-- -- The table of Zone Attributes -- t11ZsAttribTable OBJECT-TYPE SYNTAX SEQUENCE OF T11ZsAttribEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table gives information on the Zone Attributes within the Zone Attribute Blocks in the Zone Set database of the Zone Servers on each Fabric in one or more switches. In Enhanced mode, changes to a database made via this table are always made to the 'copy' database, but values read from this table reflect the contents of either the 'copy' database or the current (committed) database as indicated by the corresponding value of t11ZsServerReadFromDatabase." ::= { t11ZsConfiguration 8 } t11ZsAttribEntry OBJECT-TYPE SYNTAX T11ZsAttribEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information about a Zone Attribute in a Zone Attribute Block (identified by t11ZsAttribBlockIndex) in the Zone Set database of a particular Fabric (identified by the value of t11ZsServerFabricIndex) on a particular switch (identified by values of fcmInstanceIndex and fcmSwitchIndex). An entry in this table cannot be created prior to its associated entry in the t11ZsAttribBlockTable. The StorageType of a row in this table is specified by the instance of t11ZsServerDatabaseStorageType that is INDEXed by the same values of fcmInstanceIndex, fcmSwitchIndex, and t11ZsServerFabricIndex." INDEX { fcmInstanceIndex, fcmSwitchIndex, t11ZsServerFabricIndex, t11ZsAttribBlockIndex, t11ZsAttribIndex } ::= { t11ZsAttribTable 1 } T11ZsAttribEntry ::= SEQUENCE {
t11ZsAttribIndex Unsigned32, t11ZsAttribType Unsigned32, t11ZsAttribValue OCTET STRING, t11ZsAttribRowStatus RowStatus } t11ZsAttribIndex OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS not-accessible STATUS current DESCRIPTION "An index value that uniquely identifies this Zone Attribute within its Zone Attribute Block in the Zone Set database of a particular Fabric on a particular switch." ::= { t11ZsAttribEntry 1 } t11ZsAttribType OBJECT-TYPE SYNTAX Unsigned32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of attribute: 0001 - Protocol 0002 - Broadcast Zone 0003 - Hard Zone 00E0 (hex) - Vendor Specific." REFERENCE "Fibre Channel - Generic Services-5 (FC-GS-5), ANSI INCITS 427-2007, section 6.4.8.3.8, Table 249." ::= { t11ZsAttribEntry 2 } t11ZsAttribValue OBJECT-TYPE SYNTAX OCTET STRING (SIZE (4..252)) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of the attribute, formatted as specified in FC-GS-5 for the type given by the corresponding instance of t11ZsAttribType. Note that FC-GS-5 requires that the length of this value is a multiple of 4 bytes." REFERENCE "Fibre Channel - Generic Services-5 (FC-GS-5), ANSI INCITS 427-2007, section 6.4.8.3.8." ::= { t11ZsAttribEntry 3 }
t11ZsAttribRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this conceptual row." ::= { t11ZsAttribEntry 4 } -- -- Activating a Zone Set -- t11ZsActivateTable OBJECT-TYPE SYNTAX SEQUENCE OF T11ZsActivateEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table provides a mechanism to allow a Zone Set to be activated on a Fabric." ::= { t11ZsConfiguration 9 } t11ZsActivateEntry OBJECT-TYPE SYNTAX T11ZsActivateEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry reflects the state of the activation of a Zone Set by a particular switch (identified by values of fcmInstanceIndex and fcmSwitchIndex) on a particular Fabric (identified by the value of t11ZsServerFabricIndex)." INDEX { fcmInstanceIndex, fcmSwitchIndex, t11ZsServerFabricIndex } ::= { t11ZsActivateTable 1 } T11ZsActivateEntry ::= SEQUENCE { t11ZsActivateRequest Unsigned32, t11ZsActivateDeactivate INTEGER, t11ZsActivateResult INTEGER, t11ZsActivateFailCause SnmpAdminString, t11ZsActivateFailDomainId FcDomainIdOrZero } t11ZsActivateRequest OBJECT-TYPE SYNTAX Unsigned32 (0..4294967295) MAX-ACCESS read-write STATUS current DESCRIPTION
"Setting this object to a value is a request for a Zone Set to be activated on the Fabric that is represented by this row. The Zone Set to be activated is the one for which t11ZsSetIndex has the same value. If a Zone Set is already active on a Fabric when a request is made to activate a different one on that Fabric, then the existing Zone Set is automatically deactivated and the specified Zone Set is activated in its place. The value of this object when read is always 0." ::= { t11ZsActivateEntry 1 } t11ZsActivateDeactivate OBJECT-TYPE SYNTAX INTEGER { deactivate(1), noop(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object to 'deactivate' is a request to deactivate the currently active Zone Set on a Fabric. Note that the deactivation of the active Zone Set allows all ports to communicate or no ports to communicate, depending on the current Default Zone behavior. No action is taken if this object is set to 'noop'. When read, the value of this object is always 'noop'." ::= { t11ZsActivateEntry 2 } t11ZsActivateResult OBJECT-TYPE SYNTAX INTEGER { activateSuccess(1), activateFailure(2), deactivateSuccess(3), deactivateFailure(4), inProgress(5), none(6) } MAX-ACCESS read-only STATUS current DESCRIPTION
