T11-FC-SP-AUTHENTICATION-MIB
- Registered at
- 1.3.6.1.2.1.176
- Last updated
- 2008-08-20 00:00
- Organization
- This MIB module was developed through the coordinated effort of two organizations: T11 began the development and the IETF (in the IMSS Working Group) finished it.
- Revisions
- 2008-08-20 00:00
- Namespace
- standard
- Source file
T11-FC-SP-AUTHENTICATION-MIB- Digest
sha256:623afbe13b3aaee4f8d75bc361150ae5971018f1cfbbf3acb5e178c1f838b6b2
Description
This MIB module specifies the management information required to manage the Authentication Protocols defined by Fibre Channel's FC-SP specification. This MIB module defines three tables: - t11FcSpAuEntityTable is a table of Fibre Channel entities that can be authenticated using FC-SP's Authentication Protocols. - t11FcSpAuIfStatTable is a table with one row for each mapping of an Authentication entity onto an interface, containing statistics information. - t11FcSpAuRejectTable is a table of volatile information about FC-SP Authentication Protocol transactions that were most recently rejected. Copyright (C) The IETF Trust (2008). This version of this MIB module is part of RFC 5324; see the RFC itself for full legal notices.
Contact
Claudio DeSanti Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134 USA EMail: cds@cisco.com Keith McCloghrie Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134 USA Email: kzm@cisco.com
Imports
| From | Symbols |
|---|---|
| FC-MGMT-MIB | FcNameIdOrZero, fcmInstanceIndex |
| IF-MIB | InterfaceIndex |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Counter32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso, mib-2 |
| SNMPv2-TC | AutonomousType, DisplayString, StorageType, TEXTUAL-CONVENTION, TimeStamp, TruthValue |
| T11-FC-FABRIC-ADDR-MGR-MIB | t11FamLocalSwitchWwn |
| T11-FC-SP-TC-MIB | T11FcSpAuthRejReasonCodeExp, T11FcSpAuthRejectReasonCode, T11FcSpDhGroups, T11FcSpHashFunctions, T11FcSpLifetimeLeft, T11FcSpLifetimeLeftUnits, T11FcSpSignFunctions |
| T11-TC-MIB | T11FabricIndex |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
FC-MGMT-MIB IANAifType-MIB IF-MIB SNMP-FRAMEWORK-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC T11-FC-FABRIC-ADDR-MGR-MIB T11-FC-SP-AUTHENTICATION-MIB T11-FC-SP-TC-MIB T11-TC-MIB
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| t11FcSpAuMIBNotifications OBJECT-IDENTITY | 1.3.6.1.2.1.176.0 | |||
| t11FcSpAuMIBObjects OBJECT-IDENTITY | 1.3.6.1.2.1.176.1 | |||
| t11FcSpAuEntityTable OBJECT-TYPE A table of Fibre Channel entities that can be authenticated using FC-SP's Authentication Protocols. The purpose of an FC-SP Authentication Protocol is to verify that a claimed name is associated with the claiming entity. The Authentication Protocols can be used to authenticate Nx_Ports, B_Ports, or Switches. | 1.3.6.1.2.1.176.1.1 | not-accessible | current | |
| t11FcSpAuEntityEntry OBJECT-TYPE Information about the configuration and capabilities of an FC-SP entity (which is managed within the Fibre Channel management instance identified by fcmInstanceIndex) on a particular Fabric with respect to FC-SP's Authentication Protocols. | 1.3.6.1.2.1.176.1.1.1 | not-accessible | current | |
| t11FcSpAuEntityName OBJECT-TYPE The name used to identify the FC-SP entity. For entities that are Fibre Channel Switches, this value corresponds to the Switch's value of fcmSwitchWWN. For entities other than Fibre Channel Switches, this value corresponds to the value of fcmInstanceWwn for the corresponding Fibre Channel management instance. | 1.3.6.1.2.1.176.1.1.1.1 | FcNameIdOrZero (SIZE(8)) | not-accessible | current |
| t11FcSpAuFabricIndex OBJECT-TYPE An index value that uniquely identifies a particular Fabric to which the entity is attached. | 1.3.6.1.2.1.176.1.1.1.2 | T11FabricIndex | not-accessible | current |
