T11-FC-SP-POLICY-MIB

All MIBs › T11-FC-SP-POLICY-MIB

Organization: This MIB module was developed through the coordinated effort of two organizations: T11 began the development and the IETF (in the IMSS Working Group) finished it.

Last Updated: 2008-08-20

Category: Fibre Channel and Storage

Description: Defines managed objects for Fibre Channel Security Protocol (FC-SP) policy management and distribution across FC fabrics.

IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring T11-FC-SP-POLICY-MIB with a free 30-day trial of IPNetwork Monitor.

What Is T11-FC-SP-POLICY-MIB?

T11-FC-SP-POLICY-MIB is a vendor-neutral, standards-based MIB defined by the INCITS T11 committee for managing Fibre Channel Security Protocol (FC-SP) fabric policies. It exposes tables of policy objects covering per-fabric policy summaries, admin fabric names, activation timestamps, and hash formats used to store and distribute security policies across an FC fabric. Its monitoring focus is configuration and security-policy state rather than classic hardware sensors: an administrator uses it to confirm which security policies are active on a fabric, when they were last activated, and whether policy objects are consistent across switches, and it defines MIB notifications for policy-related events. It is explicitly built on the T11 FC-SP specification and is meant to be used alongside other Fibre Channel management MIBs that share the same fabric-indexed structure. It is deployed in SAN (storage area network) environments on Fibre Channel switches/directors that implement FC-SP security features for fabric-wide policy enforcement. Engineers implementing or auditing this functionality typically reference the T11-FC-SP-POLICY-MIB RFC/standard documentation for the authoritative specification.

IPNetwork Monitor allows you to monitor SNMP objects defined in T11-FC-SP-POLICY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB (INCITS T11 FC-SP)
Fibre Channel switches/directors in SAN fabrics

Monitoring Examples

An administrator would poll t11FcSpPoSummaryTable/t11FcSpPoSummaryEntry to list each t11FcSpPoSummaryPolicyName and its t11FcSpPoSummaryPolicyType, confirming the expected security policies are present on a fabric. Checking t11FcSpPoActivatedTimeStamp against a recent change window verifies a policy was activated when expected, and an unexpected or missing t11FcSpPoAdminFabricName entry would reveal a fabric that failed to receive an intended policy update. The module also defines t11FcSpPoMIBNotifications for alerting on policy distribution/activation events.

What Can Be Monitored

active fabric security policy names/types
policy activation timestamp
policy hash format
per-fabric policy summary

Imported Objects

From FC-MGMT-MIB

FcDomainIdOrZero
FcNameIdOrZero
fcmInstanceIndex	OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType
InetPortNumber

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32
mib-2

From SNMPv2-TC

RowStatus
StorageType
TimeStamp
TruthValue

From T11-FC-NAME-SERVER-MIB

T11NsGs4RejectReasonCode

From T11-FC-SP-TC-MIB

T11FcSpAlphaNumName
T11FcSpAlphaNumNameOrAbsent
T11FcSpHashCalculationStatus
T11FcSpPolicyHashFormat
T11FcSpPolicyHashValue
T11FcSpPolicyName
T11FcSpPolicyNameType
T11FcSpPolicyObjectType

From T11-TC-MIB

T11FabricIndex

How to Use in IPNetwork Monitor

Example using t11FcSpPoInRequests OID:

