T11-FC-SP-POLICY-MIB DEFINITIONS ::= BEGIN

IMPORTS
	MODULE-IDENTITY,
	OBJECT-TYPE,
	NOTIFICATION-TYPE,
	mib-2,
	Counter32,
	Unsigned32
		FROM SNMPv2-SMI		-- [RFC2578]
	RowStatus,
	StorageType,
	TimeStamp,
	TruthValue
		FROM SNMPv2-TC		-- [RFC2579]
	MODULE-COMPLIANCE,
	OBJECT-GROUP,
	NOTIFICATION-GROUP
		FROM SNMPv2-CONF		-- [RFC2580]
	SnmpAdminString
		FROM SNMP-FRAMEWORK-MIB		-- [RFC3411]
	InetAddress,
	InetPortNumber,
	InetAddressType
		FROM INET-ADDRESS-MIB		-- [RFC4001]
	fcmInstanceIndex,
	FcNameIdOrZero,
	FcDomainIdOrZero
		FROM FC-MGMT-MIB		-- [RFC4044]
	T11NsGs4RejectReasonCode
		FROM T11-FC-NAME-SERVER-MIB		-- [RFC4438]
	T11FabricIndex
		FROM T11-TC-MIB		-- [RFC4439]
	T11FcSpAlphaNumName,
	T11FcSpAlphaNumNameOrAbsent,
	T11FcSpPolicyName,
	T11FcSpPolicyNameType,
	T11FcSpPolicyObjectType,
	T11FcSpPolicyHashFormat,
	T11FcSpPolicyHashValue,
	T11FcSpHashCalculationStatus
		FROM T11-FC-SP-TC-MIB;

t11FcSpPolicyMIB MODULE-IDENTITY
	LAST-UPDATED "200808200000Z"	-- Aug 20, 2008 12:00:00 AM
	ORGANIZATION "This MIB module was developed through the
coordinated effort of two organizations:
T11 began the development and the IETF (in
the IMSS Working Group) finished it."
	CONTACT-INFO
		"Claudio DeSanti
		Cisco Systems, Inc.
		170 West Tasman Drive
		San Jose, CA 95134 USA
		EMail: cds@cisco.com






		Keith McCloghrie
		Cisco Systems, Inc.
		170 West Tasman Drive
		San Jose, CA 95134 USA
		Email: kzm@cisco.com"
	DESCRIPTION
		"This MIB module specifies the management information
		required to manage Fabric Policies as defined by Fibre
		Channel's FC-SP specification.

		FC-SP uses the term 'Policy Objects', sometimes abbreviated
		to just 'Objects', to refer to containers used to hold the
		data by which Fabric Policies are specified/stored.  This
		obviously has the potential to cause confusion between
		'Policy Objects' and 'MIB objects'.  The DESCRIPTIONs in
		this MIB module attempt to avoid such confusion by the use
		of different adjectives and capitalization, even though such
		mechanisms are less effective when used in descriptors.

		Some types of Policy Objects contain multiple items of
		information, each of which are held in the same format
		within the Policy Object.  In such cases, FC-SP uses the
		term 'Entry' to describe each instance of the common format.
		For example, FC-SP defines an Attribute Policy Object as
		containing one or more 'Attribute Entries'.  Again, this MIB
		module attempts to avoid confusion by the use of adjectives
		and capitalization to distinguish an Entry within a Policy
		Object from an entry within a MIB table.

		A Fabric's database of Policy Objects consists of a set of
		active Objects that are to be enforced by that Fabric, as
		well as non-active Objects that are not enforced.
		Operations defined (in FC-SP) for Policy Management are:

		 - Add/Get/Remove operations on individual non-active
		   Policy Objects,
		 - Activate/Deactivate operations on a Policy Summary
		   Object, and
		 - Get operations on the active Policy Summary Object
		   and/or on individual active Policy Objects.

		This MIB module has five parts:

		 1) Active Policy Objects - read-only MIB objects
		    representing the set of active Policy Objects for
		    each Fabric,

		 2) Activate/Deactivate Operations





		    - a read-write MIB object to invoke an Activate
		      operation of the policies specified via a non-active
		      Policy Summary Object, and
		    - a read-write MIB object to invoke a Deactivate
		      operation.

		 3) Non-active Policy Objects
		    - read-create MIB objects to allow the creation of
		      non-active Policy Summary Objects (which reference
		      non-active Policy Objects), and
		    - read-create MIB objects representing non-active
		      Policy Objects.

		 4) Statistics

		 5) Control information and Notifications

		Copyright (C) The IETF Trust (2008).  This version
		of this MIB module is part of RFC 5324;  see the RFC
		itself for full legal notices."
	REVISION "200808200000Z"	-- Aug 20, 2008 12:00:00 AM
	DESCRIPTION
		"Initial version of this MIB module, published as RFC 5324."
	-- 1.3.6.1.2.1.178
	::= { mib-2 178 }


t11FcSpPoMIBNotifications OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.0
	::= { t11FcSpPolicyMIB 0 }

t11FcSpPoMIBObjects OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.1
	::= { t11FcSpPolicyMIB 1 }

t11FcSpPoMIBConformance OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.2
	::= { t11FcSpPolicyMIB 2 }

t11FcSpPoActive OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.1.1
	::= { t11FcSpPoMIBObjects 1 }

t11FcSpPoOperations OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.1.2
	::= { t11FcSpPoMIBObjects 2 }

t11FcSpPoNonActive OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.1.3
	::= { t11FcSpPoMIBObjects 3 }

t11FcSpPoStatistics OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.1.4
	::= { t11FcSpPoMIBObjects 4 }

t11FcSpPoControl OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.1.5
	::= { t11FcSpPoMIBObjects 5 }

--
--  Part 1 - Active Policy Objects
--

t11FcSpPoTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table containing top-level information about active
		FC-SP policies on various Fabrics."
	-- 1.3.6.1.2.1.178.1.1.1
	::= { t11FcSpPoActive 1 }


t11FcSpPoEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about active FC-SP policies
		for a particular Fabric, managed as part of the Fibre
		Channel management instance identified by fcmInstanceIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex }
	-- 1.3.6.1.2.1.178.1.1.1.1
	::= { t11FcSpPoTable 1 }


T11FcSpPoEntry ::= SEQUENCE {

	t11FcSpPoFabricIndex          T11FabricIndex,
	t11FcSpPoPolicySummaryObjName T11FcSpAlphaNumName,
	t11FcSpPoAdminFabricName      FcNameIdOrZero,
	t11FcSpPoActivatedTimeStamp   TimeStamp }


t11FcSpPoFabricIndex OBJECT-TYPE
	SYNTAX  T11FabricIndex
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"An index value that uniquely identifies a particular
		Fabric."
	-- 1.3.6.1.2.1.178.1.1.1.1.1
	::= { t11FcSpPoEntry 1 }


t11FcSpPoPolicySummaryObjName OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumName
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The name of this Fabric's (active) Policy Summary Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.3 and table 104."
	-- 1.3.6.1.2.1.178.1.1.1.1.2
	::= { t11FcSpPoEntry 2 }


t11FcSpPoAdminFabricName OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (8))
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The administratively-specified name for this Fabric, as
		specified in the active Switch Membership List Object.
		This value is meaningful only when Static Domain_IDs are
		in use in a Fabric (see FC-SW-4).  Static Domain_IDs are
		administratively enabled by a setting of the Switch Flags





		in each Switch Entry in the Switch Membership List Object.
		If Static Domain_IDs are not in use, this value might be
		'0000000000000000'h.

		The t11FamEnable, t11FamFabricName, and
		t11FamConfigDomainIdType objects defined in the
		T11-FC-FABRIC-ADDR-MGR-MIB module are also concerned with
		the use of an administratively-specified name for a Fabric
		and Static Domain_IDs.  When FC-SP Policy is in use in a
		Fabric, the values of t11FamEnable, t11FamFabricName, and
		t11FamConfigDomainIdType must be read-only and reflect the
		active Policy Objects.  For example, the value of
		t11FamFabricName must reflect the value of
		t11FcSpPoAdminFabricName."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, section 7.1.4.1 and table 108.
		- Fibre Channel - Switch Fabric-4 (FC-SW-4),
		  ANSI INCITS 418-2006, April 2006, section 7.1.
		- Fibre Channel Fabric Address Manager MIB', RFC 4439,
		  March 2006."
	-- 1.3.6.1.2.1.178.1.1.1.1.3
	::= { t11FcSpPoEntry 3 }


t11FcSpPoActivatedTimeStamp OBJECT-TYPE
	SYNTAX  TimeStamp
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The value of sysUpTime at which this Fabric's Policy
		Summary Object was last activated, or zero if the same
		Policy Summary Object has been active since the last
		restart of the management system."
	-- 1.3.6.1.2.1.178.1.1.1.1.4
	::= { t11FcSpPoEntry 4 }


--
-- The table of Policy Summary Objects
--

t11FcSpPoSummaryTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoSummaryEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of information about active Policy Objects listed
		within FC-SP Policy Summary Objects."
	-- 1.3.6.1.2.1.178.1.1.2
	::= { t11FcSpPoActive 2 }


t11FcSpPoSummaryEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoSummaryEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one of the active
		Policy Objects listed within the Policy Summary Object for
		the Fabric identified by t11FcSpPoFabricIndex and managed
		within the Fibre Channel management instance identified by
		fcmInstanceIndex.

		How many Policy Objects of a given type can be active at
		any one time for a given Fabric depends on the type, as
		specified in FC-SP.  For some types, it is one per Fabric;
		for other types, more than one can be active per Fabric.
		In both of these cases, the absence of any entries in this
		table for a particular type is equivalent to there being one
		Policy Object of that type that is empty, e.g., a Switch
		Membership List Object that identifies zero Switches."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.3 and table 104."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoSummaryPolicyNameType,
		t11FcSpPoSummaryPolicyName }
	-- 1.3.6.1.2.1.178.1.1.2.1
	::= { t11FcSpPoSummaryTable 1 }


T11FcSpPoSummaryEntry ::= SEQUENCE {

	t11FcSpPoSummaryPolicyNameType T11FcSpPolicyNameType,
	t11FcSpPoSummaryPolicyName     T11FcSpPolicyName,
	t11FcSpPoSummaryPolicyType     T11FcSpPolicyObjectType,
	t11FcSpPoSummaryHashFormat     T11FcSpPolicyHashFormat,
	t11FcSpPoSummaryHashValue      T11FcSpPolicyHashValue }


t11FcSpPoSummaryPolicyNameType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyNameType {
			nodeName(1),
			alphaNumericName(7) }
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The combination of t11FcSpPoSummaryPolicyNameType and
		t11FcSpPoSummaryPolicyName specify the name of the Policy
		Object contained in the Policy Summary Object.






		The type of name is 'nodeName' if the value of the
		corresponding instance of t11FcSpPoSummaryPolicyType is
		'switchConnectivity', or 'alphaNumericName' otherwise."
	-- 1.3.6.1.2.1.178.1.1.2.1.1
	::= { t11FcSpPoSummaryEntry 1 }


t11FcSpPoSummaryPolicyName OBJECT-TYPE
	SYNTAX  T11FcSpPolicyName
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The combination of t11FcSpPoSummaryPolicyNameType and
		t11FcSpPoSummaryPolicyName specify the name of the Policy
		Object contained in the Policy Summary Object."
	-- 1.3.6.1.2.1.178.1.1.2.1.2
	::= { t11FcSpPoSummaryEntry 2 }


t11FcSpPoSummaryPolicyType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyObjectType
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The 'Identifier' that specifies the type of this
		Policy Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.3.1 and table 104."
	-- 1.3.6.1.2.1.178.1.1.2.1.3
	::= { t11FcSpPoSummaryEntry 3 }


t11FcSpPoSummaryHashFormat OBJECT-TYPE
	SYNTAX  T11FcSpPolicyHashFormat
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The format of this Policy Object's hash value as
		contained in the corresponding instance of the
		t11FcSpPoSummaryHashValue object."
	-- 1.3.6.1.2.1.178.1.1.2.1.4
	::= { t11FcSpPoSummaryEntry 4 }


t11FcSpPoSummaryHashValue OBJECT-TYPE
	SYNTAX  T11FcSpPolicyHashValue
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The hash value of this Policy Object, in the format
		identified by the corresponding instance of the
		t11FcSpPoSummaryHashFormat object."
	-- 1.3.6.1.2.1.178.1.1.2.1.5
	::= { t11FcSpPoSummaryEntry 5 }


--
-- Switch Entries in Active Switch Membership List Objects
--

t11FcSpPoSwMembTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoSwMembEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of Switch Entries in active Switch Membership List
		Objects.

		One Switch Membership List Object is represented by all
		of the rows of this table that have the same values
		of fcmInstanceIndex and t11FcSpPoFabricIndex."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 110."
	-- 1.3.6.1.2.1.178.1.1.3
	::= { t11FcSpPoActive 3 }


t11FcSpPoSwMembEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoSwMembEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one Switch Entry
		within the active Switch Membership List Object for the
		Fabric identified by t11FcSpPoFabricIndex and managed
		within the Fibre Channel management instance identified
		by fcmInstanceIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoSwMembSwitchNameType,
		t11FcSpPoSwMembSwitchName }
	-- 1.3.6.1.2.1.178.1.1.3.1
	::= { t11FcSpPoSwMembTable 1 }


T11FcSpPoSwMembEntry ::= SEQUENCE {

	t11FcSpPoSwMembSwitchNameType T11FcSpPolicyNameType,
	t11FcSpPoSwMembSwitchName     FcNameIdOrZero,
	t11FcSpPoSwMembSwitchFlags    BITS,
	t11FcSpPoSwMembDomainID       FcDomainIdOrZero,
	t11FcSpPoSwMembPolicyDataRole INTEGER,
	t11FcSpPoSwMembAuthBehaviour  BITS,
	t11FcSpPoSwMembAttribute      T11FcSpAlphaNumNameOrAbsent }


t11FcSpPoSwMembSwitchNameType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyNameType {
			nodeName(1),
			restrictedNodeName(2),
			wildcard(5),
			restrictedWildcard(6) }
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"If the value of this object is 'nodeName' or
		'restrictedNodeName', then the combination of
		this object and t11FcSpPoSwMembSwitchName specify the
		Switch Name of this Switch Entry.

		The membership is restricted or unrestricted based on the
		name type.  Restricted membership means that the Switch is
		not allowed to be part of the Fabric unless allowed by a
		specific Switch Connectivity Object.  Unrestricted
		membership means that the Switch is allowed to be part of
		the Fabric unless disallowed by a specific Switch
		Connectivity Object.

		The values of 'wildcard' and 'restrictedWildcard' provide
		the means to specify whether to allow/deny membership for
		Switches not explicitly named in the Switch Membership
		List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 110."
	-- 1.3.6.1.2.1.178.1.1.3.1.1
	::= { t11FcSpPoSwMembEntry 1 }


t11FcSpPoSwMembSwitchName OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (8))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"When the value of t11FcSpPoSwMembSwitchNameType is
		'wildcard' or 'restrictedWildcard', this object has the
		value '0000000000000000'h.

		Otherwise, the combination of t11FcSpPoSwMembSwitchNameType
		and this object specify the Switch Name of this Switch
		Entry."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 110."
	-- 1.3.6.1.2.1.178.1.1.3.1.2
	::= { t11FcSpPoSwMembEntry 2 }


t11FcSpPoSwMembSwitchFlags OBJECT-TYPE
	SYNTAX  BITS {
			staticDomainID(0),
			insistentDomainID(1),
			serialPortsAccess(2),
			physicalPortsAccess(3),
			managerRole(4) }
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"Configurable options in respect to the administration
		of Policy Objects at this Switch:

		   'staticDomainID'      - if this bit is set, the Switch
		uses the 'Static Domain_IDs behavior' (as defined in
		FC-SW-4).  This bit needs to have the same setting for all
		Switches in a Fabric's Switch Membership List Object, or
		else the Fabric will partition.  If this bit is set, the
		Domain_ID for the Switch is given by the corresponding
		instance of t11FcSpPoSwMembDomainID.

		   'insistentDomainID'   -  if this bit is set, the
		Switch uses the 'Insistent Domain_ID behavior' (see
		t11FamConfigDomainId of T11-FC-FABRIC-ADDR-MGR-MIB), the
		Domain_ID for the Switch is given by the corresponding
		instance of t11FcSpPoSwMembDomainID.

		   'serialPortsAccess'   - the Switch allows management
		through serial ports when and only when this bit is set.

		   'physicalPortsAccess' - the Switch allows management
		through the physical panel when and only when this bit
		is set.

		   'managerRole'         - the Switch is allowed to change
		the Fabric Policy configuration (on receipt of any of the
		EACA, Enhanced Stage Fabric Configuration (ESFC), Enhanced
		Update Fabric Configuration (EUFC), ACA, SFC, or UFC
		SW_ILSs) if and only if this bit is set.

		Whenever a Fabric has Active Policy Objects, the value of
		the t11FamConfigDomainIdType object defined in the
		T11-FC-FABRIC-ADDR-MGR-MIB module must be read-only and
		reflect the values of the 'staticDomainID' and
		'insistentDomainID' bits of this object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,





		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, section 7.1.4.1 and table 112.
		- Fibre Channel - Switch Fabric-4 (FC-SW-4),
		  ANSI INCITS 418-2006, April 2006, section 7.1.
		- t11FamConfigDomainIdType, T11-FC-FABRIC-ADDR-MGR-MIB,
		  Fibre Channel Fabric Address Manager MIB, RFC 4439."
	-- 1.3.6.1.2.1.178.1.1.3.1.3
	::= { t11FcSpPoSwMembEntry 3 }


t11FcSpPoSwMembDomainID OBJECT-TYPE
	SYNTAX  FcDomainIdOrZero
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The specified Domain_ID value when either of the
		'staticDomainID' or 'insistentDomainID' bits are set in
		the corresponding instance of t11FcSpPoSwMembSwitchFlags.

