      ::= { slapmPolicyStatsEntry 8 }
+
+   slapmPolicyStatsInOctets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The number of octets that was received by IP for an
+         entity that map to this entry."
+      ::= { slapmPolicyStatsEntry 9 }
+
+   slapmPolicyStatsOutOctets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The number of octets that was transmitted by IP for an
+
+
+
+White                         Experimental                     [Page 16]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         entity that map to this entry."
+      ::= { slapmPolicyStatsEntry 10 }
+
+   slapmPolicyStatsConnectionLimit OBJECT-TYPE
+      SYNTAX      Integer32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The limit for the number of active TCP connections that
+         are allowed for this policy definition.  A value of zero
+         for this object implies that a connection limit has not
+         been specified."
+      ::= { slapmPolicyStatsEntry 11 }
+
+   slapmPolicyStatsCountAccepts OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "This counter is incremented when a policy action's
+          Permission value is set to Accept and a session
+          (TCP connection) is accepted."
+      ::= { slapmPolicyStatsEntry 12 }
+
+   slapmPolicyStatsCountDenies OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "This counter is incremented when a policy action's
+          Permission value is set to Deny and a session is denied,
+          or when a session (TCP connection) is rejected due to a
+          policy's connection limit (slapmPolicyStatsConnectLimit)
+          being reached."
+      ::= { slapmPolicyStatsEntry 13 }
+
+   slapmPolicyStatsInDiscards OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "This counter counts the number of in octets discarded.
+          This occurs when an error is detected.  Examples of this
+          are buffer overflow, checksum error, or bad packet
+          format."
+      ::= { slapmPolicyStatsEntry 14 }
+
+   slapmPolicyStatsOutDiscards OBJECT-TYPE
+
+
+
+White                         Experimental                     [Page 17]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "This counter counts the number of out octets discarded.
+          Examples of this are buffer overflow, checksum error, or
+          bad packet format."
+      ::= { slapmPolicyStatsEntry 15 }
+
+   slapmPolicyStatsInPackets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "This counter counts the number of in packets received
+          that relate to this policy entry from IP."
+      ::= { slapmPolicyStatsEntry 16 }
+
+   slapmPolicyStatsOutPackets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "This counter counts the number of out packets sent
+          by IP that relate to this policy entry."
+      ::= { slapmPolicyStatsEntry 17 }
+
+   slapmPolicyStatsInProfileOctets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "This counter counts the number of in octets that are
+          determined to be within profile."
+      ::= { slapmPolicyStatsEntry 18 }
+
+   slapmPolicyStatsOutProfileOctets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "This counter counts the number of out octets that are
+          determined to be within profile."
+      ::= { slapmPolicyStatsEntry 19 }
+
+   slapmPolicyStatsMinRate OBJECT-TYPE
+      SYNTAX      Integer32
+      UNITS       "Kilobits per second"
+
+
+
+White                         Experimental                     [Page 18]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "The minimum transfer rate defined for this entry."
+      ::= { slapmPolicyStatsEntry 20 }
+
+   slapmPolicyStatsMaxRate OBJECT-TYPE
+      SYNTAX      Integer32
+      UNITS       "Kilobits per second"
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "The maximum transfer rate defined for this entry."
+      ::= { slapmPolicyStatsEntry 21 }
+
+   slapmPolicyStatsMaxDelay OBJECT-TYPE
+      SYNTAX      Integer32
+      UNITS       "milliseconds"
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "The maximum delay defined for this entry."
+      ::= { slapmPolicyStatsEntry 22 }
+
+   -- SLA Performance Monitoring Policy Monitor Table
+
+   slapmPolicyMonitorTable OBJECT-TYPE
+      SYNTAX SEQUENCE OF SlapmPolicyMonitorEntry
+      MAX-ACCESS not-accessible
+      STATUS     deprecated
+      DESCRIPTION
+          "Provides a method of monitoring policies and their
+          effect at a system.
+
+          This table has been deprecated and replaced with
+          the slapmPRMonTable.  Older implementations of
+          this MIB are expected to continue their support
+          of this table."
+     ::= { slapmTableObjects 2 }
+
+   slapmPolicyMonitorEntry OBJECT-TYPE
+      SYNTAX     SlapmPolicyMonitorEntry
+      MAX-ACCESS not-accessible
+      STATUS     deprecated
+      DESCRIPTION
+          "Defines an entry in the slapmPolicyMonitorTable. This
+          table defines which policies should be monitored on a
+          per policy traffic profile basis."
+
+
+
+White                         Experimental                     [Page 19]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      INDEX {
+             slapmPolicyMonitorOwnerIndex,
+             slapmPolicyMonitorSystemAddress,
+             slapmPolicyMonitorPolicyName,
+             slapmPolicyMonitorTrafficProfileName
+            }
+      ::= { slapmPolicyMonitorTable 1 }
+
+   SlapmPolicyMonitorEntry ::=
+      SEQUENCE {
+          slapmPolicyMonitorOwnerIndex              SnmpAdminString,
+          slapmPolicyMonitorSystemAddress           OCTET STRING,
+          slapmPolicyMonitorPolicyName              SlapmNameType,
+          slapmPolicyMonitorTrafficProfileName      SlapmNameType,
+          slapmPolicyMonitorControl                 BITS,
+          slapmPolicyMonitorStatus                  SlapmStatus,
+          slapmPolicyMonitorInterval                Integer32,
+          slapmPolicyMonitorIntTime                 DateAndTime,
+          slapmPolicyMonitorCurrentInRate           Gauge32,
+          slapmPolicyMonitorCurrentOutRate          Gauge32,
+          slapmPolicyMonitorMinRateLow              Integer32,
+          slapmPolicyMonitorMinRateHigh             Integer32,
+          slapmPolicyMonitorMaxRateHigh             Integer32,
+          slapmPolicyMonitorMaxRateLow              Integer32,
+          slapmPolicyMonitorMaxDelayHigh            Integer32,
+          slapmPolicyMonitorMaxDelayLow             Integer32,
+          slapmPolicyMonitorMinInRateNotAchieves    Counter32,
+          slapmPolicyMonitorMaxInRateExceeds        Counter32,
+          slapmPolicyMonitorMaxDelayExceeds         Counter32,
+          slapmPolicyMonitorMinOutRateNotAchieves   Counter32,
+          slapmPolicyMonitorMaxOutRateExceeds       Counter32,
+          slapmPolicyMonitorCurrentDelayRate        Gauge32,
+          slapmPolicyMonitorRowStatus               RowStatus
+      }
+
+   slapmPolicyMonitorOwnerIndex OBJECT-TYPE
+      SYNTAX      SnmpAdminString (SIZE(0..16))
+      MAX-ACCESS  not-accessible
+      STATUS      deprecated
+      DESCRIPTION
+         "To facilitate the provisioning of access control by a
+         security administrator using the View-Based Access
+         Control Model (RFC 2575, VACM) for tables in which
+         multiple users may need to independently create or modify
+         entries, the initial index is used as an 'owner index'.
+         Such an initial index has a syntax of SnmpAdminString,
+         and can thus be trivially mapped to a securityName or
+         groupName as defined in VACM, in accordance with a
+
+
+
+White                         Experimental                     [Page 20]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         security policy.
+
+         All entries in that table belonging to a particular user
+         will have the same value for this initial index.  For a
+         given user's entries in a particular table, the object
+         identifiers for the information in these entries will
+         have the same subidentifiers (except for the 'column'
+         subidentifier) up to the end of the encoded owner index.
+         To configure VACM to permit access to this portion of the
+         table, one would create vacmViewTreeFamilyTable entries
+         with the value of vacmViewTreeFamilySubtree including the
+         owner index portion, and vacmViewTreeFamilyMask
+         'wildcarding' the column subidentifier.  More elaborate
+         configurations are possible."
+      ::= { slapmPolicyMonitorEntry 1 }
+
+   slapmPolicyMonitorSystemAddress OBJECT-TYPE
+      SYNTAX      OCTET STRING (SIZE(0 | 4 | 16))
+      MAX-ACCESS  not-accessible
+      STATUS      deprecated
+      DESCRIPTION
+         "Address of a system that an Policy definition relates to.
+         A zero length octet string can be used to indicate that
+         only a single system is being represented.
+         Otherwise, the length of the octet string should be
+         4 for an ipv4 address and 16 for an ipv6 address."
+      ::= { slapmPolicyMonitorEntry 2 }
+
+   slapmPolicyMonitorPolicyName OBJECT-TYPE
+      SYNTAX      SlapmNameType
+      MAX-ACCESS  not-accessible
+      STATUS      deprecated
+      DESCRIPTION
+         "Policy name that this entry relates to."
+      ::= { slapmPolicyMonitorEntry 3 }
+
+   slapmPolicyMonitorTrafficProfileName OBJECT-TYPE
+      SYNTAX      SlapmNameType
+      MAX-ACCESS  not-accessible
+      STATUS      deprecated
+      DESCRIPTION
+         "The corresponding Traffic Profile name."
+      ::= { slapmPolicyMonitorEntry 4 }
+
+   slapmPolicyMonitorControl OBJECT-TYPE
+      SYNTAX      BITS {
+                        monitorMinRate(0),
+                        monitorMaxRate(1),
+
+
+
+White                         Experimental                     [Page 21]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+                        monitorMaxDelay(2),
+                        enableAggregateTraps(3),
+                        enableSubcomponentTraps(4),
+                        monitorSubcomponents(5)
+                       }
+      MAX-ACCESS  read-create
+      STATUS      deprecated
+      DESCRIPTION
+         "The value of this object determines the type and level
+         of monitoring that is applied to a policy/profile.  The
+         value of this object can't be changed once the table
+         entry that it is a part of is activated via a
+         slapmPolicyMonitorRowStatus transition to active state.
+
+             monitorMinRate(0) - Monitor minimum transfer rate.
+             monitorMaxRate(1) - Monitor maximum transfer rate.
+             monitorMaxDelay(2) - Monitor maximum delay.
+             enableAggregateTraps(3) - The enableAggregateTraps(3)
+                   BITS setting enables notification generation
+                   when monitoring a policy traffic profile as an
+                   aggregate using the values in the corresponding
+                   slapmPolicyStatsEntry.  By default this function
+                   is not enabled.
+             enableSubcomponentTraps(4) - This BITS setting enables
+                   notification generation when monitoring all
+                   subcomponents that are mapped to an corresponding
+                   slapmPolicyStatsEntry.  By default this
+                   function is not enabled.
+             monitorSubcomponents(5) - This BITS setting enables
+                   monitoring of each subcomponent (typically a
+                   TCP connection or UDP listener) individually."
+      DEFVAL   { { monitorMinRate, monitorMaxRate,
+                   monitorMaxDelay } }
+      ::= { slapmPolicyMonitorEntry 5 }
+
+   slapmPolicyMonitorStatus OBJECT-TYPE
+      SYNTAX      SlapmStatus
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The value of this object indicates when a monitored
+         value has not meet a threshold or isn't meeting the
+         defined service level.  The SlapmStatus TEXTUAL-CONVENTION
+         defines two levels of not meeting a threshold.  The first
+         set:
+                     slaMinInRateNotAchieved(0),
+                     slaMaxInRateExceeded(1),
+                     slaMaxDelayExceeded(2),
+
+
+
+White                         Experimental                     [Page 22]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+                     slaMinOutRateNotAchieved(3),
+                     slaMaxOutRateExceeded(4)
+
+         are used to indicate when the SLA as an aggregate is
+         not meeting a threshold while the second set:
+
+                     monitorMinInRateNotAchieved(5),
+                     monitorMaxInRateExceeded(6),
+                     monitorMaxDelayExceeded(7),
+                     monitorMinOutRateNotAchieved(8),
+                     monitorMaxOutRateExceeded(9)
+
+         indicate that at least one subcomponent is not meeting
+         a threshold."
+      ::= { slapmPolicyMonitorEntry 6 }
+
+   slapmPolicyMonitorInterval OBJECT-TYPE
+      SYNTAX      Integer32 (15..86400) -- 15 second min, 24 hour max
+      UNITS       "seconds"
+      MAX-ACCESS  read-create
+      STATUS      deprecated
+      DESCRIPTION
+         "The number of seconds that defines the sample period."
+      DEFVAL   {20}    -- 20 seconds
+      ::= { slapmPolicyMonitorEntry 7 }
+
+   slapmPolicyMonitorIntTime OBJECT-TYPE
+      SYNTAX      DateAndTime
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The timestamp for when the last interval ended."
