T11-FC-SP-SA-MIB

File: T11-FC-SP-SA-MIB.mib (96787 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC SNMPv2-CONF
IF-MIB FC-MGMT-MIB T11-TC-MIB
T11-FC-SP-TC-MIB

Imported symbols

MODULE-IDENTITY OBJECT-TYPE NOTIFICATION-TYPE
Unsigned32 Counter32 Counter64
TimeTicks Gauge32 mib-2
RowStatus StorageType AutonomousType
TimeStamp TruthValue MODULE-COMPLIANCE
OBJECT-GROUP NOTIFICATION-GROUP InterfaceIndex
InterfaceIndexOrZero fcmInstanceIndex FcAddressIdOrZero
T11FabricIndex T11FcSpType T11FcSpiIndex
T11FcSpLifetimeLeft T11FcSpLifetimeLeftUnits T11FcSpSecurityProtocolId
T11FcRoutingControl T11FcSaDirection T11FcSpPrecedence
T11FcSpTransforms

Defined Types

T11FcSpSaIfEntry  
SEQUENCE    
  t11FcSpSaIfIndex InterfaceIndexOrZero
  t11FcSpSaIfFabricIndex T11FabricIndex
  t11FcSpSaIfEspHeaderCapab T11FcSpTransforms
  t11FcSpSaIfCTAuthCapab T11FcSpTransforms
  t11FcSpSaIfIKEv2Capab T11FcSpTransforms
  t11FcSpSaIfIkev2AuthCapab TruthValue
  t11FcSpSaIfStorageType StorageType
  t11FcSpSaIfReplayPrevention TruthValue
  t11FcSpSaIfReplayWindowSize Unsigned32
  t11FcSpSaIfDeadPeerDetections Counter32
  t11FcSpSaIfTerminateAllSas INTEGER
  t11FcSpSaIfOutDrops Counter64
  t11FcSpSaIfOutBypasses Counter64
  t11FcSpSaIfOutProcesses Counter64
  t11FcSpSaIfOutUnMatcheds Counter64
  t11FcSpSaIfInUnprotUnmtchDrops Counter64
  t11FcSpSaIfInDetReplays Counter64
  t11FcSpSaIfInUnprotMtchDrops Counter64
  t11FcSpSaIfInBadXforms Counter64
  t11FcSpSaIfInGoodXforms Counter64
  t11FcSpSaIfInProtUnmtchs Counter64

T11FcSpSaPropEntry  
SEQUENCE    
  t11FcSpSaPropIndex Unsigned32
  t11FcSpSaPropSecurityProt T11FcSpSecurityProtocolId
  t11FcSpSaPropTSelListIndex Unsigned32
  t11FcSpSaPropTransListIndex Unsigned32
  t11FcSpSaPropAcceptAlgorithm INTEGER
  t11FcSpSaPropOutMatchSucceeds Counter64
  t11FcSpSaPropRowStatus RowStatus

T11FcSpSaTSelPropEntry  
SEQUENCE    
  t11FcSpSaTSelPropListIndex Unsigned32
  t11FcSpSaTSelPropPrecedence T11FcSpPrecedence
  t11FcSpSaTSelPropDirection T11FcSaDirection
  t11FcSpSaTSelPropStartSrcAddr FcAddressIdOrZero
  t11FcSpSaTSelPropEndSrcAddr FcAddressIdOrZero
  t11FcSpSaTSelPropStartDstAddr FcAddressIdOrZero
  t11FcSpSaTSelPropEndDstAddr FcAddressIdOrZero
  t11FcSpSaTSelPropStartRCtl T11FcRoutingControl
  t11FcSpSaTSelPropEndRCtl T11FcRoutingControl
  t11FcSpSaTSelPropStartType T11FcSpType
  t11FcSpSaTSelPropEndType T11FcSpType
  t11FcSpSaTSelPropStorageType StorageType
  t11FcSpSaTSelPropRowStatus RowStatus

T11FcSpSaTransEntry  
SEQUENCE    
  t11FcSpSaTransListIndex Unsigned32
  t11FcSpSaTransIndex Unsigned32
  t11FcSpSaTransSecurityProt T11FcSpSecurityProtocolId
  t11FcSpSaTransEncryptAlg AutonomousType
  t11FcSpSaTransEncryptKeyLen Unsigned32
  t11FcSpSaTransIntegrityAlg AutonomousType
  t11FcSpSaTransStorageType StorageType
  t11FcSpSaTransRowStatus RowStatus

T11FcSpSaTSelDrByEntry  
SEQUENCE    
  t11FcSpSaTSelDrByDirection T11FcSaDirection
  t11FcSpSaTSelDrByPrecedence T11FcSpPrecedence
  t11FcSpSaTSelDrByAction INTEGER
  t11FcSpSaTSelDrByStartSrcAddr FcAddressIdOrZero
  t11FcSpSaTSelDrByEndSrcAddr FcAddressIdOrZero
  t11FcSpSaTSelDrByStartDstAddr FcAddressIdOrZero
  t11FcSpSaTSelDrByEndDstAddr FcAddressIdOrZero
  t11FcSpSaTSelDrByStartRCtl T11FcRoutingControl
  t11FcSpSaTSelDrByEndRCtl T11FcRoutingControl
  t11FcSpSaTSelDrByStartType T11FcSpType
  t11FcSpSaTSelDrByEndType T11FcSpType
  t11FcSpSaTSelDrByMatches Counter64
  t11FcSpSaTSelDrByRowStatus RowStatus

T11FcSpSaPairEntry  
SEQUENCE    
  t11FcSpSaPairIfIndex InterfaceIndex
  t11FcSpSaPairInboundSpi T11FcSpiIndex
  t11FcSpSaPairSecurityProt T11FcSpSecurityProtocolId
  t11FcSpSaPairTransListIndex Unsigned32
  t11FcSpSaPairTransIndex Unsigned32
  t11FcSpSaPairLifetimeLeft T11FcSpLifetimeLeft
  t11FcSpSaPairLifetimeLeftUnits T11FcSpLifetimeLeftUnits
  t11FcSpSaPairTerminate INTEGER
  t11FcSpSaPairInProtUnMatchs Counter64
  t11FcSpSaPairInDetReplays Counter64
  t11FcSpSaPairInBadXforms Counter64
  t11FcSpSaPairInGoodXforms Counter64

T11FcSpSaTSelNegInEntry  
SEQUENCE    
  t11FcSpSaTSelNegInIndex Unsigned32
  t11FcSpSaTSelNegInInboundSpi T11FcSpiIndex
  t11FcSpSaTSelNegInStartSrcAddr FcAddressIdOrZero
  t11FcSpSaTSelNegInEndSrcAddr FcAddressIdOrZero
  t11FcSpSaTSelNegInStartDstAddr FcAddressIdOrZero
  t11FcSpSaTSelNegInEndDstAddr FcAddressIdOrZero
  t11FcSpSaTSelNegInStartRCtl T11FcRoutingControl
  t11FcSpSaTSelNegInEndRCtl T11FcRoutingControl
  t11FcSpSaTSelNegInStartType T11FcSpType
  t11FcSpSaTSelNegInEndType T11FcSpType
  t11FcSpSaTSelNegInUnpMtchDrops Counter64