		Whenever a Fabric has Active Policy Objects, the value
		of the t11FamConfigDomainId object defined in the
		T11-FC-FABRIC-ADDR-MGR-MIB module must be read-only and
		reflect the value of this object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, section 7.1.4.1 and tables 111 and 112.
		- t11FamConfigDomainId, T11-FC-FABRIC-ADDR-MGR-MIB,
		  Fibre Channel Fabric Address Manager MIB, RFC 4439."
	-- 1.3.6.1.2.1.178.1.1.3.1.4
	::= { t11FcSpPoSwMembEntry 4 }


t11FcSpPoSwMembPolicyDataRole OBJECT-TYPE
	SYNTAX  INTEGER {
			client(1),
			autonomous(2),
			server(3) }
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The role of the Switch in terms of which Policy data
		it retains/maintains:

		  'client' - the Switch operates as a Client Switch.
		A Client Switch maintains its own Switch Connectivity
		Object and all Fabric-wide List Objects.  If FC-SP
		Zoning is used, a Client Switch maintains only the
		subset of the Active Zone Set that it requires to
		enforce the current Fabric Zoning configuration.






		  'autonomous' -  the Switch operates as an Autonomous
		Switch.  An Autonomous Switch maintains its own Switch
		Connectivity Object and all Fabric-wide List Objects.
		This is the same as 'client' except that if FC-SP Zoning
		is used, an Autonomous Switch maintains a complete copy
		of the Fabric Zoning Database.

		  'server' - the Switch operates as a Server Switch.
		A Server Switch maintains all Fabric-wide List Objects
		and the Switch Connectivity Objects of each Switch in
		the Fabric.  If FC-SP Zoning is used, a Server Switch
		maintains a complete copy of the Fabric Zoning Database."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 113."
	-- 1.3.6.1.2.1.178.1.1.3.1.5
	::= { t11FcSpPoSwMembEntry 5 }


t11FcSpPoSwMembAuthBehaviour OBJECT-TYPE
	SYNTAX  BITS {
			mustAuthenticate(0),
			rejectIsFailure(1) }
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The authentication behaviour of the Switch:

		  'mustAuthenticate' - if this bit is set, all connections
		between this Switch and neighbor Switches must be
		authenticated.

		  'rejectIsFailure' - if this bit is set, the rejection of
		an AUTH_Negotiate message must be considered as an
		authentication failure by this Switch."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 114."
	-- 1.3.6.1.2.1.178.1.1.3.1.6
	::= { t11FcSpPoSwMembEntry 6 }


t11FcSpPoSwMembAttribute OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumNameOrAbsent
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The name of an active Attribute Policy Object that is
		defined for this Switch, or the zero-length string.  The





		zero-length string indicates that no Attribute Policy
		Object is defined for this Switch."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 110."
	-- 1.3.6.1.2.1.178.1.1.3.1.7
	::= { t11FcSpPoSwMembEntry 7 }


--
-- Node Entries in Active Node Membership List Objects
--

t11FcSpPoNoMembTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNoMembEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of Node Entries in active Node Membership List
		Objects.

		One Node Membership List Object is represented by all
		of the rows of this table that have the same values
		of fcmInstanceIndex and t11FcSpPoFabricIndex."
	-- 1.3.6.1.2.1.178.1.1.4
	::= { t11FcSpPoActive 4 }


t11FcSpPoNoMembEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNoMembEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one Node Entry
		within the active Node Membership List Object for the
		Fabric identified by t11FcSpPoFabricIndex and managed
		within the Fibre Channel management instance identified
		by fcmInstanceIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNoMembNodeNameType,
		t11FcSpPoNoMembNodeName }
	-- 1.3.6.1.2.1.178.1.1.4.1
	::= { t11FcSpPoNoMembTable 1 }


T11FcSpPoNoMembEntry ::= SEQUENCE {

	t11FcSpPoNoMembNodeNameType  T11FcSpPolicyNameType,
	t11FcSpPoNoMembNodeName      FcNameIdOrZero,
	t11FcSpPoNoMembFlags         BITS,
	t11FcSpPoNoMembCtAccessIndex Unsigned32,
	t11FcSpPoNoMembAttribute     T11FcSpAlphaNumNameOrAbsent }


t11FcSpPoNoMembNodeNameType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyNameType {
			nodeName(1),
			restrictedNodeName(2),
			portName(3),
			restrictedPortName(4),
			wildcard(5),
			restrictedWildcard(6) }
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"If the value of this object is 'wildcard' or
		'restrictedWildcard', this Node Entry applies to Nodes not
		explicitly named in the Node Membership List Object.

		Otherwise, the combination of this object and
		t11FcSpPoNoMembNodeName specify the name of this Node Entry
		in the active Node Membership List Object.  A Node is
		identified by its Node Name or by one or more of its Port
		Names.

		Restricted membership means that a Node is not allowed to be
		connected to the Fabric unless allowed by a specific Switch
		Connectivity Object.  Unrestricted membership means that a
		Node is allowed to be connected to the Fabric unless
		disallowed by a specific Switch Connectivity Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 116."
	-- 1.3.6.1.2.1.178.1.1.4.1.1
	::= { t11FcSpPoNoMembEntry 1 }


t11FcSpPoNoMembNodeName OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (8))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"If the value of t11FcSpPoNoMembNodeNameType is
		'wildcard' or 'restrictedWildcard', this object has the
		value '0000000000000000'h.

		Otherwise, the combination of t11FcSpPoNoMembNodeNameType
		and this object specify the name of this Node Entry is the
		active Node Membership List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 116."
	-- 1.3.6.1.2.1.178.1.1.4.1.2
	::= { t11FcSpPoNoMembEntry 2 }


t11FcSpPoNoMembFlags OBJECT-TYPE
	SYNTAX  BITS {
			scsiEnclosureAccess(0),
			authenticationRequired(1) }
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"Configurable options in respect to the administration
		of Policy Objects at this Node:

		     'scsiEnclosureAccess'      - the Node is allowed to
		control any Switch through SCSI Enclosure Services if this
		bit is set.  If a Switch does not support SCSI Enclosure
		Services, this bit is ignored.

		     'authenticationRequired'   - the Node is required to
		authenticate itself to any Switch to which it is connected
		if and only if this bit is set."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 118."
	-- 1.3.6.1.2.1.178.1.1.4.1.3
	::= { t11FcSpPoNoMembEntry 3 }


t11FcSpPoNoMembCtAccessIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (0..4294967295)
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"If the value of this object is zero, then access by this
		Node to Generic Services is not limited by a Common
		Transport Access Specifier.

		Otherwise, the limits are specified by the set of Common
		Transport Access Descriptors contained in those rows of
		the t11FcSpPoCtDescrTable for the same Fabric and for which
		the value of t11FcSpPoCtDescrSpecifierIndex is the same as
		the value of this object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		section 7.1.4.1 and tables 118/119/120/121."
	-- 1.3.6.1.2.1.178.1.1.4.1.4
	::= { t11FcSpPoNoMembEntry 4 }


t11FcSpPoNoMembAttribute OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumNameOrAbsent
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The name of an active Attribute Policy Object that is
		defined for this Node, or the zero-length string.  The
		zero-length string indicates that no Attribute Policy
		Object is defined for this Node."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 116."
	-- 1.3.6.1.2.1.178.1.1.4.1.5
	::= { t11FcSpPoNoMembEntry 5 }


--
--
-- Common Transport Access Descriptors
--

t11FcSpPoCtDescrTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoCtDescrEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of Common Transport Access Descriptors being used
		within active Policy Objects.

		A Common Transport Access Specifier is a list of Common
		Transport Access Descriptors that specify whether a Node
		is allowed to access a Generic Service or Sub-Server.

		An active Common Transport Access Specifier is represented
		by all rows of this table that have the same values of
		fcmInstanceIndex, t11FcSpPoFabricIndex, and
		t11FcSpPoCtDescrSpecifierIndex."
	-- 1.3.6.1.2.1.178.1.1.5
	::= { t11FcSpPoActive 5 }


t11FcSpPoCtDescrEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoCtDescrEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one Common
		Transport Access Descriptor of an active Common Transport
		Access Specifier used within the Fabric identified by
		t11FcSpPoFabricIndex and managed within the Fibre Channel
		management instance identified by fcmInstanceIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoCtDescrSpecifierIndex,
		t11FcSpPoCtDescrIndex }
	-- 1.3.6.1.2.1.178.1.1.5.1
	::= { t11FcSpPoCtDescrTable 1 }


T11FcSpPoCtDescrEntry ::= SEQUENCE {

	t11FcSpPoCtDescrSpecifierIndex Unsigned32,
	t11FcSpPoCtDescrIndex          Unsigned32,
	t11FcSpPoCtDescrFlags          BITS,
	t11FcSpPoCtDescrGsType         OCTET STRING,
	t11FcSpPoCtDescrGsSubType      OCTET STRING }


t11FcSpPoCtDescrSpecifierIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"An index value that uniquely identifies a particular
		Common Transport Access Specifier within a Fabric."
	-- 1.3.6.1.2.1.178.1.1.5.1.1
	::= { t11FcSpPoCtDescrEntry 1 }


t11FcSpPoCtDescrIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"An index value that uniquely identifies a particular
		Common Transport Access Descriptor within a Common Transport
		Access Specifier."
	-- 1.3.6.1.2.1.178.1.1.5.1.2
	::= { t11FcSpPoCtDescrEntry 2 }


t11FcSpPoCtDescrFlags OBJECT-TYPE
	SYNTAX  BITS {
			allow(0),
			gsTypeWildcard(1),
			gsSubTypeWildcard(2),
			readOnly(3) }
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The flag bits that specify how access is to be limited by
		this Common Transport Access Descriptor:

		 - allow -- access to the specified Generic Service and
		   Server is allowed if this bit is set, and is to be denied
		   if this bit is not set.

		 - gsTypeWildcard -- if this bit is set, the Generic Service





		   to be allowed/denied is specified by the value of
		   t11FcSpPoCtDescrGsType.  If this bit is set, then the
		   gsSubTypeWildcard bit must not be set.

		 - gsSubTypeWildcard -- if this bit is set, the Generic
		   Service to be allowed/denied is specified by the value of
		   t11FcSpPoCtDescrGsSubType.  If this bit is set, then the
		   gsTypeWildcard bit must not be set.

		 - readOnly -- if this bit is set, then access is to be
		   granted only for reading."
	-- 1.3.6.1.2.1.178.1.1.5.1.3
	::= { t11FcSpPoCtDescrEntry 3 }


t11FcSpPoCtDescrGsType OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (1))
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The GS_Type of the Generic Service (e.g., the FC-GS-5
		Management Service) that is subject to access control.
		This value is ignored if the gsTypeWildcard bit is not set
		in the corresponding value of t11FcSpPoCtDescrFlags."
	REFERENCE
		"- Fibre Channel - Generic Services-5 (FC-GS-5),
		ANSI INCITS 427-2006, section 4.3.2.4."
	-- 1.3.6.1.2.1.178.1.1.5.1.4
	::= { t11FcSpPoCtDescrEntry 4 }


t11FcSpPoCtDescrGsSubType OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (1))
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The GS_Subtype of the Generic Server (e.g., the Fabric Zone
		Server) that is subject to access control.  This value is
		ignored if the gsSubTypeWildcard bit is not set in the
		corresponding value of t11FcSpPoCtDescrFlags."
	REFERENCE
		"- Fibre Channel - Generic Services-5 (FC-GS-5),
		ANSI INCITS 427-2006, section 4.3.2.5."
	-- 1.3.6.1.2.1.178.1.1.5.1.5
	::= { t11FcSpPoCtDescrEntry 5 }


--
--
-- Switches/Nodes in Active Switch Connectivity Objects
--

t11FcSpPoSwConnTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoSwConnEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of active Switch Connectivity Objects.

		A Switch Connectivity Object defines to which other
		Switches or Nodes a particular Switch may/may not be
		connected at the Node level and/or at the Port level."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.6.1, tables 123/124."
	-- 1.3.6.1.2.1.178.1.1.6
	::= { t11FcSpPoActive 6 }


t11FcSpPoSwConnEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoSwConnEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains the name of either a Switch or a Node
		with which any port of a particular Switch, or a particular
		port of that Switch, is allowed or not allowed to be
		connected.

		The particular Switch is on the Fabric identified by
		t11FcSpPoFabricIndex and managed within the Fibre Channel
		management instance identified by fcmInstanceIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoSwConnSwitchName,
		t11FcSpPoSwConnAllowedType,
		t11FcSpPoSwConnPortNameOrAll,
		t11FcSpPoSwConnAllowedIndex }
	-- 1.3.6.1.2.1.178.1.1.6.1
	::= { t11FcSpPoSwConnTable 1 }


T11FcSpPoSwConnEntry ::= SEQUENCE {

	t11FcSpPoSwConnSwitchName      FcNameIdOrZero,
	t11FcSpPoSwConnAllowedType     INTEGER,
	t11FcSpPoSwConnPortNameOrAll   FcNameIdOrZero,
	t11FcSpPoSwConnAllowedIndex    Unsigned32,
	t11FcSpPoSwConnAllowedNameType T11FcSpPolicyNameType,
	t11FcSpPoSwConnAllowedName     T11FcSpPolicyName }


t11FcSpPoSwConnSwitchName OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (8))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The name of the particular Switch for which this Switch





		Connectivity Object specifies topology restrictions."
	-- 1.3.6.1.2.1.178.1.1.6.1.1
	::= { t11FcSpPoSwConnEntry 1 }


t11FcSpPoSwConnAllowedType OBJECT-TYPE
	SYNTAX  INTEGER {
			switch(1),
			node(2) }
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"This object specifies whether this row refers to
		Switch-to-Switch or Switch-to-Node connectivity, i.e.,
		whether the corresponding instance of
		t11FcSpPoSwConnAllowedName specifies the name of a Switch
		or the name of a Node."
	-- 1.3.6.1.2.1.178.1.1.6.1.2
	::= { t11FcSpPoSwConnEntry 2 }


t11FcSpPoSwConnPortNameOrAll OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (0 | 8))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"This object specifies either the particular port to which
		this topology restriction applies, or if the value is the
		zero-length string, that the topology restriction applies
		to all ports on the particular Switch.

		In the FC-SP Policy Database, restrictions for a particular
		port are formatted within a Port Connectivity Entry of a
		Switch Connectivity Object, whereas restrictions for all
		ports on the Switch are specified in the main part of a
		Switch Connectivity Object, i.e., not in a Port Connectivity
		Entry."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.6.1, tables 123/124."
	-- 1.3.6.1.2.1.178.1.1.6.1.3
	::= { t11FcSpPoSwConnEntry 3 }


t11FcSpPoSwConnAllowedIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"When multiple rows in this table apply to the same
		port(s) in the same Switch's Switch Connectivity Object,
		this object provides a unique index value to distinguish
		between such rows."
	-- 1.3.6.1.2.1.178.1.1.6.1.4
	::= { t11FcSpPoSwConnEntry 4 }


t11FcSpPoSwConnAllowedNameType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyNameType {
			nodeName(1),
			restrictedNodeName(2),
			portName(3),
			restrictedPortName(4),
			wildcard(5),
			restrictedWildcard(6) }
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"If the value of this object is 'wildcard' or
		'restrictedWildcard', this row specifies whether
		connectivity is allowed/not allowed with entities not
		explicitly named by other rows.

		Otherwise, the combination of t11FcSpPoSwConnAllowedNameType
		and t11FcSpPoSwConnAllowedName specify the name of:

		- a Switch (if t11FcSpPoSwConnAllowedType = 'switch'), or
		- a Node (if t11FcSpPoSwConnAllowedType = 'node')

		to which connectivity is:

		 - allowed by 'nodeName' and 'portName',
		 - not allowed by 'restrictedNodeName' and
		   'restrictedPortName'."
	-- 1.3.6.1.2.1.178.1.1.6.1.5
	::= { t11FcSpPoSwConnEntry 5 }


t11FcSpPoSwConnAllowedName OBJECT-TYPE
	SYNTAX  T11FcSpPolicyName (SIZE (8))
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"If the value of t11FcSpPoSwConnAllowedNameType is
		'wildcard' or 'restrictedWildcard', this object has the
		value '0000000000000000'h.

		Otherwise, the combination of t11FcSpPoSwConnAllowedNameType
		and t11FcSpPoSwConnAllowedName specify the name of:

		- a Switch (if t11FcSpPoSwConnAllowedType = 'switch'), or
		- a Node (if t11FcSpPoSwConnAllowedType = 'node')

		to which connectivity is allowed/restricted."
	-- 1.3.6.1.2.1.178.1.1.6.1.6
	::= { t11FcSpPoSwConnEntry 6 }


--
-- IP Management Entries in Active IP Management List Objects
--

t11FcSpPoIpMgmtTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoIpMgmtEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of IP Management Entries in active IP Management
		List Objects.  An IP Management List Object is a
		Fabric-wide Policy Object that describes which IP hosts
		are allowed to manage a Fabric.

		One IP Management List Object is represented by all
		of the rows of this table that have the same values
		of fcmInstanceIndex and t11FcSpPoFabricIndex."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.7"
	-- 1.3.6.1.2.1.178.1.1.7
	::= { t11FcSpPoActive 7 }


t11FcSpPoIpMgmtEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoIpMgmtEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one IP Management
		Entry within the active IP Management List Object for the
		Fabric identified by t11FcSpPoFabricIndex and managed
		within the Fibre Channel management instance identified
		by fcmInstanceIndex.

