All MIBs › CISCO-PSM-MIB
Organization: Cisco Systems Inc.
Last Updated: 2004-10-15
Category: Cisco Devices, VPN and Security
Description: Manages Port Security Manager policies controlling port-level access based on MAC and IP addresses.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCO-PSM-MIB?
CISCO-PSM-MIB manages the Port Security Manager (PSM) on Cisco Fibre Channel/SAN switching platforms, covering both port binding (securing individual switch ports) and fabric binding (securing the SAN fabric as a whole) based on device identity. It exposes port-binding configuration data including network type/index, the bound login device and login point, and activation/row-status controls. Its monitoring value is centered on access-security configuration status: verifying that a given switch port is bound to the expected device (cpsmPortBindLoginDev) and login point, and that bindings are active (cpsmPortBindRowStatus), helps detect unauthorized device attachment attempts or misconfigured security bindings. It is Cisco-proprietary and specific to Cisco's SAN/Fibre Channel port and fabric security architecture. It is deployed on Cisco MDS SAN switches where fabric-wide device authentication and port-level security are required. Engineers can download the CISCO-PSM-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-PSM-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco MDS SAN switch (Fibre Channel Port Security Manager)
Monitoring Examples
A SAN administrator would poll cpsmPortBindTable (cpsmPortBindLoginDevType, cpsmPortBindLoginDev, cpsmPortBindLoginPointType, cpsmPortBindLoginPoint) to confirm a port is bound only to its authorized device and login point. cpsmPortBindRowStatus reveals whether a binding entry is active, and an unexpected notInService state could indicate a security policy that failed to apply. The cpsmPortBindActivateTable lets an admin verify that pending port-binding changes have actually been activated on the switch, which would explain a device unexpectedly being allowed or denied fabric access.
What Can Be Monitored
- port binding to authorized device
- login point binding status
- port bind row status
- port bind activation status
This MIB depends on
Related MIBs
Imported Objects
From CISCO-SMI
| ciscoMgmt | OBJECT-IDENTITY |
From CISCO-ST-TC
| DomainId | |
| DomainIdOrZero | |
| FcNameId | |
| FcNameIdOrZero | |
| PortMemberList |
From CISCO-VSAN-MIB
| vsanIndex | OBJECT-TYPE |
From IF-MIB
| InterfaceIndex | |
| InterfaceIndexOrZero |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TimeStamp | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using cpsmPortBindLoginCount OID:
Select a Cisco MDS SAN switch (Fibre Channel Port Security Manager) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cpsmPortBindLoginCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of times this particular pWWN/nWWN or sWWN has been denied login on this particular local interface. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ciscoPsmEfmdConfigGroup | 1.3.6.1.4.1.9.9.364.2.2.15 | A collection of objects for configuring and displaying EFMD information. | ||
| ciscoPsmEfmdStatsGroup | 1.3.6.1.4.1.9.9.364.2.2.16 | A collection of objects for displaying EFMD statistics information. | ||
| ciscoPsmFabricBindAutoLearnGroup | 1.3.6.1.4.1.9.9.364.2.2.10 | A collection of object(s) for enabling/disabling auto learn of fabric bindings. | ||
| ciscoPsmFabricBindConfigGroup | 1.3.6.1.4.1.9.9.364.2.2.2 | A collection of objects for displaying and configuring fabric bindings and activating them. | ||
| ciscoPsmFabricBindConfigGroup1 | 1.3.6.1.4.1.9.9.364.2.2.12 | A collection of objects for displaying and configuring fabric bindings and activating them. | ||
| ciscoPsmFabricBindConfigGroup2 | 1.3.6.1.4.1.9.9.364.2.2.20 | A collection of objects for displaying and configuring fabric bindings and activating them. | ||
| NTF ciscoPsmFabricBindDenyNotify | 1.3.6.1.4.1.9.9.364.0.3 | This notification is generated whenever a device is not allowed to join the fabric due to enforced fabric bindings on the local device. | ||
| NTF ciscoPsmFabricBindDenyNotifyNew | 1.3.6.1.4.1.9.9.364.0.4 | This notification is generated whenever a device is not allowed to join the fabric due to enforced fabric bindings on the local device. | ||
| ciscoPsmFabricBindEnforcedGroup | 1.3.6.1.4.1.9.9.364.2.2.4 | A collection of objects for displaying enforced fabric bindings. | ||
| ciscoPsmFabricBindNotifyGroup | 1.3.6.1.4.1.9.9.364.2.2.8 | A collection of notification(s) for monitoring denial of request to join the fabric due to fabric bindings being enforced. | ||
| ciscoPsmFabricBindNotifyGroupR1 | 1.3.6.1.4.1.9.9.364.2.2.14 | A collection of notification(s) for monitoring denial of request to join the fabric due to fabric bindings being enforced. | ||
| ciscoPsmFabricBindStatsGroup | 1.3.6.1.4.1.9.9.364.2.2.6 | A collection of objects for displaying Fabric binding statistics and violation information. | ||
| ciscoPsmFabricBindStatsGroup1 | 1.3.6.1.4.1.9.9.364.2.2.13 | A collection of objects for displaying Fabric binding statistics and violation information. | ||
| ciscoPsmFabricBindStatsGroup2 | 1.3.6.1.4.1.9.9.364.2.2.17 | A collection of objects for displaying Fabric binding statistics and violation information. | ||
| ciscoPsmFabricBindStatsGroup3 | 1.3.6.1.4.1.9.9.364.2.2.18 | A collection of objects for displaying Fabric binding statistics and violation information. | ||
| ciscoPsmMIB | 1.3.6.1.4.1.9.9.364 | The MIB module for the management of the Port Security Manager (PSM). The PSM consists of 2 aspects: Port binding and Fabric binding. Port binding is concerned with the security of switch ports and Fabric binding with the security of the SAN fabric as a whole. | ||
| ciscoPsmMIBCompliance | 1.3.6.1.4.1.9.9.364.2.1.1 | The compliance statement for entities which implement the Port Security Manager. | ||
| ciscoPsmMIBComplianceRev1 | 1.3.6.1.4.1.9.9.364.2.1.2 | The compliance statement for entities which implement the Port Security Manager. | ||
| ciscoPsmMIBComplianceRev2 | 1.3.6.1.4.1.9.9.364.2.1.3 | The compliance statement for entities which implement the Port Security Manager. | ||
| ciscoPsmMIBComplianceRev3 | 1.3.6.1.4.1.9.9.364.2.1.4 | The compliance statement for entities which implement the Port Security Manager. | ||
| ciscoPsmMIBComplianceRev4 | 1.3.6.1.4.1.9.9.364.2.1.5 | The compliance statement for entities which implement the Port Security Manager. | ||
| ciscoPsmMIBComplianceRev5 | 1.3.6.1.4.1.9.9.364.2.1.6 | The compliance statement for entities which implement the Port Security Manager. | ||
| ciscoPsmMIBCompliances | 1.3.6.1.4.1.9.9.364.2.1 | |||
| ciscoPsmMIBConform | 1.3.6.1.4.1.9.9.364.2 | |||
| ciscoPsmMIBGroups | 1.3.6.1.4.1.9.9.364.2.2 | |||
| ciscoPsmMIBNotifs | 1.3.6.1.4.1.9.9.364.0 | |||
| ciscoPsmMIBObjects | 1.3.6.1.4.1.9.9.364.1 | |||
| ciscoPsmNotifyEnableGroup | 1.3.6.1.4.1.9.9.364.2.2.11 | A collection of object(s) for enabling/disabling port binding/fabric binding notifications. | ||
