TIMETRA-TLS-MIB

All MIBs › TIMETRA-TLS-MIB

Organization: Nokia

Last Updated: 2015-10-05

Category: Ethernet OAM, Nokia SR OS / Alcatel-Lucent 7750 SR, Service Management

Description: Manages Nokia/Alcatel-Lucent 7750 SR transparent LAN service instances and port bindings.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TIMETRA-TLS-MIB?

This Nokia proprietary MIB manages trust-anchor and certificate-authority infrastructure supporting Transparent LAN Service (TLS) on the SROS platform, used for secure certificate-based validation of TLS/VPLS-related services. It exposes trust-anchor profile configuration and the certificate authority (CA) profiles bound to those trust anchors, along with row status and last-changed tracking for each. Its monitoring value is centered on configuration/software-state integrity: tTlsTrustAnchorProfRowStatus and tTlsTrustAnchorProfLastChgd reveal whether a trust-anchor profile is active and recently modified, while tTlsTrustAnchorCAProfDown flags a CA profile that has gone down, directly indicating a certificate-validation service disruption. As a Nokia SROS extension it interacts with the router's broader PKI/certificate management infrastructure. It's typically deployed on 7750 SR / 7450 ESS nodes offering VPLS/TLS services that require certificate-based trust validation. Network engineers evaluating or troubleshooting this functionality can download the TIMETRA-TLS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TIMETRA-TLS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Nokia/Alcatel-Lucent 7750 SR
7450 ESS providing TLS/VPLS services

Monitoring Examples

An operator walks tTlsTrustAnchorProfTable / tTlsTrustAnchorProfEntry keyed by tTlsTrustAnchorProfName, checking tTlsTrustAnchorProfRowStatus and tTlsTrustAnchorProfLastChgd to confirm a trust-anchor profile is active and current. Watching tTlsTrustAnchorCAProfDown for a given profile flags a CA that has gone unreachable or invalid, and cross-referencing tTlsTrustAnchorsTable / tTlsTrustAnchorsCAProfile shows which individual trust anchors are bound to that CA profile, helping an admin isolate a certificate-chain validation failure affecting TLS service sessions.

What Can Be Monitored

trust-anchor profile row status
trust-anchor profile last-changed time
CA profile down state
CA profile binding

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TimeStamp
TruthValue

From TIMETRA-GLOBAL-MIB

timetraSRMIBModules	OBJECT-IDENTITY
tmnxSRConfs	OBJECT-IDENTITY
tmnxSRNotifyPrefix	OBJECT-IDENTITY
tmnxSRObjs	OBJECT-IDENTITY

From TIMETRA-TC-MIB

TNamedItem
TNamedItemOrEmpty
TmnxAdminState
TmnxOperState

How to Use in IPNetwork Monitor

Example using tTlsTrustAnchorCAProfDown OID:

