attributetype ( 1.3.6.1.1.1.9.20 NAME 'hit'
        DESC 'Endbox HIT'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64})

attributetype ( 1.3.6.1.1.1.9.21 NAME 'assetTag'
        DESC 'Endbox assetTag embeded in smartcard'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE)

attributetype ( 1.3.6.1.1.1.9.22 NAME 'hostName'
        DESC 'Endbox host name'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE)

attributetype ( 1.3.6.1.1.1.9.23 NAME 'lsi'
	DESC 'Endbox LSI'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE)

attributetype ( 1.3.6.1.1.1.9.24 NAME 'underlayIp'
	DESC 'IP Address of underlay network interface'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE)

attributetype ( 1.3.6.1.1.1.9.25 NAME 'legacyNodesIp'
	DESC 'IP address of one or more Legacy nodes associated with an endbox'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64})

attributetype ( 1.3.6.1.1.1.9.26 NAME 'cert'
        DESC 'certificate in PEM format'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{2000} SINGLE-VALUE)

attributetype ( 1.3.6.1.1.1.9.27 NAME 'host1'
        DESC 'one of a pair of nodes represented in hit or lsi'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64})

attributetype ( 1.3.6.1.1.1.9.28 NAME 'host2'
        DESC 'node hit or lsi'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64})

# Object Class Definitions

objectclass ( 1.3.6.1.1.1.8.0 NAME 'endbox'
	DESC 'endbox configuration data'
	SUP top STRUCTURAL
	MUST ( HIT)
	MAY ( underLayIp $ lsi $ legacyNodesIp $hostName $ accessTag $ cert $ description ) )

objectclass ( 1.3.6.1.1.1.8.1 NAME 'peerAllowed'
        DESC 'A pair of HIP nodes allowed to accecpt association with each other'
        SUP top STRUCTURAL
        MUST ( host1 $ host2 $ cn ))