T11FcSpSaTSelNegOutEntry  
SEQUENCE    
  t11FcSpSaTSelNegOutPrecedence T11FcSpPrecedence
  t11FcSpSaTSelNegOutInboundSpi T11FcSpiIndex
  t11FcSpSaTSelNegOutStartSrcAddr FcAddressIdOrZero
  t11FcSpSaTSelNegOutEndSrcAddr FcAddressIdOrZero
  t11FcSpSaTSelNegOutStartDstAddr FcAddressIdOrZero
  t11FcSpSaTSelNegOutEndDstAddr FcAddressIdOrZero
  t11FcSpSaTSelNegOutStartRCtl T11FcRoutingControl
  t11FcSpSaTSelNegOutEndRCtl T11FcRoutingControl
  t11FcSpSaTSelNegOutStartType T11FcSpType
  t11FcSpSaTSelNegOutEndType T11FcSpType

T11FcSpSaTSelSpiEntry  
SEQUENCE    
  t11FcSpSaTSelSpiInboundSpi T11FcSpiIndex
  t11FcSpSaTSelSpiTrafSelIndex Unsigned32
  t11FcSpSaTSelSpiDirection T11FcSaDirection
  t11FcSpSaTSelSpiTrafSelPtr Unsigned32

T11FcSpSaControlEntry  
SEQUENCE    
  t11FcSpSaControlAuthFailEnable TruthValue
  t11FcSpSaControlInboundSpi T11FcSpiIndex
  t11FcSpSaControlSource FcAddressIdOrZero
  t11FcSpSaControlDestination FcAddressIdOrZero
  t11FcSpSaControlFrame OCTET STRING
  t11FcSpSaControlElapsed TimeTicks
  t11FcSpSaControlSuppressed Gauge32
  t11FcSpSaControlWindow Unsigned32
  t11FcSpSaControlMaxNotifs Unsigned32
  t11FcSpSaControlLifeExcdEnable TruthValue
  t11FcSpSaControlLifeExcdSpi T11FcSpiIndex
  t11FcSpSaControlLifeExcdDir T11FcSaDirection
  t11FcSpSaControlLifeExcdTime TimeStamp

Defined Values

t11FcSpSaMIB 1.3.6.1.2.1.179
This MIB module specifies the management information required to manage Security Associations established via Fibre Channel's FC-SP specification. The MIB module consists of six parts: - a per-Fabric table, t11FcSpSaIfTable, of capabilities, parameters, status information, and counters; the counters include non-transient aggregates of per-SA transient counters; - three tables, t11FcSpSaPropTable, t11FcSpSaTSelPropTable, and t11FcSpSaTransTable, specifying the proposals for an FC-SP entity acting as an SA_Initiator to present to the SA_Responder during the negotiation of Security Associations. The same information is also used by an FC-SP entity acting as an SA_Responder to decide what to accept during the negotiation of Security Associations. One of these tables, t11FcSpSaTransTable, is used not only for information about security transforms to propose and to accept, but also as agreed upon during the negotiation of Security Associations; - a table, t11FcSpSaTSelDrByTable, of Traffic Selectors having the security action of 'drop' or 'bypass' to be applied either to ingress traffic that is unprotected by FC-SP, or to all egress traffic; - four tables, t11FcSpSaPairTable, t11FcSpSaTSelNegInTable, t11FcSpSaTSelNegOutTable, and t11FcSpSaTSelSpiTable, containing information about active bidirectional pairs of Security Associations; in particular, t11FcSpSaPairTable has one row per active bidirectional SA pair, t11FcSpSaTSelNegInTable and t11FcSpSaTSelNegOutTable contain information on the Traffic Selectors negotiated on the SAs, and the t11FcSpSaTSelSpiTable is an alternate lookup table such that the Traffic Selector(s) in use on a particular Security Association can be quickly determined based on the (ingress) SPI value; - a table, t11FcSpSaControlTable, of control and other information concerning the generation of notifications for events related to FC-SP Security Associations; - one notification, t11FcSpSaNotifyAuthFailure, generated on the occurrence of an Authentication failure for a received FC-2 or CT_IU frame. Copyright (C) The IETF Trust (2008). This version of this MIB module is part of RFC 5324; see the RFC itself for full legal notices.
MODULE-IDENTITY    

t11FcSpSaMIBNotifications 1.3.6.1.2.1.179.0
OBJECT IDENTIFIER    

t11FcSpSaMIBObjects 1.3.6.1.2.1.179.1
OBJECT IDENTIFIER    

t11FcSpSaMIBConformance 1.3.6.1.2.1.179.2
OBJECT IDENTIFIER    

t11FcSpSaBase 1.3.6.1.2.1.179.1.1
OBJECT IDENTIFIER    

t11FcSpSaConfig 1.3.6.1.2.1.179.1.2
OBJECT IDENTIFIER    

t11FcSpSaActive 1.3.6.1.2.1.179.1.3
OBJECT IDENTIFIER    

t11FcSpSaControl 1.3.6.1.2.1.179.1.4
OBJECT IDENTIFIER    

t11FcSpSaIfTable 1.3.6.1.2.1.179.1.1.1
A table containing per-Fabric information related to FC-SP Security Associations.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaIfEntry

t11FcSpSaIfEntry 1.3.6.1.2.1.179.1.1.1.1
Each entry contains information related to Security Associations on a particular Fabric, and managed as part of the Fibre Channel management instance identified by fcmInstanceIndex.
OBJECT-TYPE    
  T11FcSpSaIfEntry  

t11FcSpSaIfIndex 1.3.6.1.2.1.179.1.1.1.1.1
This object has a non-zero value to identify a particular interface, or the value zero to indicate that the information in this row applies to all (of the management instance's) interfaces to the particular Fabric. If any row has a non-zero value of t11FcSpSaIfIndex, then all rows for the same Fibre Channel management instance must also have a non-zero value of t11FcSpSaIfIndex and thereby be specific to a particular interface. As and when zero values of t11FcSpSaIfIndex are used in this table, then they must also be used in each other table that has t11FcSpSaIfIndex in its INDEX clause.
OBJECT-TYPE    
  InterfaceIndexOrZero  

t11FcSpSaIfFabricIndex 1.3.6.1.2.1.179.1.1.1.1.2
An index value that uniquely identifies a particular Fabric.
OBJECT-TYPE    
  T11FabricIndex  

t11FcSpSaIfEspHeaderCapab 1.3.6.1.2.1.179.1.1.1.1.3
A list of the standardized transforms supported by this entity on this interface for ESP_Header protection.
OBJECT-TYPE    
  T11FcSpTransforms  