| ciscoPsmPortBindAutoLearnGroup | 1.3.6.1.4.1.9.9.364.2.2.9 | A collection of object(s) for enabling/disabling auto learn of port bindings. | ||
| ciscoPsmPortBindConfigGroup | 1.3.6.1.4.1.9.9.364.2.2.1 | A collection of objects for displaying and configuring port bindings and activating them. | ||
| ciscoPsmPortBindConfigGroup1 | 1.3.6.1.4.1.9.9.364.2.2.19 | A collection of objects for displaying and configuring port bindings and activating them. | ||
| ciscoPsmPortBindEnforcedGroup | 1.3.6.1.4.1.9.9.364.2.2.3 | A collection of objects for displaying enforced port bindings. | ||
| NTF ciscoPsmPortBindEPortDenyNotify | 1.3.6.1.4.1.9.9.364.0.2 | This notification is generated whenever a switch is denied due to enforced port bindings on the local device on a E port. | ||
| NTF ciscoPsmPortBindFPortDenyNotify | 1.3.6.1.4.1.9.9.364.0.1 | This notification is generated whenever a FLOGI is denied due to enforced port bindings on the local device on a F/FL port. | ||
| ciscoPsmPortBindNotifyGroup | 1.3.6.1.4.1.9.9.364.2.2.7 | A collection of notification(s) for monitoring denial of FLOGI due to port bindings being enforced. | ||
| ciscoPsmPortBindStatsGroup | 1.3.6.1.4.1.9.9.364.2.2.5 | A collection of objects for displaying Port binding statistics and violation information. | ||
| cpsmConfiguration | 1.3.6.1.4.1.9.9.364.1.1 | |||
| T/F cpsmEfmdConfigEnforce | 1.3.6.1.4.1.9.9.364.1.1.18.1.1 | TruthValue | read-write | This object specifies whether the EFMD enforcement policy is strict or loose on this VSAN. If this object is set to 'true', then the enforcement policy is strict. As a result, if a device that tries to join the fabric thru' an E port on the local device does not pass the authorization check, it is not allowed access and the E port is isolated. If this object is set to 'false', then the enforcement policy is loose. As a result, if a device that tries to join the fabric thru' an E port on the local device does not pass the authorization check, it can still be allowed access. |
| cpsmEfmdConfigEntry | 1.3.6.1.4.1.9.9.364.1.1.18.1 | not-accessible | An entry (conceptual row) in this table. | |
| cpsmEfmdConfigTable | 1.3.6.1.4.1.9.9.364.1.1.18 | not-accessible | This table allows configuring EFMD on the local device. The configuration is on a per VSAN basis. | |
| C32 cpsmEfmdRxMergeAccs | 1.3.6.1.4.1.9.9.364.1.2.6.1.4 | Counter32 | read-only | The number of EFMD Merge Accepts received on this VSAN by the local device. |
| C32 cpsmEfmdRxMergeBusys | 1.3.6.1.4.1.9.9.364.1.2.6.1.8 | Counter32 | read-only | The number of EFMD Merge Busys received on this VSAN by the local device. |
| C32 cpsmEfmdRxMergeErrs | 1.3.6.1.4.1.9.9.364.1.2.6.1.10 | Counter32 | read-only | The number of EFMD Merge Errors received on this VSAN by the local device. |
| C32 cpsmEfmdRxMergeRejs | 1.3.6.1.4.1.9.9.364.1.2.6.1.6 | Counter32 | read-only | The number of EFMD Merge Rejects received on this VSAN by the local device. |
| C32 cpsmEfmdRxMergeReqs | 1.3.6.1.4.1.9.9.364.1.2.6.1.2 | Counter32 | read-only | The number of EFMD Merge Requests received on this VSAN by the local device. |
| cpsmEfmdStatsEntry | 1.3.6.1.4.1.9.9.364.1.2.6.1 | not-accessible | An entry (conceptual row) in this table. | |
| cpsmEfmdStatsTable | 1.3.6.1.4.1.9.9.364.1.2.6 | not-accessible | This table contains the EFMD protocol statistics on a per VSAN basis. | |
| C32 cpsmEfmdTxMergeAccs | 1.3.6.1.4.1.9.9.364.1.2.6.1.3 | Counter32 | read-only | The number of EFMD Merge Accepts transmitted on this VSAN by the local device. |
| C32 cpsmEfmdTxMergeBusys | 1.3.6.1.4.1.9.9.364.1.2.6.1.7 | Counter32 | read-only | The number of EFMD Merge Busys transmitted on this VSAN by the local device. |
| C32 cpsmEfmdTxMergeErrs | 1.3.6.1.4.1.9.9.364.1.2.6.1.9 | Counter32 | read-only | The number of EFMD Merge Errors transmitted on this VSAN by the local device. |
| C32 cpsmEfmdTxMergeRejs | 1.3.6.1.4.1.9.9.364.1.2.6.1.5 | Counter32 | read-only | The number of EFMD Merge Rejects transmitted on this VSAN by the local device. |
| C32 cpsmEfmdTxMergeReqs | 1.3.6.1.4.1.9.9.364.1.2.6.1.1 | Counter32 | read-only | The number of EFMD Merge Requests transmitted on this VSAN by the local device. |
| CPS cpsmFabricBindActivate | 1.3.6.1.4.1.9.9.364.1.1.4.1.1 | CpsmDbActivate | read-write | Setting this object to 'activate(1)', will result in the valid fabric bindings on this VSAN/VLAN being activated and the set of fabric bindings that have been activated will be copied to the cpsmFabricBindEnfTable. Setting this object to 'activateWithAutoLearnOff(2)', will result in the valid fabric bindings on this VSAN/VLAN being activated and copied to the cpsmFabricBindEnfTable and will also result in auto learn being turned off on this VSAN/VLAN, once the activation is complete. By default, auto learn will be turned 'on' on a VSAN/VLAN after activation. Before activation is attempted, auto-learn should be off. Setting this object to 'forceActivate(3)', will result in forced activation, even if there are errors during activation and the activated fabric bindings will be copied to the cpsmFabricBindEnfTable. Setting this object to 'forceActivateWithAutoLearnOff(4)', will result in forced activation along with turning auto learn off after activation and the activated fabric bindings will be copied to the cpsmFabricBindEnfTable. Setting this object to 'deactivate(5)', will result in deactivation of currently activated fabric bindings (if any), on this VSAN/VLAN. Currently active entries (if any), which would have been present in the cpsmFabricBindEnfTable, will be removed. Setting this object to 'noop(6), results in no action. The value of this object when read is always 'noop(6)'. |
| cpsmFabricBindActivateEntry | 1.3.6.1.4.1.9.9.364.1.1.4.1 | not-accessible | An entry (conceptual row) in this table. The recommended mechanism for activation is as follows: - copy the enforced fabric bindings to the configuration fabric binding (cpsmFabricBindTable) by means of the cpsmFabricBindCopyTable. - activate the configuration fabric binding using this table. | |
| cpsmFabricBindActivateTable | 1.3.6.1.4.1.9.9.364.1.1.4 | not-accessible | This table contains atmost one entry per VSAN/VLAN that is configured. These entries reflect the state of activation/deactivation of the valid fabric bindings on the corresponding VSAN/VLAN. Entries can get into this table or be deleted from this table only by means of explicit activation/deactivation. | |
| T/F cpsmFabricBindActState | 1.3.6.1.4.1.9.9.364.1.1.4.1.4 | TruthValue | read-only | The state of activation on this VSAN/VLAN. If the value of this object is 'true', then an activation has been attempted as the most recent operation on this VSAN/VLAN. If the value of this object is 'false', then an activation has not been attempted as the most recent operation on this VSAN/VLAN. |
| NUM cpsmFabricBindAllowedReqs | 1.3.6.1.4.1.9.9.364.1.2.2.1.3 | CpsmStatsCounter | read-only | The number of requests from switches to become part of the fabric that have been allowed on this VSAN/VLAN. |