Select a device implementing T11-FC-SP-POLICY-MIB as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type t11FcSpPoInRequests into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of FC-SP Policy Management Requests (e.g., GPS, APS, etc.) received by this FC-SP Security Policy Server on this Fabric. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
TIM t11FcSpPoActivatedTimeStamp	1.3.6.1.2.1.178.1.1.1.1.4	TimeStamp	read-only	The value of sysUpTime at which this Fabric's Policy Summary Object was last activated, or zero if the same Policy Summary Object has been active since the last restart of the management system.
t11FcSpPoActive	1.3.6.1.2.1.178.1.1
t11FcSpPoActiveObjectsGroup	1.3.6.1.2.1.178.2.2.1			A collection of MIB objects that contain information about active Policy Objects that express Fibre Channel Security (FC-SP) policy.
FCN t11FcSpPoAdminFabricName	1.3.6.1.2.1.178.1.1.1.1.3	FcNameIdOrZero	read-only	The administratively-specified name for this Fabric, as specified in the active Switch Membership List Object. This value is meaningful only when Static Domain_IDs are in use in a Fabric (see FC-SW-4). Static Domain_IDs are administratively enabled by a setting of the Switch Flags in each Switch Entry in the Switch Membership List Object. If Static Domain_IDs are not in use, this value might be '0000000000000000'h. The t11FamEnable, t11FamFabricName, and t11FamConfigDomainIdType objects defined in the T11-FC-FABRIC-ADDR-MGR-MIB module are also concerned with the use of an administratively-specified name for a Fabric and Static Domain_IDs. When FC-SP Policy is in use in a Fabric, the values of t11FamEnable, t11FamFabricName, and t11FamConfigDomainIdType must be read-only and reflect the active Policy Objects. For example, the value of t11FamFabricName must reflect the value of t11FcSpPoAdminFabricName.
t11FcSpPoAttribEntry	1.3.6.1.2.1.178.1.1.9.1		not-accessible	Each row contains information specific to an Attribute Entry contained within an Attribute Policy Object that is active within the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. For some types of Attribute Policy Objects, it is valuable to break out some semantically significant parts of the Policy Object's value into their own individual MIB objects; for example, to extract the one or more individual Authentication Protocol Identifiers and associated Authentication Protocol Parameters out of an Attribute Object containing a 'AUTH_Negotiate Message Payload'. For such types, another MIB table is defined to hold the extracted values in MIB objects specific to the Attribute Policy Object's type. In such cases, the t11FcSpPoAttribExtension object in this table points to the other MIB table. If the value of one Attribute Entry is too large (more than 256 bytes) to be contained within the value of one instance of t11FcSpPoAttribValue, then one row in this table contains the first 256 bytes, and one (or more) other row(s) in this table contain the rest of the value.
U32 t11FcSpPoAttribEntryIndex	1.3.6.1.2.1.178.1.1.9.1.2	Unsigned32	not-accessible	A unique value to distinguish this Attribute Entry from other Attribute Entries contained in the same Attribute Policy Object.
OID t11FcSpPoAttribExtension	1.3.6.1.2.1.178.1.1.9.1.6	OBJECT IDENTIFIER	read-only	For some types of Attribute Policy Object, the value of this MIB object points to type-specific MIB objects that contain individual/broken-out parts of the Attribute Policy Object's value. If this object doesn't point to such type-specific MIB objects, then it contains the value: zeroDotZero. In particular, when the value of t11FcSpPoAttribType indicates 'AUTH_Negotiate Message Payload', one or more Authentication Protocol Identifiers and their associated Authentication Protocol Parameters are embedded within the value of the corresponding instance of t11FcSpPoAttribValue; MIB objects to contain these individual values are defined in the t11FcSpPoAuthProtTable. Thus, for an 'AUTH_Negotiate Message Payload' Attribute, the value of this object contains an OID within the t11FcSpPoAuthProtTable, e.g., of the whole table, of an individual row, or of an individual instance within the table.
T11 t11FcSpPoAttribName	1.3.6.1.2.1.178.1.1.9.1.1	T11FcSpAlphaNumName	not-accessible	The name of the Attribute Policy Object containing one or more Attribute Entries.
U32 t11FcSpPoAttribPartIndex	1.3.6.1.2.1.178.1.1.9.1.3	Unsigned32	not-accessible	When the value of an Attribute Entry is shorter than 257 bytes, the whole value is contained in one instance of t11FcSpPoAttribValue, and the value of this object is 1. If the value of an Attribute Entry is longer than 256 bytes, then that value is divided up on 256-byte boundaries such that all parts are 256 bytes long except the last part, which is shorter if necessary, with each such part contained in a separate row of this table, and the value of this object is set to the part number. That is, this object has the value of 1 for bytes 0-255, the value of 2 for bytes 256-511, etc.
t11FcSpPoAttribTable	1.3.6.1.2.1.178.1.1.9		not-accessible	A table of the Attribute Policy Objects being used within active Policy Objects. In the FC-SP Policy Database, each Attribute Policy Object consists of an Attribute Object Name and a set of Attribute Entries. An active Attribute Policy Object is represented by all the Attribute Entries in this table that have the same value of t11FcSpPoAttribName.
U32 t11FcSpPoAttribType	1.3.6.1.2.1.178.1.1.9.1.4	Unsigned32	read-only	The type of attribute. The first type to be defined is: t11FcSpPoAttribType t11FcSpPoAttribValue =================== ==================== '00000001'h The AUTH_Negotiate Message Payload
OCT t11FcSpPoAttribValue	1.3.6.1.2.1.178.1.1.9.1.5	OCTET STRING	read-only	The value of an Attribute Entry is divided up on 256-byte boundaries such that all parts are 256 bytes long except the last part, which is shorter if necessary, and each such part is contained in a separate instance of this object. The value of this object is independent of whether some parts of its value are broken out into separate MIB objects pointed to by the corresponding instance of t11FcSpPoAttribExtension.
t11FcSpPoAuthProtEntry	1.3.6.1.2.1.178.1.1.10.1		not-accessible	Each entry contains information about an Authentication Protocol that is extracted out of the Attribute Entry (identified by t11FcSpPoAttribEntryIndex) of the Policy Attribute Object (identified by t11FcSpPoAttribName), which is active within the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. If the value of one Attribute Protocol Parameters string is too large (more than 256 bytes) to be contained within the value of one instance of t11FcSpPoAuthProtParams, then one row in this table contains the first 256 bytes, and one (or more) other row(s) in this table contain the rest of the value.
U32 t11FcSpPoAuthProtIdentifier	1.3.6.1.2.1.178.1.1.10.1.1	Unsigned32	not-accessible	The Authentication Protocol Identifier: 1 = DH-CHAP 2 = FCAP 3 = FCPAP 4 = IKEv2 5 = IKEv2-AUTH 240 thru 255 = Vendor Specific Protocols all other values are 'Reserved' (by T11).
OCT t11FcSpPoAuthProtParams	1.3.6.1.2.1.178.1.1.10.1.3	OCTET STRING	read-only	The value of an Authentication Protocol Parameters string is divided up on 256-byte boundaries such that all parts are 256 bytes long except the last part, which is shorter if necessary, and each such part is contained in a separate instance of this object.
U32 t11FcSpPoAuthProtPartIndex	1.3.6.1.2.1.178.1.1.10.1.2	Unsigned32	not-accessible	When the value of an Attribute Protocol Parameters string is shorter than 257 bytes, the whole value is contained in one instance of t11FcSpPoAuthProtParams, and the value of this object is 1. (This includes the case when the Attribute Protocol Parameters string is zero bytes in length.) If the value of an Authentication Protocol Parameters string is longer than 256 bytes, then that value is divided up on 256-byte boundaries such that all parts are 256 bytes long except the last part, which is shorter if necessary, with each such part contained in a separate row of this table, and the value of this object is set to the part number. That is, this object has the value of 1 for bytes 0-255, the value of 2 for bytes 256-511, etc.
t11FcSpPoAuthProtTable	1.3.6.1.2.1.178.1.1.10		not-accessible	A table of Authentication Protocol Identifier and Authentication Protocol Parameters that are embedded in Attribute Policy Objects being used within active Policy Objects. This table is used for Attribute Entries of Attribute Policy Objects for which the value of t11FcSpPoAttribType indicates 'AUTH_Negotiate Message Payload' and the value of t11FcSpPoAttribExtension contains the OID of this table.
t11FcSpPoControl	1.3.6.1.2.1.178.1.5
t11FcSpPoControlEntry	1.3.6.1.2.1.178.1.5.2.1		not-accessible	Each entry contains control information specific to FC-SP Policy and Policy-related events for the Fabric identified by the value of t11FcSpPoFabricIndex, and managed within the Fibre Channel management instance identified by fcmInstanceIndex.
t11FcSpPoControlTable	1.3.6.1.2.1.178.1.5.2		not-accessible	A table of control information, including the memory realization of FC-SP Policy Databases, and concerning the generation of notifications due to FC-SP Policy-related events.
OCT t11FcSpPoCtCommandString	1.3.6.1.2.1.178.1.5.2.1.6	OCTET STRING	read-only	The binary content of the failed request that is indicated when the value of the corresponding instance of t11FcSpPoLastNotifyType is 'activateFail' or 'deactivateFail'. The content of the request is formatted as an octet string (in network byte order) containing the CT_IU, as described in Table 2 of [FC-GS-5] (including the preamble). For other values of t11FcSpPoLastNotifyType, or if the CT_IU's content is unavailable, the value of this object is the zero-length string. When the length of this object is 255 octets, it contains the first 255 octets of the CT_IU (in network-byte order).
t11FcSpPoCtDescrEntry	1.3.6.1.2.1.178.1.1.5.1		not-accessible	Each entry contains information about one Common Transport Access Descriptor of an active Common Transport Access Specifier used within the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex.
BIT t11FcSpPoCtDescrFlags	1.3.6.1.2.1.178.1.1.5.1.3	Bits	read-only	The flag bits that specify how access is to be limited by this Common Transport Access Descriptor: - allow -- access to the specified Generic Service and Server is allowed if this bit is set, and is to be denied if this bit is not set. - gsTypeWildcard -- if this bit is set, the Generic Service to be allowed/denied is specified by the value of t11FcSpPoCtDescrGsType. If this bit is set, then the gsSubTypeWildcard bit must not be set. - gsSubTypeWildcard -- if this bit is set, the Generic Service to be allowed/denied is specified by the value of t11FcSpPoCtDescrGsSubType. If this bit is set, then the gsTypeWildcard bit must not be set. - readOnly -- if this bit is set, then access is to be granted only for reading.
OCT t11FcSpPoCtDescrGsSubType	1.3.6.1.2.1.178.1.1.5.1.5	OCTET STRING	read-only	The GS_Subtype of the Generic Server (e.g., the Fabric Zone Server) that is subject to access control. This value is ignored if the gsSubTypeWildcard bit is not set in the corresponding value of t11FcSpPoCtDescrFlags.
OCT t11FcSpPoCtDescrGsType	1.3.6.1.2.1.178.1.1.5.1.4	OCTET STRING	read-only	The GS_Type of the Generic Service (e.g., the FC-GS-5 Management Service) that is subject to access control. This value is ignored if the gsTypeWildcard bit is not set in the corresponding value of t11FcSpPoCtDescrFlags.
U32 t11FcSpPoCtDescrIndex	1.3.6.1.2.1.178.1.1.5.1.2	Unsigned32	not-accessible	An index value that uniquely identifies a particular Common Transport Access Descriptor within a Common Transport Access Specifier.
U32 t11FcSpPoCtDescrSpecifierIndex	1.3.6.1.2.1.178.1.1.5.1.1	Unsigned32	not-accessible	An index value that uniquely identifies a particular Common Transport Access Specifier within a Fabric.