t11FcSpSaIfCTAuthCapab 1.3.6.1.2.1.179.1.1.1.1.4
A list of the standardized transforms supported by this entity on this interface for CT_Authentication protection.
OBJECT-TYPE    
  T11FcSpTransforms  

t11FcSpSaIfIKEv2Capab 1.3.6.1.2.1.179.1.1.1.1.5
A list of the standardized transforms supported by this entity on this interface with IKEv2 protection.
OBJECT-TYPE    
  T11FcSpTransforms  

t11FcSpSaIfIkev2AuthCapab 1.3.6.1.2.1.179.1.1.1.1.6
An indication of whether the entity is capable of supporting the IKEv2-AUTH protocol on this interface, i.e., concatenation of Authentication and SA Management Transactions, such that an SA Management Transaction is used to perform both the authentication function and SA management.
OBJECT-TYPE    
  TruthValue  

t11FcSpSaIfStorageType 1.3.6.1.2.1.179.1.1.1.1.7
This object specifies the memory realization of information related to FC-SP Security Associations for interface(s) to a particular Fabric; specifically, for rows created and/or modified in these tables: t11FcSpSaPropTable t11FcSpSaTSelDrByTable t11FcSpSaControlTable and, for modified information contained in the same row as an instance of this object. Even if an instance of this object has the value 'permanent(4)', none of the information defined in this MIB module for interface(s) to the given Fabric need to be writable.
OBJECT-TYPE    
  StorageType  

t11FcSpSaIfReplayPrevention 1.3.6.1.2.1.179.1.1.1.1.8
This object indicates whether anti-replay protection is enabled for frame reception on this interface. Note that the replay-protection mechanism in FC-SP is conceptually similar to the corresponding mechanism in IPsec ESP.
OBJECT-TYPE    
  TruthValue  

t11FcSpSaIfReplayWindowSize 1.3.6.1.2.1.179.1.1.1.1.9
The size of the replay window to be used when anti-replay protection is enabled for frame reception on this interface. Note that the replay-protection mechanism in FC-SP is conceptually similar to the corresponding mechanism in IPsec ESP.
OBJECT-TYPE    
  Unsigned32  

t11FcSpSaIfDeadPeerDetections 1.3.6.1.2.1.179.1.1.1.1.10
The number of times that a dead peer condition has been detected on this interface. This counter has no discontinuities other than those that all Counter32's have when sysUpTime=0.
OBJECT-TYPE    
  Counter32  

t11FcSpSaIfTerminateAllSas 1.3.6.1.2.1.179.1.1.1.1.11
Setting this object to 'terminate' is a request to terminate all outstanding Security Associations on this interface. When read, the value of this object is always 'noop'. Setting this object to 'noop' has no effect.
OBJECT-TYPE    
  INTEGER noop(1), terminate(2)  

t11FcSpSaIfOutDrops 1.3.6.1.2.1.179.1.1.1.1.12
The number of output frames that were dropped, instead of being transmitted on this interface, because they matched an active (at that time) Traffic Selector with an action of 'Drop'. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaIfOutBypasses 1.3.6.1.2.1.179.1.1.1.1.13
The number of output frames that were transmitted unchanged by FC-SP on this interface because they matched an active (at that time) Traffic Selector with an action of 'Bypass'. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaIfOutProcesses 1.3.6.1.2.1.179.1.1.1.1.14
The number of output frames that were protected by FC-SP before being transmitted on this interface because they matched an active (at that time) Traffic Selector with an action of 'Process'. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaIfOutUnMatcheds 1.3.6.1.2.1.179.1.1.1.1.15
The number of frames that were transmitted unchanged by FC-SP on this interface because they did not match any Traffic Selector active at that time. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaIfInUnprotUnmtchDrops 1.3.6.1.2.1.179.1.1.1.1.16
The number of frames received on this interface that were dropped because they were unprotected and did not match any Traffic Selector active at that time. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaIfInDetReplays 1.3.6.1.2.1.179.1.1.1.1.17
The number of times that a replay has been detected on a Security Association that is currently active or was previously active on this interface. Note that a frame that is discarded because it is 'behind' the window, i.e., too old, is counted as a replay. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaIfInUnprotMtchDrops 1.3.6.1.2.1.179.1.1.1.1.18
The number of times that a frame received on this interface was dropped because it matched with a Traffic Selector for a Security Association that was active at the time of receipt but the frame was not protected as negotiated for that Security Association. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaIfInBadXforms 1.3.6.1.2.1.179.1.1.1.1.19
The number of times that a frame received on this interface was dropped because of a failure of one of the transforms negotiated for the Security Association on which it was received. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaIfInGoodXforms 1.3.6.1.2.1.179.1.1.1.1.20
The number of frames received on this interface on a Security Association for which the transforms negotiated for that Security Association were successfully applied, and that matched a Traffic Selector for that Security Association. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaIfInProtUnmtchs 1.3.6.1.2.1.179.1.1.1.1.21
The number of frames received on this interface that were dropped because they did not match any of the Traffic Selectors negotiated for the Security Association on which they were received, even though the Security Association's transforms were successfully applied. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaPropTable 1.3.6.1.2.1.179.1.2.1
A table of proposals for an FC-SP entity acting as an SA_Initiator to present to the SA_Responder during the negotiation of Security Associations. This information is also used by an FC-SP entity acting as an SA_Responder to decide what to accept during the negotiation of Security Associations.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaPropEntry

t11FcSpSaPropEntry 1.3.6.1.2.1.179.1.2.1.1
Each entry contains information about one proposal for the FC-SP entity to present, or what to accept, during the negotiation of Security Associations on one or more interfaces (identified by t11FcSpSaIfIndex) to a particular Fabric (identified by t11FcSpSaIfFabricIndex), and managed as part of the Fibre Channel management instance identified by fcmInstanceIndex. The StorageType of a row in this table is specified by the instance of t11FcSpSaIfStorageType that is INDEX-ed by the same values of fcmInstanceIndex, t11FcSpSaIfIndex and t11FcSpSaIfFabricIndex.
OBJECT-TYPE    
  T11FcSpSaPropEntry  

t11FcSpSaPropIndex 1.3.6.1.2.1.179.1.2.1.1.1
An index value that uniquely identifies a particular proposal for use on one or more interfaces to a Fabric.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

t11FcSpSaPropSecurityProt 1.3.6.1.2.1.179.1.2.1.1.2
The Security Protocol identifier for this proposal, i.e., whether the proposal is for traffic to be protected using ESP_Header or CT_Authentication.
OBJECT-TYPE    
  T11FcSpSecurityProtocolId  

t11FcSpSaPropTSelListIndex 1.3.6.1.2.1.179.1.2.1.1.3
When the value of this object is non-zero, it points to the proposal's list of Traffic Selectors. The value must be non-zero in an active row of this table. The identified list is represented by all rows in the t11FcSpSaTSelPropTable for which t11FcSpSaTSelPropListIndex has the same value as this object (and with corresponding values of t11FcSpSaIfIndex and fcmInstanceIndex).
OBJECT-TYPE    
  Unsigned32  