"This object indicates the outcome of the most recent activation/deactivation using this entry. When the value of this object is 'inProgress', the values of the corresponding instances of t11ZsActivateRequest and t11ZsActivateDeactivate cannot be modified. The value 'none' indicates activation/deactivation has not been attempted since the last restart of the management system." ::= { t11ZsActivateEntry 3 } t11ZsActivateFailCause OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..64)) MAX-ACCESS read-only STATUS current DESCRIPTION "A textual message indicating the reason for the most recent failure of a Zone Set activation or deactivation, or the zero-length string if no information is available (e.g., because the corresponding instance of t11ZsActivateResult has the value 'none'). When the corresponding instance of t11ZsActivateResult is either 'activateFailure' or 'deactivateFailure', the value of this object indicates the reason for that failure." ::= { t11ZsActivateEntry 4 } t11ZsActivateFailDomainId OBJECT-TYPE SYNTAX FcDomainIdOrZero MAX-ACCESS read-only STATUS current DESCRIPTION "If the failure cause (as indicated by t11ZsSetFailCause) was specific to a particular device, this object contains the Domain_ID of that device. Otherwise, this object contains zero." ::= { t11ZsActivateEntry 5 }
-- -- t11ZsActiveTable -- t11ZsActiveTable OBJECT-TYPE SYNTAX SEQUENCE OF T11ZsActiveEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table containing information on the currently enforced/active Zone Set on each Fabric. An active Zone Set cannot be modified. This table will be empty when no Zone Set is activated." ::= { t11ZsConfiguration 10 } t11ZsActiveEntry OBJECT-TYPE SYNTAX T11ZsActiveEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents an active Zone Set of a particular Fabric (identified by the value of t11ZsServerFabricIndex), according to a particular switch (identified by values of fcmInstanceIndex and fcmSwitchIndex)." INDEX { fcmInstanceIndex, fcmSwitchIndex, t11ZsServerFabricIndex } ::= { t11ZsActiveTable 1 } T11ZsActiveEntry ::= SEQUENCE { t11ZsActiveZoneSetName T11ZoningName, t11ZsActiveActivateTime TimeStamp } t11ZsActiveZoneSetName OBJECT-TYPE SYNTAX T11ZoningName MAX-ACCESS read-only STATUS current DESCRIPTION "The name of this Zone Set on this Fabric." ::= { t11ZsActiveEntry 1 } t11ZsActiveActivateTime OBJECT-TYPE SYNTAX TimeStamp MAX-ACCESS read-only STATUS current DESCRIPTION
"The value of sysUpTime at which this entry was most recently activated. If this row was activated prior to the last re-initialization of the local network management system, then this object will contain a zero value." ::= { t11ZsActiveEntry 2 } -- -- Zones in the Active/Enforced Zone Set -- t11ZsActiveZoneTable OBJECT-TYPE SYNTAX SEQUENCE OF T11ZsActiveZoneEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table contains all the Zones that are present in the active Zone Sets on all Fabrics." ::= { t11ZsConfiguration 11 } t11ZsActiveZoneEntry OBJECT-TYPE SYNTAX T11ZsActiveZoneEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a Zone in the active Zone Set of a particular Fabric (identified by the value of t11ZsServerFabricIndex), according to a particular switch (identified by values of fcmInstanceIndex and fcmSwitchIndex)." INDEX { fcmInstanceIndex, fcmSwitchIndex, t11ZsServerFabricIndex, t11ZsActiveZoneIndex } ::= { t11ZsActiveZoneTable 1 } T11ZsActiveZoneEntry ::= SEQUENCE { t11ZsActiveZoneIndex Unsigned32, t11ZsActiveZoneName T11ZoningName, t11ZsActiveZoneBroadcastZoning TruthValue, t11ZsActiveZoneHardZoning TruthValue } t11ZsActiveZoneIndex OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS not-accessible STATUS current DESCRIPTION "An index value that uniquely identifies this Zone within the active Zone Set on a particular Fabric." ::= { t11ZsActiveZoneEntry 1 }
t11ZsActiveZoneName OBJECT-TYPE SYNTAX T11ZoningName MAX-ACCESS read-only STATUS current DESCRIPTION "The name of this Zone." ::= { t11ZsActiveZoneEntry 2 } t11ZsActiveZoneBroadcastZoning OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates whether broadcast Zoning is enabled on this Zone. If broadcast Zoning is enabled, then broadcast frames generated by a member in this Zone will be restricted to members in this Zone. This object is only instantiated in Enhanced mode." ::= { t11ZsActiveZoneEntry 3 } t11ZsActiveZoneHardZoning OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates whether hard Zoning is enabled on this Zone. This object is only instantiated in Enhanced mode." ::= { t11ZsActiveZoneEntry 4 } -- -- Zone Members in the Active/Enforced Zone Set -- t11ZsActiveZoneMemberTable OBJECT-TYPE SYNTAX SEQUENCE OF T11ZsActiveZoneMemberEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table contains all members of all Zones within the active Zone Set on any Fabric." ::= { t11ZsConfiguration 12 } t11ZsActiveZoneMemberEntry OBJECT-TYPE SYNTAX T11ZsActiveZoneMemberEntry MAX-ACCESS not-accessible