		The Policy Object Name of an IP Management Entry Policy
		Object is either an IPv6 Address Range or an IPv4 Address
		Range, where in each case, the range is specified as two
		addresses: the low and high ends of the range.  In
		particular, since the Policy Object Name in this situation
		can only be an IPv6 Address Range or an IPv4 Address Range,
		it is represented here by three MIB objects defined as a
		(InetAddressType, InetAddress, InetAddress) tuple, in which
		the first address is the low end of the range, the second
		address is the high end of the range, and both addresses are
		of the type designated by InetAddressType.

		In theory, the use of t11FcSpPoIpMgmtEntryNameLow and
		t11FcSpPoIpMgmtEntryNameHigh (which both have the syntax





		of InetAddress) in the INDEX could cause the need for
		excessively long OIDs.  In practice, this can't happen
		because FC-SP doesn't allow these objects to be specified
		as DNS names."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoIpMgmtEntryNameType,
		t11FcSpPoIpMgmtEntryNameLow,
		t11FcSpPoIpMgmtEntryNameHigh }
	-- 1.3.6.1.2.1.178.1.1.7.1
	::= { t11FcSpPoIpMgmtTable 1 }


T11FcSpPoIpMgmtEntry ::= SEQUENCE {

	t11FcSpPoIpMgmtEntryNameType InetAddressType,
	t11FcSpPoIpMgmtEntryNameLow  InetAddress,
	t11FcSpPoIpMgmtEntryNameHigh InetAddress,
	t11FcSpPoIpMgmtWkpIndex      Unsigned32,
	t11FcSpPoIpMgmtAttribute     T11FcSpAlphaNumNameOrAbsent }


t11FcSpPoIpMgmtEntryNameType OBJECT-TYPE
	SYNTAX  InetAddressType
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The combination of t11FcSpPoIpMgmtNameType,
		t11FcSpPoIpMgmtNameLow, and t11FcSpPoIpMgmtNameHigh
		specify the Internet address range of this IP Management
		Entry in the IP Management List Object.

		The FC-SP specification does not allow the use of a
		DNS domain name to specify the address at the lower end
		or at the higher end of the Internet address range, nor does
		it allow the specification of a zone index.  Therefore, the
		type of address must be one of: 'ipv4', or 'ipv6'."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		sections 7.1.7.1 & 7.1.2, tables 103/126."
	-- 1.3.6.1.2.1.178.1.1.7.1.1
	::= { t11FcSpPoIpMgmtEntry 1 }


t11FcSpPoIpMgmtEntryNameLow OBJECT-TYPE
	SYNTAX  InetAddress (SIZE (4 | 16))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The lower end of an Internet address range.  The type
		of this address is given by the corresponding instance
		of t11FcSpPoIpMgmtEntryNameType.





		The combination of t11FcSpPoIpMgmtNameType,
		t11FcSpPoIpMgmtNameLow, and t11FcSpPoIpMgmtNameHigh
		specify the Internet address range of this IP Management
		Entry in the IP Management List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		sections 7.1.7.1 & 7.1.2, tables 103/126."
	-- 1.3.6.1.2.1.178.1.1.7.1.2
	::= { t11FcSpPoIpMgmtEntry 2 }


t11FcSpPoIpMgmtEntryNameHigh OBJECT-TYPE
	SYNTAX  InetAddress (SIZE (4 | 16))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The higher end of an Internet address range.  The type
		of this address is given by the corresponding instance
		of t11FcSpPoIpMgmtEntryNameType.

		The combination of t11FcSpPoIpMgmtNameType,
		t11FcSpPoIpMgmtNameLow, and t11FcSpPoIpMgmtNameHigh
		specify the Internet address range of this IP Management
		Entry in the IP Management List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, sections 7.1.7.1 & 7.1.2, tables 103/126."
	-- 1.3.6.1.2.1.178.1.1.7.1.3
	::= { t11FcSpPoIpMgmtEntry 3 }


t11FcSpPoIpMgmtWkpIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (0..4294967295)
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"This object identifies the restrictions for IP management
		access by IP hosts in this range of IP addresses, specified
		as the set of Well-Known Protocols Access Descriptors
		contained in those rows of the t11FcSpPoWkpDescrTable for
		which the value of t11FcSpPoWkpDescrSpecifierIndex is the
		same as the value of this object.  A value of zero indicates
		that this IP Management Entry does not identify a Well-Known
		Protocols Access Specifier."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.7.1 and tables 127/129."
	-- 1.3.6.1.2.1.178.1.1.7.1.4
	::= { t11FcSpPoIpMgmtEntry 4 }


t11FcSpPoIpMgmtAttribute OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumNameOrAbsent
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The name of an active Attribute Policy Object that is
		defined for this IP Management entry or the zero-length
		string.  The zero-length string indicates that no Attribute
		Policy Object is defined for this IP Management entry."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.7.1 and table 128."
	-- 1.3.6.1.2.1.178.1.1.7.1.5
	::= { t11FcSpPoIpMgmtEntry 5 }


--
-- Well-Known Protocol Access Descriptors
--

t11FcSpPoWkpDescrTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoWkpDescrEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of the Well-Known Protocol Access Descriptors
		being used within active Policy Objects.

		A Well-Known Protocol Access Specifier is a list of
		Well-Known Protocol Access Descriptors each of which
		specifies a protocol number, a port number, and/or various
		flags specifying how IP management access is restricted.

		A Well-Known Protocol Transport Access Specifier is
		represented by all rows of this table that have the
		same values of fcmInstanceIndex, t11FcSpPoFabricIndex,
		and t11FcSpPoWkpDescrSpecifierIndex."
	-- 1.3.6.1.2.1.178.1.1.8
	::= { t11FcSpPoActive 8 }


t11FcSpPoWkpDescrEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoWkpDescrEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one Well-Known
		Protocol Access Descriptor of a Well-Known Protocol
		Access Specifier used within the Fabric identified by
		t11FcSpPoFabricIndex and managed within the Fibre Channel
		management instance identified by fcmInstanceIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoWkpDescrSpecifierIndex,
		t11FcSpPoWkpDescrIndex }
	-- 1.3.6.1.2.1.178.1.1.8.1
	::= { t11FcSpPoWkpDescrTable 1 }


T11FcSpPoWkpDescrEntry ::= SEQUENCE {

	t11FcSpPoWkpDescrSpecifierIndex Unsigned32,
	t11FcSpPoWkpDescrIndex          Unsigned32,
	t11FcSpPoWkpDescrFlags          BITS,
	t11FcSpPoWkpDescrWkpNumber      Unsigned32,
	t11FcSpPoWkpDescrDestPort       InetPortNumber }


t11FcSpPoWkpDescrSpecifierIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"An index value that uniquely identifies a particular
		Well-Known Protocol Access Specifier within a Fabric."
	-- 1.3.6.1.2.1.178.1.1.8.1.1
	::= { t11FcSpPoWkpDescrEntry 1 }


t11FcSpPoWkpDescrIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"An index value that uniquely identifies a particular
		Well-Known Protocol Access Descriptor within a Well-Known
		Protocol Access Specifier."
	-- 1.3.6.1.2.1.178.1.1.8.1.2
	::= { t11FcSpPoWkpDescrEntry 2 }


t11FcSpPoWkpDescrFlags OBJECT-TYPE
	SYNTAX  BITS {
			allow(0),
			wkpWildcard(1),
			destPortWildcard(2),
			readOnly(3) }
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The flag bits that specify how access is to be limited by
		this Well-Known Protocol Access Descriptor:

		 - allow -- IP management access using this protocol/port
		   is allowed if this bit is set, and to be denied if this
		   bit is not set.






		 - wkpWildcard -- if this bit is set, the IP Protocol number
		   of the Well-Known Protocol to be allowed/denied is
		   specified by the value of t11FcSpPoWkpDescrWkpNumber.

		 - destPortWildcard -- if this bit is set, the Destination
		   (TCP/UDP) Port number of the Well-Known Protocol to be
		   allowed/denied is specified by the value of
		   t11FcSpPoWkpDescrDestPort.

		 - readOnly -- if this bit is set, then access is to be
		   granted only for reading."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.7.1 and table 131."
	-- 1.3.6.1.2.1.178.1.1.8.1.3
	::= { t11FcSpPoWkpDescrEntry 3 }


t11FcSpPoWkpDescrWkpNumber OBJECT-TYPE
	SYNTAX  Unsigned32 (0..255)
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"When the 'wkpWildcard' bit is set in the corresponding
		instance of t11FcSpPoWkpDescrFlags, this object specifies
		the IP protocol number of the Well-Known Protocol."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, section 7.1.7.1 and table 131.
		- http://www.iana.org/assignments/protocol-numbers."
	-- 1.3.6.1.2.1.178.1.1.8.1.4
	::= { t11FcSpPoWkpDescrEntry 4 }


t11FcSpPoWkpDescrDestPort OBJECT-TYPE
	SYNTAX  InetPortNumber
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"When the 'destPortWildcard' bit is set in the corresponding
		instance of t11FcSpPoWkpDescrFlags, this object specifies
		the Destination (TCP/UDP) Port number of the Well-Known
		Protocol.  When the 'destPortWildcard' bit is reset, this
		object is ignored (and can have the value zero)."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, section 7.1.7.1 and table 131.
		- http://www.iana.org/assignments/port-numbers."
	-- 1.3.6.1.2.1.178.1.1.8.1.5
	::= { t11FcSpPoWkpDescrEntry 5 }


--
-- Attribute Entries in Active Attribute Policy Objects
--

t11FcSpPoAttribTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoAttribEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of the Attribute Policy Objects being used within
		active Policy Objects.  In the FC-SP Policy Database, each
		Attribute Policy Object consists of an Attribute Object Name
		and a set of Attribute Entries.

		An active Attribute Policy Object is represented by all the
		Attribute Entries in this table that have the same value
		of t11FcSpPoAttribName."
	-- 1.3.6.1.2.1.178.1.1.9
	::= { t11FcSpPoActive 9 }


t11FcSpPoAttribEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoAttribEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each row contains information specific to an Attribute
		Entry contained within an Attribute Policy Object that is
		active within the Fabric identified by t11FcSpPoFabricIndex
		and managed within the Fibre Channel management instance
		identified by fcmInstanceIndex.

		For some types of Attribute Policy Objects, it is valuable
		to break out some semantically significant parts of the
		Policy Object's value into their own individual MIB
		objects; for example, to extract the one or more individual
		Authentication Protocol Identifiers and associated
		Authentication Protocol Parameters out of an Attribute
		Object containing a 'AUTH_Negotiate Message Payload'.
		For such types, another MIB table is defined to hold the
		extracted values in MIB objects specific to the Attribute
		Policy Object's type.  In such cases, the
		t11FcSpPoAttribExtension object in this table points to the
		other MIB table.

		If the value of one Attribute Entry is too large (more than
		256 bytes) to be contained within the value of one instance
		of t11FcSpPoAttribValue, then one row in this table contains
		the first 256 bytes, and one (or more) other row(s) in this
		table contain the rest of the value."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoAttribName,
		t11FcSpPoAttribEntryIndex,
		t11FcSpPoAttribPartIndex }
	-- 1.3.6.1.2.1.178.1.1.9.1
	::= { t11FcSpPoAttribTable 1 }


T11FcSpPoAttribEntry ::= SEQUENCE {

	t11FcSpPoAttribName       T11FcSpAlphaNumName,
	t11FcSpPoAttribEntryIndex Unsigned32,
	t11FcSpPoAttribPartIndex  Unsigned32,
	t11FcSpPoAttribType       Unsigned32,
	t11FcSpPoAttribValue      OCTET STRING,
	t11FcSpPoAttribExtension  OBJECT IDENTIFIER }


t11FcSpPoAttribName OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumName
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The name of the Attribute Policy Object containing one
		or more Attribute Entries."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.8.1 and table 133."
	-- 1.3.6.1.2.1.178.1.1.9.1.1
	::= { t11FcSpPoAttribEntry 1 }


t11FcSpPoAttribEntryIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A unique value to distinguish this Attribute Entry
		from other Attribute Entries contained in the same
		Attribute Policy Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.8.1, tables 133/134."
	-- 1.3.6.1.2.1.178.1.1.9.1.2
	::= { t11FcSpPoAttribEntry 2 }


t11FcSpPoAttribPartIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"When the value of an Attribute Entry is shorter than 257
		bytes, the whole value is contained in one instance of





		t11FcSpPoAttribValue, and the value of this object is 1.

		If the value of an Attribute Entry is longer than 256 bytes,
		then that value is divided up on 256-byte boundaries such
		that all parts are 256 bytes long except the last part, which
		is shorter if necessary, with each such part contained in
		a separate row of this table, and the value of this object
		is set to the part number.  That is, this object has the
		value of 1 for bytes 0-255, the value of 2 for bytes
		256-511, etc."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.8.1, tables 134/135."
	-- 1.3.6.1.2.1.178.1.1.9.1.3
	::= { t11FcSpPoAttribEntry 3 }


t11FcSpPoAttribType OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The type of attribute.  The first type to be defined is:

		t11FcSpPoAttribType    t11FcSpPoAttribValue
		===================    ====================
		  '00000001'h          The AUTH_Negotiate Message Payload

		"
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		section 7.1.8.1, tables 134/135 and table 10."
	-- 1.3.6.1.2.1.178.1.1.9.1.4
	::= { t11FcSpPoAttribEntry 4 }


t11FcSpPoAttribValue OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (0..256))
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The value of an Attribute Entry is divided up on 256-byte
		boundaries such that all parts are 256 bytes long except the
		last part, which is shorter if necessary, and each such part
		is contained in a separate instance of this object.

		The value of this object is independent of whether some
		parts of its value are broken out into separate MIB objects
		pointed to by the corresponding instance of
		t11FcSpPoAttribExtension."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		section 7.1.8.1, tables 134/135 and table 10."
	-- 1.3.6.1.2.1.178.1.1.9.1.5
	::= { t11FcSpPoAttribEntry 5 }


t11FcSpPoAttribExtension OBJECT-TYPE
	SYNTAX  OBJECT IDENTIFIER
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"For some types of Attribute Policy Object, the value of
		this MIB object points to type-specific MIB objects that
		contain individual/broken-out parts of the Attribute Policy
		Object's value.  If this object doesn't point to such
		type-specific MIB objects, then it contains the value:
		zeroDotZero.

		In particular, when the value of t11FcSpPoAttribType
		indicates 'AUTH_Negotiate Message Payload', one or more
		Authentication Protocol Identifiers and their associated
		Authentication Protocol Parameters are embedded within the
		value of the corresponding instance of t11FcSpPoAttribValue;
		MIB objects to contain these individual values are defined
		in the t11FcSpPoAuthProtTable.  Thus, for an 'AUTH_Negotiate
		Message Payload' Attribute, the value of this object
		contains an OID within the t11FcSpPoAuthProtTable, e.g.,
		of the whole table, of an individual row, or of an individual
		instance within the table."
	-- 1.3.6.1.2.1.178.1.1.9.1.6
	::= { t11FcSpPoAttribEntry 6 }


--
-- Auth. Protocol Parameters in Active Attribute Policy Objects
--

t11FcSpPoAuthProtTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoAuthProtEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of Authentication Protocol Identifier and
		Authentication Protocol Parameters that are embedded in
		Attribute Policy Objects being used within active Policy
		Objects.

		This table is used for Attribute Entries of Attribute Policy
		Objects for which the value of t11FcSpPoAttribType indicates
		'AUTH_Negotiate Message Payload' and the value of
		t11FcSpPoAttribExtension contains the OID of this table."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		sections 5.3.2 & 7.1.8.1, tables 134/135 and tables
		10/11."
	-- 1.3.6.1.2.1.178.1.1.10
	::= { t11FcSpPoActive 10 }


t11FcSpPoAuthProtEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoAuthProtEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about an Authentication
		Protocol that is extracted out of the Attribute Entry
		(identified by t11FcSpPoAttribEntryIndex) of the Policy
		Attribute Object (identified by t11FcSpPoAttribName), which
		is active within the Fabric identified by
		t11FcSpPoFabricIndex and managed within the Fibre Channel
		management instance identified by fcmInstanceIndex.

		If the value of one Attribute Protocol Parameters string is
		too large (more than 256 bytes) to be contained within the
		value of one instance of t11FcSpPoAuthProtParams, then one
		row in this table contains the first 256 bytes, and one (or
		more) other row(s) in this table contain the rest of the
		value."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoAttribName,
		t11FcSpPoAttribEntryIndex,
		t11FcSpPoAuthProtIdentifier,
		t11FcSpPoAuthProtPartIndex }
	-- 1.3.6.1.2.1.178.1.1.10.1
	::= { t11FcSpPoAuthProtTable 1 }


T11FcSpPoAuthProtEntry ::= SEQUENCE {

	t11FcSpPoAuthProtIdentifier Unsigned32,
	t11FcSpPoAuthProtPartIndex  Unsigned32,
	t11FcSpPoAuthProtParams     OCTET STRING }


t11FcSpPoAuthProtIdentifier OBJECT-TYPE
	SYNTAX  Unsigned32 (0..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The Authentication Protocol Identifier:

		        1      = DH-CHAP
		        2      = FCAP
		        3      = FCPAP





		        4      = IKEv2
		        5      = IKEv2-AUTH
		  240 thru 255 = Vendor Specific Protocols

		all other values are 'Reserved' (by T11)."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 5.3.2, table 11."
	-- 1.3.6.1.2.1.178.1.1.10.1.1
	::= { t11FcSpPoAuthProtEntry 1 }


t11FcSpPoAuthProtPartIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"When the value of an Attribute Protocol Parameters string
		is shorter than 257 bytes, the whole value is contained in
		one instance of t11FcSpPoAuthProtParams, and the value of
		this object is 1. (This includes the case when the Attribute
		Protocol Parameters string is zero bytes in length.)

