RFC 3559
Multicast Address Allocation MIB
RFC 3559: Multicast Address Allocation MIB 🎀
okay bestie, let's get the basics down first 🧚
- Network Working Group 💜
- Request for Comments: 3559 ✨
- Author: D. Thaler at Microsoft 💅
- Category: Standards Track 🔥
- Date: June 2003 🌸
- Obsoletes / Updates: the title block doesn't list anything here, so there's no obsoleting or updating to report 🙈
Status of This Memo
this one is an Internet standards track protocol for the Internet community 🦋 it's asking for discussion and suggestions for improvements, so bring your ideas 💖 for the current standardization state and status of this protocol, check the current edition of the "Internet Official Protocol Standards" (STD 1) 📚 and yes, distribution of this memo is unlimited 🌈
Copyright Notice
Copyright (C) The Internet Society (2003). All Rights Reserved. 🔒✨
Abstract
this memo defines a piece of the Management Information Base (MIB) 🧩 for network management protocols in the Internet community. it's all about managed objects used to manage multicast address allocation 🌸
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 2
2. The Internet-Standard Management Framework . . . . . . . . . . 2
3. Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
3.1. Protocol-independent objects . . . . . . . . . . . . . . 3
3.2. Protocol-specific objects. . . . . . . . . . . . . . . . 3
4. Definitions. . . . . . . . . . . . . . . . . . . . . . . . . . 4
5. IANA Considerations. . . . . . . . . . . . . . . . . . . . . . 32
6. Security Considerations. . . . . . . . . . . . . . . . . . . . 33
7. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 34
8. Intellectual Property Statement. . . . . . . . . . . . . . . . 34
9. References . . . . . . . . . . . . . . . . . . . . . . . . . . 35
9.1. Normative References . . . . . . . . . . . . . . . . . . 35
9.2. Informative References . . . . . . . . . . . . . . . . . 35
10. Author's Address . . . . . . . . . . . . . . . . . . . . . . . 36
11. Full Copyright Statement . . . . . . . . . . . . . . . . . . . 371. Introduction ✨
okay so this document defines a Management Information Base (MIB) module for managing multicast address allocation 🦋 it works in a protocol-independent way, and it also covers managing the specific protocols used for allocating multicast addresses 💅 the protocol-independent objects in this MIB apply to all multicast address allocation servers (MAASs) and clients, as described in [ARCH] 🎀 that includes the ones that allocate source-specific multicast addresses for the local machine 🫶
the protocol-specific objects in this MIB cover the Multicast Address Dynamic Client Allocation Protocol (MADCAP) [MADCAP] 🌸 and interactions with the Multicast-scope Zone Announcement Protocol (MZAP) [MZAP] get noted wherever they're relevant 🧚
2. The Internet-Standard Management Framework 💜
if you want the full tea on the documents that describe the current Internet-Standard Management Framework, check section 7 of RFC 3410 [RFC3410] 📚
managed objects are accessed through a virtual information store called the Management Information Base, or MIB 🗂️ MIB objects are generally accessed through the Simple Network Management Protocol (SNMP) 🔥
the objects in the MIB are defined using the mechanisms in the Structure of Management Information (SMI) 🧩 this memo specifies a MIB module that is compliant to the SMIv2, described in STD 58, RFC 2578 [RFC2578], STD 58, RFC 2579 [RFC2579] and STD 58, RFC 2580 [RFC2580] 💖
3. Overview 🌈
the whole point of this MIB module is to let you configure and monitor the status of multicast address allocation within the local domain 👑
some important monitoring questions this MIB module can answer:
- How full is scope X?
- Who's using up the space?
- Who allocated a given address A?
- Are requests being met?
this MIB module is split into two main sections:
- Protocol-independent objects relevant to all multicast address allocation servers and clients.
- Protocol-specific objects related to the MADCAP client-server protocol.
3.1. Protocol-independent objects 🦋
the protocol-independent objects are one "capabilities" scalar and five tables 💅 here they are:
- The Scope Table contains information on the multicast scopes known to a multicast address allocation server. this table lets you configure scopes, and see what scopes the local system knows about after they were configured somewhere else 🎀
- The Scope Name Table contains the names of the multicast scopes. it logically extends the Scope Table with the list of scope names in various languages for each scope 🌸
- The Allocation Range Table contains the address ranges the device may allocate addresses from. it also helps answer "How full is scope X?" and "Are requests being met?" 🔥
- The Request Table contains the requests for address allocations, and helps answer "Who's using up the space?" 🫶
- The Address Table contains the blocks of addresses that have been allocated. together with the Request Table, it answers "Who allocated a given address A?" 🧚
3.2. Protocol-specific objects ✨
the MADCAP objects are a group of (scalar) configuration parameters and a group of (scalar) statistics 💜
4. Definitions 👑
MALLOC-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, mib-2,
Unsigned32, Gauge32, Counter32 FROM SNMPv2-SMI
RowStatus, TruthValue, StorageType FROM SNMPv2-TC
MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF
InetAddress, InetAddressType FROM INET-ADDRESS-MIB
LanguageTag FROM IPMROUTE-STD-MIB
SnmpAdminString FROM SNMP-FRAMEWORK-MIB
IANAscopeSource, IANAmallocRangeSource FROM IANA-MALLOC-MIB;
mallocMIB MODULE-IDENTITY
LAST-UPDATED "200306090000Z" -- June 9, 2003
ORGANIZATION "IETF MALLOC Working Group"
CONTACT-INFO
" WG-EMail: malloc@catarina.usc.edu
Subscribe: malloc-request@catarina.usc.edu
Archive: catarina.usc.edu/pub/multicast/malloc/
Co-chair/editor:
Dave Thaler
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052
EMail: dthaler@microsoft.com
Co-chair:
Steve Hanna
Sun Microsystems, Inc.