| t11FcSpAuServerProtocol OBJECT-TYPE The protocol, if any, used by the entity to communicate with a third party (i.e., an External Server) as part of the process by which it verifies DH-CHAP responses. For example, if the entity is using an external RADIUS server to verify DH-CHAP responses, then this object will have the value t11FcSpAuServerProtocolRadius. The value, zeroDotZero, is used to indicate that no protocol is being used to communicate with a third party to verify DH-CHAP responses. When no protocol is being used, or if the third party is unreachable via the specified protocol, then locally configured information (if any) may be used instead. | 1.3.6.1.2.1.176.1.1.1.3 | AutonomousType | read-only | current |
| t11FcSpAuStorageType OBJECT-TYPE This object specifies the memory realization of configuration information related to an FC-SP Entity on a particular Fabric: specifically, for MIB objects in the row containing this object. Even if an instance of this object has the value 'permanent(4)', none of the information in the corresponding row of this table needs to be writable. | 1.3.6.1.2.1.176.1.1.1.4 | StorageType | read-write | current |
| t11FcSpAuSendRejNotifyEnable OBJECT-TYPE An indication of whether or not the entity should issue t11FcSpAuRejectSentNotify notifications when sending AUTH_Reject/SW_RJT/LS_RJT to reject an AUTH message. If the value of the object is 'true', then this type of notification is generated. If the value is 'false', this type of notification is not generated. | 1.3.6.1.2.1.176.1.1.1.5 | TruthValue | read-write | current |
| t11FcSpAuRcvRejNotifyEnable OBJECT-TYPE An indication of whether or not the entity should issue t11FcSpAuRejectReceivedNotify notifications on the receipt of AUTH_Reject/SW_RJT/LS_RJT messages. If the value of the object is 'true', then this type of notification is generated. If the value is 'false', this type of notification is not generated. | 1.3.6.1.2.1.176.1.1.1.6 | TruthValue | read-write | current |
| t11FcSpAuDefaultLifetime OBJECT-TYPE When the value of this object is non-zero, it specifies the default value of a lifetime, specified in units given by the corresponding instance of t11FcSpAuDefaultLifetimeUnits. This default lifetime is to be used for any Security Association that has no explicitly specified value for its lifetime. An SA's lifetime is either the time interval or the number of passed bytes, after which the SA has to be terminated and (if necessary) replaced with a new SA. If this object is zero, then there is no default value for lifetime. | 1.3.6.1.2.1.176.1.1.1.7 | T11FcSpLifetimeLeft | read-write | current |
| t11FcSpAuDefaultLifetimeUnits OBJECT-TYPE The units in which the value of the corresponding instance of t11FcSpAuDefaultLifetime specifies a default lifetime for a Security Association that has no explicitly-specified value for its lifetime. | 1.3.6.1.2.1.176.1.1.1.8 | T11FcSpLifetimeLeftUnits | read-write | current |
| t11FcSpAuRejectMaxRows OBJECT-TYPE The maximum number of rows in the t11FcSpAuRejectTable for this entity on this Fabric. If and when an AUTH message is rejected, and the t11FcSpAuRejectTable already contains this maximum number of rows for the specific entity and Fabric, the row containing the oldest information is discarded and replaced by a row containing information about the new rejection. There will be less than this maximum number of rows in the t11FcSpAuRejectTable in exceptional circumstances, e.g., after an agent restart. In an implementation that does not support the t11FcSpAuRejectTable, this object will always be zero. | 1.3.6.1.2.1.176.1.1.1.9 | Unsigned32 (0..1000) | read-write | current |
| t11FcSpAuDhChapHashFunctions OBJECT-TYPE The hash functions that the entity supports when using the DH-CHAP algorithm. | 1.3.6.1.2.1.176.1.1.1.10 | T11FcSpHashFunctions | read-only | current |
| t11FcSpAuDhChapDhGroups OBJECT-TYPE The DH Groups that the entity supports when using the DH-CHAP algorithm in FC-SP. | 1.3.6.1.2.1.176.1.1.1.11 | T11FcSpDhGroups | read-only | current |