		If the value of an Authentication Protocol Parameters string
		is longer than 256 bytes, then that value is divided up on
		256-byte boundaries such that all parts are 256 bytes long
		except the last part, which is shorter if necessary, with
		each such part contained in a separate row of this table,
		and the value of this object is set to the part number.
		That is, this object has the value of 1 for bytes 0-255,
		the value of 2 for bytes 256-511, etc."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 5.3.2, table 10."
	-- 1.3.6.1.2.1.178.1.1.10.1.2
	::= { t11FcSpPoAuthProtEntry 2 }


t11FcSpPoAuthProtParams OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (0..256))
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The value of an Authentication Protocol Parameters string
		is divided up on 256-byte boundaries such that all parts
		are 256 bytes long except the last part, which is shorter
		if necessary, and each such part is contained in a
		separate instance of this object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,





		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 5.3.2, table 10."
	-- 1.3.6.1.2.1.178.1.1.10.1.3
	::= { t11FcSpPoAuthProtEntry 3 }


--
-- Part 2 - Activate/De-Activate Operations
--
--
-- Objects to Invoke Activate/De-Activate Operations
--

t11FcSpPoOperTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoOperEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table that allows Activate and Deactivate operations
		to be invoked for FC-SP Policies on various Fabrics.

		Activating a new policy configuration is a two-step
		process:

		 1) create a single Policy Summary Object as a set of rows
		    in the t11FcSpPoNaSummaryTable specifying a set of
		    Policy Objects that describe the new configuration; and
		 2) activate that Policy Summary Object using the
		    t11FcSpPoOperActivate object defined in this table.

		Deactivating the current policy configuration is a one-step
		process: the current Policy Summary Object is deactivated
		using the t11FcSpPoOperDeActivate object."
	-- 1.3.6.1.2.1.178.1.2.1
	::= { t11FcSpPoOperations 1 }


t11FcSpPoOperEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoOperEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry allows an Activate and/or Deactivate operation
		to be invoked on a particular Fabric, which is managed as
		part of the Fibre Channel management instance identified
		by fcmInstanceIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex }
	-- 1.3.6.1.2.1.178.1.2.1.1
	::= { t11FcSpPoOperTable 1 }


T11FcSpPoOperEntry ::= SEQUENCE {

	t11FcSpPoOperActivate   T11FcSpAlphaNumName,
	t11FcSpPoOperDeActivate T11FcSpAlphaNumName,
	t11FcSpPoOperResult     INTEGER,
	t11FcSpPoOperFailCause  SnmpAdminString }


t11FcSpPoOperActivate OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumName
	MAX-ACCESS read-write
	STATUS  current
	DESCRIPTION
		"Writing the name of a Policy Summary Object into this
		object is a request to activate the policy configuration
		described by the combination of all rows in
		t11FcSpPoNaSummaryTable that have that name as their
		value of t11FcSpPoNaSummaryName and are for the same
		Fabric.

		Before issuing such a request, the relevant rows in the
		t11FcSpPoNaSummaryTable must exist and represent a complete
		and consistent Policy Summary Object.  If they do not, the
		request will fail, with t11FcSpPoOperResult having the
		'badSummaryObject' value.

		When read, the value of this object is always the zero-
		length string.

		Writing to this object does not delete (or in any way
		affect) any rows in the MIB tables for non-active
		Policy Objects."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3.6.2"
	-- 1.3.6.1.2.1.178.1.2.1.1.1
	::= { t11FcSpPoOperEntry 1 }


t11FcSpPoOperDeActivate OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumName
	MAX-ACCESS read-write
	STATUS  current
	DESCRIPTION
		"Writing the current value of t11FcSpPoPolicySummaryObjName
		into this object (for a particular Fabric) is a request
		to deactivate that Fabric's current policy configuration.
		Writing any other value into this object is an error
		(e.g., 'wrongValue').

		When read, the value of this object is always the zero-
		length string."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3.6.3"
	-- 1.3.6.1.2.1.178.1.2.1.1.2
	::= { t11FcSpPoOperEntry 2 }


t11FcSpPoOperResult OBJECT-TYPE
	SYNTAX  INTEGER {
			activateSuccess(1),
			badSummaryObject(2),
			activateFailure(3),
			deactivateSuccess(4),
			deactivateFailure(5),
			inProgress(6),
			none(7) }
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"This object indicates the status/result of the last
		activation/deactivation that was invoked via the
		corresponding instance of t11FcSpPoOperActivate or
		t11FcSpPoOperDeActivate.

		When the value of this object is 'inProgress', the
		values of the corresponding instances of
		t11FcSpPoOperActivate and t11FcSpPoOperDeActivate
		cannot be modified.

		The value 'badSummaryObject' indicates an activation
		request that did not name a complete and consistent
		Policy Summary Object.

		The value 'none' indicates activation/deactivation
		has not been attempted since the last restart of
		the management system."
	-- 1.3.6.1.2.1.178.1.2.1.1.3
	::= { t11FcSpPoOperEntry 3 }


t11FcSpPoOperFailCause OBJECT-TYPE
	SYNTAX  SnmpAdminString (SIZE (0..64))
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"A textual message indicating the reason for the
		most recent activation/deactivation failure, or the
		zero-length string if no information is available
		(e.g., because the corresponding instance of
		t11FcSpPoOperResult has the value 'none').





		When the corresponding instance of
		t11FcSpPoOperResult is either 'activateFailure'
		or 'deactivateFailure', the value of this object
		indicates the reason for that failure."
	-- 1.3.6.1.2.1.178.1.2.1.1.4
	::= { t11FcSpPoOperEntry 4 }


--
-- Part 3 - Non-Active Policy Objects
--
--
-- Non-Active Policy Summary Objects Available for Activation
--

t11FcSpPoNaSummaryTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaSummaryEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of non-active Policy Summary Objects available
		to be activated.

		The functionality of this table deviates slightly from FC-SP
		in that FC-SP specifies that the only Policy Summary Object
		is the Active one, i.e., FC-SP does not store non-active
		Policy Summary Objects in the Policy Database.  Instead,
		FC-SP requires a new Policy Summary Object to be created
		for, and embedded within, every Activate (APS) request.
		Thus, the newly created Policy Summary Object outlasts the
		APS request only as the new active Policy Summary Object and
		only if the APS succeeds.  In contrast, the Activate
		operation provided by this MIB module consists of two steps:

		1) create a non-active Policy Summary Object as a set of
		   entries in this table describing a new configuration;
		2) activate a Policy Summary Object (stored as a set of
		   entries in this table) using t11FcSpPoOperActivate.

		These two steps are only loosely connected, i.e., the result
		of the first operation is a non-active Policy Summary Object
		that is retained (in this table) even if it isn't
		immediately activated.  Even after an attempt to activate
		it succeeds or fails, a non-active Policy Summary Object
		is not deleted, but is retained and still available for
		subsequent modification/re-use."
	-- 1.3.6.1.2.1.178.1.3.1
	::= { t11FcSpPoNonActive 1 }


t11FcSpPoNaSummaryEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaSummaryEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one non-active
		Policy Object within a non-active Policy Summary Object
		defined for potential use on the Fabric identified by
		t11FcSpPoFabricIndex, and managed within the Fibre Channel
		management instance identified by fcmInstanceIndex.

		A non-active Policy Summary Object is described by a set
		of entries in this table that have the same value of
		t11FcSpPoNaSummaryName.

		As and when a Policy Summary Object is activated using the
		t11FcSpPoOperActivate object, if the activation is
		successful, existing rows (if any) in MIB tables for active
		Policy Objects are deleted and replaced by the appropriate
		new set of rows.  Existing rows in this table and/or in
		other tables for non-active Policy Objects are not
		affected by the activate operation.

		The StorageType of a row in this table is specified by the
		instance of t11FcSpPoStorageType that is INDEX-ed by the
		same values of fcmInstanceIndex and t11FcSpPoFabricIndex."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.3 and table 104."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaSummaryName,
		t11FcSpPoNaSummaryPolicyType,
		t11FcSpPoNaSummaryPolicyIndex }
	-- 1.3.6.1.2.1.178.1.3.1.1
	::= { t11FcSpPoNaSummaryTable 1 }


T11FcSpPoNaSummaryEntry ::= SEQUENCE {

	t11FcSpPoNaSummaryName           T11FcSpAlphaNumName,
	t11FcSpPoNaSummaryPolicyType     T11FcSpPolicyObjectType,
	t11FcSpPoNaSummaryPolicyIndex    Unsigned32,
	t11FcSpPoNaSummaryPolicyNameType T11FcSpPolicyNameType,
	t11FcSpPoNaSummaryPolicyName     T11FcSpPolicyName,
	t11FcSpPoNaSummaryHashStatus     T11FcSpHashCalculationStatus,
	t11FcSpPoNaSummaryHashFormat     T11FcSpPolicyHashFormat,
	t11FcSpPoNaSummaryHashValue      T11FcSpPolicyHashValue,
	t11FcSpPoNaSummaryRowStatus      RowStatus }


t11FcSpPoNaSummaryName OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumName
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The name of the non-active Policy Summary Object that
		contains this Policy Object."
	-- 1.3.6.1.2.1.178.1.3.1.1.1
	::= { t11FcSpPoNaSummaryEntry 1 }


t11FcSpPoNaSummaryPolicyType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyObjectType
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The 'Identifier' (i.e., the type) of this Policy Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.3.1 and table 104."
	-- 1.3.6.1.2.1.178.1.3.1.1.2
	::= { t11FcSpPoNaSummaryEntry 2 }


t11FcSpPoNaSummaryPolicyIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A unique integer value to distinguish this Policy Object
		from any others that have the same type and that are
		contained in the same Policy Summary Object."
	-- 1.3.6.1.2.1.178.1.3.1.1.3
	::= { t11FcSpPoNaSummaryEntry 3 }


t11FcSpPoNaSummaryPolicyNameType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyNameType {
			nodeName(1),
			alphaNumericName(7) }
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The combination of t11FcSpPoNaSummaryPolicyNameType and
		t11FcSpPoNaSummaryPolicyName specify the name of the
		non-active Policy Object identified by this row.

		The type of name must be 'nodeName' if the value of the
		corresponding instance of t11FcSpPoNaSummaryPolicyType is
		'switchConnectivity', or 'alphaNumericName' otherwise."
	-- 1.3.6.1.2.1.178.1.3.1.1.4
	::= { t11FcSpPoNaSummaryEntry 4 }


t11FcSpPoNaSummaryPolicyName OBJECT-TYPE
	SYNTAX  T11FcSpPolicyName
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The combination of t11FcSpPoNaSummaryPolicyNameType and
		t11FcSpPoNaSummaryPolicyName specify the name of the
		non-active Policy Object identified by this row."
	-- 1.3.6.1.2.1.178.1.3.1.1.5
	::= { t11FcSpPoNaSummaryEntry 5 }


t11FcSpPoNaSummaryHashStatus OBJECT-TYPE
	SYNTAX  T11FcSpHashCalculationStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"When read, the value of this object is either:

		   correct -- the corresponding instance of
		              t11FcSpPoNaSummaryHashValue contains
		              the correct value; or
		   stale   -- the corresponding instance of
		              t11FcSpPoNaSummaryHashValue contains
		              a stale (possibly incorrect) value;

		 Writing a value of 'calculate' is a request to re-calculate
		 and update the value of the corresponding instance of
		 t11FcSpPoNaSummaryHashValue.  Writing a value of 'correct'
		or 'stale' to this object is an error (e.g., 'wrongValue')."
	DEFVAL { stale }
	-- 1.3.6.1.2.1.178.1.3.1.1.6
	::= { t11FcSpPoNaSummaryEntry 6 }


t11FcSpPoNaSummaryHashFormat OBJECT-TYPE
	SYNTAX  T11FcSpPolicyHashFormat
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The format of this Policy Object's hash value as
		contained in the corresponding instance of the
		t11FcSpPoNaSummaryHashValue object."
	DEFVAL { '00000001'h }
	-- 1.3.6.1.2.1.178.1.3.1.1.7
	::= { t11FcSpPoNaSummaryEntry 7 }


t11FcSpPoNaSummaryHashValue OBJECT-TYPE
	SYNTAX  T11FcSpPolicyHashValue
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The hash value of this Policy Object, in the format
		identified by the corresponding instance of the
		t11FcSpPoNaSummaryHashFormat object."
	DEFVAL { "" }
	-- 1.3.6.1.2.1.178.1.3.1.1.8
	::= { t11FcSpPoNaSummaryEntry 8 }


t11FcSpPoNaSummaryRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.

		Before a row in this table can have 'active' status,
		a non-Active Policy Object must already be represented
		in the table corresponding to the value of
		t11FcSpPoNaSummaryPolicyType with the name given by the
		combination of t11FcSpPoNaSummaryPolicyNameType and
		t11FcSpPoNaSummaryPolicyName.  If such a Policy Object gets
		deleted from the relevant table, the row in this table must
		also get deleted.

		When a row has 'active' status, the only write-able MIB
		objects in this table are t11FcSpPoNaSummaryHashStatus and
		t11FcSpPoNaSummaryRowStatus."
	-- 1.3.6.1.2.1.178.1.3.1.1.9
	::= { t11FcSpPoNaSummaryEntry 9 }


--
-- Non-Active Switch Membership List Objects
--

t11FcSpPoNaSwListTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaSwListEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of non-active Switch Membership List Objects."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 108."
	-- 1.3.6.1.2.1.178.1.3.2
	::= { t11FcSpPoNonActive 2 }


t11FcSpPoNaSwListEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaSwListEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one non-active
		Switch Membership List Object for the Fabric identified
		by t11FcSpPoFabricIndex and managed within the Fibre





		Channel management instance identified by
		fcmInstanceIndex.

		The StorageType of a row in this table is specified by the
		instance of t11FcSpPoStorageType that is INDEX-ed by the
		same values of fcmInstanceIndex and t11FcSpPoFabricIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaSwListName }
	-- 1.3.6.1.2.1.178.1.3.2.1
	::= { t11FcSpPoNaSwListTable 1 }


T11FcSpPoNaSwListEntry ::= SEQUENCE {

	t11FcSpPoNaSwListName       T11FcSpAlphaNumName,
	t11FcSpPoNaSwListFabricName FcNameIdOrZero,
	t11FcSpPoNaSwListRowStatus  RowStatus }


t11FcSpPoNaSwListName OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumName
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The name of the Switch Membership List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 108."
	-- 1.3.6.1.2.1.178.1.3.2.1.1
	::= { t11FcSpPoNaSwListEntry 1 }


t11FcSpPoNaSwListFabricName OBJECT-TYPE
	SYNTAX  FcNameIdOrZero
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The administratively specified Fabric_Name.  This value
		is meaningful only when static Domain_IDs are used in a
		Fabric.  If Static Domain_IDs are not used, the Fabric_Name
		is dynamically determined, in which case the value of this
		object can be '0000000000000000'h or the zero-length
		string."
	REFERENCE
		"- t11FamConfigDomainId, T11-FC-FABRIC-ADDR-MGR-MIB,
		  Fibre Channel Fabric Address Manager MIB, RFC 4439;
		- ANSI INCITS 426-2007, T11/Project 1570-D,
		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, table 108."
	-- 1.3.6.1.2.1.178.1.3.2.1.2
	::= { t11FcSpPoNaSwListEntry 2 }


t11FcSpPoNaSwListRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.  Values of object instances
		within the row can be modified at any time.

		If a row in this table is deleted, any row in the
		t11FcSpPoNaSwMembTable for the same Switch Membership
		List Object will also get deleted."
	-- 1.3.6.1.2.1.178.1.3.2.1.3
	::= { t11FcSpPoNaSwListEntry 3 }


--
-- Switch Entries in Non-Active Switch Membership List Objects
--

t11FcSpPoNaSwMembTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaSwMembEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of Switch Entries in non-active Switch Membership
		List Objects."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 110."
	-- 1.3.6.1.2.1.178.1.3.3
	::= { t11FcSpPoNonActive 3 }


t11FcSpPoNaSwMembEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaSwMembEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one Switch that
		is listed in a Switch Entry of a non-active Switch Membership
		List Object for the Fabric identified by t11FcSpPoFabricIndex
		and managed within the Fibre Channel management instance
		identified by fcmInstanceIndex.

		A row cannot exist unless there is a row in
		t11FcSpPoNaSwListTable for the given Switch Membership List
		Object, i.e., the row in t11FcSpPoNaSwListTable for a
		Switch Membership List Object must be created before (or
		simultaneously with) a row in this table for a Switch
		Entry in that Switch Membership List Object, and when a
		row in t11FcSpPoNaSwListTable is deleted, all rows in this
		table for Switch Entries in that Switch Membership List





		Object also get deleted.