One Network Drive
Burlington, MA 01803
EMail: steve.hanna@sun.com"
DESCRIPTION
"The MIB module for management of multicast address
allocation.
Copyright (C) The Internet Society (2003). This version of
this MIB module is part of RFC 3559; see the RFC itself for
full legal notices."
-- revision log
REVISION "200306090000Z" -- June 9, 2003
DESCRIPTION
"Initial version, published as RFC 3559."
::= { mib-2 101 }
mallocMIBObjects OBJECT IDENTIFIER ::= { mallocMIB 1 }
malloc OBJECT IDENTIFIER ::= { mallocMIBObjects 1 }
madcap OBJECT IDENTIFIER ::= { mallocMIBObjects 2 }
--
-- scalars
--
mallocCapabilities OBJECT-TYPE
SYNTAX BITS {
startTime(0),
serverMobility(1),
retryAfter(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object describes the capabilities which a client or
server supports. The startTime bit indicates that
allocations with a future start time are supported. The
serverMobility bit indicates that allocations can be renewed
or released from a server other than the one granting the
original allocation. The retryAfter bit indicates support
for a waiting state where the client may check back at a
later time to get the status of its request."
::= { malloc 1 }
--
-- the Scope Table
--
mallocScopeTable OBJECT-TYPE
SYNTAX SEQUENCE OF MallocScopeEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The (conceptual) table containing information on multicast
scopes from which addresses may be allocated. Entries in
this table may be dynamically discovered via some other
protocol, such as MZAP, or may be statically configured,
such as in an isolated network environment. Each scope is
associated with a range of multicast addresses, and ranges
for different rows must be disjoint."
::= { malloc 2 }
mallocScopeEntry OBJECT-TYPE
SYNTAX MallocScopeEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
particular multicast scope."
INDEX { mallocScopeAddressType, mallocScopeFirstAddress }
::= { mallocScopeTable 1 }
MallocScopeEntry ::= SEQUENCE {
mallocScopeAddressType InetAddressType,
mallocScopeFirstAddress InetAddress,
mallocScopeLastAddress InetAddress,
mallocScopeHopLimit Unsigned32,
mallocScopeStatus RowStatus,
mallocScopeSource IANAscopeSource,
mallocScopeDivisible TruthValue,
mallocScopeServerAddressType InetAddressType,
mallocScopeServerAddress InetAddress,
mallocScopeSSM TruthValue,
mallocScopeStorage StorageType
}
mallocScopeAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The type of the addresses in the multicast scope range.
Legal values correspond to the subset of address families
for which multicast address allocation is supported."
::= { mallocScopeEntry 1 }
mallocScopeFirstAddress OBJECT-TYPE
SYNTAX InetAddress (SIZE(0..20))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The first address in the multicast scope range. The type
of this address is determined by the value of the
mallocScopeAddressType object."
::= { mallocScopeEntry 2 }
mallocScopeLastAddress OBJECT-TYPE
SYNTAX InetAddress (SIZE(0..20))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The last address in the multicast scope range. The type of
this address is determined by the value of the
mallocScopeAddressType object."
::= { mallocScopeEntry 3 }
mallocScopeHopLimit OBJECT-TYPE
SYNTAX Unsigned32 (0..255)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The default IPv4 TTL or IPv6 hop limit which applications
should use for groups within the scope."
DEFVAL { 255 }
::= { mallocScopeEntry 4 }
mallocScopeStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The status of this row, by which new entries may be
created, or old entries deleted from this table. If write
access is supported, the other writable objects in this
table may be modified even while the status is `active'."
::= { mallocScopeEntry 5 }
mallocScopeSource OBJECT-TYPE
SYNTAX IANAscopeSource
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The method by which this entry was learned."
::= { mallocScopeEntry 6 }okay bestie, we're picking right back up with the knobs that decide whether a scope is divisible 💅
mallocScopeDivisible is a TruthValue flag and it's giving on/off energy 🎀. It's false by default. When it's false, the server can hand out addresses from the entire range. When it's true, the server must not use the entire range and can only allocate from a subrange it learned some other way. Creating or deleting a scope that isn't divisible also creates or deletes the matching row in the allocation range table, and deleting a divisible scope wipes its rows in that table and in the request table too 🧹
mallocScopeDivisible OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"If false, the server may allocate addresses out of the
entire range. If true, the server must not allocate
addresses out of the entire range, but may only allocate
addresses out of a subrange learned via another method.
Creating or deleting a scope which is not divisible has the
side effect of creating or deleting the corresponding entry
in the mallocAllocRangeTable. Deleting a scope which is
divisible has the side effect of deleting any corresponding
entries in the mallocAllocRangeTable, and the
mallocRequestTable."
DEFVAL { false }
::= { mallocScopeEntry 7 }
mallocScopeServerAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The type of the address of a multicast address allocation
server to which a request may be sent."
DEFVAL { unknown }
::= { mallocScopeEntry 8 }
mallocScopeServerAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The address of a multicast address allocation server to
which a request may be sent. The default value is an zero-
length address, indicating that no server is known. The
type of this address is determined by the value of the
mallocScopeServerAddressType object."
DEFVAL { ''h } -- the empty string
::= { mallocScopeEntry 9 }
mallocScopeSSM OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Indicates whether the scope is a Source-Specific Multicast
(SSM) range."