t11FcSpPoCtDescrTable	1.3.6.1.2.1.178.1.1.5		not-accessible	A table of Common Transport Access Descriptors being used within active Policy Objects. A Common Transport Access Specifier is a list of Common Transport Access Descriptors that specify whether a Node is allowed to access a Generic Service or Sub-Server. An active Common Transport Access Specifier is represented by all rows of this table that have the same values of fcmInstanceIndex, t11FcSpPoFabricIndex, and t11FcSpPoCtDescrSpecifierIndex.
t11FcSpPoEntry	1.3.6.1.2.1.178.1.1.1.1		not-accessible	Each entry contains information about active FC-SP policies for a particular Fabric, managed as part of the Fibre Channel management instance identified by fcmInstanceIndex.
T11 t11FcSpPoFabricIndex	1.3.6.1.2.1.178.1.1.1.1.1	T11FabricIndex	not-accessible	An index value that uniquely identifies a particular Fabric.
C32 t11FcSpPoInAccepts	1.3.6.1.2.1.178.1.4.1.1.2	Counter32	read-only	The number of times that this FC-SP Security Policy Server sent an Accept CT_IU on this Fabric in response to a received FC-SP Policy Management Request (e.g., GPS, APS, etc.). This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0.
C32 t11FcSpPoInRejects	1.3.6.1.2.1.178.1.4.1.1.3	Counter32	read-only	The number of times that this FC-SP Security Policy Server sent a Reject CT_IU on this Fabric in response to a received FC-SP Policy Management Request (e.g., GPS, APS, etc.). This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0.
C32 t11FcSpPoInRequestsEx	1.3.6.1.2.1.178.1.4.1.1.1	Counter32	read-only	The number of FC-SP Policy Management Requests (e.g., GPS, APS, etc.) received by this FC-SP Security Policy Server on this Fabric. This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0.
T11 t11FcSpPoIpMgmtAttribute	1.3.6.1.2.1.178.1.1.7.1.5	T11FcSpAlphaNumNameOrAbsent	read-only	The name of an active Attribute Policy Object that is defined for this IP Management entry or the zero-length string. The zero-length string indicates that no Attribute Policy Object is defined for this IP Management entry.
t11FcSpPoIpMgmtEntry	1.3.6.1.2.1.178.1.1.7.1		not-accessible	Each entry contains information about one IP Management Entry within the active IP Management List Object for the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. The Policy Object Name of an IP Management Entry Policy Object is either an IPv6 Address Range or an IPv4 Address Range, where in each case, the range is specified as two addresses: the low and high ends of the range. In particular, since the Policy Object Name in this situation can only be an IPv6 Address Range or an IPv4 Address Range, it is represented here by three MIB objects defined as a (InetAddressType, InetAddress, InetAddress) tuple, in which the first address is the low end of the range, the second address is the high end of the range, and both addresses are of the type designated by InetAddressType. In theory, the use of t11FcSpPoIpMgmtEntryNameLow and t11FcSpPoIpMgmtEntryNameHigh (which both have the syntax of InetAddress) in the INDEX could cause the need for excessively long OIDs. In practice, this can't happen because FC-SP doesn't allow these objects to be specified as DNS names.
IP t11FcSpPoIpMgmtEntryNameHigh	1.3.6.1.2.1.178.1.1.7.1.3	InetAddress	not-accessible	The higher end of an Internet address range. The type of this address is given by the corresponding instance of t11FcSpPoIpMgmtEntryNameType. The combination of t11FcSpPoIpMgmtNameType, t11FcSpPoIpMgmtNameLow, and t11FcSpPoIpMgmtNameHigh specify the Internet address range of this IP Management Entry in the IP Management List Object.
IP t11FcSpPoIpMgmtEntryNameLow	1.3.6.1.2.1.178.1.1.7.1.2	InetAddress	not-accessible	The lower end of an Internet address range. The type of this address is given by the corresponding instance of t11FcSpPoIpMgmtEntryNameType. The combination of t11FcSpPoIpMgmtNameType, t11FcSpPoIpMgmtNameLow, and t11FcSpPoIpMgmtNameHigh specify the Internet address range of this IP Management Entry in the IP Management List Object.
IPt t11FcSpPoIpMgmtEntryNameType	1.3.6.1.2.1.178.1.1.7.1.1	InetAddressType	not-accessible	The combination of t11FcSpPoIpMgmtNameType, t11FcSpPoIpMgmtNameLow, and t11FcSpPoIpMgmtNameHigh specify the Internet address range of this IP Management Entry in the IP Management List Object. The FC-SP specification does not allow the use of a DNS domain name to specify the address at the lower end or at the higher end of the Internet address range, nor does it allow the specification of a zone index. Therefore, the type of address must be one of: 'ipv4', or 'ipv6'.
t11FcSpPoIpMgmtTable	1.3.6.1.2.1.178.1.1.7		not-accessible	A table of IP Management Entries in active IP Management List Objects. An IP Management List Object is a Fabric-wide Policy Object that describes which IP hosts are allowed to manage a Fabric. One IP Management List Object is represented by all of the rows of this table that have the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
U32 t11FcSpPoIpMgmtWkpIndex	1.3.6.1.2.1.178.1.1.7.1.4	Unsigned32	read-only	This object identifies the restrictions for IP management access by IP hosts in this range of IP addresses, specified as the set of Well-Known Protocols Access Descriptors contained in those rows of the t11FcSpPoWkpDescrTable for which the value of t11FcSpPoWkpDescrSpecifierIndex is the same as the value of this object. A value of zero indicates that this IP Management Entry does not identify a Well-Known Protocols Access Specifier.
INT t11FcSpPoLastNotifyType	1.3.6.1.2.1.178.1.5.2.1.3	INTEGER	read-only	An indication of which of the following types of notification is currently being/was most recently generated for the Fabric: 'activation' -- t11FcSpPoNotifyActivation 'activateFail' -- t11FcSpPoNotifyActivateFail 'deactivation' -- t11FcSpPoNotifyDeactivation 'deactivateFail' -- t11FcSpPoNotifyDeactivateFail The value 'none' indicates that none of these types of notifications have been generated since the last restart of the network management system, and therefore that the corresponding instances of: t11FcSpPoRequestSource, t11FcSpPoReasonCode, t11FcSpPoCtCommandString, t11FcSpPoReasonCodeExp, and t11FcSpPoReasonVendorCode are irrelevant.
t11FcSpPolicyMIB	1.3.6.1.2.1.178			This MIB module specifies the management information required to manage Fabric Policies as defined by Fibre Channel's FC-SP specification. FC-SP uses the term 'Policy Objects', sometimes abbreviated to just 'Objects', to refer to containers used to hold the data by which Fabric Policies are specified/stored. This obviously has the potential to cause confusion between 'Policy Objects' and 'MIB objects'. The DESCRIPTIONs in this MIB module attempt to avoid such confusion by the use of different adjectives and capitalization, even though such mechanisms are less effective when used in descriptors. Some types of Policy Objects contain multiple items of information, each of which are held in the same format within the Policy Object. In such cases, FC-SP uses the term 'Entry' to describe each instance of the common format. For example, FC-SP defines an Attribute Policy Object as containing one or more 'Attribute Entries'. Again, this MIB module attempts to avoid confusion by the use of adjectives and capitalization to distinguish an Entry within a Policy Object from an entry within a MIB table. A Fabric's database of Policy Objects consists of a set of active Objects that are to be enforced by that Fabric, as well as non-active Objects that are not enforced. Operations defined (in FC-SP) for Policy Management are: - Add/Get/Remove operations on individual non-active Policy Objects, - Activate/Deactivate operations on a Policy Summary Object, and - Get operations on the active Policy Summary Object and/or on individual active Policy Objects. This MIB module has five parts: 1) Active Policy Objects - read-only MIB objects representing the set of active Policy Objects for each Fabric, 2) Activate/Deactivate Operations - a read-write MIB object to invoke an Activate operation of the policies specified via a non-active Policy Summary Object, and - a read-write MIB object to invoke a Deactivate operation. 3) Non-active Policy Objects - read-create MIB objects to allow the creation of non-active Policy Summary Objects (which reference non-active Policy Objects), and - read-create MIB objects representing non-active Policy Objects. 4) Statistics 5) Control information and Notifications Copyright (C) The IETF Trust (2008). This version of this MIB module is part of RFC 5324; see the RFC itself for full legal notices.
t11FcSpPoMIBCompliance	1.3.6.1.2.1.178.2.1.1			The compliance statement for entities that support the Fabric Policies defined in FC-SP,
t11FcSpPoMIBCompliances	1.3.6.1.2.1.178.2.1
t11FcSpPoMIBConformance	1.3.6.1.2.1.178.2
t11FcSpPoMIBGroups	1.3.6.1.2.1.178.2.2
t11FcSpPoMIBNotifications	1.3.6.1.2.1.178.0
t11FcSpPoMIBObjects	1.3.6.1.2.1.178.1
t11FcSpPoNaAttribEntry	1.3.6.1.2.1.178.1.3.9.1		not-accessible	Each entry contains information about one Attribute Entry contained within an Attribute Policy Object that is non-active within the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. For some types of Attribute Policy Objects, it is valuable to break out some semantically significant parts of the Policy Object's value into their own individual MIB objects; for example, to extract the one or more individual Authentication Protocol Identifiers and associated Authentication Protocol Parameters out of an Attribute containing a 'AUTH_Negotiate Message Payload'. For such types, another MIB table is defined to hold the extracted values in MIB objects specific to the Attribute Policy Object's type. In such cases, the t11FcSpPoNaAttribExtension object in this table points to the other MIB table. If the value of one Attribute Entry is too large (more than 256 bytes) to be contained within the value of one instance of t11FcSpPoNaAttribValue, then one row in this table contains the first 256 bytes, and one (or more) other row(s) in this table contain the rest of the value. The StorageType of a row in this table is specified by the instance of t11FcSpPoStorageType that is INDEX-ed by the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
U32 t11FcSpPoNaAttribEntryIndex	1.3.6.1.2.1.178.1.3.9.1.2	Unsigned32	not-accessible	A unique value to distinguish this Attribute Entry from other Attribute Entries contained in the same Attribute Policy Object.
OID t11FcSpPoNaAttribExtension	1.3.6.1.2.1.178.1.3.9.1.6	OBJECT IDENTIFIER	read-only	For some types of Attribute Policy Object, the value of this MIB object points to type-specific MIB objects that contain individual/broken-out parts of the Attribute Policy Object's value. If this object doesn't point to such type-specific MIB objects, then it contains the value: zeroDotZero. In particular, when the value of t11FcSpPoNaAttribType indicates 'AUTH_Negotiate Message Payload', one or more Authentication Protocol Identifiers and their associated Authentication Protocol Parameters are embedded within the value of the corresponding instance of t11FcSpPoNaAttribValue; MIB objects to contain these individual values are defined in the t11FcSpPoAuthProtTable. Thus, for an 'AUTH_Negotiate Message Payload' Attribute, the value of this object would contain the OID of t11FcSpPoNaAuthProtTable. When the value of this object is not zeroDotZero, then the same underlying management data has its value contained in both the individual/broken-out parts pointed to by this object and in the corresponding instance of t11FcSpPoNaAttribValue. Thus, after any modification of the underlying management data, e.g., after a Set operation to the value of either MIB representation, then that modification is reflected in the values of both MIB representations.
T11 t11FcSpPoNaAttribName	1.3.6.1.2.1.178.1.3.9.1.1	T11FcSpAlphaNumName	not-accessible	The name of the Attribute Policy Object containing one or more Attribute Entries.
U32 t11FcSpPoNaAttribPartIndex	1.3.6.1.2.1.178.1.3.9.1.3	Unsigned32	not-accessible	When the value of an Attribute Entry is shorter than 257 bytes, the whole value is contained in one instance of t11FcSpPoNaAttribValue, and the value of this object is 1. If the value of an Attribute Entry is longer than 256 bytes, then that value is divided up on 256-byte boundaries such that all parts are 256 bytes long except the last part which is shorter if necessary, with each such part contained in a separate row of this table, and the value of this object is set to the part number. That is, this object has the value of 1 for bytes 0-255, the value of 2 for bytes 256-511, etc.
