idnits 2.17.1 draft-ietf-ips-iscsi-mib-11.txt: Checking boilerplate required by RFC 5378 and the IETF Trust (see https://trustee.ietf.org/license-info): ---------------------------------------------------------------------------- ** It looks like you're using RFC 3978 boilerplate. You should update this to the boilerplate described in the IETF Trust License Policy document (see https://trustee.ietf.org/license-info), which is required now. -- Found old boilerplate from RFC 3978, Section 5.1 on line 23. -- Found old boilerplate from RFC 3978, Section 5.5 on line 3876. -- Found old boilerplate from RFC 3979, Section 5, paragraph 1 on line 3849. -- Found old boilerplate from RFC 3979, Section 5, paragraph 2 on line 3856. -- Found old boilerplate from RFC 3979, Section 5, paragraph 3 on line 3862. ** This document has an original RFC 3978 Section 5.4 Copyright Line, instead of the newer IETF Trust Copyright according to RFC 4748. ** The document seems to lack an RFC 3978 Section 5.4 Reference to BCP 78. ** This document has an original RFC 3978 Section 5.5 Disclaimer, instead of the newer disclaimer which includes the IETF Trust according to RFC 4748. Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt: ---------------------------------------------------------------------------- == No 'Intended status' indicated for this document; assuming Proposed Standard Checking nits according to https://www.ietf.org/id-info/checklist : ---------------------------------------------------------------------------- No issues found here. Miscellaneous warnings: ---------------------------------------------------------------------------- == The copyright year in the RFC 3978 Section 5.4 Copyright Line does not match the current year == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but does not include the phrase in its RFC 2119 key words list. -- The document seems to lack a disclaimer for pre-RFC5378 work, but may have content which was first submitted before 10 November 2008. If you have contacted all the original authors and they are all willing to grant the BCP78 rights to the IETF Trust, then this is fine, and you can ignore this comment. If not, you may need to add the pre-RFC5378 disclaimer. (See the Legal Provisions document at https://trustee.ietf.org/license-info for more information.) -- The document date (April 2006) is 6584 days in the past. Is this intentional? Checking references for intended status: Proposed Standard ---------------------------------------------------------------------------- (See RFCs 3967 and 4897 for information about using normative references to lower-maturity documents in RFCs) ** Obsolete normative reference: RFC 3720 (Obsoleted by RFC 7143) == Outdated reference: A later version (-08) exists of draft-ietf-ips-auth-mib-06 -- Obsolete informational reference (is this intentional?): RFC 2012 (Obsoleted by RFC 4022) == Outdated reference: A later version (-09) exists of draft-ietf-ips-scsi-mib-06 Summary: 5 errors (**), 0 flaws (~~), 5 warnings (==), 8 comments (--). Run idnits with the --verbose option for more detailed information about the items above. -------------------------------------------------------------------------------- 2 Internet Draft Mark Bakke 3 Cisco Systems 4 Expires April 2006 5 James Muchow 6 Qlogic Corp. 8 Marjorie Krueger 9 Hewlett-Packard 11 Tom McSweeney 12 IBM 14 October 2005 16 Definitions of Managed Objects for iSCSI 18 Status of this Memo 20 By submitting this Internet-Draft, each author represents that any 21 applicable patent or other IPR claims of which he or she is aware 22 have been or will be disclosed, and any of which he or she becomes 23 aware will be disclosed, in accordance with Section 6 of BCP 79. 25 Internet-Drafts are working documents of the Internet Engineering 26 Task Force (IETF), its areas, and its working groups. Note that 27 other groups may also distribute working documents as Internet- 28 Drafts. 30 Internet-Drafts are draft documents valid for a maximum of six months 31 and may be updated, replaced, or obsoleted by other documents at any 32 time. It is inappropriate to use Internet-Drafts as reference 33 material or to cite them other than as "work in progress." 35 The list of current Internet-Drafts can be accessed at 36 http://www.ietf.org/ietf/1id-abstracts.html. 38 The list of Internet-Draft Shadow Directories can be accessed at 39 http://www.ietf.org/shadow.html. 41 Copyright Notice 43 Copyright (C) The Internet Society (2005). 45 Abstract 47 This memo defines a portion of the Management Information Base (MIB) 48 for use with network management protocols in TCP/IP based internets. 49 In particular it defines objects for managing a client using the 50 iSCSI (SCSI over TCP) protocol. 52 Table of Contents 54 1. Introduction........................................ 2 55 2. Specification of Requirements....................... 