STATUS current DESCRIPTION "Each entry represents a member of a Zone in the active Zone Set of a particular Fabric (identified by the value t11ZsServerFabricIndex), according to a particular switch (identified by values of fcmInstanceIndex and fcmSwitchIndex)." INDEX { fcmInstanceIndex, fcmSwitchIndex, t11ZsServerFabricIndex, t11ZsActiveZoneIndex, t11ZsActiveZoneMemberIndex } ::= { t11ZsActiveZoneMemberTable 1 } T11ZsActiveZoneMemberEntry ::= SEQUENCE { t11ZsActiveZoneMemberIndex Unsigned32, t11ZsActiveZoneMemberFormat T11ZsZoneMemberType, t11ZsActiveZoneMemberID OCTET STRING } t11ZsActiveZoneMemberIndex OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS not-accessible STATUS current DESCRIPTION "An index value that uniquely identifies this member amongst the members of a particular Zone in the active Zone Set on a particular Fabric." ::= { t11ZsActiveZoneMemberEntry 1 } t11ZsActiveZoneMemberFormat OBJECT-TYPE SYNTAX T11ZsZoneMemberType MAX-ACCESS read-only STATUS current DESCRIPTION "This object identifies the identifier format of the corresponding instance of t11ZsActiveZoneMemberID." ::= { t11ZsActiveZoneMemberEntry 2 } t11ZsActiveZoneMemberID OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "This value of this object identifies the member using the format specified in the corresponding instance of t11ZsActiveZoneMemberFormat." ::= { t11ZsActiveZoneMemberEntry 3 }
-- -- Zone Attributes in the Active/Enforced Zone Set -- t11ZsActiveAttribTable OBJECT-TYPE SYNTAX SEQUENCE OF T11ZsActiveAttribEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table contains information about some of the Attributes of the Zones within the active Zone Set on each Fabric. This table contains all the types of attributes that might apply zero, one, or more times to a Zone. Attributes that apply once and only to a Zone are specified in the t11ZsActiveZoneTable. This table will always be empty in Basic mode. It will also be empty if there are no Zones in any active Zone Set having any of the applicable types of attributes." ::= { t11ZsConfiguration 13 } t11ZsActiveAttribEntry OBJECT-TYPE SYNTAX T11ZsActiveAttribEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains an Attribute of a particular Zone in the active Zone Set of a particular Fabric (identified by the value of t11ZsServerFabricIndex), according to a particular switch (identified by values of fcmInstanceIndex and fcmSwitchIndex)." INDEX { fcmInstanceIndex, fcmSwitchIndex, t11ZsServerFabricIndex, t11ZsActiveZoneIndex, t11ZsActiveAttribIndex } ::= { t11ZsActiveAttribTable 1 } T11ZsActiveAttribEntry ::= SEQUENCE { t11ZsActiveAttribIndex Unsigned32, t11ZsActiveAttribType Unsigned32, t11ZsActiveAttribValue OCTET STRING } t11ZsActiveAttribIndex OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS not-accessible
STATUS current DESCRIPTION "An index value that uniquely identifies this attribute amongst the other attributes for a particular Zone in the active Zone Set on a particular Fabric." ::= { t11ZsActiveAttribEntry 1 } t11ZsActiveAttribType OBJECT-TYPE SYNTAX Unsigned32 (0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The type of attribute: 0001 - Protocol 00E0 (hex) - Vendor Specific Note that type 2 (Hard) and type 3 (Broadcast) do not need to be represented here, because they are represented by t11ZsActiveZoneBroadcastZoning and t11ZsActiveZoneHardZoning." REFERENCE "Fibre Channel - Generic Services-5 (FC-GS-5), ANSI INCITS 427-2007, section 6.4.8.3.8, Table 249." ::= { t11ZsActiveAttribEntry 2 } t11ZsActiveAttribValue OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..252)) MAX-ACCESS read-only STATUS current DESCRIPTION "The value of the attribute, formatted according to its type as indicated by the corresponding instance of t11ZsActiveAttribType. As specified in FC-GS-5, the length of an attribute value is at least 4 bytes, and if necessary, the value is appended with zero bytes so that the length is a multiple of 4. For a Vendor-Specific attribute value, the first 8 bytes contain the T10 Vendor ID as described in FC-GS-5." REFERENCE "Fibre Channel - Generic Services-5 (FC-GS-5), ANSI INCITS 427-2007, section 6.4.8.3.8." ::= { t11ZsActiveAttribEntry 3 }
-- -- Zone Server Statistics -- t11ZsStatsTable OBJECT-TYPE SYNTAX SEQUENCE OF T11ZsStatsEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of statistics maintained by Zone Servers." ::= { t11ZsStatistics 1 } t11ZsStatsEntry OBJECT-TYPE SYNTAX T11ZsStatsEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A set of statistics for a Zone Server on a particular Fabric (identified by the value of t11ZsServerFabricIndex) on a particular switch (identified by values of fcmInstanceIndex and fcmSwitchIndex)." INDEX { fcmInstanceIndex, fcmSwitchIndex, t11ZsServerFabricIndex } ::= { t11ZsStatsTable 1 } T11ZsStatsEntry ::= SEQUENCE { t11ZsOutMergeRequests Counter32, t11ZsInMergeAccepts Counter32, t11ZsInMergeRequests Counter32, t11ZsOutMergeAccepts Counter32, t11ZsOutChangeRequests Counter32, t11ZsInChangeAccepts Counter32, t11ZsInChangeRequests Counter32, t11ZsOutChangeAccepts Counter32, t11ZsInZsRequests Counter32, t11ZsOutZsRejects Counter32 } t11ZsOutMergeRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of Merge Request Frames sent by this Zone Server to other Zone Servers in the same Fabric. This counter has no discontinuities other than those