| CPS cpsmFabricBindAutoLearnEnable | 1.3.6.1.4.1.9.9.364.1.1.10.1.3 | CpsmAutoLearnEnable | read-write | This object helps to 'learn' the valid fabric binding configuration of devices logged into the fabric thru' the ports on the local device and populate the above enforced fabric binding table (cpsmFabricBindEnfTable) with the same. This mechanism of 'learning' the configuration of devices logged into the fabric over a period of time and populating the enforced fabric binding table is a convenience mechanism for users. If this object is set to 'on(1)' on a particular VSAN/VLAN, all subsequent attempts to join the fabric on some port on the local device on that VSAN/VLAN will be populated in the enforced fabric binding database, provided it is not in conflict with existing enforced fabric bindings on that VSAN/VLAN. When this object is set to 'off(2)', the mechanism of learning is stopped. The learned entries however will be in the enforced fabric binding database. |
| cpsmFabricBindAutoLearnEntry | 1.3.6.1.4.1.9.9.364.1.1.10.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmFabricBindAutoLearnIndex | 1.3.6.1.4.1.9.9.364.1.1.10.1.2 | Unsigned32 | not-accessible | The id of the VSAN/VLAN for which auto learning is being enabled. |
| CPS cpsmFabricBindAutoLearnIndexType | 1.3.6.1.4.1.9.9.364.1.1.10.1.1 | CpsmVirtNwType | not-accessible | This object indicates the type of virtual interface. |
| cpsmFabricBindAutoLearnTable | 1.3.6.1.4.1.9.9.364.1.1.10 | not-accessible | This table contains information on the auto learn policy for valid fabric bindings on all VSANs/VLANs on the local device. | |
| CPS cpsmFabricBindClearAutoLearnDb | 1.3.6.1.4.1.9.9.364.1.1.12.1.4 | CpsmClearAutoLearnDb | read-write | This object when set to 'clearOnVsan(1)', results in fabric bind auto-learnt entries being cleared on this VSAN/VLAN. No action is taken if this object is set to 'clearOnIntf(2)' or 'noop'. The value of this object when read is always 'noop'. |
| NUM cpsmFabricBindClearAutoLearnIntf | 1.3.6.1.4.1.9.9.364.1.1.12.1.5 | InterfaceIndexOrZero | read-write | This object specifies the interface on which the fabric bind auto learnt entries need to be cleared. |
| cpsmFabricBindClearEntry | 1.3.6.1.4.1.9.9.364.1.1.12.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmFabricBindClearNwIndex | 1.3.6.1.4.1.9.9.364.1.1.12.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmFabricBindClearNwType | 1.3.6.1.4.1.9.9.364.1.1.12.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmFabricBindClearNwIndex object contains a VSAN id or VLAN id. |
| CPS cpsmFabricBindClearStats | 1.3.6.1.4.1.9.9.364.1.1.12.1.3 | CpsmClearStats | read-write | This object when set to 'clear(1)', results in fabric bind statistic counters being cleared on this VSAN/VLAN. No action is taken if this object is set to 'noop(2)'. The value of this object when read is always 'noop'. |
| cpsmFabricBindClearTable | 1.3.6.1.4.1.9.9.364.1.1.12 | not-accessible | This table contains atmost one entry per VSAN/VLAN that is configured. These entries help in clearing fabric bind statistics and/or the fabric bind auto-learnt entries on a VSAN/VLAN which are in cpsmFabricBindStatsTable and cpsmFabricBindEnfTable respectively. | |
| INT cpsmFabricBindCopyActToConfig | 1.3.6.1.4.1.9.9.364.1.1.6.1.1 | INTEGER | read-write | This object when set to 'copy(1)', results in the enforced fabric binding database to be copied on to the configuration fabric binding database on this VSAN/VLAN. Note that the learned entries are also copied. No action is taken if this object is set to 'noop(2)'. The value of this object when read is always 'noop'. |
| cpsmFabricBindCopyEntry | 1.3.6.1.4.1.9.9.364.1.1.6.1 | not-accessible | An entry (conceptual row) in this table. | |
| cpsmFabricBindCopyTable | 1.3.6.1.4.1.9.9.364.1.1.6 | not-accessible | This table contains atmost one entry per VSAN/VLAN that is configured. These entries help in copying the enforced (active) fabric binding database (cpsmFabricBindEnfTable) to the configuration fabric binding database (cpsmFabricBindTable) on a VSAN/VLAN. This copy operation overwrites the existing configuration fabric binding database. | |
| C32 cpsmFabricBindDenialCountR1 | 1.3.6.1.4.1.9.9.364.1.2.5.1.6 | Counter32 | read-only | The number of times this switch has been denied entry into the fabric on one of the local device's ports. |
| DOM cpsmFabricBindDenialDomId | 1.3.6.1.4.1.9.9.364.1.2.5.1.7 | DomainIdOrZero | read-only | The domain id of the device that was denied entry into the fabric on one of the local device's ports. A value of zero indicates that the switch WWN of the device was not present in the enforced fabric bindings. |
| CPS cpsmFabricBindDenialReasonCode | 1.3.6.1.4.1.9.9.364.1.2.5.1.8 | CpsmViolationReasonCode | read-only | The reason for which the device was denied entry into the fabric on one of the local device's ports. |
| TIM cpsmFabricBindDenialTime | 1.3.6.1.4.1.9.9.364.1.2.4.1.4 | TimeStamp | read-only | The sysUpTime at which the denial took place. |
| TIM cpsmFabricBindDenialTimeR1 | 1.3.6.1.4.1.9.9.364.1.2.5.1.5 | TimeStamp | read-only | The sysUpTime at which the denial took place. |
| NUM cpsmFabricBindDeniedReqs | 1.3.6.1.4.1.9.9.364.1.2.2.1.4 | CpsmStatsCounter | read-only | The number of requests from switches to become part of the fabric that have been denied on this VSAN/VLAN. |
| CPS cpsmFabricBindDiffConfigDb | 1.3.6.1.4.1.9.9.364.1.1.15.1.3 | CpsmDiffDb | read-write | This object specifies the database for the comparison. This object when set to 'configDb(1)' compares the fabric bind configuration database with respect to active database on this VSAN/VLAN. So, the active database will be the reference database and the results of the difference operation will be with respect to the active database. This object when set to 'activeDb(2)' compares the fabric bind active database with respect to configuration database on this VSAN/VLAN. So, the configuration database will be the reference database and the results of the difference operation will be with respect to the configuration database. No action is taken when this object is set to 'noop(3)'. The value of this object when read is always 'noop'. |
| cpsmFabricBindDiffConfigEntry | 1.3.6.1.4.1.9.9.364.1.1.15.1 | not-accessible | An entry (conceptual row) in this table. The user needs to configure the required type of difference on the appropriate VSAN/VLAN. The results of the difference operation will be present in the cpsmFabricBindDiffTable. | |
| U32 cpsmFabricBindDiffConfigNwIndex | 1.3.6.1.4.1.9.9.364.1.1.15.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmFabricBindDiffConfigNwType | 1.3.6.1.4.1.9.9.364.1.1.15.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmFabricBindDiffConfigNwIndex object contains a VSAN id or VLAN id. |
| cpsmFabricBindDiffConfigTable | 1.3.6.1.4.1.9.9.364.1.1.15 | not-accessible | This table contains atmost one entry per VSAN/VLAN that is configured. These entries help in comparing the fabric bind active/configuration database with configuration/active database on a VSAN/VLAN. | |
