--
t11NsStatsTable OBJECT-TYPE
SYNTAX SEQUENCE OF T11NsStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains per-Fabric state and statistics
for operations upon the identified Name Server
Information Subsets."
::= { t11NsStatistics 1 }
t11NsStatsEntry OBJECT-TYPE
SYNTAX T11NsStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in this table contains state and statistics
for operations upon a Name Server Information Subset
(identified by t11NsInfoSubsetIndex) within the Fibre
Channel management instance (identified by
fcmInstanceIndex) on the Fabric (identified by
t11NsRegFabricIndex)."
INDEX { fcmInstanceIndex, t11NsInfoSubsetIndex,
t11NsRegFabricIndex }
::= { t11NsStatsTable 1 }
T11NsStatsEntry ::= SEQUENCE {
t11NsInGetReqs Counter32,
t11NsOutGetReqs Counter32,
t11NsInRegReqs Counter32,
t11NsInDeRegReqs Counter32,
t11NsInRscns Counter32,
t11NsOutRscns Counter32,
t11NsRejects Counter32,
t11NsDatabaseFull TruthValue
}
t11NsInGetReqs OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of (CT_IU) Get Requests
received requesting information from this Name
Server Information Subset on this Fabric.
This counter has no discontinuities other than those
that all Counter32s have when sysUpTime=0."
::= { t11NsStatsEntry 1 }
t11NsOutGetReqs OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of (CT_IU) Get Requests sent in
order to obtain information needed in this Name Server
Information Subset on this Fabric.
This counter has no discontinuities other than those
that all Counter32s have when sysUpTime=0."
::= { t11NsStatsEntry 2 }
t11NsInRegReqs OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of (CT_IU) Registration Requests
received to register information in the Name Server
Information Subset on this Fabric.
This counter has no discontinuities other than those
that all Counter32s have when sysUpTime=0."
::= { t11NsStatsEntry 3 }
t11NsInDeRegReqs OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of (CT_IU) De-registration Requests
received to de-register information from this Name Server
Information Subset on this Fabric.
This counter has no discontinuities other than those
that all Counter32s have when sysUpTime=0."
::= { t11NsStatsEntry 4 }
t11NsInRscns OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of received RSCNs, indicating
Name Server-related changes relating to this Name
Server Information Subset on this Fabric.
This counter has no discontinuities other than those
that all Counter32s have when sysUpTime=0."
::= { t11NsStatsEntry 5 }
t11NsOutRscns OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of transmitted RSCNs, indicating
Name Server-related changes relating to this Name
Server Information Subset on this Fabric.
This counter has no discontinuities other than those
that all Counter32s have when sysUpTime=0."
::= { t11NsStatsEntry 6 }
t11NsRejects OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of CT_IU Requests for Name
Server functions on this Name Server Information
Subset on this Fabric that were rejected.
This counter has no discontinuities other than those
that all Counter32s have when sysUpTime=0."
::= { t11NsStatsEntry 7 }
t11NsDatabaseFull OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"An indication of whether the database containing this
Name Server Information Subset is full. This object is
set to ’true’ only if the Name Server is unable to allocate
space for a new entry for the corresponding Fabric, and it is
set to ’false’ whenever an existing entry is deleted for the
corresponding Fabric."
::= { t11NsStatsEntry 8 }
--
-- Reject information objects
--
t11NsRejectTable OBJECT-TYPE
SYNTAX SEQUENCE OF T11NsRejectEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains information about the most recent
Name Server Registration Request failures for various
ports on various Fabrics.
If no information is available about the most recent
rejection of a Registration Request on a particular port
on a particular Fabric, then there will no entry in this
table for that port and Fabric.
When a t11NsRejectRegNotify notification is sent for
such a Registration Request failure, the values of the
objects in the relevant entry of this table are updated
immediately prior to generating the notification."
::= { t11NsStatus 4 }
t11NsRejectEntry OBJECT-TYPE
SYNTAX T11NsRejectEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry containing information about the most recent
rejection of a request to register information in the Name
Server Information Subset (identified by
t11NsInfoSubsetIndex) within the Fibre Channel management
instance (identified by fcmInstanceIndex) for a particular
port (identified by t11NsRegPortIdentifier) on a particular
Fabric (identified by t11NsRegFabricIndex)."