DEFVAL { false }
::= { mallocScopeEntry 10 }
mallocScopeStorage OBJECT-TYPE
SYNTAX StorageType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The storage type for this conceptual row. Conceptual rows
having the value 'permanent' need not allow write-access to
any columnar objects in the row."
DEFVAL { nonVolatile }
::= { mallocScopeEntry 11 }okay now we're in the scope name table 🏷️ this one holds the human-readable names for each scope. entries can be found dynamically through another protocol like MZAP, or you can set them up by hand, like on an isolated network 🌸
--
-- the Scope Name Table
--
mallocScopeNameTable OBJECT-TYPE
SYNTAX SEQUENCE OF MallocScopeNameEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The (conceptual) table containing information on multicast
scope names. Entries in this table may be dynamically
discovered via some other protocol, such as MZAP, or may be
statically configured, such as in an isolated network
environment."
::= { malloc 3 }
mallocScopeNameEntry OBJECT-TYPE
SYNTAX MallocScopeNameEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
particular multicast scope name."
INDEX { mallocScopeAddressType, mallocScopeFirstAddress,
IMPLIED mallocScopeNameLangName }
::= { mallocScopeNameTable 1 }
MallocScopeNameEntry ::= SEQUENCE {
mallocScopeNameLangName LanguageTag,
mallocScopeNameScopeName SnmpAdminString,
mallocScopeNameDefault TruthValue,
mallocScopeNameStatus RowStatus,
mallocScopeNameStorage StorageType
}
mallocScopeNameLangName OBJECT-TYPE
SYNTAX LanguageTag (SIZE(1..94))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The RFC 3066 language tag for the language of the scope
name."
::= { mallocScopeNameEntry 1 }
mallocScopeNameScopeName OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The textual name associated with the multicast scope. The
value of this object should be suitable for displaying to
end-users, such as when allocating a multicast address in
this scope. If the scope is an IPv4 scope, and no name is
specified, the default value of this object should be the
string 239.x.x.x/y with x and y replaced appropriately to
describe the address and mask length associated with the
scope. If the scope is an IPv6 scope, and no name is
specified, the default value of this object should
generically describe the scope level (e.g., site)."
::= { mallocScopeNameEntry 2 }
mallocScopeNameDefault OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"If true, indicates a preference that the name in the
associated language should be used by applications if no
name is available in a desired language."
DEFVAL { false }
::= { mallocScopeNameEntry 3 }
mallocScopeNameStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The status of this row, by which new entries may be
created, or old entries deleted from this table. If write
access is supported, the other writable objects in this
table may be modified even while the status is `active'."
::= { mallocScopeNameEntry 4 }
mallocScopeNameStorage OBJECT-TYPE
SYNTAX StorageType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The storage type for this conceptual row. Conceptual rows
having the value 'permanent' need not allow write-access to
any columnar objects in the row."
DEFVAL { nonVolatile }
::= { mallocScopeNameEntry 5 }and now the allocation range table 🧁 this is where the subranges live, the spots the device can actually hand addresses out of if it's a MAAS. if the device is a Prefix Coordinator, any ranges it's advertising to MAAS's show up here too. a device can be both, which is lowkey iconic 👑
--
-- the Allocation Range Table
--
mallocAllocRangeTable OBJECT-TYPE
SYNTAX SEQUENCE OF MallocAllocRangeEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The (conceptual) table containing information on subranges
of addresses from which the device may allocate addresses,
if it is a MAAS. If the device is a Prefix Coordinator, any
ranges which the device is advertising to MAAS's will be in
this table. Note that the device may be both a MAAS and a
Prefix Coordinator.
Address ranges for different rows must be disjoint, and must
be contained with the address range of the corresponding row
of the mallocScopeTable.
Deleting an allocation range has the side effect of deleting
any entries within that range from the mallocAddressTable."
::= { malloc 4 }
mallocAllocRangeEntry OBJECT-TYPE
SYNTAX MallocAllocRangeEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
particular allocation range."
INDEX { mallocScopeAddressType, mallocScopeFirstAddress,
mallocAllocRangeFirstAddress }
::= { mallocAllocRangeTable 1 }
MallocAllocRangeEntry ::= SEQUENCE {
mallocAllocRangeFirstAddress InetAddress,
mallocAllocRangeLastAddress InetAddress,
mallocAllocRangeStatus RowStatus,
mallocAllocRangeSource IANAmallocRangeSource,
mallocAllocRangeLifetime Unsigned32,
mallocAllocRangeMaxLeaseAddrs Unsigned32,
mallocAllocRangeMaxLeaseTime Unsigned32,
mallocAllocRangeNumAllocatedAddrs Gauge32,
mallocAllocRangeNumOfferedAddrs Gauge32,
mallocAllocRangeNumWaitingAddrs Gauge32,
mallocAllocRangeNumTryingAddrs Gauge32,
mallocAllocRangeAdvertisable TruthValue,
mallocAllocRangeTotalAllocatedAddrs Gauge32,
mallocAllocRangeTotalRequestedAddrs Gauge32,
mallocAllocRangeStorage StorageType
}
mallocAllocRangeFirstAddress OBJECT-TYPE
SYNTAX InetAddress (SIZE(0..20))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The first address in the allocation range. The type of
this address is determined by the value of the
mallocScopeAddressType object."
::= { mallocAllocRangeEntry 1 }
mallocAllocRangeLastAddress OBJECT-TYPE
SYNTAX InetAddress (SIZE(0..20))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The last address in the allocation range. The type of this
address is determined by the value of the
mallocScopeAddressType object."