3 56 3. The Internet-Standard Management Framework.......... 3 57 4. Relationship to Other MIB modules................... 3 58 5. Relationship to SNMP Contexts....................... 4 59 6. Discussion.......................................... 4 60 6.1. iSCSI MIB Object Model.............................. 5 61 6.2. iSCSI MIB Table Structure........................... 6 62 6.3. iscsiInstance....................................... 7 63 6.4. iscsiPortal......................................... 7 64 6.5. iscsiTargetPortal................................... 8 65 6.6. iscsiInitiatorPortal................................ 9 66 6.7. iscsiNode........................................... 10 67 6.8. iscsiTarget......................................... 10 68 6.9. iscsiTgtAuthorization............................... 10 69 6.10. iscsiInitiator...................................... 11 70 6.11. iscsiIntrAuthorization.............................. 11 71 6.12. iscsiSession........................................ 11 72 6.13. iscsiConnection..................................... 12 73 6.14. IP Addresses and TCP Port Numbers................... 12 74 6.15. Descriptors: Using OIDs in Place of Enumerated Types 12 75 6.16. Notifications....................................... 13 76 7. MIB Definitions..................................... 14 77 8. Security Considerations............................. 79 78 9. IANA Considerations................................. 80 79 10. Normative References................................ 80 80 11. Informative References.............................. 81 81 12. Acknowledgements.................................... 81 82 Authors' Addresses.................................. 81 83 IPR Notice.......................................... 82 84 Full Copyright Notice............................... 83 86 1. Introduction 88 This document defines a MIB module for iSCSI [RFC3720], used to 89 manage devices which implement the iSCSI protocol. 91 2. Specification of Requirements 93 The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 94 "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 95 document are to be interpreted as described in RFC 2119 [RFC2119]. 97 3. The Internet-Standard Management Framework 99 For a detailed overview of the documents that describe the current 100 Internet-Standard Management Framework, please refer to section 7 of 101 RFC 3410 [RFC3410]. 103 Managed objects are accessed via a virtual information store, termed 104 the Management Information Base or MIB. MIB objects are generally 105 accessed through the Simple Network Management Protocol (SNMP). 106 Objects in the MIB are defined using the mechanisms defined in the 107 Structure of Management Information (SMI). This memo specifies a MIB 108 module that is compliant to the SMIv2, which is described in STD 58, 109 RFC 2578 [RFC2578], STD 58, RFC 2579 [RFC2579] and STD 58, RFC 2580 110 [RFC2580]. 112 4. Relationship to Other MIB modules 114 The iSCSI MIB module is normally layered between the SCSI MIB module 115 [SCSIMIB] (work in progress) and the TCP MIB module [RFC2012], and 116 makes use of the IPS Identity Authentication MIB module [AUTHMIB] 117 (work in progress). Here is how these modules are related: 119 SCSI MIB Within systems where a SCSI layer is present, each 120 iscsiNode, whether it has an initiator role, target role, 121 or both, is related to one SCSI device within the SCSI MIB 122 module. In this case, the iscsiNodeTransportType attribute 123 points to the SCSI transport object within the SCSI MIB 124 module, which in turn contains an attribute that points 125 back to the iscsiNode. In this way, a management station 126 can navigate between the two MIB modules. In systems where 127 a SCSI layer is not present, such as within an iSCSI proxy 128 device, the iscsiNodeTransportType attribute points to the 129 appropriate corresponding object within the appropriate 130 MIB, or is left blank. 132 TCP MIB Each iSCSI connection is related to one transport-level 133 connection. Currently, iSCSI uses only TCP; the iSCSI 134 connection is related to a TCP connection using its normal 135 (protocol, source address, source port, destination 136 address, destination port) 5-tuple. 138 AUTH MIB Each iSCSI node that serves a target role can have a list 139 of authorized initiators. Each of the entries in this list 140 points to an identity within the IPS Identity 141 Authentication MIB module that will be allowed to access 142 the target. iSCSI nodes that serve in an initiator role 143 can also have a list of authorized targets. Each of the 144 entries in this list points to an identity within the Auth 145 MIB module to which the initiator should attempt to 146 establish sessions. The Auth MIB module includes 147 information used to identify initiators and targets by 148 their iSCSI name, IP address, and/or credentials. 