that all Counter32s have when sysUpTime=0." ::= { t11ZsStatsEntry 1 } t11ZsInMergeAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of Merge Accept Frames received by this Zone Server from other Zone Servers in the same Fabric. This counter has no discontinuities other than those that all Counter32s have when sysUpTime=0." ::= { t11ZsStatsEntry 2 } t11ZsInMergeRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of Merge Request Frames received by this Zone Server from other Zone Servers in the same Fabric. This counter has no discontinuities other than those that all Counter32s have when sysUpTime=0." ::= { t11ZsStatsEntry 3 } t11ZsOutMergeAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of Merge Accept Frames sent by this Zone Server to other Zone Servers in the same Fabric. This counter has no discontinuities other than those that all Counter32s have when sysUpTime=0." ::= { t11ZsStatsEntry 4 } t11ZsOutChangeRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of change requests sent (via the Fabric Management Session Protocol) by this Zone Server to other Zone Servers in the same Fabric.
This includes Acquire Change Authorization requests, Stage Fabric Config Update requests, Update Fabric Config requests and Release Change Authorization requests. It also includes the corresponding types of requests defined by the Enhanced Commit Service. This counter has no discontinuities other than those that all Counter32s have when sysUpTime=0." REFERENCE "Fibre Channel - Switch Fabric-4 (FC-SW-4), ANSI INCITS 418-2006, April 2006, sections 10.6 and 13." ::= { t11ZsStatsEntry 5 } t11ZsInChangeAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of SW_ACC messages received from other Zone Servers in the same Fabric (according to the Fabric Management Session Protocol) in response to change requests by this Zone Server. This includes SW_ACC messages received in response to Acquire Change Authorization requests, to Stage Fabric Config Update requests, to Update Fabric Config requests, and to Release Change Authorization requests. It also includes responses to the corresponding types of requests defined for the Enhanced Commit Service. This counter has no discontinuities other than those that all Counter32s have when sysUpTime=0." REFERENCE "Fibre Channel - Switch Fabric-4 (FC-SW-4), ANSI INCITS 418-2006, April 2006, sections 10.6 and 13." ::= { t11ZsStatsEntry 6 } t11ZsInChangeRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of change requests received (via the Fabric Management Session Protocol) by this Zone Server from other Zone Servers in the same Fabric. This includes Acquire Change Authorization requests, Stage Fabric Config Update requests, Update Fabric Config requests
and Release Change Authorization requests. It also includes the corresponding types of requests defined by the Enhanced Commit Service. This counter has no discontinuities other than those that all Counter32s have when sysUpTime=0." REFERENCE "Fibre Channel - Switch Fabric-4 (FC-SW-4), ANSI INCITS 418-2006, April 2006, sections 10.6 and 13." ::= { t11ZsStatsEntry 7 } t11ZsOutChangeAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of SW_ACC messages sent by this Zone Server (according to the Fabric Management Session Protocol) in response to change requests from other Zone Servers in the same Fabric. This includes SW_ACC messages sent in response to Acquire Change Authorization requests, to Stage Fabric Config Update requests, to Update Fabric Config requests and to Release Change Authorization requests. It also includes responses to the corresponding types of requests defined for the Enhanced Commit Service. This counter has no discontinuities other than those that all Counter32s have when sysUpTime=0." REFERENCE "Fibre Channel - Switch Fabric-4 (FC-SW-4), ANSI INCITS 418-2006, April 2006, sections 10.6 and 13." ::= { t11ZsStatsEntry 8 } t11ZsInZsRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of Zone Server requests received by this Zone Server on this Fabric, both those received in Basic mode and in Enhanced mode. This counter has no discontinuities other than those that all Counter32s have when sysUpTime=0." ::= { t11ZsStatsEntry 9 }