ROW t11FcSpPoNaAttribRowStatus	1.3.6.1.2.1.178.1.3.9.1.7	RowStatus	read-create	The status of this row. Values of object instances within the row can be modified at any time.
t11FcSpPoNaAttribTable	1.3.6.1.2.1.178.1.3.9		not-accessible	A table of the Attribute Policy Objects being used within non-active Policy Objects. A non-active Attribute Policy Object is represented by all the Attribute Entries in this table that have the same value of t11FcSpPoNaAttribName.
U32 t11FcSpPoNaAttribType	1.3.6.1.2.1.178.1.3.9.1.4	Unsigned32	read-create	The type of attribute. The first type to be defined is: t11FcSpPoNaAttribType t11FcSpPoNaAttribValue ===================== ====================== '00000001'h The AUTH_Negotiate Message Payload
OCT t11FcSpPoNaAttribValue	1.3.6.1.2.1.178.1.3.9.1.5	OCTET STRING	read-create	The value of an Attribute Entry is divided up on 256-byte boundaries such that all parts are 256 bytes long except the last part, which is shorter if necessary, and each such part is contained in a separate instance of this object. When the value of the corresponding instance of t11FcSpPoNaAttribExtension is not zeroDotZero, then the same underlying management data has its value contained both in this object and in the individual/broken-out parts pointed to by t11FcSpPoNaAttribExtension. Thus, after any modification of the underlying management data, e.g., after a Set operation to the value of either MIB representation, then that modification is reflected in the values of both MIB representations.
t11FcSpPoNaAuthProtEntry	1.3.6.1.2.1.178.1.3.10.1		not-accessible	Each row contains information about an Authentication Protocol that is extracted out of the Attribute Entry (identified by t11FcSpPoNaAttribEntryIndex) of the non-active Policy Attribute Object (identified by t11FcSpPoNaAttribName) for the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. If the value of one Attribute Protocol Parameters string is too large (more than 256 bytes) to be contained within the value of one instance of t11FcSpPoNaAuthProtParams, then one row in this table contains the first 256 bytes, and one (or more) other row(s) in this table contain the rest of the value. The same underlying management data that is represented in rows of this table is also represented by the corresponding instances of t11FcSpPoNaAttribValue. Thus, after any modification of the underlying management data, e.g., after a Set operation to the value of either MIB representation, then that modification is reflected in the values of both MIB representations.
U32 t11FcSpPoNaAuthProtIdentifier	1.3.6.1.2.1.178.1.3.10.1.1	Unsigned32	not-accessible	The Authentication Protocol Identifier: 1 = DH-CHAP 3 = FCPAP 4 = IKEv2 5 = IKEv2-AUTH 240 thru 255 = Vendor Specific Protocols all other values are 'Reserved' (by T11).
OCT t11FcSpPoNaAuthProtParams	1.3.6.1.2.1.178.1.3.10.1.3	OCTET STRING	read-create	The value of an Authentication Protocol Parameters string is divided up on 256-byte boundaries such that all parts are 256 bytes long except the last part, which is shorter if necessary, and each such part is contained in a separate instance of this object.
U32 t11FcSpPoNaAuthProtPartIndex	1.3.6.1.2.1.178.1.3.10.1.2	Unsigned32	not-accessible	When the value of an Attribute Protocol Parameters string is shorter than 257 bytes, the whole value is contained in one instance of t11FcSpPoNaAuthProtParams, and the value of this object is 1. (This includes the case when the Attribute Protocol Parameters string is zero bytes in length.) If the value of an Authentication Protocol Parameters string is longer than 256 bytes, then that value is divided up on 256-byte boundaries such that all parts are 256 bytes long except the last part, which is shorter if necessary, with each such part contained in a separate row of this table, and the value of this object is set to the part number. That is, this object has the value of 1 for bytes 0-255, the value of 2 for bytes 256-511, etc.
ROW t11FcSpPoNaAuthProtRowStatus	1.3.6.1.2.1.178.1.3.10.1.4	RowStatus	read-create	The status of this row. Values of object instances within the row can be modified at any time.
t11FcSpPoNaAuthProtTable	1.3.6.1.2.1.178.1.3.10		not-accessible	A table of Authentication Protocol Identifier and Authentication Protocol Parameters that are embedded in Attribute Policy Objects being used within non-active Policy Objects. This table is used for Attribute Entries of Attribute Policy Objects for which the value of t11FcSpPoNaAttribType indicates 'AUTH_Negotiate Message Payload' and the value of t11FcSpPoNaAttribExtension contains the OID of this table.
t11FcSpPoNaCtDescrEntry	1.3.6.1.2.1.178.1.3.5.1		not-accessible	Each entry contains information about one Common Transport Access Descriptor of an non-active Common Transport Access Specifier used within the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. The StorageType of a row in this table is specified by the instance of t11FcSpPoStorageType that is INDEX-ed by the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
BIT t11FcSpPoNaCtDescrFlags	1.3.6.1.2.1.178.1.3.5.1.3	Bits	read-create	The flag bits that specify how access is to be limited by this Common Transport Access Descriptor: - allow -- access to the specified Generic Service and Server is allowed if this bit is set, and is to be denied if this bit is not set. - gsTypeWildcard -- if this bit is set, the Generic Service to be allowed/denied is specified by the value of t11FcSpPoNaCtDescrGsType, and the gsSubTypeWildcard bit must not also be set. - gsSubTypeWildcard -- if this bit is set, the Generic Service to be allowed/denied is specified by the value of t11FcSpPoNaCtDescrGsSubType, and the gsTypeWildcard bit must not also be set. - readOnly -- if this bit is set, then access is to be granted only for reading.
OCT t11FcSpPoNaCtDescrGsSubType	1.3.6.1.2.1.178.1.3.5.1.5	OCTET STRING	read-create	The GS_Subtype of the Generic Server (e.g., the Fabric Zone Server) that is subject to access control. This value is ignored if the gsSubTypeWildcard bit is not set in the corresponding value of t11FcSpPoNaCtDescrFlags.
OCT t11FcSpPoNaCtDescrGsType	1.3.6.1.2.1.178.1.3.5.1.4	OCTET STRING	read-create	The GS_Type of the Generic Service (e.g., the FC-GS-5 Management Service) that is subject to access control. This value is ignored if the gsTypeWildcard bit is not set in the corresponding value of t11FcSpPoNaCtDescrFlags.
U32 t11FcSpPoNaCtDescrIndex	1.3.6.1.2.1.178.1.3.5.1.2	Unsigned32	not-accessible	An index value that uniquely identifies a particular Common Transport Access Descriptor within a Common Transport Access Specifier.
ROW t11FcSpPoNaCtDescrRowStatus	1.3.6.1.2.1.178.1.3.5.1.6	RowStatus	read-create	The status of this row. Values of object instances within the row can be modified at any time.
U32 t11FcSpPoNaCtDescrSpecifierIndex	1.3.6.1.2.1.178.1.3.5.1.1	Unsigned32	not-accessible	An index value that uniquely identifies a particular Common Transport Access Specifier within a Fabric.
t11FcSpPoNaCtDescrTable	1.3.6.1.2.1.178.1.3.5		not-accessible	A table of Common Transport Access Descriptors referenced by non-active Policy Objects. A Common Transport Access Specifier is a list of Common Transport Access Descriptors that specify whether a Node is allowed to access a Generic Service or Sub-Server. A non-active Common Transport Access Specifier is represented by all rows of this table that have the same values of fcmInstanceIndex, t11FcSpPoFabricIndex, and t11FcSpPoNaCtDescrSpecifierIndex.
T11 t11FcSpPoNaIpMgmtAttribute	1.3.6.1.2.1.178.1.3.7.1.6	T11FcSpAlphaNumNameOrAbsent	read-create	The name of a non-active Attribute Policy Object that is defined for this IP Management entry. The zero-length string indicates that no non-active Attribute Policy Object is defined for it. The effect of having no rows in the t11FcSpPoNaAttribTable for which the value of t11FcSpPoNaAttribName is the same as the value of this object, is the same as this object's value being the zero-length string.
t11FcSpPoNaIpMgmtEntry	1.3.6.1.2.1.178.1.3.7.1		not-accessible	Each entry contains information about one IP Management entry within a non-active IP Management List Object for the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. The Policy Object Name of an IP Management Entry Policy Object is either an IPv6 Address Range or an IPv4 Address Range. In a Fabric's database of Policy Objects, every Policy Object Name, including these Internet address ranges, is represented as a (T11FcSpPolicyNameType, T11FcSpPolicyName) tuple. In contrast, this MIB module uses the conventional MIB syntax for IP addresses, and therefore represents the Policy Object Name of an IP Management Entry Policy Object as a (InetAddressType, InetAddress, InetAddress) tuple. In theory, the use of t11FcSpPoNaIpMgmtEntryNameLow and t11FcSpPoNaIpMgmtEntryNameHigh, which have the syntax of InetAddress, in the INDEX could cause the need for excessively long OIDs. In practice, this can't happen because FC-SP doesn't allow these objects to be specified as DNS names. The StorageType of a row in this table is specified by the instance of t11FcSpPoStorageType that is INDEX-ed by the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
IP t11FcSpPoNaIpMgmtEntryNameHigh	1.3.6.1.2.1.178.1.3.7.1.4	InetAddress	not-accessible	The higher end of an Internet address range. The type of this address is given by the corresponding instance of t11FcSpPoNaIpMgmtEntryNameType. The combination of t11FcSpPoNaIpMgmtEntryNameType, t11FcSpPoNaIpMgmtNameLow, and t11FcSpPoNaIpMgmtNameHigh specify the Internet address range of this IP Management Entry in the IP Management List Object.
IP t11FcSpPoNaIpMgmtEntryNameLow	1.3.6.1.2.1.178.1.3.7.1.3	InetAddress	not-accessible	The lower end of an Internet address range. The type of this address is given by the corresponding instance of t11FcSpPoNaIpMgmtEntryNameType. The combination of t11FcSpPoNaIpMgmtEntryNameType, t11FcSpPoNaIpMgmtNameLow, and t11FcSpPoIpMgmtNameHigh specify the Internet address range of this IP Management Entry in the IP Management List Object.
IPt t11FcSpPoNaIpMgmtEntryNameType	1.3.6.1.2.1.178.1.3.7.1.2	InetAddressType	not-accessible	The combination of t11FcSpPoNaIpMgmtEntryNameType, t11FcSpPoNaIpMgmtNameLow, and t11FcSpPoNaIpMgmtNameHigh specify the Internet address range of this IP Management Entry in the IP Management List Object. The FC-SP specification does not allow this address to be specified using a DNS domain name, nor does it allow the specification of zone indexes. Therefore, the type of address must be one of: 'ipv4' or 'ipv6'.
T11 t11FcSpPoNaIpMgmtListName	1.3.6.1.2.1.178.1.3.7.1.1	T11FcSpAlphaNumName	not-accessible	The name of a non-active Node Membership List Object.
ROW t11FcSpPoNaIpMgmtRowStatus	1.3.6.1.2.1.178.1.3.7.1.7	RowStatus	read-create	The status of this row. Values of object instances within the row can be modified at any time.
t11FcSpPoNaIpMgmtTable	1.3.6.1.2.1.178.1.3.7		not-accessible	A table of IP Management Entries in non-active IP Management List Objects. The IP Management List Object is a Fabric-wide Policy Object that describes which IP hosts are allowed to manage a Fabric. One non-active IP Management List Object is represented by all rows of this table that have the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
U32 t11FcSpPoNaIpMgmtWkpIndex	1.3.6.1.2.1.178.1.3.7.1.5	Unsigned32	read-create	This object identifies the restrictions for IP management access by IP hosts in this range of IP addresses. The restrictions are specified as the set of Well-Known Protocols Access Descriptors contained in those rows of the t11FcSpPoNaWkpDescrTable for which the value of t11FcSpPoNaWkpDescrSpecifierIndx is the same as the value of this object. If there are no such rows or if the value of this object is zero, then this IP Management Entry does not identify any Well-Known Protocols Access restrictions.