| DOM cpsmFabricBindDiffDomId | 1.3.6.1.4.1.9.9.364.1.1.16.1.6 | DomainId | read-only | This object specifies the insistent domain id of the switch represented by the corresponding instance of cpsmFabricBindDiffSwitchWwn. This object was copied either from the cpsmFabricBindDomId object in the cpsmFabricBindTable or from the cpsmFabricBindEnfDomId object in the cpsmFabricBindEnfTable when the difference operation was done. |
| cpsmFabricBindDiffEntry | 1.3.6.1.4.1.9.9.364.1.1.16.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmFabricBindDiffIndex | 1.3.6.1.4.1.9.9.364.1.1.16.1.3 | Unsigned32 | not-accessible | The index of this entry. This represents the index of a fabric binding on a VSAN/VLAN. |
| U32 cpsmFabricBindDiffNwIndex | 1.3.6.1.4.1.9.9.364.1.1.16.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmFabricBindDiffNwType | 1.3.6.1.4.1.9.9.364.1.1.16.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmFabricBindDiffNwIndex object contains a VSAN id or VLAN id. |
| CPS cpsmFabricBindDiffReason | 1.3.6.1.4.1.9.9.364.1.1.16.1.4 | CpsmDiffReason | read-only | This object indicates the reason for the difference between the databases being compared, for this entry. |
| OCT cpsmFabricBindDiffSwitchWwn | 1.3.6.1.4.1.9.9.364.1.1.16.1.5 | OCTET STRING | read-only | This object specifies the WWN of a switch that can be part of the fabric. This object was copied either from the cpsmFabricBindSwitchWwn object in the cpsmFabricBindTable or from the cpsmFabricBindEnfSwitchWwn object in the cpsmFabricBindEnfTable at the time when the difference operation was done. |
| cpsmFabricBindDiffTable | 1.3.6.1.4.1.9.9.364.1.1.16 | not-accessible | This table contains the results of the difference operation configured by means of the cpsmFabricBindDiffConfigTable. This table will contain the results of the latest difference operation that has been configured. If no difference operation has been configured or if there are no differences between the databases being compared, this table will be empty. | |
| DOM cpsmFabricBindDomId | 1.3.6.1.4.1.9.9.364.1.1.3.1.5 | DomainId | read-create | Specifies an insistent domain id. This object MUST be set to a valid value before or concurrently with setting the corresponding instance of cpsmFabricBindRowStatus object to 'active'. This object cannot be modified while the corresponding value of cpsmFabricBindRowStatus object is 'active'. The switch specified in the corresponding instance of cpsmFabricBindSwitchWwn will be allowed to be part of the fabric, only if it has a domain id equal to the value of this object. Attempting to pair a domain id with more than one switch or a single switch with more than one domain id, results in error. |
| DOM cpsmFabricBindEnfDomId | 1.3.6.1.4.1.9.9.364.1.1.8.1.5 | DomainId | read-only | This object specifies the insistent domain id of the switch represented by the corresponding instance of cpsmFabricBindEnfSwitchWwn. This object was copied from the cpsmFabricBindDomId object in the cpsmFabricBindTable at the time when the currently active fabric bindings were activated. |
| cpsmFabricBindEnfEntry | 1.3.6.1.4.1.9.9.364.1.1.8.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmFabricBindEnfIndex | 1.3.6.1.4.1.9.9.364.1.1.8.1.3 | Unsigned32 | not-accessible | Uniquely identifies a valid fabric binding on a VSAN/VLAN. |
| T/F cpsmFabricBindEnfIsLearnt | 1.3.6.1.4.1.9.9.364.1.1.8.1.6 | TruthValue | read-only | This object indicates if this entry is a learnt entry or not. If the value of this object is 'true', then this is a learnt entry. If the value of this object is 'false', then it is not a learnt entry. |
| U32 cpsmFabricBindEnfNwIndex | 1.3.6.1.4.1.9.9.364.1.1.8.1.2 | Unsigned32 | not-accessible | The id of the VSAN/VLAN according to the type specified in the corresponding instance of cpsmFabricBindEnfNwType. |
| CPS cpsmFabricBindEnfNwType | 1.3.6.1.4.1.9.9.364.1.1.8.1.1 | CpsmVirtNwType | not-accessible | The type of virtual interface. |
| OCT cpsmFabricBindEnfSwitchWwn | 1.3.6.1.4.1.9.9.364.1.1.8.1.4 | OCTET STRING | read-only | This object specifies the switch WWN of a switch that can be part of the fabric. This object was copied from the cpsmFabricBindSwitchWwn object in the cpsmFabricBindTable at the time when the currently active fabric bindings were activated. |
| cpsmFabricBindEnfTable | 1.3.6.1.4.1.9.9.364.1.1.8 | not-accessible | This table contains information on all currently enforced fabric bindings on all VSANs/VLANs on the local device. The enforced set of fabric bindings is the set of fabric bindings copied from the full fabric binding database (cpsmFabricBindTable) at the time they were activated. These entries cannot be modified. The learnt entries are also part of this table. Entries can get into this table or be deleted from this table only by means of explicit activation/deactivation. Note that this table will be empty when no valid fabric bindings have been activated. | |
| cpsmFabricBindEntry | 1.3.6.1.4.1.9.9.364.1.1.3.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmFabricBindIndex | 1.3.6.1.4.1.9.9.364.1.1.3.1.3 | Unsigned32 | not-accessible | Uniquely identifies a valid fabric binding on a VSAN/VLAN. |
| TIM cpsmFabricBindLastActTime | 1.3.6.1.4.1.9.9.364.1.1.4.1.3 | TimeStamp | read-only | The sysUpTime at which the valid fabric bindings on this VLAN/VSAN were last activated. If the last activation took place prior to the last re-initialization of the agent, then this object will contain a zero value. |
| TIM cpsmFabricBindLastChangeTime | 1.3.6.1.4.1.9.9.364.1.1.6.1.2 | TimeStamp | read-only | The value of sysUpTime when the last change was made to the configuration fabric binding database on this VSAN/VLAN. If it has not been modified since the last re-initialization of the agent, then this object will contain a zero value. |
| NUM cpsmFabricBindLocalIntf | 1.3.6.1.4.1.9.9.364.1.2.4.1.5 | InterfaceIndex | read-only | The ifIndex of the port on the local device where the denial took place. |
| FCN cpsmFabricBindLocalPort | 1.3.6.1.4.1.9.9.364.1.2.4.1.3 | FcNameId | read-only | The fWWN of the port on the local device where the denial took place. |
| cpsmFabricBindNextFreeEntry | 1.3.6.1.4.1.9.9.364.1.1.20.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmFabricBindNextFreeIndex | 1.3.6.1.4.1.9.9.364.1.1.20.1.3 | Unsigned32 | read-only | Represents the next free index value for a fabric binding entry. If the value of this object is non-zero, then it represents the next free index value. If the value of this object is zero, then there are no more free indices available on this VSAN/VLAN. |
| U32 cpsmFabricBindNextFreeNwIndex | 1.3.6.1.4.1.9.9.364.1.1.20.1.2 | Unsigned32 | not-accessible | The id of the VSAN/VLAN according to the type specified in the corresponding instance of cpsmFabricBindNextFreeNwType. |
| CPS cpsmFabricBindNextFreeNwType | 1.3.6.1.4.1.9.9.364.1.1.20.1.1 | CpsmVirtNwType | not-accessible | The type of virtual interface. |