+      DEFVAL { '0000000000000000'H }
+      ::= { slapmPolicyMonitorEntry 8 }
+
+   slapmPolicyMonitorCurrentInRate OBJECT-TYPE
+      SYNTAX      Gauge32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "Using the value of the corresponding
+         slapmPolicyMonitorInterval, slapmPolicyStatsInOctets
+         is sampled and then divided by slapmPolicyMonitorInterval
+         to determine the current in transfer rate."
+      ::= { slapmPolicyMonitorEntry 9 }
+
+   slapmPolicyMonitorCurrentOutRate OBJECT-TYPE
+
+
+
+White                         Experimental                     [Page 23]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      SYNTAX      Gauge32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "Using the value of the corresponding
+         slapmPolicyMonitorInterval, slapmPolicyStatsOutOctets
+         is sampled and then divided by slapmPolicyMonitorInterval
+         to determine the current out transfer rate."
+      ::= { slapmPolicyMonitorEntry 10 }
+
+   slapmPolicyMonitorMinRateLow OBJECT-TYPE
+      SYNTAX      Integer32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-create
+      STATUS      deprecated
+      DESCRIPTION
+         "The threshold for generating a
+         slapmMonitoredEventNotAchieved notification, signalling
+         that a monitored minimum transfer rate has not been meet.
+
+         A slapmMonitoredEventNotAchieved notification is not
+         generated again for an slapmPolicyMonitorEntry until
+         the minimum transfer rate
+         exceeds slapmPolicyMonitorMinRateHigh (a
+         slapmMonitoredEventOkay notification is then transmitted)
+         and then fails below slapmPolicyMonitorMinRateLow.  This
+         behavior reduces the slapmMonitoredEventNotAchieved
+         notifications that are transmitted.
+
+         A value of zero for this object is returned when the
+         slapmPolicyMonitorControl monitorMinRate(0) is not
+         enabled.  When enabled the default value for this object
+         is the min rate value specified in the associated
+         action definition minus 10%.  If the action definition
+         doesn't have a min rate defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMinRate(0)
+         is selected.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableAggregateTraps(3), MUST be selected in
+         order for any notification relating to this entry to
+         potentially be generated."
+      ::= { slapmPolicyMonitorEntry 11 }
+
+   slapmPolicyMonitorMinRateHigh OBJECT-TYPE
+      SYNTAX      Integer32
+
+
+
+White                         Experimental                     [Page 24]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-create
+      STATUS      deprecated
+      DESCRIPTION
+         "The threshold for generating a slapmMonitoredEventOkay
+         notification, signalling that a monitored minimum
+         transfer rate has increased to an acceptable level.
+
+         A value of zero for this object is returned when the
+         slapmPolicyMonitorControl monitorMinRate(0) is not
+         enabled.  When enabled the default value for this object
+         is the min rate value specified in the associated
+         action definition plus 10%.  If the action definition
+         doesn't have a min rate defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMinRate(0)
+         is selected.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableAggregateTraps(3), MUST be selected
+         in order for any notification relating to this entry to
+         potentially be generated."
+      ::= { slapmPolicyMonitorEntry 12 }
+
+   slapmPolicyMonitorMaxRateHigh OBJECT-TYPE
+      SYNTAX      Integer32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-create
+      STATUS      deprecated
+      DESCRIPTION
+         "The threshold for generating a
+         slapmMonitoredEventNotAchieved notification, signalling
+         that a monitored maximum transfer rate has been exceeded.
+
+         A slapmMonitoredEventNotAchieved notification is not
+         generated again for an slapmPolicyMonitorEntry until the
+         maximum transfer rate fails below
+         slapmPolicyMonitorMaxRateLow (a slapmMonitoredEventOkay
+         notification is then transmitted) and then raises above
+         slapmPolicyMonitorMaxRateHigh.  This behavior reduces the
+         slapmMonitoredEventNotAchieved notifications that are
+         transmitted.
+
+         A value of zero for this object is returned when the
+         slapmPolicyMonitorControl monitorMaxRate(1) is not
+         enabled.  When enabled the default value for this object
+         is the max rate value specified in the associated
+         action definition plus 10%.  If the action definition
+
+
+
+White                         Experimental                     [Page 25]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         doesn't have a max rate defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMaxRate(1)
+         is selected.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableAggregateTraps(3), MUST be selected in
+         order for any notification relating to this entry to
+         potentially be generated."
+      ::= { slapmPolicyMonitorEntry 13 }
+
+   slapmPolicyMonitorMaxRateLow OBJECT-TYPE
+      SYNTAX      Integer32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-create
+      STATUS      deprecated
+      DESCRIPTION
+         "The threshold for generating a slapmMonitoredEventOkay
+         notification, signalling that a monitored maximum
+         transfer rate has fallen to an acceptable level.
+
+         A value of zero for this object is returned when the
+         slapmPolicyMonitorControl monitorMaxRate(1) is not
+         enabled.  When enabled the default value for this object
+         is the max rate value specified in the associated
+         action definition minus 10%.  If the action definition
+         doesn't have a max rate defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMaxRate(1)
+         is selected.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableAggregateTraps(3), MUST be selected in
+         order for any notification relating to this entry to
+         potentially be generated."
+      ::= { slapmPolicyMonitorEntry 14 }
+
+   slapmPolicyMonitorMaxDelayHigh OBJECT-TYPE
+      SYNTAX      Integer32
+      UNITS       "milliseconds"
+      MAX-ACCESS  read-create
+      STATUS      deprecated
+      DESCRIPTION
+         "The threshold for generating a
+         slapmMonitoredEventNotAchieved notification, signalling
+         that a monitored maximum delay rate has been exceeded.
+
+         A slapmMonitoredEventNotAchieved notification is not
+
+
+
+White                         Experimental                     [Page 26]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         generated again for an slapmPolicyMonitorEntry until
+         the maximum delay rate falls below
+         slapmPolicyMonitorMaxDelayLow (a slapmMonitoredEventOkay
+         notification is then transmitted) and raises above
+         slapmPolicyMonitorMaxDelayHigh.  This behavior reduces
+         the slapmMonitoredEventNotAchieved notifications that are
+         transmitted.
+
+         A value of zero for this object is returned when the
+         slapmPolicyMonitorControl monitorMaxDelay(4) is not
+         enabled.  When enabled the default value for this object
+         is the max delay value specified in the associated
+         action definition plus 10%.  If the action definition
+         doesn't have a max delay defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMaxDelay(4)
+         is selected.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableAggregateTraps(3), MUST be selected
+         in order for any notification relating to this entry to
+         potentially be generated."
+      ::= { slapmPolicyMonitorEntry 15 }
+
+   slapmPolicyMonitorMaxDelayLow OBJECT-TYPE
+      SYNTAX      Integer32
+      UNITS       "milliseconds"
+      MAX-ACCESS  read-create
+      STATUS      deprecated
+      DESCRIPTION
+         "The threshold for generating a slapmMonitoredEventOkay
+         notification, signalling that a monitored maximum delay
+         rate has fallen to an acceptable level.
+
+         A value of zero for this object is returned when the
+         slapmPolicyMonitorControl monitorMaxDelay(4) is not
+         enabled.  When enabled the default value for this object
+         is the max delay value specified in the associated
+         action definition minus 10%.  If the action definition
+         doesn't have a max delay defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMaxDelay(4)
+         is selected.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableAggregateTraps(3), MUST be selected
+         in order for any notification relating to this entry to
+         potentially be generated."
+
+
+
+White                         Experimental                     [Page 27]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      ::= { slapmPolicyMonitorEntry 16 }
+
+   slapmPolicyMonitorMinInRateNotAchieves OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "The number of times that a minimum transfer in rate
+          was not achieved."
+      ::= { slapmPolicyMonitorEntry 17 }
+
+   slapmPolicyMonitorMaxInRateExceeds OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "The number of times that a maximum transfer in rate
+          was exceeded."
+      ::= { slapmPolicyMonitorEntry 18 }
+
+   slapmPolicyMonitorMaxDelayExceeds OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "The number of times that a maximum delay in rate
+          was exceeded."
+      ::= { slapmPolicyMonitorEntry 19 }
+
+   slapmPolicyMonitorMinOutRateNotAchieves OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "The number of times that a minimum transfer out rate
+          was not achieved."
+      ::= { slapmPolicyMonitorEntry 20 }
+
+   slapmPolicyMonitorMaxOutRateExceeds OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "The number of times that a maximum transfer out rate
+          was exceeded."
+      ::= { slapmPolicyMonitorEntry 21 }
+
+   slapmPolicyMonitorCurrentDelayRate OBJECT-TYPE
+
+
+
+White                         Experimental                     [Page 28]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      SYNTAX      Gauge32
+      UNITS       "milliseconds"
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+          "The current delay rate for this entry.  This is
+          calculated by taking the average of the TCP
+          round trip times for all associating
+          slapmSubcomponentTable entries within a interval."
+      ::= { slapmPolicyMonitorEntry 22 }
+
+   slapmPolicyMonitorRowStatus  OBJECT-TYPE
+      SYNTAX       RowStatus
+      MAX-ACCESS   read-create
+      STATUS       deprecated
+      DESCRIPTION
+        "This object allows entries to be created and deleted
+         in the slapmPolicyMonitorTable.  An entry in this table
+         is deleted by setting this object to destroy(6).
+
+         Removal of a corresponding (same policy and traffic profile
+         names) slapmPolicyStatsEntry has the side effect of the
+         automatic deletion an entry in this table."
+      ::= { slapmPolicyMonitorEntry 23 }
+
+   -- Subcomponent Table
+
+   slapmSubcomponentTable OBJECT-TYPE
+       SYNTAX      SEQUENCE OF SlapmSubcomponentEntry
+       MAX-ACCESS  not-accessible
+       STATUS      current
+       DESCRIPTION
+            "Defines a table to provide information on the
+            individually components that are mapped to
+            a policy rule (or old traffic profile).
+
+            The indexing for this table is designed to support
+            the use of an SNMP GET-NEXT operation using only
+            the remote address and remote port as a way for
+            a management station to retrieve the table entries
+            relating to a particular client."
+       ::= { slapmTableObjects 3 }
+
+   slapmSubcomponentEntry OBJECT-TYPE
+       SYNTAX      SlapmSubcomponentEntry
+       MAX-ACCESS  not-accessible
+       STATUS      current
+       DESCRIPTION
+
+
+
+White                         Experimental                     [Page 29]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+            "Describes a particular subcomponent entry.  This
+            table does not have an OwnerIndex as
+            part of its indexing since this table's contents
+            is intended to span multiple users."
+       INDEX {
+               slapmSubcomponentRemAddress,
+               slapmSubcomponentRemPort,
+               slapmSubcomponentLocalAddress,
+               slapmSubcomponentLocalPort
+             }
+       ::= { slapmSubcomponentTable 1 }
+
+   SlapmSubcomponentEntry ::=
+       SEQUENCE {
+            slapmSubcomponentRemAddress            OCTET STRING,
+            slapmSubcomponentRemPort               Integer32,
+            slapmSubcomponentLocalAddress          OCTET STRING,
+            slapmSubcomponentLocalPort             Integer32,
+            slapmSubcomponentProtocol              INTEGER,
+            slapmSubcomponentSystemAddress         OCTET STRING,
+            slapmSubcomponentPolicyName            SlapmNameType,
+            slapmSubcomponentTrafficProfileName    SlapmNameType,
+            slapmSubcomponentLastActivity          DateAndTime,
+            slapmSubcomponentInOctets              Counter32,
+            slapmSubcomponentOutOctets             Counter32,
+            slapmSubcomponentTcpOutBufferedOctets  Counter32,
+            slapmSubcomponentTcpInBufferedOctets   Counter32,
+            slapmSubcomponentTcpReXmts             Counter32,
+            slapmSubcomponentTcpRoundTripTime      Integer32,
+            slapmSubcomponentTcpRoundTripVariance  Integer32,
+            slapmSubcomponentInPdus                Counter32,
+            slapmSubcomponentOutPdus               Counter32,
+            slapmSubcomponentApplName              SnmpAdminString,
+            slapmSubcomponentMonitorStatus         SlapmStatus,
+            slapmSubcomponentMonitorIntTime        DateAndTime,
+            slapmSubcomponentMonitorCurrentInRate  Gauge32,
+            slapmSubcomponentMonitorCurrentOutRate Gauge32,
+            slapmSubcomponentPolicyRuleIndex       Unsigned32
+         }
+
+   slapmSubcomponentRemAddress OBJECT-TYPE
+      SYNTAX      OCTET STRING (SIZE(0 | 4 | 16))
+      MAX-ACCESS  not-accessible
+      STATUS      current
+      DESCRIPTION
+         "Indicate the remote address of a subcomponent.