		The StorageType of a row in this table is specified by the
		instance of t11FcSpPoStorageType that is INDEX-ed by the
		same values of fcmInstanceIndex and t11FcSpPoFabricIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaSwListName,
		t11FcSpPoNaSwMembSwitchNameType,
		t11FcSpPoNaSwMembSwitchName }
	-- 1.3.6.1.2.1.178.1.3.3.1
	::= { t11FcSpPoNaSwMembTable 1 }


T11FcSpPoNaSwMembEntry ::= SEQUENCE {

	t11FcSpPoNaSwMembSwitchNameType T11FcSpPolicyNameType,
	t11FcSpPoNaSwMembSwitchName     FcNameIdOrZero,
	t11FcSpPoNaSwMembFlags          BITS,
	t11FcSpPoNaSwMembDomainID       FcDomainIdOrZero,
	t11FcSpPoNaSwMembPolicyDataRole INTEGER,
	t11FcSpPoNaSwMembAuthBehaviour  BITS,
	t11FcSpPoNaSwMembAttribute      T11FcSpAlphaNumNameOrAbsent,
	t11FcSpPoNaSwMembRowStatus      RowStatus }


t11FcSpPoNaSwMembSwitchNameType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyNameType {
			nodeName(1),
			restrictedNodeName(2),
			wildcard(5),
			restrictedWildcard(6) }
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"If the value of this object is 'nodeName' or
		'restrictedNodeName', then the combination of
		this object and t11FcSpPoNaSwMembSwitchName specify the
		Switch Name of this Switch Entry.

		The membership is restricted or unrestricted based on the
		name type.  Restricted membership means that the Switch is
		not allowed to be part of the Fabric unless allowed by a
		specific Switch Connectivity Object.  Unrestricted
		membership means that the Switch is allowed to be part of
		the Fabric unless disallowed by a specific Switch
		Connectivity Object.

		The values of 'wildcard' and 'restrictedWildcard' provide
		the means to specify whether to allow/deny membership for
		Switches not explicitly named in the Switch Membership





		List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 110."
	-- 1.3.6.1.2.1.178.1.3.3.1.1
	::= { t11FcSpPoNaSwMembEntry 1 }


t11FcSpPoNaSwMembSwitchName OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (8))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"If the value of t11FcSpPoSwMembSwitchNameType is
		'wildcard' or 'restrictedWildcard', this object has the
		value '0000000000000000'h.

		Otherwise, the combination of
		t11FcSpPoNaSwMembSwitchNameType and this object specify the
		Switch Name of this Switch Entry."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 110."
	-- 1.3.6.1.2.1.178.1.3.3.1.2
	::= { t11FcSpPoNaSwMembEntry 2 }


t11FcSpPoNaSwMembFlags OBJECT-TYPE
	SYNTAX  BITS {
			staticDomainID(0),
			insistentDomainID(1),
			serialPortsAccess(2),
			physicalPortsAccess(3),
			managerRole(4) }
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"Configurable options in respect to the administration
		of Policy Objects at this Switch:

		   'staticDomainID'     - the Switch uses the 'Static
		Domain_IDs behavior' (as defined in FC-SW-4) when this bit
		is set.  This bit should have the same setting for all
		Switches in a Fabric's Switch Membership List Object, or
		else the Fabric will partition.  If this bit is set,
		the 'insistentDomainID' bit must not be set.

		   'insistentDomainID'  - if this bit is set, the Switch
		uses the 'Insistent Domain_IDs behavior' (as defined in





		FC-SW-4), and the 'staticDomainID' bit must not be set.

		   'serialPortsAccess'  - the Switch allows management
		through serial ports when and only when this bit is set.

		   'physicalPortsAccess' - the Switch allows management
		through the physical panel when and only when this bit
		is set.

		   'managerRole'        - the Switch is allowed to change
		the Fabric Policy configuration (on receipt of any of the
		EACA, ESFC, EUFC, ACA, SFC, or UFC SW_ILSs) if this bit is
		set."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 112."
	-- 1.3.6.1.2.1.178.1.3.3.1.3
	::= { t11FcSpPoNaSwMembEntry 3 }


t11FcSpPoNaSwMembDomainID OBJECT-TYPE
	SYNTAX  FcDomainIdOrZero
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The Domain_ID to be used when either the 'staticDomainID'
		bit or the 'insistentDomainID' bit is set in the
		corresponding value of t11FcSpPoNaSwMembFlags."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and tables 111 and 112."
	-- 1.3.6.1.2.1.178.1.3.3.1.4
	::= { t11FcSpPoNaSwMembEntry 4 }


t11FcSpPoNaSwMembPolicyDataRole OBJECT-TYPE
	SYNTAX  INTEGER {
			client(1),
			autonomous(2),
			server(3) }
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The role of the Switch in terms of which Policy data
		it retains/maintains:

		  'client' - the Switch operates as a Client Switch.
		A Client Switch maintains its own Switch Connectivity
		Object and all Fabric-wide List Objects.  If FC-SP





		Zoning is used, a Client Switch maintains only the
		subset of the Active Zone Set that it requires to
		enforce the current Fabric Zoning configuration.

		  'autonomous' -  the Switch operates as an Autonomous
		Switch.  An Autonomous Switch maintains its own Switch
		Connectivity Object and all Fabric-wide List Objects.
		This is the same as 'client' except that if FC-SP Zoning
		is used, an Autonomous Switch maintains a complete copy
		of the Fabric Zoning Database.

		  'server' - the Switch operates as a Server Switch.
		A Server Switch maintains all Fabric-wide List Objects
		and the Switch Connectivity Objects of each Switch in
		the Fabric.  If FC-SP Zoning is used, a Server Switch
		maintains a complete copy of the Fabric Zoning Database."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 113."
	-- 1.3.6.1.2.1.178.1.3.3.1.5
	::= { t11FcSpPoNaSwMembEntry 5 }


t11FcSpPoNaSwMembAuthBehaviour OBJECT-TYPE
	SYNTAX  BITS {
			mustAuthenticate(0),
			rejectIsFailure(1) }
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The authentication behaviour of the Switch:

		  'mustAuthenticate' - if this bit is set, all connections
		between this Switch and neighbor Switches must be
		authenticated.

		  'rejectIsFailure' - if this bit is set, the rejection of
		an AUTH_Negotiate message must be considered as an
		authentication failure by this Switch."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 114."
	-- 1.3.6.1.2.1.178.1.3.3.1.6
	::= { t11FcSpPoNaSwMembEntry 6 }


t11FcSpPoNaSwMembAttribute OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumNameOrAbsent
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The name of a non-active Attribute Policy Object that
		is defined for this Switch.  The zero-length string
		indicates that no non-active Attribute Policy Object is
		defined for this Switch.

		The effect of having no rows in the t11FcSpPoNaAttribTable
		for which the value of t11FcSpPoNaAttribName is the
		same as the value of this object, is the same as
		this object's value being the zero-length string."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 110."
	-- 1.3.6.1.2.1.178.1.3.3.1.7
	::= { t11FcSpPoNaSwMembEntry 7 }


t11FcSpPoNaSwMembRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.  Values of object instances
		within the row can be modified at any time.

		A row cannot exist unless there is a row in the
		t11FcSpPoNaSwListTable for the Switch Membership List
		Object containing the Switch Entry for this Switch, i.e.,
		the row in t11FcSpPoNaSwListTable for a Switch Membership
		List Object must be created before (or simultaneously)
		with a row in this table for a Switch Entry in that
		Switch Membership List Object; and when a row in
		t11FcSpPoNaSwListTable is deleted, any row in this
		table for a Switch Entry in that Switch Membership
		List Object also gets deleted."
	-- 1.3.6.1.2.1.178.1.3.3.1.8
	::= { t11FcSpPoNaSwMembEntry 8 }


--
-- Node Entries in Non-Active Node Membership List Objects
--

t11FcSpPoNaNoMembTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaNoMembEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of Node Entries in non-active Node Membership List
		Objects.





		One Node Membership List Object is represented by all
		the rows in this table that have the same value of
		t11FcSpPoNaNoMembListName."
	-- 1.3.6.1.2.1.178.1.3.4
	::= { t11FcSpPoNonActive 4 }


t11FcSpPoNaNoMembEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaNoMembEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one Node Entry of
		a non-active Node Membership List Object for the Fabric
		identified by t11FcSpPoFabricIndex and managed within
		the Fibre Channel management instance identified by
		fcmInstanceIndex.

		The StorageType of a row in this table is specified by the
		instance of t11FcSpPoStorageType that is INDEX-ed by the
		same values of fcmInstanceIndex and t11FcSpPoFabricIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaNoMembListName,
		t11FcSpPoNaNoMembNodeNameType,
		t11FcSpPoNaNoMembNodeName }
	-- 1.3.6.1.2.1.178.1.3.4.1
	::= { t11FcSpPoNaNoMembTable 1 }


T11FcSpPoNaNoMembEntry ::= SEQUENCE {

	t11FcSpPoNaNoMembListName      T11FcSpAlphaNumName,
	t11FcSpPoNaNoMembNodeNameType  T11FcSpPolicyNameType,
	t11FcSpPoNaNoMembNodeName      FcNameIdOrZero,
	t11FcSpPoNaNoMembFlags         BITS,
	t11FcSpPoNaNoMembCtAccessIndex Unsigned32,
	t11FcSpPoNaNoMembAttribute     T11FcSpAlphaNumNameOrAbsent,
	t11FcSpPoNaNoMembRowStatus     RowStatus }


t11FcSpPoNaNoMembListName OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumName
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The name of the non-active Node Membership List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 116."
	-- 1.3.6.1.2.1.178.1.3.4.1.1
	::= { t11FcSpPoNaNoMembEntry 1 }


t11FcSpPoNaNoMembNodeNameType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyNameType {
			nodeName(1),
			restrictedNodeName(2),
			portName(3),
			restrictedPortName(4),
			wildcard(5),
			restrictedWildcard(6) }
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"If the value of this object is 'wildcard' or
		'restrictedWildcard', this Node Entry applies to Nodes not
		explicitly named in the Node Membership List Object.

		Otherwise, the combination of this object and
		t11FcSpPoNaNoMembNodeName specify the name of this Node Entry
		in the active Node Membership List Object.  A Node is
		identified by its Node Name or by one or more of its Port
		Names.

		Restricted membership means that a Node is not allowed to be
		connected to the Fabric unless allowed by a specific Switch
		Connectivity Object.  Unrestricted membership means that a
		Node is allowed to be connected to the Fabric unless
		disallowed by a specific Switch Connectivity Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 116."
	-- 1.3.6.1.2.1.178.1.3.4.1.2
	::= { t11FcSpPoNaNoMembEntry 2 }


t11FcSpPoNaNoMembNodeName OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (8))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"If the value of t11FcSpPoNaNoMembNodeNameType is
		'wildcard' or 'restrictedWildcard', this object has the
		value '0000000000000000'h.

		Otherwise, the combination of t11FcSpPoNaNoMembNodeNameType
		and this object specify the name of this Node Entry is the
		active Node Membership List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 116."
	-- 1.3.6.1.2.1.178.1.3.4.1.3
	::= { t11FcSpPoNaNoMembEntry 3 }


t11FcSpPoNaNoMembFlags OBJECT-TYPE
	SYNTAX  BITS {
			scsiEnclosureAccess(0),
			authenticationRequired(1) }
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"Configurable options in respect to the administration
		of Policy Objects at this Node:

		     'scsiEnclosureAccess'      - the Node is allowed to
		control any Switch through SCSI Enclosure Services if this
		bit is set.  If a Switch does not support SCSI Enclosure
		Services, this bit is ignored.

		     'authenticationRequired'   - the Node is required to
		authenticate itself to any Switch to which it is connected
		if and only if this bit is set."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 118."
	-- 1.3.6.1.2.1.178.1.3.4.1.4
	::= { t11FcSpPoNaNoMembEntry 4 }


t11FcSpPoNaNoMembCtAccessIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (0..4294967295)
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"If the value of this object is zero, then access by this
		Node to Generic Services is not limited by a Common
		Transport Access Specifier.

		Otherwise, the limits are specified by the set of Common
		Transport Access Descriptors contained in those rows of
		the t11FcSpPoNaCtDescrTable for which the value of
		t11FcSpPoNaCtDescrSpecifierIndex is the same as the value
		of this object.  No such rows in t11FcSpPoNaCtDescrTable
		have the same effect as this object's value being zero."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		section 7.1.4.1 and tables 118/119/120/121."
	-- 1.3.6.1.2.1.178.1.3.4.1.5
	::= { t11FcSpPoNaNoMembEntry 5 }


t11FcSpPoNaNoMembAttribute OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumNameOrAbsent
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The name of a non-active Attribute Policy Object that
		is defined for this Node.  The zero-length string indicates
		that no non-active Attribute Policy Object is defined for
		this Node.

		The effect of having no rows in the t11FcSpPoNaAttribTable
		for which the value of t11FcSpPoNaAttribName is the
		same as the value of this object, is the same as
		this object's value being the zero-length string."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.4.1 and table 116."
	-- 1.3.6.1.2.1.178.1.3.4.1.6
	::= { t11FcSpPoNaNoMembEntry 6 }


t11FcSpPoNaNoMembRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.  Values of object instances
		within the row can be modified at any time."
	-- 1.3.6.1.2.1.178.1.3.4.1.7
	::= { t11FcSpPoNaNoMembEntry 7 }


--
--
-- Non-Active Common Transport Access Descriptors
--

t11FcSpPoNaCtDescrTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaCtDescrEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of Common Transport Access Descriptors referenced
		by non-active Policy Objects.

		A Common Transport Access Specifier is a list of Common
		Transport Access Descriptors that specify whether a Node
		is allowed to access a Generic Service or Sub-Server.

		A non-active Common Transport Access Specifier is
		represented by all rows of this table that have the same





		values of fcmInstanceIndex, t11FcSpPoFabricIndex, and
		t11FcSpPoNaCtDescrSpecifierIndex."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.5"
	-- 1.3.6.1.2.1.178.1.3.5
	::= { t11FcSpPoNonActive 5 }


t11FcSpPoNaCtDescrEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaCtDescrEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one Common Transport
		Access Descriptor of an non-active Common Transport Access
		Specifier used within the Fabric identified by
		t11FcSpPoFabricIndex and managed within the Fibre Channel
		management instance identified by fcmInstanceIndex.

		The StorageType of a row in this table is specified by the
		instance of t11FcSpPoStorageType that is INDEX-ed by the
		same values of fcmInstanceIndex and t11FcSpPoFabricIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaCtDescrSpecifierIndex,
		t11FcSpPoNaCtDescrIndex }
	-- 1.3.6.1.2.1.178.1.3.5.1
	::= { t11FcSpPoNaCtDescrTable 1 }


T11FcSpPoNaCtDescrEntry ::= SEQUENCE {

	t11FcSpPoNaCtDescrSpecifierIndex Unsigned32,
	t11FcSpPoNaCtDescrIndex          Unsigned32,
	t11FcSpPoNaCtDescrFlags          BITS,
	t11FcSpPoNaCtDescrGsType         OCTET STRING,
	t11FcSpPoNaCtDescrGsSubType      OCTET STRING,
	t11FcSpPoNaCtDescrRowStatus      RowStatus }


t11FcSpPoNaCtDescrSpecifierIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"An index value that uniquely identifies a particular
		Common Transport Access Specifier within a Fabric."
	-- 1.3.6.1.2.1.178.1.3.5.1.1
	::= { t11FcSpPoNaCtDescrEntry 1 }


t11FcSpPoNaCtDescrIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"An index value that uniquely identifies a particular
		Common Transport Access Descriptor within a Common Transport
		Access Specifier."
	-- 1.3.6.1.2.1.178.1.3.5.1.2
	::= { t11FcSpPoNaCtDescrEntry 2 }


t11FcSpPoNaCtDescrFlags OBJECT-TYPE
	SYNTAX  BITS {
			allow(0),
			gsTypeWildcard(1),
			gsSubTypeWildcard(2),
			readOnly(3) }
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The flag bits that specify how access is to be limited by
		this Common Transport Access Descriptor:

		 - allow -- access to the specified Generic Service and
		   Server is allowed if this bit is set, and is to be denied
		   if this bit is not set.

		 - gsTypeWildcard -- if this bit is set, the Generic Service
		   to be allowed/denied is specified by the value of
		   t11FcSpPoNaCtDescrGsType, and the gsSubTypeWildcard bit
		   must not also be set.

		 - gsSubTypeWildcard -- if this bit is set, the Generic
		   Service to be allowed/denied is specified by the value of
		   t11FcSpPoNaCtDescrGsSubType, and the gsTypeWildcard bit
		   must not also be set.

		 - readOnly -- if this bit is set, then access is to be
		   granted only for reading."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		section 7.1.5.1, and tables 117, 118, and 120."
	-- 1.3.6.1.2.1.178.1.3.5.1.3
	::= { t11FcSpPoNaCtDescrEntry 3 }


t11FcSpPoNaCtDescrGsType OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (1))
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The GS_Type of the Generic Service (e.g., the FC-GS-5
		Management Service) that is subject to access control.





		This value is ignored if the gsTypeWildcard bit is not set
		in the corresponding value of t11FcSpPoNaCtDescrFlags."
	REFERENCE
		"- ANSI INCITS 427-2006,
		  Fibre Channel - Generic Services-5 (FC-GS-5),
		  section 4.3.2.4.
		- ANSI INCITS 426-2007, T11/Project 1570-D,
		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, section 7.1.5.1 and table 120."
	-- 1.3.6.1.2.1.178.1.3.5.1.4
	::= { t11FcSpPoNaCtDescrEntry 4 }


t11FcSpPoNaCtDescrGsSubType OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (1))
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The GS_Subtype of the Generic Server (e.g., the Fabric Zone
		Server) that is subject to access control.  This value is
		ignored if the gsSubTypeWildcard bit is not set in the
		corresponding value of t11FcSpPoNaCtDescrFlags."
	REFERENCE
		"- ANSI INCITS 427-2006,
		  Fibre Channel - Generic Services-5 (FC-GS-5),
		  section 4.3.2.5.
		- ANSI INCITS 426-2007, T11/Project 1570-D,
		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, section 7.1.5.1 and table 120."
	-- 1.3.6.1.2.1.178.1.3.5.1.5
	::= { t11FcSpPoNaCtDescrEntry 5 }


t11FcSpPoNaCtDescrRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.  Values of object instances
		within the row can be modified at any time."
	-- 1.3.6.1.2.1.178.1.3.5.1.6
	::= { t11FcSpPoNaCtDescrEntry 6 }


--
-- Switches/Nodes in Non-Active Switch Connectivity Objects
--

t11FcSpPoNaSwConnTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaSwConnEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of non-active Switch Connectivity Objects.





