THIS IS AN ASCII'ZED VERSION OF THE COMMERCIAL KarlBridge MANUAL.

KarlBridge
Installation and 
Configuration

Software release 1.41
(March 1993)

This manual covers KarlBridge software release V1.4 and V1.41.

PUBLISHED BY

KarlNet Inc.
88 East Oakland Ave.
Columbus, Ohio 43201
(614) 263-5275

Copyright 1991, 1992, 1993 Doug Karl, KarlNet Inc. & Sherwood 
Data Systems, U.K.

All rights reserved.  No part of the contents of this document may be 
reproduced or transmitted in any form or by any means without the 
written permission of the publisher.

Features and Benefits

Transparent Ethernet Bridging with Advanced 
Filtering for Security and Network Reliability:  The 
KarlBridge supports what is known as Transparent Ethernet Bridging 
with no Spanning Tree or Source Routing support.  Since the 
KarlBridge is intended to provide network security between a local LAN 
and a campus or enterprise wide network, and since using multiple 
bridges in a Spanning Tree could compromise this security, the 
Spanning Tree scenario is not supported.  In addition to the Transparent 
Ethernet Bridging the KarlBridge can drop (i.e. not forward) packets 
based upon the encapsulated higher layer data within the packet.  It is 
this feature that gives the KarlBridge the ability to perform advanced 
filtering and can add a significant measure of security and network 
reliability to a network, surpassing that provided by modern 
multiprotocol routers.

Optional Jumper for Simple & Fast Transparent 
Ethernet Bridging:  All KarlBridges contain a special ROM to 
enable them to perform simple Transparent Ethernet bridging only. In 
this mode of operation the KarlBridge functions the same as the standard 
transparent Ethernet bridges on the market today. If the jumper inside 
the KarlBridge is set for this mode, the Floppy Disk or Flash ROM is 
disabled. This mode is the fastest mode of operation and is desirable for 
those who merely want a simple standard bridge and do not wish to use 
any advanced filtering or SNMP support.


Floppy Based Systems

LAN Light:  The KarlBridge's LAN light will blink whenever a 
packet it forwarded.  It will also blink once per second just after a 
reboot and successful self test and before any packets have been seen on 
either Ethernet port.

Reset Button:  The KarlBridge can be hardware reset by pressing 
the "Reset" button on the front panel. Note: KarlBridge's that are 
manufactured with the larger case do not have this reset button; the 
power must be cycled to reset these bridges.

Floppy Exercising:  The KarlBridge has several built in features 
for reliability.  The bridge is designed to operate in a dusty high 
temperature environment for several months without problems.  Since 
the floppy drive is a mechanical device it is susceptible to heat, dust, 
and humidity.  When the KarlBridge is assembled great care is taken to 
ensure that the airflow across the floppy drive in the bridge is reduced. 
Also the KarlBridge software will turn on the floppy motor each hour 
to exercise the floppy drive so that it will be less likely to fail during a 
reboot.

Watch Dog Reboot Timer:  The KarlBridge contains a watch 
dog timer reboot feature.  If no packets are seen on the network for 
more than 10 minutes (a very rare occurrence), the KarlBridge will 
reboot itself.  Once the KarlBridge has rebooted it's 10 minute reboot 
timer will not activate again until a packet has been seen on the 
network.  This is to ensure that only one reboot will occur if the entire 
network is truly shutdown.

Backing up the Bootable Floppy Disk:  The KarlBridge 
"Bootable" floppy has a special boot block on it that loads and runs the 
file "KBRIDGE.COM". This floppy can be backed up to an identical 
disk by use of the standard DISKCOPY program.


Flash ROM Based Systems

LAN Light:  The KarlBridge's LAN light will blink whenever a 
packet it forwarded.  It will also blink once per second just after a 
reboot and successful self test and before any packets have been seen on 
either Ethernet port.  This light will also blink rapidly and brightly 
when the remote configuration protections have been overridden.  See 
"Reset Button" below.

Reset Button to Override Remote Configuration 
Protections:  The Flash ROM version of the KarlBridge is 
remotely configured through the network by use of the kbconfig 
program. The SNMP passwords must be correctly specified  for 
kbconfig to remotely read and write a configuration.  If the KarlBridge's 
Flash ROM card is setup for Read Protection or Read/Write Protection 
then remote configuration cannot take place even if the passwords are 
specified correctly unless the KarlBridge's hardware protection is 
disabled. You can disable the hardware protection by pressing the Reset 
Button located on the front of the KarlBridge. To indicate that hardware 
protection is disabled the LAN Light will blink rapidly and brightly. 
Hardware protection can be enabled by either pressing the Protection 
switch again or waiting until the automatic time out occurs, which is 
typically 15 minutes. NOTE: If the Flash ROM is set to Normal mode 
then pressing this button will do nothing.




Quick Installation
(Standard KarlBridge)

For those who wish to use the KarlBridge as a simple Thin Wire 
Ethernet to Thin Wire Ethernet Transparent bridge:

1) Connect up the network segments to each of the Thin Wire 
Ethernet ports.

2) Optionally set-up the correct 115/230 Volt power setting (some 
models have autoswitch power supplies and need not be setup).

3) Install the KarlBridge Bootable Floppy in the floppy drive 
(Floppy models only).

4) Plug the bridge in.


Quick Installation
(Basic KarlBridge)

For those who wish to use the KarlBridge as a simple Thin Wire 
Ethernet to Thin Wire Ethernet Transparent bridge with no protocol 
filtering and no SNMP support and want to take advantage of better 
performance:

1) Connect up the network segments to each of the Thin Wire 
Ethernet ports.

2) Optionally set-up the correct 115/230 Volt power setting (some 
models have autoswitch power supplies and need not be setup).

3) Open up the KarlBridge and set the Jumper on the Ethernet card 
for Port 0 to "Boot ROM ON".

4) Plug the bridge in.


Hardware Installation

BNC or AUI connections:  The 10Base2 (Thin Wire) 
KarlBridge is shipped with both Ethernet cards setup for BNC (Thin 
Wire Ethernet).  If you wish to use the AUI (transceiver) port you 
must open the KarlBridge case and change the clearly marked jumpers 
located on the appropriate Ethernet card.  These Ethernet cards have been 
customized for use in the KarlBridge and are not interchangeable with 
the standard Ethernet cards by the same manufacturer.

Hardware Remote Configuration Protection:  The 
Flash ROM version of the KarlBridge is configured remotely through 
the network using kbconfig via IP/SNMP.  This leaves open the 
remote possibility that someone on the Internet could guess your 
SNMP passwords and use their version of kbconfig to reconfigure your 
KarlBridge.  This loophole can be completely closed by use of jumpers 
on the Flash ROM card inside the KarlBridge case. These jumpers 
positions are as follows:

    Normal Operation    -   The only protection is through passwords,
            there is no special hardware protection.
    
    Write Protection    -   The configuration can be read but not 
            written unless the hardware protections are 
            lowered by use of the front panel
            Protection switch.
    
    Read/Write Protection   -   The configuration cannot be read or written 
            unless the hardware protections are lowered 
            by the use of the front panel Protection
            switch.


Resetting to the Factory Default Configuration:  
The Flash ROM version of the KarlBridge is configured remotely 
through the network using kbconfig via IP/SNMP.  In order for 
kbconfig to communicate through the network three things must be 
known; the IP Address and the two SNMP passwords of the KarlBridge. 
When shipped from the factory the IP Address is 198.17.74.254 and the 
read and write passwords are public and public. If you forget what you 
have changed these to you can restore them to the factory default by 
placing the jumper on the Flash ROM board located inside the 
KarlBridge case to the Factory Default position. You must then reboot 
the KarlBridge and configure it with kbconfig using the factory default 
address and passwords.  Once you have changed the address and password 
and saved them with kbconfig and the KarlBridge has rebooted itself it 
is ready for use. You should then shut off the KarlBridge move the 
jumper back to Normal Operation, or one of the protection settings, and 
start it back up to verify that your changes have taken effect. 

Remote and Local Ports:  The KarlBridge provides isolation 
between a local network and a remote network.  The 2 Ethernet ports on 
the KarlBridge are labelled Port 0 Remote and Port 1 Local.  The 
work group or computer lab that you wish to isolate should be 
connected to the Local Port and the external network should be 
connected to the Remote Port.

115/230 Volt setting:  The Non-Autoswitch KarlBridge is 
shipped with 115V selected.  If your country uses 2305V this setting 
should be changed.  The Autoswitch version of the KarlBridge 
automatically detects and adjusts for the proper voltage setting and no 
manual switch is needed or provided.

Software Configuration

The KarlBridge has been designed to provide several layers of isolation 
for many types of local area networks.  You will most likely not need 
to use all of the features and filters provided.

Running the KBCONFIG program
(on a floppy based KarlBridge)

Remove the KarlBridge floppy from the KarlBridge and insert it into 
any standard PC compatible computer that is running DOS version 3 or 
higher with an EGA or VGA monitor.  For this example it is assumed 
your floppy drive is drive A.

1.  Issue the command:   A:   (to change your working disk to the  
    KarlBridge floppy)

2.  Issue the command:   kbconfig -f kbridge.com

3.  Set-up the KarlBridge Filters by use of the menus as described in the 
    section below.

4.  Save your new configuration by typing the F10 key and then 
    answering Yes and Yes.  

The kbconfig program modifies the kbridge.com file which 
contains your filter settings.  When the floppy is inserted into the 
KarlBridge and the KarlBridge is powered up the program 
kbridge.com will execute.


Running the KBCONFIG program
(remotely on Flash ROM KarlBridges)

1.  Ensure that a standard "Packet" driver is installed on your MSDOS 
    computer.  If you do not have a packet driver you can use one of the 
    drivers that are included on the "Flash ROM Remote Configuration" 
    diskette provided with your Flash ROM KarlBridge. 

2.  Copy the files kbconfig.exe, kbconfig.cfg and 
    kbridge.com from the "Flash ROM Remote Configuration"
    diskette into a directory on your hard disk.

3.  Setup the kbconfig.cfg file to reflect your IP address, IP mask, 
    default router, etc.

4.  Issue the command:   kbconfig -h x.x.x.x where the x.x.x.x
    is the IP address of the network connected remote KarlBridge.  The
    factory default for the KarlBridge IP address and the IP address as
    shipped is 198.17.74.254.

5.  Set-up the KarlBridge Filters by use of the menus as described in the 
    section below.

6.  Save your new configuration by typing the F10 key and then 
    answering Yes and Yes.

The kbconfig program modifies the configuration section of the 
KarlBridge and reprograms the Flash ROM.