::= { mallocAllocRangeEntry 2 }
mallocAllocRangeStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The status of this row, by which new entries may be
created, or old entries deleted from this table. If write
access is supported, the other writable objects in this
table may be modified even while the status is `active'."
::= { mallocAllocRangeEntry 3 }
mallocAllocRangeSource OBJECT-TYPE
SYNTAX IANAmallocRangeSource
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The means by which this entry was learned."
::= { mallocAllocRangeEntry 4 }
mallocAllocRangeLifetime OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The number of seconds remaining in the lifetime of the
(sub)range out of which addresses are being allocated. A
value of 0 indicates that the range is not subject to
aging."
DEFVAL { 0 }
::= { mallocAllocRangeEntry 5 }
mallocAllocRangeMaxLeaseAddrs OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The maximum number of addresses which the server is willing
to grant for each future request in this range. A value of
0 means that no specific limit is enforced, as long as the
server has valid addresses to allocate."
DEFVAL { 0 }
::= { mallocAllocRangeEntry 6 }
mallocAllocRangeMaxLeaseTime OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The maximum lifetime which the server will grant for future
requests in this range. A value of 0 means that no
additional limit is enforced beyond that of
mallocAllocRangeLifetime."
DEFVAL { 0 }
::= { mallocAllocRangeEntry 7 }
mallocAllocRangeNumAllocatedAddrs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of addresses in the range which have been
allocated. This value can be used to determine the current
address space utilization within the scoped range. This
should match the total number of addresses for this scope
covered by entries in the mallocAddressTable."
::= { mallocAllocRangeEntry 8 }
mallocAllocRangeNumOfferedAddrs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of addresses in the range which have been
offered. This number should match the sum of
mallocRequestNumAddrs for all entries in the
mallocRequestTable in the offered state. Together with
mallocAllocRangeNumAllocatedAddrs and
mallocAllocRangeNumTryingAddrs, this can be used to
determine the address space utilization within the scoped
range in the immediate future."
::= { mallocAllocRangeEntry 9 }okay so this part is all about the rows that tell you how much address space is just sitting there waiting for its turn 🫶 the vibes are very "patience is a virtue" 🧚
mallocAllocRangeNumWaitingAddrs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of addresses in the range which have been
requested, but whose state is waiting, while the server
attempts to acquire more address space."
::= { mallocAllocRangeEntry 10 }
mallocAllocRangeNumTryingAddrs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of addresses in the scope covered by entries in
the mallocRequestTable in the trying state."
::= { mallocAllocRangeEntry 11 }
mallocAllocRangeAdvertisable OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The value of this object is true if the range is eligible
to be advertised to other MAASs. When the row is first
created, the default value of this object is true if the
scope is divisible, and is false otherwise."
::= { mallocAllocRangeEntry 12 }
mallocAllocRangeTotalAllocatedAddrs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The approximate number of addresses in the range which have
been allocated by any MAAS, as determined by a Prefix
Coordinator. This object need only be present if
mallocAllocRangeAdvertisable is true. If the number is
unknown, a value of 0 may be reported."
::= { mallocAllocRangeEntry 13 }
mallocAllocRangeTotalRequestedAddrs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The approximate number of addresses in the range for which
there is potential demand among MAASs, as determined by a
Prefix Coordinator. This object need only be present if
mallocAllocRangeAdvertisable is true. If the number is
unknown, a value of 0 may be reported."
::= { mallocAllocRangeEntry 14 }
mallocAllocRangeStorage OBJECT-TYPE
SYNTAX StorageType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The storage type for this conceptual row. Conceptual rows
having the value 'permanent' need not allow write-access to
any columnar objects in the row."
DEFVAL { nonVolatile }
::= { mallocAllocRangeEntry 15 }ngl the Storage one is giving "set it and forget it" but make it make sense 💅 next up is the Request Table, which is basically the group chat log of every allocation request that came in 📜🌸
--
-- the Request Table
--
mallocRequestTable OBJECT-TYPE
SYNTAX SEQUENCE OF MallocRequestEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The (conceptual) table containing information on allocation
requests, whether allocated or in progress. This table may
also be used to determine which clients are responsible for
high address space utilization within a given scope.
Entries in this table reflect requests dynamically received
by an address allocation protocol."
::= { malloc 5 }
mallocRequestEntry OBJECT-TYPE
SYNTAX MallocRequestEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
particular allocation request."
INDEX { mallocRequestId }
::= { mallocRequestTable 1 }
MallocRequestEntry ::= SEQUENCE {
mallocRequestId Unsigned32,
mallocRequestScopeAddressType InetAddressType,
mallocRequestScopeFirstAddress InetAddress,
mallocRequestStartTime Unsigned32,
mallocRequestEndTime Unsigned32,
mallocRequestNumAddrs Unsigned32,
mallocRequestState INTEGER,
mallocRequestClientAddressType InetAddressType,
mallocRequestClientAddress InetAddress,
mallocRequestServerAddressType InetAddressType,
mallocRequestServerAddress InetAddress,
mallocRequestLeaseIdentifier OCTET STRING
}
mallocRequestId OBJECT-TYPE
SYNTAX Unsigned32 (1..4294967295)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An arbitrary value identifying this row."
::= { mallocRequestEntry 1 }
mallocRequestScopeAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of the first address of the scope to which the
request applies. Legal values correspond to the subset of
address families for which multicast address allocation is
supported."
