path: root/MIBS/comware/HH3C-FC-PSM-MIB

-- =================================================================
-- Copyright (c) 2004-2015 New H3C Tech. Co., Ltd. All rights reserved.
--
-- Description: FC PSM(Fabric Port Security Management) MIB
-- Reference:
-- Version: V1.1
-- History:
-- V1.0 Initial version 2013-10-17
-- V1.1 Modified by Chen Yajun 2014-06-20
--    2014-06-20 1.All "learnt" descriptions changed into "learned".
--               2.Added the description of the value range for
--                 hh3cFcPsmEnableVsanIndex.
--               3.Added the description of read value of hh3cFcPsmClearIntf.
--               4.Changed the syntax of hh3cFcPsmLoginTime from
--                 "TimeStamp" into "DateAndTime".
--=================================================================
HH3C-FC-PSM-MIB DEFINITIONS ::= BEGIN

IMPORTS
    Unsigned32, Counter32,
    MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE
            FROM SNMPv2-SMI
    TEXTUAL-CONVENTION, RowStatus, TruthValue, DateAndTime
            FROM    SNMPv2-TC
    InterfaceIndexOrZero, InterfaceIndex, ifDescr
            FROM    IF-MIB
    hh3cSan
            FROM    HH3C-VSAN-MIB
    Hh3cFcNameIdOrZero
            FROM    HH3C-FC-TC-MIB
    ;

-- ==================================================================
--
-- ======================= Definition Begin =========================
--
-- ==================================================================

hh3cFcPsm MODULE-IDENTITY
    LAST-UPDATED "201310170000Z"
    ORGANIZATION "New H3C Tech. Co., Ltd."
    CONTACT-INFO
        "Platform Team New H3C Tech. Co., Ltd.
         Hai-Dian District Beijing P.R. China
         http://www.h3c.com
         Zip:100085"
    DESCRIPTION
        "This MIB contains the objects for FC port security."
    REVISION "201310170000Z"      -- October 17, 2013 at 09:30 GMT
    DESCRIPTION
        "HH3C-FC-PSM-MIB module is for managing the implementation of
         FC port security."
    ::= { hh3cSan 8 }


-- =================================================================
-- Subtrees in the FC PSM MIB
-- =================================================================

hh3cFcPsmNotifications  OBJECT IDENTIFIER ::= { hh3cFcPsm 0 }
hh3cFcPsmObjects        OBJECT IDENTIFIER ::= { hh3cFcPsm 1 }

hh3cFcPsmScalarObjects  OBJECT IDENTIFIER ::= { hh3cFcPsmObjects 1 }
hh3cFcPsmConfiguration  OBJECT IDENTIFIER ::= { hh3cFcPsmObjects 2 }
hh3cFcPsmStats          OBJECT IDENTIFIER ::= { hh3cFcPsmObjects 3 }


-- =================================================================
-- Type definitions
-- =================================================================

Hh3cFcPsmPortBindDevType ::= TEXTUAL-CONVENTION
    STATUS current
    DESCRIPTION
        "The types of the instance of hh3cFcPsmLoginDev, including
         nWWN(Node World Wide Name), pWWN(Port World Wide Name),
         sWWN(Switch World Wide Name), and wildCard."
    SYNTAX INTEGER
        {
            nWWN(1),
            pWWN(2),
            sWWN(3),
            wildCard(4)
        }


Hh3cFcPsmClearEntryType ::= TEXTUAL-CONVENTION
    STATUS current
    DESCRIPTION
        "This object when set to clearStatic, results in port bind static
         entries being cleared on this VSAN(Virtual Storage Area Networks).
         This object when set to clearAutoLearn, results in port bind
         auto-learned entries being cleared on this VSAN.  This object when
         set to clearAll, results in all of the port bind entries being
         cleared on this VSAN.  No action is taken if this object is set
         to noop.
         The value of this object when read is always noop."
    SYNTAX INTEGER
        {
            clearStatic(1),
            clearAutoLearn(2),
            clearAll(3),
            noop(4)
        }