KBCONFIG's General Configuration Menu

Filtering Support On/Off:  Setting this to On will cause the 
KarlBridge to look into the Ethernet packet to determine if it needs to 
be dropped by the bridge. If the KarlBridge is to be used as a simple 
standard transparent bridge with no advanced filtering, then this setting 
should be Off. NOTE: Filtering support must be set to On for any of 
the following filtering options to work properly.

Pass / Drop Multicast Packets:  Standard Ethernet bridges 
will always forward multicast packets.  Some protocols do not use 
multicasts, most notably IP.  If you do not use protocols that use 
multicasts then you can drop them by shutting off multicasts on the 
KarlBridge.  Shutting off multicast packets will reduce the traffic on 
your network and will also reduce the number of interrupts that each 
computer connected to your network experiences. NOTE: Filtering 
Support must be set to On for this filter to take effect.

Pass / Drop Broadcast Packets:  Standard Ethernet bridges 
will always forward broadcast packets.  Most protocols do not use 
broadcasts (e.g. AppleTalk Phase II, DECNET and others).  However, 
IP/ARP does use broadcasts.  If you do not use IP or any other protocol 
that requires broadcasts then you can drop them.  Shutting off broadcast 
packets will reduce the traffic on your network and will also greatly 
reduce the number of interrupts that each computer connected to your 
network experiences.  Networks with a high number of broadcasts will 
slow down the processing of each attached computer even if it is not 
using the network. NOTE: Filtering Support must be set to On for 
this filter to take effect.

Pass / Drop Unlearned Packets:  Standard Ethernet bridges 
will always forward packets with destination addresses that have not 
been "learned" (i.e. not been seen as a source address in a packet).  This 
characteristic is essential for the proper operation of an Ethernet bridge. 
The down side to this is that our studies have shown that the failure 
mode of many Ethernet interface cards is to send out erroneous packets 
with good CRC's but with random Ethernet destination and source 
addresses.  Standard bridges will pass these erroneous packets since they 
have not "learned" the random destination address and then add this 
packets random source address to their finite "learned" table.  This 

situation is not uncommon and can greatly hinder the operation of 
standard bridges.  If you chose to Drop unlearned packets then the 
KarlBridge will not forward unicast packets to Ethernet addresses that 
have not already been seen as a source address.  This scheme works for 
most protocols because it relies on the characteristics of most upper-
layer protocol to transmit ARP requests or Hello packets.  It should be 
set to Drop with care by a qualified network engineer. NOTE: 
Filtering Support must be set to On for this filter to take effect.

Pass / Drop Packets with Bad Ethernet Source 
Address:  The standard Ethernet bridges we have tested will pass 
Ethernet packets with a broadcast or multicast address as their source 
(i.e. the first bit set to 1).  The Ethernet specification for Non-Source 
Routing bridges does not allow these types of packets and can be 
considered as "bad" packets.  Our studies have shown that a common 
failure mode of many Ethernet interfaces and networking software is to 
transmit packets like these.  If you do not need the KarlBridge to pass 
Source Routing packets it is suggested that you set it to drop these 
packets. NOTE: Filtering Support must be set to On for this filter to 
take effect.

IP Address:  This is the IP address of the KarlBridge itself.  If your 
network supports IP and if you wish to enable the Ping support and 
IP/SNMP support of the KarlBridge set this to a valid IP address. 
Setting this address to 0.0.0.0 will disable Ping and IP/SNMP support. 
Please note that the KarlBridge is not an IP router.  It has only one IP 
address and that address applies to both the Remote and Local networks 
(i.e. both sides of the bridge).  Having two Ethernet interfaces with the 
same IP address is different than a standard IP host, but is appropriate 
for a Transparent Bridge.  It is interesting to note that the Ethernet 
address of both ports is also the same.

SNMP Read Password:  This is the read only password used 
for SNMP support.  It is the SNMP password needed to read  the MIB 
variables.  The string public is the common password used by most 
SNMP monitors.

SNMP Write Password:  This is the write password used for 
SNMP support.  It is the SNMP password needed to write the MIB 
variables.  The string should be set to value that is known only by you.
The factory default value for this variable is the string public and should 
be changed to a string known only to you.

KBCONFIG's Advanced Configuration 
Menus

(Adding Security to your network)

In addition to the standard Transparent Bridging and MAC layer filtering 
the KarlBridge has capabilities to look deep into packets and decide 
weather to pass or drop them.  This decision is made based upon 
different criteria depending upon the particular protocols used.  As an 
example for the IP protocol packets can be dropped (or blocked) that 
have certain IP destination addresses or are intended for certain IP server 
sockets, such as the SMTP server, the Telnet server, and etc.  
AppleTalk packets can be dropped based upon the name of the Apple 
printer or server that is to be used or the name of the AppleTalk Zone 
that the printer or server resides in.  You may decide not to turn on 
these advanced filters in which case the KarlBridge will perform as a 
standard Transparent Bridge with IP/SNMP capabilities.  It is 
recommended, however, that you set-up the KarlBridge filters to drop 
any protocols you don't use in order to reduce the network traffic that 
the Local LAN must carry.  Note: Without advanced filters a standard 
Ethernet bridge will pass all Multicast and Broadcast packet into the 
Local LAN and each computer in the local LAN will experience a CPU 
interrupt for each of these packets causing it slow down while it is 
processing these packets.

Some of these menus are marked "Remote" and some are marked 
"Local".   Remote menus configure filters that pertain to networks, 
subnets, and/or hosts that are connected to the Remote network (i.e. the 
Remote port of the KarlBridge).  Local menus configure filters that 
pertain to network, subnets, and/or hosts that are connected to the Local 
network (i.e. the Local port of the KarlBridge). 


General Menu Characteristics:  Each Advanced Filtering 
menu can each have up to 10 entries in them.  The menus can be in a 
mode to either pass or drop these entries.  The concept is that in most 
situations one wants to either drop or pass a few selected protocols, 
addresses, or sockets.  If the menu is empty and is set-up to "Drop all 
other packets" then all packets of that type will be dropped.  If the 
menu is empty and is set-up to "Pass all other packets" then packets of 
that type will be passed.  The following keys are used to set up the 
menus:

The F1 key is used to toggle the menu mode between Pass and Drop.

The F2 key is used on some menus to toggle particular entries between 
Pass and Drop.

The Left and Right Arrow keys are used to move between menus.

The Down Arrow key is used to add entries to menus.

The Up Arrow key is used to move up in a particular menu.

The F10 key is used to save the configuration and/or quit the program.

The Page Up and Page Down keys are used to page between 
additional menus such as the DECNET Objects, IP Sockets, and 
AppleTalk Servers menus.

The C key is used to specify custom entries that do not appear in the 
"Selection" menu.  The "Selection" menu is the menu you can select 
protocols, known IP sockets, or known DECNET objects from.

MAC Layer Menus

Pass / Drop Ethernet Addresses Menu:  This menu 
specifies the Ethernet addresses that should be either Passed or Dropped 
both the source and destination address are checked against this filter. 
The menu specifies a list of up to 10 addresses that can be either passed 
or dropped.  An entire 6 byte Ethernet address can be filtered or just 
portions of  it.  This menu can be used to inhibit or promote 
communication with a several particular Ethernet addresses or groups of 
Ethernet addresses.  This approach of specifying Ethernet addresses is 
similar to a standard bridge that supports Ethernet address filtering.  We 
have found this approach to not be very useful, however, support it for 
completeness. NOTE: Filtering Support must be set to On for this 
filter to take effect.

Ethernet Protocol Menu:  This menu specifies the Ethernet 
protocols to (B) Bridge or (D) Drop.  Each protocol can be Bridged (a 
synonym for Passed) or can be Dropped as selected with the F2 key. 
All other protocols not specified in the menu listing are then either 
Bridged or Dropped depending upon the mode of the menu as selected 
with the F1 key.  Protocols that are not defined in the Selection menu 
can be specified by typing the C key.

It is recommended that you bridge only the protocols that you 
absolutely need and drop all others.  If you elect to bridge IP, 
DECNET, or AppleTalk additional menus will appear on the screen that 
will give you the opportunity to specify in more detail the types of 
services you wish to promote (pass) or restrict (drop) for the particular 
protocols selected. NOTE: Filtering Support must be set to On for 
this filter to take effect.

IP Protocol Menus
(Will only appear if IP is being bridged)

Remote and Local IP Address / Mask Menus:  These 
menus specify up to 10 IP Networks, Subnets, and/or Machine 
combinations. Each combination has a corresponding set of socket 
menus that also need to be setup. The IP source and destination address 
portion of each IP packet that passes through the bridge is checked 
against each entry in these menus. If a match is found then the packet is 
examened furthure to see if the sockets match an entry in the 
corresponding socket menus. It is important to understand that 
matching is performed on the first entry first and then goes down the 
list and if a match is not found then the packet is dropped. The packet's 
IP addresses are logically "anded" with the mask and then compared with 
the IP address to determine if a match has occurred.

NOTE: These two address menus must be used together and the 
remote/local addresses/masks must be specified in pairs. These two 
menus will be combined into one menu in the next release of the 
software.

Example:

Remote IP Address / Mask    Local IP Address / Mask
128.146.0.0   FFFF0000     *    128.146.10.11   FFFFFFFF
140.254.0.0   FFFF0000           128.146.8.0      FFFFFF00
0.0.0.0          00000000             0.0.0.0            00000000

The source and destination IP address of each packet is checked to see if 
it matches an entry in the above table.

    If a packet is to/from 128.146.x.x and 128.146.10.11, then it will 
    match the 1'st entry in the table and will be examended furthure in
    the first set of socket address menus.

    If a packet is to/from 140.254.x.x and 128.146.8.x, then it will
    match the 2'md entry in the table and will be examended furthure
    in the first set of socket address menus.

    Since the entry 0.0.0.0  00000000 and 0.0.0.0 00000000 is present 
    all other packets will be subject to filtering by the 3'rd set of 
    socket menus.

The * indicates which IP address pair's set of socket menus are being 
displayed on the screen.  Other sets of sockets can be displayed by 
selecting either address menu with the arrow keys and then typing the 
F2 key.  This will move the * to the next line and change the sockets 
being displayed.


Pass / Drop IP Remote Servers Menu:  This menu 
specifies the remote IP/UDP and IP/TCP server sockets that are to be 
passed or dropped for the selected IP Address combination.  In this 
context "server sockets" are sockets that are assigned numbers less than 
1024 such as the Telnet daemon, the FTP daemon, the SMTP daemon 
and many others.  "Remote server sockets" are servers that are located 
on the Remote Network.  As an example: If ftp and telnet are passed 
and all other sockets are dropped in this menu then machines on the 
Local Network can initiate an ftp or telnet session to remote machines, 
but no other outgoing connections can be initiated.