T11 t11FcSpPoNaNoMembAttribute	1.3.6.1.2.1.178.1.3.4.1.6	T11FcSpAlphaNumNameOrAbsent	read-create	The name of a non-active Attribute Policy Object that is defined for this Node. The zero-length string indicates that no non-active Attribute Policy Object is defined for this Node. The effect of having no rows in the t11FcSpPoNaAttribTable for which the value of t11FcSpPoNaAttribName is the same as the value of this object, is the same as this object's value being the zero-length string.
U32 t11FcSpPoNaNoMembCtAccessIndex	1.3.6.1.2.1.178.1.3.4.1.5	Unsigned32	read-create	If the value of this object is zero, then access by this Node to Generic Services is not limited by a Common Transport Access Specifier. Otherwise, the limits are specified by the set of Common Transport Access Descriptors contained in those rows of the t11FcSpPoNaCtDescrTable for which the value of t11FcSpPoNaCtDescrSpecifierIndex is the same as the value of this object. No such rows in t11FcSpPoNaCtDescrTable have the same effect as this object's value being zero.
t11FcSpPoNaNoMembEntry	1.3.6.1.2.1.178.1.3.4.1		not-accessible	Each entry contains information about one Node Entry of a non-active Node Membership List Object for the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. The StorageType of a row in this table is specified by the instance of t11FcSpPoStorageType that is INDEX-ed by the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
BIT t11FcSpPoNaNoMembFlags	1.3.6.1.2.1.178.1.3.4.1.4	Bits	read-create	Configurable options in respect to the administration of Policy Objects at this Node: 'scsiEnclosureAccess' - the Node is allowed to control any Switch through SCSI Enclosure Services if this bit is set. If a Switch does not support SCSI Enclosure Services, this bit is ignored. 'authenticationRequired' - the Node is required to authenticate itself to any Switch to which it is connected if and only if this bit is set.
T11 t11FcSpPoNaNoMembListName	1.3.6.1.2.1.178.1.3.4.1.1	T11FcSpAlphaNumName	not-accessible	The name of the non-active Node Membership List Object.
FCN t11FcSpPoNaNoMembNodeName	1.3.6.1.2.1.178.1.3.4.1.3	FcNameIdOrZero	not-accessible	If the value of t11FcSpPoNaNoMembNodeNameType is 'wildcard' or 'restrictedWildcard', this object has the value '0000000000000000'h. Otherwise, the combination of t11FcSpPoNaNoMembNodeNameType and this object specify the name of this Node Entry is the active Node Membership List Object.
T11 t11FcSpPoNaNoMembNodeNameType	1.3.6.1.2.1.178.1.3.4.1.2	T11FcSpPolicyNameType	not-accessible	If the value of this object is 'wildcard' or 'restrictedWildcard', this Node Entry applies to Nodes not explicitly named in the Node Membership List Object. Otherwise, the combination of this object and t11FcSpPoNaNoMembNodeName specify the name of this Node Entry in the active Node Membership List Object. A Node is identified by its Node Name or by one or more of its Port Names. Restricted membership means that a Node is not allowed to be connected to the Fabric unless allowed by a specific Switch Connectivity Object. Unrestricted membership means that a Node is allowed to be connected to the Fabric unless disallowed by a specific Switch Connectivity Object.
ROW t11FcSpPoNaNoMembRowStatus	1.3.6.1.2.1.178.1.3.4.1.7	RowStatus	read-create	The status of this row. Values of object instances within the row can be modified at any time.
t11FcSpPoNaNoMembTable	1.3.6.1.2.1.178.1.3.4		not-accessible	A table of Node Entries in non-active Node Membership List Objects. One Node Membership List Object is represented by all the rows in this table that have the same value of t11FcSpPoNaNoMembListName.
t11FcSpPoNaSummaryEntry	1.3.6.1.2.1.178.1.3.1.1		not-accessible	Each entry contains information about one non-active Policy Object within a non-active Policy Summary Object defined for potential use on the Fabric identified by t11FcSpPoFabricIndex, and managed within the Fibre Channel management instance identified by fcmInstanceIndex. A non-active Policy Summary Object is described by a set of entries in this table that have the same value of t11FcSpPoNaSummaryName. As and when a Policy Summary Object is activated using the t11FcSpPoOperActivate object, if the activation is successful, existing rows (if any) in MIB tables for active Policy Objects are deleted and replaced by the appropriate new set of rows. Existing rows in this table and/or in other tables for non-active Policy Objects are not affected by the activate operation. The StorageType of a row in this table is specified by the instance of t11FcSpPoStorageType that is INDEX-ed by the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
T11 t11FcSpPoNaSummaryHashFormat	1.3.6.1.2.1.178.1.3.1.1.7	T11FcSpPolicyHashFormat	read-only	The format of this Policy Object's hash value as contained in the corresponding instance of the t11FcSpPoNaSummaryHashValue object.
T11 t11FcSpPoNaSummaryHashStatus	1.3.6.1.2.1.178.1.3.1.1.6	T11FcSpHashCalculationStatus	read-create	When read, the value of this object is either: correct -- the corresponding instance of t11FcSpPoNaSummaryHashValue contains the correct value; or stale -- the corresponding instance of t11FcSpPoNaSummaryHashValue contains a stale (possibly incorrect) value; Writing a value of 'calculate' is a request to re-calculate and update the value of the corresponding instance of t11FcSpPoNaSummaryHashValue. Writing a value of 'correct' or 'stale' to this object is an error (e.g., 'wrongValue').
T11 t11FcSpPoNaSummaryHashValue	1.3.6.1.2.1.178.1.3.1.1.8	T11FcSpPolicyHashValue	read-only	The hash value of this Policy Object, in the format identified by the corresponding instance of the t11FcSpPoNaSummaryHashFormat object.
T11 t11FcSpPoNaSummaryName	1.3.6.1.2.1.178.1.3.1.1.1	T11FcSpAlphaNumName	not-accessible	The name of the non-active Policy Summary Object that contains this Policy Object.
U32 t11FcSpPoNaSummaryPolicyIndex	1.3.6.1.2.1.178.1.3.1.1.3	Unsigned32	not-accessible	A unique integer value to distinguish this Policy Object from any others that have the same type and that are contained in the same Policy Summary Object.
T11 t11FcSpPoNaSummaryPolicyName	1.3.6.1.2.1.178.1.3.1.1.5	T11FcSpPolicyName	read-create	The combination of t11FcSpPoNaSummaryPolicyNameType and t11FcSpPoNaSummaryPolicyName specify the name of the non-active Policy Object identified by this row.
T11 t11FcSpPoNaSummaryPolicyNameType	1.3.6.1.2.1.178.1.3.1.1.4	T11FcSpPolicyNameType	read-create	The combination of t11FcSpPoNaSummaryPolicyNameType and t11FcSpPoNaSummaryPolicyName specify the name of the non-active Policy Object identified by this row. The type of name must be 'nodeName' if the value of the corresponding instance of t11FcSpPoNaSummaryPolicyType is 'switchConnectivity', or 'alphaNumericName' otherwise.
T11 t11FcSpPoNaSummaryPolicyType	1.3.6.1.2.1.178.1.3.1.1.2	T11FcSpPolicyObjectType	not-accessible	The 'Identifier' (i.e., the type) of this Policy Object.
ROW t11FcSpPoNaSummaryRowStatus	1.3.6.1.2.1.178.1.3.1.1.9	RowStatus	read-create	The status of this row. Before a row in this table can have 'active' status, a non-Active Policy Object must already be represented in the table corresponding to the value of t11FcSpPoNaSummaryPolicyType with the name given by the combination of t11FcSpPoNaSummaryPolicyNameType and t11FcSpPoNaSummaryPolicyName. If such a Policy Object gets deleted from the relevant table, the row in this table must also get deleted. When a row has 'active' status, the only write-able MIB objects in this table are t11FcSpPoNaSummaryHashStatus and t11FcSpPoNaSummaryRowStatus.
t11FcSpPoNaSummaryTable	1.3.6.1.2.1.178.1.3.1		not-accessible	A table of non-active Policy Summary Objects available to be activated. The functionality of this table deviates slightly from FC-SP in that FC-SP specifies that the only Policy Summary Object is the Active one, i.e., FC-SP does not store non-active Policy Summary Objects in the Policy Database. Instead, FC-SP requires a new Policy Summary Object to be created for, and embedded within, every Activate (APS) request. Thus, the newly created Policy Summary Object outlasts the APS request only as the new active Policy Summary Object and only if the APS succeeds. In contrast, the Activate operation provided by this MIB module consists of two steps: 1) create a non-active Policy Summary Object as a set of entries in this table describing a new configuration; 2) activate a Policy Summary Object (stored as a set of entries in this table) using t11FcSpPoOperActivate. These two steps are only loosely connected, i.e., the result of the first operation is a non-active Policy Summary Object that is retained (in this table) even if it isn't immediately activated. Even after an attempt to activate it succeeds or fails, a non-active Policy Summary Object is not deleted, but is retained and still available for subsequent modification/re-use.
U32 t11FcSpPoNaSwConnAllowedIndex	1.3.6.1.2.1.178.1.3.6.1.4	Unsigned32	not-accessible	When multiple rows in this table refer to different 'Allowed Switches' or to different 'Allowed Nodes' for the same port(s) in the same Switch Connectivity Object, this object provides a unique index value to distinguish between such rows.
FCN t11FcSpPoNaSwConnAllowedName	1.3.6.1.2.1.178.1.3.6.1.6	FcNameIdOrZero	read-create	If t11FcSpPoNaSwConnAllowedNameType has the value 'wildcard' or 'restrictedWildcard', this object has the value '0000000000000000'h. Otherwise, the combination of t11FcSpPoNaSwConnAllowedNameType and t11FcSpPoNaSwConnAllowedName specify the name of: - a Switch (if t11FcSpPoNaSwConnAllowedType = 'switch'), or - a Node (if t11FcSpPoNaSwConnAllowedType = 'node') to which connectivity is allowed/not allowed.
T11 t11FcSpPoNaSwConnAllowedNameType	1.3.6.1.2.1.178.1.3.6.1.5	T11FcSpPolicyNameType	read-create	If the value of this object is 'wildcard' or 'restrictedWildcard', this row specifies whether connectivity is allowed/not allowed with entities not explicitly named by other rows. Otherwise, the combination of t11FcSpPoNaSwConnAllowedNameType and t11FcSpPoNaSwConnAllowedName specify the name of: - a Switch (if t11FcSpPoNaSwConnAllowedType = 'switch'), or - a Node (if t11FcSpPoNaSwConnAllowedType = 'node') to which connectivity is allowed/not allowed.
INT t11FcSpPoNaSwConnAllowedType	1.3.6.1.2.1.178.1.3.6.1.2	INTEGER	not-accessible	This object specifies whether this row refers to an 'Allowed Switch' that concerns Switch-to-Switch connectivity or an 'Allowed Node' that concerns Switch-to-Node connectivity. Consequently, this object's value indicates whether the corresponding instance of t11FcSpPoNaSwConnAllowedName specifies the name of a Switch or the name of a Node.
t11FcSpPoNaSwConnEntry	1.3.6.1.2.1.178.1.3.6.1		not-accessible	Each entry contains the name of a Switch/Node with which any port of a particular Switch on a particular Fabric, or a particular port on that Switch, is allowed or not allowed to be connected. The particular Fabric is identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. The StorageType of a row in this table is specified by the instance of t11FcSpPoStorageType that is INDEX-ed by the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
FCN t11FcSpPoNaSwConnPortNameOrAll	1.3.6.1.2.1.178.1.3.6.1.3	FcNameIdOrZero	not-accessible	This object specifies either the particular port on which this topology restriction applies, or if the value is the zero-length string, that the topology restriction applies to all ports of the Switch. In other words, if this object's value contains the name of a port, then this row represents a 'Port Connectivity Entry' (as described in FC-SP) within a Switch Connectivity Object.
ROW t11FcSpPoNaSwConnRowStatus	1.3.6.1.2.1.178.1.3.6.1.7	RowStatus	read-create	The status of this row. Values of object instances within the row can be modified at any time.
FCN t11FcSpPoNaSwConnSwitchName	1.3.6.1.2.1.178.1.3.6.1.1	FcNameIdOrZero	not-accessible	The name of the Switch for which this Switch Connectivity Object specifies topology restrictions.