--
-- The hh3cFcPsmScalarObjects subtree
--

-- =================================================================
-- The FC Port Security Management Notification control object
-- =================================================================

hh3cFcPsmNotifyEnable OBJECT-TYPE
    SYNTAX TruthValue
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "Whether to generate the notification or not depends on the object."
    DEFVAL      { false }
    ::= { hh3cFcPsmScalarObjects 1 }


--
-- The hh3cFcPsmConfiguration subtree
--
-- Implementation of the hh3cFcPsmConfiguration subtree is for
-- the operation of FC port security.
--

-- =================================================================
-- The FC Port Security Management Enable Table
-- =================================================================

hh3cFcPsmEnableTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cFcPsmEnableEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Enable or disable the port security feature on a specified VSAN."
    ::= { hh3cFcPsmConfiguration 1 }

hh3cFcPsmEnableEntry OBJECT-TYPE
    SYNTAX Hh3cFcPsmEnableEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Detailed information about the port security."
    INDEX  {
             hh3cFcPsmEnableVsanIndex
           }
    ::= { hh3cFcPsmEnableTable 1 }

Hh3cFcPsmEnableEntry ::=
    SEQUENCE {
        hh3cFcPsmEnableVsanIndex     Unsigned32,
        hh3cFcPsmEnable              INTEGER,
        hh3cFcPsmEnableState         TruthValue
             }

hh3cFcPsmEnableVsanIndex OBJECT-TYPE
    SYNTAX Unsigned32 (1..4095)
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "The ID of VSAN on this entry."
    ::= { hh3cFcPsmEnableEntry 1 }


hh3cFcPsmEnable OBJECT-TYPE
    SYNTAX INTEGER
        {
            enable(1),
            enableWithAutoLearn(2),
            disable(3),
            noop(4)
        }
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "When set to enable, the port security is on, the value of
         hh3cFcPsmEnableState will be true.
         When set to enableWithAutoLearn, the port security is on
         with auto-learning, the value of hh3cFcPsmEnableState will
         be true.
         When set to disable, the port security is off, the value of
         hh3cFcPsmEnableState will be false.
         The noop means no action.
         The value of this object when read is always noop."
    DEFVAL      { noop }
    ::= { hh3cFcPsmEnableEntry 2 }


hh3cFcPsmEnableState OBJECT-TYPE
    SYNTAX TruthValue
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The state of the port security.  When the value is true, it
         means the port security is on, while the false means the port
         security is off."
    DEFVAL      { false }
    ::= { hh3cFcPsmEnableEntry 3 }



-- =================================================================
-- The FC Port Security Management Config Table
-- =================================================================

hh3cFcPsmConfigTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cFcPsmConfigEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "A table that contains the configured entries."
    ::= { hh3cFcPsmConfiguration 2 }


hh3cFcPsmConfigEntry OBJECT-TYPE
    SYNTAX Hh3cFcPsmConfigEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Detailed information about each configuration."
    INDEX  {
             hh3cFcPsmEnableVsanIndex,
             hh3cFcPsmIndex
           }
    ::= { hh3cFcPsmConfigTable 1 }


Hh3cFcPsmConfigEntry ::=
    SEQUENCE {
        hh3cFcPsmIndex
            Unsigned32,
        hh3cFcPsmLoginDevType
            Hh3cFcPsmPortBindDevType,
        hh3cFcPsmLoginDev
            Hh3cFcNameIdOrZero,
        hh3cFcPsmLoginPoint
            InterfaceIndexOrZero,
        hh3cFcPsmRowStatus
            RowStatus
             }


hh3cFcPsmIndex OBJECT-TYPE
    SYNTAX Unsigned32 (1..32768)
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "The index of this entry."
    ::= { hh3cFcPsmConfigEntry 1 }