| t11FcSpAuFcapHashFunctions OBJECT-TYPE The hash functions that the entity supports when specified as Protocol Parameters in the AUTH_Negotiate message for FCAP in FC-SP. | 1.3.6.1.2.1.176.1.1.1.12 | T11FcSpHashFunctions | read-only | current |
| t11FcSpAuFcapCertsSignFunctions OBJECT-TYPE The signature functions used within certificates that the entity supports when using FCAP in FC-SP. | 1.3.6.1.2.1.176.1.1.1.13 | T11FcSpSignFunctions | read-only | current |
| t11FcSpAuFcapDhGroups OBJECT-TYPE The DH Groups that the entity supports when using the FCAP algorithm in FC-SP. | 1.3.6.1.2.1.176.1.1.1.14 | T11FcSpDhGroups | read-only | current |
| t11FcSpAuFcpapHashFunctions OBJECT-TYPE The hash functions that the entity supports when using the FCPAP algorithm in FC-SP. | 1.3.6.1.2.1.176.1.1.1.15 | T11FcSpHashFunctions | read-only | current |
| t11FcSpAuFcpapDhGroups OBJECT-TYPE The DH Groups that the entity supports when using the FCPAP algorithm in FC-SP. | 1.3.6.1.2.1.176.1.1.1.16 | T11FcSpDhGroups | read-only | current |
| t11FcSpAuIfStatTable OBJECT-TYPE Each FC-SP Authentication entity can operate on one or more interfaces, but at most one of them can operate on each interface. A row in this table exists for each interface to each Fabric on which each Authentication entity operates. The objects within this table contain statistics information related to FC-SP's Authentication Protocols. | 1.3.6.1.2.1.176.1.2 | not-accessible | current | |
| t11FcSpAuIfStatEntry OBJECT-TYPE A set of Authentication Protocols statistics for an FC-SP Authentication entity (identified by t11FcSpAuEntityName) on one of its interfaces to a particular Fabric, which is managed within the Fibre Channel management instance identified by fcmInstanceIndex. | 1.3.6.1.2.1.176.1.2.1 | not-accessible | current | |
| t11FcSpAuIfStatInterfaceIndex OBJECT-TYPE The interface on which the FC-SP Authentication entity operates and for which the statistics are collected. | 1.3.6.1.2.1.176.1.2.1.1 | InterfaceIndex | not-accessible | current |
| t11FcSpAuIfStatFabricIndex OBJECT-TYPE An index value identifying the particular Fabric for which the statistics are collected. | 1.3.6.1.2.1.176.1.2.1.2 | T11FabricIndex | not-accessible | current |
| t11FcSpAuIfStatTimeouts OBJECT-TYPE The number of FC-SP Authentication Protocol messages sent by the particular entity on the particular Fabric on the particular interface, for which no response was received within a timeout period. This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0. | 1.3.6.1.2.1.176.1.2.1.3 | Counter32 | read-only | current |
| t11FcSpAuIfStatInAcceptedMsgs OBJECT-TYPE The number of FC-SP Authentication Protocol messages received and accepted by the particular entity on the particular Fabric on the particular interface. This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0. | 1.3.6.1.2.1.176.1.2.1.4 | Counter32 | read-only | current |
| t11FcSpAuIfStatInLsSwRejectedMsgs OBJECT-TYPE The number of FC-SP Authentication Protocol messages received by the particular entity on the particular Fabric on the particular interface, and rejected by a lower-level (SW_RJT or LS_RJT) reject. This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0. | 1.3.6.1.2.1.176.1.2.1.5 | Counter32 | read-only | current |
| t11FcSpAuIfStatInAuthRejectedMsgs OBJECT-TYPE The number of FC-SP Authentication Protocol messages received by the particular entity on the particular Fabric on the particular interface, and rejected by an AUTH_Reject message. This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0. | 1.3.6.1.2.1.176.1.2.1.6 | Counter32 | read-only | current |