::= { mallocRequestEntry 2 }
mallocRequestScopeFirstAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The first address of the scope to which the request
applies. This must match mallocScopeFirstAddress for some
row in the mallocScopeTable. The type of this address is
determined by the value of the mallocRequestScopeAddressType
object."
::= { mallocRequestEntry 3 }
mallocRequestStartTime OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of seconds remaining before the start time of
the request. A value of 0 means that the allocation is
currently in effect."
::= { mallocRequestEntry 4 }
mallocRequestEndTime OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of seconds remaining before the end time of the
request."
::= { mallocRequestEntry 5 }
mallocRequestNumAddrs OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of addresses requested. If the addresses have
been allocated, this number should match the total number of
addresses for this request covered by entries in the
mallocAddressTable."
::= { mallocRequestEntry 6 }
mallocRequestState OBJECT-TYPE
SYNTAX INTEGER {
allocated(1),
offered(2), -- tentatively allocated
waiting(3), -- waiting for more space
trying(4) -- working on allocating
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The state of the request. A value of allocated(1)
indicates that one or more entries for this request are
present in the mallocAddressTable. A value of offered(2)
indicates that addresses have been offered to the client
(e.g. via a MADCAP OFFER message), but the allocation has
not been committed. A value of waiting(3) indicates that
the allocation is blocked while the server attempts to
acquire more space from which it can allocate addresses. A
value of trying(4) means that no addresses have been offered
to the client, but that an attempt to allocate is in
progress."
::= { mallocRequestEntry 7 }
mallocRequestClientAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of the address of the client that (last) requested
this allocation."
::= { mallocRequestEntry 8 }
mallocRequestClientAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The address of the client that (last) requested this
allocation. The type of this address is determined by the
value of the mallocRequestClientAddressType object."
::= { mallocRequestEntry 9 }
mallocRequestServerAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of the address of the server to which the request
was (last) sent."
::= { mallocRequestEntry 10 }
mallocRequestServerAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The address of the server to which the request was (last)
sent. The type of this address is determined by the value
of the mallocRequestServerAddressType object."
::= { mallocRequestEntry 11 }
mallocRequestLeaseIdentifier OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (0..255))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The Lease Identifier of this request. If the allocation
mechanism in use does not use Lease Identifiers, then the
value is a 0-length string."
::= { mallocRequestEntry 12 }the request state enum is literally a little drama queue: allocated, offered, waiting, trying 🎭 and the Address Table is where the actual blocks of addresses get tracked, so you can map a multicast group back to whichever request got it 🦋
--
-- the Address Table
--
mallocAddressTable OBJECT-TYPE
SYNTAX SEQUENCE OF MallocAddressEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The (conceptual) table containing information on blocks of
allocated addresses. This table may be used to map a given
multicast group address to the associated request."
::= { malloc 6 }
mallocAddressEntry OBJECT-TYPE
SYNTAX MallocAddressEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
particular block of allocated addresses. The block of
addresses covered by each entry in this table must fall
within a range corresponding to an entry in the
mallocAllocRangeTable."
INDEX { mallocAddressAddressType, mallocAddressFirstAddress }
::= { mallocAddressTable 1 }
MallocAddressEntry ::= SEQUENCE {
mallocAddressAddressType InetAddressType,
mallocAddressFirstAddress InetAddress,
mallocAddressNumAddrs Unsigned32,
mallocAddressRequestId Unsigned32
}
mallocAddressAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The type of the first address in the allocated block.
Legal values correspond to the subset of address families
for which multicast address allocation is supported."
::= { mallocAddressEntry 1 }
mallocAddressFirstAddress OBJECT-TYPE
SYNTAX InetAddress (SIZE(0..20))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The first address in the allocated block. The type of this
address is determined by the value of the
mallocAddressAddressType object."
::= { mallocAddressEntry 2 }
mallocAddressNumAddrs OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of addresses in the allocated block."
::= { mallocAddressEntry 3 }
mallocAddressRequestId OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The index of the request which caused this block of
addresses to be allocated. This value must match the value
of mallocRequestId for some entry in the
mallocRequestTable."
::= { mallocAddressEntry 4 }last bit of this chunk is the MADCAP-specific stuff, starting with the config group that counts MADCAP events 🧚✨
--
-- MADCAP-specific objects
--
madcapConfig OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Group of objects that count various MADCAP events."
::= { madcap 1 }okay so the MADCAP knobs are up next and these are giving main character energy 🎀 the server settings come first, then the counters that track everything going wrong (or right) 🦋
madcapConfigExtraAllocationTime OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The amount of extra time on either side of a lease which
the MADCAP server allocates to allow for clock skew among
clients."
::= { madcapConfig 1 }
madcapConfigNoResponseDelay OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The amount of time the MADCAP client allows for receiving a
response from a MADCAP server."
::= { madcapConfig 2 }
madcapConfigOfferHold OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The amount of time the MADCAP server will reserve an
address for after sending an OFFER message in anticipation
of receiving a REQUEST message."
::= { madcapConfig 3 }
madcapConfigResponseCacheInterval OBJECT-TYPE
SYNTAX Unsigned32 (0..300)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The amount of time the MADCAP server uses to detect
duplicate messages."
::= { madcapConfig 4 }
madcapConfigClockSkewAllowance OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The clock skew threshold used by the MADCAP server to
generate Excessive Clock Skew errors."
::= { madcapConfig 5 }
madcapCounters OBJECT-IDENTITY
STATUS current
DESCRIPTION
"A group of objects that count various MADCAP events."
::= { madcap 2 }
madcapTotalErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of transactions for which the MADCAP
server has detected an error of any type, regardless of
whether the server ignored the request or generated a NAK."