Select a Nokia/Alcatel-Lucent 7750 SR / 7450 ESS providing TLS/VPLS service (trust-anchor/CA-profile status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type tTlsTrustAnchorCAProfDown into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The value of the object tTlsTrustAnchorCAProfDown indicates the total number of trusted CA-profiles (Certificate-Authority) not operational in the trust anchor profile. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the count changes from its expected baseline, since that would indicate the underlying set of items changed unexpectedly. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
timetraTlsMIBModule	1.3.6.1.4.1.6527.1.1.3.107			This document is the SNMP MIB module for the Nokia SROS implementation of the TLS protocol. Copyright 2008-2016 Nokia. All rights reserved. Reproduction of this document is authorized on the condition that the foregoing copyright notice is included. This SNMP MIB module (Specification) embodies Nokia's proprietary intellectual property. Nokia retains all title and ownership in the Specification, including any revisions. Nokia grants all interested parties a non-exclusive license to use and distribute an unmodified copy of this Specification in connection with management of Nokia products, and without fee, provided this copyright notice and license appear on all copies. This Specification is supplied `as is', and Nokia makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification.
tmnxTlsConformance	1.3.6.1.4.1.6527.3.1.1.107
tmnxTlsCompliances	1.3.6.1.4.1.6527.3.1.1.107.1
tmnxTlsComplianceV14v1	1.3.6.1.4.1.6527.3.1.1.107.1.1			The compliance statement for the management of the TLS protocol on Nokia SROS series systems.
tmnxTlsGroups	1.3.6.1.4.1.6527.3.1.1.107.2
tmnxTlsV14v1Groups	1.3.6.1.4.1.6527.3.1.1.107.2.1
tmnxTlsX509CertMgmtGroup	1.3.6.1.4.1.6527.3.1.1.107.2.1.1			The group of objects supporting the management of X.509 certificates on Nokia SROS series systems.
tmnxTlsClientMgmtInitialGroup	1.3.6.1.4.1.6527.3.1.1.107.2.1.2			The group of objects supporting the management of a TLS client on Nokia SROS series systems.
tmnxTlsObjs	1.3.6.1.4.1.6527.3.1.2.107
tmnxTlsScalarObjs	1.3.6.1.4.1.6527.3.1.2.107.1
tmnxTlsConfigTimeStamps	1.3.6.1.4.1.6527.3.1.2.107.1.1
TIM tTlsTrustAnchorProfTblLastChgd	1.3.6.1.4.1.6527.3.1.2.107.1.1.4	TimeStamp	read-only	The value of the object tTlsTrustAnchorProfTblLastChgd indicates the sysUpTime at the time of the last modification to tTlsTrustAnchorProfTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TIM tTlsTrustAnchorsTblLastChgd	1.3.6.1.4.1.6527.3.1.2.107.1.1.5	TimeStamp	read-only	The value of the object tTlsTrustAnchorsTblLastChgd indicates the sysUpTime at the time of the last modification to tTlsTrustAnchorsTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TIM tTlsClientCiphListTblLastChgd	1.3.6.1.4.1.6527.3.1.2.107.1.1.6	TimeStamp	read-only	The value of the object tTlsClientCiphListTblLastChgd indicates the sysUpTime at the time of the last modification to tTlsClientCiphListTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TIM tTlsClntCiphListParTblLastChgd	1.3.6.1.4.1.6527.3.1.2.107.1.1.7	TimeStamp	read-only	The value of the object tTlsClntCiphListParTblLastChgd indicates the sysUpTime at the time of the last modification to tTlsClntCiphListParamTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TIM tTlsClntProfileTblLastChgd	1.3.6.1.4.1.6527.3.1.2.107.1.1.8	TimeStamp	read-only	The value of the object tTlsClntProfileTblLastChgd indicates the sysUpTime at the time of the last modification to tTlsClntProfileTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tmnxTlsConfigObjs	1.3.6.1.4.1.6527.3.1.2.107.2
tTlsTrustAnchorProfTable	1.3.6.1.4.1.6527.3.1.2.107.2.5		not-accessible	The tTlsTrustAnchorProfTable stores configuration and status information related to TLS trust anchor profiles.
tTlsTrustAnchorProfEntry	1.3.6.1.4.1.6527.3.1.2.107.2.5.1		not-accessible	The tTlsTrustAnchorProfEntry is an entry (conceptual row) in the tTlsTrustAnchorProfTable. Each entry contains information pertaining to a TLS trust anchor profile. Entries in this table can be created and deleted via SNMP SET operations to tTlsTrustAnchorProfRowStatus.
TNA tTlsTrustAnchorProfName	1.3.6.1.4.1.6527.3.1.2.107.2.5.1.1	TNamedItem	not-accessible	The value of the object tTlsTrustAnchorProfName specifies a TLS trust anchor profile name.