t11FcSpSaPropTransListIndex 1.3.6.1.2.1.179.1.2.1.1.4
When the value of this object is non-zero, it points to the proposal's list of Transforms. The value must be non-zero in an active row of this table. The identified list is represented by all rows in the t11FcSpSaTransTable for which t11FcSpSaTransListIndex has the same value as this object (and with corresponding values of t11FcSpSaIfIndex and fcmInstanceIndex).
OBJECT-TYPE    
  Unsigned32  

t11FcSpSaPropAcceptAlgorithm 1.3.6.1.2.1.179.1.2.1.1.5
The algorithm by which an SA_Responder in an SA negotiation decides on which Traffic Selectors to specify in a response to an IKE_Create_Child_SA request. This algorithm is used when the Traffic Selectors specified by an SA_Initiator in an IKE_Create_Child_SA request overlap with this proposal's list of Traffic Selectors: intersection(1) - the SA_Responder specifies the largest subset of what the SA_Initiator proposed, which is also a subset of this proposal's Traffic Selectors. union(2) - the SA_Responder specifies the smallest superset of what the SA_Initiator proposed, which is also a superset of this proposal's Traffic Selectors. other(3) - the SA_Responder uses some other algorithm.
OBJECT-TYPE    
  INTEGER intersection(1), union(2), other(3)  

t11FcSpSaPropOutMatchSucceeds 1.3.6.1.2.1.179.1.2.1.1.6
The number of egress frames that have matched a Traffic Selector that was negotiated to select traffic for an SA based on this proposal being accepted. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaPropRowStatus 1.3.6.1.2.1.179.1.2.1.1.7
The status of a row. Values of object instances within an active row can be modified at any time. The status cannot be set to 'active' unless and until the instances of t11FcSpSaPropTSelListIndex and t11FcSpSaPropTransListIndex in the row have been set to point to active rows in the t11FcSpSaTSelPropTable and t11FcSpSaTransTable tables, respectively. A row in this table is deleted if the active rows it points to are deleted.
OBJECT-TYPE    
  RowStatus  

t11FcSpSaTSelPropTable 1.3.6.1.2.1.179.1.2.2
A table containing information about Traffic Selectors to propose and/or to accept during the negotiation of Security Associations.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaTSelPropEntry

t11FcSpSaTSelPropEntry 1.3.6.1.2.1.179.1.2.2.1
Each entry contains information about one Traffic Selector within a list of Traffic Selectors to propose, or for use in determining what to accept during Security Association negotiation. One such list is configured for use on a Fabric by configuring the list's value of t11FcSpSaTSelPropListIndex as the value of an instance of t11FcSpSaPropTSelListIndex, for corresponding values of t11FcSpSaIfIndex and fcmInstanceIndex. Further, the proposing and accepting of Traffic Selectors is only done as a part of a proposal specified by a row of the t11FcSpSaPropTable, i.e., in combination with the proposing and accepting of security transforms as specified by the combination of t11FcSpSaPropTSelListIndex and t11FcSpSaPropTransListIndex in one row of the t11FcSpSaPropTable. The StorageType of a row in this table is specified by the instance of t11FcSpSaTSelPropStorageType in that row.
OBJECT-TYPE    
  T11FcSpSaTSelPropEntry  

t11FcSpSaTSelPropListIndex 1.3.6.1.2.1.179.1.2.2.1.1
An index value that identifies a particular list of Traffic Selectors.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

t11FcSpSaTSelPropPrecedence 1.3.6.1.2.1.179.1.2.2.1.2
The precedence of this Traffic Selector. Each Traffic Selector within a particular list of Traffic Selectors must have a different precedence. If an egress frame matches multiple Traffic Selectors, it should be transmitted on the SA associated with the Traffic Selector having the numerically smallest precedence value.
OBJECT-TYPE    
  T11FcSpPrecedence  

t11FcSpSaTSelPropDirection 1.3.6.1.2.1.179.1.2.2.1.3
An indication of whether this Traffic Selector is to be proposed for ingress or egress traffic.
OBJECT-TYPE    
  T11FcSaDirection  

t11FcSpSaTSelPropStartSrcAddr 1.3.6.1.2.1.179.1.2.2.1.4
The numerically smallest 24-bit value of a source address (S_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelPropEndSrcAddr 1.3.6.1.2.1.179.1.2.2.1.5
The numerically largest 24-bit value of a source address (S_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelPropStartDstAddr 1.3.6.1.2.1.179.1.2.2.1.6
The numerically smallest 24-bit value of a destination address (D_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelPropEndDstAddr 1.3.6.1.2.1.179.1.2.2.1.7
The numerically largest 24-bit value of a destination address (D_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelPropStartRCtl 1.3.6.1.2.1.179.1.2.2.1.8
The numerically smallest 8-bit value contained within a Routing Control (R_CTL) field of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcRoutingControl  

t11FcSpSaTSelPropEndRCtl 1.3.6.1.2.1.179.1.2.2.1.9
The numerically largest 8-bit value contained within a Routing Control (R_CTL) field of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcRoutingControl  

t11FcSpSaTSelPropStartType 1.3.6.1.2.1.179.1.2.2.1.10
The numerically smallest of a range of possible 'type' values of frames that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcSpType  

t11FcSpSaTSelPropEndType 1.3.6.1.2.1.179.1.2.2.1.11
The numerically largest of a range of possible 'type' values of frames that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcSpType  

t11FcSpSaTSelPropStorageType 1.3.6.1.2.1.179.1.2.2.1.12
This object specifies the memory realization of the information in this row. Even if an instance of this object has the value 'permanent(4)', none of the information in its row needs to be writable.
OBJECT-TYPE    
  StorageType  

t11FcSpSaTSelPropRowStatus 1.3.6.1.2.1.179.1.2.2.1.13
The status of this row. Values of object instances within the row can be modified at any time.
OBJECT-TYPE    
  RowStatus  

t11FcSpSaTransTable 1.3.6.1.2.1.179.1.2.3
A table containing information about security transforms to propose, to accept and/or agreed upon during the negotiation of Security Associations.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaTransEntry

t11FcSpSaTransEntry 1.3.6.1.2.1.179.1.2.3.1
Each entry contains information about one proposal within a list of security transforms to be proposed, to be accepted, or already agreed upon, for use on a pair of Security Associations on one or more interfaces (identified by t11FcSpSaIfIndex), managed as part of the Fibre Channel management instance identified by fcmInstanceIndex. One such list is configured to be proposed or accepted for use on a Fabric, by having the list's value of t11FcSpSaTransListIndex be the value of an instance of t11FcSpSaPropTransListIndex for that Fabric. Further, the proposing and accepting of security transforms is only done as a part of a proposal specified by a row of the t11FcSpSaPropTable, i.e., in combination with the proposing and accepting of Traffic Selectors as specified by the combination of t11FcSpSaPropTSelListIndex and t11FcSpSaPropTransListIndex in one row of the t11FcSpSaPropTable. The security (encryption and integrity) transform in use on an SA pair is indicated by having the pair's values of t11FcSpSaPairTransListIndex and t11FcSpSaPairTransIndex contain the values of t11FcSpSaTransListIndex and t11FcSpSaTransIndex for the transform's row in this table. The StorageType of a row in this table is specified by the instance of t11FcSpSaTransStorageType in that row.
OBJECT-TYPE    
  T11FcSpSaTransEntry  

t11FcSpSaTransListIndex 1.3.6.1.2.1.179.1.2.3.1.1
An index value that uniquely identifies a particular list of security transforms to be proposed, to be accepted, or already agreed upon.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

t11FcSpSaTransIndex 1.3.6.1.2.1.179.1.2.3.1.2
An index value that uniquely identifies one security transform within a list identified by t11FcSpSaTransListIndex.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

t11FcSpSaTransSecurityProt 1.3.6.1.2.1.179.1.2.3.1.3
The Security Protocol identifier that indicates whether this transform is for traffic to be protected using ESP_Header or using CT_Authentication.
OBJECT-TYPE    
  T11FcSpSecurityProtocolId  

t11FcSpSaTransEncryptAlg 1.3.6.1.2.1.179.1.2.3.1.4
The Encryption Algorithm for this transform.
OBJECT-TYPE    
  AutonomousType  

t11FcSpSaTransEncryptKeyLen 1.3.6.1.2.1.179.1.2.3.1.5
The key length in bits to be used with an encryption algorithm that has a variable length key. This object is ignored when the corresponding instance of t11FcSpSaTransEncryptAlg specifies an algorithm with a fixed length key.
OBJECT-TYPE    
  Unsigned32  

t11FcSpSaTransIntegrityAlg 1.3.6.1.2.1.179.1.2.3.1.6
The Integrity Algorithm for this transform.
OBJECT-TYPE    
  AutonomousType  

t11FcSpSaTransStorageType 1.3.6.1.2.1.179.1.2.3.1.7
This object specifies the memory realization of the information in this row. Even if an instance of this object has the value 'permanent(4)', none of the information in its row needs to be writable.
OBJECT-TYPE    
  StorageType  

t11FcSpSaTransRowStatus 1.3.6.1.2.1.179.1.2.3.1.8
The status of this row. When an instance of t11FcSpSaPairTransListIndex points to a row in this table, values of object instances in the row cannot be modified nor can the row be deleted. Otherwise, a row can be modified or deleted at any time.
OBJECT-TYPE    
  RowStatus  

t11FcSpSaTSelDrByTable 1.3.6.1.2.1.179.1.2.4
A table containing Traffic Selectors to select which traffic is to be dropped or is to bypass further security processing.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaTSelDrByEntry

t11FcSpSaTSelDrByEntry 1.3.6.1.2.1.179.1.2.4.1
Each entry represents one Traffic Selector having the security action of 'drop' or 'bypass', which is applied based on a precedence value, either to ingress traffic that is unprotected by FC-SP, or to all egress traffic on one or more interfaces (identified by t11FcSpSaIfIndex) to a particular Fabric (identified by t11FcSpSaIfFabricIndex), and managed as part of the Fibre Channel management instance identified by fcmInstanceIndex. The StorageType of a row in this table is specified by the instance of t11FcSpSaIfStorageType that is INDEX-ed by the same values of fcmInstanceIndex, t11FcSpSaIfIndex and t11FcSpSaIfFabricIndex.
OBJECT-TYPE    
  T11FcSpSaTSelDrByEntry  

t11FcSpSaTSelDrByDirection 1.3.6.1.2.1.179.1.2.4.1.1
An indication of whether this Traffic Selector is for ingress or egress traffic.
OBJECT-TYPE    
  T11FcSaDirection  

t11FcSpSaTSelDrByPrecedence 1.3.6.1.2.1.179.1.2.4.1.2
The precedence of this Traffic Selector. If and when a frame is compared against multiple Traffic Selectors, and multiple of them have a match with the frame, the security action to be taken for the frame is that specified for the matching Traffic Selector having the numerically smallest precedence value.
OBJECT-TYPE    
  T11FcSpPrecedence  

t11FcSpSaTSelDrByAction 1.3.6.1.2.1.179.1.2.4.1.3
The security action to be taken for a frame that matches this Traffic Selector.
OBJECT-TYPE    
  INTEGER drop(1), bypass(2)  

t11FcSpSaTSelDrByStartSrcAddr 1.3.6.1.2.1.179.1.2.4.1.4
The numerically smallest 24-bit value of a source address (S_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelDrByEndSrcAddr 1.3.6.1.2.1.179.1.2.4.1.5
The numerically largest 24-bit value of a source address (S_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelDrByStartDstAddr 1.3.6.1.2.1.179.1.2.4.1.6
The numerically smallest 24-bit value of a destination address (D_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelDrByEndDstAddr 1.3.6.1.2.1.179.1.2.4.1.7
The numerically largest 24-bit value of a destination address (D_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelDrByStartRCtl 1.3.6.1.2.1.179.1.2.4.1.8
The numerically smallest 8-bit value contained within a Routing Control (R_CTL) field of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcRoutingControl  

t11FcSpSaTSelDrByEndRCtl 1.3.6.1.2.1.179.1.2.4.1.9
The numerically largest 8-bit value contained within a Routing Control (R_CTL) field of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcRoutingControl  

t11FcSpSaTSelDrByStartType 1.3.6.1.2.1.179.1.2.4.1.10
The numerically smallest of a range of possible 'type' values of frames that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcSpType  

t11FcSpSaTSelDrByEndType 1.3.6.1.2.1.179.1.2.4.1.11
The numerically largest of a range of possible 'type' values of frames that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcSpType  

t11FcSpSaTSelDrByMatches 1.3.6.1.2.1.179.1.2.4.1.12
The number of frames for which the action specified by the corresponding instance of t11FcSpSaTSelDrByAction was taken because of a match with this Traffic Selector. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaTSelDrByRowStatus 1.3.6.1.2.1.179.1.2.4.1.13
The status of this row. Values of object instances within the row can be modified at any time.
OBJECT-TYPE    
  RowStatus  

t11FcSpSaPairTable 1.3.6.1.2.1.179.1.3.1
A table containing information about active bidirectional pairs of Security Associations.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaPairEntry

t11FcSpSaPairEntry 1.3.6.1.2.1.179.1.3.1.1
Each entry contains information about one active bidirectional pair of Security Associations on an interface to a particular Fabric (identified by t11FcSpSaIfFabricIndex), managed as part of the Fibre Channel management instance identified by fcmInstanceIndex.
OBJECT-TYPE    
  T11FcSpSaPairEntry  

