HP-SWITCH-FIPS-MIB

All MIBs › HP-SWITCH-FIPS-MIB

Organization: HP ProCurve Networking

Last Updated: 2010-06-03

Category: Domain: Security, VPN and Security, Vendor: HP/HPE

Description: HP SNMP MIB for FIPS 140-2 compliance mode configuration enforcing approved cryptographic standards on HP ProCurve switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HP-SWITCH-FIPS-MIB?

HP-SWITCH-FIPS-MIB, despite its FIPS-suggestive name, is actually documented as managing FIP (FCoE Initialization Protocol) snooping within the HP Integrated Communication Facility product line, used where HP switches participate in Fibre Channel over Ethernet (FCoE) networks. It exposes configuration objects for FCoE VLAN mapping (FC-MAP) and FCF (FCoE Forwarder) MAC address discovery, along with global statistics such as login counts. Its monitoring relevance includes both configuration status (admin status, FC-MAP values, VLAN assignments) and operational/fault visibility via hpSwitchFipsFcfEnodeLoginCount and hpSwitchFipsGlobalStats, which reveal whether FCoE nodes are successfully logging in through the switch. It depends conceptually on the FC-BB-5/FIP standard for FCoE initialization and on the switch's underlying VLAN/Ethernet infrastructure. It is typically deployed in converged data center networks where HP switches perform FIP snooping to secure and manage FCoE traffic between servers and FCoE-capable storage. Network engineers evaluating or troubleshooting this functionality can download the HP-SWITCH-FIPS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HP-SWITCH-FIPS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP switch with FCoE/FIP snooping support

Monitoring Examples

An administrator would poll hpSwitchFipsFcMapTable (via hpSwitchFipsFcMapIndex) to verify hpSwitchFipsFcMap values and hpSwitchFipsFcoeVlanId are correctly assigned, then check hpSwitchFipsFcfMacAddressTable for discovered FCF MAC addresses per hpSwitchFipsVirtualFabricInterfaceIndex. A drop in hpSwitchFipsFcfEnodeLoginCount or missing FCF MAC entries would reveal FCoE endpoints failing to log in through FIP snooping, while hpSwitchFipsAdminStatus confirms the feature is enabled at all.

What Can Be Monitored

FIP snooping admin status
FC-MAP value per interface
FCoE VLAN ID assignment
discovered FCF MAC addresses
FCoE node (ENode) login count

Imported Objects

From HP-ICF-OID

hpSwitch

OBJECT-IDENTITY

From IF-MIB

InterfaceIndex

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

MacAddress
RowStatus

How to Use in IPNetwork Monitor

Example using hpSwitchFipsFipDropPkts OID:

Select an HP switch with FCoE/FIP snooping support as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpSwitchFipsFipDropPkts into the Find box to locate it in the OID tree, then select it and click OK. It reports the global counter to indicate the number of FIP frames dropped. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpSwitchFipSnoopingMib	1.3.6.1.4.1.11.2.14.11.5.1.78			This MIB module describes objects for management of FIP (FCoE Initialization Protocol) snooping in the HP Integrated Communication Facility product line.
hpSwitchFipsConfigObjects	1.3.6.1.4.1.11.2.14.11.5.1.78.1
hpSwitchFipsScalars	1.3.6.1.4.1.11.2.14.11.5.1.78.1.1
INT hpSwitchFipsAdminStatus	1.3.6.1.4.1.11.2.14.11.5.1.78.1.1.1	INTEGER	read-write	This object is used to enable or disable FIP Snooping on an ethernet bridge.
hpSwitchFipsTables	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2
hpSwitchFipsFcMapTable	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.1		not-accessible	This table is used to configure the list of FC-MAP values. These FC-MAPS will be used to program ACLs that ensure no MAC Address used for non-FCoE traffic shall have the prefix(first 3 bytes) equal to any of the FC-MAP value.
hpSwitchFipsFcMapEntry	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.1.1		not-accessible	An entry in the table specifying the FC-MAP.
I32 hpSwitchFipsFcMapIndex	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.1.1.1	Integer32	not-accessible	The index of the Fiber Channel MAC Address prefix table.
OCT hpSwitchFipsFcMap	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.1.1.2	OCTET STRING	read-write	This object configures the FC MAP value associated with the FIP snooping bridge
hpSwitchFipsFcfMacAddressTable	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2		not-accessible	This table is used to configure the list of FCF MAC addresses to which ENodes will perform FIP FLOGI and FIP NPIV FDISC operations. This table will be indexed by the VLAN ID. Appropriate ACL entries will be programmed to allow FCoE traffic to these MACs.
hpSwitchFipsFcfMacAddressEntry	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2.1		not-accessible	An entry in the table specifying the FCF MAC connected to the Virtual Fabric (VF) interface.
NUM hpSwitchFipsVirtualFabricInterfaceIndex	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2.1.1	InterfaceIndex	not-accessible	Interface index of the VF port connected to FCF
MAC hpSwitchFipsFcfMacAddress	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2.1.2	MacAddress	not-accessible	This object configures the MAC address of the Fibre Channel Forwarder(FCF) attached to the VF port accepting Fabric logins. This MAC Address will be used as the DA MAC by Enodes requesting FLOGI or NPIV FDISC.Configuring this MAC address will result in some ACL rules to be programmed in the hardware.
I32 hpSwitchFipsFcoeVlanId	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2.1.3	Integer32	read-only	The FCoE VLAN ID advertised by FCF
OCT hpSwitchFipsFcfFcMap	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2.1.4	OCTET STRING	read-only	The Fiber Channel MAC address prefix used by the FCF to assign fabric provided MAC addresses(FPMA).
I32 hpSwitchFipsFcfEnodeLoginCount	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2.1.5	Integer32	read-only	This objects represents the number of Enodes that have logged into this FCF.
OCT hpSwitchFipsFcfNameId	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2.1.6	OCTET STRING	read-only	The World Wide Node Name of the fabric port as advertised by the FCF.
OCT hpSwitchFipsFabricName	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2.1.7	OCTET STRING	read-only	The Fabric name identifier of Fabric as advertised by FCF.
ROW hpSwitchFipsFcfMacTableRowStatus	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.2.1.8	RowStatus	read-create	Row Status of the FCF MAC Address table.
hpSwitchFipsSessionTable	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3		not-accessible	This table stores the currently active FLOGI or NPIV FDISC sessions. This table is meant for reporting only.
hpSwitchFipsSessionEntry	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1		not-accessible	An entry in the table specifying the details pertaing to a session.