hh3cFcPsmLoginDevType OBJECT-TYPE
    SYNTAX Hh3cFcPsmPortBindDevType
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
        "This represents the type of the instance of hh3cFcPsmLoginDev,
         which includes nWWN, pWWN, sWWN, and wildCard."
    ::= { hh3cFcPsmConfigEntry 2 }


hh3cFcPsmLoginDev OBJECT-TYPE
    SYNTAX Hh3cFcNameIdOrZero
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
        "The logging-in device name, which is decided by the
         hh3cFcPsmLoginDevType object.  It represents node
         WWN when the value of hh3cFcPsmLoginDevType is nWWN.
         It represents port WWN when the value of hh3cFcPsmLoginDevType
         is pWWN.  It represents switch WWN when the value of
         hh3cFcPsmLoginDevType is sWWN.  It represents any device
         when the value of hh3cFcPsmLoginDevType is wildCard, and
         the value of the instance of this object should be
         zero-length string.
         The value of this object should not be invalid when
         hh3cFcPsmRowStatus is set to createAndGo or active."
    ::= { hh3cFcPsmConfigEntry 3 }

hh3cFcPsmLoginPoint OBJECT-TYPE
    SYNTAX InterfaceIndexOrZero
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
        "The address of the port on the local switch through which
         the instance of hh3cFcPsmLoginDev can log in.  It represents
         ifindex when the value is not zero.  It represents any port
         when the value is zero."
    ::= { hh3cFcPsmConfigEntry 4 }


hh3cFcPsmRowStatus OBJECT-TYPE
    SYNTAX RowStatus
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
        "Entry status.  When creating a new instance of this table,
         the following objects should be set simultaneously:
         hh3cFcPsmLoginDevType, hh3cFcPsmLoginDev, hh3cFcPsmLoginPoint,
         hh3cFcPsmRowStatus.  If hh3cFcPsmLoginDevType is set to wildCard,
         the value of the instance of hh3cFcPsmLoginDev should be
         zero-length string.  The value of hh3cFcPsmLoginDevType and
         hh3cFcPsmLoginPoint cannot be set to wildCard and zero at
         the same time."
    ::= { hh3cFcPsmConfigEntry 5 }



-- =================================================================
-- The FC Port Security Management Enforced Table
-- =================================================================
hh3cFcPsmEnfTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cFcPsmEnfEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "The FC port security enforced table.  It contains not only the
         configured policies, but also the learning ones learned by the
         switch itself."
    ::= { hh3cFcPsmConfiguration 3 }



hh3cFcPsmEnfEntry OBJECT-TYPE
    SYNTAX Hh3cFcPsmEnfEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Detailed information about the FC port security enforced policy."
    INDEX  {
             hh3cFcPsmEnableVsanIndex,
             hh3cFcPsmEnfIndex
           }
    ::= { hh3cFcPsmEnfTable 1 }


Hh3cFcPsmEnfEntry ::=
    SEQUENCE {
        hh3cFcPsmEnfIndex
            Unsigned32,
        hh3cFcPsmEnfLoginDevType
            Hh3cFcPsmPortBindDevType,
        hh3cFcPsmEnfLoginDev
            Hh3cFcNameIdOrZero,
        hh3cFcPsmEnfLoginPoint
            InterfaceIndexOrZero,
        hh3cFcPsmEnfEntryType
            INTEGER
             }


hh3cFcPsmEnfIndex OBJECT-TYPE
    SYNTAX Unsigned32 (1..32768)
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "The index of this entry."
    ::= { hh3cFcPsmEnfEntry 1 }


hh3cFcPsmEnfLoginDevType OBJECT-TYPE
    SYNTAX Hh3cFcPsmPortBindDevType
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "This represents the type of the instance of hh3cFcPsmEnfLoginDev,
         which includes nWWN, pWWN, sWWN, and wildCard."
    ::= { hh3cFcPsmEnfEntry 2 }