t11ZsOutZsRejects OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of Zone Server requests rejected by this Zone Server on this Fabric, both those rejected in Basic mode and in Enhanced mode. This counter has no discontinuities other than those that all Counter32s have when sysUpTime=0." ::= { t11ZsStatsEntry 10 } -- -- Notification Control Table -- t11ZsNotifyControlTable OBJECT-TYPE SYNTAX SEQUENCE OF T11ZsNotifyControlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of control information for notifications generated due to Zone Server events." ::= { t11ZsConfiguration 14 } t11ZsNotifyControlEntry OBJECT-TYPE SYNTAX T11ZsNotifyControlEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains notification control information specific to a Zone Server for a particular Fabric (identified by the value of t11ZsServerFabricIndex) on a particular switch (identified by values of fcmInstanceIndex and fcmSwitchIndex). The persistence across reboots of writable values in a row of this table is specified by the instance of t11ZsServerDatabaseStorageType that is INDEXed by the same values of fcmInstanceIndex, fcmSwitchIndex, and t11ZsServerFabricIndex." INDEX { fcmInstanceIndex, fcmSwitchIndex, t11ZsServerFabricIndex } ::= { t11ZsNotifyControlTable 1 } T11ZsNotifyControlEntry ::= SEQUENCE { t11ZsNotifyRequestRejectEnable TruthValue,
t11ZsNotifyMergeFailureEnable TruthValue, t11ZsNotifyMergeSuccessEnable TruthValue, t11ZsNotifyDefZoneChangeEnable TruthValue, t11ZsNotifyActivateEnable TruthValue, t11ZsRejectCtCommandString OCTET STRING, t11ZsRejectRequestSource FcNameIdOrZero, t11ZsRejectReasonCode T11NsGs4RejectReasonCode, t11ZsRejectReasonCodeExp T11ZsRejectReasonExplanation, t11ZsRejectReasonVendorCode OCTET STRING } t11ZsNotifyRequestRejectEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether t11ZsRequestRejectNotify notifications should be generated by the Zone Server for this Fabric." ::= { t11ZsNotifyControlEntry 1 } t11ZsNotifyMergeFailureEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether t11ZsMergeFailureNotify notifications should be generated by the Zone Server for this Fabric." ::= { t11ZsNotifyControlEntry 2 } t11ZsNotifyMergeSuccessEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether t11ZsMergeSuccessNotify notifications should be generated by the Zone Server for this Fabric." ::= { t11ZsNotifyControlEntry 3 } t11ZsNotifyDefZoneChangeEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether t11ZsDefZoneChangeNotify notifications should be generated by the Zone Server
for this Fabric." ::= { t11ZsNotifyControlEntry 4 } t11ZsNotifyActivateEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether t11ZsActivateNotify notifications should be generated by the Zone Server for this Fabric." ::= { t11ZsNotifyControlEntry 5 } t11ZsRejectCtCommandString OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The binary content of the Zone Server request, formatted as an octet string (in network byte order) containing the Common Transport Information Unit (CT_IU), as described in Table 2 of FC-GS-5 (including the preamble), which was most recently rejected by the Fabric Configuration Server for this Fabric. This object contains the zero-length string if and when the CT-IU's content is unavailable. When the length of this object is 255 octets, it contains the first 255 octets of the CT-IU (in network byte order)." ::= { t11ZsNotifyControlEntry 6 } t11ZsRejectRequestSource OBJECT-TYPE SYNTAX FcNameIdOrZero MAX-ACCESS read-only STATUS current DESCRIPTION "The WWN that was the source of the CT_IU contained in the corresponding instance of t11ZsRejectCtCommandString." ::= { t11ZsNotifyControlEntry 7 } t11ZsRejectReasonCode OBJECT-TYPE SYNTAX T11NsGs4RejectReasonCode MAX-ACCESS read-only STATUS current DESCRIPTION
"The reason code corresponding to the most recent rejection of a request by the Zone Server for this Fabric." ::= { t11ZsNotifyControlEntry 8 } t11ZsRejectReasonCodeExp OBJECT-TYPE SYNTAX T11ZsRejectReasonExplanation MAX-ACCESS read-only STATUS current DESCRIPTION "When the value of t11ZsRejectReasonCode is 'Unable to perform command request', this object contains the corresponding reason code explanation." ::= { t11ZsNotifyControlEntry 9 } t11ZsRejectReasonVendorCode OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1)) MAX-ACCESS read-only STATUS current DESCRIPTION "When the value of t11ZsRejectReasonCode is 'Vendor Specific Error', this object contains the corresponding vendor-specific reason code." ::= { t11ZsNotifyControlEntry 10 } t11ZsFabricIndex OBJECT-TYPE SYNTAX Unsigned32 (0..4096) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "This object contains either a value of T11FabricIndex to identify the Fabric on which some occurrence has caused a notification to be generated, or it has the value 4096 to indicate all applicable Fabrics." ::= { t11ZsConfiguration 15 }