Pass / Drop IP Local Servers Menu:  This menu 
specifies the local IP/UDP and IP/TCP server sockets that are to be 
passed or dropped for the selected IP Address combination.  In this 
context "server sockets" are sockets that are assigned numbers less than 
1024 such as the Telnet daemon, the FTP daemon, the SMTP daemon 
and many others.  "Local server sockets" are servers that are located on 
the Local Network.  As an example: If ftp and telnet are dropped and all 
other sockets are passed in this menu then machines on the Remote 
Network cannot initiate an ftp or telnet session on local machines.

Pass / Drop IP Sockets > 1023 Menu:  This menu 
specifies the remote and local IP/UDP and IP/TCP sockets greater than 
1023 that are to be passed or dropped for the selected IP Address 
combination.  X11, Multi-user Dungeon and Dragons (MUD), NFS and 
other non-privileged sockets are in this range.  There is no distinction 
between "Local" and "Remote" for this menu.  As an example: You 
may drop MUD sockets by either specifying them individually or by 
setting the menu to pass nothing and "Drop All Others".  This will 
cause the KarlBridge to drop all packets that are to/from server sockets 
> 1023 which will include MUD, X11, NFS and all other server 
sockets in this range.


NOTE: The KarlBridge is not an IP Router.  This menu specifies the 
IP subnets and IP Hosts on the local network that hosts on the remote 
network can communicate with.

DECNET Protocol Menus
(Will only appear if DECNET is being bridged)

Pass / Drop DECNET Address / Mask Menu:  This 
menu specifies the DECNET Areas and Hosts that are to be passed or 
dropped.  Each entry consists of a DECNET Address and an special 
Mask; a packet that matches is then either passed or dropped as 
specified.  Each DECNET packet's source and destination address is 
checked against each entry in the list to determine if the packet is to be 
passed or dropped.  Matching is performed on the first entry first and 
then goes down the list.  When a match is found the action specified on 
that line is performed immediately.  The packet's DECNET addresses 
are logically "anded" with the mask and then compared with the IP 
address to determine if a match has occurred.  Addresses are specified in 
the standard DECNET syntax: Area.Host.  The special mask is a 
hexadecimal number that specifies a bit mask to be "anded" with the 
packet's DECNET address prior to being comparing with the specified 
DECNET address.  

NOTE: The KarlBridge is not a DECNET Router.  This menu 
specifies the DECNET hosts and/or DECNET areas that hosts on either 
the local or remote network can communicate with.

Following is an example:

Pass DECNET Address & Mask  Action Performed

    5.10    3F.3FF  Pass packets to/from DECNET Host 5.10
    8.79    3F.3FF  Pass packets to/from DECNET Host 8.79
    6.0 3F.000  Pass packets to/from DECNET Area 6
    Drop All Others Drop All Other DECNET Packets

Pass / Drop Remote DECNET Objects Menu:  This 
menu specifies the DECNET Objects on remote DECNET hosts that 
are to be passed or dropped.  Each DECNET connect packet is checked 
against each entry in the list to determine if the packet is to be passed 
or dropped. 


Pass / Drop Remote DECNET Object 0 Menu:  This 
menu specifies the DECNET Object 0 names on remote hosts that are 
to be passed or dropped.  Each DECNET connect packet to DECNET 
Object 0 is checked against each entry in the list to determine if the 
packet is to be passed or dropped. 

Pass / Drop Local DECNET Objects Menu:  This 
menu specifies the DECNET Objects on the local hosts that are to be 
passed or dropped.  Each DECNET connect packet is checked against 
each entry in the list to determine if the packet is to be passed or 
dropped.

Pass / Drop Local DECNET Object 0 Menu:  This 
menu specifies the DECNET Object 0 names that are to be passed or 
dropped.  Each DECNET connect packet to DECNET Object 0 is 
checked against each entry in the list to determine if the packet is to be 
passed or dropped.

AppleTalk Menus
(Will only appear if AppleTalk is being bridged)

When Macintosh's are networked together, one of the undesirable side 
effects is that all Macintosh's can "see" in their choosers all servers and 
all printers that are connected to the network.  If multiple zones are 
specified then there is some form of protection but a user needs to only 
specify a zone and then can choose a printer to print to anywhere in the 
network.  These menus will configure the KarlBridge to selectively 
restrict access to specified Apple servers and/or Apple printers.  The 
KarlBridge is not an AppleTalk router.  It does not have any of the 
characteristics of an AppleTalk router.  The KarlBridge is simply a 
bridge that for AppleTalk can promote or prohibit the appearance of 
server and/or printer names in the chooser.

CAUTION: It is common characteristic of AppleTalk networks with 
multiple routers to have configuration problems if all of the routers do 
not agree on zone names and networks numbers.  The KarlBridge is not 
an AppleTalk Router, it does not contribute to this problem.  These 
menus will not, however, remedy this problem.  If you wish to isolate 
a local AppleTalk network from a remote AppleTalk network you must 
be sure to drop AppleTalk and AppleTalk ARP in the "Ethernet 
Protocol Menu".

Pass / Drop Apple Zone Name Menu:  This menu 
specifies the AppleTalk Zone names that are to be passed or dropped.  
Each of the Apple Zones can be named in this menu.  The menu entry 
* (single asterisk) is the standard AppleTalk code that means "my 
Zone".  As an example; if the Local LAN's Zone name is Tiger and if 
you wish to see in your chooser printers and servers from a Remote 
LAN with the Zone name Tiger, then two entries must appear in this 
menu, the string Tiger and on the next line an *.  This is because 
sometimes AppleTalk explicitly asks for printers and servers in the 
Zone Tiger and sometimes it uses the * as shorthand for Tiger (i.e. 
"my Zone").


Pass / Drop Apple Remote Servers Menu:  This menu 
specifies the Remote file servers that are to appear in the Local LAN's 
Macintosh choosers, regardless of Zone.  If the Local LAN's 
Macintoshes are not to see any Remote file servers then this menu 
should be set to "Pass Apple Remote Servers" with no entries in it.  
This will force the KarlBridge to pass none of the Remote file server 
names to the Local LAN.  If all Remote file servers are to be seen by 
the Local LAN then this menu should be empty and set to "Drop Apple 
Remote Servers".

Pass / Drop Apple Local Servers Menu:  This menu 
specifies the Local file servers that are to appear in the Remote LAN's 
Macintosh choosers, regardless of Zone.  If the Remote Macintoshes are 
not to see any Local file servers then this menu should be set to "Pass 
Apple Local Servers" with no entries in it.  This will force the 
KarlBridge to pass none of the Local LAN's file server names to the 
Remote network.  If all of the Local file servers are to be seen by the 
Remote network then this menu should be empty and set to "Drop 
Apple Local Servers".

Pass / Drop Apple Remote Printers Menu:  This menu 
specifies the Remote printers that are to appear in the Local LAN's 
Macintosh choosers, regardless of Zone.  If the Local LAN's 
Macintoshes are not to see any Remote printers then this menu should 
be set to "Pass Apple Remote Printers" with no entries in it.  This will 
force the KarlBridge to pass none of the Remote printer names to the 
Local LAN.  If all Remote printers are to be seen by the Local LAN 
then this menu should be empty and set to "Drop Apple Remote 
Printers".

Pass / Drop Apple Local Printers Menu:  This menu 
specifies the Local printers that are to appear in the Remote LAN's 
Macintosh choosers, regardless of Zone.  If the Remote Macintoshes are 
not to see any Local printers then this menu should be set to "Pass 
Apple Local Printers" with no entries in it.  This will force the 
KarlBridge to pass none of the Local LAN's printer names to the 
Remote network.  If all of the Local printers are to be seen by the 
Remote network then this menu should be empty and set to "Drop 
Apple Local Printers".


Common Ethernet Protocols

This table contains the protocols that can be specified in the 
KarlBridge's "Ethernet Protocol Menu".

*   0600    Xerox NS IDP
    0601    XNS Address Translation (3Mb only)
*   0800    DOD Internet Protocol (IP)
    0801    X.75 Internet
    0802    NBS Internet
    0803    ECMA Internet
*   0804    CHAOSnet
    0805    X.25 Level 3
*   0806    Address Resolution Protocol (ARP) (for IP and for 
        CHAOS)
    0807    XNS Compatibility
    081C    Symbolics Private
    0888-088A   Xyplex
    0900    Ungermann-Bass network debugger
    0A00    Xerox IEEE802.3 PUP
    0A01    Xerox IEEE802.3 PUP Address Translation
*   0BAD    Banyan Systems
    0BAF    Banyon VINES Echo
    1000    Berkeley Trailer negotiation
    1001-100F   Berkeley Trailer encapsulation for IP
    1234    DCA - Multicast
*   1600    VALID system protocol
    1989    Artificial Horizons Aviator dogfight simulator on 
        Sun
    3C00    3Com NBP virtual circuit datagram (like XNS SPP)
        not registered
    3C01    3Com NBP System control datagram not registered
    3C02    3Com NBP Connect request (virtual cct) not 
        registered
    3C03    3Com NBP Connect repsonse not registered
    3C04    3Com NBP Connect complete not registered


    3C05    3Com NBP Close request (virtual circuit) not 
        registered
    3C06    3Com NBP Close response not registered
    3C07    3Com NBP Datagram (like XNS IDP) not registered
    3C08    3Com NBP Datagram broadcast not registered
    3C09    3Com NBP Claim NetBIOS name not registered
    3C0A    3Com NBP Delete NetBIOS name not registered
    3C0B    3Com NBP Remote adapter status request not 
        registered
    3C0C    3Com NBP Remote adapter response not registered
    3C0D    3Com NBP Reset not registered
    4242    PCS Basic Block Protocol
    4321    THD - Diddle
    6000    DEC unassigned, experimental
    6001    DEC MOP Dump/Load Assistance
    6002    DEC MOP Remote Console
    6003    DECNET Phase IV, DNA Routing
    6004    DEC Local Area Transport (LAT)
    6005    DEC diagnostic protocol (at interface initialisation?)
    6006    DEC customer protocol
    6007    DEC Local Area VAX Cluster (LAVC  SCA)
    6008    DEC unassigned (AMBER?)
    6009    DEC unassigned (MUMPS?)
    6010-6014   3Com Corporation
    7000    Ungermann-Bass download
    7001    Ungermann-Bass NIUs
    7002    Ungermann-Bass diagnostic/loopback
    7003    Ungermann-Bass ??? (NMC to/from UB Bridge)
    7005    Ungermann-Bass Bridge Spanning Tree
    7007    OS/9 Microware
    7009    OS/9 Net?
    7020-7029   LRT (England) (now Sintrom)
    7030    Racal-Interlan
    7034    Cabletron
    8003    Cronus VLN