t11FcSpSaPairIfIndex 1.3.6.1.2.1.179.1.3.1.1.1
This object identifies the interface to the particular Fabric on which this SA pair is active.
OBJECT-TYPE    
  InterfaceIndex  

t11FcSpSaPairInboundSpi 1.3.6.1.2.1.179.1.3.1.1.2
The SPI value that is used to indicate that an incoming frame was received on the ingress SA of this SA pair.
OBJECT-TYPE    
  T11FcSpiIndex  

t11FcSpSaPairSecurityProt 1.3.6.1.2.1.179.1.3.1.1.3
The object indicates whether this SA uses ESP_Header to protect FC-2 frames, or CT_Authentication to protect Common Transport Information Units (CT_IUs).
OBJECT-TYPE    
  T11FcSpSecurityProtocolId  

t11FcSpSaPairTransListIndex 1.3.6.1.2.1.179.1.3.1.1.4
The combination of this value and the value of the corresponding instance of t11FcSpSaPairTransIndex identify the row in the t11FcSpSaTransTable that contains the transforms that are in use on this SA pair.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

t11FcSpSaPairTransIndex 1.3.6.1.2.1.179.1.3.1.1.5
The combination of this value and the value of the corresponding instance of t11FcSpSaPairTransListIndex identify the row in the t11FcSpSaTransTable that contains the transforms that are in use on this SA pair.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

t11FcSpSaPairLifetimeLeft 1.3.6.1.2.1.179.1.3.1.1.6
The remaining lifetime of this SA pair, given in the units specified by the value of the corresponding instance of t11FcSpSaPairLifetimeLeft.
OBJECT-TYPE    
  T11FcSpLifetimeLeft  

t11FcSpSaPairLifetimeLeftUnits 1.3.6.1.2.1.179.1.3.1.1.7
The units in which the value of the corresponding instance of t11FcSpSaPairLifetimeLeft specifies the remaining lifetime of this SA pair.
OBJECT-TYPE    
  T11FcSpLifetimeLeftUnits  

t11FcSpSaPairTerminate 1.3.6.1.2.1.179.1.3.1.1.8
Setting this object to 'terminate' is a request to terminate this pair of Security Associations. When read, the value of this object is always 'noop'. Setting this object to 'noop' has no effect.
OBJECT-TYPE    
  INTEGER noop(1), terminate(2)  

t11FcSpSaPairInProtUnMatchs 1.3.6.1.2.1.179.1.3.1.1.9
The number of frames received on this SA for which the SA's transforms were successfully applied to the frame, but the frame was still dropped because it did not match any of the SA's ingress Traffic Selectors. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaPairInDetReplays 1.3.6.1.2.1.179.1.3.1.1.10
The number of times that a replay has been detected on this Security Association. Note that a frame that is discarded because it is 'behind' the window, i.e., too old, is counted as a replay. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaPairInBadXforms 1.3.6.1.2.1.179.1.3.1.1.11
The number of times that a received frame was dropped because one of the transforms negotiated for this Security Association failed. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaPairInGoodXforms 1.3.6.1.2.1.179.1.3.1.1.12
The number of received frames for which the transforms negotiated for this Security Association, were successfully applied. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaTSelNegInTable 1.3.6.1.2.1.179.1.3.2
A table containing information about ingress Traffic Selectors that are in use on active Security Associations.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaTSelNegInEntry

t11FcSpSaTSelNegInEntry 1.3.6.1.2.1.179.1.3.2.1
Each entry contains information about one ingress Traffic Selector that is in use on an active Security Association on an interface (identified by t11FcSpSaPairIfIndex) to a particular Fabric (identified by t11FcSpSaIfFabricIndex), managed as part of the Fibre Channel management instance identified by fcmInstanceIndex.
OBJECT-TYPE    
  T11FcSpSaTSelNegInEntry  

t11FcSpSaTSelNegInIndex 1.3.6.1.2.1.179.1.3.2.1.1
An index value to distinguish an ingress Traffic Selector from all others currently in use by Security Associations on the same interface to a particular Fabric.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

t11FcSpSaTSelNegInInboundSpi 1.3.6.1.2.1.179.1.3.2.1.2
The SPI of the ingress SA on which this Traffic Selector is in use. This value can be used to find the SA pair's row in the t11FcSpSaPairTable.
OBJECT-TYPE    
  T11FcSpiIndex  

t11FcSpSaTSelNegInStartSrcAddr 1.3.6.1.2.1.179.1.3.2.1.3
The numerically smallest 24-bit value of a source address (S_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelNegInEndSrcAddr 1.3.6.1.2.1.179.1.3.2.1.4
The numerically largest 24-bit value of a source address (S_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelNegInStartDstAddr 1.3.6.1.2.1.179.1.3.2.1.5
The numerically smallest 24-bit value of a destination address (D_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelNegInEndDstAddr 1.3.6.1.2.1.179.1.3.2.1.6
The numerically largest 24-bit value of a destination address (D_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelNegInStartRCtl 1.3.6.1.2.1.179.1.3.2.1.7
The numerically smallest 8-bit value contained within a Routing Control (R_CTL) field of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcRoutingControl  

t11FcSpSaTSelNegInEndRCtl 1.3.6.1.2.1.179.1.3.2.1.8
The numerically largest 8-bit value contained within a Routing Control (R_CTL) field of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcRoutingControl  

t11FcSpSaTSelNegInStartType 1.3.6.1.2.1.179.1.3.2.1.9
The numerically smallest of a range of possible 'type' values of frames that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcSpType  

t11FcSpSaTSelNegInEndType 1.3.6.1.2.1.179.1.3.2.1.10
The numerically largest of a range of possible 'type' values of frames that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcSpType  

t11FcSpSaTSelNegInUnpMtchDrops 1.3.6.1.2.1.179.1.3.2.1.11
The number of times that a received frame was dropped because it matched with this Traffic Selector but the frame was not protected as negotiated for the Security Association identified by t11FcSpSaTSelNegInInboundSpi. This counter has no discontinuities other than those that all Counter64's have when sysUpTime=0.
OBJECT-TYPE    
  Counter64  

t11FcSpSaTSelNegOutTable 1.3.6.1.2.1.179.1.3.3
A table containing information about egress Traffic Selectors that are in use on active Security Associations.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaTSelNegOutEntry

t11FcSpSaTSelNegOutEntry 1.3.6.1.2.1.179.1.3.3.1
Each entry contains information about one egress Traffic Selector that is in use on an active Security Association on an interface (identified by t11FcSpSaPairIfIndex) to a particular Fabric (identified by t11FcSpSaIfFabricIndex), managed as part of the Fibre Channel management instance identified by fcmInstanceIndex.
OBJECT-TYPE    
  T11FcSpSaTSelNegOutEntry  