-- Notifications t11ZsRequestRejectNotify NOTIFICATION-TYPE OBJECTS { t11FamLocalSwitchWwn, t11ZsRejectRequestSource, t11ZsRejectCtCommandString, t11ZsRejectReasonCode, t11ZsRejectReasonCodeExp, t11ZsRejectReasonVendorCode } STATUS current DESCRIPTION "This notification is generated whenever a Zone Server (indicated by the value of t11FamLocalSwitchWwn) rejects a request. The value of t11ZsRejectCtCommandString indicates the rejected request, and the values of t11ZsRejectReasonCode, t11ZsRejectReasonCodeExp and t11ZsRejectReasonVendorCode indicate the reason for the rejection. The value of t11ZsRequestClient indicates the source of the request." ::= { t11ZsMIBNotifications 1 } t11ZsMergeFailureNotify NOTIFICATION-TYPE OBJECTS { ifIndex, t11ZsFabricIndex } STATUS current DESCRIPTION "This notification indicates that a Zone merge failure has occurred on the Fabric indicated by the value of t11ZsFabricIndex, on the interface indicated by the value of ifIndex. If multiple Virtual Fabrics are configured on an interface, and all have a Zone merge failure at the same time, then just one notification is generated and t11ZsFabricIndex has the value 4096." ::= { t11ZsMIBNotifications 2 } t11ZsMergeSuccessNotify NOTIFICATION-TYPE OBJECTS { ifIndex, t11ZsFabricIndex } STATUS current DESCRIPTION "This notification indicates that a successful Zone merge has occurred on the Fabric indicated by the value of t11ZsFabricIndex, on the interface indicated by the value of ifIndex. If multiple Virtual Fabrics are configured on an interface, and all have a successful Zone Merge
at the same time, then just one notification is generated and t11ZsFabricIndex has the value 4096." ::= { t11ZsMIBNotifications 3 } t11ZsDefZoneChangeNotify NOTIFICATION-TYPE OBJECTS { t11ZsServerDefaultZoneSetting } STATUS current DESCRIPTION "This notification indicates that the value of a Default Zone Setting has changed. The value of t11ZsServerDefaultZoneSetting contains the value after the change." ::= { t11ZsMIBNotifications 4 } t11ZsActivateNotify NOTIFICATION-TYPE OBJECTS { t11FamLocalSwitchWwn, t11ZsActivateResult } STATUS current DESCRIPTION "This notification is generated whenever a switch (indicated by the value of t11FamLocalSwitchWwn) activates/deactivates a Zone Set on a Fabric. The t11ZsActivateResult object denotes the outcome of the activation/deactivation." ::= { t11ZsMIBNotifications 5 } -- Conformance t11ZsMIBCompliances OBJECT IDENTIFIER ::= { t11ZsMIBConformance 1 } t11ZsMIBGroups OBJECT IDENTIFIER ::= { t11ZsMIBConformance 2 } t11ZsMIBCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for entities that implement the Zone Server." MODULE MANDATORY-GROUPS {t11ZsBasicGroup, t11ZsNotificationControlGroup, t11ZsNotificationGroup } GROUP t11ZsEnhancedModeGroup DESCRIPTION "This group is mandatory only for those systems with Zone Servers that support Enhanced Mode." GROUP t11ZsActivateGroup DESCRIPTION "Only entities that provide write access for activating a Zone Set support need to support
this group." GROUP t11ZsStatisticsGroup DESCRIPTION "These counters, containing Zone Server statistics, are mandatory only for those systems that count such events." OBJECT t11ZsSetRowStatus SYNTAX INTEGER { active(1) } MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsZoneRowStatus SYNTAX INTEGER { active(1) } MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsSetZoneRowStatus SYNTAX INTEGER { active(1) } MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsAliasRowStatus SYNTAX INTEGER { active(1) } MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsZoneMemberRowStatus SYNTAX INTEGER { active(1) } MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsAttribBlockRowStatus SYNTAX INTEGER { active(1) } MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsAttribRowStatus SYNTAX INTEGER { active(1) } MIN-ACCESS read-only DESCRIPTION
"Write access is not required." OBJECT t11ZsServerDatabaseStorageType MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsServerDistribute MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsServerCommit MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsServerReadFromDatabase MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsServerOperationMode MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsServerDefaultZoneSetting MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsServerMergeControlSetting MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsServerDefZoneBroadcast MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsSetName MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsZoneName
MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsZoneAttribBlock MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsAliasName MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsZoneMemberFormat MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsZoneMemberID MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsAttribBlockName MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsAttribType MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsAttribValue MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsActivateRequest MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsActivateDeactivate MIN-ACCESS read-only DESCRIPTION "Write access is not required."