+         A remote address can be either an ipv4 address in which
+         case 4 octets are required or as an ipv6 address that
+
+
+
+White                         Experimental                     [Page 30]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         requires 16 octets.  The value of this subidentifier
+         is a zero length octet string when this entry relates
+         to a UDP listener."
+      ::= { slapmSubcomponentEntry 1 }
+
+   slapmSubcomponentRemPort OBJECT-TYPE
+      SYNTAX      Integer32(0..65535)
+      MAX-ACCESS  not-accessible
+      STATUS      current
+      DESCRIPTION
+         "Indicate the remote port of a subcomponent.
+         The value of this subidentifier
+         is 0 when this entry relates to a UDP listener."
+      ::= { slapmSubcomponentEntry 2 }
+
+   slapmSubcomponentLocalAddress OBJECT-TYPE
+      SYNTAX      OCTET STRING (SIZE(4 | 16))
+      MAX-ACCESS  not-accessible
+      STATUS      current
+      DESCRIPTION
+         "Indicate the local address of a subcomponent.
+         A local address can be either an ipv4 address in which
+         case 4 octets are required or as an ipv6 address that
+         requires 16 octets."
+      ::= { slapmSubcomponentEntry 3 }
+
+   slapmSubcomponentLocalPort OBJECT-TYPE
+      SYNTAX      Integer32(0..65535)
+      MAX-ACCESS  not-accessible
+
+      STATUS      current
+      DESCRIPTION
+         "Indicate the local port of a subcomponent."
+      ::= { slapmSubcomponentEntry 4 }
+
+   slapmSubcomponentProtocol OBJECT-TYPE
+      SYNTAX      INTEGER {
+                             udpListener(1),
+                             tcpConnection(2)
+                          }
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Indicate the protocol in use that identifies the
+         type of subcomponent."
+      ::= { slapmSubcomponentEntry 5 }
+
+   slapmSubcomponentSystemAddress OBJECT-TYPE
+
+
+
+White                         Experimental                     [Page 31]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      SYNTAX      OCTET STRING (SIZE(0 | 4 | 16))
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Address of a system that an Policy definition relates to.
+         A zero length octet string can be used to indicate that
+         only a single system is being represented.
+         Otherwise, the length of the octet string should be
+         4 for an ipv4 address and 16 for an ipv6 address."
+      ::= { slapmSubcomponentEntry 6 }
+
+   slapmSubcomponentPolicyName OBJECT-TYPE
+      SYNTAX      SlapmNameType
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "Policy name that this entry relates to.
+
+         This object, along with slapmSubcomponentTrafficProfileName,
+         have been replaced with the use of an unsigned integer
+         index that is mapped to an slapmPolicyNameEntry to actually
+         identify policy naming."
+      ::= { slapmSubcomponentEntry 7 }
+
+   slapmSubcomponentTrafficProfileName OBJECT-TYPE
+      SYNTAX      SlapmNameType
+      MAX-ACCESS  read-only
+      STATUS      deprecated
+      DESCRIPTION
+         "The corresponding traffic profile name.
+
+         This object, along with slapmSubcomponentProfileName,
+         have been replaced with the use of an unsigned integer
+         index that is mapped to an slapmPolicyNameEntry to
+         actually identify policy naming."
+      ::= { slapmSubcomponentEntry 8 }
+
+  slapmSubcomponentLastActivity OBJECT-TYPE
+      SYNTAX      DateAndTime
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The date and timestamp of when this entry was last used."
+      DEFVAL { '0000000000000000'H }
+      ::= { slapmSubcomponentEntry 9 }
+
+   slapmSubcomponentInOctets OBJECT-TYPE
+       SYNTAX      Counter32
+
+
+
+White                         Experimental                     [Page 32]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+       MAX-ACCESS  read-only
+       STATUS      current
+       DESCRIPTION
+           "The number of octets received from IP for this
+           connection."
+       ::= { slapmSubcomponentEntry 10 }
+
+   slapmSubcomponentOutOctets OBJECT-TYPE
+       SYNTAX      Counter32
+       MAX-ACCESS  read-only
+       STATUS      current
+       DESCRIPTION
+           "The number of octets sent to IP for this connection."
+       ::= { slapmSubcomponentEntry 11 }
+
+   slapmSubcomponentTcpOutBufferedOctets OBJECT-TYPE
+       SYNTAX      Counter32
+       MAX-ACCESS  read-only
+       STATUS      current
+       DESCRIPTION
+           "Number of outgoing octets buffered.  The value
+           of this object is zero when the entry is not
+           for a TCP connection."
+       ::= { slapmSubcomponentEntry 12 }
+
+   slapmSubcomponentTcpInBufferedOctets OBJECT-TYPE
+       SYNTAX      Counter32
+       MAX-ACCESS  read-only
+       STATUS      current
+       DESCRIPTION
+           "Number of incoming octets buffered.  The value
+           of this object is zero when the entry is not
+           for a TCP connection."
+       ::= { slapmSubcomponentEntry 13 }
+
+   slapmSubcomponentTcpReXmts OBJECT-TYPE
+       SYNTAX      Counter32
+       MAX-ACCESS  read-only
+       STATUS      current
+       DESCRIPTION
+           "Number of retransmissions.  The value
+           of this object is zero when the entry is not
+           for a TCP connection."
+       ::= { slapmSubcomponentEntry 14 }
+
+   slapmSubcomponentTcpRoundTripTime OBJECT-TYPE
+       SYNTAX       Integer32
+       UNITS        "milliseconds"
+
+
+
+White                         Experimental                     [Page 33]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+       MAX-ACCESS   read-only
+       STATUS       current
+       DESCRIPTION
+           "The amount of time that has elapsed, measured in
+           milliseconds, from when the last TCP segment was
+           transmitted by the TCP Stack until the ACK was
+           received.
+
+           The value of this object is zero when the entry is not
+           for a TCP connection."
+       ::= { slapmSubcomponentEntry 15 }
+
+   slapmSubcomponentTcpRoundTripVariance OBJECT-TYPE
+       SYNTAX       Integer32
+       MAX-ACCESS   read-only
+       STATUS       current
+       DESCRIPTION
+           "Round trip time variance.
+
+           The value of this object is zero when the entry is not
+           for a TCP connection."
+       ::= { slapmSubcomponentEntry 16 }
+
+   slapmSubcomponentInPdus OBJECT-TYPE
+       SYNTAX       Counter32
+       MAX-ACCESS   read-only
+       STATUS       current
+       DESCRIPTION
+           "The number of protocol related data units transferred
+           inbound:
+
+             slapmSubcomponentProtocol    PDU Type
+
+                  udpListener(1)          UDP datagrams
+                  tcpConnection(2)        TCP segments"
+       ::= { slapmSubcomponentEntry 17 }
+
+   slapmSubcomponentOutPdus OBJECT-TYPE
+       SYNTAX       Counter32
+       MAX-ACCESS   read-only
+       STATUS       current
+       DESCRIPTION
+           "The number of protocol related data units transferred
+           outbound:
+
+             slapmSubcomponentProtocol    PDU Type
+
+                  udpListener(1)          UDP datagrams
+
+
+
+White                         Experimental                     [Page 34]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+                  tcpConnection(2)        TCP segments"
+       ::= { slapmSubcomponentEntry 18 }
+
+   slapmSubcomponentApplName OBJECT-TYPE
+       SYNTAX       SnmpAdminString (SIZE(0..32))
+       MAX-ACCESS   read-only
+       STATUS       current
+       DESCRIPTION
+           "The application name associated with this entry if known,
+           otherwise a zero-length octet string is returned as the
+           value of this object."
+       ::= { slapmSubcomponentEntry 19 }
+
+   slapmSubcomponentMonitorStatus OBJECT-TYPE
+      SYNTAX      SlapmStatus
+      MAX-ACCESS  read-only
+      STATUS       current
+      DESCRIPTION
+         "The value of this object indicates when a monitored
+         value has exceeded a threshold or isn't meeting the
+         defined service level.  Only the following SlapmStatus
+         BITS setting can be reported here:
+
+                     monitorMinInRateNotAchieved(5),
+                     monitorMaxInRateExceeded(6),
+                     monitorMaxDelayExceeded(7),
+                     monitorMinOutRateNotAchieved(8),
+                     monitorMaxOutRateExceeded(9)
+
+         This object only has meaning when an corresponding
+         slapmPolicyMonitorEntry exists with the
+         slapmPolicyMonitorControl BITS setting
+         monitorSubcomponents(5) enabled."
+      ::= { slapmSubcomponentEntry 20 }
+
+   slapmSubcomponentMonitorIntTime OBJECT-TYPE
+      SYNTAX      DateAndTime
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The timestamp for when the last interval ended.
+
+         This object only has meaning when an corresponding
+         slapmPRMonEntry (or old slapmPolicyMonitorEntry)
+         exists with the slapmPRMonControl (or
+         slapmPolicyMonitorControl) BITS setting
+         monitorSubcomponents(5) enabled.  All of the
+         octets returned when monitoring is not in effect
+
+
+
+White                         Experimental                     [Page 35]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         must be zero."
+      DEFVAL { '0000000000000000'H }
+      ::= { slapmSubcomponentEntry 21 }
+
+   slapmSubcomponentMonitorCurrentInRate OBJECT-TYPE
+      SYNTAX      Gauge32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Using the value of the corresponding
+         slapmPRMonInterval (or slapmPolicyMonitorInterval),
+         slapmSubcomponentStatsInOctets
+         is divided by slapmSubcomponentMonitorInterval to determine
+         the current in transfer rate.
+
+         This object only has meaning when an corresponding
+         slapmPRMonEntry (or slapmPolicyMonitorEntry)
+         exists with the slapmPRMonControl (or
+         slapmPolicyMonitorControl) BITS setting
+         monitorSubcomponents(5) enabled.  The value of this
+         object is zero when monitoring is not in effect."
+      ::= { slapmSubcomponentEntry 22 }
+
+   slapmSubcomponentMonitorCurrentOutRate OBJECT-TYPE
+      SYNTAX      Gauge32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Using the value of the corresponding slapmPRMonInterval (or
+         slapmPolicyMonitorInterva)l, slapmSubcomponentStatsOutOctets
+         is divided by slapmPRMonInterval (or
+         slapmPolicyMonitorInterval) to determine the
+         current out transfer rate.
+
+         This object only has meaning when an corresponding
+         slapmPRMonEntry (or slapmPolicyMonitorEntry) exists with
+         the slapmPRMonControl (or slapmPolicyMonitorControl)
+         BITS setting monitorSubcomponents(5) enabled.  The value
+         of this object is zero when monitoring is not in effect."
+      ::= { slapmSubcomponentEntry 23 }
+
+  slapmSubcomponentPolicyRuleIndex OBJECT-TYPE
+     SYNTAX      Unsigned32 (0..4294967295)
+     MAX-ACCESS  read-only
+     STATUS      current
+     DESCRIPTION
+
+
+
+White                         Experimental                     [Page 36]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+        "Points to an slapmPolicyNameEntry when combined with
+        slapmSubcomponentSystemAddress to indicate the
+        policy naming that relates to this entry.
+
+        A value of 0 for this object MUST be returned when
+        the corresponding slapmSubcomponentEntry has no
+        policy rule associated with it."
+     ::= { slapmSubcomponentEntry 24 }
+
+   -- Table that maps an unsigned integer index to whatever
+   -- names a policy rule.
+
+   slapmPolicyNameTable OBJECT-TYPE
+      SYNTAX SEQUENCE OF SlapmPolicyNameEntry
+      MAX-ACCESS not-accessible
+      STATUS current
+      DESCRIPTION
+          "Provides the mapping between a policy index as a
+          unsigned 32 bit integer and the unique name associated
+          with a policy rule."
+     ::= { slapmTableObjects 4 }
+
+   slapmPolicyNameEntry OBJECT-TYPE
+      SYNTAX SlapmPolicyNameEntry
+      MAX-ACCESS not-accessible
+      STATUS current
+      DESCRIPTION
+          "Defines an entry in the slapmPolicyNameTable."