NUM hpSwitchFipsSessEnodeInterfaceIndex	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1.1	InterfaceIndex	not-accessible	The object specifies the interface index connected to the Enode initiator.
MAC hpSwitchFipsSessEnodeFPMAMacAddress	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1.2	MacAddress	not-accessible	The Fabric provided MAC Address of the Enode. This MAC is assigned by FCF as a result of succcessful FLOGI or NPIV FDISC and is used as the SA MAC for FCoE traffic originating from Enode.
MAC hpSwitchFipsSessEnodeMacAddress	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1.3	MacAddress	read-only	This object represents the server provided MAC address of the Enode. This MAC is used as the SA MAC in FIP frames originating from Enode.
OCT hpSwitchFipsSessEnodeNportId	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1.4	OCTET STRING	read-only	This object represents the N_Port ID of the Enode. It is assigned by the FCF after a successful FLOGI or NPIV FDISC. It is equivalent to FC ID in native Fibre channel. This ID is used in the S_ID or D_ID fields of the encapsulated Fibre Channel Frames.
INT hpSwitchFipsSessEnodeNportIdType	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1.5	INTEGER	read-only	This object represents the method by which N_Port obtained the FC ID from FCF.
MAC hpSwitchFipsSessFcfMacAddress	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1.6	MacAddress	read-only	This object represents the MAC Address of the Fibre Channel Forwarder to which the session is established.
OCT hpSwitchFipsSessFcMap	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1.7	OCTET STRING	read-only	This object represents the FC MAP.
I32 hpSwitchFipsSessVlanId	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1.8	Integer32	read-only	The VLAN ID on which FCoE traffic is being pumped.
OCT hpSwitchFipsSessFcfNameId	1.3.6.1.4.1.11.2.14.11.5.1.78.1.2.3.1.9	OCTET STRING	read-only	The Name Identifier advertised by the FCF with which this session is established.
hpSwitchFipsStatistics	1.3.6.1.4.1.11.2.14.11.5.1.78.2
hpSwitchFipsGlobalStats	1.3.6.1.4.1.11.2.14.11.5.1.78.2.1
C64 hpSwitchFipsFipDropPktsEx	1.3.6.1.4.1.11.2.14.11.5.1.78.2.1.1	Counter64	read-only	Global counter to indicate the number of FIP frames dropped.
C64 hpSwitchFipsFcoeDropPkts	1.3.6.1.4.1.11.2.14.11.5.1.78.2.1.2	Counter64	read-only	Global counter to indicate the number of FCoE frames dropped.
hpSwitchFipsSessStats	1.3.6.1.4.1.11.2.14.11.5.1.78.2.2
hpSwitchFipsSessStatsTable	1.3.6.1.4.1.11.2.14.11.5.1.78.2.2.1		not-accessible	A table for per session FIPs statistics.
hpSwitchFipsSessStatsEntry	1.3.6.1.4.1.11.2.14.11.5.1.78.2.2.1.1		not-accessible	An Entry in the session statistics table.
NUM hpSwitchFipsStatsSessEnodeIfIndex	1.3.6.1.4.1.11.2.14.11.5.1.78.2.2.1.1.1	InterfaceIndex	not-accessible	Interface index of the Enode.
MAC hpSwitchFipsStatsSessFPMAMacAddress	1.3.6.1.4.1.11.2.14.11.5.1.78.2.2.1.1.2	MacAddress	not-accessible	FPMA Mac address being used for this session.
MAC hpSwitchFipsStatsSessFcfMacAddress	1.3.6.1.4.1.11.2.14.11.5.1.78.2.2.1.1.3	MacAddress	read-only	FCF Mac address being used for this session.
C64 hpSwitchFipsStatsSessFcoePermitPkts	1.3.6.1.4.1.11.2.14.11.5.1.78.2.2.1.1.4	Counter64	read-only	Counter indicating the number of FCoE frames permitted for this session.
hpSwitchFipsConformance	1.3.6.1.4.1.11.2.14.11.5.1.78.3
hpSwitchFipsCompliances	1.3.6.1.4.1.11.2.14.11.5.1.78.3.1
hpSwitchFipsCompliance	1.3.6.1.4.1.11.2.14.11.5.1.78.3.1.1			The compliance statement for SNMP entities which implement the FIP Snooping MIB.
hpSwitchFipsGroups	1.3.6.1.4.1.11.2.14.11.5.1.78.3.2
hpSwitchFipsConfigGroup	1.3.6.1.4.1.11.2.14.11.5.1.78.3.2.1			The collection of objects for Fip Snooping configuration.
hpSwitchFipsSessionGroup	1.3.6.1.4.1.11.2.14.11.5.1.78.3.2.2			The collection of objects representing the FIP sessions.
hpSwitchFipsStatisticsGroup	1.3.6.1.4.1.11.2.14.11.5.1.78.3.2.3			The collection of objects representing the FIP Statistics.

RFC description

HP ProCurve FCoE Initialization Protocol (FIP) snooping configuration and statistics monitoring.

Start monitoring HP switch with FCoE/FIP snooping support with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HP-SWITCH-FIPS-MIB