OBJECT t11ZsNotifyRequestRejectEnable MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsNotifyMergeFailureEnable MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsNotifyMergeSuccessEnable MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsNotifyDefZoneChangeEnable MIN-ACCESS read-only DESCRIPTION "Write access is not required." OBJECT t11ZsNotifyActivateEnable MIN-ACCESS read-only DESCRIPTION "Write access is not required." ::= { t11ZsMIBCompliances 1 } -- Units of Conformance t11ZsBasicGroup OBJECT-GROUP OBJECTS { t11ZsServerCapabilityObject, t11ZsServerDatabaseStorageType, t11ZsServerDistribute, t11ZsServerResult, t11ZsServerReasonCode, t11ZsServerReasonCodeExp, t11ZsServerReasonVendorCode, t11ZsServerLastChange, t11ZsServerHardZoning, t11ZsServerReadFromDatabase, t11ZsServerOperationMode, t11ZsSetName, t11ZsSetRowStatus, t11ZsZoneName, t11ZsZoneAttribBlock, t11ZsZoneRowStatus, t11ZsSetZoneRowStatus, t11ZsZoneMemberFormat,
t11ZsZoneMemberID, t11ZsZoneMemberRowStatus, t11ZsActiveZoneSetName, t11ZsActiveActivateTime, t11ZsActiveZoneName, t11ZsActiveZoneMemberFormat, t11ZsActiveZoneMemberID } STATUS current DESCRIPTION "A collection of objects for displaying and updating the Zone configuration of a Zone Server capable of operating in Basic mode." ::= { t11ZsMIBGroups 1 } t11ZsEnhancedModeGroup OBJECT-GROUP OBJECTS { t11ZsServerCommit, t11ZsServerChangeModeResult, t11ZsServerDefaultZoneSetting, t11ZsServerMergeControlSetting, t11ZsServerDefZoneBroadcast, t11ZsAliasName, t11ZsAliasRowStatus, t11ZsAttribBlockName, t11ZsAttribBlockRowStatus, t11ZsAttribType, t11ZsAttribValue, t11ZsAttribRowStatus, t11ZsActiveZoneBroadcastZoning, t11ZsActiveZoneHardZoning, t11ZsActiveAttribType, t11ZsActiveAttribValue } STATUS current DESCRIPTION "A collection of additional objects for displaying and updating the Zone configuration of a Zone Server capable of operating in Enhanced mode." ::= { t11ZsMIBGroups 2 } t11ZsStatisticsGroup OBJECT-GROUP OBJECTS { t11ZsOutMergeRequests, t11ZsInMergeAccepts, t11ZsInMergeRequests, t11ZsOutMergeAccepts, t11ZsOutChangeRequests, t11ZsInChangeAccepts, t11ZsInChangeRequests,
t11ZsOutChangeAccepts, t11ZsInZsRequests, t11ZsOutZsRejects } STATUS current DESCRIPTION "A collection of objects for collecting Zone Server statistics information." ::= { t11ZsMIBGroups 3 } t11ZsNotificationControlGroup OBJECT-GROUP OBJECTS { t11ZsNotifyRequestRejectEnable, t11ZsNotifyMergeFailureEnable, t11ZsNotifyMergeSuccessEnable, t11ZsNotifyDefZoneChangeEnable, t11ZsNotifyActivateEnable, t11ZsRejectCtCommandString, t11ZsRejectRequestSource, t11ZsRejectReasonCode, t11ZsRejectReasonCodeExp, t11ZsRejectReasonVendorCode, t11ZsFabricIndex } STATUS current DESCRIPTION "A collection of notification control and notification information objects for monitoring Zone Server request rejection and Zone merge failures." ::= { t11ZsMIBGroups 4 } t11ZsActivateGroup OBJECT-GROUP OBJECTS { t11ZsActivateRequest, t11ZsActivateDeactivate, t11ZsActivateResult, t11ZsActivateFailCause, t11ZsActivateFailDomainId } STATUS current DESCRIPTION "A collection of objects that allow a Zone Set to be activated via SNMP SetRequests and provide the status and result of such an activation." ::= { t11ZsMIBGroups 5 } t11ZsNotificationGroup NOTIFICATION-GROUP NOTIFICATIONS { t11ZsRequestRejectNotify, t11ZsMergeFailureNotify,
t11ZsMergeSuccessNotify, t11ZsDefZoneChangeNotify, t11ZsActivateNotify } STATUS current DESCRIPTION "A collection of notification(s) for monitoring Zone Server request rejection, Zone merge failures and successes, and Default Zoning behavioral changes." ::= { t11ZsMIBGroups 6 } END8. IANA Considerations
IANA has assigned two MIB OIDs: one for the T11-FC-FABRIC-LOCK-MIB module (159) and one for the T11-FC-ZONE-SERVER-MIB module (160), under the mib-2 subtree.9. Security Considerations
There are many management objects defined in these MIB modules with a MAX-ACCESS clause of read-write and/or read-create. Such objects may be considered sensitive or vulnerable in some network environments. The support for SET operations in a non-secure environment without proper protection can have a negative effect on network operations. Specifically, unauthorized write access to *any* of the writable objects in these MIB modules could cause unauthorized manipulation of the Zoning information on a Zone Server, and/or the activation of an unauthorized Active Zone Set in a Fabric. This could result in allowing unauthorized connectivity, and/or denying authorized connectivity, between hosts connected to the Fibre Channel network. It could also cause the suppression of notifications (e.g., of unauthorized operations), or the disruption of network operations due to the generation of unwanted notifications. Some of the readable objects in this MIB module (i.e., objects with a MAX-ACCESS other than not-accessible) may be considered sensitive or vulnerable in some network environments. It is thus important to control even GET and/or NOTIFY access to these objects and possibly to even encrypt the values of these objects when sending them over the network via SNMP. Unauthorized read access to any of the readable objects in the t11ZsServerTable, t11ZsActiveZoneTable, t11ZsActiveZoneMemberTable, or t11ZsActiveAttribTable tables would reveal information about the