+      INDEX {
+             slapmPolicyNameSystemAddress,
+             slapmPolicyNameIndex
+            }
+      ::= { slapmPolicyNameTable 1 }
+
+   SlapmPolicyNameEntry ::=
+      SEQUENCE {
+          slapmPolicyNameSystemAddress   OCTET STRING,
+          slapmPolicyNameIndex           Unsigned32,
+          slapmPolicyNameOfRule          SlapmPolicyRuleName
+      }
+
+   slapmPolicyNameSystemAddress OBJECT-TYPE
+      SYNTAX      OCTET STRING (SIZE(0 | 4 | 16))
+      MAX-ACCESS  not-accessible
+      STATUS      current
+      DESCRIPTION
+         "Address of a system that an Policy rule definition relates
+         to.  A zero length octet string must be used to indicate
+
+
+
+White                         Experimental                     [Page 37]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         that only a single system is being represented.
+         Otherwise, the length of the octet string must be
+         4 for an ipv4 address or 16 for an ipv6 address."
+      ::= { slapmPolicyNameEntry 1 }
+
+   slapmPolicyNameIndex OBJECT-TYPE
+      SYNTAX      Unsigned32 (1..4294967295)
+      MAX-ACCESS  not-accessible
+      STATUS      current
+      DESCRIPTION
+          "A locally arbitrary, but unique identifier associated
+          with this table entry.  This value is not expected to
+          remain constant across reIPLs."
+      ::= { slapmPolicyNameEntry 2 }
+
+   slapmPolicyNameOfRule OBJECT-TYPE
+      SYNTAX      SlapmPolicyRuleName
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The unique name that identifies a policy rule definition."
+      ::= { slapmPolicyNameEntry 3 }
+
+   -- Sla Performance Monitoring Policy Rule Statistics Table
+
+   slapmPolicyRuleStatsTable OBJECT-TYPE
+      SYNTAX SEQUENCE OF SlapmPolicyRuleStatsEntry
+      MAX-ACCESS not-accessible
+      STATUS current
+      DESCRIPTION
+          "Provides statistics on a per system and a per policy
+          rule basis."
+     ::= { slapmTableObjects 5 }
+
+   slapmPolicyRuleStatsEntry OBJECT-TYPE
+      SYNTAX SlapmPolicyRuleStatsEntry
+      MAX-ACCESS not-accessible
+      STATUS current
+      DESCRIPTION
+          "Defines an entry in the slapmPolicyRuleStatsTable.
+          This table defines a set of statistics that is kept
+          on a per system and per policy rule basis.
+
+          Entries in this table are not created or deleted via SNMP
+          but reflect the set of policy rule definitions known
+          at a system."
+      INDEX {
+             slapmPolicyNameSystemAddress,
+
+
+
+White                         Experimental                     [Page 38]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+             slapmPolicyNameIndex
+            }
+      ::= { slapmPolicyRuleStatsTable 1 }
+
+   SlapmPolicyRuleStatsEntry ::=
+      SEQUENCE {
+          slapmPolicyRuleStatsOperStatus     INTEGER,
+          slapmPolicyRuleStatsActiveConns    Gauge32,
+          slapmPolicyRuleStatsTotalConns     Counter32,
+          slapmPolicyRuleStatsLActivated     DateAndTime,
+          slapmPolicyRuleStatsLastMapping    DateAndTime,
+          slapmPolicyRuleStatsInOctets       Counter32,
+          slapmPolicyRuleStatsOutOctets      Counter32,
+          slapmPolicyRuleStatsConnLimit      Unsigned32,
+          slapmPolicyRuleStatsCountAccepts   Counter32,
+          slapmPolicyRuleStatsCountDenies    Counter32,
+          slapmPolicyRuleStatsInDiscards     Counter32,
+          slapmPolicyRuleStatsOutDiscards    Counter32,
+          slapmPolicyRuleStatsInPackets      Counter32,
+          slapmPolicyRuleStatsOutPackets     Counter32,
+          slapmPolicyRuleStatsInProOctets    Counter32,
+          slapmPolicyRuleStatsOutProOctets   Counter32,
+          slapmPolicyRuleStatsMinRate        Unsigned32,
+          slapmPolicyRuleStatsMaxRate        Unsigned32,
+          slapmPolicyRuleStatsMaxDelay       Unsigned32,
+          slapmPolicyRuleStatsTotalRsvpFlows Counter32,
+          slapmPolicyRuleStatsActRsvpFlows   Gauge32
+      }
+
+   slapmPolicyRuleStatsOperStatus OBJECT-TYPE
+      SYNTAX      INTEGER {
+                             inactive(1),
+                             active(2),
+                             deleteNeeded(3)
+                          }
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The state of a policy entry:
+
+           inactive(1)      - An policy entry was either defined
+                              by local system definition or
+                              discovered via
+                              a directory search but has not been
+                              activated (not currently being used).
+           active(2)        - Policy entry is being used to affect
+                              traffic flows.
+           deleteNeeded(3)  - Either though local implementation
+
+
+
+White                         Experimental                     [Page 39]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+                              dependent methods or by discovering
+                              that the directory entry corresponding
+                              to this table entry no longer
+                              exists and slapmPolicyPurgeTime needs
+                              to expire before attempting to remove
+                              the corresponding slapmPolicyStatsEntry
+                              and any dependent slapmPolicyMonitor
+                              table entries.
+         Note: a policy rule in a state other than
+         active(2) is not being used to affect traffic flows."
+      ::= { slapmPolicyRuleStatsEntry 1 }
+
+   slapmPolicyRuleStatsActiveConns OBJECT-TYPE
+      SYNTAX      Gauge32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The number of active TCP connections that are
+         affected by the corresponding policy entry."
+      ::= { slapmPolicyRuleStatsEntry 2 }
+
+   slapmPolicyRuleStatsTotalConns OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The number of total TCP connections that are
+         affected by the corresponding policy entry."
+      ::= { slapmPolicyRuleStatsEntry 3 }
+
+   slapmPolicyRuleStatsLActivated OBJECT-TYPE
+      SYNTAX      DateAndTime
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The timestamp for when the corresponding policy entry
+         was last activated.  The value of this object serves as
+         the discontinuity event indicator when polling entries
+         in this table.  The value of this object is updated on
+         transition of slapmPolicyRuleStatsOperStatus into the
+         active(2) state."
+      DEFVAL { '0000000000000000'H }
+      ::= { slapmPolicyRuleStatsEntry 4 }
+
+   slapmPolicyRuleStatsLastMapping OBJECT-TYPE
+      SYNTAX      DateAndTime
+      MAX-ACCESS  read-only
+      STATUS      current
+
+
+
+White                         Experimental                     [Page 40]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      DESCRIPTION
+         "The timestamp for when the last time
+         that the associated policy entry was used."
+      DEFVAL { '0000000000000000'H }
+      ::= { slapmPolicyRuleStatsEntry 5 }
+
+   slapmPolicyRuleStatsInOctets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The number of octets that was received by IP for an
+         entity that map to this entry."
+      ::= { slapmPolicyRuleStatsEntry 6 }
+
+   slapmPolicyRuleStatsOutOctets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The number of octets that was transmitted by IP for an
+         entity that map to this entry."
+      ::= { slapmPolicyRuleStatsEntry 7 }
+
+   slapmPolicyRuleStatsConnLimit OBJECT-TYPE
+      SYNTAX      Unsigned32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The limit for the number of active TCP connections that
+         are allowed for this policy definition.  A value of zero
+         for this object implies that a connection limit has not
+         been specified."
+      ::= { slapmPolicyRuleStatsEntry 8 }
+
+   slapmPolicyRuleStatsCountAccepts OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "This counter is incremented when a policy action's
+          Permission value is set to Accept and a session
+          (TCP connection) is accepted."
+      ::= { slapmPolicyRuleStatsEntry 9 }
+
+   slapmPolicyRuleStatsCountDenies OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+
+
+
+White                         Experimental                     [Page 41]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      STATUS      current
+      DESCRIPTION
+          "This counter is incremented when a policy action's
+          Permission value is set to Deny and a session is denied,
+          or when a session (TCP connection) is rejected due to a
+          policy's connection limit (slapmPolicyRuleStatsConnectLimit)
+          being reached."
+      ::= { slapmPolicyRuleStatsEntry 10 }
+
+   slapmPolicyRuleStatsInDiscards OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "This counter counts the number of in octets discarded.
+          This occurs when an error is detected.  Examples of this
+          are buffer overflow, checksum error, or bad packet
+          format."
+      ::= { slapmPolicyRuleStatsEntry 11 }
+
+   slapmPolicyRuleStatsOutDiscards OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "This counter counts the number of out octets discarded.
+          Examples of this are buffer overflow, checksum error, or
+          bad packet format."
+      ::= { slapmPolicyRuleStatsEntry 12 }
+
+   slapmPolicyRuleStatsInPackets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "This counter counts the number of in packets received
+          that relate to this policy entry from IP."
+      ::= { slapmPolicyRuleStatsEntry 13 }
+
+   slapmPolicyRuleStatsOutPackets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "This counter counts the number of out packets sent
+          by IP that relate to this policy entry."
+      ::= { slapmPolicyRuleStatsEntry 14 }
+
+
+
+
+White                         Experimental                     [Page 42]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+   slapmPolicyRuleStatsInProOctets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "This counter counts the number of in octets that are
+          determined to be within profile."
+      ::= { slapmPolicyRuleStatsEntry 15 }
+
+   slapmPolicyRuleStatsOutProOctets OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "This counter counts the number of out octets that are
+          determined to be within profile."
+      ::= { slapmPolicyRuleStatsEntry 16 }
+
+   slapmPolicyRuleStatsMinRate OBJECT-TYPE
+      SYNTAX      Unsigned32
+      UNITS       "Kilobits per second"
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The minimum transfer rate defined for this entry."
+      ::= { slapmPolicyRuleStatsEntry 17 }
+
+   slapmPolicyRuleStatsMaxRate OBJECT-TYPE
+      SYNTAX      Unsigned32
+      UNITS       "Kilobits per second"
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The maximum transfer rate defined for this entry."
+      ::= { slapmPolicyRuleStatsEntry 18 }
+
+   slapmPolicyRuleStatsMaxDelay OBJECT-TYPE
+      SYNTAX      Unsigned32
+      UNITS       "milliseconds"
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The maximum delay defined for this entry."
+      ::= { slapmPolicyRuleStatsEntry 19 }
+
+   slapmPolicyRuleStatsTotalRsvpFlows OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+
+
+
+White                         Experimental                     [Page 43]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      STATUS      current
+      DESCRIPTION
+         "Total number of RSVP flows that have be activated."
+      ::= { slapmPolicyRuleStatsEntry 20 }
+
+   slapmPolicyRuleStatsActRsvpFlows OBJECT-TYPE
+      SYNTAX      Gauge32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Current number of active RSVP flows."
+      ::= { slapmPolicyRuleStatsEntry 21 }
+
+   -- SLA Performance Monitoring Policy Rule Monitor Table
+
+   slapmPRMonTable OBJECT-TYPE
+      SYNTAX SEQUENCE OF SlapmPRMonEntry
+      MAX-ACCESS not-accessible
+      STATUS current
+      DESCRIPTION
+          "Provides a method of monitoring policies and their
+          effect at a system."
+     ::= { slapmTableObjects 6 }
+
+   slapmPRMonEntry OBJECT-TYPE
+      SYNTAX SlapmPRMonEntry
+      MAX-ACCESS not-accessible
+      STATUS current
+      DESCRIPTION
+          "Defines an entry in the slapmPRMonTable. This
+          table defines which policies should be monitored on a
+          per policy rule basis.
+
+          An attempt to set any read-create object defined within an
+          slapmPRMonEntry while the value of slapmPRMonRowStatus is
+          active(1) will result in an inconsistentValue error."