| cpsmFabricBindNextFreeTable | 1.3.6.1.4.1.9.9.364.1.1.20 | not-accessible | This table contains the next free index value that can be used for creation of an entry in the cpsmFabricBindTable. These values are maintained on a per VSAN/VLAN basis. | |
| U32 cpsmFabricBindNwIndex | 1.3.6.1.4.1.9.9.364.1.1.3.1.2 | Unsigned32 | not-accessible | The id of the VSAN/VLAN according to the type specified in the corresponding instance of cpsmFabricBindNwType. |
| CPS cpsmFabricBindNwType | 1.3.6.1.4.1.9.9.364.1.1.3.1.1 | CpsmVirtNwType | not-accessible | The type of virtual interface. |
| CPS cpsmFabricBindResult | 1.3.6.1.4.1.9.9.364.1.1.4.1.2 | CpsmActivateResult | read-only | This object indicates the outcome of the most recent activation/deactivation. |
| ROW cpsmFabricBindRowStatus | 1.3.6.1.4.1.9.9.364.1.1.3.1.6 | RowStatus | read-create | The status of this conceptual row. |
| cpsmFabricBindStatsEntry | 1.3.6.1.4.1.9.9.364.1.2.2.1 | not-accessible | An entry (conceptual row) in this table. | |
| cpsmFabricBindStatsTable | 1.3.6.1.4.1.9.9.364.1.2.2 | not-accessible | This table contains statistic counters maintained on a per VSAN/VLAN basis on the local device for enforced fabric bindings. | |
| OCT cpsmFabricBindSwitchWwn | 1.3.6.1.4.1.9.9.364.1.1.3.1.4 | OCTET STRING | read-create | This object specifies the switch WWN of a switch that can be part of the fabric. This object MUST be set to a valid value before or concurrently with setting the corresponding instance of cpsmFabricBindRowStatus object to 'active'. This object cannot be modified while the corresponding value of cpsmFabricBindRowStatus object is 'active'. |
| FCN cpsmFabricBindSwwn | 1.3.6.1.4.1.9.9.364.1.2.4.1.2 | FcNameId | read-only | The sWWN (switch WWN) of the device that was denied entry into the fabric on one of the local device's ports. |
| FCN cpsmFabricBindSwwnR1 | 1.3.6.1.4.1.9.9.364.1.2.5.1.4 | FcNameId | read-only | The sWWN (switch WWN) of the device that was denied entry into the fabric on one of the local device's ports. |
| cpsmFabricBindTable | 1.3.6.1.4.1.9.9.364.1.1.3 | not-accessible | This table contains the set of all valid fabric bindings configured on the local device. A Fabric binding is specified as a switch WWN along with an insistent domain id. This set of switch WWNs represent the set of all switches that can be part of the fabric. Switches not part of this set will not be allowed to be part of the fabric. The set of valid fabric bindings configured in this table should be activated by means of the cpsmFabricBindActivateTable. | |
| cpsmFabricBindViolationEntry | 1.3.6.1.4.1.9.9.364.1.2.4.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmFabricBindViolationIndex | 1.3.6.1.4.1.9.9.364.1.2.4.1.1 | Unsigned32 | not-accessible | The index of this entry. |
| U32 cpsmFabricBindViolationIndexR1 | 1.3.6.1.4.1.9.9.364.1.2.5.1.3 | Unsigned32 | not-accessible | The index of this entry. |
| cpsmFabricBindViolationNewEntry | 1.3.6.1.4.1.9.9.364.1.2.5.1 | not-accessible | An entry (conceptual row) in this table. | |
| cpsmFabricBindViolationNewTable | 1.3.6.1.4.1.9.9.364.1.2.5 | not-accessible | This table contains information on atmost the last 100 violations that have been detected on the local device for enforced fabric bindings. When the number of such entries exceeds 100, then there is a wrap-around that takes place and the entries get over-written starting from the first entry. | |
| U32 cpsmFabricBindViolationNwIndexR1 | 1.3.6.1.4.1.9.9.364.1.2.5.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmFabricBindViolationNwTypeR1 | 1.3.6.1.4.1.9.9.364.1.2.5.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmFabricBindViolationNwIndexR1 object contains a VSAN id or VLAN id. |
| cpsmFabricBindViolationTable | 1.3.6.1.4.1.9.9.364.1.2.4 | not-accessible | This table contains information on atmost the last 100 violations that have been detected on the local device for enforced fabric bindings. When the number of such entries exceeds 100, then there is a wrap-around that takes place and the entries get over-written starting from the first entry. | |
| U32 cpsmFabricBindVsanVlanIndex | 1.3.6.1.4.1.9.9.364.1.2.2.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmFabricBindVsanVlanType | 1.3.6.1.4.1.9.9.364.1.2.2.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmFabricBindVsanVlanIndex object contains a VSAN id or VLAN id. |
| T/F cpsmNotifyEnable | 1.3.6.1.4.1.9.9.364.1.1.17 | TruthValue | read-write | This object specifies if the Security Policy Manager notifications should be generated or not. If this object is set to 'true', then the notifications are generated. If this object is set to 'false', then the notifications are not generated. |
| CPS cpsmPortBindActivate | 1.3.6.1.4.1.9.9.364.1.1.2.1.1 | CpsmDbActivate | read-write | Setting this object to 'activate(1)', will result in the valid port bindings on this VSAN/VLAN being activated and the set of port bindings that have been activated will be copied to the cpsmPortBindEnfTable. Setting this object to 'activateWithAutoLearnOff(2)', will result in the valid port bindings on this VSAN/VLAN being activated and copied to the cpsmPortBindEnfTable and will also result in auto learn being turned off on this VSAN/VLAN, once the activation is complete. By default, auto learn will be turned 'on' on a VSAN/VLAN after activation. Before activation is attempted, auto-learn should be off. Setting this object to 'forceActivate(3)', will result in forced activation, even if there are errors during activation and the activated port bindings will be copied to the cpsmPortBindEnfTable. Setting this object to 'forceActivateWithAutoLearnOff(4)', will result in forced activation along with turning auto learn off after activation and the activated port bindings will be copied to the cpsmPortBindEnfTable. Setting this object to 'deactivate(5)', will result in deactivation of currently activated valid port bindings (if any), on this VSAN/VLAN. Currently active entries (if any), which would have been present in the cpsmPortBindEnfTable, will be removed. Setting this object to 'noop(6)', results in no action. The value of this object when read is always 'noop(6)'. Activation will not be allowed on a VSAN/VLAN if auto-learn is enabled on that VSAN/VLAN. |
| cpsmPortBindActivateEntry | 1.3.6.1.4.1.9.9.364.1.1.2.1 | not-accessible | An entry (conceptual row) in this table. The recommended mechanism for activation is as follows: - turn off auto-learn on the required VSAN/VLAN by means of cpsmPortBindAutoLearnEnable object in the cpsmPortBindAutoLearnTable. - copy the enforced port bindings to the configuration port binding (cpsmPortBindTable) by means of the cpsmPortBindCopyTable from the cpsmPortBindEnfTable. - activate the configuration port binding using this table. | |
| cpsmPortBindActivateTable | 1.3.6.1.4.1.9.9.364.1.1.2 | not-accessible | This table contains atmost one entry per VSAN/VLAN that is configured. These entries reflect the state of activation/deactivation of the valid port bindings on the corresponding VSAN/VLAN. | |