| t11FcSpAuIfStatOutAcceptedMsgs OBJECT-TYPE The number of FC-SP Authentication Protocol messages sent by the particular entity on the particular Fabric on the particular interface, which were accepted by the neighboring entity, i.e., not rejected by an AUTH_Reject message, nor by a lower-level (SW_RJT or LS_RJT) reject. This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0. | 1.3.6.1.2.1.176.1.2.1.7 | Counter32 | read-only | current |
| t11FcSpAuIfStatOutLsSwRejectedMsgs OBJECT-TYPE The number of FC-SP Authentication Protocol messages sent by the particular entity on the particular Fabric on the particular interface, which were rejected by a lower-level (SW_RJT or LS_RJT) reject. This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0. | 1.3.6.1.2.1.176.1.2.1.8 | Counter32 | read-only | current |
| t11FcSpAuIfStatOutAuthRejectedMsgs OBJECT-TYPE The number of FC-SP Authentication Protocol messages sent by the particular entity on the particular Fabric on the particular interface, which were rejected by an AUTH_Reject message. This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0. | 1.3.6.1.2.1.176.1.2.1.9 | Counter32 | read-only | current |
| t11FcSpAuRejectTable OBJECT-TYPE A table of volatile information about FC-SP Authentication Protocol transactions that were recently rejected with an AUTH_Reject message, or with an SW_RJT/LS_RJT. The maximum number of rows in this table for a specific entity on a specific Fabric is given by the value of the corresponding instance of t11FcSpAuRejectMaxRows. The syntax of t11FcSpAuRejTimestamp is TimeStamp, and thus its value rolls over to zero after approximately 497 days. To avoid any confusion due to such a rollover, rows should be deleted from this table before they are 497 days old. This table will be empty if no AUTH_Reject messages, nor any SW_RJT/LS_RJT's rejecting an AUTH message, have been sent or received since the last re-initialization of the agent. | 1.3.6.1.2.1.176.1.3 | not-accessible | current | |
| t11FcSpAuRejectEntry OBJECT-TYPE Information about one AUTH message (either an AUTH_ELS or an AUTH_ILS) that was rejected with an AUTH_Reject, SW_RJT or LS_RJT message, sent/received by the entity identified by values of fcmInstanceIndex and t11FcSpAuEntityName, on an interface to a particular Fabric. | 1.3.6.1.2.1.176.1.3.1 | not-accessible | current | |
| t11FcSpAuRejInterfaceIndex OBJECT-TYPE The interface on which the rejected AUTH message was sent or received. | 1.3.6.1.2.1.176.1.3.1.1 | InterfaceIndex | not-accessible | current |
| t11FcSpAuRejFabricIndex OBJECT-TYPE An index value identifying the particular Fabric on which the rejected AUTH message was sent or received. | 1.3.6.1.2.1.176.1.3.1.2 | T11FabricIndex | not-accessible | current |
| t11FcSpAuRejTimestamp OBJECT-TYPE The time at which the AUTH message was rejected. If two rows have the same value of this object for the same entity on the same interface and Fabric, the value of this object for the later one is incremented by one. | 1.3.6.1.2.1.176.1.3.1.3 | TimeStamp | not-accessible | current |
| t11FcSpAuRejDirection OBJECT-TYPE An indication of whether the rejection was sent or received by the identified entity. The value 'sent(1)' corresponds to a notification of type t11FcSpAuRejectSentNotify; the value 'received(2)' corresponds to t11FcSpAuRejectReceivedNotify. | 1.3.6.1.2.1.176.1.3.1.4 | INTEGER {sent(1), received(2)} | read-only | current |
| t11FcSpAuRejType OBJECT-TYPE An indication of whether the rejection was an AUTH_Reject, an SW_RJT or an LS_RJT. | 1.3.6.1.2.1.176.1.3.1.5 | INTEGER {authReject(1), swRjt(2), lsRjt(3)} | read-only | current |
| t11FcSpAuRejAuthMsgString OBJECT-TYPE The binary content of the AUTH message that was rejected, formatted as an octet string (in network byte order) containing the content of the message. If the binary content is unavailable, then the length is zero. Otherwise, the first octet of the message identifies the type of message: '90'h - an AUTH_ELS, see Table 6 in FC-SP, '40'h - an AUTH_ILS, see Table 3 in FC-SP, or '41'h - an B_AUTH_ILS, see Table 5 in FC-SP. and the remainder of the message may be truncated. | 1.3.6.1.2.1.176.1.3.1.6 | OCTET STRING (SIZE(0..255)) | read-only | current |