INDEX { fcmInstanceIndex, t11NsInfoSubsetIndex,
t11NsRegFabricIndex, t11NsRegPortIdentifier }
::= { t11NsRejectTable 1 }
T11NsRejectEntry ::= SEQUENCE {
t11NsRejectCtCommandString OCTET STRING,
t11NsRejectReasonCode T11NsGs4RejectReasonCode,
t11NsRejReasonCodeExp T11NsRejReasonCodeExpl,
t11NsRejReasonVendorCode OCTET STRING
}
t11NsRejectCtCommandString OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (0..255))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The binary content of the Registration Request,
formatted as an octet string (in network byte
order) containing the CT_IU, as described in
Table 2 of [FC-GS-4] (including the preamble),
which was most recently rejected for the particular
Name Server Information Subset on the particular port
on the particular Fabric.
This object contains the zero-length string
if and when the CT-IU’s content is unavailable.
When the length of this object is 255 octets, it
contains the first 255 octets of the CT-IU (in
network-byte order)."
::= { t11NsRejectEntry 1 }
t11NsRejectReasonCode OBJECT-TYPE
SYNTAX T11NsGs4RejectReasonCode
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A registration reject reason code. This object
contains the reason code of the most recent Name
Server Registration Request failure for the
particular port on the particular Fabric."
::= { t11NsRejectEntry 2 }
t11NsRejReasonCodeExp OBJECT-TYPE
SYNTAX T11NsRejReasonCodeExpl
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A registration reject reason code explanation. This
object contains the reason code explanation of the most
recent Name Server Registration Request failure for the
particular port on the particular Fabric."
::= { t11NsRejectEntry 3 }
t11NsRejReasonVendorCode OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(1))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A registration reject vendor-specific code. This
object contains the vendor-specific code of the most
recent Name Server Registration Request failure for the
particular port on the particular Fabric."
::= { t11NsRejectEntry 4 }
--
-- Notifications
--
t11NsRejectRegNotify NOTIFICATION-TYPE
OBJECTS { t11FamLocalSwitchWwn,
t11NsRegPortName, t11NsRejectCtCommandString,
t11NsRejectReasonCode, t11NsRejReasonCodeExp,
t11NsRejReasonVendorCode }
STATUS current
DESCRIPTION
"This notification is generated whenever a request to
register information in a Name Server Information
Subset (for which the corresponding instance of
t11NsInfoSubsetRejReqNotfyEnable is ’true’) is
rejected on a particular Fabric for a particular Nx_Port.
The value of t11FamLocalSwitchWwn indicates the
WWN of the switch that received the request.
(If the WWN is unavailable, the value is set to
the zero-length string.)
The value of t11NsRejectCtCommandString indicates
the rejected request, and the values of
t11NsRejectReasonCode, t11NsRejReasonCodeExp, and
t11NsRejReasonVendorCode indicate the reason for
the rejection.
The value of t11NsRegPortName represents the Port Name
if it is able to be extracted out of the Registration
Request, or otherwise the value as currently registered
on the port."
::= { t11NsNotifications 1 }
--
-- Conformance
--
t11NsMIBCompliances OBJECT IDENTIFIER ::= {t11NsMIBConformance 1}
t11NsMIBGroups OBJECT IDENTIFIER ::= {t11NsMIBConformance 2}
t11NsMIBCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for entities that
implement the Fibre Channel Name Server."
MODULE MANDATORY-GROUPS {t11NsDBGroup,
t11NsNotifyControlGroup,
t11NsNotifyGroup}
OBJECT t11NsInfoSubsetRejReqNotfyEnable
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
GROUP t11NsRequestStatsGroup
DESCRIPTION
"This group is mandatory only for an implementation
that captures statistics related to Name Server
requests."
GROUP t11NsRscnStatsGroup
DESCRIPTION
"This group is mandatory only for an implementation
that captures statistics related to Name
Server-related RSCNs."
GROUP t11NsRejectStatsGroup
DESCRIPTION
"This group is mandatory only for an implementation
that captures statistics related to Name Server
rejects."