::= { madcapCounters 1 }
madcapRequestsDenied OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of valid requests for which the MADCAP server
could not complete an allocation, regardless of whether NAKs
were sent. This corresponds to the Valid Request Could Not
Be Completed error code in MADCAP."
::= { madcapCounters 2 }
madcapInvalidRequests OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of invalid requests received by the MADCAP
server, regardless of whether NAKs were sent. This
corresponds to the Invalid Request error code in MADCAP."
::= { madcapCounters 3 }
madcapExcessiveClockSkews OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of requests received by the MADCAP server with
an excessive clock skew, regardless of whether NAKs were
sent. This corresponds to the Excessive Clock Skew error
code in MADCAP."
::= { madcapCounters 4 }
madcapBadLeaseIds OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of requests received by the MADCAP server with
an unrecognized Lease Identifier, regardless of whether NAKs
were sent. This corresponds to the Lease Identifier Not
Recognized error code in MADCAP."
::= { madcapCounters 5 }
madcapDiscovers OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of DISCOVER messages received by the MADCAP
server."
::= { madcapCounters 6 }
madcapInforms OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of INFORM messages received by the MADCAP
server."
::= { madcapCounters 7 }
madcapRequests OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of REQUEST messages received by the MADCAP
server."
::= { madcapCounters 8 }
madcapRenews OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RENEW messages received by the MADCAP
server."
::= { madcapCounters 9 }
madcapReleases OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RELEASE messages received by the MADCAP
server."
::= { madcapCounters 10 }
-- conformance information
mallocConformance OBJECT IDENTIFIER ::= { mallocMIB 2 }
mallocCompliances OBJECT IDENTIFIER ::= { mallocConformance 1 }
mallocGroups OBJECT IDENTIFIER ::= { mallocConformance 2 }
-- compliance statements
mallocServerReadOnlyCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for multicast address allocation
servers implementing the MALLOC MIB without support for
read-create (i.e., in read-only mode). Such a server can
then be monitored but can not be configured with this MIB."
MODULE -- this module
MANDATORY-GROUPS { mallocBasicGroup,
mallocServerGroup }
OBJECT mallocScopeLastAddress
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeHopLimit
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeStatus
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeDivisible
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeSSM
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeStorage
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeNameScopeName
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeNameDefault
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeNameStatus
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeNameStorage
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeLastAddress
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeStatus
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeLifetime
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeMaxLeaseAddrs
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeMaxLeaseTime
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeStorage
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
GROUP madcapServerGroup
DESCRIPTION
"This group is mandatory for servers which implement the
MADCAP client-server protocol."
OBJECT madcapConfigExtraAllocationTime
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT madcapConfigOfferHold
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT madcapConfigResponseCacheInterval
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT madcapConfigClockSkewAllowance
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
::= { mallocCompliances 1 }
mallocClientReadOnlyCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for clients implementing the
MALLOC MIB without support for read-create (i.e., in read-
only mode). Such clients can then be monitored but can not
be configured with this MIB."
MODULE -- this module
MANDATORY-GROUPS { mallocBasicGroup,
mallocClientGroup }
GROUP mallocClientScopeGroup
DESCRIPTION
"This group is mandatory for clients which maintain a list
of multicast scopes."
OBJECT mallocScopeLastAddress
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeHopLimit
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeStatus
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeServerAddressType
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeServerAddress
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeSSM
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeStorage
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
GROUP madcapClientGroup
DESCRIPTION
"This group is mandatory for clients which implement the
MADCAP client-server protocol."
OBJECT madcapConfigNoResponseDelay
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
::= { mallocCompliances 2 }
mallocPrefixCoordinatorReadOnlyCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for prefix coordinators
implementing the MALLOC MIB without support for read-create
(i.e., in read-only mode). Such devices can then be
monitored but can not be configured with this MIB."
MODULE -- this module
MANDATORY-GROUPS { mallocBasicGroup,
mallocPrefixCoordinatorGroup }
OBJECT mallocScopeLastAddress
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocScopeDivisible
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeLastAddress
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeStatus
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeLifetime
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeAdvertisable
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT mallocAllocRangeStorage
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
::= { mallocCompliances 3 }mallocServerFullCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for multicast address allocation
servers implementing the MALLOC MIB with support for read-
create. Such servers can then be both monitored and
configured with this MIB."
MODULE -- this module
MANDATORY-GROUPS { mallocBasicGroup,
mallocServerGroup }
GROUP madcapServerGroup
DESCRIPTION
"This group is mandatory for servers which implement the
MADCAP client-server protocol."
::= { mallocCompliances 4 }
mallocClientFullCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for hosts implementing the MALLOC
MIB with support for read-create. Such clients can then be
both monitored and configured with this MIB."
MODULE -- this module
MANDATORY-GROUPS { mallocBasicGroup,
mallocClientGroup }
GROUP mallocClientScopeGroup
DESCRIPTION
"This group is mandatory for clients which maintain a list
of multicast scopes."
GROUP madcapClientGroup
DESCRIPTION
"This group is mandatory for clients which implement the
MADCAP client-server protocol."
::= { mallocCompliances 5 }
mallocPrefixCoordinatorFullCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for prefix coordinators
implementing the MALLOC MIB with support for read-create.
Such devices can then be both monitored and configured with
this MIB."
