TSMEXT-MIB

All MIBs › TSMEXT-MIB

Category: Security and Encryption

Description: Provides Transport Security Model extension objects for SNMP v3 TLS and DTLS transport security.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TSMEXT-MIB?

TSMEXT-MIB defines Transport Security Model (TSM) extension objects for SNMPv3, adding management support for TLS and DTLS-based transport security as an extension to the standard SNMP security framework. Rather than exposing device hardware or application data, it models SNMP-engine-level configuration such as certificate/fingerprint mappings and transport security session parameters used to authenticate and encrypt SNMP traffic itself. Its 'monitoring' value is indirect: it helps confirm that the SNMP transport layer's TLS/DTLS security is correctly configured and operating, rather than reporting on device CPU, memory, or environmental status. It has an explicit dependency on the IETF Transport Security Model (RFC 6353) and the broader SNMPv3 USM/VACM security architecture that it extends. It is deployed on any SNMP agent that has been configured to use TLS or DTLS transport security, typically in security-hardened network management environments, where the TSMEXT-MIB RFC underpins the certificate-mapping objects used to secure those sessions.

IPNetwork Monitor allows you to monitor SNMP objects defined in TSMEXT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer
any SNMP agent using TLS/DTLS transport security

Monitoring Examples

With only an 'IMPORTS' clause given as a sample object, no concrete runtime tables can be cited from the source data. In practice a MIB of this kind would expose objects mapping SNMP transport security identities to X.509 certificate fingerprints, which an operator would poll to verify that only expected certificates are authorized for secure SNMP sessions. This remains a general description since the batch provided no actual object names beyond the IMPORTS clause.