t11FcSpPoNaSwConnTable	1.3.6.1.2.1.178.1.3.6		not-accessible	A table of non-active Switch Connectivity Objects. A Switch Connectivity Object defines to which other Switches or Nodes a particular Switch may/may not be connected at the Node level and/or at the Port level.
t11FcSpPoNaSwListEntry	1.3.6.1.2.1.178.1.3.2.1		not-accessible	Each entry contains information about one non-active Switch Membership List Object for the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. The StorageType of a row in this table is specified by the instance of t11FcSpPoStorageType that is INDEX-ed by the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
FCN t11FcSpPoNaSwListFabricName	1.3.6.1.2.1.178.1.3.2.1.2	FcNameIdOrZero	read-create	The administratively specified Fabric_Name. This value is meaningful only when static Domain_IDs are used in a Fabric. If Static Domain_IDs are not used, the Fabric_Name is dynamically determined, in which case the value of this object can be '0000000000000000'h or the zero-length string.
T11 t11FcSpPoNaSwListName	1.3.6.1.2.1.178.1.3.2.1.1	T11FcSpAlphaNumName	not-accessible	The name of the Switch Membership List Object.
ROW t11FcSpPoNaSwListRowStatus	1.3.6.1.2.1.178.1.3.2.1.3	RowStatus	read-create	The status of this row. Values of object instances within the row can be modified at any time. If a row in this table is deleted, any row in the t11FcSpPoNaSwMembTable for the same Switch Membership List Object will also get deleted.
t11FcSpPoNaSwListTable	1.3.6.1.2.1.178.1.3.2		not-accessible	A table of non-active Switch Membership List Objects.
T11 t11FcSpPoNaSwMembAttribute	1.3.6.1.2.1.178.1.3.3.1.7	T11FcSpAlphaNumNameOrAbsent	read-create	The name of a non-active Attribute Policy Object that is defined for this Switch. The zero-length string indicates that no non-active Attribute Policy Object is defined for this Switch. The effect of having no rows in the t11FcSpPoNaAttribTable for which the value of t11FcSpPoNaAttribName is the same as the value of this object, is the same as this object's value being the zero-length string.
BIT t11FcSpPoNaSwMembAuthBehaviour	1.3.6.1.2.1.178.1.3.3.1.6	Bits	read-create	The authentication behaviour of the Switch: 'mustAuthenticate' - if this bit is set, all connections between this Switch and neighbor Switches must be authenticated. 'rejectIsFailure' - if this bit is set, the rejection of an AUTH_Negotiate message must be considered as an authentication failure by this Switch.
FCD t11FcSpPoNaSwMembDomainID	1.3.6.1.2.1.178.1.3.3.1.4	FcDomainIdOrZero	read-create	The Domain_ID to be used when either the 'staticDomainID' bit or the 'insistentDomainID' bit is set in the corresponding value of t11FcSpPoNaSwMembFlags.
t11FcSpPoNaSwMembEntry	1.3.6.1.2.1.178.1.3.3.1		not-accessible	Each entry contains information about one Switch that is listed in a Switch Entry of a non-active Switch Membership List Object for the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. A row cannot exist unless there is a row in t11FcSpPoNaSwListTable for the given Switch Membership List Object, i.e., the row in t11FcSpPoNaSwListTable for a Switch Membership List Object must be created before (or simultaneously with) a row in this table for a Switch Entry in that Switch Membership List Object, and when a row in t11FcSpPoNaSwListTable is deleted, all rows in this table for Switch Entries in that Switch Membership List Object also get deleted. The StorageType of a row in this table is specified by the instance of t11FcSpPoStorageType that is INDEX-ed by the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
BIT t11FcSpPoNaSwMembFlags	1.3.6.1.2.1.178.1.3.3.1.3	Bits	read-create	Configurable options in respect to the administration of Policy Objects at this Switch: 'staticDomainID' - the Switch uses the 'Static Domain_IDs behavior' (as defined in FC-SW-4) when this bit is set. This bit should have the same setting for all Switches in a Fabric's Switch Membership List Object, or else the Fabric will partition. If this bit is set, the 'insistentDomainID' bit must not be set. 'insistentDomainID' - if this bit is set, the Switch uses the 'Insistent Domain_IDs behavior' (as defined in FC-SW-4), and the 'staticDomainID' bit must not be set. 'serialPortsAccess' - the Switch allows management through serial ports when and only when this bit is set. 'physicalPortsAccess' - the Switch allows management through the physical panel when and only when this bit is set. 'managerRole' - the Switch is allowed to change the Fabric Policy configuration (on receipt of any of the EACA, ESFC, EUFC, ACA, SFC, or UFC SW_ILSs) if this bit is set.
INT t11FcSpPoNaSwMembPolicyDataRole	1.3.6.1.2.1.178.1.3.3.1.5	INTEGER	read-create	The role of the Switch in terms of which Policy data it retains/maintains: 'client' - the Switch operates as a Client Switch. A Client Switch maintains its own Switch Connectivity Object and all Fabric-wide List Objects. If FC-SP Zoning is used, a Client Switch maintains only the subset of the Active Zone Set that it requires to enforce the current Fabric Zoning configuration. 'autonomous' - the Switch operates as an Autonomous Switch. An Autonomous Switch maintains its own Switch Connectivity Object and all Fabric-wide List Objects. This is the same as 'client' except that if FC-SP Zoning is used, an Autonomous Switch maintains a complete copy of the Fabric Zoning Database. 'server' - the Switch operates as a Server Switch. A Server Switch maintains all Fabric-wide List Objects and the Switch Connectivity Objects of each Switch in the Fabric. If FC-SP Zoning is used, a Server Switch maintains a complete copy of the Fabric Zoning Database.
ROW t11FcSpPoNaSwMembRowStatus	1.3.6.1.2.1.178.1.3.3.1.8	RowStatus	read-create	The status of this row. Values of object instances within the row can be modified at any time. A row cannot exist unless there is a row in the t11FcSpPoNaSwListTable for the Switch Membership List Object containing the Switch Entry for this Switch, i.e., the row in t11FcSpPoNaSwListTable for a Switch Membership List Object must be created before (or simultaneously) with a row in this table for a Switch Entry in that Switch Membership List Object; and when a row in t11FcSpPoNaSwListTable is deleted, any row in this table for a Switch Entry in that Switch Membership List Object also gets deleted.
FCN t11FcSpPoNaSwMembSwitchName	1.3.6.1.2.1.178.1.3.3.1.2	FcNameIdOrZero	not-accessible	If the value of t11FcSpPoSwMembSwitchNameType is 'wildcard' or 'restrictedWildcard', this object has the value '0000000000000000'h. Otherwise, the combination of t11FcSpPoNaSwMembSwitchNameType and this object specify the Switch Name of this Switch Entry.
T11 t11FcSpPoNaSwMembSwitchNameType	1.3.6.1.2.1.178.1.3.3.1.1	T11FcSpPolicyNameType	not-accessible	If the value of this object is 'nodeName' or 'restrictedNodeName', then the combination of this object and t11FcSpPoNaSwMembSwitchName specify the Switch Name of this Switch Entry. The membership is restricted or unrestricted based on the name type. Restricted membership means that the Switch is not allowed to be part of the Fabric unless allowed by a specific Switch Connectivity Object. Unrestricted membership means that the Switch is allowed to be part of the Fabric unless disallowed by a specific Switch Connectivity Object. The values of 'wildcard' and 'restrictedWildcard' provide the means to specify whether to allow/deny membership for Switches not explicitly named in the Switch Membership List Object.
t11FcSpPoNaSwMembTable	1.3.6.1.2.1.178.1.3.3		not-accessible	A table of Switch Entries in non-active Switch Membership List Objects.
INE t11FcSpPoNaWkpDescrDestPort	1.3.6.1.2.1.178.1.3.8.1.5	InetPortNumber	read-create	When the 'destPortWildcard' bit is set in the corresponding instance of t11FcSpPoNaWkpDescrFlags, this object specifies the Destination (TCP/UDP) Port number of the Well-Known Protocol. When the 'destPortWildcard' bit is reset, this object is ignored (and can have the value zero).
t11FcSpPoNaWkpDescrEntry	1.3.6.1.2.1.178.1.3.8.1		not-accessible	Each entry contains information about one Well-Known Protocol Access Descriptor of a non-active Well-Known Protocol Access Specifier used within the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. The StorageType of a row in this table is specified by the instance of t11FcSpPoStorageType that is INDEX-ed by the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
BIT t11FcSpPoNaWkpDescrFlags	1.3.6.1.2.1.178.1.3.8.1.3	Bits	read-create	The flag bits that specify how access is to be limited by this Well-Known Protocol Access Descriptor: - allow -- IP management access using this protocol/port is allowed if this bit is set, and to be denied if this bit is not set. - wkpWildcard -- if this bit is set, the IP Protocol number of the Well-Known Protocol to be allowed/denied is specified by the value of t11FcSpPoNaWkpDescrWkpNumber. - destPortWildcard -- if this bit is set, the Destination (TCP/UDP) Port number of the Well-Known Protocol to be allowed/denied is specified by the value of t11FcSpPoNaWkpDescrDestPort. - readOnly -- if this bit is set, then access is to be granted only for reading.
U32 t11FcSpPoNaWkpDescrIndex	1.3.6.1.2.1.178.1.3.8.1.2	Unsigned32	not-accessible	An index value that uniquely identifies a particular Well-Known Protocol Access Descriptor within a non-active Well-Known Protocol Access Specifier.
ROW t11FcSpPoNaWkpDescrRowStatus	1.3.6.1.2.1.178.1.3.8.1.6	RowStatus	read-create	The status of this row. Values of object instances within the row can be modified at any time.
U32 t11FcSpPoNaWkpDescrSpecifierIndx	1.3.6.1.2.1.178.1.3.8.1.1	Unsigned32	not-accessible	An index value that uniquely identifies a particular non-active Well-Known Protocol Access Specifier within a Fabric.
t11FcSpPoNaWkpDescrTable	1.3.6.1.2.1.178.1.3.8		not-accessible	A table of the Well-Known Protocol Access Descriptors referenced from non-active Policy Objects. A Well-Known Protocol Access Specifier is a list of Well-Known Protocol Access Descriptors each of which specifies a protocol number, a port number, and/or various flags specifying how IP management access is restricted. A non-active Well-Known Protocol Transport Access Specifier is represented by all rows of this table that have the same values of fcmInstanceIndex, t11FcSpPoFabricIndex, and t11FcSpPoNaWkpDescrSpecifierIndx.
U32 t11FcSpPoNaWkpDescrWkpNumber	1.3.6.1.2.1.178.1.3.8.1.4	Unsigned32	read-create	When the 'wkpWildcard' bit is set in the corresponding instance of t11FcSpPoNaWkpDescrFlags, this object specifies the IP protocol number of the Well-Known Protocol.
T11 t11FcSpPoNoMembAttribute	1.3.6.1.2.1.178.1.1.4.1.5	T11FcSpAlphaNumNameOrAbsent	read-only	The name of an active Attribute Policy Object that is defined for this Node, or the zero-length string. The zero-length string indicates that no Attribute Policy Object is defined for this Node.
U32 t11FcSpPoNoMembCtAccessIndex	1.3.6.1.2.1.178.1.1.4.1.4	Unsigned32	read-only	If the value of this object is zero, then access by this Node to Generic Services is not limited by a Common Transport Access Specifier. Otherwise, the limits are specified by the set of Common Transport Access Descriptors contained in those rows of the t11FcSpPoCtDescrTable for the same Fabric and for which the value of t11FcSpPoCtDescrSpecifierIndex is the same as the value of this object.
t11FcSpPoNoMembEntry	1.3.6.1.2.1.178.1.1.4.1		not-accessible	Each entry contains information about one Node Entry within the active Node Membership List Object for the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex.
BIT t11FcSpPoNoMembFlags	1.3.6.1.2.1.178.1.1.4.1.3	Bits	read-only	Configurable options in respect to the administration of Policy Objects at this Node: 'scsiEnclosureAccess' - the Node is allowed to control any Switch through SCSI Enclosure Services if this bit is set. If a Switch does not support SCSI Enclosure Services, this bit is ignored. 'authenticationRequired' - the Node is required to authenticate itself to any Switch to which it is connected if and only if this bit is set.
FCN t11FcSpPoNoMembNodeName	1.3.6.1.2.1.178.1.1.4.1.2	FcNameIdOrZero	not-accessible	If the value of t11FcSpPoNoMembNodeNameType is 'wildcard' or 'restrictedWildcard', this object has the value '0000000000000000'h. Otherwise, the combination of t11FcSpPoNoMembNodeNameType and this object specify the name of this Node Entry is the active Node Membership List Object.
