rfc-4547

Event Notification Management Information Base for Data over Cable Service Interface Specifications (DOCSIS)-Compliant Cable Modems and Cable Modem Termination Systems

A. Ahmad, G. Nakanishi
date2006-06 streamIETF areaops wgipcdn statusPROPOSED STANDARD pages40 canonicalhttps://www.rfc-editor.org/rfc/rfc4547 doi10.17487/RFC4547
This memo defines a portion of the Management Information Base (MIB) for use with network management protocols in the Internet community. In particular, it defines a basic set of managed objects for Simple Network Management Protocol (SNMP) based event notification management of Data Over Cable Service Interface Specification (DOCSIS) compliant Cable Modems and Cable Modem Termination Systems. This MIB is defined as an extension to the DOCSIS Cable Device MIB. This memo specifies a MIB module in a manner that is compliant to the Structure of Management Information Version 2 (SMIv2). The set of objects is consistent with the SNMP framework and existing SNMP standards. [STANDARDS-TRACK]

updated by

Extracted elements (22)

design-rationale §3.1

The MIB maps DOCSIS events (defined in Appendix H of DOCSIS 1.1 OSSI and Appendix D of DOCSIS 2.0 OSSI) to notification objects organized by functional category rather than individual event, so that one SNMP notification type covers an entire event category and the specific event details are carried in varbindings.

snmp

interoperability-note §4

Notifications defined in this MIB are also subject to the notification control mechanisms defined in RFC 3413 (SNMP Applications), meaning both docsDevCmNotifControl/docsDevCmtsNotifControl and RFC 3413 controls must be satisfied for a notification to be emitted.

snmp

normative-requirement §7 RECOMMENDED

Deployment of SNMP versions prior to SNMPv3 is NOT RECOMMENDED; implementers SHOULD use SNMPv3 with full cryptographic mechanisms (authentication and privacy) to protect access to this MIB.

snmp, security

normative-requirement §3 SHOULD

DOCSIS devices SHOULD support a minimum set of standard DOCSIS Notifications to enable successful management of DOCSIS devices and networks, as defined in conjunction with DOCSIS OSSI specifications.

snmp

normative-requirement §4 SHOULD

If the device is rebooted, the value of docsDevCmtsNotifControl SHOULD revert to the default value (empty bit string, all notifications disabled).

snmp

protocol-element §4

docsDevCmBpiInitNotif reports BPI initialization failure during CM registration; docsDevCmBPKMNotif reports Baseline Privacy Key Management (BPKM) operation failure; both carry the standard CM varbinding set.

snmp, security

protocol-element §4

docsDevCmDCCReqFailNotif, docsDevCmDCCRspFailNotif, and docsDevCmDCCAckFailNotif report failures in the three-way Dynamic Channel Change request/response/acknowledgement handshake as detected on the CM, each carrying the standard CM varbinding set.

snmp

protocol-element §4

docsDevCmDHCPFailNotif reports DHCP operation failure on the CM; its varbinding list extends the standard CM set with docsDevServerDhcp (IP address of the DHCP server).

snmp

protocol-element §4

docsDevCmDynamicSANotif reports failure of a dynamic security association operation on the CM, carrying the standard CM varbinding set including DOCSIS capability and modulation type.

snmp, security

protocol-element §4

docsDevCmDynServReqFailNotif, docsDevCmDynServRspFailNotif, and docsDevCmDynServAckFailNotif report failures in the three-way dynamic service request/response/acknowledgement handshake on the CM side, each carrying the standard CM varbinding set.

snmp

protocol-element §4

docsDevCmInitTLVUnknownNotif reports that an unknown TLV was encountered during TLV parsing; varbindings include docsDevEvLevel, docsDevEvId, docsDevEvText, ifPhysAddress (CM MAC), docsIfCmCmtsAddress, docsIfDocsisBaseCapability, docsIfCmStatusDocsisOperMode, and docsIfCmStatusModulationType.

snmp

protocol-element §4

docsDevCmNotifControl is a read-write BITS object with 16 named bits (cmInitTLVUnknownNotif through cmDCCAckFailNotif) used to individually enable or disable each CM notification type; the default value is the empty set (all disabled).

snmp

protocol-element §4

docsDevCmSwUpgradeCVCFailNotif reports that code file verification failed during a secure software upgrade attempt, using the standard CM varbinding set without the software filename/server fields.

snmp, security

protocol-element §4

docsDevCmSwUpgradeInitNotif, docsDevCmSwUpgradeFailNotif, and docsDevCmSwUpgradeSuccessNotif report software upgrade initiation, failure, and success respectively; each extends the standard varbindings with docsDevSwFilename and docsDevSwServer.

snmp

protocol-element §4

docsDevCmTODFailNotif reports failure of a time-of-day operation on the CM; its varbindings extend the standard CM set with docsDevServerTime (IP address of the time server).

snmp

protocol-element §4

docsDevCmtsBpiInitNotif and docsDevCmtsBPKMNotif report BPI initialization failure and BPKM operation failure as detected by the CMTS, each carrying CMTS-side varbindings including the CM's MAC address and DOCSIS registration mode.

snmp, security

protocol-element §4

docsDevCmtsDynamicSANotif reports failure of a dynamic security association operation as detected by the CMTS; docsDevCmtsDCCReqFailNotif, docsDevCmtsDCCRspFailNotif, and docsDevCmtsDCCAckFailNotif report DCC handshake failures detected by the CMTS.

snmp, security

protocol-element §4

docsDevCmtsNotifControl is a read-write BITS object with 12 named bits (cmtsInitRegReqFailNotif through cmtsDCCAckFailNotif) used to individually enable or disable each CMTS notification type; the default value is the empty set (all disabled).

snmp

protocol-element §4

The CMTS notification group defines parallel counterparts to CM notifications: docsDevCmtsInitRegReqFailNotif, docsDevCmtsInitRegRspFailNotif, and docsDevCmtsInitRegAckFailNotif report registration handshake failures as detected by the CMTS, with varbindings including docsIfCmtsCmStatusMacAddress (CM's MAC) and ifPhysAddress (CMTS cable interface MAC).

snmp

registry §8

IANA assigned OID { mib-2 132 } (docsDevNotifMIB) in the SMI Numbers registry for this MIB module.

snmp, registry

security-consideration §7

Notification messages expose sensitive device information (event priority, event ID, CM DOCSIS capability, QOS level, upstream modulation type, CM cable interface MAC address, and CMTS cable card MAC address) that could be harvested to map the network topology.

snmp, security

security-consideration §7

Setting docsDevCmNotifControl or docsDevCmtsNotifControl without access control can flood the network with notifications (disrupting service) or suppress notifications (masking failures); both objects have MAX-ACCESS read-write and must be protected.

snmp, security