		A Switch Connectivity Object defines to which other
		Switches or Nodes a particular Switch may/may not be
		connected at the Node level and/or at the Port level."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.6."
	-- 1.3.6.1.2.1.178.1.3.6
	::= { t11FcSpPoNonActive 6 }


t11FcSpPoNaSwConnEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaSwConnEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains the name of a Switch/Node with which
		any port of a particular Switch on a particular Fabric, or
		a particular port on that Switch, is allowed or not allowed
		to be connected.

		The particular Fabric is identified by t11FcSpPoFabricIndex
		and managed within the Fibre Channel management instance
		identified by fcmInstanceIndex.

		The StorageType of a row in this table is specified by the
		instance of t11FcSpPoStorageType that is INDEX-ed by the
		same values of fcmInstanceIndex and t11FcSpPoFabricIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaSwConnSwitchName,
		t11FcSpPoNaSwConnAllowedType,
		t11FcSpPoNaSwConnPortNameOrAll,
		t11FcSpPoNaSwConnAllowedIndex }
	-- 1.3.6.1.2.1.178.1.3.6.1
	::= { t11FcSpPoNaSwConnTable 1 }


T11FcSpPoNaSwConnEntry ::= SEQUENCE {

	t11FcSpPoNaSwConnSwitchName      FcNameIdOrZero,
	t11FcSpPoNaSwConnAllowedType     INTEGER,
	t11FcSpPoNaSwConnPortNameOrAll   FcNameIdOrZero,
	t11FcSpPoNaSwConnAllowedIndex    Unsigned32,
	t11FcSpPoNaSwConnAllowedNameType T11FcSpPolicyNameType,
	t11FcSpPoNaSwConnAllowedName     FcNameIdOrZero,
	t11FcSpPoNaSwConnRowStatus       RowStatus }


t11FcSpPoNaSwConnSwitchName OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (8))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The name of the Switch for which this Switch Connectivity
		Object specifies topology restrictions."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.6.1 and table 123."
	-- 1.3.6.1.2.1.178.1.3.6.1.1
	::= { t11FcSpPoNaSwConnEntry 1 }


t11FcSpPoNaSwConnAllowedType OBJECT-TYPE
	SYNTAX  INTEGER {
			switch(1),
			node(2) }
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"This object specifies whether this row refers to an
		'Allowed Switch' that concerns Switch-to-Switch
		connectivity or an 'Allowed Node' that concerns
		Switch-to-Node connectivity.  Consequently, this object's
		value indicates whether the corresponding instance of
		t11FcSpPoNaSwConnAllowedName specifies the name of a Switch
		or the name of a Node."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.6.1 and table 123."
	-- 1.3.6.1.2.1.178.1.3.6.1.2
	::= { t11FcSpPoNaSwConnEntry 2 }


t11FcSpPoNaSwConnPortNameOrAll OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (0 | 8))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"This object specifies either the particular port on which
		this topology restriction applies, or if the value is the
		zero-length string, that the topology restriction applies
		to all ports of the Switch.

		In other words, if this object's value contains the name of
		a port, then this row represents a 'Port Connectivity Entry'
		(as described in FC-SP) within a Switch Connectivity Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.6.1 and tables 123/124."
	-- 1.3.6.1.2.1.178.1.3.6.1.3
	::= { t11FcSpPoNaSwConnEntry 3 }


t11FcSpPoNaSwConnAllowedIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"When multiple rows in this table refer to different
		'Allowed Switches' or to different 'Allowed Nodes' for the
		same port(s) in the same Switch Connectivity Object, this
		object provides a unique index value to distinguish between
		such rows."
	-- 1.3.6.1.2.1.178.1.3.6.1.4
	::= { t11FcSpPoNaSwConnEntry 4 }


t11FcSpPoNaSwConnAllowedNameType OBJECT-TYPE
	SYNTAX  T11FcSpPolicyNameType {
			nodeName(1),
			restrictedNodeName(2),
			portName(3),
			restrictedPortName(4),
			wildcard(5),
			restrictedWildcard(6) }
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"If the value of this object is 'wildcard' or
		'restrictedWildcard', this row specifies whether
		connectivity is allowed/not allowed with entities not
		explicitly named by other rows.

		Otherwise, the combination of
		t11FcSpPoNaSwConnAllowedNameType and
		t11FcSpPoNaSwConnAllowedName specify the name of:

		- a Switch (if t11FcSpPoNaSwConnAllowedType = 'switch'), or
		- a Node (if t11FcSpPoNaSwConnAllowedType = 'node')

		to which connectivity is allowed/not allowed."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.6.1 and tables 123/124."
	-- 1.3.6.1.2.1.178.1.3.6.1.5
	::= { t11FcSpPoNaSwConnEntry 5 }


t11FcSpPoNaSwConnAllowedName OBJECT-TYPE
	SYNTAX  FcNameIdOrZero (SIZE (8))
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"If t11FcSpPoNaSwConnAllowedNameType has the value
		'wildcard' or 'restrictedWildcard', this object has the
		value '0000000000000000'h.





		Otherwise, the combination of
		t11FcSpPoNaSwConnAllowedNameType and
		t11FcSpPoNaSwConnAllowedName specify the name of:

		- a Switch (if t11FcSpPoNaSwConnAllowedType = 'switch'), or
		- a Node (if t11FcSpPoNaSwConnAllowedType = 'node')

		to which connectivity is allowed/not allowed."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.6.1 and tables 123/124."
	-- 1.3.6.1.2.1.178.1.3.6.1.6
	::= { t11FcSpPoNaSwConnEntry 6 }


t11FcSpPoNaSwConnRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.  Values of object instances
		within the row can be modified at any time."
	-- 1.3.6.1.2.1.178.1.3.6.1.7
	::= { t11FcSpPoNaSwConnEntry 7 }


--
-- IP Management Entries in Non-Active IP Management List Objects
--

t11FcSpPoNaIpMgmtTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaIpMgmtEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of IP Management Entries in non-active IP
		Management List Objects.  The IP Management List Object is a
		Fabric-wide Policy Object that describes which IP hosts are
		allowed to manage a Fabric.

		One non-active IP Management List Object is represented by
		all rows of this table that have the same values of
		fcmInstanceIndex and t11FcSpPoFabricIndex."
	-- 1.3.6.1.2.1.178.1.3.7
	::= { t11FcSpPoNonActive 7 }


t11FcSpPoNaIpMgmtEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaIpMgmtEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one IP Management





		entry within a non-active IP Management List Object for the
		Fabric identified by t11FcSpPoFabricIndex and managed
		within the Fibre Channel management instance identified
		by fcmInstanceIndex.

		The Policy Object Name of an IP Management Entry Policy
		Object is either an IPv6 Address Range or an IPv4 Address
		Range.  In a Fabric's database of Policy Objects, every
		Policy Object Name, including these Internet address ranges,
		is represented as a (T11FcSpPolicyNameType,
		T11FcSpPolicyName) tuple.  In contrast, this MIB module
		uses the conventional MIB syntax for IP addresses, and
		therefore represents the Policy Object Name of an IP
		Management Entry Policy Object as a (InetAddressType,
		InetAddress, InetAddress) tuple.

		In theory, the use of t11FcSpPoNaIpMgmtEntryNameLow and
		t11FcSpPoNaIpMgmtEntryNameHigh, which have the syntax of
		InetAddress, in the INDEX could cause the need for
		excessively long OIDs.  In practice, this can't happen
		because FC-SP doesn't allow these objects to be specified
		as DNS names.

		The StorageType of a row in this table is specified by the
		instance of t11FcSpPoStorageType that is INDEX-ed by the
		same values of fcmInstanceIndex and t11FcSpPoFabricIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaIpMgmtListName,
		t11FcSpPoNaIpMgmtEntryNameType,
		t11FcSpPoNaIpMgmtEntryNameLow,
		t11FcSpPoNaIpMgmtEntryNameHigh }
	-- 1.3.6.1.2.1.178.1.3.7.1
	::= { t11FcSpPoNaIpMgmtTable 1 }


T11FcSpPoNaIpMgmtEntry ::= SEQUENCE {

	t11FcSpPoNaIpMgmtListName      T11FcSpAlphaNumName,
	t11FcSpPoNaIpMgmtEntryNameType InetAddressType,
	t11FcSpPoNaIpMgmtEntryNameLow  InetAddress,
	t11FcSpPoNaIpMgmtEntryNameHigh InetAddress,
	t11FcSpPoNaIpMgmtWkpIndex      Unsigned32,
	t11FcSpPoNaIpMgmtAttribute     T11FcSpAlphaNumNameOrAbsent,
	t11FcSpPoNaIpMgmtRowStatus     RowStatus }


t11FcSpPoNaIpMgmtListName OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumName
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The name of a non-active Node Membership List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.7.1 and table 125."
	-- 1.3.6.1.2.1.178.1.3.7.1.1
	::= { t11FcSpPoNaIpMgmtEntry 1 }


t11FcSpPoNaIpMgmtEntryNameType OBJECT-TYPE
	SYNTAX  InetAddressType {
			ipv4(1),
			ipv6(2) }
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The combination of t11FcSpPoNaIpMgmtEntryNameType,
		t11FcSpPoNaIpMgmtNameLow, and t11FcSpPoNaIpMgmtNameHigh
		specify the Internet address range of this IP Management
		Entry in the IP Management List Object.

		The FC-SP specification does not allow this address to
		be specified using a DNS domain name, nor does it allow
		the specification of zone indexes.  Therefore, the
		type of address must be one of: 'ipv4' or 'ipv6'."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, sections 7.1.7.1 and table 126."
	-- 1.3.6.1.2.1.178.1.3.7.1.2
	::= { t11FcSpPoNaIpMgmtEntry 2 }


t11FcSpPoNaIpMgmtEntryNameLow OBJECT-TYPE
	SYNTAX  InetAddress (SIZE (4 | 16))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The lower end of an Internet address range.  The type
		of this address is given by the corresponding instance
		of t11FcSpPoNaIpMgmtEntryNameType.

		The combination of t11FcSpPoNaIpMgmtEntryNameType,
		t11FcSpPoNaIpMgmtNameLow, and t11FcSpPoIpMgmtNameHigh
		specify the Internet address range of this IP Management
		Entry in the IP Management List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, sections 7.1.7.1 and table 126."
	-- 1.3.6.1.2.1.178.1.3.7.1.3
	::= { t11FcSpPoNaIpMgmtEntry 3 }


t11FcSpPoNaIpMgmtEntryNameHigh OBJECT-TYPE
	SYNTAX  InetAddress (SIZE (4 | 16))
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The higher end of an Internet address range.  The type
		of this address is given by the corresponding instance
		of t11FcSpPoNaIpMgmtEntryNameType.

		The combination of t11FcSpPoNaIpMgmtEntryNameType,
		t11FcSpPoNaIpMgmtNameLow, and t11FcSpPoNaIpMgmtNameHigh
		specify the Internet address range of this IP Management
		Entry in the IP Management List Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, sections 7.1.7.1 and table 126."
	-- 1.3.6.1.2.1.178.1.3.7.1.4
	::= { t11FcSpPoNaIpMgmtEntry 4 }


t11FcSpPoNaIpMgmtWkpIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (0..4294967295)
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"This object identifies the restrictions for IP management
		access by IP hosts in this range of IP addresses.

		The restrictions are specified as the set of Well-Known
		Protocols Access Descriptors contained in those rows of the
		t11FcSpPoNaWkpDescrTable for which the value of
		t11FcSpPoNaWkpDescrSpecifierIndx is the same as the value
		of this object.  If there are no such rows or if the value
		of this object is zero, then this IP Management Entry does
		not identify any Well-Known Protocols Access restrictions."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.7.1 and tables 127/129."
	-- 1.3.6.1.2.1.178.1.3.7.1.5
	::= { t11FcSpPoNaIpMgmtEntry 5 }


t11FcSpPoNaIpMgmtAttribute OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumNameOrAbsent
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The name of a non-active Attribute Policy Object that
		is defined for this IP Management entry.  The zero-length
		string indicates that no non-active Attribute Policy Object
		is defined for it.






		The effect of having no rows in the t11FcSpPoNaAttribTable
		for which the value of t11FcSpPoNaAttribName is the same
		as the value of this object, is the same as this object's
		value being the zero-length string."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.7.1 and table 128."
	-- 1.3.6.1.2.1.178.1.3.7.1.6
	::= { t11FcSpPoNaIpMgmtEntry 6 }


t11FcSpPoNaIpMgmtRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.  Values of object instances
		within the row can be modified at any time."
	-- 1.3.6.1.2.1.178.1.3.7.1.7
	::= { t11FcSpPoNaIpMgmtEntry 7 }


--
-- Non-Active Well-Known Protocol Access Descriptors
--

t11FcSpPoNaWkpDescrTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaWkpDescrEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of the Well-Known Protocol Access Descriptors
		referenced from non-active Policy Objects.

		A Well-Known Protocol Access Specifier is a list of
		Well-Known Protocol Access Descriptors each of which
		specifies a protocol number, a port number, and/or various
		flags specifying how IP management access is restricted.

		A non-active Well-Known Protocol Transport Access Specifier
		is represented by all rows of this table that have the same
		values of fcmInstanceIndex, t11FcSpPoFabricIndex, and
		t11FcSpPoNaWkpDescrSpecifierIndx."
	-- 1.3.6.1.2.1.178.1.3.8
	::= { t11FcSpPoNonActive 8 }


t11FcSpPoNaWkpDescrEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaWkpDescrEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one Well-Known





		Protocol Access Descriptor of a non-active Well-Known
		Protocol Access Specifier used within the Fabric identified
		by t11FcSpPoFabricIndex and managed within the Fibre Channel
		management instance identified by fcmInstanceIndex.

		The StorageType of a row in this table is specified by the
		instance of t11FcSpPoStorageType that is INDEX-ed by the
		same values of fcmInstanceIndex and t11FcSpPoFabricIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaWkpDescrSpecifierIndx,
		t11FcSpPoNaWkpDescrIndex }
	-- 1.3.6.1.2.1.178.1.3.8.1
	::= { t11FcSpPoNaWkpDescrTable 1 }


T11FcSpPoNaWkpDescrEntry ::= SEQUENCE {

	t11FcSpPoNaWkpDescrSpecifierIndx Unsigned32,
	t11FcSpPoNaWkpDescrIndex         Unsigned32,
	t11FcSpPoNaWkpDescrFlags         BITS,
	t11FcSpPoNaWkpDescrWkpNumber     Unsigned32,
	t11FcSpPoNaWkpDescrDestPort      InetPortNumber,
	t11FcSpPoNaWkpDescrRowStatus     RowStatus }


t11FcSpPoNaWkpDescrSpecifierIndx OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"An index value that uniquely identifies a particular
		non-active Well-Known Protocol Access Specifier within
		a Fabric."
	-- 1.3.6.1.2.1.178.1.3.8.1.1
	::= { t11FcSpPoNaWkpDescrEntry 1 }


t11FcSpPoNaWkpDescrIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"An index value that uniquely identifies a particular
		Well-Known Protocol Access Descriptor within a
		non-active Well-Known Protocol Access Specifier."
	-- 1.3.6.1.2.1.178.1.3.8.1.2
	::= { t11FcSpPoNaWkpDescrEntry 2 }


t11FcSpPoNaWkpDescrFlags OBJECT-TYPE
	SYNTAX  BITS {
			allow(0),
			wkpWildcard(1),
			destPortWildcard(2),
			readOnly(3) }
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The flag bits that specify how access is to be limited by
		this Well-Known Protocol Access Descriptor:

		 - allow -- IP management access using this protocol/port
		   is allowed if this bit is set, and to be denied if this
		   bit is not set.

		 - wkpWildcard -- if this bit is set, the IP Protocol number
		   of the Well-Known Protocol to be allowed/denied is
		   specified by the value of t11FcSpPoNaWkpDescrWkpNumber.

		 - destPortWildcard -- if this bit is set, the Destination
		   (TCP/UDP) Port number of the Well-Known Protocol to be
		   allowed/denied is specified by the value of
		   t11FcSpPoNaWkpDescrDestPort.

		 - readOnly -- if this bit is set, then access is to be
		   granted only for reading."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.7.1 and table 131."
	-- 1.3.6.1.2.1.178.1.3.8.1.3
	::= { t11FcSpPoNaWkpDescrEntry 3 }


t11FcSpPoNaWkpDescrWkpNumber OBJECT-TYPE
	SYNTAX  Unsigned32 (0..255)
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"When the 'wkpWildcard' bit is set in the corresponding
		instance of t11FcSpPoNaWkpDescrFlags, this object specifies
		the IP protocol number of the Well-Known Protocol."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, section 7.1.7.1 and table 131.
		- http://www.iana.org/assignments/protocol-numbers."
	-- 1.3.6.1.2.1.178.1.3.8.1.4
	::= { t11FcSpPoNaWkpDescrEntry 4 }


t11FcSpPoNaWkpDescrDestPort OBJECT-TYPE
	SYNTAX  InetPortNumber
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"When the 'destPortWildcard' bit is set in the corresponding
		instance of t11FcSpPoNaWkpDescrFlags, this object specifies
		the Destination (TCP/UDP) Port number of the Well-Known
		Protocol.  When the 'destPortWildcard' bit is reset, this
		object is ignored (and can have the value zero)."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		  Fibre Channel - Security Protocols (FC-SP),
		  February 2007, section 7.1.7.1 and table 131.
		- http://www.iana.org/assignments/port-numbers."
	-- 1.3.6.1.2.1.178.1.3.8.1.5
	::= { t11FcSpPoNaWkpDescrEntry 5 }


t11FcSpPoNaWkpDescrRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.  Values of object instances
		within the row can be modified at any time."
	-- 1.3.6.1.2.1.178.1.3.8.1.6
	::= { t11FcSpPoNaWkpDescrEntry 6 }


--
-- Attribute Entries in Non-Active Attribute Policy Objects
--

t11FcSpPoNaAttribTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaAttribEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of the Attribute Policy Objects being used within
		non-active Policy Objects.