+      INDEX {
+             slapmPRMonOwnerIndex,
+             slapmPRMonSystemAddress,
+             slapmPRMonIndex
+            }
+      ::= { slapmPRMonTable 1 }
+
+   SlapmPRMonEntry ::=
+      SEQUENCE {
+          slapmPRMonOwnerIndex              SnmpAdminString,
+          slapmPRMonSystemAddress           OCTET STRING,
+          slapmPRMonIndex                   Unsigned32,
+
+
+
+White                         Experimental                     [Page 44]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+          slapmPRMonControl                 BITS,
+          slapmPRMonStatus                  SlapmStatus,
+          slapmPRMonInterval                Unsigned32,
+          slapmPRMonIntTime                 DateAndTime,
+          slapmPRMonCurrentInRate           Gauge32,
+          slapmPRMonCurrentOutRate          Gauge32,
+          slapmPRMonMinRateLow              Unsigned32,
+          slapmPRMonMinRateHigh             Unsigned32,
+          slapmPRMonMaxRateHigh             Unsigned32,
+          slapmPRMonMaxRateLow              Unsigned32,
+          slapmPRMonMaxDelayHigh            Unsigned32,
+          slapmPRMonMaxDelayLow             Unsigned32,
+          slapmPRMonMinInRateNotAchieves    Counter32,
+          slapmPRMonMaxInRateExceeds        Counter32,
+          slapmPRMonMaxDelayExceeds         Counter32,
+          slapmPRMonMinOutRateNotAchieves   Counter32,
+          slapmPRMonMaxOutRateExceeds       Counter32,
+          slapmPRMonCurrentDelayRate        Gauge32,
+          slapmPRMonRowStatus               RowStatus
+      }
+
+   slapmPRMonOwnerIndex OBJECT-TYPE
+      SYNTAX      SnmpAdminString (SIZE(0..16))
+      MAX-ACCESS  not-accessible
+      STATUS      current
+      DESCRIPTION
+         "To facilitate the provisioning of access control by a
+         security administrator using the View-Based Access
+         Control Model (RFC 2575, VACM) for tables in which
+         multiple users may need to independently create or modify
+         entries, the initial index is used as an 'owner index'.
+         Such an initial index has a syntax of SnmpAdminString,
+         and can thus be trivially mapped to a securityName or
+         groupName as defined in VACM, in accordance with a
+         security policy.
+
+         All entries in that table belonging to a particular user
+         will have the same value for this initial index.  For a
+         given user's entries in a particular table, the object
+         identifiers for the information in these entries will
+         have the same subidentifiers (except for the 'column'
+         subidentifier) up to the end of the encoded owner index.
+         To configure VACM to permit access to this portion of the
+         table, one would create vacmViewTreeFamilyTable entries
+         with the value of vacmViewTreeFamilySubtree including the
+         owner index portion, and vacmViewTreeFamilyMask
+         'wildcarding' the column subidentifier.  More elaborate
+         configurations are possible."
+
+
+
+White                         Experimental                     [Page 45]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      ::= { slapmPRMonEntry 1 }
+
+   slapmPRMonSystemAddress OBJECT-TYPE
+      SYNTAX      OCTET STRING (SIZE(0 | 4 | 16))
+      MAX-ACCESS  not-accessible
+      STATUS      current
+      DESCRIPTION
+         "Address of a system that an Policy definition relates to.
+         A zero length octet string can be used to indicate that
+         only a single system is being represented.
+         Otherwise, the length of the octet string should be
+         4 for an ipv4 address and 16 for an ipv6 address."
+      ::= { slapmPRMonEntry 2 }
+
+   slapmPRMonIndex OBJECT-TYPE
+      SYNTAX      Unsigned32
+      MAX-ACCESS  not-accessible
+      STATUS      current
+      DESCRIPTION
+         "An slapmPolicyNameTable index, slapmPolicyNameIndex,
+         that points to the unique name associated with a
+         policy rule definition."
+      ::= { slapmPRMonEntry 3 }
+
+   slapmPRMonControl OBJECT-TYPE
+      SYNTAX      BITS {
+                        monitorMinRate(0),
+                        monitorMaxRate(1),
+                        monitorMaxDelay(2),
+                        enableAggregateTraps(3),
+                        enableSubcomponentTraps(4),
+                        monitorSubcomponents(5)
+                       }
+      MAX-ACCESS  read-create
+      STATUS      current
+      DESCRIPTION
+         "The value of this object determines the type and level
+         of monitoring that is applied to a policy rule.  The
+         value of this object can't be changed once the table
+         entry that it is a part of is activated via a
+         slapmPRMonRowStatus transition to active state.
+
+             monitorMinRate(0) - Monitor minimum transfer rate.
+             monitorMaxRate(1) - Monitor maximum transfer rate.
+             monitorMaxDelay(2) - Monitor maximum delay.
+             enableAggregateTraps(3) - The enableAggregateTraps(3)
+                   BITS setting enables notification generation
+                   when monitoring a policy rule as an
+
+
+
+White                         Experimental                     [Page 46]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+                   aggregate using the values in the corresponding
+                   slapmPRMonStatsEntry.  By default this function
+                   is not enabled.
+             enableSubcomponentTraps(4) - This BITS setting enables
+                   notification generation when monitoring all
+                   subcomponents that are mapped to an corresponding
+                   slapmPRMonStatsEntry.  By default this
+                   function is not enabled.
+             monitorSubcomponents(5) - This BITS setting enables
+                   monitoring of each subcomponent (typically a
+                   TCP connection or UDP listener) individually."
+      DEFVAL   { { monitorMinRate, monitorMaxRate,
+                   monitorMaxDelay } }
+      ::= { slapmPRMonEntry 4 }
+
+   slapmPRMonStatus OBJECT-TYPE
+      SYNTAX      SlapmStatus
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The value of this object indicates when a monitored
+         value has not meet a threshold or isn't meeting the
+         defined service level.  The SlapmStatus TEXTUAL-CONVENTION
+         defines two levels of not meeting a threshold.  The first
+         set:
+                     slaMinInRateNotAchieved(0),
+                     slaMaxInRateExceeded(1),
+                     slaMaxDelayExceeded(2),
+                     slaMinOutRateNotAchieved(3),
+                     slaMaxOutRateExceeded(4)
+
+         are used to indicate when the SLA as an aggregate is
+         not meeting a threshold while the second set:
+
+                     monitorMinInRateNotAchieved(5),
+                     monitorMaxInRateExceeded(6),
+                     monitorMaxDelayExceeded(7),
+                     monitorMinOutRateNotAchieved(8),
+                     monitorMaxOutRateExceeded(9)
+
+         indicate that at least one subcomponent is not meeting
+         a threshold."
+      ::= { slapmPRMonEntry 5 }
+
+   slapmPRMonInterval OBJECT-TYPE
+      SYNTAX      Unsigned32 (15..86400) -- 15 second min, 24 hour max
+      UNITS       "seconds"
+      MAX-ACCESS  read-create
+
+
+
+White                         Experimental                     [Page 47]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      STATUS      current
+      DESCRIPTION
+         "The number of seconds that defines the sample period."
+      DEFVAL   {20}    -- 20 seconds
+      ::= { slapmPRMonEntry 6 }
+
+   slapmPRMonIntTime OBJECT-TYPE
+      SYNTAX      DateAndTime
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "The timestamp for when the last interval ended."
+      DEFVAL { '0000000000000000'H }
+      ::= { slapmPRMonEntry 7 }
+
+   slapmPRMonCurrentInRate OBJECT-TYPE
+      SYNTAX      Gauge32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Using the value of the corresponding
+         slapmPRMonInterval, slapmPolicyRuleStatsInOctets
+         is sampled and then divided by slapmPRMonInterval
+         to determine the current in transfer rate."
+      ::= { slapmPRMonEntry 8 }
+
+   slapmPRMonCurrentOutRate OBJECT-TYPE
+      SYNTAX      Gauge32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+         "Using the value of the corresponding
+         slapmPolicyMonInterval, slapmPolicyRuleStatsOutOctets
+         is sampled and then divided by slapmPRMonInterval
+         to determine the current out transfer rate."
+      ::= { slapmPRMonEntry 9 }
+
+   slapmPRMonMinRateLow OBJECT-TYPE
+      SYNTAX      Unsigned32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-create
+      STATUS      current
+      DESCRIPTION
+         "The threshold for generating a
+         slapmPolicyRuleMonNotOkay notification, signalling
+         that a monitored minimum transfer rate has not been meet.
+
+
+
+White                         Experimental                     [Page 48]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         A slapmPolicyRuleMonNotOkay notification is not
+         generated again for an slapmPRMonEntry until
+         the minimum transfer rate
+         exceeds slapmPRMonMinRateHigh (a
+         slapmPolicyRuleMonOkay notification is then transmitted)
+         and then fails below slapmPRMonMinRateLow.  This
+         behavior reduces the slapmPolicyRuleMonNotOkay
+         notifications that are transmitted.
+
+         A value of zero for this object is returned when the
+         slapmPRMonControl monitorMinRate(0) is not
+         enabled.  When enabled the default value for this object
+         is the min rate value specified in the associated
+         action definition minus 10%.  If the action definition
+         doesn't have a min rate defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMinRate(0)
+         is selected.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableAggregateTraps(3), MUST be selected in
+         order for any notification relating to this entry to
+         potentially be generated."
+      ::= { slapmPRMonEntry 10 }
+
+   slapmPRMonMinRateHigh OBJECT-TYPE
+      SYNTAX      Unsigned32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-create
+      STATUS      current
+      DESCRIPTION
+         "The threshold for generating a slapmPolicyRuleMonOkay
+         notification, signalling that a monitored minimum
+         transfer rate has increased to an acceptable level.
+
+         A value of zero for this object is returned when the
+         slapmPRMonControl monitorMinRate(0) is not
+         enabled.  When enabled the default value for this object
+         is the min rate value specified in the associated
+         action definition plus 10%.  If the action definition
+         doesn't have a min rate defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMinRate(0)
+         is selected.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableAggregateTraps(3), MUST be selected
+         in order for any notification relating to this entry to
+
+
+
+White                         Experimental                     [Page 49]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         potentially be generated."
+      ::= { slapmPRMonEntry 11 }
+
+   slapmPRMonMaxRateHigh OBJECT-TYPE
+      SYNTAX      Unsigned32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-create
+      STATUS      current
+      DESCRIPTION
+         "The threshold for generating a
+         slapmPolicyRuleMonNotOkay notification, signalling
+         that a monitored maximum transfer rate has been exceeded.
+
+         A slapmPolicyRuleNotOkay notification is not
+         generated again for an slapmPRMonEntry until the
+         maximum transfer rate fails below
+         slapmPRMonMaxRateLow (a slapmPolicyRuleMonOkay
+         notification is then transmitted) and then raises above
+         slapmPRMonMaxRateHigh.  This behavior reduces the
+         slapmPolicyRuleMonNotOkay notifications that are
+         transmitted.
+
+         A value of zero for this object is returned when the
+         slapmPRMonControl monitorMaxRate(1) is not
+         enabled.  When enabled the default value for this object
+         is the max rate value specified in the associated
+         action definition plus 10%.  If the action definition
+         doesn't have a max rate defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMaxRate(1)
+         is selected.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableAggregateTraps(3), MUST be selected in
+         order for any notification relating to this entry to
+         potentially be generated."
+      ::= { slapmPRMonEntry 12 }
+
+   slapmPRMonMaxRateLow OBJECT-TYPE
+      SYNTAX      Unsigned32
+      UNITS       "kilobits per second"
+      MAX-ACCESS  read-create
+      STATUS      current
+      DESCRIPTION
+         "The threshold for generating a slapmPolicyRuleMonOkay
+         notification, signalling that a monitored maximum
+         transfer rate has fallen to an acceptable level.
+
+
+
+
+White                         Experimental                     [Page 50]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         A value of zero for this object is returned when the
+         slapmPRMonControl monitorMaxRate(1) is not
+         enabled.  When enabled the default value for this object
+         is the max rate value specified in the associated
+         action definition minus 10%.  If the action definition
+         doesn't have a max rate defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMaxRate(1)
+         is selected.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableAggregateTraps(3), MUST be selected in
+         order for any notification relating to this entry to
+         potentially be generated."
+      ::= { slapmPRMonEntry 13 }
+
+   slapmPRMonMaxDelayHigh OBJECT-TYPE
+      SYNTAX      Unsigned32
+      UNITS       "milliseconds"
+      MAX-ACCESS  read-create
+      STATUS      current
+      DESCRIPTION
+         "The threshold for generating a
+         slapmPolicyRuleMonNotOkay notification, signalling
+         that a monitored maximum delay rate has been exceeded.
+
+         A slapmPolicyRuleMonNotOkay notification is not
+         generated again for an slapmPRMonEntry until
+         the maximum delay rate falls below
+         slapmPRMonMaxDelayLow (a slapmPolicyRuleMonOkay
+         notification is then transmitted) and raises above
+         slapmPRMonMaxDelayHigh.  This behavior reduces
+         the slapmPolicyRuleMonNotOkay notifications that are
+         transmitted.