hh3cFcPsmEnfLoginDev OBJECT-TYPE
    SYNTAX Hh3cFcNameIdOrZero
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The logging-in device name, which is decided by the
         hh3cFcPsmEnfLoginDevType object.  It represents node WWN
         when the value of hh3cFcPsmEnfLoginDevType is nWWN.  It
         represents port WWN when the value of hh3cFcPsmEnfLoginDevType
         is pWWN.  It represents switch WWN when the value of
         hh3cFcPsmEnfLoginDevType is sWWN.  It represents any device when
         the value of hh3cFcPsmEnfLoginDevType is wildCard, and the value
         of the instance of this object should be zero-length string."
    ::= { hh3cFcPsmEnfEntry 3 }


hh3cFcPsmEnfLoginPoint OBJECT-TYPE
    SYNTAX InterfaceIndexOrZero
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
         "The address of the port on the local switch through which
          the instance of hh3cFcPsmEnfLoginDev can log in.  It represents
          ifindex when the value is not zero.  It represents any port
          when the value is zero."
    ::= { hh3cFcPsmEnfEntry 4 }


hh3cFcPsmEnfEntryType OBJECT-TYPE
    SYNTAX INTEGER
        {
            learning(1),
            learned(2),
            static(3)
        }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "When the value is learning, it represents the entry is learned
         by the switch itself temporarily and will be deleted when the
         device log out.  When the value is learned, it represents the
         entry is learned by the switch permanently.  When the value is
         static, it represents the entry is configured."
    ::= { hh3cFcPsmEnfEntry 5 }


-- =================================================================
-- The FC Port Security Management Copy To Config Table
-- =================================================================

hh3cFcPsmCopyToConfigTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cFcPsmCopyToConfigEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Specifies whether to copy the entries from enforced table
         to the ones on configured table."
    ::= { hh3cFcPsmConfiguration 4 }


hh3cFcPsmCopyToConfigEntry OBJECT-TYPE
    SYNTAX Hh3cFcPsmCopyToConfigEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Detailed information about the operation."
    INDEX  {
             hh3cFcPsmEnableVsanIndex
           }
    ::= { hh3cFcPsmCopyToConfigTable 1 }


Hh3cFcPsmCopyToConfigEntry ::=
    SEQUENCE {
        hh3cFcPsmCopyToConfig
            INTEGER
             }


hh3cFcPsmCopyToConfig OBJECT-TYPE
    SYNTAX INTEGER
        {
            copy(1),
            noop(2)
        }
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "When the object is set to copy, the learned entries will be
         copied on to the configured table on this VSAN, while the noop
         means no operation.
         The value of this object when read is always noop."
    DEFVAL      { noop }
    ::= { hh3cFcPsmCopyToConfigEntry 1 }


-- =================================================================
-- The FC Port Security Management Auto Learn Table
-- =================================================================

hh3cFcPsmAutoLearnTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cFcPsmAutoLearnEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "This table shows whether the auto-learning is enabled or
         not on specific VSANs."
    ::= { hh3cFcPsmConfiguration 5 }


hh3cFcPsmAutoLearnEntry OBJECT-TYPE
    SYNTAX Hh3cFcPsmAutoLearnEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Detailed information about the auto-learning."
    INDEX { hh3cFcPsmEnableVsanIndex }
    ::= { hh3cFcPsmAutoLearnTable 1 }


Hh3cFcPsmAutoLearnEntry ::=
    SEQUENCE {
        hh3cFcPsmAutoLearnEnable
            TruthValue
             }



hh3cFcPsmAutoLearnEnable OBJECT-TYPE
    SYNTAX TruthValue
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "This object is set to true to enable, or false to disable
         auto-learning on the local switch.  When set to true, the
         switch can learn the devices that have already logged in
         as learning entries on the enforced table, while the false
         can stop the learning operation with the learning entries
         transformed to learned ones."
    DEFVAL      { false }
    ::= { hh3cFcPsmAutoLearnEntry 1 }