TIM tTlsTrustAnchorProfLastChgd	1.3.6.1.4.1.6527.3.1.2.107.2.5.1.2	TimeStamp	read-only	The value of the object tTlsTrustAnchorProfLastChgd indicates the sysUpTime at the time of the most recent management-initiated change to this entry.
ROW tTlsTrustAnchorProfRowStatus	1.3.6.1.4.1.6527.3.1.2.107.2.5.1.3	RowStatus	read-create	The value of the object tTlsTrustAnchorProfRowStatus specifies the status of the conceptual row in tTlsTrustAnchorProfTable. Rows are created and destroyed by SNMP SET operations on this object. Only values 'active(1)', 'createAndGo(4)' and 'destroy(6)' are supported.
INT tTlsTrustAnchorCAProfDownEx	1.3.6.1.4.1.6527.3.1.2.107.2.5.1.4	INTEGER	read-only	The value of the object tTlsTrustAnchorCAProfDown indicates the total number of trusted CA-profiles (Certificate-Authority) not operational in the trust anchor profile.
tTlsTrustAnchorsTable	1.3.6.1.4.1.6527.3.1.2.107.2.6		not-accessible	The tTlsTrustAnchorsTable maintains configuration of trust anchor CA profiles for TLS trust anchor profiles.
tTlsTrustAnchorsEntry	1.3.6.1.4.1.6527.3.1.2.107.2.6.1		not-accessible	The tTlsTrustAnchorsEntry is an entry (conceptual row) in the tTlsTrustAnchorsTable. Each entry represents the configuration of a CA profile for a TLS trust anchor profile. Entries in this table can be created and deleted via SNMP SET operations to tTlsTrustAnchorsRowStatus.
TNA tTlsTrustAnchorsCAProfile	1.3.6.1.4.1.6527.3.1.2.107.2.6.1.1	TNamedItem	not-accessible	The value of the object tTlsTrustAnchorsCAProfile specifies the name of a CA profile.
TIM tTlsTrustAnchorsLastChgd	1.3.6.1.4.1.6527.3.1.2.107.2.6.1.2	TimeStamp	read-only	The value of the object tTlsTrustAnchorsLastChgd indicates the sysUpTime at the time of the most recent management-initiated change to this entry.
ROW tTlsTrustAnchorsRowStatus	1.3.6.1.4.1.6527.3.1.2.107.2.6.1.3	RowStatus	read-create	The value of the object tTlsTrustAnchorsRowStatus specifies the status of the conceptual row in tTlsTrustAnchorsTable. Rows are created and destroyed by SNMP SET operations on this object. Only values 'active(1)', 'createAndGo(4)' and 'destroy(6)' are supported.
tTlsClientCiphListTable	1.3.6.1.4.1.6527.3.1.2.107.2.7		not-accessible	The tTlsClientCiphListTable maintains configuration of ordered lists of supported cipher suite codes to be sent in a Client Hello message by a TLS client.
tTlsClientCiphListEntry	1.3.6.1.4.1.6527.3.1.2.107.2.7.1		not-accessible	The tTlsClientCiphListEntry is an entry (conceptual row) in the tTlsClientCiphListTable. Each entry represents the configuration for an ordered list of supported cipher suite codes. Entries in this table can be created and deleted via SNMP SET operations to tTlsClientCiphListRowStatus.
TNA tTlsClientCiphListName	1.3.6.1.4.1.6527.3.1.2.107.2.7.1.1	TNamedItem	not-accessible	The value of the object tTlsClientCiphListName specifies the name of an ordered list of supported cipher suite codes for a TLS client.
TIM tTlsClientCiphListLastChgd	1.3.6.1.4.1.6527.3.1.2.107.2.7.1.2	TimeStamp	read-only	The value of the object tTlsClientCiphListLastChgd indicates the sysUpTime at the time of the most recent management-initiated change to this entry.
ROW tTlsClientCiphListRowStatus	1.3.6.1.4.1.6527.3.1.2.107.2.7.1.3	RowStatus	read-create	The value of the object tTlsClientCiphListRowStatus specifies the status of the conceptual row in tTlsClientCiphListTable. Rows are created and destroyed by SNMP SET operations on this object. Only values 'active(1)', 'createAndGo(4)' and 'destroy(6)' are supported.
tTlsClntCiphListParamTable	1.3.6.1.4.1.6527.3.1.2.107.2.8		not-accessible	The tTlsClntCiphListParamTable stores configuration and status information related to cipher suite codes which belong to ordered lists of cipher suite codes specified by entries in tTlsClientCiphListTable.
tTlsClntCiphListParamEntry	1.3.6.1.4.1.6527.3.1.2.107.2.8.1		not-accessible	The tTlsClntCiphListParamEntry is an entry (conceptual row) in the tTlsClntCiphListParamTable. Each entry contains information pertaining to a cipher suite code which belongs to a list specified by tTlsClientCiphListName. Entries in this table can be created and deleted via SNMP SET operations to tTlsClntCiphListParamRowStatus.