+
+         A value of zero for this object is returned when the
+         slapmPRMonControl monitorMaxDelay(4) is not
+         enabled.  When enabled the default value for this object
+         is the max delay value specified in the associated
+         action definition plus 10%.  If the action definition
+         doesn't have a max delay defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMaxDelay(4)
+         is selected.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableAggregateTraps(3), MUST be selected
+         in order for any notification relating to this entry to
+
+
+
+White                         Experimental                     [Page 51]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         potentially be generated."
+      ::= { slapmPRMonEntry 14 }
+
+   slapmPRMonMaxDelayLow OBJECT-TYPE
+      SYNTAX      Unsigned32
+      UNITS       "milliseconds"
+      MAX-ACCESS  read-create
+      STATUS      current
+      DESCRIPTION
+         "The threshold for generating a slapmPolicyRuleMonOkay
+         notification, signalling that a monitored maximum delay
+         rate has fallen to an acceptable level.
+
+         A value of zero for this object is returned when the
+         slapmPRMonControl monitorMaxDelay(4) is not
+         enabled.  When enabled the default value for this object
+         is the max delay value specified in the associated
+         action definition minus 10%.  If the action definition
+         doesn't have a max delay defined then there is no
+         default for this object and a value MUST be specified
+         prior to activating this entry when monitorMaxDelay(4)
+         is selected.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableAggregateTraps(3), MUST be selected
+         in order for any notification relating to this entry to
+         potentially be generated."
+      ::= { slapmPRMonEntry 15 }
+
+   slapmPRMonMinInRateNotAchieves OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The number of times that a minimum transfer in rate
+          was not achieved."
+      ::= { slapmPRMonEntry 16 }
+
+   slapmPRMonMaxInRateExceeds OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The number of times that a maximum transfer in rate
+          was exceeded."
+      ::= { slapmPRMonEntry 17 }
+
+   slapmPRMonMaxDelayExceeds OBJECT-TYPE
+
+
+
+White                         Experimental                     [Page 52]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The number of times that a maximum delay in rate
+          was exceeded."
+      ::= { slapmPRMonEntry 18 }
+
+   slapmPRMonMinOutRateNotAchieves OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The number of times that a minimum transfer out rate
+          was not achieved."
+      ::= { slapmPRMonEntry 19 }
+
+   slapmPRMonMaxOutRateExceeds OBJECT-TYPE
+      SYNTAX      Counter32
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The number of times that a maximum transfer out rate
+          was exceeded."
+      ::= { slapmPRMonEntry 20 }
+
+   slapmPRMonCurrentDelayRate OBJECT-TYPE
+      SYNTAX      Gauge32
+      UNITS       "milliseconds"
+      MAX-ACCESS  read-only
+      STATUS      current
+      DESCRIPTION
+          "The current delay rate for this entry.  This is
+          calculated by taking the average of the TCP
+          round trip times for all associating
+          slapmSubcomponentTable entries within a interval."
+      ::= { slapmPRMonEntry 21 }
+
+   slapmPRMonRowStatus  OBJECT-TYPE
+      SYNTAX       RowStatus
+      MAX-ACCESS   read-create
+      STATUS       current
+      DESCRIPTION
+        "This object allows entries to be created and deleted
+         in the slapmPRMonTable.  An entry in this table
+         is deleted by setting this object to destroy(6).
+
+         Removal of an corresponding (same policy index)
+
+
+
+White                         Experimental                     [Page 53]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         slapmPolicyRuleStatsEntry has the side effect of the
+         automatic deletion an entry in this table.
+
+         Note that an attempt to set any read-create object
+         defined within an slapmPRMonEntry while the value
+         of slapmPRMonRowStatus is active(1) will result in
+         an inconsistentValue error."
+      ::= { slapmPRMonEntry 22 }
+
+   -- Notifications
+
+   slapmMonitoredEventNotAchieved NOTIFICATION-TYPE
+      OBJECTS {
+          slapmPolicyMonitorIntTime,
+          slapmPolicyMonitorControl,
+          slapmPolicyMonitorStatus,
+          slapmPolicyMonitorStatus,
+          slapmPolicyMonitorCurrentInRate,
+          slapmPolicyMonitorCurrentOutRate,
+          slapmPolicyMonitorCurrentDelayRate
+      }
+      STATUS  deprecated
+      DESCRIPTION
+         "This notification is generated when an monitored event
+         is not achieved with respect to threshold.  This
+         applies only towards monitoring a policy traffic
+         profile as an aggregate via an associating
+         slapmPolicyStatsEntry.  The value
+         of slapmPolicyMonitorControl can be examined to
+         determine what is being monitored.  The first
+         slapmPolicyMonitorStatus value supplies the current
+         monitor status while the 2nd value supplies the
+         previous status.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableAggregateTraps(3), MUST be
+         selected in order for this notification to
+         potentially be generated."
+      ::= { slapmNotifications 1 }
+
+   slapmMonitoredEventOkay NOTIFICATION-TYPE
+      OBJECTS {
+          slapmPolicyMonitorIntTime,
+          slapmPolicyMonitorControl,
+          slapmPolicyMonitorStatus,
+          slapmPolicyMonitorStatus,
+          slapmPolicyMonitorCurrentInRate,
+          slapmPolicyMonitorCurrentOutRate,
+
+
+
+White                         Experimental                     [Page 54]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+          slapmPolicyMonitorCurrentDelayRate
+      }
+      STATUS  deprecated
+      DESCRIPTION
+         "This notification is generated when a monitored
+         event has improved to an acceptable level.  This
+         applies only towards monitoring a policy traffic
+         profile as an aggregate via an associating
+         slapmPolicyStatsEntry.  The value
+         of slapmPolicyMonitorControl can be examined to
+         determine what is being monitored.  The first
+         slapmPolicyMonitorStatus value supplies the current
+         monitor status while the 2nd value supplies the
+         previous status.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableAggregateTraps(3), MUST be
+         selected in order for this notification to
+         potentially be generated."
+      ::= { slapmNotifications 2 }
+
+   slapmPolicyProfileDeleted NOTIFICATION-TYPE
+      OBJECTS {
+          slapmPolicyStatsActiveConns,
+          slapmPolicyStatsTotalConns,
+          slapmPolicyStatsFirstActivated,
+          slapmPolicyStatsLastMapping,
+          slapmPolicyStatsInOctets,
+          slapmPolicyStatsOutOctets,
+          slapmPolicyStatsConnectionLimit,
+          slapmPolicyStatsCountAccepts,
+          slapmPolicyStatsCountDenies,
+          slapmPolicyStatsInDiscards,
+          slapmPolicyStatsOutDiscards,
+          slapmPolicyStatsInPackets,
+          slapmPolicyStatsOutPackets,
+          slapmPolicyStatsInProfileOctets,
+          slapmPolicyStatsOutProfileOctets,
+          slapmPolicyStatsMinRate,
+          slapmPolicyStatsMaxRate,
+          slapmPolicyStatsMaxDelay
+      }
+      STATUS  deprecated
+      DESCRIPTION
+         "A slapmPolicyDeleted notification is sent when a
+         slapmPolicyStatsEntry is deleted if the value of
+         slapmPolicyTrapEnable is enabled(1)."
+      ::= { slapmNotifications 3 }
+
+
+
+White                         Experimental                     [Page 55]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+   slapmPolicyMonitorDeleted NOTIFICATION-TYPE
+      OBJECTS {
+          slapmPolicyMonitorStatus,
+          slapmPolicyMonitorInterval,
+          slapmPolicyMonitorIntTime,
+          slapmPolicyMonitorCurrentInRate,
+          slapmPolicyMonitorCurrentOutRate,
+          slapmPolicyMonitorCurrentDelayRate,
+          slapmPolicyMonitorMinRateLow,
+          slapmPolicyMonitorMinRateHigh,
+          slapmPolicyMonitorMaxRateHigh,
+          slapmPolicyMonitorMaxRateLow,
+          slapmPolicyMonitorMaxDelayHigh,
+          slapmPolicyMonitorMaxDelayLow,
+          slapmPolicyMonitorMinInRateNotAchieves,
+          slapmPolicyMonitorMaxInRateExceeds,
+          slapmPolicyMonitorMaxDelayExceeds,
+          slapmPolicyMonitorMinOutRateNotAchieves,
+          slapmPolicyMonitorMaxOutRateExceeds
+      }
+      STATUS  deprecated
+      DESCRIPTION
+         "A slapmPolicyMonitorDeleted notification is sent when a
+         slapmPolicyMonitorEntry is deleted if the value of
+         slapmPolicyTrapEnable is enabled(1)."
+      ::= { slapmNotifications 4 }
+
+   slapmSubcomponentMonitoredEventNotAchieved NOTIFICATION-TYPE
+      OBJECTS {
+          slapmSubcomponentSystemAddress,
+          slapmSubcomponentPolicyName,
+          slapmSubcomponentTrafficProfileName,
+          slapmSubcomponentMonitorStatus,
+          slapmSubcomponentMonitorStatus,
+          slapmSubcomponentMonitorIntTime,
+          slapmSubcomponentMonitorCurrentInRate,
+          slapmSubcomponentMonitorCurrentOutRate,
+          slapmSubcomponentTcpRoundTripTime
+      }
+      STATUS  deprecated
+      DESCRIPTION
+         "This notification is generated when a monitored value
+         does not achieved a threshold specification.  This
+         applies only towards monitoring the individual components
+         of a policy traffic profile.  The value of the
+         corresponding slapmPolicyMonitorControl can be examined
+         to determine what is being monitored.  The first
+         slapmSubcomponentMonitorStatus value supplies the current
+
+
+
+White                         Experimental                     [Page 56]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         monitor status while the 2nd value supplies the
+         previous status.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableSubcomponentTraps(4), MUST be selected
+         in order for this notification to potentially be generated."
+      ::= { slapmNotifications 5 }
+
+   slapmSubcomponentMonitoredEventOkay NOTIFICATION-TYPE
+      OBJECTS {
+          slapmSubcomponentSystemAddress,
+          slapmSubcomponentPolicyName,
+          slapmSubcomponentTrafficProfileName,
+          slapmSubcomponentMonitorStatus,
+          slapmSubcomponentMonitorStatus,
+          slapmSubcomponentMonitorIntTime,
+          slapmSubcomponentMonitorCurrentInRate,
+          slapmSubcomponentMonitorCurrentOutRate,
+          slapmSubcomponentTcpRoundTripTime
+      }
+      STATUS  deprecated
+      DESCRIPTION
+         "This notification is generated when a monitored value
+         has reached an acceptable level.
+
+         Note: The corresponding slapmPolicyMonitorControl
+         BITS setting, enableSubcomponentTraps(3), MUST be
+         selected in order for this notification to potentially
+         be generated."
+      ::= { slapmNotifications 6 }
+
+   slapmPolicyRuleMonNotOkay NOTIFICATION-TYPE
+      OBJECTS {
+          slapmPRMonIntTime,
+          slapmPRMonControl,
+          slapmPRMonStatus,
+          slapmPRMonStatus,
+          slapmPRMonCurrentInRate,
+          slapmPRMonCurrentOutRate,
+          slapmPRMonCurrentDelayRate
+      }
+      STATUS  current
+      DESCRIPTION
+         "This notification is generated when an monitored event
+         is not achieved with respect to a threshold.  This
+         applies only towards monitoring a policy rule
+         as an aggregate via an associating
+         slapmPolicyRuleStatsEntry.  The value
+
+
+
+White                         Experimental                     [Page 57]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         of slapmPRMonControl can be examined to
+         determine what is being monitored.  The first
+         slapmPRMonStatus value supplies the current
+         monitor status while the 2nd value supplies the
+         previous status.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableAggregateTraps(3), MUST be
+         selected in order for this notification to
+         potentially be generated."
+      ::= { slapmNotifications 7 }
+
+   slapmPolicyRuleMonOkay NOTIFICATION-TYPE
+      OBJECTS {
+          slapmPRMonIntTime,
+          slapmPRMonControl,
+          slapmPRMonStatus,
+          slapmPRMonStatus,
+          slapmPRMonCurrentInRate,
+          slapmPRMonCurrentOutRate,
+          slapmPRMonCurrentDelayRate
+      }
+      STATUS  current
+      DESCRIPTION
+         "This notification is generated when a monitored
+         event has improved to an acceptable level.  This
+         applies only towards monitoring a policy rule
+         as an aggregate via an associating
+         slapmPolicyRuleStatsEntry.  The value
+         of slapmPRMonControl can be examined to
+         determine what is being monitored.  The first
+         slapmPRMonStatus value supplies the current
+         monitor status while the 2nd value supplies the
+         previous status.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableAggregateTraps(3), MUST be
+         selected in order for this notification to
+         potentially be generated."