-- =================================================================
-- The FC Port Security Management Clear Table
-- =================================================================

hh3cFcPsmClearTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cFcPsmClearEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "This table is used for cleaning specific entries in enforced table."
    ::= { hh3cFcPsmConfiguration 6 }


hh3cFcPsmClearEntry OBJECT-TYPE
    SYNTAX Hh3cFcPsmClearEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Detailed information about the cleaning options."
    INDEX { hh3cFcPsmEnableVsanIndex }
    ::= { hh3cFcPsmClearTable 1 }


Hh3cFcPsmClearEntry ::=
    SEQUENCE {
        hh3cFcPsmClearType
            Hh3cFcPsmClearEntryType,
        hh3cFcPsmClearIntf
            InterfaceIndexOrZero
             }


hh3cFcPsmClearType OBJECT-TYPE
    SYNTAX Hh3cFcPsmClearEntryType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "This object when set to clearStatic, results in port bind
         static entries being cleared on this VSAN.  This object when
         set to clearAutoLearn, results in auto-learned entries being
         cleared on this VSAN.  This object when set to clearAll,
         results in all of the port bind entries being cleared on
         this VSAN.  No action is taken if this object is set to noop.
         The value of this object when read is always noop."
    DEFVAL      { noop }
    ::= { hh3cFcPsmClearEntry 1 }


hh3cFcPsmClearIntf OBJECT-TYPE
    SYNTAX InterfaceIndexOrZero
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The object specifies the interface on which the entries will be
         cleared.  If the object is zero or not set, it means the specified
         entries on all interfaces will be cleared.
         The value of this object when read is always zero."
    ::= { hh3cFcPsmClearEntry 2 }


--
-- The hh3cFcPsmStats subtree
--
-- Implementation of the hh3cFcPsmStats subtree is for
-- the show of statistics about FC port security.
--

-- =================================================================
-- The FC Port Security Management Stats Table
-- =================================================================

hh3cFcPsmStatsTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cFcPsmStatsEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "This table contains statistics of devices, which had been
         allowed or denied to log into the switch."
    ::= { hh3cFcPsmStats 1 }


hh3cFcPsmStatsEntry OBJECT-TYPE
    SYNTAX Hh3cFcPsmStatsEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Detailed information about the statistics."
    INDEX { hh3cFcPsmEnableVsanIndex }
    ::= { hh3cFcPsmStatsTable 1 }


Hh3cFcPsmStatsEntry ::=
    SEQUENCE {
        hh3cFcPsmAllowedLogins
            Counter32,
        hh3cFcPsmDeniedLogins
            Counter32,
        hh3cFcPsmStatsClear
            INTEGER
             }



hh3cFcPsmAllowedLogins OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The number of requests that have been allowed on the
         specified VSAN."
    ::= { hh3cFcPsmStatsEntry 1 }


hh3cFcPsmDeniedLogins OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The number of requests that have been denied on the
         specified VSAN."
    ::= { hh3cFcPsmStatsEntry 2 }


hh3cFcPsmStatsClear OBJECT-TYPE
    SYNTAX INTEGER
        {
            clear(1),
            noop(2)
        }
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The statistics on this VSAN will be cleared if this object
         is set to clear.  No action is taken if this object is
         set to noop.
         The value of this object when read is always noop."
    DEFVAL      { noop }
    ::= { hh3cFcPsmStatsEntry 3 }


-- =================================================================
-- The FC Port Security Management Violation Table
-- =================================================================

hh3cFcPsmViolationTable OBJECT-TYPE
    SYNTAX SEQUENCE OF Hh3cFcPsmViolationEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "This table maintains the information about the violations happened,
         containing at most 1024 items.
         When the number exceeds 1024, the earliest item will be over-written."
    ::= { hh3cFcPsmStats 2 }


hh3cFcPsmViolationEntry OBJECT-TYPE
    SYNTAX Hh3cFcPsmViolationEntry
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Detailed information about the violation."
    INDEX  {
             hh3cFcPsmEnableVsanIndex,
             hh3cFcPsmViolationIndex
           }
    ::= { hh3cFcPsmViolationTable 1 }