What Can Be Monitored

TLS/DTLS transport security configuration
certificate-to-identity mapping

Imported Objects

From RFC-1212

OBJECT-TYPE

From XYLAN-BASE-MIB

xylanTsmArch

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
tsmExtensions	1.3.6.1.4.1.800.2.19.1
tsmAdmin	1.3.6.1.4.1.800.2.19.1.1
tsmAdminPortTable	1.3.6.1.4.1.800.2.19.1.1.1		not-accessible	TSM Port Configuration Table.
tsmAdminPortEntry	1.3.6.1.4.1.800.2.19.1.1.1.1		not-accessible	A TSM Port Configuration Entry.
INT tsmAdminPortSlotNumber	1.3.6.1.4.1.800.2.19.1.1.1.1.1	INTEGER	read-only	The slot number of the Token Ring Switching Module.
INT tsmAdminPortNumber	1.3.6.1.4.1.800.2.19.1.1.1.1.2	INTEGER	read-only	The port number of the Token Ring Switching Module.
INT tsmAdminPortState	1.3.6.1.4.1.800.2.19.1.1.1.1.3	INTEGER	read-write	The configured state of the port. 1 = enable. 2 = disable.
INT tsmAdminPortActiveMon	1.3.6.1.4.1.800.2.19.1.1.1.1.4	INTEGER	read-write	The configured active monitor participation of the port. 1 = yes. Participate in the active monitor selection process. 2 = no. Do NOT participate in the active monitor selection process.
INT tsmAdminPortAcBitSet	1.3.6.1.4.1.800.2.19.1.1.1.1.5	INTEGER	read-write	The configured control mode for handling the ARI/FCI Bits of the port. 1 = nonLocal. Set ARI/FCI bits on all non-local LLC frames repeated by the port. For local frames repeat the ARI/FCI bits just as they are received. 2 = repeat. Repeat ARI/FCI bit on all LLC frames just as they are received. 3 = always. Set ARI/FCI bits on all LLC frames repeated by the port. 4 = never. Do not set ARI/FCI bits on any LLC frames repeated by the port.
INT tsmAdminPortConfigType	1.3.6.1.4.1.800.2.19.1.1.1.1.6	INTEGER	read-write	The configured config-type of the port. 1 = auto. Automatically set the port's ring speed, mode, duplex and switching mode parameters. 2 = fixed. Use customer defined values for the port's ring speed, mode, duplex and switching mode parameters.
INT tsmAdminPortRingSpeed	1.3.6.1.4.1.800.2.19.1.1.1.1.7	INTEGER	read-write	The configured ring speed of the port. 1 = auto. Automatically set the port's ring speed. 2 = fourMegabit. Always set the port's ring speed at four megabits. 3 = sixteenMegabit. Always set the port's ring speed at sixteen megabits. This object may ONLY be set if the value of port's tsmAdminPortConfigType is fixed(1).
INT tsmAdminPortPortMode	1.3.6.1.4.1.800.2.19.1.1.1.1.8	INTEGER	read-write	The configured port mode of the port. 1 = auto. Automatically sense the port mode. This value is set by the switch when the tsmAdminPortConfigMode is set to auto. This object CANNOT be changed to auto by an SNMP SET. 2 = portMode. Only a dedicated connection to a station is supported. 3 = adapterMode. The port operates like a station. The connection can be either dedicated or shared. This object may ONLY be set if the value of port's tsmAdminPortConfigType is fixed(1). auto(1) is NOT a valid SET value.
INT tsmAdminPortDuplex	1.3.6.1.4.1.800.2.19.1.1.1.1.9	INTEGER	read-write	The configured duplex mode of the port. 1 = auto. Automatically set the port's duplex mode. 2 = halfDuplex. Alway run the port in half duplex mode. 3 = fullDuplex. Alway run the port in full duplex mode. This object may ONLY be set if the value of port's tsmAdminPortConfigType is fixed(1).
INT tsmAdminPortSwMode	1.3.6.1.4.1.800.2.19.1.1.1.1.10	INTEGER	read-write	The configured duplex mode of the port. 1 = cutThrough. A scheme that allows frame transmission to begin at the output port prior to end-of-frame reception at the input port. 2 = storeAndForward. The entire packet is received and stored before switching begins. 3 = adaptive. Alternate between cut-through and store-and-forward base on the specified error threshold.
INT tsmAdminPortReset	1.3.6.1.4.1.800.2.19.1.1.1.1.11	INTEGER	read-write	This object is used to reset the port. 1 = ready. The port is ready to be reset. 2 = reset. Reset the port.
tsmAdminSwModeTable	1.3.6.1.4.1.800.2.19.1.1.2		not-accessible	TSM Switching Mode Configuration Table.
tsmAdminSwModeEntry	1.3.6.1.4.1.800.2.19.1.1.2.1		not-accessible	A TSM Switching Mode Configuration Entry.
INT tsmAdminSwModeSlotNumber	1.3.6.1.4.1.800.2.19.1.1.2.1.1	INTEGER	read-only	The slot number of the Token Ring Switching Module.
INT tsmAdminSwModeHiErrThresh	1.3.6.1.4.1.800.2.19.1.1.2.1.2	INTEGER	read-write	The high error threshold in percent for all ports associated with the TSM which are configured to run in adaptive mode. If the percentage of errors in a sampling period meets or exceeds this value, the port's switching mode will change from cut-through to store-and-forward mode.
INT tsmAdminSwModeLoErrThresh	1.3.6.1.4.1.800.2.19.1.1.2.1.3	INTEGER	read-write	The low error threshold in percent for all ports associated with the TSM which are configured to run in adaptive mode. If the percentage of errors in a sampling period falls below this value, the port's switching mode will change from store-and-forward to cut-through mode.
INT tsmAdminSwModeTrendThresh	1.3.6.1.4.1.800.2.19.1.1.2.1.4	INTEGER	read-write	The error rate trend threshold in percent for all ports associated with the TSM which are configured to run in adaptive mode. When the percentage of errors is between the high and low error thresholds AND the port is currently running in cut-through mode, the error rate trend which is the difference in errors between two sampling periods is compared to the error rate trend threshold. If the error rate trend is greater than this value, the port's switching mode will change from cut-through mode to store-and-forward. The error rate trend threshold should be no greater than the difference between the high and low threshold values.
INT tsmAdminSwModeSamplePeriod	1.3.6.1.4.1.800.2.19.1.1.2.1.5	INTEGER	read-write	The sampling period in seconds for all ports associated with the TSM which are configured to run in adaptive mode.
INT tsmAdminSwModeReset	1.3.6.1.4.1.800.2.19.1.1.2.1.6	INTEGER	read-write	This object is used to reset the TSM. 1 = ready. The TSM is ready to be reset. 2 = reset. Reset the TSM.
tsmOper	1.3.6.1.4.1.800.2.19.1.2
tsmOperPortTable	1.3.6.1.4.1.800.2.19.1.2.1		not-accessible	TSM Port Operational Table.