+      ::= { slapmNotifications 8 }
+
+   slapmPolicyRuleDeleted NOTIFICATION-TYPE
+      OBJECTS {
+          slapmPolicyRuleStatsActiveConns,
+          slapmPolicyRuleStatsTotalConns,
+          slapmPolicyRuleStatsLActivated,
+          slapmPolicyRuleStatsLastMapping,
+          slapmPolicyRuleStatsInOctets,
+
+
+
+White                         Experimental                     [Page 58]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+          slapmPolicyRuleStatsOutOctets,
+          slapmPolicyRuleStatsConnLimit,
+          slapmPolicyRuleStatsCountAccepts,
+          slapmPolicyRuleStatsCountDenies,
+          slapmPolicyRuleStatsInDiscards,
+          slapmPolicyRuleStatsOutDiscards,
+          slapmPolicyRuleStatsInPackets,
+          slapmPolicyRuleStatsOutPackets,
+          slapmPolicyRuleStatsInProOctets,
+          slapmPolicyRuleStatsOutProOctets,
+          slapmPolicyRuleStatsMinRate,
+          slapmPolicyRuleStatsMaxRate,
+          slapmPolicyRuleStatsMaxDelay,
+          slapmPolicyRuleStatsTotalRsvpFlows,
+          slapmPolicyRuleStatsActRsvpFlows
+      }
+      STATUS  current
+      DESCRIPTION
+         "A slapmPolicyRuleDeleted notification is sent when a
+         slapmPolicyRuleStatsEntry is deleted if the value of
+         slapmPolicyTrapEnable is enabled(1)."
+      ::= { slapmNotifications 9 }
+
+   slapmPolicyRuleMonDeleted NOTIFICATION-TYPE
+      OBJECTS {
+          slapmPRMonControl,
+          slapmPRMonStatus,
+          slapmPRMonInterval,
+          slapmPRMonIntTime,
+          slapmPRMonCurrentInRate,
+          slapmPRMonCurrentOutRate,
+          slapmPRMonCurrentDelayRate,
+          slapmPRMonMinRateLow,
+          slapmPRMonMinRateHigh,
+          slapmPRMonMaxRateHigh,
+          slapmPRMonMaxRateLow,
+          slapmPRMonMaxDelayHigh,
+          slapmPRMonMaxDelayLow,
+          slapmPRMonMinInRateNotAchieves,
+          slapmPRMonMaxInRateExceeds,
+          slapmPRMonMaxDelayExceeds,
+          slapmPRMonMinOutRateNotAchieves,
+          slapmPRMonMaxOutRateExceeds
+      }
+      STATUS  current
+      DESCRIPTION
+         "A slapmPolicyRuleMonDeleted notification is sent when a
+         slapmPRMonEntry is deleted if the value of
+
+
+
+White                         Experimental                     [Page 59]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         slapmPolicyTrapEnable is enabled(1)."
+      ::= { slapmNotifications 10 }
+
+   slapmSubcMonitorNotOkay NOTIFICATION-TYPE
+      OBJECTS {
+          slapmSubcomponentSystemAddress,
+          slapmSubcomponentPolicyRuleIndex,
+          slapmPRMonControl,
+          slapmSubcomponentMonitorStatus,
+          slapmSubcomponentMonitorStatus,
+          slapmSubcomponentMonitorIntTime,
+          slapmSubcomponentMonitorCurrentInRate,
+          slapmSubcomponentMonitorCurrentOutRate,
+          slapmSubcomponentTcpRoundTripTime
+      }
+      STATUS  current
+      DESCRIPTION
+         "This notification is generated when a monitored value
+         does not achieved a threshold specification.  This
+         applies only towards monitoring the individual components
+         of a policy rule.  The value of the
+         corresponding slapmPRMonControl can be examined
+         to determine what is being monitored.  The first
+         slapmSubcomponentMonitorStatus value supplies the current
+         monitor status while the 2nd value supplies the
+         previous status.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableSubcomponentTraps(4), MUST be selected
+         in order for this notification to potentially be generated."
+      ::= { slapmNotifications 11 }
+
+   slapmSubcMonitorOkay NOTIFICATION-TYPE
+      OBJECTS {
+          slapmSubcomponentSystemAddress,
+          slapmSubcomponentPolicyRuleIndex,
+          slapmPRMonControl,
+          slapmSubcomponentMonitorStatus,
+          slapmSubcomponentMonitorStatus,
+          slapmSubcomponentMonitorIntTime,
+          slapmSubcomponentMonitorCurrentInRate,
+          slapmSubcomponentMonitorCurrentOutRate,
+          slapmSubcomponentTcpRoundTripTime
+      }
+
+      STATUS  current
+      DESCRIPTION
+         "This notification is generated when a monitored value
+
+
+
+White                         Experimental                     [Page 60]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+         has reached an acceptable level.
+
+         Note: The corresponding slapmPRMonControl
+         BITS setting, enableSubcomponentTraps(3), MUST be
+         selected in order for this notification to potentially
+         be generated."
+      ::= { slapmNotifications 12 }
+
+   -- Conformance information
+   -- Compliance statements
+
+   slapmCompliances OBJECT IDENTIFIER ::= { slapmConformance 1 }
+   slapmGroups      OBJECT IDENTIFIER ::= { slapmConformance 2 }
+
+   -- Compliance statements
+
+   slapmCompliance MODULE-COMPLIANCE
+      STATUS  current
+      DESCRIPTION
+              "The compliance statement for the SLAPM-MIB."
+      MODULE  -- this module
+          MANDATORY-GROUPS {
+                              slapmBaseGroup2,
+                              slapmNotGroup2
+                           }
+          GROUP slapmEndSystemGroup2
+          DESCRIPTION
+              "The contents of this group is required by end-system
+              implementations."
+          GROUP slapmEndSystemNotGroup2
+          DESCRIPTION
+              "The contents of this group is required by end-system
+              implementations."
+          GROUP slapmBaseGroup
+          DESCRIPTION
+              "The contents of this group has been deprecated in favor
+              of the new slapmBaseGroup2.  Older implementations of this
+              MIB would continue its support of the contents of this
+              group."
+          GROUP slapmNotGroup
+          DESCRIPTION
+              "The contents of this group has been deprecated in favor
+              of the new slapmNotGroup2.  Older implementations of this
+              MIB would continue its support of the contents of
+              this group."
+          GROUP slapmOptionalGroup
+          DESCRIPTION
+              "The contents of this group has been deprecated."
+
+
+
+White                         Experimental                     [Page 61]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+          GROUP slapmEndSystemGroup
+          DESCRIPTION
+              "The contents of this group has been deprecated in favor
+              of the new slapmEndSystemGroup2.  Older implementations
+              of this MIB would continue its support of the
+              contents of this group."
+          GROUP slapmEndSystemNotGroup
+          DESCRIPTION
+              "The contents of this group has been deprecated in favor
+              of the new slapmEndSystemNotGroup2.  Older
+              implementations of this MIB would continue its support
+              of the contents of this group."
+      ::= { slapmCompliances 1 }
+
+   -- MIB groupings
+
+   slapmBaseGroup OBJECT-GROUP
+     OBJECTS {
+               slapmSpinLock,
+               slapmPolicyCountQueries,
+               slapmPolicyCountAccesses,
+               slapmPolicyCountSuccessAccesses,
+               slapmPolicyCountNotFounds,
+               slapmPolicyPurgeTime,
+               slapmPolicyTrapEnable,
+               slapmPolicyStatsOperStatus,
+               slapmPolicyStatsActiveConns,
+               slapmPolicyStatsFirstActivated,
+               slapmPolicyStatsLastMapping,
+               slapmPolicyStatsInOctets,
+               slapmPolicyStatsOutOctets,
+               slapmPolicyStatsConnectionLimit,
+               slapmPolicyStatsTotalConns,
+               slapmPolicyStatsCountAccepts,
+               slapmPolicyStatsCountDenies,
+               slapmPolicyStatsInDiscards,
+               slapmPolicyStatsOutDiscards,
+               slapmPolicyStatsInPackets,
+               slapmPolicyStatsOutPackets,
+               slapmPolicyStatsMinRate,
+               slapmPolicyStatsMaxRate,
+               slapmPolicyStatsMaxDelay,
+               slapmPolicyMonitorControl,
+               slapmPolicyMonitorStatus,
+               slapmPolicyMonitorInterval,
+               slapmPolicyMonitorIntTime,
+               slapmPolicyMonitorCurrentInRate,
+               slapmPolicyMonitorCurrentOutRate,
+
+
+
+White                         Experimental                     [Page 62]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+               slapmPolicyMonitorMinRateLow,
+               slapmPolicyMonitorMinRateHigh,
+               slapmPolicyMonitorMaxRateHigh,
+               slapmPolicyMonitorMaxRateLow,
+               slapmPolicyMonitorMaxDelayHigh,
+               slapmPolicyMonitorMaxDelayLow,
+               slapmPolicyMonitorMinInRateNotAchieves,
+               slapmPolicyMonitorMaxInRateExceeds,
+               slapmPolicyMonitorMaxDelayExceeds,
+               slapmPolicyMonitorMinOutRateNotAchieves,
+               slapmPolicyMonitorMaxOutRateExceeds,
+               slapmPolicyMonitorCurrentDelayRate,
+               slapmPolicyMonitorRowStatus
+              }
+    STATUS deprecated
+    DESCRIPTION
+        "The group of objects defined by this MIB that are
+        required for all implementations to be compliant."
+    ::= { slapmGroups 1 }
+
+   slapmOptionalGroup OBJECT-GROUP
+     OBJECTS {
+               slapmPolicyStatsInProfileOctets,
+               slapmPolicyStatsOutProfileOctets
+             }
+    STATUS deprecated
+    DESCRIPTION
+        "The group of objects defined by this MIB that are
+        optional."
+    ::= { slapmGroups 2 }
+
+   slapmEndSystemGroup OBJECT-GROUP
+     OBJECTS {
+               slapmPolicyTrapFilter,
+               slapmSubcomponentProtocol,
+               slapmSubcomponentSystemAddress,
+               slapmSubcomponentPolicyName,
+               slapmSubcomponentTrafficProfileName,
+               slapmSubcomponentLastActivity,
+               slapmSubcomponentInOctets,
+               slapmSubcomponentOutOctets,
+               slapmSubcomponentTcpOutBufferedOctets,
+               slapmSubcomponentTcpInBufferedOctets,
+               slapmSubcomponentTcpReXmts,
+               slapmSubcomponentTcpRoundTripTime,
+               slapmSubcomponentTcpRoundTripVariance,
+               slapmSubcomponentInPdus,
+               slapmSubcomponentOutPdus,
+
+
+
+White                         Experimental                     [Page 63]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+               slapmSubcomponentApplName,
+               slapmSubcomponentMonitorStatus,
+               slapmSubcomponentMonitorIntTime,
+               slapmSubcomponentMonitorCurrentOutRate,
+               slapmSubcomponentMonitorCurrentInRate
+             }
+     STATUS  deprecated
+     DESCRIPTION
+         "The group of objects defined by this MIB that are
+         required for end system implementations."
+     ::= { slapmGroups 3 }
+
+   slapmNotGroup NOTIFICATION-GROUP
+     NOTIFICATIONS {
+               slapmMonitoredEventNotAchieved,
+               slapmMonitoredEventOkay,
+               slapmPolicyProfileDeleted,
+               slapmPolicyMonitorDeleted
+             }
+     STATUS  deprecated
+     DESCRIPTION
+         "The group of notifications defined by this MIB that MUST
+         be implemented."
+     ::= { slapmGroups 4 }
+
+   slapmEndSystemNotGroup NOTIFICATION-GROUP
+     NOTIFICATIONS {
+               slapmSubcomponentMonitoredEventNotAchieved,
+               slapmSubcomponentMonitoredEventOkay
+             }
+     STATUS  deprecated
+     DESCRIPTION
+         "The group of objects defined by this MIB that are
+         required for end system implementations."