T11 t11FcSpPoNoMembNodeNameType	1.3.6.1.2.1.178.1.1.4.1.1	T11FcSpPolicyNameType	not-accessible	If the value of this object is 'wildcard' or 'restrictedWildcard', this Node Entry applies to Nodes not explicitly named in the Node Membership List Object. Otherwise, the combination of this object and t11FcSpPoNoMembNodeName specify the name of this Node Entry in the active Node Membership List Object. A Node is identified by its Node Name or by one or more of its Port Names. Restricted membership means that a Node is not allowed to be connected to the Fabric unless allowed by a specific Switch Connectivity Object. Unrestricted membership means that a Node is allowed to be connected to the Fabric unless disallowed by a specific Switch Connectivity Object.
t11FcSpPoNoMembTable	1.3.6.1.2.1.178.1.1.4		not-accessible	A table of Node Entries in active Node Membership List Objects. One Node Membership List Object is represented by all of the rows of this table that have the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
t11FcSpPoNonActive	1.3.6.1.2.1.178.1.3
t11FcSpPoNonActiveObjectsGroup	1.3.6.1.2.1.178.2.2.3			A collection of MIB objects that contain information about non-active Policy Objects available for activation in order to change Fibre Channel Security (FC-SP) policy.
T/F t11FcSpPoNotificationEnable	1.3.6.1.2.1.178.1.5.2.1.2	TruthValue	read-write	This object specifies whether the following types of notifications: t11FcSpPoNotifyActivation, t11FcSpPoNotifyActivateFail, t11FcSpPoNotifyDeactivation and t11FcSpPoNotifyDeactivateFail should be generated for this Fabric.
t11FcSpPoNotificationGroup	1.3.6.1.2.1.178.2.2.6			A collection of notifications of events concerning Fibre Channel Security (FC-SP) policy.
NTF t11FcSpPoNotifyActivateFail	1.3.6.1.2.1.178.0.2			This notification is generated whenever a Security Policy Server (indicated by the value of t11FcSpPoServerAddress) fails to complete the execution of an Activate Policy Summary request. The value of t11FcSpPoCtCommandString indicates the rejected request, and the values of t11FcSpPoReasonCode, t11FcSpPoReasonCodeExp, and t11FcSpPoReasonVendorCode indicate the reason for the rejection. The value of t11FcSpPoRequestSource indicates the source of the request.
NTF t11FcSpPoNotifyActivation	1.3.6.1.2.1.178.0.1			This notification is generated whenever a Security Policy Server (indicated by the value of t11FcSpPoServerAddress) successfully completes the execution of an Activate Policy Summary request. The value of t11FcSpPoRequestSource indicates the source of the APS request. The value of t11FcSpPoPolicySummaryObjName indicates the name of the activated Policy Summary Object.
NTF t11FcSpPoNotifyDeactivateFail	1.3.6.1.2.1.178.0.4			This notification is generated whenever a Security Policy Server (indicated by the value of t11FcSpPoServerAddress) fails to complete the execution of a Deactivate Policy Summary request. The value of t11FcSpPoCtCommandString indicates the rejected request, and the values of t11FcSpPoReasonCode, t11FcSpPoReasonCodeExp, and t11FcSpPoReasonVendorCode indicate the reason for the rejection. The value of t11FcSpPoRequestSource indicates the source of the request.
NTF t11FcSpPoNotifyDeactivation	1.3.6.1.2.1.178.0.3			This notification is generated whenever a Security Policy Server (indicated by the value of t11FcSpPoServerAddress) successfully completes the execution of a Deactivate Policy Summary request. The value of t11FcSpPoRequestSource indicates the source of the DPS request.
t11FcSpPoNotifyObjectsGroup	1.3.6.1.2.1.178.2.2.5			A collection of MIB objects to control the generation of notifications concerning Fibre Channel Security (FC-SP) policy, and to hold information contained in such notifications.
T11 t11FcSpPoOperActivate	1.3.6.1.2.1.178.1.2.1.1.1	T11FcSpAlphaNumName	read-write	Writing the name of a Policy Summary Object into this object is a request to activate the policy configuration described by the combination of all rows in t11FcSpPoNaSummaryTable that have that name as their value of t11FcSpPoNaSummaryName and are for the same Fabric. Before issuing such a request, the relevant rows in the t11FcSpPoNaSummaryTable must exist and represent a complete and consistent Policy Summary Object. If they do not, the request will fail, with t11FcSpPoOperResult having the 'badSummaryObject' value. When read, the value of this object is always the zero- length string. Writing to this object does not delete (or in any way affect) any rows in the MIB tables for non-active Policy Objects.
t11FcSpPoOperations	1.3.6.1.2.1.178.1.2
t11FcSpPoOperationsObjectsGroup	1.3.6.1.2.1.178.2.2.2			A collection of MIB objects that allow a new set of Fibre Channel Security (FC-SP) policies to be activated or an existing set to be deactivated.
T11 t11FcSpPoOperDeActivate	1.3.6.1.2.1.178.1.2.1.1.2	T11FcSpAlphaNumName	read-write	Writing the current value of t11FcSpPoPolicySummaryObjName into this object (for a particular Fabric) is a request to deactivate that Fabric's current policy configuration. Writing any other value into this object is an error (e.g., 'wrongValue'). When read, the value of this object is always the zero- length string.
t11FcSpPoOperEntry	1.3.6.1.2.1.178.1.2.1.1		not-accessible	Each entry allows an Activate and/or Deactivate operation to be invoked on a particular Fabric, which is managed as part of the Fibre Channel management instance identified by fcmInstanceIndex.
STR t11FcSpPoOperFailCause	1.3.6.1.2.1.178.1.2.1.1.4	SnmpAdminString	read-only	A textual message indicating the reason for the most recent activation/deactivation failure, or the zero-length string if no information is available (e.g., because the corresponding instance of t11FcSpPoOperResult has the value 'none'). When the corresponding instance of t11FcSpPoOperResult is either 'activateFailure' or 'deactivateFailure', the value of this object indicates the reason for that failure.
INT t11FcSpPoOperResult	1.3.6.1.2.1.178.1.2.1.1.3	INTEGER	read-only	This object indicates the status/result of the last activation/deactivation that was invoked via the corresponding instance of t11FcSpPoOperActivate or t11FcSpPoOperDeActivate. When the value of this object is 'inProgress', the values of the corresponding instances of t11FcSpPoOperActivate and t11FcSpPoOperDeActivate cannot be modified. The value 'badSummaryObject' indicates an activation request that did not name a complete and consistent Policy Summary Object. The value 'none' indicates activation/deactivation has not been attempted since the last restart of the management system.
t11FcSpPoOperTable	1.3.6.1.2.1.178.1.2.1		not-accessible	A table that allows Activate and Deactivate operations to be invoked for FC-SP Policies on various Fabrics. Activating a new policy configuration is a two-step process: 1) create a single Policy Summary Object as a set of rows in the t11FcSpPoNaSummaryTable specifying a set of Policy Objects that describe the new configuration; and 2) activate that Policy Summary Object using the t11FcSpPoOperActivate object defined in this table. Deactivating the current policy configuration is a one-step process: the current Policy Summary Object is deactivated using the t11FcSpPoOperDeActivate object.
T11 t11FcSpPoPolicySummaryObjName	1.3.6.1.2.1.178.1.1.1.1.2	T11FcSpAlphaNumName	read-only	The name of this Fabric's (active) Policy Summary Object.
T11 t11FcSpPoReasonCode	1.3.6.1.2.1.178.1.5.2.1.5	T11NsGs4RejectReasonCode	read-only	The reason code associated with the failure that is indicated when the value of the corresponding instance of t11FcSpPoLastNotifyType is 'activateFail' or 'deactivateFail'. For other values of t11FcSpPoLastNotifyType, the value of this object is 'none(1)'.
U32 t11FcSpPoReasonCodeExp	1.3.6.1.2.1.178.1.5.2.1.7	Unsigned32	read-only	The reason code explanation associated with the failure that is indicated when the value of the corresponding instance of t11FcSpPoLastNotifyType is 'activateFail' or 'deactivateFail'. For other values of t11FcSpPoLastNotifyType, the value of this object is zero.
OCT t11FcSpPoReasonVendorCode	1.3.6.1.2.1.178.1.5.2.1.8	OCTET STRING	read-only	The vendor-specific reason code associated with the failure that is indicated when the value of the corresponding instance of t11FcSpPoLastNotifyType is 'activateFail' or 'deactivateFail'. For other values of t11FcSpPoLastNotifyType, or if no vendor-specific reason code is available, the value of this object is the zero-length string.
FCN t11FcSpPoRequestSource	1.3.6.1.2.1.178.1.5.2.1.4	FcNameIdOrZero	read-only	The WWN of the source of the (Activate Policy Summary or Deactivate Policy Summary) request for which the current/most recent notification of the type indicated by the corresponding instance of t11FcSpPoLastNotifyType is being/was generated. If no source is available, the value of this object is the zero-length string.
FCN t11FcSpPoServerAddress	1.3.6.1.2.1.178.1.5.1	FcNameIdOrZero	accessible-for-notify	The WWN of the FC-SP Security Policy Server that received a request that is referenced in a notification.
t11FcSpPoStatistics	1.3.6.1.2.1.178.1.4
t11FcSpPoStatsEntry	1.3.6.1.2.1.178.1.4.1.1		not-accessible	A set of statistics for the FC-SP Security Policy Server on the Fabric identified by the value of t11FcSpPoFabricIndex, and managed within the Fibre Channel management instance identified by fcmInstanceIndex.
t11FcSpPoStatsObjectsGroup	1.3.6.1.2.1.178.2.2.4			A collection of MIB objects that contain statistics that can be maintained by FC-SP Security Policy Servers.
t11FcSpPoStatsTable	1.3.6.1.2.1.178.1.4.1		not-accessible	A table of statistics maintained by FC-SP Security Policy Servers.
STO t11FcSpPoStorageType	1.3.6.1.2.1.178.1.5.2.1.1	StorageType	read-write	This object specifies the memory realization of FC-SP Policy Objects and related information for a particular Fabric; specifically, for: - rows created and/or modified for the particular Fabric in these tables: t11FcSpPoNaSummaryTable t11FcSpPoNaSwListTable t11FcSpPoNaSwMembTable t11FcSpPoNaNoMembTable t11FcSpPoNaCtDescrTable t11FcSpPoNaSwConnTable t11FcSpPoNaIpMgmtTable t11FcSpPoNaWkpDescrTable t11FcSpPoNaAttribTable - the activate and deactivate actions invoked through the t11FcSpPoOperActivate and t11FcSpPoOperDeActivate objects for the particular Fabric; and - modified information contained in the same row as an instance of this object. Even if an instance of this object has the value 'permanent(4)', none of the information defined in this MIB module for the given Fabric needs to be writable.
t11FcSpPoSummaryEntry	1.3.6.1.2.1.178.1.1.2.1		not-accessible	Each entry contains information about one of the active Policy Objects listed within the Policy Summary Object for the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex. How many Policy Objects of a given type can be active at any one time for a given Fabric depends on the type, as specified in FC-SP. For some types, it is one per Fabric; for other types, more than one can be active per Fabric. In both of these cases, the absence of any entries in this table for a particular type is equivalent to there being one Policy Object of that type that is empty, e.g., a Switch Membership List Object that identifies zero Switches.
T11 t11FcSpPoSummaryHashFormat	1.3.6.1.2.1.178.1.1.2.1.4	T11FcSpPolicyHashFormat	read-only	The format of this Policy Object's hash value as contained in the corresponding instance of the t11FcSpPoSummaryHashValue object.
T11 t11FcSpPoSummaryHashValue	1.3.6.1.2.1.178.1.1.2.1.5	T11FcSpPolicyHashValue	read-only	The hash value of this Policy Object, in the format identified by the corresponding instance of the t11FcSpPoSummaryHashFormat object.
T11 t11FcSpPoSummaryPolicyName	1.3.6.1.2.1.178.1.1.2.1.2	T11FcSpPolicyName	not-accessible	The combination of t11FcSpPoSummaryPolicyNameType and t11FcSpPoSummaryPolicyName specify the name of the Policy Object contained in the Policy Summary Object.