    8004    Cronus Direct
    8005    HP Probe protocol
    8006    Nestar
    8008    AT&T/Stanford University local use
    8010    Excelan
    8013    Silicon Graphics diagnostic
    8014    Silicon Graphics network games
    8015    Silicon Graphics reserved
    8016    Silicon Graphics XNS NameServer, bounce server
    8019    Apollo DOMAIN
    802E    Tymshare
    802F    Tigan, Inc.
*   8035    Reverse Address Resolution Protocol (RARP)
    8036    Aeonic Systems
    8037    IPX (Novell Netware?)
    8038    DEC LanBridge Management
    8039    DEC unassigned (DSM/DTP?)
    803A    DEC unassigned (Argonaut Console?)
    803B    DEC unassigned (VAXELN?)
    803C    DEC unassigned (NMSV? DNA Naming Service?)
    803D    DEC Ethernet CSMA/CD Encryption Protocol
    803E    DEC unassigned (DNA Time Service?)
    803F    DEC LAN Traffic Monitor Protocol
    8040    DEC unassigned (NetBIOS Emulator?)
    8041    DEC unassigned (MS/DOS?, Local Area System 
        Transport?)
    8042    DEC unassigned
    8044    Planning Research Corp.
    8046    AT&T
    8047    AT&T
    8049    ExperData
    805B    VMTP (Versatile Message Transaction Protocol, 
        RFC-1045)  (Stanford)
    805C    Stanford V Kernel, version 6.0


    805D    Evans & Sutherland
    8060    Little Machines
    8062    Counterpoint Computers
    8065    University of Mass. at Amherst
    8066    University of Mass. at Amherst
    8067    Veeco Integrated Automation
    8068    General Dynamics
    8069    AT&T
    806A    Autophon
    806C    ComDesign
    806D    Compugraphic Corporation
    806E-8077   Landmark Graphics Corporation
    807A    Matra
    807B    Dansk Data Elektronik
*   807C    Merit Internodal (or University of Michigan?)
    807D-807F   Vitalink Communications
    8080    Vitalink TransLAN III Management
    8081-8083   Counterpoint Computers
    8088-808A   Xyplex
*   809B    EtherTalk (AppleTalk Phase I over Ethernet)
    809C-809E   Datability
    809F    Spider Systems Ltd.
    80A3    Nixdorf Computers
    80A4-80B3   Siemens Gammasonics Inc.
    80C0-80C3   DCA (Digital Comm. Assoc.) Data Exchange Cluster
    80C6    Pacer Software
    80C7    Applitek Corporation
    80C8-80CC   Intergraph Corporation
    80CD-80CE   Harris Corporation
    80CF-80D2   Taylor Instrument
    80D3-80D4   Rosemount Corporation
    80D5    IBM SNA Services over Ethernet
    80DD    Varian Associates
    80DE-80DF   TRFS (Integrated Solutions)


    80E0-80E3   Allen-Bradley
    80E4-80F0   Datability
    80F2    Retix
    80F3    AppleTalk Address Resolution Protocol (AARP)
    80F4-80F5   Kinetics
    80F7    Apollo Computer
    80FF-8103   Wellfleet Communications
    8107-8109   Symbolics Private
    812B    Talaris
    8130    Waterloo Microsystems Inc.
    8131    VG Laboratory Systems
    8137    Novell (old) NetWare IPX (ECONFIG E option)
    8138    Novell, Inc.
    8139-813D   KTI
    814C    SNMP over Ethernet (see RFC1089)
    817D    XTP
    81D6    Lantastic
    8888    HP LanProbe test?
    9000    Loopback (Configuration Test Protocol)
*   9001    3Com XNS Systems Management
*   9002    3Com TCP/IP Systems Management
    9003    3Com loopback detection
    AAAA    DECNET? (Used by VAX 6220 DEBNI)
    FF00    BBN VITAL-LanBridge cache wakeups

* These protocols use Ethernet broadcast

Common Ethernet Vendor 
Addresses

This table contains the Vendor portion of the assigned Ethernet 
Addresses.  They may be specified in the KarlBridge's "Ethernet Address 
Menu".

000002  BBN (internal usage only)
00000C  Cisco
00000E  Fujitsu
00000F  NeXT
000010  Hughes LAN Systems (formerly Sytek)
000011  Tektronix
000015  Datapoint Corporation 
000018  Webster (?)
00001B  Novell
00001D  Cabletron
000020  DIAB (Data Intdustrier AB)
000021  SC&C
000022  Visual Technology
000029  IMC
00002A  TRW
00003C  Auspex
00003D  AT&T
000044  Castelle
000046  ISC-Bunker Ramo, An Olivetti Company
000049  Apricot Ltd.
00004B  A.P.T. Appletalk WAN router
00004F  Logicraft 386-Ware P.C. Emulator
000052  ODS
000055  AT&T
00005A  (Schneider & Koch in Europe and Syskonnect)
00005A  Xerox 806 (unregistered)
00005D  RCE
00005E  U.S. Department of Defence (IANA)


000062  Honeywell
000065  Network General
000069  Silicon Graphics(?)
00006B  MIPS
00006E  Artisoft, Inc.
000077  MIPS(?), Interphase(?)
000079  NetWare (?)
00007A  Ardent
00007B  Research Machines
00007D  Harris (3M) (old)
00007F  Linotronic
000080  Imagen(?) Also shows as "Harris (3M) (new)" 
000081  Synoptics
000084  Aquila (?), ADI Systems Inc.(?)
000086  Gateway (?), Megahertz Corporation(?)
000089  Cayman Systems      Gatorbox
00008E  Jupiter(?), Solbourne(?)
000093  Proteon
000094  Asante on the MAC
000095  Sony/Tektronix
000097  Epoch
000098  Cross Com
00009F  Ameristar Technology
0000A0  Sanyo Electronics
0000A2  Wellfleet
0000A3  Network Application Technology (NAT)
0000A4  Acorn
0000A5  Compatible Systems Corporation
0000A6  Network General (internal assignment)
0000A7  Network Computing Devices (NCD) X-terminals
0000A8  Stratus Computer, Inc.
0000A9  Network Systems
0000AA  Xerox machines


0000AC  Apollo
0000AF  Nuclear Data Acquisition Interface Modules (AIM)
0000B0  RND (RAD Network Devices)
0000B3  CIMLinc
0000B5  Datability Terminal Servers
0000B7  Dove Fastnet
0000BB  ?? seems to speak AppleTalk
0000BC  Allen-Bradley
0000C0  Western Digital now  SMC 
0000C6  HP Intelligent Networks Operation 
0000C8  Altos
0000C9  Emulex Terminal Servers
0000D0  Develcon Electronics, Ltd.
0000D1  Adaptec, Inc. "Nodem" product
0000D7  Dartmouth College (NED Router)
0000D8  3Com? Novell?  PS/2
0000DD  Gould
0000DE  Unigraph
0000E2  Acer Counterpoint
0000E8  Accton Technology Corporation
0000EE  Network Designers Limited(?)
0000EF  Alantec
0000F0  Samsung
0000F3  Gandalf
0000F4  Allied Telesis, Inc.
0000F6  A.M.C. (Applied Microsystems Corp.)
0000FD  High Level Hardware (Orion, UK)
000102  BBN internal usage (not registered)
000143  IEEE 802
000163  NDC  (National Datacomm Corporation)
000168  W&G  (Wandel & Goltermann)
0001C8  Thomas Conrad Corp.
001700  Kabel


00402B  TriGem
0040C5  Micom Communications Corp.
0040C8  Milan Technology Corp.
00608C  3Com (1990 onwards)
00800F  SMC (Standard Microsystem Corp.)
008010  Commodore
008017  PFU
008019  Dayna Communications "Etherprint" product
00801B  Kodiak Technology
008021  Newbridge Networks Corporation
008029  Microdyne Corporation
00802D  Xylogics, Inc. Annex terminal servers
00802E  Plexcom, Inc.
008034  SMT-Goupil
008035  Technology Works
008051  ADC Fibermux
008052  Network Professor
00805C  Agilis(?)
00807C  FiberCom
008087  Okidata
00808C  Frontier Software Development
008096  HDS (Human Designed Systems) X terminals
0080A1  Microtest
0080A3  Lantronix
0080B2  NET  (Network Equipment Technologies)
0080C7  Xircom, Inc.
0080C8  D-Link (also Solectek Pocket Adapters)
0080D0  Computer Products International
0080D3  Shiva - Appletalk-Ethernet interface
0080D4  Chase Limited
0080D8  Network Peripherals
0080F1  Opus
00AA00  Intel
00B0D0  Computer Products International


00DD00  Ungermann-Bass  - IBM RT
00DD01  Ungermann-Bass
00EFE5  IBM (3Com card) Micro channel interface 
020406  BBN internal usage (not registered)
020701  MICOM/Interlan DEC (UNIBUS or QBUS), Apollo, 
    Cisco
026060  3Com
026086  Satelcom MegaPac (UK)
02608C  3Com IBM PC; Imagen; Valid; Cisco; Macintosh
02CF1F  CMC Masscomp; Silicon Graphics; Prime EXL
02E6D3  BTI (Bus-Tech, Inc.)  IBM Mainframes
080001  Computer Vision
080002  3Com (formerly Bridge)
080003  ACC (Advanced Computer Communications)
080005  Symbolics LISP machines
080007  Apple
080008  BBN
080009  Hewlett-Packard
08000A  Nestar Systems
08000B  Unisys
08000D  ICL (International Computers, Ltd.)
08000E  NCR/AT&T
08000F  SMC (Standard Microsystems Corp.)
080010  AT&T [misrepresentation of 800010?]
080011  Tektronix, Inc.
080014  Excelan  BBN Butterfly, Masscomp, Silicon Graphics
080017  NSC (National Semiconductor Corp.)
08001A  Data General
08001B  Data General
08001E  Apollo
08001F  Sharp
080020  Sun
080022  NBI (Nothing But Initials)
080023  Matsushita Denso