+     ::= { slapmGroups 5 }
+
+   slapmBaseGroup2 OBJECT-GROUP
+     OBJECTS {
+               slapmSpinLock,
+               slapmPolicyCountQueries,
+               slapmPolicyCountAccesses,
+               slapmPolicyCountSuccessAccesses,
+               slapmPolicyCountNotFounds,
+               slapmPolicyPurgeTime,
+               slapmPolicyTrapEnable,
+               slapmPolicyNameOfRule,
+               slapmPolicyRuleStatsOperStatus,
+               slapmPolicyRuleStatsActiveConns,
+
+
+
+White                         Experimental                     [Page 64]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+               slapmPolicyRuleStatsTotalConns,
+               slapmPolicyRuleStatsLActivated,
+               slapmPolicyRuleStatsLastMapping,
+               slapmPolicyRuleStatsInOctets,
+               slapmPolicyRuleStatsOutOctets,
+               slapmPolicyRuleStatsConnLimit,
+               slapmPolicyRuleStatsCountAccepts,
+               slapmPolicyRuleStatsCountDenies,
+               slapmPolicyRuleStatsInDiscards,
+               slapmPolicyRuleStatsOutDiscards,
+               slapmPolicyRuleStatsInPackets,
+               slapmPolicyRuleStatsOutPackets,
+               slapmPolicyRuleStatsInProOctets,
+               slapmPolicyRuleStatsOutProOctets,
+               slapmPolicyRuleStatsMinRate,
+               slapmPolicyRuleStatsMaxRate,
+               slapmPolicyRuleStatsMaxDelay,
+               slapmPolicyRuleStatsTotalRsvpFlows,
+               slapmPolicyRuleStatsActRsvpFlows,
+               slapmPRMonControl,
+               slapmPRMonStatus,
+               slapmPRMonInterval,
+               slapmPRMonIntTime,
+               slapmPRMonCurrentInRate,
+               slapmPRMonCurrentOutRate,
+               slapmPRMonMinRateLow,
+               slapmPRMonMinRateHigh,
+               slapmPRMonMaxRateHigh,
+               slapmPRMonMaxRateLow,
+               slapmPRMonMaxDelayHigh,
+               slapmPRMonMaxDelayLow,
+               slapmPRMonMinInRateNotAchieves,
+               slapmPRMonMaxInRateExceeds,
+               slapmPRMonMaxDelayExceeds,
+               slapmPRMonMinOutRateNotAchieves,
+               slapmPRMonMaxOutRateExceeds,
+               slapmPRMonCurrentDelayRate,
+               slapmPRMonRowStatus
+              }
+    STATUS current
+    DESCRIPTION
+        "The group of objects defined by this MIB that are
+        required for all implementations to be compliant."
+    ::= { slapmGroups 6 }
+
+   slapmEndSystemGroup2 OBJECT-GROUP
+     OBJECTS {
+               slapmPolicyTrapFilter,
+
+
+
+White                         Experimental                     [Page 65]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+               slapmSubcomponentProtocol,
+               slapmSubcomponentSystemAddress,
+               slapmSubcomponentLastActivity,
+               slapmSubcomponentInOctets,
+               slapmSubcomponentOutOctets,
+               slapmSubcomponentTcpOutBufferedOctets,
+               slapmSubcomponentTcpInBufferedOctets,
+               slapmSubcomponentTcpReXmts,
+               slapmSubcomponentTcpRoundTripTime,
+               slapmSubcomponentTcpRoundTripVariance,
+               slapmSubcomponentInPdus,
+               slapmSubcomponentOutPdus,
+               slapmSubcomponentApplName,
+               slapmSubcomponentMonitorStatus,
+               slapmSubcomponentMonitorIntTime,
+               slapmSubcomponentMonitorCurrentOutRate,
+               slapmSubcomponentMonitorCurrentInRate,
+               slapmSubcomponentPolicyRuleIndex
+             }
+     STATUS  current
+     DESCRIPTION
+         "The group of objects defined by this MIB that are
+         required for end system implementations."
+     ::= { slapmGroups 7 }
+
+   slapmNotGroup2 NOTIFICATION-GROUP
+     NOTIFICATIONS {
+               slapmPolicyRuleMonNotOkay,
+               slapmPolicyRuleMonOkay,
+               slapmPolicyRuleDeleted,
+               slapmPolicyRuleMonDeleted
+             }
+     STATUS  current
+     DESCRIPTION
+         "The group of notifications defined by this MIB that MUST
+         be implemented."
+     ::= { slapmGroups 8 }
+
+   slapmEndSystemNotGroup2 NOTIFICATION-GROUP
+     NOTIFICATIONS {
+               slapmSubcMonitorNotOkay,
+               slapmSubcMonitorOkay
+             }
+     STATUS  current
+     DESCRIPTION
+         "The group of objects defined by this MIB that are
+         required for end system implementations."
+     ::= { slapmGroups 9 }
+
+
+
+White                         Experimental                     [Page 66]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+END
+
+5.0  Security Considerations
+
+   Certain management information in the MIB defined by this document
+   may be considered sensitive in some network environments.  Therefore,
+   authentication of received SNMP requests and controlled access to
+   management information SHOULD be employed in such environments.  The
+   method for this authentication is a function of the SNMP
+   Administrative Framework, and has not been expanded by this MIB.
+
+   To facilitate the provisioning of access control by a security
+   administrator using the View-Based Access Control Model (VACM)
+   defined in RFC 2575 [11] for tables in which multiple users may need
+   to independently create or modify entries, the initial index is used
+   as an "owner index" (refer to slapmPRMonOwnerIndex in an
+   slapmPRMonEntry).  Such an initial index has a syntax of
+   SnmpAdminString, and can thus be trivially mapped to a securityName
+   or groupName as defined in VACM, in accordance with a security
+   policy.
+
+   All entries in related tables belonging to a particular user will
+   have the same value for this initial index.  For a given user's
+   entries in a particular table, the object identifiers for the
+   information in these entries will have the same subidentifiers
+   (except for the "column" subidentifier) up to the end of the encoded
+   owner index. To configure VACM to permit access to this portion of
+   the table, one would create vacmViewTreeFamilyTable entries with the
+   value of vacmViewTreeFamilySubtree including the owner index portion,
+   and vacmViewTreeFamilyMask "wildcarding" the column subidentifier.
+   More elaborate configurations are possible.  The VACM access control
+   mechanism described above provides control
+
+   It is RECOMMENDED that the slapmPRMonTable (equivalent to the
+   deprecated slapmPolicyMonitorTable) and the slapmSubcomponentTable
+   not be supported in insecure environments.
+
+6.0  Intellectual Property
+
+   The IETF takes no position regarding the validity or scope of any
+   intellectual property or other rights that might be claimed to
+   pertain to the implementation or use of the technology described in
+   this document or the extent to which any license under such rights
+   might or might not be available; neither does it represent that it
+   has made any effort to identify any such rights.  Information on the
+   IETF's procedures with respect to rights in standards-track and
+   standards-related documentation can be found in BCP-11.  Copies of
+   claims of rights made available for publication and any assurances of
+
+
+
+White                         Experimental                     [Page 67]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+   licenses to be made available, or the result of an attempt made to
+   obtain a general license or permission for the use of such
+   proprietary rights by implementers or users of this specification can
+   be obtained from the IETF Secretariat.
+
+   The IETF invites any interested party to bring to its attention any
+   copyrights, patents or patent applications, or other proprietary
+   rights which may cover technology that may be required to practice
+   this standard.  Please address the information to the IETF Executive
+   Director.
+
+7.0  Acknowledgments
+
+   This document is an individual submission and not the product of any
+   IETF working group.  Special thanks should be given to Robert Moore
+   of IBM for his numerous reviews.
+
+8.0  References
+
+   [1]  Case, J., Fedor, M., Schoffstall, M. and J. Davin, "Simple
+        Network Management Protocol", STD 15, RFC 1157, May 1990.
+
+   [2]  McCloghrie, K. and M. Rose, Editors, "Management Information
+        Base for Network Management of TCP/IP-based internets: MIB-II",
+        STD 17, RFC 1213, March 1991.
+
+   [3]  McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose,
+        M.  and S. Waldbusser, "Structure of Management Information
+        Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.
+
+   [4]  McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose,
+        M.  and S. Waldbusser, "Textual Conventions for SMIv2", STD 58,
+        RFC 2579, April 1999.
+
+   [5]  McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose,
+        M.  and S. Waldbusser, "Conformance Statements for SMIv2", STD
+        58, RFC 2580, April 1999.
+
+   [6]  Case, J., McCloghrie, K., Rose, M. and Waldbusser, S., "Protocol
+        Operations for Version 2 of the Simple Network Management
+        Protocol (SNMPv2)", RFC 1905, January 1996.
+
+   [7]  Harrington D., Presuhn, R. and B. Wijnen,  "An Architecture for
+        Describing SNMP Management Frameworks", RFC 2571, April 1999.
+
+   [8]  Case, J., Harrington D., Presuhn, R. and B. Wijnen, "Message
+        Processing and Dispatching for the Simple Network Management
+        Protocol (SNMP)", RFC 2572, April 1999.
+
+
+
+White                         Experimental                     [Page 68]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+   [9]  Levi D., Meyer P. and B. Stewart, "SNMPv3 Applications", RFC
+        2573, April 1999.
+
+   [10] Blumenthal, U. and B. Wijnen, "User-based Security Model (USM)
+        for version 3 of the Simple Network Management Protocol
+        (SNMPv3)", RFC 2574, April 1999.
+
+   [11] Wijnen, B., Presuhn, R. and K. McCloghrie, "View-based Access
+        Control Model (VACM) for the Simple Network Management Protocol
+        (SNMP)", RFC 2575, April 1999.
+
+   [12] Hovey, R. and S. Bradner, "The Organizations Involved in the
+        IETF Standards Process", BCP 11, RFC 2028, October 1996.
+
+   [13] Bradner, S., "Key words for use in RFCs to Indicate Requirement
+        Levels", BCP 14, RFC 2119, March 1997.
+
+   [14] Rose, M. and K. McCloghrie, "Structure and Identification of
+        Management Information for TCP/IP-based Internets", STD 16, RFC
+        1155, May 1990.
+
+   [15] Rose, M. and K. McCloghrie, "Concise MIB Definitions", STD 16,
+        RFC 1212, March 1991.
+
+   [16] Rose, M., "A Convention for Defining Traps for use with the
+        SNMP", RFC 1215, March 1991.
+
+   [17] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser,
+        "Introduction to Community-based SNMPv2", RFC 1901, January
+        1996.
+
+   [18] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Transport
+        Mappings for Version 2 of the Simple Network Management Protocol
+        (SNMPv2)", RFC 1906, January 1996.
+
+   [19] McCloghrie, K. and A. Bierman, "Entity MIB using SMIv2", RFC
+        2037, October 1996.
+
+   [20] Bradner, S., "The Internet Standards Process -- Revision 3", BCP
+        9, RFC 2026, October 1996.
+
+
+
+
+
+
+
+
+
+
+
+White                         Experimental                     [Page 69]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+9.0  Author's Address
+
+   Kenneth D. White
+   Dept. BRQA/Bldg. 501/G114
+   IBM Corporation
+   P.O.Box 12195
+   3039 Cornwallis
+   Research Triangle Park, NC 27709, USA
+
+   EMail: wkenneth@us.ibm.com
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+White                         Experimental                     [Page 70]
+
+RFC 2758                       SLAPM-MIB                   February 2000
+
+
+10.0  Full Copyright Statement
+
+   Copyright (C) The Internet Society (2000).  All Rights Reserved.
+
+   This document and translations of it may be copied and furnished to
+   others, and derivative works that comment on or otherwise explain it
+   or assist in its implementation may be prepared, copied, published
+   and distributed, in whole or in part, without restriction of any
+   kind, provided that the above copyright notice and this paragraph are
+   included on all such copies and derivative works.  However, this
+   document itself may not be modified in any way, such as by removing
+   the copyright notice or references to the Internet Society or other
+   Internet organizations, except as needed for the purpose of
+   developing Internet standards in which case the procedures for
+   copyrights defined in the Internet Standards process must be
+   followed, or as required to translate it into languages other than
+   English.
+
+   The limited permissions granted above are perpetual and will not be
+   revoked by the Internet Society or its successors or assigns.
+
+   This document and the information contained herein is provided on an
+   "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
+   TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING
+   BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION
+   HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF
+   MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
+
+Acknowledgement
+
+   Funding for the RFC Editor function is currently provided by the
+   Internet Society.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+White                         Experimental                     [Page 71]
+