::= { t11NsMIBCompliances 1 }
-- Units of conformance
t11NsDBGroup OBJECT-GROUP
OBJECTS { t11NsInfoSubsetSwitchIndex,
t11NsInfoSubsetTableLastChange,
t11NsInfoSubsetNumRows,
t11NsRegPortName,
t11NsRegNodeName,
t11NsRegClassOfSvc,
t11NsRegNodeIpAddress,
t11NsRegProcAssoc,
t11NsRegFc4Type,
t11NsRegPortType,
t11NsRegPortIpAddress,
t11NsRegFabricPortName,
t11NsRegHardAddress,
t11NsRegSymbolicPortName,
t11NsRegSymbolicNodeName,
t11NsRegFc4Features,
t11NsRegFc4Descriptor }
STATUS current
DESCRIPTION
"A collection of objects for monitoring the information
registered in a Name Server Information Subset."
::= { t11NsMIBGroups 1 }
t11NsRequestStatsGroup OBJECT-GROUP
OBJECTS { t11NsInGetReqs,
t11NsOutGetReqs,
t11NsInRegReqs,
t11NsInDeRegReqs,
t11NsDatabaseFull}
STATUS current
DESCRIPTION
"A collection of objects for displaying Name
Server statistics and state for Name Server requests."
::= { t11NsMIBGroups 2 }
t11NsRscnStatsGroup OBJECT-GROUP
OBJECTS { t11NsInRscns,
t11NsOutRscns }
STATUS current
DESCRIPTION
"A collection of objects for displaying Name
Server statistics for Name Server-related RSCNs."
::= { t11NsMIBGroups 3 }
t11NsRejectStatsGroup OBJECT-GROUP
OBJECTS { t11NsInfoSubsetTotalRejects,
t11NsRejects }
STATUS current
DESCRIPTION
"A collection of objects for displaying Name
Server statistics for rejects."
::= { t11NsMIBGroups 4 }
t11NsNotifyControlGroup OBJECT-GROUP
OBJECTS { t11NsRejectCtCommandString,
t11NsRejectReasonCode,
t11NsRejReasonCodeExp,
t11NsRejReasonVendorCode,
t11NsInfoSubsetRejReqNotfyEnable }
STATUS current
DESCRIPTION
"A collection of notification control and
notification information objects for monitoring
rejections of Name Server registrations."
::= { t11NsMIBGroups 5 }
t11NsNotifyGroup NOTIFICATION-GROUP
NOTIFICATIONS {t11NsRejectRegNotify }
STATUS current
DESCRIPTION
"A collection of notifications for monitoring
rejections of Name Server registrations."
::= { t11NsMIBGroups 6 }
END
7. Acknowledgements
This document began life as a work item of the INCITS Task Group
T11.5. We wish to acknowledge the many contributions and comments
from the INCITS Technical Committee T11, including the following:
T11 Chair: Robert Snively, Brocade
T11 Vice Chair: Claudio DeSanti, Cisco Systems
T11.5 Chair: Roger Cummings, Symantec
T11.5 members, especially:
Ken Hirata, Emulex
Scott Kipp, McData
Michael O’Donnell, McData
Elizabeth G. Rodriguez, Dot Hill
Steven L. Wilson, Brocade
Bob Nixon, Emulex
Thanks also to Orly Nicklass of RAD Data Communications, Bert Wijnen
of Lucent, and those members of the IMSS WG who provided review
comments.
8. Normative References
[RFC2578] McCloghrie, K., Perkins, D., and J. Schoenwaelder,
"Structure of Management Information Version 2 (SMIv2)",
STD 58, RFC 2578, April 1999.
[RFC2579] McCloghrie, K., Perkins, D., and J. Schoenwaelder,
"Textual Conventions for SMIv2", STD 58, RFC 2579, April
1999.
[RFC2580] McCloghrie, K., Perkins, D., and J. Schoenwaelder,
"Conformance Statements for SMIv2", STD 58, RFC 2580,
April 1999.
[RFC3411] Harrington, D., Presuhn, R., and B. Wijnen, "An
Architecture for Describing Simple Network Management
Protocol (SNMP) Management Frameworks", STD 62, RFC
3411, December 2002.
[FC-FS] "Fibre Channel - Framing and Signaling (FC-FS)" ANSI
INCITS 373-2003, April 2003.
[FC-GS-3] "Fibre Channel - Generic Services - 3 (FC-GS-3)", ANSI
INCITS 348-2000, November 2000.