080025  CDC
080026  Norsk Data (Nord)
080027  PCS Computer Systems GmbH
080028  TI Explorer
08002B  DEC
08002E  Metaphor
08002F  Prime 50-Series LHC300
080036  Intergraph CAE stations
080037  Fujitsu-Xerox
080038  Bull
080039  Spider Systems
08003B  Torus Systems
08003E  Motorola VME bus processor modules
080041  DCA (Digital Comm. Assoc.)
080044  DSI (DAVID Systems, Inc.)
080045  ? (maybe Xylogics, but they claim not to know) 
080046  Sony
080047  Sequent
080049  Univation
08004C  Encore
08004E  BICC
080051  Experdata
080056  Stanford University
080057  Evans & Sutherland (?)
080058  ? DECsystem-20
08005A  IBM
080067  Comdesign
080068  Ridge
080069  Silicon Graphics
08006A  ATTst (?)
08006E  Excelan
080070  Mitsubishi
080074  Casio


080075  DDE (Danish Data Elektronik A/S)
080077  TSL (now Retix)
080079  Silicon Graphics
08007C  Vitalink TransLAN III
080080  XIOS
080081  Crossfield Electronics
080083  Seiko Denshi 
080086  Imagen/QMS
080087  Xyplex terminal servers
080089  Kinetics AppleTalk-Ethernet interface
08008B  Pyramid
08008D  XyVision machines
08008E  Tandem
080090  Retix Inc. Bridges
10005A  IBM
1000D4  DEC
1000E0  Apple A/UX (modified addresses for licensing)
400003  NetWare (?)
475443  GTC (Not registered!)  (This number is a multicast!)
484453  HDS ???
800010  AT&T [misrepresented as 080010?)
AA0000  DEC obsolete
AA0001  DEC obsolete
AA0002  DEC obsolete
AA0003  DEC Global physical address for some DEC machines
AA0004  DEC Local logical address for systems running DECNET
C00000  Western Digital (may be reversed 00 00 C0?)

Common Ethernet Multicast
Addresses and Their Uses

This table contains commonly used Ethernet Multicast Addresses and 
the Ethernet Protocols they use.  They may be specified in the 
KarlBridge's "Ethernet Address Menu".

01-00-1D-00-00-00   -802-   Cabletron PC-OV PC discover
01-00-1D-42-00-00   -802-   Cabletron PC-OV Bridge discover 
01-00-1D-52-00-00   -802-   Cabletron PC-OV MMAC discover
01-00-5E-00-00-00   0800    DoD Internet Multicast (RFC-1112)
    through
01-00-5E-7F-FF-FF

01-00-5E-80-00-00       DoD Internet reserved by IANA
    through
01-00-5E-FF-FF-FF

01-00-81-00-00-02       Synoptics Network Management
01-80-C2-00-00-00   -802-   Spanning tree (for bridges)

01-80-C2-00-00-01   -802-   802.1 alternate Spanning multicast
    through
01-80-C2-00-00-0F

01-80-C2-00-00-14   -802-   OSI Route level 1 (within area) IS 
hello?
01-80-C2-00-00-15   -802-   OSI Route level 2 (between area) IS 
hello?
01-DD-00-FF-FF-FF   7002    Ungermann-Bass boot-me requests
01-DD-01-00-00-00   7005    Ungermann-Bass Spanning Tree


03-00-00-00-00-10   80D5    (OS/2 1.3 EE + Communications 
Manager)
03-00-00-00-00-40   80D5    (OS/2 1.3 EE + Communications 
Manager)
09-00-02-04-00-01?  8080?   Vitalink printer messages
09-00-02-04-00-02?  8080?   Vitalink bridge management

09-00-07-00-00-00   -802-   AppleTalk Zone multicast addresses
    through
09-00-07-00-00-FC

09-00-07-FF-FF-FF   -802-   AppleTalk broadcast address
09-00-09-00-00-01   8005    HP Probe
09-00-09-00-00-01   -802-   HP Probe
09-00-09-00-00-04   8005?   HP DTC
09-00-0D-xx-xx-xx   -802-   ICL Oslan Multicast
09-00-0D-02-00-00       ICL Oslan Service discover on boot
09-00-0D-02-0A-38       ICL Oslan Service discover on boot
09-00-0D-02-0A-39       ICL Oslan Service discover on boot
09-00-0D-02-0A-3C       ICL Oslan Service discover on boot
09-00-0D-02-FF-FF       ICL Oslan Service discover on boot
09-00-0D-09-00-00       ICL Oslan Service discover as required
09-00-1E-00-00-00   8019?   Apollo DOMAIN
09-00-26-01-00-01?  8038    Vitalink TransLAN bridge management
09-00-2B-00-00-00   6009?   DEC MUMPS?
09-00-2B-00-00-01   8039    DEC DSM/DTP?
09-00-2B-00-00-02   803B?   DEC VAXELN?
09-00-2B-00-00-03   8038    DEC Lanbridge Traffic Monitor (LTM)
09-00-2B-00-00-04       DEC MAP End System Hello?
09-00-2B-00-00-05       DEC MAP Intermediate System Hello?
09-00-2B-00-00-06   803D?   DEC CSMA/CD Encryption?
09-00-2B-00-00-07   8040?   DEC NetBios Emulator?
09-00-2B-00-00-0F   6004    DEC Local Area Transport (LAT)


09-00-2B-00-00-1x       DEC Experimental
09-00-2B-01-00-00   8038    DEC LanBridge Copy packets 
09-00-2B-01-00-01   8038    DEC LanBridge Hello packets (All local 
            bridges) 1 packet per second, sent by the 
            designated LanBridge
09-00-2B-02-00-00       DEC DNA Level 2 Routing Layer ?
09-00-2B-02-01-00   803C?   DEC DNA Naming Service Advertise?
09-00-2B-02-01-01   803C?   DEC DNA Naming Service  
            Solicitation?
09-00-2B-02-01-02   803E?   DEC DNA Time Service
09-00-2B-03-xx-xx       DEC default filtering by bridges?
09-00-2B-04-00-00   8041?   DEC Local Area Sys Transport LAST?
09-00-2B-23-00-00   803A?   DEC Argonaut Console?
09-00-39-00-70-00?      Spider Systems Bridge Hello packet?
09-00-4C-00-00-00   -802-   BICC 802.1 management
09-00-4C-00-00-02   -802-   BICC 802.1 management
09-00-4C-00-00-06   -802-   BICC Local bridge STA 802.1(D) Rev6
09-00-4C-00-00-0C   -802-   BICC Rem bridge STA 802.1(D) Rev8
09-00-4C-00-00-0F   -802-   BICC Remote bridge Adaptive Routing
            (e.g. to Retix)
09-00-4E-00-00-02?  8137?   Novell IPX (BICC?)

09-00-56-00-00-00       Stanford reserved
    through
09-00-56-FE-FF-FF

09-00-56-FF-00-00   805C    Stanford V Kernel, version 6.0
    through
09-00-56-FF-FF-FF

09-00-77-00-00-00   -802-   Retix Bridge Local Management System
09-00-77-00-00-01   -802-   Retix spanning tree bridges 
09-00-77-00-00-02   -802-   Retix Bridge Adaptive routing
09-00-7C-01-00-01       Vitalink DLS Multicast


09-00-7C-01-00-03       Vitalink DLS Inlink
09-00-7C-01-00-04       Vitalink DLS and non DLS Multicast
09-00-7C-02-00-05   8080?   Vitalink diagnostics
09-00-7C-05-00-01   8080?   Vitalink gateway?
09-00-7C-05-00-02       Vitalink Network Validation Message
09-00-87-80-FF-FF   0889    Xyplex Terminal Servers
09-00-87-90-FF-FF   0889    Xyplex Terminal Servers
0D-1E-15-BA-DD-06       HP
80-01-43-00-00-00   -802-   Bridge
80-01-43-00-00-08   -802-   Bridge Management
80-01-43-00-00-28   -802-   ISO 10589 level-1 Intermediate Stations
80-01-43-00-00-48   -802-   Loadable Device
80-01-43-00-00-88   -802-   Load Server
80-01-43-00-00-A8   -802-   ISO 10589 level-2 Intermediate Stations
80-01-43-00-80-00   -802-   FDDI RMT Directed Beacon
80-01-43-00-80-08   -802-   FDDI status report frame
90-00-D4-00-00-20   -802-   OSI Network Layer Intermediate 
            Stations
90-00-D4-00-00-A0   -802-   OSI Network Layer End Stations
AB-00-00-01-00-00   6001    DEC Maintenance Operation Protocol 
            (MOP) Dump/Load Assistance
AB-00-00-02-00-00   6002    DEC Maintenance Operation Protocol 
            (MOP) Remote Console 1 System ID 
            packet every 8-10 minutes, by every:
            DEC LanBridge
            DEC DEUNA interface
            DEC DELUA interface
            DEC DEQNA interface 
AB-00-00-03-00-00   6003    DECNET Phase IV end node Hello 
            packets 1 packet every 15 seconds, sent 
            by each  DECNET host
AB-00-00-04-00-00   6003    DECNET Phase IV Router Hello 
            packets, 1 packet every 15 seconds, sent 
            by the DECNET router


AB-00-00-05-00-00       Reserved DEC
    through
AB-00-03-FF-FF-FF

AB-00-03-00-00-00   6004    DEC Local Area Transport (LAT) - old
AB-00-04-00-xx-xx       Reserved DEC customer private use
AB-00-04-01-xx-yy   6007    DEC Local Area VAX Cluster groups
            System Communication Architecture
C0-00-00-00-00-01   -802-   Active Monitor
C0-00-00-00-00-02   -802-   Ring Parameter Monitor
C0-00-00-00-00-04   -802-   Network Server Heartbeat
C0-00-00-00-00-08   -802-   Ring Error Monitor
C0-00-00-00-00-10   -802-   Configuration Report Server
C0-00-00-00-00-20   -802-   Synchronous Bandwidth Manager
C0-00-00-00-00-40   -802-   Locate - Directory Server
C0-00-00-00-00-80   -802-   NETBIOS
C0-00-00-00-01-00   -802-   Bridge
C0-00-00-00-02-00   -802-   IMPL Server
C0-00-00-00-04-00   -802-   Ring Authorization Server
C0-00-00-00-08-00   -802-   LAN Gateway
C0-00-00-00-10-00   -802-   Ring Wiring Concentrator
C0-00-00-00-20-00   -802-   LAN Manager

C0-00-00-00-80-00   -802-
    through     user-defined
C0-00-40-00-00-00   -802-

CF-00-00-00-00-00   9000    Ethernet Configuration Test protocol 
(Loopback)
FF-FF-00-60-00-04   81D6    Lantastic
FF-FF-00-40-00-01   81D6    Lantastic
FF-FF-01-E0-00-04   81D6    Lantastic

Common Uses of the Ethernet 
Broadcast Addresses

This table contains common uses for the Ethernet Broadcast Address and 
the Ethernet Protocols that use it.  This table is for reference only.