| T/F cpsmPortBindActState | 1.3.6.1.4.1.9.9.364.1.1.2.1.4 | TruthValue | read-only | The state of activation on this VSAN/VLAN. If the value of this object is 'true', then an activation has been attempted as the most recent operation on this VSAN/VLAN. If the value of this object is 'false', then an activation has not been attempted as the most recent operation on this VSAN/VLAN. |
| NUM cpsmPortBindAllowedLogins | 1.3.6.1.4.1.9.9.364.1.2.1.1.3 | CpsmStatsCounter | read-only | The number of FLOGI requests that have been allowed on this VSAN/VLAN. |
| CPS cpsmPortBindAutoLearnEnable | 1.3.6.1.4.1.9.9.364.1.1.9.1.3 | CpsmAutoLearnEnable | read-write | This object helps to 'learn' the valid port binding configuration of devices/ports logged into the local device on all its ports and populate the above enforced port binding table (cpsmPortBindEnfTable) with the same. This mechanism of 'learning' the configuration of devices/ports logged into the local device over a period of time and populating the configuration is a convenience mechanism for users. If this object is set to 'on(1)' on a particular VSAN/VLAN, all subsequent logins (FLOGIs) on that VSAN/VLAN will be populated in the enforced port binding database, provided it is not in conflict with existing enforced port bindings on that VSAN/VLAN. When this object is set to 'off(2)', the mechanism of learning is stopped. The learned entries will however be in the enforced port binding database. |
| cpsmPortBindAutoLearnEntry | 1.3.6.1.4.1.9.9.364.1.1.9.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmPortBindAutoLearnIndex | 1.3.6.1.4.1.9.9.364.1.1.9.1.2 | Unsigned32 | not-accessible | The id of the VSAN/VLAN for which auto learning is being enabled. |
| CPS cpsmPortBindAutoLearnIndexType | 1.3.6.1.4.1.9.9.364.1.1.9.1.1 | CpsmVirtNwType | not-accessible | This object indicates the type of virtual interface. |
| cpsmPortBindAutoLearnTable | 1.3.6.1.4.1.9.9.364.1.1.9 | not-accessible | This table contains information on the auto learn policy for valid port bindings on all VSANs/VLANs on the local device. | |
| CPS cpsmPortBindClearAutoLearnDb | 1.3.6.1.4.1.9.9.364.1.1.11.1.4 | CpsmClearAutoLearnDb | read-write | This object when set to 'clearOnVsan(1)', results in port bind auto-learnt entries being cleared on this VSAN/VLAN. This object when set to 'clearOnIntf(2)', results in port bind auto-learnt entries being cleared on the interface specified by the corresponding instance of cpsmPortBindClearAutoLearnIntf on this VSAN/VLAN. No action is taken if this object is set to 'noop'. The value of this object when read is always 'noop'. |
| POR cpsmPortBindClearAutoLearnIntf | 1.3.6.1.4.1.9.9.364.1.1.11.1.5 | PortMemberList | read-write | This object specifies the interface(s) on which the port bind auto-learnt entries need to be cleared. The value of this object when read is always the zero-length string. |
| cpsmPortBindClearEntry | 1.3.6.1.4.1.9.9.364.1.1.11.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmPortBindClearNwIndex | 1.3.6.1.4.1.9.9.364.1.1.11.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmPortBindClearNwType | 1.3.6.1.4.1.9.9.364.1.1.11.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmPortBindClearNwIndex object contains a VSAN id or VLAN id. |
| CPS cpsmPortBindClearStats | 1.3.6.1.4.1.9.9.364.1.1.11.1.3 | CpsmClearStats | read-write | This object when set to 'clear(1)', results in port bind statistic counters being cleared on this VSAN/VLAN. No action is taken if this object is set to 'noop(2)'. The value of this object when read is always 'noop'. |
| cpsmPortBindClearTable | 1.3.6.1.4.1.9.9.364.1.1.11 | not-accessible | This table contains atmost one entry per VSAN/VLAN that is configured. These entries help in clearing port bind statistics and/or the port bind auto-learnt entries on a VSAN/VLAN which are in cpsmPortBindStatsTable and cpsmPortBindEnfTable respectively. | |
| INT cpsmPortBindCopyActToConfig | 1.3.6.1.4.1.9.9.364.1.1.5.1.1 | INTEGER | read-write | This object when set to 'copy(1)', results in the active (enforced) port binding database to be copied on to the configuration port binding database on this VSAN/VLAN. Note that the learned entries are also copied. No action is taken if this object is set to 'noop(2)'. The value of this object when read is always 'noop'. |
| cpsmPortBindCopyEntry | 1.3.6.1.4.1.9.9.364.1.1.5.1 | not-accessible | An entry (conceptual row) in this table. | |
| cpsmPortBindCopyTable | 1.3.6.1.4.1.9.9.364.1.1.5 | not-accessible | This table contains atmost one entry per VSAN/VLAN that is configured. These entries help in copying the enforced (active) port binding database (cpsmPortBindEnfTable) to the configuration port binding database (cpsmPortBindTable) on a VSAN/VLAN. This copy operation overwrites the existing configuration port binding database. | |
| NUM cpsmPortBindDeniedLogins | 1.3.6.1.4.1.9.9.364.1.2.1.1.4 | CpsmStatsCounter | read-only | The number of FLOGI requests that have been denied on this VSAN/VLAN. |
| CPS cpsmPortBindDiffConfigDb | 1.3.6.1.4.1.9.9.364.1.1.13.1.3 | CpsmDiffDb | read-write | This object specifies the database for the comparison. This object when set to 'configDb(1)' compares the configuration database with respect to active database on this VSAN/VLAN. So, the active database will be the reference database and the results of the difference operation will be with respect to the active database. This object when set to 'activeDb(2)' compares the active database with respect to configuration database on this VSAN/VLAN. So, the configuration database will be the reference database and the results of the difference operation will be with respect to the configuration database. No action is taken when this object is set to 'noop(3)'. The value of this object when read is always 'noop'. |
| cpsmPortBindDiffConfigEntry | 1.3.6.1.4.1.9.9.364.1.1.13.1 | not-accessible | An entry (conceptual row) in this table. The user needs to configure the required type of difference on the appropriate VSAN/VLAN. The results of the difference operation will be present in the cpsmPortBindDiffTable. | |
| U32 cpsmPortBindDiffConfigNwIndex | 1.3.6.1.4.1.9.9.364.1.1.13.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmPortBindDiffConfigNwType | 1.3.6.1.4.1.9.9.364.1.1.13.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmPortBindDiffConfigNwIndex object contains a VSAN id or VLAN id. |
| cpsmPortBindDiffConfigTable | 1.3.6.1.4.1.9.9.364.1.1.13 | not-accessible | This table contains atmost one entry per VSAN/VLAN that is configured. These entries help in comparing the port bind active/configuration database with configuration/active database on a VSAN/VLAN. | |
| cpsmPortBindDiffEntry | 1.3.6.1.4.1.9.9.364.1.1.14.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmPortBindDiffIndex | 1.3.6.1.4.1.9.9.364.1.1.14.1.3 | Unsigned32 | not-accessible | The index of this entry. This represents the index of a port binding on a VSAN/VLAN. |