MODULE -- this module
MANDATORY-GROUPS { mallocBasicGroup,
mallocPrefixCoordinatorGroup }
::= { mallocCompliances 6 }
-- units of conformance
mallocBasicGroup OBJECT-GROUP
OBJECTS { mallocCapabilities, mallocRequestScopeAddressType,
mallocRequestScopeFirstAddress,
mallocRequestStartTime,
mallocRequestEndTime, mallocRequestNumAddrs,
mallocRequestState,
mallocAddressNumAddrs, mallocAddressRequestId
}
STATUS current
DESCRIPTION
"The basic collection of objects providing management of IP
multicast address allocation."
::= { mallocGroups 1 }
mallocServerGroup OBJECT-GROUP
OBJECTS { mallocScopeLastAddress, mallocScopeHopLimit,
mallocScopeSSM, mallocScopeStatus, mallocScopeStorage,
mallocAllocRangeLastAddress, mallocAllocRangeLifetime,
mallocAllocRangeNumAllocatedAddrs,
mallocAllocRangeNumOfferedAddrs,
mallocAllocRangeNumWaitingAddrs,
mallocAllocRangeNumTryingAddrs,
mallocAllocRangeMaxLeaseAddrs,
mallocAllocRangeMaxLeaseTime, mallocAllocRangeSource,
mallocAllocRangeStatus, mallocAllocRangeStorage,
mallocScopeDivisible, mallocScopeSource,
mallocScopeNameScopeName, mallocScopeNameDefault,
mallocScopeNameStatus, mallocScopeNameStorage,
mallocRequestClientAddressType,
mallocRequestClientAddress
}
STATUS current
DESCRIPTION
"A collection of objects providing management of multicast
address allocation in servers."
::= { mallocGroups 2 }
mallocClientGroup OBJECT-GROUP
OBJECTS { mallocRequestServerAddressType,
mallocRequestServerAddress }
STATUS current
DESCRIPTION
"A collection of objects providing management of multicast
address allocation in clients."
::= { mallocGroups 3 }
madcapServerGroup OBJECT-GROUP
OBJECTS { madcapConfigClockSkewAllowance,
madcapConfigExtraAllocationTime, madcapConfigOfferHold,
madcapConfigResponseCacheInterval,
madcapTotalErrors, madcapRequestsDenied,
madcapInvalidRequests, madcapBadLeaseIds,
madcapExcessiveClockSkews, madcapDiscovers,
madcapInforms, madcapRequests,
madcapRenews, madcapReleases }
STATUS current
DESCRIPTION
"A collection of objects providing management of MADCAP
servers."
::= { mallocGroups 4 }
madcapClientGroup OBJECT-GROUP
OBJECTS { mallocRequestLeaseIdentifier,
madcapConfigNoResponseDelay }
STATUS current
DESCRIPTION
"A collection of objects providing management of MADCAP
clients."
::= { mallocGroups 5 }
mallocClientScopeGroup OBJECT-GROUP
OBJECTS { mallocScopeLastAddress, mallocScopeHopLimit,
mallocScopeStatus, mallocScopeStorage, mallocScopeSource,
mallocScopeServerAddressType, mallocScopeServerAddress,
mallocScopeSSM, mallocScopeNameScopeName,
mallocScopeNameDefault, mallocScopeNameStatus,
mallocScopeNameStorage }
STATUS current
DESCRIPTION
"A collection of objects providing management of multicast
scope information in clients."
::= { mallocGroups 6 }
mallocPrefixCoordinatorGroup OBJECT-GROUP
OBJECTS { mallocAllocRangeLastAddress, mallocAllocRangeLifetime,
mallocAllocRangeStatus, mallocAllocRangeStorage,
mallocAllocRangeSource,
mallocAllocRangeTotalAllocatedAddrs,
mallocAllocRangeTotalRequestedAddrs,
mallocAllocRangeAdvertisable, mallocScopeLastAddress,
mallocScopeDivisible, mallocScopeSource }
STATUS current
DESCRIPTION
"A collection of objects for managing Prefix Coordinators."
::= { mallocGroups 7 }
END5. IANA Considerations ✨
okay so the IANAscopeSource and IANAmallocRangeSource textual conventions get imported from the IANA-MALLOC-MIB 🌸 the whole reason they live in their own MIB module is so new values can be added later without having to publish a whole new version of this doc. so cute, right? 🦋
IANA (the Internet Assigned Numbers Authority) is the one in charge of assigning all the Internet numbers, SNMP-related ones included 👑 so IANA is the one who administers the values behind these textual conventions 💅
the rules for adding or changing stuff in the IANA-MALLOC-MIB are spelled out in the DESCRIPTION clause of its MODULE-IDENTITY statement 🧚
you can check out the current versions of the IANA-MALLOC-MIB on the IANA home page at: "http://www.iana.org/" 💖
6. Security Considerations 🔥
bestie, this part is SERIOUS 😭 there are a bunch of management objects in this MIB module with a MAX-ACCESS clause of read-write and/or read-create. those objects can be sensitive or vulnerable in some network environments 💀 and supporting SET operations in a non-secure environment without proper protection can seriously mess up network operations. these are the tables and objects, plus how sensitive or vulnerable they are:
mallocScopeTableandmallocAllocRangeTable: unauthorized changes here can cause a denial of service. the attacker could stop you from allocating and using multicast addresses, make you allocate too many addresses, get you allocating addresses that other organizations are already using, or get applications to use a hop limit that causes extra bandwidth usage. 🙈mallocScopeNameTable: unauthorized changes here can show users incorrect or misleading scope names, which could lead to using the wrong scope for application data. ⚠️madcapConfigExtraAllocationTimeandmadcapConfigOfferHold: unauthorized changes can make reservations last too long, which could cause a denial of service if allocation ranges are small. 😵madcapConfigNoResponseDelay: unauthorized changes can stop a client from being able to allocate multicast addresses. 🚫
⚠️ some of the readable objects in this MIB module (aka objects with a MAX-ACCESS other than not-accessible) may also be sensitive or vulnerable in some network environments. so it's super important to control GET and/or NOTIFY access to these objects, and maybe even encrypt their values when they travel over the network via SNMP. these are the tables and objects, and how sensitive they are:
