Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

When provisioning a PKI for internal use, is there a private OID space that can be used without having to pay and/or register your own OID range? Think RFC1918 addresses for OID ranges.

share|improve this question
add comment

1 Answer

You can register a private enterprise and then an OID will be allocated for your use as you see fit. There is no fee.

It will be under iso.org.dod.internet.private.enterprise (1.3.6.1.4.1).

For example, my company can use: 1.3.6.1.4.1.17992 for any internal and published applications that we develop.

As voretaq7 points out, you need to internally organize and keep track of how you structure your information under your assigned node. But that's your problem. :)


Note that while the registration page says:

typically used in Simple Network Management Protocol Management Information Base configurations

that's only because SNMP is the most common usage. They are for general use.

share|improve this answer
5  
The structure of the OID tree under your enterprise is of course, your own problem. For example 1.3.6.1.4.1.###.1 might be custom SNMP monitoring OIDs, 1.3.6.1.4.1.###.2 might be custom LDAP attributes, 1.3.6.1.4.1.###.3 might be certificate policies, etc... -- Build something sensible, or at least have a top-level hierarchy of broad categories. –  voretaq7 Nov 7 '13 at 20:29
    
@MDMarra As far as I'm aware IANA (and the ASN.1 standard) imposes no formal restriction on how you use the OID space under your enterprise number. Custom SNMP MIBs are just the most common reason organizations request an OID (e.g. Cisco has a massive sprawling tree) and the place people are most accustomed to seeing OIDs turn up. The important thing is that you use your OID space & don't just grab a number otherwise you may find that your company's custom "Swap Space Used" OID is Cisco's "PSU 2 supply status" –  voretaq7 Nov 7 '13 at 21:04
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.