| OCT cpsmPortBindDiffLoginDev | 1.3.6.1.4.1.9.9.364.1.1.14.1.6 | OCTET STRING | read-only | This object represents the logging in device address. This object was copied either from the cpsmPortBindLoginDev object in the cpsmPortBindTable or from the cpsmPortBindEnfLoginIdev object in the cpsmPortBindEnfTable at the time when the difference operation was done. |
| CPS cpsmPortBindDiffLoginDevType | 1.3.6.1.4.1.9.9.364.1.1.14.1.5 | CpsmPortBindDevType | read-only | This object identifies the format of the corresponding instance of cpsmPortBindDiffLoginDev object. |
| OCT cpsmPortBindDiffLoginPoint | 1.3.6.1.4.1.9.9.364.1.1.14.1.8 | OCTET STRING | read-only | This object represents the address of a port on the local device. This object was copied either from the cpsmPortBindLoginPoint object in the cpsmPortBindTable or from the cpsmPortBindEnfLoginPoint object in the cpsmPortBindEnfTable at the time when the difference operation was done. |
| CPS cpsmPortBindDiffLoginPointType | 1.3.6.1.4.1.9.9.364.1.1.14.1.7 | CpsmPortBindSwPortType | read-only | Specifies the format of the corresponding instance of cpsmPortBindDiffLoginPoint. |
| U32 cpsmPortBindDiffNwIndex | 1.3.6.1.4.1.9.9.364.1.1.14.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmPortBindDiffNwType | 1.3.6.1.4.1.9.9.364.1.1.14.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmPortBindDiffNwIndex object contains a VSAN id or VLAN id. |
| CPS cpsmPortBindDiffReason | 1.3.6.1.4.1.9.9.364.1.1.14.1.4 | CpsmDiffReason | read-only | This object indicates the reason for the difference between the databases being compared, for this entry. |
| cpsmPortBindDiffTable | 1.3.6.1.4.1.9.9.364.1.1.14 | not-accessible | This table contains the results of the difference operation configured by means of the cpsmPortBindDiffConfigTable. This table will contain the results of the latest difference operation that has been configured. If no difference operation has been configured or if there are no differences between the databases being compared, this table will be empty. | |
| cpsmPortBindEnfEntry | 1.3.6.1.4.1.9.9.364.1.1.7.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmPortBindEnfIndex | 1.3.6.1.4.1.9.9.364.1.1.7.1.3 | Unsigned32 | not-accessible | Uniquely identifies a valid port binding on a VSAN/VLAN. |
| T/F cpsmPortBindEnfIsLearnt | 1.3.6.1.4.1.9.9.364.1.1.7.1.8 | TruthValue | read-only | This object indicates if this entry is a learnt entry or not. If the value of this object is 'true', then this is a learnt entry. If the value of this object is 'false', then it is not a learnt entry. |
| OCT cpsmPortBindEnfLoginDev | 1.3.6.1.4.1.9.9.364.1.1.7.1.5 | OCTET STRING | read-only | This object represents the logging in device address. This object was copied from the cpsmPortBindLoginDev object in the cpsmPortBindTable at the time when the currently active port bindings were activated. |
| CPS cpsmPortBindEnfLoginDevType | 1.3.6.1.4.1.9.9.364.1.1.7.1.4 | CpsmPortBindDevType | read-only | This object identifies the format of the corresponding instance of cpsmPortBindEnfLoginDev object. |
| OCT cpsmPortBindEnfLoginPoint | 1.3.6.1.4.1.9.9.364.1.1.7.1.7 | OCTET STRING | read-only | This object represents the address of a port on the local device. This object was copied from the cpsmPortBindLoginPoint object in the cpsmPortBindTable at the time when the currently active port bindings were activated. |
| CPS cpsmPortBindEnfLoginPointType | 1.3.6.1.4.1.9.9.364.1.1.7.1.6 | CpsmPortBindSwPortType | read-only | Specifies the format of the corresponding instance of cpsmPortBindEnfLoginPoint. |
| U32 cpsmPortBindEnfNwIndex | 1.3.6.1.4.1.9.9.364.1.1.7.1.2 | Unsigned32 | not-accessible | The id of the VSAN/VLAN according to the type specified in the corresponding instance of cpsmPortBindEnfNwType. |
| CPS cpsmPortBindEnfNwType | 1.3.6.1.4.1.9.9.364.1.1.7.1.1 | CpsmVirtNwType | not-accessible | The type of virtual interface. |
| cpsmPortBindEnfTable | 1.3.6.1.4.1.9.9.364.1.1.7 | not-accessible | This table contains information on all currently enforced port bindings on all VSANs/VLANs on the local device. The enforced set of port bindings is the set of valid port bindings copied from the configuration port binding database (cpsmPortBindTable) at the time they were activated. These entries cannot be modified. The learnt entries are also a part of this table. Entries can get into this table or be deleted from this table only by means of explicit activation/deactivation. Note that this table will be empty when no valid port bindings have been activated. | |
| cpsmPortBindEntry | 1.3.6.1.4.1.9.9.364.1.1.1.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmPortBindIndex | 1.3.6.1.4.1.9.9.364.1.1.1.1.3 | Unsigned32 | not-accessible | Uniquely identifies a valid port binding on a VSAN/VLAN. |
| TIM cpsmPortBindLastActTime | 1.3.6.1.4.1.9.9.364.1.1.2.1.3 | TimeStamp | read-only | The sysUpTime at which the valid port bindings on this VLAN/VSAN were last activated. If the last activation took place prior to the last re-initialization of the agent, then this object will contain a zero value. |
| TIM cpsmPortBindLastChangeTime | 1.3.6.1.4.1.9.9.364.1.1.5.1.2 | TimeStamp | read-only | The value of sysUpTime when the last change was made to the configuration port binding database on this VSAN/VLAN. If it has not been modified since the last re-initialization of the agent, then this object will contain a zero value. |
| C32 cpsmPortBindLoginCountEx | 1.3.6.1.4.1.9.9.364.1.2.3.1.9 | Counter32 | read-only | The number of times this particular pWWN/nWWN or sWWN has been denied login on this particular local interface. |
| OCT cpsmPortBindLoginDev | 1.3.6.1.4.1.9.9.364.1.1.1.1.5 | OCTET STRING | read-create | This object represents the logging-in device address. The interpretation of this object depends on the cpsmPortBindLoginDevType object. If the value of the corresponding instance of cpsmPortBindLoginDevType object is 'mac(1)', then this object contains a MAC address. If the value of the corresponding instance of cpsmPortBindLoginDevType object is 'nWwn(2)', then this object contains a Node WWN. If the value of the corresponding instance of cpsmPortBindLoginDevType object is 'pWwn(3)', then this object contains a Port WWN. If the value of the corresponding instance of cpsmPortBindLoginDevType object is 'sWwn(4)', then this object contains a Switch WWN. If the value of the corresponding instance of cpsmPortBindLoginDevType object is 'wildCard(5)', then it represents a wild-card entry and this object's value will be ignored. The wild-card represents any device. This object MUST be set to a valid value before or concurrently with setting the corresponding instance of cpsmPortBindRowStatus object to 'active'. |
| CPS cpsmPortBindLoginDevType | 1.3.6.1.4.1.9.9.364.1.1.1.1.4 | CpsmPortBindDevType | read-create | Specifies the format of the corresponding instance of cpsmPortBindLoginDev. |