t11FcSpSaTSelNegOutPrecedence 1.3.6.1.2.1.179.1.3.3.1.1
The precedence of this Traffic Selector. If and when a frame is compared against multiple Traffic Selectors, and multiple of them have a match with the frame, the security action to be taken for the frame is that specified for the matching Traffic Selector having the numerically smallest precedence value.
OBJECT-TYPE    
  T11FcSpPrecedence  

t11FcSpSaTSelNegOutInboundSpi 1.3.6.1.2.1.179.1.3.3.1.2
The SPI of the ingress SA of the SA pair for which this Traffic Selector is in use on the egress SA. This value can be used to find the SA pair's row in the t11FcSpSaPairTable.
OBJECT-TYPE    
  T11FcSpiIndex  

t11FcSpSaTSelNegOutStartSrcAddr 1.3.6.1.2.1.179.1.3.3.1.3
The numerically smallest 24-bit value of a source address (S_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelNegOutEndSrcAddr 1.3.6.1.2.1.179.1.3.3.1.4
The numerically largest 24-bit value of a source address (S_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelNegOutStartDstAddr 1.3.6.1.2.1.179.1.3.3.1.5
The numerically smallest 24-bit value of a destination address (D_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelNegOutEndDstAddr 1.3.6.1.2.1.179.1.3.3.1.6
The numerically largest 24-bit value of a destination address (D_ID) of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  FcAddressIdOrZero Size(3)  

t11FcSpSaTSelNegOutStartRCtl 1.3.6.1.2.1.179.1.3.3.1.7
The numerically smallest 8-bit value contained within a Routing Control (R_CTL) field of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcRoutingControl  

t11FcSpSaTSelNegOutEndRCtl 1.3.6.1.2.1.179.1.3.3.1.8
The numerically largest 8-bit value contained within a Routing Control (R_CTL) field of a frame that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcRoutingControl  

t11FcSpSaTSelNegOutStartType 1.3.6.1.2.1.179.1.3.3.1.9
The numerically smallest of a range of possible 'type' values of frames that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcSpType  

t11FcSpSaTSelNegOutEndType 1.3.6.1.2.1.179.1.3.3.1.10
The numerically largest of a range of possible 'type' values of frames that will match with this Traffic Selector.
OBJECT-TYPE    
  T11FcSpType  

t11FcSpSaTSelSpiTable 1.3.6.1.2.1.179.1.3.4
A table identifying the Traffic Selectors in use on particular Security Associations, INDEX-ed by their (ingress) SPI values.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaTSelSpiEntry

t11FcSpSaTSelSpiEntry 1.3.6.1.2.1.179.1.3.4.1
Each entry identifies one Traffic Selector in use on an SA pair on the interface (identified by t11FcSpSaPairIfIndex) to a particular Fabric (identified by t11FcSpSaIfFabricIndex), and managed as part of the Fibre Channel management instance identified by fcmInstanceIndex.
OBJECT-TYPE    
  T11FcSpSaTSelSpiEntry  

t11FcSpSaTSelSpiInboundSpi 1.3.6.1.2.1.179.1.3.4.1.1
An SPI value that identifies the ingress Security Association of a particular SA pair.
OBJECT-TYPE    
  T11FcSpiIndex  

t11FcSpSaTSelSpiTrafSelIndex 1.3.6.1.2.1.179.1.3.4.1.2
An index value that distinguishes between the (potentially multiple) Traffic Selectors in use on this Security Association pair.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

t11FcSpSaTSelSpiDirection 1.3.6.1.2.1.179.1.3.4.1.3
This object indicates whether this Traffic Selector is being used for ingress or for egress traffic.
OBJECT-TYPE    
  T11FcSaDirection  

t11FcSpSaTSelSpiTrafSelPtr 1.3.6.1.2.1.179.1.3.4.1.4
This object contains a pointer into another table that can be used to obtain more information about this Traffic Selector. If the corresponding instance of t11FcSpSaTSelSpiDirection has the value 'egress', then this object contains the value of t11FcSpSaTSelNegOutPrecedence in the row of t11FcSpSaTSelNegOutTable, which contains more information. If the corresponding instance of t11FcSpSaTSelSpiDirection has the value 'ingress', then this object contains the value of t11FcSpSaTSelNegInIndex that identifies the row in t11FcSpSaTSelNegInTable containing more information.
OBJECT-TYPE    
  Unsigned32  

t11FcSpSaControlTable 1.3.6.1.2.1.179.1.4.1
A table of control and other information concerning the generation of notifications for events related to FC-SP Security Associations.
OBJECT-TYPE    
  SEQUENCE OF  
    T11FcSpSaControlEntry

t11FcSpSaControlEntry 1.3.6.1.2.1.179.1.4.1.1
Each entry identifies information for the one or more interfaces (identified by t11FcSpSaIfIndex) to a particular Fabric (identified by t11FcSpSaIfFabricIndex), and managed as part of the Fibre Channel management instance identified by fcmInstanceIndex. The StorageType of a row in this table is specified by the instance of t11FcSpSaIfStorageType that is INDEX-ed by the same values of fcmInstanceIndex, t11FcSpSaIfIndex, and t11FcSpSaIfFabricIndex.
OBJECT-TYPE    
  T11FcSpSaControlEntry  

t11FcSpSaControlAuthFailEnable 1.3.6.1.2.1.179.1.4.1.1.1
This object specifies whether a t11FcSpSaNotifyAuthFailure notification should be generated for the first occurrence of an Authentication failure within a time window for this Fabric.
OBJECT-TYPE    
  TruthValue  

t11FcSpSaControlInboundSpi 1.3.6.1.2.1.179.1.4.1.1.2
The SPI value of the ingress Security Association on which was received the last frame for which a t11FcSpSaNotifyAuthFailure was generated. If no t11FcSpSaNotifyAuthFailure notifications have been generated, the value of this object is zero.
OBJECT-TYPE    
  T11FcSpiIndex  

t11FcSpSaControlSource 1.3.6.1.2.1.179.1.4.1.1.3
The S_ID contained in the last frame for which a t11FcSpSaNotifyAuthFailure was generated. If no t11FcSpSaNotifyAuthFailure notifications have been generated, the value of this object is the zero-length string.
OBJECT-TYPE    
  FcAddressIdOrZero  

t11FcSpSaControlDestination 1.3.6.1.2.1.179.1.4.1.1.4
The D_ID contained in the last frame for which a t11FcSpSaNotifyAuthFailure was generated. If no t11FcSpSaNotifyAuthFailure notifications have been generated, the value of this object is the zero-length string.
OBJECT-TYPE    
  FcAddressIdOrZero  

t11FcSpSaControlFrame 1.3.6.1.2.1.179.1.4.1.1.5
The binary content of the last frame for which a t11FcSpSaNotifyAuthFailure was generated. If more than 256 bytes of the frame are available, then this object contains the first 256 bytes. If less than 256 bytes of the frame are available, then this object contains the first N bytes, where N is greater or equal to zero. If no t11FcSpSaNotifyAuthFailure notifications have been generated, the value of this object is the zero-length string.
OBJECT-TYPE    
  OCTET STRING Size(0..256)  