[FC-GS-4] "Fibre Channel - Generic Services - 4 (FC-GS-4)", ANSI
INCITS 387-2004, February 2004.
[FC-SW-3] "Fibre Channel - Switch Fabric - 3 (FC-SW-3)", ANSI
INCITS 384-2004, June 2004.
[FC-SW-4] "Fibre Channel - Switch Fabric - 4 (FC-SW-4)", ANSI
INCITS 418-2006, 2006.
[FC-MGMT] McCloghrie, K., "Fibre Channel Management MIB", RFC
4044, May 2005.
[FC-FAM-MIB] DeSanti, C., Gaonkar, V., McCloghrie, K., and S. Gai,
"Fibre Channel Fabric Address Manager MIB", RFC 4439,
April 2006.
9. Informative References
[RFC2741] Daniele, M., Wijnen, B., Ellison, M., and D. Francisco,
"Agent Extensibility (AgentX) Protocol Version 1", RFC
2741, January 2000.
[RFC2837] Teow, K., "Definitions of Managed Objects for the Fabric
Element in Fibre Channel Standard", RFC 2837, May 2000.
[RFC3410] Case, J., Mundy, R., Partain, D., and B. Stewart,
"Introduction and Applicability Statements for
Internet-Standard Management Framework", RFC 3410,
December 2002.
[IF-MIB] McCloghrie, K. and F. Kastenholz, "The Interfaces Group
MIB", RFC 2863, June 2000.
10. IANA Considerations
IANA has assigned a MIB OID to the T11-FC-NAME-SERVER-MIB module
under the appropriate subtree.
11. Security Considerations
There is one management object defined in this MIB module with a
MAX-ACCESS clause of read-write and/or read-create. Such objects may
be considered sensitive or vulnerable in some network environments.
The support for SET operations in a non-secure environment without
proper protection can have a negative effect on network operations.
This object and its sensitivity/vulnerability is:
t11NsInfoSubsetRejReqNotfyEnable -- the ability to enable/disable
notifications.
Such objects may be considered sensitive or vulnerable in some
network environments. For example, the ability to change network
topology or network speed may afford an attacker the ability to
obtain better performance at the expense of other network users. The
support for SET operations in a non-secure environment without proper
protection can have a negative effect on network operations.
Some of the readable objects in this MIB module (i.e., objects with a
MAX-ACCESS other than not-accessible) may be considered sensitive or
vulnerable in some network environments. It is thus important to
control even GET and/or NOTIFY access to these objects and possibly
to even encrypt the values of these objects when sending them over
the network via SNMP. These are the tables and objects and their
sensitivity/vulnerability:
t11NsRegTable -- contains information about registered Nx_Ports.
t11NsStatsTable -- contains statistics and state information about
the Name Server.
SNMP versions prior to SNMPv3 did not include adequate security.
Even if the network itself is secure (for example by using IPsec),
even then, there is no control as to who on the secure network is
allowed to access and GET/SET (read/change/create/delete) the objects
in this MIB module.
It is RECOMMENDED that implementors consider the security features as
provided by the SNMPv3 framework (see [RFC3410], section 8),
including full support for the SNMPv3 cryptographic mechanisms (for
authentication and privacy).
Further, deployment of SNMP versions prior to SNMPv3 is NOT
RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to
enable cryptographic security. It is then a customer/operator
responsibility to ensure that the SNMP entity giving access to an
instance of this MIB module is properly configured to give access to
the objects only to those principals (users) that have legitimate
rights to indeed GET or SET (change/create/delete) them.
Authors’ Addresses
Claudio DeSanti
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134 USA
Phone: +1 408 853-9172
EMail: cds@cisco.com
Vinay Gaonkar
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134 USA
Phone: +1 408 527-8576
EMail: vgaonkar@cisco.com
H.K. Vivek
Cisco Systems, Inc.
71 Millers Rd
Bangalore, India
Phone: +91 80 2289933x5117
EMail: hvivek@cisco.com
Keith McCloghrie
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA USA 95134
Phone: +1 408-526-5260
EMail: kzm@cisco.com
Silvano Gai
Retired
Full Copyright Statement
Copyright (C) The Internet Society (2006).
This document is subject to the rights, licenses and restrictions
contained in BCP 78, and except as set forth therein, the authors
retain all their rights.