| NUM cpsmPortBindLoginIntf | 1.3.6.1.4.1.9.9.364.1.2.3.1.10 | InterfaceIndex | read-only | The ifIndex of the port on the local device where the login was denied. |
| FCN cpsmPortBindLoginNwwn | 1.3.6.1.4.1.9.9.364.1.2.3.1.5 | FcNameIdOrZero | read-only | The nWWN of the device that was denied FLOGI on one of the local device's ports. |
| OCT cpsmPortBindLoginPoint | 1.3.6.1.4.1.9.9.364.1.1.1.1.7 | OCTET STRING | read-create | This object represents the address of the port on the local device thru' which the device specified by the corresponding instance of cpsmPortBindLoginDev can FLOGI. The interpretation of this object depends on the value of the corresponding instance of cpsmPortBindLoginPointType. If the value of the corresponding instance of cpsmPortBindLoginPointType is 'fwwn(1)', then this object contains the fabric WWN of a port on the local device. If the value of the corresponding instance of cpsmPortBindLoginPointType is 'intfIndex(2)', then a port on the local device is being represented by it's interface index (ifIndex) and this object contains the ifIndex. If the value of the corresponding instance of cpsmPortBindLoginPointType is 'wildCard(3)', then it represents a wild-card entry and the value of this object is ignored. The wild-card represents any port on the local device. If the value of the corresponding instance of cpsmPortBindLoginPointType is 'swwn(4)', then this object contains the WWN of a switch in the fabric. This represents any port on that switch. This object MUST be set to a valid value before or concurrently with setting the corresponding instance of cpsmPortBindRowStatus object to 'active'. |
| CPS cpsmPortBindLoginPointType | 1.3.6.1.4.1.9.9.364.1.1.1.1.6 | CpsmPortBindSwPortType | read-create | Specifies the format of the corresponding instance of cpsmPortBindLoginPoint. |
| FCN cpsmPortBindLoginPort | 1.3.6.1.4.1.9.9.364.1.2.3.1.7 | FcNameId | read-only | The fWWN of the port on the local device where the login was denied. |
| FCN cpsmPortBindLoginPwwn | 1.3.6.1.4.1.9.9.364.1.2.3.1.4 | FcNameIdOrZero | read-only | The pWWN of the device that was denied FLOGI on one of the local device's ports. |
| FCN cpsmPortBindLoginSwwn | 1.3.6.1.4.1.9.9.364.1.2.3.1.6 | FcNameIdOrZero | read-only | The sWWN of the device (if the device happens to be a switch), that was denied entry on one of the local device's ports. If the device is a switch, then the corresponding instances of cpsmPortBindLoginNwwn and cpsmPortBindLoginPwwn will contain zero-length strings. |
| TIM cpsmPortBindLoginTime | 1.3.6.1.4.1.9.9.364.1.2.3.1.8 | TimeStamp | read-only | The sysUpTime at which the login denial took place. |
| cpsmPortBindNextFreeEntry | 1.3.6.1.4.1.9.9.364.1.1.19.1 | not-accessible | An entry (concpetual row) in this table. | |
| U32 cpsmPortBindNextFreeIndex | 1.3.6.1.4.1.9.9.364.1.1.19.1.3 | Unsigned32 | read-only | Represents the next free index value for a port binding entry. If the value of this object is non-zero, then it represents the next free index value. If the value of this object is zero, then there are no more free indices available on this VSAN/VLAN. |
| U32 cpsmPortBindNextFreeNwIndex | 1.3.6.1.4.1.9.9.364.1.1.19.1.2 | Unsigned32 | not-accessible | The id of the VSAN/VLAN according to the type specified in the corresponding instance of cpsmPortBindNextFreeNwType. |
| CPS cpsmPortBindNextFreeNwType | 1.3.6.1.4.1.9.9.364.1.1.19.1.1 | CpsmVirtNwType | not-accessible | The type of virtual interface. |
| cpsmPortBindNextFreeTable | 1.3.6.1.4.1.9.9.364.1.1.19 | not-accessible | This table contains the next free index value that can be used for creation of an entry in the cpsmPortBindTable. These values are maintained on a per VSAN/VLAN basis. | |
| U32 cpsmPortBindNwIndex | 1.3.6.1.4.1.9.9.364.1.1.1.1.2 | Unsigned32 | not-accessible | The id of the VSAN/VLAN according to the type specified in the corresponding instance of cpsmPortBindNwType. |
| CPS cpsmPortBindNwType | 1.3.6.1.4.1.9.9.364.1.1.1.1.1 | CpsmVirtNwType | not-accessible | The type of virtual interface. |
| CPS cpsmPortBindResult | 1.3.6.1.4.1.9.9.364.1.1.2.1.2 | CpsmActivateResult | read-only | This object indicates the outcome of the most recent activation/deactivation. |
| ROW cpsmPortBindRowStatus | 1.3.6.1.4.1.9.9.364.1.1.1.1.8 | RowStatus | read-create | The status of this conceptual row. |
| cpsmPortBindStatsEntry | 1.3.6.1.4.1.9.9.364.1.2.1.1 | not-accessible | An entry (conceptual row) in this table. | |
| cpsmPortBindStatsTable | 1.3.6.1.4.1.9.9.364.1.2.1 | not-accessible | This table contains statistic counters maintained on a per VSAN/VLAN basis on the local device for enforced port bindings. | |
| cpsmPortBindTable | 1.3.6.1.4.1.9.9.364.1.1.1 | not-accessible | This table contains the set of all valid port bindings configured on the local device. A valid port binding consists of a pWWN/nWWN bound to a port on the local device. If a device Px is bound with an interface Fx on the local device, then Px can only FLOGI thru' Fx on the local device and not thru' any other interface and Fx will permit FLOGI only from Px. Wild-cards can be specified for either Px or Fx but not for both. The set of valid port bindings configured in this table should be activated by means of the cpsmPortBindActivateTable. When the activation takes place, the valid port binding entries are enforced and FLOGI from external devices to the local device will be subject to the enforced port bindings. | |
| cpsmPortBindViolationEntry | 1.3.6.1.4.1.9.9.364.1.2.3.1 | not-accessible | An entry (conceptual row) in this table. | |
| U32 cpsmPortBindViolationIndex | 1.3.6.1.4.1.9.9.364.1.2.3.1.3 | Unsigned32 | not-accessible | The index of this entry. |
| U32 cpsmPortBindViolationNwIndex | 1.3.6.1.4.1.9.9.364.1.2.3.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmPortBindViolationNwType | 1.3.6.1.4.1.9.9.364.1.2.3.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmPortBindViolationNwIndex object contains a VSAN id or VLAN id. |
| cpsmPortBindViolationTable | 1.3.6.1.4.1.9.9.364.1.2.3 | not-accessible | This table contains information on atmost the last 100 login violations that have been detected on the local device for enforced port bindings. When the number of such entries exceeds 100, then there is a wrap-around that takes place and the entries get over-written starting from the first entry. | |
| U32 cpsmPortBindVsanVlanIndex | 1.3.6.1.4.1.9.9.364.1.2.1.1.2 | Unsigned32 | not-accessible | The VSAN/VLAN id for this entry. |
| CPS cpsmPortBindVsanVlanType | 1.3.6.1.4.1.9.9.364.1.2.1.1.1 | CpsmVirtNwType | not-accessible | This object indicates whether the corresponding instance of cpsmPortBindVsanVlanIndex object contains a VSAN id or VLAN id. |
| cpsmStats | 1.3.6.1.4.1.9.9.364.1.2 |
RFC description
Port Security Manager (PSM) for Fibre Channel switches managing port binding and fabric binding security aspects.
Start monitoring Cisco MDS SAN switch (Fibre Channel Port Security Manager) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.