Hh3cFcPsmViolationEntry ::=
    SEQUENCE {
        hh3cFcPsmViolationIndex
            Unsigned32,
        hh3cFcPsmLoginPWWN
            Hh3cFcNameIdOrZero,
        hh3cFcPsmLoginNWWN
            Hh3cFcNameIdOrZero,
        hh3cFcPsmLoginSWWN
            Hh3cFcNameIdOrZero,
        hh3cFcPsmLoginIntf
            InterfaceIndex,
        hh3cFcPsmLoginTime
            DateAndTime,
        hh3cFcPsmLoginCount
            Counter32
             }


hh3cFcPsmViolationIndex OBJECT-TYPE
    SYNTAX Unsigned32 (1..1024)
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "The index of this entry.  The entry is uniquely distinguished by WWN,
         WWN type and ifindex where the login was denied."
    ::= { hh3cFcPsmViolationEntry 1 }


hh3cFcPsmLoginPWWN OBJECT-TYPE
    SYNTAX Hh3cFcNameIdOrZero
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The pWWN of the device whose FLOGI(Fabric Login) request had
        been denied.  If the device is an n-node, the value of the instance
        of hh3cFcPsmLoginSWWN should be zero-length string."
    ::= { hh3cFcPsmViolationEntry 2 }


hh3cFcPsmLoginNWWN OBJECT-TYPE
    SYNTAX Hh3cFcNameIdOrZero
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The nWWN of the device whose FLOGI request had been denied.
         If the device is an n-node, the value of the instance of
         hh3cFcPsmLoginSWWN should be zero-length string."
    ::= { hh3cFcPsmViolationEntry 3 }


hh3cFcPsmLoginSWWN OBJECT-TYPE
    SYNTAX Hh3cFcNameIdOrZero
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The sWWN of the device whose FLOGI request had been denied.
         If the device is a switch, the values of the instance of
         hh3cFcPsmLoginPWWN and hh3cFcPsmLoginNWWN should be zero-length
         string."
    ::= { hh3cFcPsmViolationEntry 4 }

hh3cFcPsmLoginIntf OBJECT-TYPE
    SYNTAX InterfaceIndex
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The ifindex of the port where the login was denied."
    ::= { hh3cFcPsmViolationEntry 5 }


hh3cFcPsmLoginTime OBJECT-TYPE
    SYNTAX DateAndTime
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "Specifies the date and time when the last denied login
         happened."
    ::= { hh3cFcPsmViolationEntry 6 }


hh3cFcPsmLoginCount OBJECT-TYPE
    SYNTAX Counter32
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
        "The number of times for a certain nWWN/pWWN or sWWN had
         been denied to log into an interface of the local device."
    ::= { hh3cFcPsmViolationEntry 7 }

-- =================================================================
-- Notifications
-- =================================================================

hh3cFcPsmFPortDenyNotify NOTIFICATION-TYPE
    OBJECTS  {
               ifDescr,
               hh3cFcPsmLoginPWWN,
               hh3cFcPsmLoginIntf,
               hh3cFcPsmLoginTime
             }
    STATUS current
    DESCRIPTION
        "Notifies that a FLOGI is denied on an F port of the local device."
    ::= { hh3cFcPsmNotifications 1 }


hh3cFcPsmEPortDenyNotify NOTIFICATION-TYPE
    OBJECTS  {
               ifDescr,
               hh3cFcPsmLoginSWWN,
               hh3cFcPsmLoginIntf,
               hh3cFcPsmLoginTime
             }
    STATUS current
    DESCRIPTION
        "Notifies that a switch is denied on an E port of the local device."
    ::= { hh3cFcPsmNotifications 2 }

END