FF-FF-FF-FF-FF-FF   0600    XNS packets, Hello or gateway search?
        6 packets every 15 seconds, per XNS 
        station
FF-FF-FF-FF-FF-FF   0800    IP (e.g. RWHOD via UDP) as needed
FF-FF-FF-FF-FF-FF   0804    CHAOS
FF-FF-FF-FF-FF-FF   0806    ARP (for IP and CHAOS) as needed
FF-FF-FF-FF-FF-FF   0BAD    Banyan
FF-FF-FF-FF-FF-FF   1600    VALID packets, Hello or gateway 
        search? 1 packets every 30 seconds, per 
        VALID station
FF-FF-FF-FF-FF-FF   8035    Reverse ARP
FF-FF-FF-FF-FF-FF   807C    Merit Internodal (INP)
FF-FF-FF-FF-FF-FF   809B    EtherTalk Phase I
FF-FF-FF-FF-FF-FF   9001    3Com (ex Bridge) Name Service
FF-FF-FF-FF-FF-FF   9002    3Com PCS/TCP Hello,Approximately 
        1 per minute per workstation

Assigned IP - TCP/UDP Sockets 
(from RFC1060)

    0   Reserved
    1   TCPMUX  TCP Port Service Multiplexer
    2-4 Unassigned
    5   RJE Remote Job Entry
    7   ECHO    Echo
    9   DISCARD Discard
    11  USERS   Active Users
    13  DAYTIME Daytime
    15  Unassigned
    17  QUOTE   Quote of the Day
    19  CHARGEN Character Generator
    20  FTP-DATA    File Transfer [Default Data]
    21  FTP File Transfer [Control]
    23  TELNET  Telnet
    25  SMTP    Simple Mail Transfer
    27  NSW-FE  NSW User System
    29  MSG-ICP MSG ICP
    31  MSG-AUTH    MSG Authentication
    33  DSP Display Support Protocol
    35  any private printer server
    37  TIME    Time
    39  RLP Resource Location Protocol
    41  GRAPHICS    Graphics
    42  NAMESERVER  Host Name Server
    43  NICNAME Who Is
    44  MPM-FLAGS   MPM FLAGS Protocol
    45  MPM Message Processing Module [receive]
    46  MPM-SND MPM [default send]
    47  NI-FTP  NI FTP
    49  LOGIN   Login Host Protocol
    51  LA-MAINT    IMP Logical Address Maintenance
    53  DOMAIN  Domain Name Server


    55  ISI-GL  SI Graphics Language
    57  any private terminal access
    59  any private file service
    61  NI-MAIL NI MAIL
    63  VIA-FTP VIA Systems - FTP
    65  TACACS-DS   TACACS-Database Service
    67  BOOTPS  Bootstrap Protocol Server
    68  BOOTPC  Bootstrap Protocol Client
    69  TFTP    Trivial File Transfer
    71  NETRJS-1    Remote Job Service
    72  NETRJS-2    Remote Job Service
    73  NETRJS-3    Remote Job Service
    74  NETRJS-4    Remote Job Service
    75  any private dial out service
    77  any private RJE service
    79  FINGER  Finger
    81  HOSTS2-NS   HOSTS2 Name Server
    83  MIT-ML-DEV  MIT ML Device
    85  MIT-ML-DEV  MIT ML Device
    87  any private terminal link
    89  SU-MIT-TG   SU/MIT Telnet Gateway
    91  MIT-DOV MIT Dover Spooler
    93  DCP Device Control Protocol
    95  SUPDUP  SUPDUP
    97  SWIFT-RVF   Swift Remote Vitural File Protocol
    98  TACNEWS TAC News
    99  METAGRAM    Metagram Relay
    101 HOSTNAME    NIC Host Name Server
    102 ISO-TSAP    ISO-TSAP
    103 X400    X400
    104 X400-SND    X400-SND
    105 CSNET-NS    Mailbox Name Nameserver
    107 RTELNET Remote Telnet Service
    109 POP2    Post Office Protocol - Version 2


    110 POP3    Post Office Protocol - Version 3
    111 SUNRPC  SUN Remote Procedure Call
    113 AUTH    Authentication Service
    115 SFTP    Simple File Transfer Protocol
    117 UUCP-PATH   UUCP Path Service
    119 NNTP    Network News Transfer Protocol
    121 ERPC    Encore Expedited Remote Proc. Call 
    123 NTP Network Time Protocol
    125 LOCUS-MAP   Locus PC-Interface Net Map Server
    127 LOCUS-CON   Locus PC-Interface Conn Server
    129 PWDGEN  Password Generator Protocol
    130 CISCO-FNA   CISCO FNATIVE
    131 CISCO-TNA   CISCO TNATIVE
    132 CISCO-SYS   CISCO SYSMAINT
    133 STATSRV Statistics Service
    134 INGRES-NET  NGRES-NET Service
    135 LOC-SRV Location Service
    136 PROFILE PROFILE Naming System
    137 NETBIOS-NS  NetBIOS Name Service
    138 NETBIOS-DGM NetBIOS Datagram Service
    139 NETBIOS-SSN NetBIOS Session Service
    140 EMFIS-DATA  EMFIS Data Service
    141 EMFIS-CNTL  EMFIS Control Service
    142 BL-IDM  Britton-Lee IDM
    143 IMAP2   Interim Mail Access Protocol v2
    144 NEWS    NewS
    145 UAAC    UAAC Protocol
    146 ISO-TP0 ISO-IP0
    147 ISO-IP  ISO-IP
    148 CRONUS  CRONUS-SUPPORT
    149 AED-512 AED 512 Emulation Service
    150 SQL-NET SQL-NET
    151 HEMS    HEMS
    152 BFTP    Background File Transfer Program


    153 SGMP    SGMP
    154 NETSC-PROD  NETSC
    155 NETSC-DEV   NETSC
    156 SQLSRV  SQL Service
    157 KNET-CMP    KNET/VM Command/Message
    158 PCMail-SRV  PCMail Server
    159 NSS-Routing NSS-Routing
    160 SGMP-TRAPS  SGMP-TRAPS
    161 SNMP    SNMP
    162 SNMPTRAP    SNMPTRAP
    163 CMIP-Manage CMIP/TCP Manager
    164 CMIP-Agent  CMIP/TCP Agent
    165 XNS-Courier Xerox
    166 S-Net   Sirius Systems
    167 NAMP    NAMP
    168 RSVD    RSVD
    169 SEND    SEND
    170 Print-SRV   Network PostScript
    171 Multiplex   Network Innovations Multiplex
    172 CL/1    Network Innovations CL/1
    173 Xyplex-MUX  Xyplex
    174 MAILQ   MAILQ
    175 VMNET   VMNET
    176 GENRAD-MUX  GENRAD-MUX
    177 XDMCP   X Display Manager Control Protocol
    178 NextStep    NextStep Window Server
    179 BGP Border Gateway Protocol
    180 RIS ntergraph
    181 Unify   Unify
    182 Unisys-Cam  Unisys-Cam
    183 OCBinder    OCBinder
    184 OCServer    OCServer
    185 Remote-KIS  Remote-KIS
    186 KIS KIS Protocol


    187 ACI Application Communication Interface
    188 MUMPS   MUMPS
    189 QFT Queued File Transport
    190 GACP    Gateway Access Control Protocol
    191 Prospero    Prospero
    192 OSU-NMS OSU Network Monitoring System
    193 SRMP    Spider Remote Monitoring Protocol
    194 IRC Internet Relay Chat Protocol
    195 DN6-NLM-AUD DNSIX Network Level Module Audit
    196 DN6-SMM-RED DNSIX Session Mgt Module Audit 
                Redirect
    197 DLS Directory Location Service
    198 DLS-Mon Directory Location Service Monitor
    199-200 Unassigned
    201 AT-RMTP AppleTalk Routing Maintenance
    202 AT-NBP  AppleTalk Name Binding
    203 AT-3    AppleTalk Unused
    204 AT-ECHO AppleTalk Echo
    205 AT-5    AppleTalk Unused
    206 AT-ZIS  AppleTalk Zone Information
    207 AT-7    AppleTalk Unused
    208 AT-8    AppleTalk Unused
    209-223 Unassigned
    224-241 Reserved
    243 SUR-MEAS    Survey Measurement
    245 LINK    LINK
    246 DSP3270 Display Systems Protocol
    247-255 Reserved

Common UNIX Sockets
(from RFC1060)

(TCP/IP "Server" Sockets)

By convention, ports in the range 256 to 1024 are used for "Unix 
Standard" services.  Listed here are some of the normal uses of these 
port numbers.

    echo    7/tcp
    discard 9/tcp   sink null
    systat  11/tcp  users
    daytime 13/tcp
    netstat 15/tcp
    qotd    17/tcp  quote
    chargen 19/tcp  ttytst source
    ftp-data    20/tcp
    ftp 21/tcp
    telnet  23/tcp
    smtp    25/tcp  mail
    time    37/tcp  timserver
    name    42/tcp  nameserver
    whois   43/tcp  nicname
    nameserver  53/tcp  domain
    apts    57/tcp  any private terminal service
    apfs    59/tcp  any private file service
    rje 77/tcp  netrjs
    finger  79/tcp
    link    87/tcp  ttylink
    supdup  95/tcp
    newacct 100/tcp [unauthorized use]
    hostnames   101/tcp hostname
    iso-tsap    102/tcp tsap
    x400    103/tcp
    x400-snd    104/tcp
    csnet-ns    105/tcp CSNET Name Service

    pop-2   109/tcp pop postoffice
    sunrpc  111/tcp
    auth    113/tcp authentication
    sftp    115/tcp
    uucp-path   117/tcp
    nntp    119/tcp usenet readnews untp
    ntp 123/tcp network time protocol
    statsrv 133/tcp
    profile 136/tcp
    NeWS    144/tcp news
    print-srv   170/tcp
    exec    512/tcp remote process execution;
    login   513/tcp remote login a la telnet;
    cmd 514/tcp like exec, but automatic
    printer 515/tcp spooler
    efs 520/tcp extended file name server
    tempo   526/tcp newdate
    courier     530/tcp rpc
    conference  531/tcp chat
    netnews 532/tcp readnews
    uucp    540/tcp uucpd
    klogin  543/tcp
    kshell  544/tcp krcmd
    dsf 555/tcp
    remotefs    556/tcp rfs server
    chshell 562/tcp chcmd
    meter   570/tcp daemon
    pcserver    600/tcp Sun IPC server
    nqs 607/tcp nqs
    mdqs    666/tcp
    rfile   750/tcp
    pump    751/tcp
    qrh 752/tcp
    rrh 753/tcp


    tell    754/tcp send
    nlogin  758/tcp
    con 759/tcp
    ns  760/tcp
    rxe 761/tcp
    quotad  762/tcp
    cycleserv   763/tcp
    omserv  764/tcp
    webster 765/tcp
    phonebook   767/tcp phone
    vid 769/tcp
    rtip    771/tcp
    cycleserv2  772/tcp
    submit  773/tcp
    rpasswd 774/tcp
    entomb  775/tcp
    wpages  776/tcp
    wpgs    780/tcp
    mdbs_daemon 800/tcp
    device  801/tcp
    maitrd  997/tcp
    busboy  998/tcp
    garcon  999/tcp