		A non-active Attribute Policy Object is represented by all
		the Attribute Entries in this table that have the same
		value of t11FcSpPoNaAttribName."
	-- 1.3.6.1.2.1.178.1.3.9
	::= { t11FcSpPoNonActive 9 }


t11FcSpPoNaAttribEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaAttribEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains information about one Attribute
		Entry contained within an Attribute Policy Object
		that is non-active within the Fabric identified by
		t11FcSpPoFabricIndex and managed within the Fibre Channel
		management instance identified by fcmInstanceIndex.





		For some types of Attribute Policy Objects, it is valuable
		to break out some semantically significant parts of the
		Policy Object's value into their own individual MIB
		objects; for example, to extract the one or more individual
		Authentication Protocol Identifiers and associated

		Authentication Protocol Parameters out of an Attribute
		containing a 'AUTH_Negotiate Message Payload'.  For such
		types, another MIB table is defined to hold the extracted
		values in MIB objects specific to the Attribute Policy
		Object's type.  In such cases, the
		t11FcSpPoNaAttribExtension object in this table points to
		the other MIB table.

		If the value of one Attribute Entry is too large (more than
		256 bytes) to be contained within the value of one instance
		of t11FcSpPoNaAttribValue, then one row in this table
		contains the first 256 bytes, and one (or more) other row(s)
		in this table contain the rest of the value.

		The StorageType of a row in this table is specified by the
		instance of t11FcSpPoStorageType that is INDEX-ed by the
		same values of fcmInstanceIndex and t11FcSpPoFabricIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaAttribName,
		t11FcSpPoNaAttribEntryIndex,
		t11FcSpPoNaAttribPartIndex }
	-- 1.3.6.1.2.1.178.1.3.9.1
	::= { t11FcSpPoNaAttribTable 1 }


T11FcSpPoNaAttribEntry ::= SEQUENCE {

	t11FcSpPoNaAttribName       T11FcSpAlphaNumName,
	t11FcSpPoNaAttribEntryIndex Unsigned32,
	t11FcSpPoNaAttribPartIndex  Unsigned32,
	t11FcSpPoNaAttribType       Unsigned32,
	t11FcSpPoNaAttribValue      OCTET STRING,
	t11FcSpPoNaAttribExtension  OBJECT IDENTIFIER,
	t11FcSpPoNaAttribRowStatus  RowStatus }


t11FcSpPoNaAttribName OBJECT-TYPE
	SYNTAX  T11FcSpAlphaNumName
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The name of the Attribute Policy Object containing one
		or more Attribute Entries."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),





		February 2007, section 7.1.8.1 and table 133."
	-- 1.3.6.1.2.1.178.1.3.9.1.1
	::= { t11FcSpPoNaAttribEntry 1 }


t11FcSpPoNaAttribEntryIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A unique value to distinguish this Attribute Entry
		from other Attribute Entries contained in the same
		Attribute Policy Object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.8.1, tables 133/134."
	-- 1.3.6.1.2.1.178.1.3.9.1.2
	::= { t11FcSpPoNaAttribEntry 2 }


t11FcSpPoNaAttribPartIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"When the value of an Attribute Entry is shorter than 257
		bytes, the whole value is contained in one instance of
		t11FcSpPoNaAttribValue, and the value of this object is 1.

		If the value of an Attribute Entry is longer than 256 bytes,
		then that value is divided up on 256-byte boundaries such
		that all parts are 256 bytes long except the last part which
		is shorter if necessary, with each such part contained in
		a separate row of this table, and the value of this object
		is set to the part number.  That is, this object has the
		value of 1 for bytes 0-255, the value of 2 for bytes
		256-511, etc."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.1.8.1, tables 134/135."
	-- 1.3.6.1.2.1.178.1.3.9.1.3
	::= { t11FcSpPoNaAttribEntry 3 }


t11FcSpPoNaAttribType OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The type of attribute.  The first type to be defined is:

		t11FcSpPoNaAttribType    t11FcSpPoNaAttribValue





		=====================    ======================
		  '00000001'h          The AUTH_Negotiate Message Payload

		"
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		section 7.1.8.1, tables 134/135 and table 10."
	-- 1.3.6.1.2.1.178.1.3.9.1.4
	::= { t11FcSpPoNaAttribEntry 4 }


t11FcSpPoNaAttribValue OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (0..256))
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The value of an Attribute Entry is divided up on 256-byte
		boundaries such that all parts are 256 bytes long except the
		last part, which is shorter if necessary, and each such part
		is contained in a separate instance of this object.

		When the value of the corresponding instance of
		t11FcSpPoNaAttribExtension is not zeroDotZero, then the same
		underlying management data has its value contained both in
		this object and in the individual/broken-out parts pointed
		to by t11FcSpPoNaAttribExtension.  Thus, after any
		modification of the underlying management data, e.g., after
		a Set operation to the value of either MIB representation,
		then that modification is reflected in the values of both
		MIB representations."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP), February 2007,
		section 7.1.8.1, tables 134/135 and table 10."
	-- 1.3.6.1.2.1.178.1.3.9.1.5
	::= { t11FcSpPoNaAttribEntry 5 }


t11FcSpPoNaAttribExtension OBJECT-TYPE
	SYNTAX  OBJECT IDENTIFIER
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"For some types of Attribute Policy Object, the value of
		this MIB object points to type-specific MIB objects that
		contain individual/broken-out parts of the Attribute Policy
		Object's value.  If this object doesn't point to such
		type-specific MIB objects, then it contains the value:
		zeroDotZero.

		In particular, when the value of t11FcSpPoNaAttribType
		indicates 'AUTH_Negotiate Message Payload', one or more





		Authentication Protocol Identifiers and their associated
		Authentication Protocol Parameters are embedded within
		the value of the corresponding instance of
		t11FcSpPoNaAttribValue; MIB objects to contain these
		individual values are defined in the
		t11FcSpPoAuthProtTable.  Thus, for an 'AUTH_Negotiate
		Message Payload' Attribute, the value of this object would
		contain the OID of t11FcSpPoNaAuthProtTable.

		When the value of this object is not zeroDotZero, then the
		same underlying management data has its value contained in
		both the individual/broken-out parts pointed to by this
		object and in the corresponding instance of
		t11FcSpPoNaAttribValue.  Thus, after any modification of the
		underlying management data, e.g., after a Set operation to
		the value of either MIB representation, then that
		modification is reflected in the values of both MIB
		representations."
	-- 1.3.6.1.2.1.178.1.3.9.1.6
	::= { t11FcSpPoNaAttribEntry 6 }


t11FcSpPoNaAttribRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.  Values of object instances
		within the row can be modified at any time."
	-- 1.3.6.1.2.1.178.1.3.9.1.7
	::= { t11FcSpPoNaAttribEntry 7 }


--
-- Auth. Protocol Parameters in Non-Active Attribute Policy Objects
--

t11FcSpPoNaAuthProtTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoNaAuthProtEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of Authentication Protocol Identifier and
		Authentication Protocol Parameters that are embedded in
		Attribute Policy Objects being used within non-active
		Policy Objects.

		This table is used for Attribute Entries of Attribute Policy
		Objects for which the value of t11FcSpPoNaAttribType
		indicates 'AUTH_Negotiate Message Payload' and the value of
		t11FcSpPoNaAttribExtension contains the OID of this table."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, sections 5.3.2 & 7.1.8.1,
		tables 134/135 and tables 10/11."
	-- 1.3.6.1.2.1.178.1.3.10
	::= { t11FcSpPoNonActive 10 }


t11FcSpPoNaAuthProtEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoNaAuthProtEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each row contains information about an Authentication
		Protocol that is extracted out of the Attribute Entry
		(identified by t11FcSpPoNaAttribEntryIndex) of the
		non-active Policy Attribute Object (identified by
		t11FcSpPoNaAttribName) for the Fabric identified by
		t11FcSpPoFabricIndex and managed within the Fibre Channel
		management instance identified by fcmInstanceIndex.

		If the value of one Attribute Protocol Parameters string is
		too large (more than 256 bytes) to be contained within the
		value of one instance of t11FcSpPoNaAuthProtParams, then
		one row in this table contains the first 256 bytes, and
		one (or more) other row(s) in this table contain the rest
		of the value.

		The same underlying management data that is represented in
		rows of this table is also represented by the corresponding
		instances of t11FcSpPoNaAttribValue.  Thus, after any
		modification of the underlying management data, e.g., after
		a Set operation to the value of either MIB representation,
		then that modification is reflected in the values of both
		MIB representations."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex,
		t11FcSpPoNaAttribName,
		t11FcSpPoNaAttribEntryIndex,
		t11FcSpPoNaAuthProtIdentifier,
		t11FcSpPoNaAuthProtPartIndex }
	-- 1.3.6.1.2.1.178.1.3.10.1
	::= { t11FcSpPoNaAuthProtTable 1 }


T11FcSpPoNaAuthProtEntry ::= SEQUENCE {

	t11FcSpPoNaAuthProtIdentifier Unsigned32,
	t11FcSpPoNaAuthProtPartIndex  Unsigned32,
	t11FcSpPoNaAuthProtParams     OCTET STRING,
	t11FcSpPoNaAuthProtRowStatus  RowStatus }


t11FcSpPoNaAuthProtIdentifier OBJECT-TYPE
	SYNTAX  Unsigned32 (0..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"The Authentication Protocol Identifier:

		        1      = DH-CHAP
		        3      = FCPAP
		        4      = IKEv2
		        5      = IKEv2-AUTH
		  240 thru 255 = Vendor Specific Protocols

		all other values are 'Reserved' (by T11)."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 5.3.2, table 11."
	-- 1.3.6.1.2.1.178.1.3.10.1.1
	::= { t11FcSpPoNaAuthProtEntry 1 }


t11FcSpPoNaAuthProtPartIndex OBJECT-TYPE
	SYNTAX  Unsigned32 (1..4294967295)
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"When the value of an Attribute Protocol Parameters string
		is shorter than 257 bytes, the whole value is contained in
		one instance of t11FcSpPoNaAuthProtParams, and the value of
		this object is 1. (This includes the case when the Attribute
		Protocol Parameters string is zero bytes in length.)

		If the value of an Authentication Protocol Parameters string
		is longer than 256 bytes, then that value is divided up on
		256-byte boundaries such that all parts are 256 bytes long
		except the last part, which is shorter if necessary, with
		each such part contained in a separate row of this table,
		and the value of this object is set to the part number.
		That is, this object has the value of 1 for bytes 0-255,
		the value of 2 for bytes 256-511, etc."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 5.3.2, table 10."
	-- 1.3.6.1.2.1.178.1.3.10.1.2
	::= { t11FcSpPoNaAuthProtEntry 2 }


t11FcSpPoNaAuthProtParams OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (0..256))
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The value of an Authentication Protocol Parameters string
		is divided up on 256-byte boundaries such that all parts
		are 256 bytes long except the last part, which is shorter
		if necessary, and each such part is contained in a
		separate instance of this object."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 5.3.2, table 10."
	-- 1.3.6.1.2.1.178.1.3.10.1.3
	::= { t11FcSpPoNaAuthProtEntry 3 }


t11FcSpPoNaAuthProtRowStatus OBJECT-TYPE
	SYNTAX  RowStatus
	MAX-ACCESS read-create
	STATUS  current
	DESCRIPTION
		"The status of this row.  Values of object instances
		within the row can be modified at any time."
	-- 1.3.6.1.2.1.178.1.3.10.1.4
	::= { t11FcSpPoNaAuthProtEntry 4 }


--
-- Part 4 - Statistics
--

t11FcSpPoStatsTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoStatsEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of statistics maintained by FC-SP Security
		Policy Servers."
	-- 1.3.6.1.2.1.178.1.4.1
	::= { t11FcSpPoStatistics 1 }


t11FcSpPoStatsEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoStatsEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A set of statistics for the FC-SP Security Policy Server on
		the Fabric identified by the value of t11FcSpPoFabricIndex,
		and managed within the Fibre Channel management instance
		identified by fcmInstanceIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex }
	-- 1.3.6.1.2.1.178.1.4.1.1
	::= { t11FcSpPoStatsTable 1 }


T11FcSpPoStatsEntry ::= SEQUENCE {

	t11FcSpPoInRequests Counter32,
	t11FcSpPoInAccepts  Counter32,
	t11FcSpPoInRejects  Counter32 }


t11FcSpPoInRequests OBJECT-TYPE
	SYNTAX  Counter32
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The number of FC-SP Policy Management Requests
		(e.g., GPS, APS, etc.) received by this FC-SP
		Security Policy Server on this Fabric.

		This counter has no discontinuities other than those
		that all Counter32's have when sysUpTime=0."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3."
	-- 1.3.6.1.2.1.178.1.4.1.1.1
	::= { t11FcSpPoStatsEntry 1 }


t11FcSpPoInAccepts OBJECT-TYPE
	SYNTAX  Counter32
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The number of times that this FC-SP Security Policy Server
		sent an Accept CT_IU on this Fabric in response to a
		received FC-SP Policy Management Request (e.g., GPS, APS,
		etc.).

		This counter has no discontinuities other than those
		that all Counter32's have when sysUpTime=0."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3."
	-- 1.3.6.1.2.1.178.1.4.1.1.2
	::= { t11FcSpPoStatsEntry 2 }


t11FcSpPoInRejects OBJECT-TYPE
	SYNTAX  Counter32
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The number of times that this FC-SP Security Policy Server
		sent a Reject CT_IU on this Fabric in response to a
		received FC-SP Policy Management Request (e.g., GPS, APS,
		etc.).






		This counter has no discontinuities other than those
		that all Counter32's have when sysUpTime=0."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3."
	-- 1.3.6.1.2.1.178.1.4.1.1.3
	::= { t11FcSpPoStatsEntry 3 }


--
-- Part 5 - Control Information & Notifications
--
--
-- Control Information
--

t11FcSpPoServerAddress OBJECT-TYPE
	SYNTAX  FcNameIdOrZero
	MAX-ACCESS accessible-for-notify
	STATUS  current
	DESCRIPTION
		"The WWN of the FC-SP Security Policy Server that
		received a request that is referenced in a
		notification."
	-- 1.3.6.1.2.1.178.1.5.1
	::= { t11FcSpPoControl 1 }


t11FcSpPoControlTable OBJECT-TYPE
	SYNTAX  SEQUENCE OF T11FcSpPoControlEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"A table of control information, including the memory
		realization of FC-SP Policy Databases, and concerning
		the generation of notifications due to FC-SP
		Policy-related events."
	-- 1.3.6.1.2.1.178.1.5.2
	::= { t11FcSpPoControl 2 }


t11FcSpPoControlEntry OBJECT-TYPE
	SYNTAX  T11FcSpPoControlEntry
	MAX-ACCESS not-accessible
	STATUS  current
	DESCRIPTION
		"Each entry contains control information specific to FC-SP
		Policy and Policy-related events for the Fabric identified
		by the value of t11FcSpPoFabricIndex, and managed within
		the Fibre Channel management instance identified by
		fcmInstanceIndex."
	INDEX {
		fcmInstanceIndex,
		t11FcSpPoFabricIndex }
	-- 1.3.6.1.2.1.178.1.5.2.1
	::= { t11FcSpPoControlTable 1 }


T11FcSpPoControlEntry ::= SEQUENCE {

	t11FcSpPoStorageType        StorageType,
	t11FcSpPoNotificationEnable TruthValue,
	t11FcSpPoLastNotifyType     INTEGER,
	t11FcSpPoRequestSource      FcNameIdOrZero,
	t11FcSpPoReasonCode         T11NsGs4RejectReasonCode,
	t11FcSpPoCtCommandString    OCTET STRING,
	t11FcSpPoReasonCodeExp      Unsigned32,
	t11FcSpPoReasonVendorCode   OCTET STRING }


t11FcSpPoStorageType OBJECT-TYPE
	SYNTAX  StorageType
	MAX-ACCESS read-write
	STATUS  current
	DESCRIPTION
		"This object specifies the memory realization of FC-SP
		Policy Objects and related information for a particular
		Fabric; specifically, for:

		  - rows created and/or modified for the particular
		    Fabric in these tables:

		        t11FcSpPoNaSummaryTable
		        t11FcSpPoNaSwListTable
		        t11FcSpPoNaSwMembTable
		        t11FcSpPoNaNoMembTable
		        t11FcSpPoNaCtDescrTable
		        t11FcSpPoNaSwConnTable
		        t11FcSpPoNaIpMgmtTable
		        t11FcSpPoNaWkpDescrTable
		        t11FcSpPoNaAttribTable

		  - the activate and deactivate actions invoked through
		    the t11FcSpPoOperActivate and t11FcSpPoOperDeActivate
		    objects for the particular Fabric; and

		  - modified information contained in the same row
		    as an instance of this object.