currently authorized connectivity between hosts connected to the Fibre Channel network. Unauthorized read access to any of the readable objects in the t11ZsSetTable, t11ZsZoneTable, t11ZsSetZoneTable, t11ZsAliasTable, t11ZsZoneMemberTable, t11ZsAttribBlockTable, or t11ZsAttribTable tables would reveal information about potential/alternative connectivity that could be authorized between hosts connected to the Fibre Channel network. SNMP versions prior to SNMPv3 did not include adequate security. Even if the network itself is secure (for example by using IPsec), even then, there is no control as to who on the secure network is allowed to access and GET/SET (read/change/create/delete) the objects in this MIB module. It is RECOMMENDED that implementors consider the security features as provided by the SNMPv3 framework (see [RFC3410], section 8), including full support for the SNMPv3 cryptographic mechanisms (for authentication and privacy). Further, deployment of SNMP versions prior to SNMPv3 is NOT RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to enable cryptographic security. It is then a customer/operator responsibility to ensure that the SNMP entity giving access to an instance of this MIB module is properly configured to give access to the objects only to those principals (users) that have legitimate rights to indeed GET or SET (change/create/delete) them.10. Acknowledgements
This document was originally developed and approved by the INCITS Task Group T11.5 (http://www.t11.org) as the SM-ZSM project. We wish to acknowledge the many contributions and comments from the INCITS Technical Committee T11, especially from the following: T11 Chair: Robert Snively, Brocade T11 Vice Chair: Claudio DeSanti, Cisco Systems T11.5 Chair: Roger Cummings, Symantec T11.5 Vice Chair: Scott Kipp, McData and T11.5 members. The document was subsequently a work item of the IETF's IMSS Working Group, chaired by David Black (EMC Corporation). We thank Bert Wijnen (Lucent Technologies) for his thorough review of the document. We also wish to acknowledge Dan Romascanu (Avaya), the IETF Area Director, for his comments and assistance.
11. Normative References
[RFC2578] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999. [RFC2579] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999. [RFC2580] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M. and S. Waldbusser, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999. [RFC2863] McCloghrie, K. and F. Kastenholz, "The Interfaces Group MIB", RFC 2863, June 2000. [RFC3411] Harrington, D., Presuhn, R., and B. Wijnen, "An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks", STD 58, RFC 3411, December 2002. [RFC3584] Frye, R., Levi, D., Routhier, S., and B. Wijnen, "Coexistence between Version 1, Version 2, and Version 3 of the Internet-standard Network Management Framework", RFC 3584, August 2003. [FC-GS-5] "Fibre Channel - Generic Services - 5 (FC-GS-5)", ANSI INCITS 427-2007, http://www.t11.org/t11/stat.nsf/upnum/1677-d, 2007. [FC-GS-4] "Fibre Channel - Generic Services - 4 (FC-GS-4)", ANSI INCITS 387-2004, http://www.t11.org/t11/stat.nsf/upnum/1505-d, August 2004. [FC-SW-4] "Fibre Channel - Switch Fabric - 4 (FC-SW-4)", ANSI INCITS 418-2006, http://www.t11.org/t11/stat.nsf/upnum/1674-d, December 2006. [FC-FS] "Fibre Channel - Framing and Signaling (FC-FS)", ANSI INCITS 373-2003, April 2003. [RFC4001] Daniele, M., Haberman, B., Routhier, S., and J. Schoenwaelder, "Textual Conventions for Internet Network Addresses", RFC 4001, February 2005.
[RFC4044] McCloghrie, K., "Fibre Channel Management MIB", RFC 4044, May 2005. [RFC4438] DeSanti, C., Gaonkar, V., Vivek, H., McCloghrie, K., and S. Gai, "Fibre-Channel Name Server MIB", RFC 4438, March 2006. [RFC4439] DeSanti, C., Gaonkar, V., McCloghrie, K., and S. Gai, "Fibre-Channel Fabric Address Manager MIB", RFC 4439, March 2006. [APPL-ID] Steven Wilson (FC-SW-5, Editor), "FC-SW-5 Letter to T11.5", ANSI INCITS T11/06-679v0, http://www.t11.org/ftp/t11/pub/fc/sw-5/06-679v0.pdf, 21 September 2006. Approved by the T11 and T11.5 plenary meetings on October 5, 2006. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.12. Informative References
[RFC2741] Daniele, M., Wijnen, B., Ellison, M., and D. Francisco, "Agent Extensibility (AgentX) Protocol Version 1", RFC 2741, January 2000. [RFC3410] Case, J., Mundy, R., Partain, D. and B. Stewart, "Introduction and Applicability Statements for Internet- Standard Management Framework", RFC 3410, December 2002.
Authors' Addresses
Claudio DeSanti Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134 USA Phone: +1 408 853-9172 EMail: cds@cisco.com H.K. Vivek Cisco Systems, Inc. 71 Millers Rd Bangalore, India Phone: +91 80 2289933x5117 EMail: hvivek@cisco.com Keith McCloghrie Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134 USA Phone: +1 408 526-5260 EMail: kzm@cisco.com Silvano Gai Nuova Systems 3 West Plumeria Drive San Jose, CA 95134 Phone: +1 408 387-6123 EMail: sgai@nuovasystems.com
Full Copyright Statement Copyright (C) The IETF Trust (2007). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Intellectual Property The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and BCP 79. Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf-ipr@ietf.org. Acknowledgement Funding for the RFC Editor function is currently provided by the Internet Society.