Common UNIX Sockets
(from RFC1060)

(UDP/IP "Server" Sockets)

    echo    7/udp
    discard 9/udp   sink null
    systat  11/udp  users
    daytime 13/udp
    netstat 15/udp
    qotd    17/udp  quote
    chargen 19/udp  ttytst source
    time    37/udp  timserver
    rlp 39/udp  resource
    name    42/udp  nameserver
    whois   43/udp  nicname
    nameserver  53/udp  domain
    bootps  67/udp  bootp
    bootpc  68/udp
    tftp    69/udp
    sunrpc  111/udp
    erpc    121/udp
    ntp 123/udp
    statsrv 133/udp
    profile 36/udp
    snmp    161/udp
    snmp-trap   162/udp
    at-rtmp 201/udp
    at-nbp  202/udp
    at-3    203/udp
    at-echo 204/udp
    at-5    205/udp
    at-zis  206/udp
    at-7    207/udp
    at-8    208/udp


    biff    512/udp used by mail system to notify users
            of new mail received; currently
            receives messages only from
            processes on the same machine

    who 513/udp maintains data bases showing who's
            logged in to machines on a local
            net and the load average of the
            machine
    syslog  514/udp
    talk    517/udp like tenex link, but across
            machine - unfortunately, doesn't
            use link protocol (this is actually
            just a rendezvous port from which a
            tcp connection is established)
    ntalk   518/udp
    utime   519/udp unixtime
    router  520/udp local routing process (RIP);
    timed   525/udp timeserver
    netwall 533/udp for emergency broadcasts
    new-rwho    550/udp     new-who
    rmonitor    560/udp rmonitord
    monitor 561/udp
    meter   571/udp udaemon
    elcsd   704/udp errlog copy/server daemon
    loadav  750/udp
    vid 769/udp
    cadlock 770/udp
    notify  773/udp
    acmaint_dbd 774/udp
    acmaint_transd  775/udp
    wpages  776/udp
    puparp  998/udp
    applix  999/udp Applix ac
    puprouter   999/udp
    cadlock 1000/udp

Common UNIX Sockets
(from RFC1060)

(TCP/IP Sockets > 1023)

    blackjack   1025/tcp    network blackjack
    bbn-mmc 1347/tcp    multi media conferencing
    bbn-mmx     1348/tcp    multi media conferencing
    orasrv  1525/tcp    oracle
    ingreslock  1524/tcp
    issd    1600/tcp
    nkd 1650/tcp
    dc  2001/tcp
    mailbox 2004/tcp
    berknet 2005/tcp
    invokator   2006/tcp
    dectalk 2007/tcp
    conf    2008/tcp
    news    2009/tcp
    search  2010/tcp
    raid-cc 2011/tcp    raid
    ttyinfo 2012/tcp
    raid-am 2013/tcp
    troff   2014/tcp
    cypress 2015/tcp
    cypress-stat    2017/tcp
    terminaldb  2018/tcp
    whosockami  2019/tcp
    servexec    2021/tcp
    down    2022/tcp
    ellpack 2025/tcp
    shadowserver    2027/tcp
    submitserver    2028/tcp
    device2 2030/tcp


    blackboard  2032/tcp
    glogger 2033/tcp
    scoremgr    2034/tcp
    imsldoc 2035/tcp
    objectmanager   2038/tcp
    lam 2040/tcp
    interbase   2041/tcp
    isis    2042/tcp
    rimsl   2044/tcp
    dls 2047/tcp
    dls-monitor 2048/tcp
    shilp   2049/tcp
    NSWS    3049/tcp
    rfa 4672/tcp    remote file access server
    commplex-main   5000/tcp
    commplex-link   5001/tcp
    padl2sim    5236/tcp
    man 9535/tcp


Common UNIX Sockets
(from RFC1060)

(UDP/IP Sockets > 1023)

    hermes  1248/udp
    wizard  2001/udp    curry
    globe   2002/udp
    emce    2004/udp    CCWS mm conf
    oracle  2005/udp
    raid-cc 2006/udp    raid
    raid-am 2007/udp
    terminaldb  2008/udp


    whosockami  2009/udp
    pipe_server 2010/udp
    servserv    2011/udp
    raid-ac 2012/udp
    raid-cd 2013/udp
    raid-sf 2014/udp
    raid-cs 2015/udp
    bootserver  2016/udp
    bootclient  2017/udp
    rellpack    2018/udp
    about   2019/udp
    xinupageserver  2020/udp
    xinuexpansion1  2021/udp
    xinuexpansion2  2022/udp
    xinuexpansion3  2023/udp
    xinuexpansion4  2024/udp
    xribs   2025/udp
    scrabble    2026/udp
    isis    2042/udp
    isis-bcast  2043/udp
    rimsl   2044/udp
    cdfunc  2045/udp
    sdfunc  2046/udp
    dls 2047/udp
    shilp   2049/udp
    rmonitor_secure 5145/udp
    xdsxdm  6558/udp
    isode-dua   17007/udp

KarlBridge SNMP Objects

The KarlBridge supports several standard SNMP MIB's.  It supports the 
MIB-II, Ethernet-like Interface MIB, Bridge MIB, and the SNMP MIB.  
The following table documents exactly which MIB variables are used by 
the KarlBridge..

The following key is used throughout these tables:

    I   Implemented as described in related RFCs.
    N   Not Implemented (to be implemented).
    R   Implemented as read-only. (Applies to objects described 
        as read-write in RFC)  These objects can only be changed
        by use of the kbconfig program.
    Z   The object implemented such that it always reads zero or 
        null because variable is not appropriate for this bridge

The System Group
(RFC 1213)

sysDescr    1.3.6.1.2.1.1.1.0   I
sysObjectID 1.3.6.1.2.1.1.2.0   I
sysUpTime   1.3.6.1.2.1.1.3.0   I
sysContact  1.3.6.1.2.1.1.4.0   R
sysName     1.3.6.1.2.1.1.5.0   R
sysLocation 1.3.6.1.2.1.1.6.0   R
sysServices 1.3.6.1.2.1.1.7.0   I

The Interfaces Group
(RFC 1213)

ifNumber    1.3.6.1.2.1.2.1.0   I

The Interface Table

ifIndex 1.3.6.1.2.1.2.2.1.1.ifIndex I
ifDescr 1.3.6.1.2.1.2.2.1.2.ifIndex I
ifType  1.3.6.1.2.1.2.2.1.3.ifIndex I
ifMtu   1.3.6.1.2.1.2.2.1.4.ifIndex I
ifSpeed 1.3.6.1.2.1.2.2.1.5.ifIndex I
ifPhysAddress   1.3.6.1.2.1.2.2.1.6.ifIndex I
ifAdminStatus   1.3.6.1.2.1.2.2.1.7.ifIndex R
ifOperStatus    1.3.6.1.2.1.2.2.1.8.ifIndex I 
ifLastChange    1.3.6.1.2.1.2.2.1.9.ifIndex I
ifInOctets  1.3.6.1.2.1.2.2.1.10.ifIndex    I
ifInUcastPkts   1.3.6.1.2.1.2.2.1.11.ifIndex    I
ifInNUcastPkts  1.3.6.1.2.1.2.2.1.12.ifIndex    I
ifInDiscards    1.3.6.1.2.1.2.2.1.13.ifIndex    I
ifInErrors  1.3.6.1.2.1.2.2.1.14.ifIndex    I
ifInUnknownProtos   1.3.6.1.2.1.2.2.1.15.ifIndex    Z
ifOutOctets 1.3.6.1.2.1.2.2.1.16.ifIndex    I
ifOutUcastPkts  1.3.6.1.2.1.2.2.1.17.ifIndex    I
ifOutNUcastPkts 1.3.6.1.2.1.2.2.1.18.ifIndex    I
ifOutDiscards   1.3.6.1.2.1.2.2.1.19.ifIndex    Z
ifOutErrors 1.3.6.1.2.1.2.2.1.20.ifIndex    I
ifOutQLen   1.3.6.1.2.1.2.2.1.21.ifIndex    Z
ifSpecific  1.3.6.1.2.1.2.2.1.22.ifIndex    I

The IP Group
(RFC 1213)

ipForwarding    1.3.6.1.2.1.4.1.0   I
ipDefaultTTL    1.3.6.1.2.1.4.2.0   R
ipInReceives    1.3.6.1.2.1.4.3.0   I
ipInHdrErrors   1.3.6.1.2.1.4.4.0   I
ipInAddrErrors  1.3.6.1.2.1.4.5.0   I
ipForwDatagrams 1.3.6.1.2.1.4.6.0   I
ipInUnknownProtos   1.3.6.1.2.1.4.7.0   I
ipInDiscards    1.3.6.1.2.1.4.8.0   I
ipInDelivers    1.3.6.1.2.1.4.9.0   I
ipOutRequests   1.3.6.1.2.1.4.10.0  I
ipOutDiscards   1.3.6.1.2.1.4.11.0  I
ipOutNoRoutes   1.3.6.1.2.1.4.12.0  I
ipReasmTimeout  1.3.6.1.2.1.4.13.0  I
ipReasmReqds    1.3.6.1.2.1.4.14.0  I
ipReasmOKs  1.3.6.1.2.1.4.15.0  I
ipReasmFails    1.3.6.1.2.1.4.16.0  I
ipFragOKs   1.3.6.1.2.1.4.17.0  I
ipFragFails 1.3.6.1.2.1.4.18.0  I
ipFragCreates   1.3.6.1.2.1.4.19.0  I