		Even if an instance of this object has the value
		'permanent(4)', none of the information defined in
		this MIB module for the given Fabric needs to be
		writable."
	-- 1.3.6.1.2.1.178.1.5.2.1.1
	::= { t11FcSpPoControlEntry 1 }


t11FcSpPoNotificationEnable OBJECT-TYPE
	SYNTAX  TruthValue
	MAX-ACCESS read-write
	STATUS  current
	DESCRIPTION
		"This object specifies whether the following types of
		notifications:

		   t11FcSpPoNotifyActivation,
		   t11FcSpPoNotifyActivateFail,
		   t11FcSpPoNotifyDeactivation and
		   t11FcSpPoNotifyDeactivateFail

		should be generated for this Fabric."
	-- 1.3.6.1.2.1.178.1.5.2.1.2
	::= { t11FcSpPoControlEntry 2 }


t11FcSpPoLastNotifyType OBJECT-TYPE
	SYNTAX  INTEGER {
			none(1),
			activation(2),
			activateFail(3),
			deactivation(4),
			deactivateFail(5) }
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"An indication of which of the following types of
		notification is currently being/was most recently
		generated for the Fabric:

		  'activation'     -- t11FcSpPoNotifyActivation
		  'activateFail'   -- t11FcSpPoNotifyActivateFail
		  'deactivation'   -- t11FcSpPoNotifyDeactivation
		  'deactivateFail' -- t11FcSpPoNotifyDeactivateFail

		The value 'none' indicates that none of these types of
		notifications have been generated since the last restart
		of the network management system, and therefore that the
		corresponding instances of: t11FcSpPoRequestSource,
		t11FcSpPoReasonCode, t11FcSpPoCtCommandString,
		t11FcSpPoReasonCodeExp, and
		t11FcSpPoReasonVendorCode are irrelevant."
	-- 1.3.6.1.2.1.178.1.5.2.1.3
	::= { t11FcSpPoControlEntry 3 }


t11FcSpPoRequestSource OBJECT-TYPE
	SYNTAX  FcNameIdOrZero
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The WWN of the source of the (Activate Policy Summary
		or Deactivate Policy Summary) request for which the
		current/most recent notification of the type indicated by
		the corresponding instance of t11FcSpPoLastNotifyType
		is being/was generated.

		If no source is available, the value of this object is
		the zero-length string."
	DEFVAL { "" }
	-- 1.3.6.1.2.1.178.1.5.2.1.4
	::= { t11FcSpPoControlEntry 4 }


t11FcSpPoReasonCode OBJECT-TYPE
	SYNTAX  T11NsGs4RejectReasonCode
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The reason code associated with the failure that is
		indicated when the value of the corresponding instance
		of t11FcSpPoLastNotifyType is 'activateFail' or
		'deactivateFail'.

		For other values of t11FcSpPoLastNotifyType, the value
		of this object is 'none(1)'."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3.6.2 & 7.3.6.3"
	-- 1.3.6.1.2.1.178.1.5.2.1.5
	::= { t11FcSpPoControlEntry 5 }


t11FcSpPoCtCommandString OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (0..255))
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The binary content of the failed request that is
		indicated when the value of the corresponding instance of
		t11FcSpPoLastNotifyType is 'activateFail' or
		'deactivateFail'.  The content of the request is formatted
		as an octet string (in network byte order) containing the
		CT_IU, as described in Table 2 of [FC-GS-5] (including the
		preamble).

		For other values of t11FcSpPoLastNotifyType, or if the
		CT_IU's content is unavailable, the value of this object
		is the zero-length string.






		When the length of this object is 255 octets, it
		contains the first 255 octets of the CT_IU (in
		network-byte order)."
	-- 1.3.6.1.2.1.178.1.5.2.1.6
	::= { t11FcSpPoControlEntry 6 }


t11FcSpPoReasonCodeExp OBJECT-TYPE
	SYNTAX  Unsigned32 (0..255)
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The reason code explanation associated with the failure
		that is indicated when the value of the corresponding
		instance of t11FcSpPoLastNotifyType is 'activateFail' or
		'deactivateFail'.

		For other values of t11FcSpPoLastNotifyType, the value
		of this object is zero."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3.6.2 & 7.3.6.3"
	-- 1.3.6.1.2.1.178.1.5.2.1.7
	::= { t11FcSpPoControlEntry 7 }


t11FcSpPoReasonVendorCode OBJECT-TYPE
	SYNTAX  OCTET STRING (SIZE (0 | 1))
	MAX-ACCESS read-only
	STATUS  current
	DESCRIPTION
		"The vendor-specific reason code associated with the failure
		that is indicated when the value of the corresponding
		instance of t11FcSpPoLastNotifyType is 'activateFail' or
		'deactivateFail'.

		For other values of t11FcSpPoLastNotifyType, or if no
		vendor-specific reason code is available, the value
		of this object is the zero-length string."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3.6.2 & 7.3.6.3"
	-- 1.3.6.1.2.1.178.1.5.2.1.8
	::= { t11FcSpPoControlEntry 8 }



--
-- Notification definitions
--

t11FcSpPoNotifyActivation NOTIFICATION-TYPE
	OBJECTS {
		t11FcSpPoServerAddress,
		t11FcSpPoPolicySummaryObjName,
		t11FcSpPoRequestSource}
	STATUS  current
	DESCRIPTION
		"This notification is generated whenever a Security
		Policy Server (indicated by the value of
		t11FcSpPoServerAddress) successfully completes the
		execution of an Activate Policy Summary request.
		The value of t11FcSpPoRequestSource indicates
		the source of the APS request.  The value of
		t11FcSpPoPolicySummaryObjName indicates the name of
		the activated Policy Summary Object."
	-- 1.3.6.1.2.1.178.0.1
	::= { t11FcSpPoMIBNotifications 1 }


t11FcSpPoNotifyActivateFail NOTIFICATION-TYPE
	OBJECTS {
		t11FcSpPoServerAddress,
		t11FcSpPoRequestSource,
		t11FcSpPoCtCommandString,
		t11FcSpPoReasonCode,
		t11FcSpPoReasonCodeExp,
		t11FcSpPoReasonVendorCode}
	STATUS  current
	DESCRIPTION
		"This notification is generated whenever a Security Policy
		Server (indicated by the value of t11FcSpPoServerAddress)
		fails to complete the execution of an Activate Policy
		Summary request.

		The value of t11FcSpPoCtCommandString indicates the
		rejected request, and the values of t11FcSpPoReasonCode,
		t11FcSpPoReasonCodeExp, and t11FcSpPoReasonVendorCode
		indicate the reason for the rejection.  The value of
		t11FcSpPoRequestSource indicates the source of the
		request."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3.6.2."
	-- 1.3.6.1.2.1.178.0.2
	::= { t11FcSpPoMIBNotifications 2 }


t11FcSpPoNotifyDeactivation NOTIFICATION-TYPE
	OBJECTS {
		t11FcSpPoServerAddress,
		t11FcSpPoRequestSource}
	STATUS  current
	DESCRIPTION
		"This notification is generated whenever a Security
		Policy Server (indicated by the value of
		t11FcSpPoServerAddress) successfully completes the





		execution of a Deactivate Policy Summary request.
		The value of t11FcSpPoRequestSource indicates
		the source of the DPS request."
	REFERENCE
		"- ANSI INCITS 426-2007, T11/Project 1570-D,
		Fibre Channel - Security Protocols (FC-SP),
		February 2007, section 7.3.6.3."
	-- 1.3.6.1.2.1.178.0.3
	::= { t11FcSpPoMIBNotifications 3 }


t11FcSpPoNotifyDeactivateFail NOTIFICATION-TYPE
	OBJECTS {
		t11FcSpPoServerAddress,
		t11FcSpPoRequestSource,
		t11FcSpPoCtCommandString,
		t11FcSpPoReasonCode,
		t11FcSpPoReasonCodeExp,
		t11FcSpPoReasonVendorCode}
	STATUS  current
	DESCRIPTION
		"This notification is generated whenever a Security Policy
		Server (indicated by the value of t11FcSpPoServerAddress)
		fails to complete the execution of a Deactivate Policy
		Summary request.

		The value of t11FcSpPoCtCommandString indicates the
		rejected request, and the values of t11FcSpPoReasonCode,
		t11FcSpPoReasonCodeExp, and t11FcSpPoReasonVendorCode
		indicate the reason for the rejection.  The value of
		t11FcSpPoRequestSource indicates the source of the
		request."
	-- 1.3.6.1.2.1.178.0.4
	::= { t11FcSpPoMIBNotifications 4 }

--
-- Conformance
--

t11FcSpPoMIBCompliances OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.2.1
	::= { t11FcSpPoMIBConformance 1 }

t11FcSpPoMIBGroups OBJECT IDENTIFIER 
	-- 1.3.6.1.2.1.178.2.2
	::= { t11FcSpPoMIBConformance 2 }


t11FcSpPoMIBCompliance MODULE-COMPLIANCE
	STATUS  current
	DESCRIPTION
		"The compliance statement for entities that
		support the Fabric Policies defined in FC-SP,"

	MODULE 
	MANDATORY-GROUPS {
			t11FcSpPoActiveObjectsGroup }

	GROUP t11FcSpPoNonActiveObjectsGroup
	  DESCRIPTION
		"These objects are mandatory for FC-SP Security Policy
		Servers."
	GROUP t11FcSpPoNotifyObjectsGroup
	  DESCRIPTION
		"These objects are mandatory for FC-SP Security Policy
		Servers."
	GROUP t11FcSpPoNotificationGroup
	  DESCRIPTION
		"These notifications are mandatory for FC-SP Security
		Policy Servers."
	GROUP t11FcSpPoOperationsObjectsGroup
	  DESCRIPTION
		"These objects are mandatory only for FC-SP Security
		Policy Servers that support the activation/deactivation
		of policies via SNMP."
	GROUP t11FcSpPoStatsObjectsGroup
	  DESCRIPTION
		"These objects are optional."
	OBJECT t11FcSpPoOperActivate
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoOperDeActivate
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoStorageType
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNotificationEnable
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSummaryPolicyNameType
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSummaryPolicyName
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSummaryHashStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSummaryRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwListFabricName
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwListRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwMembFlags
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwMembDomainID
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwMembPolicyDataRole
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwMembAuthBehaviour
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwMembAttribute
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwMembRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaNoMembFlags
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaNoMembCtAccessIndex
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaNoMembAttribute
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaNoMembRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaCtDescrFlags
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaCtDescrGsType
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaCtDescrGsSubType
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaCtDescrRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwConnAllowedNameType
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwConnAllowedName
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaSwConnRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaIpMgmtWkpIndex
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaIpMgmtAttribute
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaIpMgmtRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaWkpDescrFlags
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaWkpDescrWkpNumber
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaWkpDescrDestPort
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaWkpDescrRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaAttribType
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaAttribValue
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaAttribRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaAuthProtParams
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	OBJECT t11FcSpPoNaAuthProtRowStatus
	  MIN-ACCESS read-only
	  DESCRIPTION 
		"Write access is not required."
	-- 1.3.6.1.2.1.178.2.1.1
	::= { t11FcSpPoMIBCompliances 1 }

-- Units of Conformance

t11FcSpPoActiveObjectsGroup OBJECT-GROUP
	OBJECTS {
		t11FcSpPoPolicySummaryObjName,
		t11FcSpPoAdminFabricName,
		t11FcSpPoActivatedTimeStamp,
		t11FcSpPoSummaryPolicyType,
		t11FcSpPoSummaryHashFormat,
		t11FcSpPoSummaryHashValue,
		t11FcSpPoSwMembSwitchFlags,
		t11FcSpPoSwMembDomainID,
		t11FcSpPoSwMembPolicyDataRole,
		t11FcSpPoSwMembAuthBehaviour,
		t11FcSpPoSwMembAttribute,
		t11FcSpPoNoMembFlags,
		t11FcSpPoNoMembCtAccessIndex,
		t11FcSpPoNoMembAttribute,
		t11FcSpPoCtDescrFlags,
		t11FcSpPoCtDescrGsType,
		t11FcSpPoCtDescrGsSubType,
		t11FcSpPoSwConnAllowedNameType,
		t11FcSpPoSwConnAllowedName,
		t11FcSpPoIpMgmtWkpIndex,
		t11FcSpPoIpMgmtAttribute,
		t11FcSpPoWkpDescrFlags,
		t11FcSpPoWkpDescrWkpNumber,
		t11FcSpPoWkpDescrDestPort,
		t11FcSpPoAttribType,
		t11FcSpPoAttribValue,
		t11FcSpPoAttribExtension,
		t11FcSpPoAuthProtParams }
	STATUS  current
	DESCRIPTION
		"A collection of MIB objects that contain information
		about active Policy Objects that express Fibre Channel
		Security (FC-SP) policy."
	-- 1.3.6.1.2.1.178.2.2.1
	::= { t11FcSpPoMIBGroups 1 }

t11FcSpPoOperationsObjectsGroup OBJECT-GROUP
	OBJECTS {
		t11FcSpPoOperActivate,
		t11FcSpPoOperDeActivate,
		t11FcSpPoOperResult,
		t11FcSpPoOperFailCause }
	STATUS  current
	DESCRIPTION
		"A collection of MIB objects that allow a new set of
		Fibre Channel Security (FC-SP) policies to be activated
		or an existing set to be deactivated."
	-- 1.3.6.1.2.1.178.2.2.2
	::= { t11FcSpPoMIBGroups 2 }

t11FcSpPoNonActiveObjectsGroup OBJECT-GROUP
	OBJECTS {
		t11FcSpPoStorageType,
		t11FcSpPoNaSummaryPolicyNameType,
		t11FcSpPoNaSummaryPolicyName,
		t11FcSpPoNaSummaryHashStatus,
		t11FcSpPoNaSummaryHashFormat,
		t11FcSpPoNaSummaryHashValue,
		t11FcSpPoNaSummaryRowStatus,
		t11FcSpPoNaSwListFabricName,
		t11FcSpPoNaSwListRowStatus,
		t11FcSpPoNaSwMembFlags,
		t11FcSpPoNaSwMembDomainID,
		t11FcSpPoNaSwMembPolicyDataRole,
		t11FcSpPoNaSwMembAuthBehaviour,
		t11FcSpPoNaSwMembAttribute,
		t11FcSpPoNaSwMembRowStatus,
		t11FcSpPoNaNoMembFlags,
		t11FcSpPoNaNoMembCtAccessIndex,
		t11FcSpPoNaNoMembAttribute,
		t11FcSpPoNaNoMembRowStatus,
		t11FcSpPoNaCtDescrFlags,
		t11FcSpPoNaCtDescrGsType,
		t11FcSpPoNaCtDescrGsSubType,
		t11FcSpPoNaCtDescrRowStatus,
		t11FcSpPoNaSwConnAllowedNameType,
		t11FcSpPoNaSwConnAllowedName,
		t11FcSpPoNaSwConnRowStatus,
		t11FcSpPoNaIpMgmtWkpIndex,
		t11FcSpPoNaIpMgmtAttribute,
		t11FcSpPoNaIpMgmtRowStatus,
		t11FcSpPoNaWkpDescrFlags,
		t11FcSpPoNaWkpDescrWkpNumber,
		t11FcSpPoNaWkpDescrDestPort,
		t11FcSpPoNaWkpDescrRowStatus,
		t11FcSpPoNaAttribType,
		t11FcSpPoNaAttribValue,
		t11FcSpPoNaAttribExtension,
		t11FcSpPoNaAttribRowStatus,
		t11FcSpPoNaAuthProtParams,
		t11FcSpPoNaAuthProtRowStatus }
	STATUS  current
	DESCRIPTION
		"A collection of MIB objects that contain information
		about non-active Policy Objects available for activation
		in order to change Fibre Channel Security (FC-SP) policy."
	-- 1.3.6.1.2.1.178.2.2.3
	::= { t11FcSpPoMIBGroups 3 }

t11FcSpPoStatsObjectsGroup OBJECT-GROUP
	OBJECTS {
		t11FcSpPoInRequests,
		t11FcSpPoInAccepts,
		t11FcSpPoInRejects }
	STATUS  current
	DESCRIPTION
		"A collection of MIB objects that contain statistics
		that can be maintained by FC-SP Security Policy Servers."
	-- 1.3.6.1.2.1.178.2.2.4
	::= { t11FcSpPoMIBGroups 4 }

t11FcSpPoNotifyObjectsGroup OBJECT-GROUP
	OBJECTS {
		t11FcSpPoNotificationEnable,
		t11FcSpPoServerAddress,
		t11FcSpPoLastNotifyType,
		t11FcSpPoRequestSource,
		t11FcSpPoReasonCode,
		t11FcSpPoCtCommandString,
		t11FcSpPoReasonCodeExp,
		t11FcSpPoReasonVendorCode }
	STATUS  current
	DESCRIPTION
		"A collection of MIB objects to control the generation of
		notifications concerning Fibre Channel Security (FC-SP)
		policy, and to hold information contained in such
		notifications."
	-- 1.3.6.1.2.1.178.2.2.5
	::= { t11FcSpPoMIBGroups 5 }

t11FcSpPoNotificationGroup NOTIFICATION-GROUP
	NOTIFICATIONS {
		t11FcSpPoNotifyActivation,
		t11FcSpPoNotifyActivateFail,
		t11FcSpPoNotifyDeactivation,
		t11FcSpPoNotifyDeactivateFail }
	STATUS  current
	DESCRIPTION
		"A collection of notifications of events concerning
		Fibre Channel Security (FC-SP) policy."
	-- 1.3.6.1.2.1.178.2.2.6
	::= { t11FcSpPoMIBGroups 6 }

END