U32 tTlsClntCiphListParamIndex	1.3.6.1.4.1.6527.3.1.2.107.2.8.1.1	Unsigned32	not-accessible	The value of the object tTlsClntCiphListParamIndex specifies the TLS client's order of preference of a cipher suite code within the list specified by tTlsClientCiphListName.
TIM tTlsClntCiphListParamLastChgd	1.3.6.1.4.1.6527.3.1.2.107.2.8.1.2	TimeStamp	read-only	The value of the object tTlsClntCiphListParamLastChgd indicates the sysUpTime at the time of the most recent management-initiated change to this entry.
ROW tTlsClntCiphListParamRowStatus	1.3.6.1.4.1.6527.3.1.2.107.2.8.1.3	RowStatus	read-create	The value of the object tTlsClntCiphListParamRowStatus specifies the status of the conceptual row in tTlsClntCiphListParamTable. Rows are created and destroyed by SNMP SET operations on this object. Only values 'active(1)', 'createAndGo(4)' and 'destroy(6)' are supported. In order for the row creation to succeed, the value of tTlsClntCiphListParamSuiteCode has to be provided in the same SNMP SET PDU as the tTlsClntCiphListParamRowStatus. Otherwise the SET request will fail with an 'inconsistentValue' error.
TTL tTlsClntCiphListParamSuiteCode	1.3.6.1.4.1.6527.3.1.2.107.2.8.1.4	TTlsCipherSuiteCode	read-create	The value of the object tTlsClntCiphListParamSuiteCode specifies the cipher suite code related to tTlsClntCiphListParamIndex within the list specified by tTlsClientCiphListName. In order for the row creation to succeed, the value of tTlsClntCiphListParamSuiteCode has to be provided in the same SNMP SET PDU as the tTlsClntCiphListParamRowStatus. Otherwise the SET request will fail with an 'inconsistentValue' error.
tTlsClntProfileTable	1.3.6.1.4.1.6527.3.1.2.107.2.9		not-accessible	The tTlsClntProfileTable stores configuration and status information related to TLS client profiles.
tTlsClntProfileEntry	1.3.6.1.4.1.6527.3.1.2.107.2.9.1		not-accessible	The tTlsClntProfileEntry is an entry (conceptual row) in the tTlsClntProfileTable. Each entry contains information pertaining to a TLS client profile. Entries in this table can be created and deleted via SNMP SET operations to tTlsClntProfileRowStatus.
TNA tTlsClntProfileName	1.3.6.1.4.1.6527.3.1.2.107.2.9.1.1	TNamedItem	not-accessible	The value of the object tTlsClntProfileName specifies the name for a TLS client profile.
TIM tTlsClntProfileLastChgd	1.3.6.1.4.1.6527.3.1.2.107.2.9.1.2	TimeStamp	read-only	The value of the object tTlsClntProfileLastChgd indicates the sysUpTime at the time of the most recent management-initiated change to this entry.
ROW tTlsClntProfileRowStatus	1.3.6.1.4.1.6527.3.1.2.107.2.9.1.3	RowStatus	read-create	The value of the object tTlsClntProfileRowStatus specifies the status of the conceptual row in tTlsClntProfileTable. Rows are created and destroyed by SNMP SET operations on this object. Only values 'active(1)', 'createAndGo(4)' and 'destroy(6)' are supported.
TMN tTlsClntProfileAdminState	1.3.6.1.4.1.6527.3.1.2.107.2.9.1.4	TmnxAdminState	read-create	The value of the object tTlsClntProfileAdminState specifies the administrative state of the tTlsClntProfileEntry.
TMN tTlsClntProfileOperState	1.3.6.1.4.1.6527.3.1.2.107.2.9.1.5	TmnxOperState	read-only	The value of the object tTlsClntProfileOperState indicates the operational state of tTlsClntProfileEntry.
TNA tTlsClntProfileCiphListName	1.3.6.1.4.1.6527.3.1.2.107.2.9.1.6	TNamedItemOrEmpty	read-create	The value of the object tTlsClntProfileCiphListName specifies the ordered list of supported cipher suite codes associated with this TLS client profile.
TNA tTlsClntProfileTrstAnchrProf	1.3.6.1.4.1.6527.3.1.2.107.2.9.1.8	TNamedItemOrEmpty	read-create	The value of the object tTlsClntProfileTrstAnchrProf specifies the Certificate-Authority Trust Anchor Profile associated with this TLS client profile. An 'inconsistentValue' error is returned if this object is modified when tTlsClntProfileAdminState is in 'inService' state.
tmnxTlsStatistics	1.3.6.1.4.1.6527.3.1.2.107.3
tmnxTlsNotifyObjects	1.3.6.1.4.1.6527.3.1.2.107.10
tmnxTlsNotifyPrefix	1.3.6.1.4.1.6527.3.1.3.107
tmnxTlsNotifications	1.3.6.1.4.1.6527.3.1.3.107.0

RFC description

Manages TLS (Transport Layer Security) protocol configuration and status on Nokia SROS devices.

Start monitoring Nokia/Alcatel-Lucent 7750 SR / 7450 ESS providing TLS/VPLS services (trust-anchor/CA-profile status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TIMETRA-TLS-MIB