The ICMP Group
(RFC 1213)

icmpInMsgs  1.3.6.1.2.1.5.1.0   I
icmpInErrors    1.3.6.1.2.1.5.2.0   I
icmpInDestUnreachs  1.3.6.1.2.1.5.3.0   I
icmpInTimeExcds 1.3.6.1.2.1.5.4.0   I
icmpInParmProbs 1.3.6.1.2.1.5.5.0   I
icmpInSrcQuenchs    1.3.6.1.2.1.5.6.0   I
icmpInRedirects 1.3.6.1.2.1.5.7.0   I
icmpInEchos 1.3.6.1.2.1.5.8.0   I
icmpInEchoReps  1.3.6.1.2.1.5.9.0   I
icmpInTimestamps    1.3.6.1.2.1.5.10.0  I
icmpInTimestampReps 1.3.6.1.2.1.5.11.0  I
icmpInAddrMasks 1.3.6.1.2.1.5.12.0  I
icmpInAddrMaskReps  1.3.6.1.2.1.5.13.0  I
icmpOutMsgs 1.3.6.1.2.1.5.14.0  I
icmpOutErrors   1.3.6.1.2.1.5.15.0  I
icmpOutDestUnreachs 1.3.6.1.2.1.5.16.0  I
icmpOutTimeExcds    1.3.6.1.2.1.5.17.0  I
icmpOutParmProbs    1.3.6.1.2.1.5.18.0  I
icmpOutSrcQuenchs   1.3.6.1.2.1.5.19.0  I
icmpOutRedirects    1.3.6.1.2.1.5.20.0  I
icmpOutEchos    1.3.6.1.2.1.5.21.0  I
icmpOutEchoReps 1.3.6.1.2.1.5.22.0  I
icmpOutTimestamps   1.3.6.1.2.1.5.23.0  I
icmpOutTimestampReps    1.3.6.1.2.1.5.24.0  I
icmpOutAddrMasks    1.3.6.1.2.1.5.25.0  I
icmpOutAddrMaskReps 1.3.6.1.2.1.5.26.0  I

The UDP Group
(RFC 1213)

udpInDatagrams  1.3.6.1.2.1.7.1.0   I
udpNoPorts  1.3.6.1.2.1.7.2.0   I  
udpInErrors 1.3.6.1.2.1.7.3.0   I
udpOutDatagrams 1.3.6.1.2.1.7.4.0   I

The UDP Table

udpLocalAddress 1.3.6.1.2.1.7.5.1.1.1.IPAdd.UDPPort I
udpLocalPort    1.3.6.1.2.1.7.5.1.2.1.IPAdd.UDPPort I


The Transmission Group
 (RFC 1284)

The dot3 Group

Note: dot3Index = ifIndex

dot3Index   1.3.6.1.2.1.10.7.1.1.1.dot3Index    I 
dot3InitializeMac   1.3.6.1.2.1.10.7.1.1.2.dot3Index    R
dot3MacSubLayerStatus   1.3.6.1.2.1.10.7.1.1.3.dot3index    R
dot3MulticastReceiveStatus  1.3.6.1.2.1.10.7.1.1.4.dot3Index    R
dot3TxEnabled   1.3.6.1.2.1.10.7.1.1.5.dot3Index    I
dot3TestTdrValue    1.3.6.1.2.1.10.7.1.1.6.dot3Index    Z


The dot3 Status Table

Note: dot3StatsIndex = ifIndex

dot3StatusIndex 1.3.6.1.2.1.10.7.2.1.1.dot3StatsIndex   I
dot3StatsAlignmentErrors
    1.3.6.1.2.1.10.7.2.1.2.dot3StatsIndex   I
dot3StatsFCSErrors  1.3.6.1.2.1.10.7.2.1.3.dot3StatsIndex   I
dot3StatsSingleCollisionFrames
    1.3.6.1.2.1.10.7.2.1.4.dot3StatsIndex   I
dot3StatsMultipleCollisionFrames
    1.3.6.1.2.1.10.7.2.1.5.dot3StatsIndex   Z
dot3StatsSQETestErrors  1.3.6.1.2.1.10.7.2.1.6.dot3StatsIndex   Z
dot3StatsDeferredTransmissions
    1.3.6.1.2.1.10.7.2.1.7.dot3StatsIndex   I
dot3StatsLateCollisions 1.3.6.1.2.1.10.7.2.1.8.dot3StatsIndex   I
dot3StatsExcessiveCollisions
    1.3.6.1.2.1.10.7.2.1.9.dot3StatsIndex   I
dot3StatsInternalMacTransmitError
    1.3.6.1.2.1.10.7.2.1.10.dot3StatsIndex  I
dot3StatsCarrierSenseErrors
    1.3.6.1.2.1.10.7.2.1.11.dot3StatsIndex  I
dot3StatsExcessiveDeferrals
    1.3.6.1.2.1.10.7.2.1.12.dot3StatsIndex  Z
dot3StatsFrameTooLongs
    1.3.6.1.2.1.10.7.2.1.13.dot3StatsIndex  I
dot3StatsInRangeLengthErrors
    1.3.6.1.2.1.10.7.2.1.14.dot3StatsIndex  P
dot3StatsOutOfRangeLengthField
    1.3.6.1.2.1.10.7.2.1.15.dot3StatsIndex  P
dot3StatsInternalMacReceiveErr
    1.3.6.1.2.1.10.7.2.1.16.dot3StatsIndex  I

The SNMP Group
 (RFC 1213)

snmpInPkts  1.3.6.1.2.1.11.1.0  I
snmpOutPkts 1.3.6.1.2.1.11.2.0  I
snmpInBadVersions   1.3.6.1.2.1.11.3.0  I
snmpInBadCommunityNames 1.3.6.1.2.1.11.4.0  I
snmpInBadCommunityUses  1.3.6.1.2.1.11.5.0  I
snmpInASNParseErrs  1.3.6.1.2.1.11.6.0  I
snmpInTooBigs   1.3.6.1.2.1.11.8.0  I
snmpInNoSuchNames   1.3.6.1.2.1.11.9.0  I
snmpInBadValues 1.3.6.1.2.1.11.10.0 I
snmpInReadOnlys 1.3.6.1.2.1.11.11.0 I
snmpInGenErrs   1.3.6.1.2.1.11.12.0 I
snmpInTotalReqVars  1.3.6.1.2.1.11.13.0 I
snmpInTotalSetVars  1.3.6.1.2.1.11.14.0 I
snmpInGetRequests   1.3.6.1.2.1.11.15.0 I
snmpInGetNexts  1.3.6.1.2.1.11.16.0 I
snmpInSetRequests   1.3.6.1.2.1.11.17.0 I
snmpInGetResponses  1.3.6.1.2.1.11.18.0 I
snmpInTraps 1.3.6.1.2.1.11.19.0 I
snmpOutTooBigs  1.3.6.1.2.1.11.20.0 I
snmpOutNoSuchNames  1.3.6.1.2.1.11.21.0 I
snmpOutBadValues    1.3.6.1.2.1.11.22.0 I
snmpOutGenErrs  1.3.6.1.2.1.11.24.0 I
snmpOutGetRequests  1.3.6.1.2.1.11.25.0     I
snmpOutGetNexts 1.3.6.1.2.1.11.26.0 I
snmpOutSetRequests  1.3.6.1.2.1.11.27.0 I
snmpOutGetResponses 1.3.6.1.2.1.11.28.0 I
snmpOutTraps    1.3.6.1.2.1.11.29.0 I
snmpEnableAuthTraps 1.3.6.1.2.1.11.30.0 R


The dot1d Bridge Group
(RFC 1286)

The dot1dBase Group

dot1dBaseBridgeAddress  1.3.6.1.2.1.17.1.1.0    I
dot1dBaseNumPorts   1.3.6.1.2.1.17.1.2.0    I
dot1dBaseType   1.3.6.1.2.1.17.1.3.0    I

The dot1bBasePort Table

Note: dot1dBasePort  = dot1dBasePort 

dot1dBasePort   1.3.6.1.2.1.17.1.4.1.1.dot1dBasePort    I
dot1dBasePortIfIndex    1.3.6.1.2.1.17.1.4.1.2.dot1dBasePor I
dot1dBasePortCircuit    1.3.6.1.2.1.17.1.4.1.3.dot1dBasePort    I
dot1dBasePortDelayExceededDisc
    1.3.6.1.2.1.17.1.4.1.4.dot1dBasePort    I
dot1dBasePortMtuExceededDiscards
    1.3.6.1.2.1.17.1.4.1.5.dot1dBasePort    I

The dot1dTp Group

dot1dTpLearnedEntryDiscards 1.3.6.1.2.1.17.4.1.0    I
dot1dTpAgingTime    1.3.6.1.2.1.17.4.2.0    R


The dot1dTpFdb Table
    
dot1dTpFdbAddress   1.3.6.1.2.1.17.4.3.1.1.dot1dTpFdbAddress    I*
dot1dTpFdbPort  1.3.6.1.2.1.17.4.3.1.2.dot1dTpFdbAddress    I*
dot1dTpFdbStatus    1.3.6.1.2.1.17.4.3.1.3.dot1dTfFdbAddress    I*

* snmp-next on dot1TpFdbTable is not fully compatible with the 
snmp-next operation as described in RFC. snmp-next on the 
dot1TpFdbTable returns objects in chronological order rather than 
lexigraphical order.  (This will be changed in a later version of the 
bridge)


The dot1dTpPort Table

Note:  dot1dTpPort = ifIndex

dot1dTpPort 1.3.6.1.2.1.17.4.4.1.1.dot1dTpPort  I
dot1dTpPortMaxInfo  1.3.6.1.2.1.17.4.4.1.2.dot1dTpPort  I
dot1dTpPortInFrames 1.3.6.1.2.1.17.4.4.1.3.dot1dTpPort  I
dot1dTpPortOutFrames    1.3.6.1.2.1.17.4.4.1.4.dot1dTpPort  I
dot1dTpPortInDiscards   1.3.6.1.2.1.17.4.4.1.5.dot1dTpPort  I


The dot1dStatic Table

Note 1: dot1dStaticReceivePort = ifIndex
Note 2: index = dot1dStaticAddress.dot1dStaticReceivePort

dot1dStaticAddress  1.3.6.1.2.1.17.5.1.1.index  N
dot1dStaticReceivePort  1.3.6.1.2.1.17.5.1.2.index  N
dot1dStaticAllowedToGoTo    1.3.6.1.2.1.17.5.1.3.index  N
dot1dStaticStatus   1.3.6.1.2.1.17.5.1.4.index  N