tsmOperPortEntry	1.3.6.1.4.1.800.2.19.1.2.1.1		not-accessible	A TSM Port Operational Entry.
INT tsmOperPortSlotNumber	1.3.6.1.4.1.800.2.19.1.2.1.1.1	INTEGER	read-only	The slot number of the Token Ring Switching Module.
INT tsmOperPortNumber	1.3.6.1.4.1.800.2.19.1.2.1.1.2	INTEGER	read-only	The port number of the Token Ring Switching Module.
INT tsmOperPortState	1.3.6.1.4.1.800.2.19.1.2.1.1.3	INTEGER	read-only	The operational state of the port. 1 = enable. 2 = disable.
INT tsmOperPortActiveMon	1.3.6.1.4.1.800.2.19.1.2.1.1.4	INTEGER	read-only	The operational active monitor participation of the port. 1 = yes. Participate in the active monitor selection process. 2 = no. Do NOT participate in the active monitor selection process.
INT tsmOperPortAcBitSet	1.3.6.1.4.1.800.2.19.1.2.1.1.5	INTEGER	read-only	The operational control mode for handling the ARI/FCI Bits of the port. 1 = nonLocal. Set ARI/FCI bits on all non-local LLC frames repeated by the port. For local frames repeat the ARI/FCI bits just as they are received. 2 = repeat. Repeat ARI/FCI bit on all LLC frames just as they are received. 3 = always. Set ARI/FCI bits on all LLC frames repeated by the port. 4 = never. Do not set ARI/FCI bits on any LLC frames repeated by the port.
INT tsmOperPortConfigType	1.3.6.1.4.1.800.2.19.1.2.1.1.6	INTEGER	read-only	The operational config-type of the port. 1 = auto. Automatically set the port's ring speed, mode and duplex parameters. 2 = fixed. Use customer defined values for the port's ring speed, mode and duplex parameters.
INT tsmOperPortRingSpeed	1.3.6.1.4.1.800.2.19.1.2.1.1.7	INTEGER	read-only	The operational ring speed of the port. 1 = auto. The port has not yet automatically set the ring speed. 2 = fourMegabit. 3 = sixteenMegabit.
INT tsmOperPortPortMode	1.3.6.1.4.1.800.2.19.1.2.1.1.8	INTEGER	read-only	The operational port mode of the port. 1 = auto. Automatically sense the port mode. 2 = portMode. Only a dedicated connection to a station is supported. 3 = adapterMode. The port operates like a station. The connection can be either dedicated or shared.
INT tsmOperPortDuplex	1.3.6.1.4.1.800.2.19.1.2.1.1.9	INTEGER	read-only	The configured duplex mode of the port. 1 = auto. The port has not yet automatically set the port's duplex mode. 2 = halfDuplex. 3 = fullDuplex.
INT tsmOperPortSwMode	1.3.6.1.4.1.800.2.19.1.2.1.1.10	INTEGER	read-only	The configured switch mode of the port. 1 = cutThrough. A scheme that allows frame transmission to begin at the output port prior to end-of-frame reception at the input port. 2 = storeAndForward. The entire packet is received and stored before switching begins. 3 = adaptive. Alternate between cut-through and store-and-forward base on the specified error threshold.
INT tsmOperPortAdaptSwMode	1.3.6.1.4.1.800.2.19.1.2.1.1.11	INTEGER	read-only	The operational adaptive switch mode of the port. 1 = cutThrough. A scheme that allows frame transmission to begin at the output port prior to end-of-frame reception at the input port. 2 = storeAndForward. The entire packet is received and stored before switching begins. 3 = notAdaptive. The port is not running in adaptive mode.
INT tsmOperPortAdaptErrRate	1.3.6.1.4.1.800.2.19.1.2.1.1.12	INTEGER	read-only	The operational adaptive error rate in percent of the port. This value is the percent of errors in the last sampling period.
INT tsmOperPortAdaptTrend	1.3.6.1.4.1.800.2.19.1.2.1.1.13	INTEGER	read-only	The operational adaptive error rate trend in percent of the port. This value is the difference in errors between the last two sampling periods.
INT tsmOperPortOpenState	1.3.6.1.4.1.800.2.19.1.2.1.1.14	INTEGER	read-only	The operational open status of the port. 1 = opened 2 = closed 3 = opening 4 = closing 5 = openFailure 6 = ringFailure
MAC tsmOperPortUpStream	1.3.6.1.4.1.800.2.19.1.2.1.1.15	MacAddress	read-only	The operational MAC Address of the up stream neighbour in the ring.
tsmOperSwModeTable	1.3.6.1.4.1.800.2.19.1.2.2		not-accessible	TSM Switch Mode Operational Table.
tsmOperSwModeEntry	1.3.6.1.4.1.800.2.19.1.2.2.1		not-accessible	A TSM Port Operational Entry.
INT tsmOperSwModeSlotNumber	1.3.6.1.4.1.800.2.19.1.2.2.1.1	INTEGER	read-only	The slot number of the Token Ring Switching Module.
INT tsmOperSwModeHiErrThresh	1.3.6.1.4.1.800.2.19.1.2.2.1.2	INTEGER	read-only	The operational high error threshold for all ports associated with the TSM which are configured to run in adaptive mode. If the percentage of errors in a sampling period meets or exceeds this value, the port's switching mode will change from cut-through to store-and-forward mode.
INT tsmOperSwModeLoErrThresh	1.3.6.1.4.1.800.2.19.1.2.2.1.3	INTEGER	read-only	The operational low error threshold for all ports associated with the TSM which are configured to run in adaptive mode. If the percentage of errors in a sampling period falls below this value, the port's switching mode will change from store-and-forward to cut-through mode.
INT tsmOperSwModeTrendThresh	1.3.6.1.4.1.800.2.19.1.2.2.1.4	INTEGER	read-only	The operational error rate trend threshold in percent for all ports associated with the TSM which are configured to run in adaptive mode. When the percentage of errors is between the high and low error thresholds AND the port is currently running in cut-through mode, the error rate trend which is the difference in errors between two sampling periods is compared to the error rate trend threshold. If the error rate trend is greater than this value, the port's switching mode will change from cut-through mode to store-and-forward.
INT tsmOperSwModeSamplePeriod	1.3.6.1.4.1.800.2.19.1.2.2.1.5	INTEGER	read-only	The operational sampling period in seconds for all ports associated with the TSM which are configured to run in adaptive mode.

RFC description

Token Ring Switching Module (TSM) Extensions MIB from Xylan; defines TSM port and switching mode configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMP agent using TLS/DTLS transport security (certificate/fingerprint mapping status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TSMEXT-MIB

What Is TSMEXT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description