T11 t11FcSpPoSummaryPolicyNameType	1.3.6.1.2.1.178.1.1.2.1.1	T11FcSpPolicyNameType	not-accessible	The combination of t11FcSpPoSummaryPolicyNameType and t11FcSpPoSummaryPolicyName specify the name of the Policy Object contained in the Policy Summary Object. The type of name is 'nodeName' if the value of the corresponding instance of t11FcSpPoSummaryPolicyType is 'switchConnectivity', or 'alphaNumericName' otherwise.
T11 t11FcSpPoSummaryPolicyType	1.3.6.1.2.1.178.1.1.2.1.3	T11FcSpPolicyObjectType	read-only	The 'Identifier' that specifies the type of this Policy Object.
t11FcSpPoSummaryTable	1.3.6.1.2.1.178.1.1.2		not-accessible	A table of information about active Policy Objects listed within FC-SP Policy Summary Objects.
U32 t11FcSpPoSwConnAllowedIndex	1.3.6.1.2.1.178.1.1.6.1.4	Unsigned32	not-accessible	When multiple rows in this table apply to the same port(s) in the same Switch's Switch Connectivity Object, this object provides a unique index value to distinguish between such rows.
T11 t11FcSpPoSwConnAllowedName	1.3.6.1.2.1.178.1.1.6.1.6	T11FcSpPolicyName	read-only	If the value of t11FcSpPoSwConnAllowedNameType is 'wildcard' or 'restrictedWildcard', this object has the value '0000000000000000'h. Otherwise, the combination of t11FcSpPoSwConnAllowedNameType and t11FcSpPoSwConnAllowedName specify the name of: - a Switch (if t11FcSpPoSwConnAllowedType = 'switch'), or - a Node (if t11FcSpPoSwConnAllowedType = 'node') to which connectivity is allowed/restricted.
T11 t11FcSpPoSwConnAllowedNameType	1.3.6.1.2.1.178.1.1.6.1.5	T11FcSpPolicyNameType	read-only	If the value of this object is 'wildcard' or 'restrictedWildcard', this row specifies whether connectivity is allowed/not allowed with entities not explicitly named by other rows. Otherwise, the combination of t11FcSpPoSwConnAllowedNameType and t11FcSpPoSwConnAllowedName specify the name of: - a Switch (if t11FcSpPoSwConnAllowedType = 'switch'), or - a Node (if t11FcSpPoSwConnAllowedType = 'node') to which connectivity is: - allowed by 'nodeName' and 'portName', - not allowed by 'restrictedNodeName' and 'restrictedPortName'.
INT t11FcSpPoSwConnAllowedType	1.3.6.1.2.1.178.1.1.6.1.2	INTEGER	not-accessible	This object specifies whether this row refers to Switch-to-Switch or Switch-to-Node connectivity, i.e., whether the corresponding instance of t11FcSpPoSwConnAllowedName specifies the name of a Switch or the name of a Node.
t11FcSpPoSwConnEntry	1.3.6.1.2.1.178.1.1.6.1		not-accessible	Each entry contains the name of either a Switch or a Node with which any port of a particular Switch, or a particular port of that Switch, is allowed or not allowed to be connected. The particular Switch is on the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex.
FCN t11FcSpPoSwConnPortNameOrAll	1.3.6.1.2.1.178.1.1.6.1.3	FcNameIdOrZero	not-accessible	This object specifies either the particular port to which this topology restriction applies, or if the value is the zero-length string, that the topology restriction applies to all ports on the particular Switch. In the FC-SP Policy Database, restrictions for a particular port are formatted within a Port Connectivity Entry of a Switch Connectivity Object, whereas restrictions for all ports on the Switch are specified in the main part of a Switch Connectivity Object, i.e., not in a Port Connectivity Entry.
FCN t11FcSpPoSwConnSwitchName	1.3.6.1.2.1.178.1.1.6.1.1	FcNameIdOrZero	not-accessible	The name of the particular Switch for which this Switch Connectivity Object specifies topology restrictions.
t11FcSpPoSwConnTable	1.3.6.1.2.1.178.1.1.6		not-accessible	A table of active Switch Connectivity Objects. A Switch Connectivity Object defines to which other Switches or Nodes a particular Switch may/may not be connected at the Node level and/or at the Port level.
T11 t11FcSpPoSwMembAttribute	1.3.6.1.2.1.178.1.1.3.1.7	T11FcSpAlphaNumNameOrAbsent	read-only	The name of an active Attribute Policy Object that is defined for this Switch, or the zero-length string. The zero-length string indicates that no Attribute Policy Object is defined for this Switch.
BIT t11FcSpPoSwMembAuthBehaviour	1.3.6.1.2.1.178.1.1.3.1.6	Bits	read-only	The authentication behaviour of the Switch: 'mustAuthenticate' - if this bit is set, all connections between this Switch and neighbor Switches must be authenticated. 'rejectIsFailure' - if this bit is set, the rejection of an AUTH_Negotiate message must be considered as an authentication failure by this Switch.
FCD t11FcSpPoSwMembDomainID	1.3.6.1.2.1.178.1.1.3.1.4	FcDomainIdOrZero	read-only	The specified Domain_ID value when either of the 'staticDomainID' or 'insistentDomainID' bits are set in the corresponding instance of t11FcSpPoSwMembSwitchFlags. Whenever a Fabric has Active Policy Objects, the value of the t11FamConfigDomainId object defined in the T11-FC-FABRIC-ADDR-MGR-MIB module must be read-only and reflect the value of this object.
t11FcSpPoSwMembEntry	1.3.6.1.2.1.178.1.1.3.1		not-accessible	Each entry contains information about one Switch Entry within the active Switch Membership List Object for the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex.
INT t11FcSpPoSwMembPolicyDataRole	1.3.6.1.2.1.178.1.1.3.1.5	INTEGER	read-only	The role of the Switch in terms of which Policy data it retains/maintains: 'client' - the Switch operates as a Client Switch. A Client Switch maintains its own Switch Connectivity Object and all Fabric-wide List Objects. If FC-SP Zoning is used, a Client Switch maintains only the subset of the Active Zone Set that it requires to enforce the current Fabric Zoning configuration. 'autonomous' - the Switch operates as an Autonomous Switch. An Autonomous Switch maintains its own Switch Connectivity Object and all Fabric-wide List Objects. This is the same as 'client' except that if FC-SP Zoning is used, an Autonomous Switch maintains a complete copy of the Fabric Zoning Database. 'server' - the Switch operates as a Server Switch. A Server Switch maintains all Fabric-wide List Objects and the Switch Connectivity Objects of each Switch in the Fabric. If FC-SP Zoning is used, a Server Switch maintains a complete copy of the Fabric Zoning Database.
BIT t11FcSpPoSwMembSwitchFlags	1.3.6.1.2.1.178.1.1.3.1.3	Bits	read-only	Configurable options in respect to the administration of Policy Objects at this Switch: 'staticDomainID' - if this bit is set, the Switch uses the 'Static Domain_IDs behavior' (as defined in FC-SW-4). This bit needs to have the same setting for all Switches in a Fabric's Switch Membership List Object, or else the Fabric will partition. If this bit is set, the Domain_ID for the Switch is given by the corresponding instance of t11FcSpPoSwMembDomainID. 'insistentDomainID' - if this bit is set, the Switch uses the 'Insistent Domain_ID behavior' (see t11FamConfigDomainId of T11-FC-FABRIC-ADDR-MGR-MIB), the Domain_ID for the Switch is given by the corresponding instance of t11FcSpPoSwMembDomainID. 'serialPortsAccess' - the Switch allows management through serial ports when and only when this bit is set. 'physicalPortsAccess' - the Switch allows management through the physical panel when and only when this bit is set. 'managerRole' - the Switch is allowed to change the Fabric Policy configuration (on receipt of any of the EACA, Enhanced Stage Fabric Configuration (ESFC), Enhanced Update Fabric Configuration (EUFC), ACA, SFC, or UFC SW_ILSs) if and only if this bit is set. Whenever a Fabric has Active Policy Objects, the value of the t11FamConfigDomainIdType object defined in the T11-FC-FABRIC-ADDR-MGR-MIB module must be read-only and reflect the values of the 'staticDomainID' and 'insistentDomainID' bits of this object.
FCN t11FcSpPoSwMembSwitchName	1.3.6.1.2.1.178.1.1.3.1.2	FcNameIdOrZero	not-accessible	When the value of t11FcSpPoSwMembSwitchNameType is 'wildcard' or 'restrictedWildcard', this object has the value '0000000000000000'h. Otherwise, the combination of t11FcSpPoSwMembSwitchNameType and this object specify the Switch Name of this Switch Entry.
T11 t11FcSpPoSwMembSwitchNameType	1.3.6.1.2.1.178.1.1.3.1.1	T11FcSpPolicyNameType	not-accessible	If the value of this object is 'nodeName' or 'restrictedNodeName', then the combination of this object and t11FcSpPoSwMembSwitchName specify the Switch Name of this Switch Entry. The membership is restricted or unrestricted based on the name type. Restricted membership means that the Switch is not allowed to be part of the Fabric unless allowed by a specific Switch Connectivity Object. Unrestricted membership means that the Switch is allowed to be part of the Fabric unless disallowed by a specific Switch Connectivity Object. The values of 'wildcard' and 'restrictedWildcard' provide the means to specify whether to allow/deny membership for Switches not explicitly named in the Switch Membership List Object.
t11FcSpPoSwMembTable	1.3.6.1.2.1.178.1.1.3		not-accessible	A table of Switch Entries in active Switch Membership List Objects. One Switch Membership List Object is represented by all of the rows of this table that have the same values of fcmInstanceIndex and t11FcSpPoFabricIndex.
t11FcSpPoTable	1.3.6.1.2.1.178.1.1.1		not-accessible	A table containing top-level information about active FC-SP policies on various Fabrics.
INE t11FcSpPoWkpDescrDestPort	1.3.6.1.2.1.178.1.1.8.1.5	InetPortNumber	read-only	When the 'destPortWildcard' bit is set in the corresponding instance of t11FcSpPoWkpDescrFlags, this object specifies the Destination (TCP/UDP) Port number of the Well-Known Protocol. When the 'destPortWildcard' bit is reset, this object is ignored (and can have the value zero).
t11FcSpPoWkpDescrEntry	1.3.6.1.2.1.178.1.1.8.1		not-accessible	Each entry contains information about one Well-Known Protocol Access Descriptor of a Well-Known Protocol Access Specifier used within the Fabric identified by t11FcSpPoFabricIndex and managed within the Fibre Channel management instance identified by fcmInstanceIndex.
BIT t11FcSpPoWkpDescrFlags	1.3.6.1.2.1.178.1.1.8.1.3	Bits	read-only	The flag bits that specify how access is to be limited by this Well-Known Protocol Access Descriptor: - allow -- IP management access using this protocol/port is allowed if this bit is set, and to be denied if this bit is not set. - wkpWildcard -- if this bit is set, the IP Protocol number of the Well-Known Protocol to be allowed/denied is specified by the value of t11FcSpPoWkpDescrWkpNumber. - destPortWildcard -- if this bit is set, the Destination (TCP/UDP) Port number of the Well-Known Protocol to be allowed/denied is specified by the value of t11FcSpPoWkpDescrDestPort. - readOnly -- if this bit is set, then access is to be granted only for reading.
U32 t11FcSpPoWkpDescrIndex	1.3.6.1.2.1.178.1.1.8.1.2	Unsigned32	not-accessible	An index value that uniquely identifies a particular Well-Known Protocol Access Descriptor within a Well-Known Protocol Access Specifier.
U32 t11FcSpPoWkpDescrSpecifierIndex	1.3.6.1.2.1.178.1.1.8.1.1	Unsigned32	not-accessible	An index value that uniquely identifies a particular Well-Known Protocol Access Specifier within a Fabric.
t11FcSpPoWkpDescrTable	1.3.6.1.2.1.178.1.1.8		not-accessible	A table of the Well-Known Protocol Access Descriptors being used within active Policy Objects. A Well-Known Protocol Access Specifier is a list of Well-Known Protocol Access Descriptors each of which specifies a protocol number, a port number, and/or various flags specifying how IP management access is restricted. A Well-Known Protocol Transport Access Specifier is represented by all rows of this table that have the same values of fcmInstanceIndex, t11FcSpPoFabricIndex, and t11FcSpPoWkpDescrSpecifierIndex.
U32 t11FcSpPoWkpDescrWkpNumber	1.3.6.1.2.1.178.1.1.8.1.4	Unsigned32	read-only	When the 'wkpWildcard' bit is set in the corresponding instance of t11FcSpPoWkpDescrFlags, this object specifies the IP protocol number of the Well-Known Protocol.

RFC description

Manages Fibre Channel Security Protocol (FC-SP) policy objects in fabric environments as defined by the T11 standard.

Start monitoring vendor-neutral, standards-based MIB (INCITS T11 FC-SP), Fibre Channel switches/directors (fabric security-policy activation status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download T11-FC-SP-POLICY-MIB