| t11FcSpAuRejReasonCode OBJECT-TYPE The reason code with which this AUTH message was rejected. | 1.3.6.1.2.1.176.1.3.1.7 | T11FcSpAuthRejectReasonCode | read-only | current |
| t11FcSpAuRejReasonCodeExp OBJECT-TYPE The reason code explanation with which this AUTH message was rejected. | 1.3.6.1.2.1.176.1.3.1.8 | T11FcSpAuthRejReasonCodeExp | read-only | current |
| t11FcSpAuMIBConformance OBJECT-IDENTITY | 1.3.6.1.2.1.176.2 | |||
| t11FcSpAuMIBCompliances OBJECT-IDENTITY | 1.3.6.1.2.1.176.2.1 | |||
| t11FcSpAuMIBGroups OBJECT-IDENTITY | 1.3.6.1.2.1.176.2.2 | |||
| t11FcSpAuMIBIdentities OBJECT-IDENTITY | 1.3.6.1.2.1.176.3 | |||
| t11FcSpAuServerProtocolRadius OBJECT-IDENTITY This OID identifies RADIUS as the protocol used to communicate with an External Server as part of the process by which identities are verified. In this case, information about the RADIUS Servers is likely to be provided in radiusAuthServerExtTable defined in the RADIUS-AUTH-CLIENT-MIB. | 1.3.6.1.2.1.176.3.1 | current | ||
| t11FcSpAuServerProtocolDiameter OBJECT-IDENTITY This OID identifies Diameter as the protocol used to communicate with an External Server as part of the process by which identities are verified. | 1.3.6.1.2.1.176.3.2 | current | ||
| t11FcSpAuServerProtocolTacacs OBJECT-IDENTITY This OID identifies TACACS as the protocol used to communicate with an External Server as part of the process by which identities are verified. | 1.3.6.1.2.1.176.3.3 | current |
Notifications
| Name | OID | Status |
|---|---|---|
| t11FcSpAuRejectSentNotify NOTIFICATION-TYPE This notification indicates that a Switch (identified by the value of t11FamLocalSwitchWwn) has sent a reject message of the type indicated by t11FcSpAuRejType in response to an AUTH message. The content of the rejected AUTH message is given by the value of t11FcSpAuRejAuthMsgString. The values of the Reason Code and Reason Code Explanation in the AUTH_Reject/SW_RJT/LS_RJT are indicated by the values of t11FcSpAuRejReasonCode and t11FcSpAuRejReasonCodeExp. | 1.3.6.1.2.1.176.0.1 | current |
| t11FcSpAuRejectReceivedNotify NOTIFICATION-TYPE This notification indicates that a Switch (identified by the value of t11FamLocalSwitchWwn) has received a reject message of the type indicated by t11FcSpAuRejType in response to an AUTH message. The content of the rejected AUTH message is given by the value of t11FcSpAuRejAuthMsgString. The values of the Reason Code and Reason Code Explanation in the AUTH_Reject/SW_RJT/LS_RJT are indicated by the values of t11FcSpAuRejReasonCode and t11FcSpAuRejReasonCodeExp. | 1.3.6.1.2.1.176.0.2 | current |
Conformance
| Name | OID | Status |
|---|---|---|
| t11FcSpAuMIBCompliance MODULE-COMPLIANCE The compliance statement for entities that implement one or more of the Authentication Protocols defined in FC-SP. | 1.3.6.1.2.1.176.2.1.1 | current |
| t11FcSpAuGeneralGroup OBJECT-GROUP A collection of objects for the capabilities and configuration parameters of FC-SP's Authentication Protocols. The inclusion of t11FcSpAuIfStatTimeouts in this group provides information on mappings of Authentication entities onto interfaces. | 1.3.6.1.2.1.176.2.2.1 | current |
| t11FcSpAuIfStatsGroup OBJECT-GROUP A collection of objects for monitoring the operations of FC-SP's Authentication Protocols. | 1.3.6.1.2.1.176.2.2.2 | current |
| t11FcSpAuRejectedGroup OBJECT-GROUP A collection of objects holding information concerning FC-SP Authentication Protocol transactions that were recently rejected with an AUTH_Reject, with an SW_RJT, or with an LS_RJT. | 1.3.6.1.2.1.176.2.2.3 | current |
| t11FcSpAuNotificationGroup NOTIFICATION-GROUP A collection of notifications for use in the management of FC-SP's Authentication Protocols. | 1.3.6.1.2.1.176.2.2.4 | current |