mallocRequestLeaseIdentifier: if address allocation servers are set up to allow renewal or release purely based on knowing the Lease Identifier, then unauthorized read access tomallocRequestLeaseIdentifiercan be used in a denial-of-service attack. 💀
SNMP versions before SNMPv3 didn't have adequate security 😭 even if the network itself is secure (for example by using IPSec), there's no control over who on that secure network gets to access and GET/SET (read/change/create/delete) the objects in this MIB module. literally no control 🙃
it is RECOMMENDED that implementers look into the security features provided by the SNMPv3 framework (see [RFC3410], section 8), including full support for the SNMPv3 cryptographic mechanisms (for authentication and privacy). the glow-up is SNMPv3 with crypto on 🔐✨
deploying SNMP versions prior to SNMPv3 is NOT RECOMMENDED 🙅♀️ instead, it is RECOMMENDED to deploy SNMPv3 and turn on cryptographic security. then it's a customer/operator responsibility to make sure the SNMP entity giving access to an instance of this MIB module is configured properly, so only the principals (users) with legitimate rights can GET or SET (change/create/delete) objects. 🫶
7. Acknowledgements 💜
this MIB module got updated thanks to feedback from the IETF's Multicast Address Allocation (MALLOC) Working Group 🎀 big thank yous to Lars Viklund, Frank Strauss, and Mike Heard for giving helpful feedback on this document 🌷
8. Intellectual Property Statement 🦋
okay this part is legal-ish but I'll keep it real: the IETF takes no position on whether any intellectual property or other rights that someone might claim relate to the tech in this document are valid, or how far those rights reach. it also doesn't say it has tried to find any such rights. info on the IETF's procedures for rights in standards-track and standards-related docs is in BCP-11 📜 copies of rights claims made available for publication, plus any assurances of licenses, or the results of attempts to get a general license for implementers or users, can be obtained from the IETF Secretariat 📬
the IETF also invites anyone to bring up any copyrights, patents, patent applications, or other proprietary rights that might cover technology required to practice this standard. send that info to the IETF Executive Director 💌
9. References 📚
9.1. Normative References
okay so these are the must-read-first ones bestie 📚✨ the docs the spec literally can't function without:
- [ARCH] Thaler, D., Handley, M. and D. Estrin, "The Internet Multicast Address Allocation Architecture", RFC 2908, September 2000.
- [MADCAP] Hanna, S., Patel, B. and M. Shah, "Multicast Address Dynamic Client Allocation Protocol (MADCAP)", RFC 2730, December 1999.
- [RFC2578] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.
- [RFC2579] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999.
- [RFC2580] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999.
- [RFC2932] McCloghrie, K., Farinacci, D. and D. Thaler, "IPv4 Multicast Routing MIB", RFC 2932, October 2000.
- [RFC3291] Daniele, M., Haberman, B., Routhier, S. and J. Schoenwaelder, "Textual Conventions for Internet Network Addresses", RFC 3291, May 2002.
- [RFC3411] Harrington, D., Presuhn, R. and B. Wijnen, "An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks", STD 62, RFC 3411, December 2002.
9.2. Informative References
these ones are the extra reading 🧚 handy for background, but not needed to get the core idea:
- [IPSEC] Kent, S. and R. Atkinson, "Security Architecture for the Internet Protocol", RFC 2401, November 1998.
- [MZAP] Handley, M., Thaler, D. and R. Kermode, "Multicast-Scope Zone Announcement Protocol (MZAP)", RFC 2776, February 2000.
- [RFC3410] Case, J., Mundy, R., Partain, D. and B. Stewart, "Introduction and Applicability Statements for Internet Standard Management Framework", RFC 3410, December 2002.
10. Author's Address ✨
this is where you find Dave Thaler 💅 the author behind all this 🎀
Dave Thaler
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
Phone: +1 425 703 8835
EMail: dthaler@microsoft.com11. Full Copyright Statement 🔥
okay bestie, the legal stuff is next. the wording stays exactly as written, because no cap, you do NOT want to get this part wrong 🙈
Copyright (C) The Internet Society (2003). All Rights Reserved.
This document and translations of it may be copied and furnished to others, and derivative works that comment on or otherwise explain it or assist in its implementation may be prepared, copied, published and distributed, in whole or in part, without restriction of any kind, provided that the above copyright notice and this paragraph are included on all such copies and derivative works. However, this document itself may not be modified in any way, such as by removing the copyright notice or references to the Internet Society or other Internet organizations, except as needed for the purpose of developing Internet standards in which case the procedures for copyrights defined in the Internet Standards process must be followed, or as required to translate it into languages other than English.
The limited permissions granted above are perpetual and will not be revoked by the Internet Society or its successors or assigns.
This document and the information contained herein is provided on an "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Acknowledgement 🫶
last bit, and it's a sweet one 🌸
Funding for the RFC Editor function is currently provided by the Internet Society.
that's the whole RFC, bestie! 🌈👑 you made it through every single part 😭💖
📦 where this page comes from
- ietf: rfc3559 2003-06
- 💖 girlified by claude-haiku-5-5 on : a language model's rewrite of the original, under its terms