t11FcSpSaControlElapsed 1.3.6.1.2.1.179.1.4.1.1.6
The elapsed time since the last generation of a t11FcSpSaNotifyAuthFailure notification on the same Fabric, or the value of sysUpTime if no t11FcSpSaNotifyAuthFailure notifications have been generated since the last restart.
OBJECT-TYPE    
  TimeTicks  

t11FcSpSaControlSuppressed 1.3.6.1.2.1.179.1.4.1.1.7
The number of occurrences of an Authentication failure on a Fabric that were suppressed because they occurred on the same Fabric within the same time window as a previous Authentication failure for which a t11FcSpSaNotifyAuthFailure notification was generated. The value of this object is reset to zero on a restart of the network management subsystem, and whenever a t11FcSpSaNotifyAuthFailure notification is generated. In the event that the value of this object reaches its maximum value, it remains at that value until it is reset on the generation of the next t11FcSpSaNotifyAuthFailure notification.
OBJECT-TYPE    
  Gauge32  

t11FcSpSaControlWindow 1.3.6.1.2.1.179.1.4.1.1.8
The length of a time window that begins when a t11FcSpSaNotifyAuthFailure notification is generated for any Security Association on a particular Fabric. For the duration of the time window, further Authentication failures occurring for the same Security Association are counted but no t11FcSpSaNotifyAuthFailure notification is generated. When this object is modified before the end of a time window, that time window is immediately terminated, i.e., the next Authentication failure on the relevant Fabric after the modification will cause a new time window to begin with the new length.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

t11FcSpSaControlMaxNotifs 1.3.6.1.2.1.179.1.4.1.1.9
The maximum number of t11FcSpSaNotifyAuthFailure notifications to be generated per Fabric within a t11FcSpSaControlWindow time window. Subsequent Authentication failures occurring on the same Fabric in the same time window are counted, but no t11FcSpSaNotifyAuthFailure notification is generated. When this object is modified before the end of a time window, that time window is immediately terminated, i.e., the next Authentication failure on the relevant Fabric after the modification will cause a new time window to begin with the new length.
OBJECT-TYPE    
  Unsigned32  

t11FcSpSaControlLifeExcdEnable 1.3.6.1.2.1.179.1.4.1.1.10
This object specifies whether t11FcSpSaNotifyLifeExceeded notifications should be generated for this Fabric.
OBJECT-TYPE    
  TruthValue  

t11FcSpSaControlLifeExcdSpi 1.3.6.1.2.1.179.1.4.1.1.11
The SPI of the SA that was most recently terminated because its lifetime (in seconds or in passed bytes) was exceeded. Such terminations include those due to a failed attempt to renew an SA after its lifetime was exceeded.
OBJECT-TYPE    
  T11FcSpiIndex  

t11FcSpSaControlLifeExcdDir 1.3.6.1.2.1.179.1.4.1.1.12
The direction of frame transmission on the SA that was most recently terminated because its lifetime (in seconds or in passed bytes) was exceeded.
OBJECT-TYPE    
  T11FcSaDirection  

t11FcSpSaControlLifeExcdTime 1.3.6.1.2.1.179.1.4.1.1.13
The time of the most recent termination of an SA due to its lifetime (in seconds or in passed bytes) being exceeded. Such terminations include those due to a failed attempt to renew an SA after its lifetime was exceeded.
OBJECT-TYPE    
  TimeStamp  

t11FcSpSaNotifyAuthFailure 1.3.6.1.2.1.179.0.1
When this notification is generated, it indicates the occurrence of an Authentication failure for a received FC-2 or CT_IU frame. The t11FcSpSaControlInboundSpi, t11FcSpSaControlSource, and t11FcSpSaControlDestination objects in the varbindlist are the frame's SPI, source and destination addresses, respectively. t11FcSpSaControlFrame provides the (beginning of the) frame's content if such is available. This notification is generated only for the first occurrence of an Authentication failure on a Fabric within a time window. Subsequent occurrences of an Authentication Failure on the same Fabric within the same time window are counted but suppressed. The value of t11FcSpSaControlElapsed contains (a lower bound on) the elapsed time since the last generation of this notification for the same Fabric. The value of t11FcSpSaControlSuppressed contains the number of generations which were suppressed in the time window after that last generation, or zero if unknown.
NOTIFICATION-TYPE    

t11FcSpSaNotifyLifeExceeded 1.3.6.1.2.1.179.0.2
This notification is generated when the lifetime (in seconds or in passed bytes) of an SA is exceeded, and the SA is either immediately terminated or is terminated because an attempt to renew the SA fails. The values of t11FcSpSaControlLifeExcdSpi and t11FcSpSaControlLifeExcdDir contain the SPI and direction of the terminated SA.
NOTIFICATION-TYPE    

t11FcSpSaMIBCompliances 1.3.6.1.2.1.179.2.1
OBJECT IDENTIFIER    

t11FcSpSaMIBGroups 1.3.6.1.2.1.179.2.2
OBJECT IDENTIFIER    

t11FcSpSaMIBCompliance 1.3.6.1.2.1.179.2.1.1
The compliance statement for entities that implement FC-SP Security Associations.
MODULE-COMPLIANCE    

t11FcSpSaCapabilityGroup 1.3.6.1.2.1.179.2.2.1
A collection of objects containing information related to capabilities of FC-SP entities.
OBJECT-GROUP    

t11FcSpSaParamStatusGroup 1.3.6.1.2.1.179.2.2.2
A collection of objects containing parameters and status information related to FC-SP entities.
OBJECT-GROUP    

t11FcSpSaSummaryCountGroup 1.3.6.1.2.1.179.2.2.3
A collection of objects containing summary counters for FC-SP Security Associations.
OBJECT-GROUP    

t11FcSpSaProposalGroup 1.3.6.1.2.1.179.2.2.4
A collection of objects containing information related to making and accepting proposals for FC-SP Security Associations.
OBJECT-GROUP    

t11FcSpSaDropBypassGroup 1.3.6.1.2.1.179.2.2.5
A collection of objects containing information about Traffic Selectors of traffic to drop or bypass for FC-SP Security.
OBJECT-GROUP    

t11FcSpSaActiveGroup 1.3.6.1.2.1.179.2.2.6
A collection of objects containing information related to currently active FC-SP Security Associations.
OBJECT-GROUP    

t11FcSpSaNotifInfoGroup 1.3.6.1.2.1.179.2.2.7
A collection of objects containing information related to notifications of events concerning FC-SP Security Associations.
OBJECT-GROUP    

t11FcSpSaNotificationGroup 1.3.6.1.2.1.179.2.2.8
A collection of notifications of events concerning FC-SP Security Associations.
NOTIFICATION-GROUP