150 This MIB module imports objects from RFCs 2578 [RFC2578], 151 2579 [RFC2579], 2580 [RFC2580], and 3411 [RFC3411]. It 152 also imports textual conventions from the INET-ADDRESS-MIB 153 [RFC4001]. 155 5. Relationship to SNMP Contexts 157 Each non-scalar object in the iSCSI MIB module is indexed first by an 158 iSCSI Instance. Each instance is a collection of nodes, portals, 159 sessions, etc., that can define a physical or virtual partitioning of 160 an iSCSI-capable device. The use of an instance works well with 161 partitionable or hierarchical storage devices and fits in logically 162 with other management schemes. Instances do not replace SNMP 163 contexts, however they do provide a very simple way to assign a 164 virtual or physical partion of a device to one or more SNMP contexts, 165 without having to do so for each individual node, portal, and session 166 row. 168 6. Discussion 170 This MIB module structure supplies configuration, fault, and 171 statistics information for iSCSI devices [RFC3720]. It is structured 172 around the well-known iSCSI objects, such as targets, initiators, 173 sessions, connections, and the like. 175 This MIB module may also be used to configure access to iSCSI 176 targets, by creating iSCSI Portals and authorization list entries. 178 It is worthwhile to note that this is an iSCSI MIB module and as such 179 reflects only iSCSI objects. This module does not contain information 180 about the SCSI-layer attributes of a device. If a SCSI layer is 181 present, the SCSI MIB module, currently under development, may be 182 used to manage SCSI information for a device. 184 The iSCSI MIB module consists of several "objects", each of which is 185 represented by one or more tables. This section contains a brief 186 description of the "object" hierarchy and a description of each 187 object, followed by a discussion of the actual table structure within 188 the objects. 190 6.1. iSCSI MIB Object Model 192 The top-level object in this structure is the iSCSI instance, which 193 "contains" all of the other objects. 195 iscsiInstance 196 -- A distinct iSCSI entity within the managed system. 197 iscsiPortal 198 -- An IP address used by this instance 199 iscsiTargetPortal 200 -- Contains portal information relevant when the portal 201 -- is used to listen for connections to its targets. 202 iscsiInitiatorPortal 203 -- Contains portal information relevant when the portal 204 -- is used to initiate connections to other targets. 205 iscsiNode 206 -- An iSCSI node can act as an initiator, a target, or both. 207 -- Contains generic (non-role-specific) information. 208 iscsiTarget 209 -- Target-specific iSCSI node information. 210 iscsiTgtAuth 211 -- A list of initiator identities that are allowed 212 -- access to this target. 213 iscsiInitiator 214 -- Initiator-specific iSCSI node information. 215 iscsiIntrAuth 216 -- A list of target identities to which this initiator 217 -- is configured to establish sessions. 218 iscsiSession 219 -- An active iSCSI session between an initiator and target. 220 -- The session's direction may be Inbound (outside 221 -- initiator to our target) or Outbound (our initiator to 222 -- an outside target). 223 iscsiConnection 224 -- An active TCP connection within an iSCSI session 226 An iSCSI Node can be an initiator, a target, or both. The iSCSI 227 Node's portals may be used to initiate connections (initiator) or 228 listen for connections (target), depending on wither the iSCSI Node 229 is acting as an initiator or target. The iSCSI MIB module assumes 230 that any target may be accessed via any portal that can take on a 231 target role, although other access controls not reflected in the 232 module might limit this. 234 6.2. iSCSI MIB Table Structure 236 Each iSCSI object exports one or more tables: an attributes table, 237 and zero or more statistics tables which augment the attributes 238 table. Since iSCSI is an evolving standard, it is much cleaner to 239 provide statistics and attributes as separate tables, allowing 240 attributes and statistics to be added independently. In a few cases, 241 there are multiple categories of statistics that will likely grow; in 242 this case, an object will contain multiple statistics tables. 244 iscsiObjects 245 iscsiDescriptors 246 iscsiInstance 247 iscsiInstanceAttributesTable 248 iscsiInstanceSsnErrorStatsTable 249 -- Counts abnormal session terminations 250 iscsiPortal 251 iscsiPortalAttributesTable 252 iscsiTargetPortal 253 iscsiTgtPortalAttributesTable 254 iscsiInitiatorPortal 255 iscsiIntrPortalAttributesTable 256 iscsiNode 257 iscsiNodeAttributesTable 258 iscsiTarget 259 iscsiTargetAttributesTable 260 iscsiTargetLoginStatsTable 261 -- Counts successful and unsuccessful logins 262 iscsiTargetLogoutStatsTable 263 -- Counts normal and abnormal logouts 264 iscsiTgtAuthorization 265 iscsiTgtAuthAttributesTable 266 iscsiInitiator 267 iscsiInitiatorAttributesTable 268 iscsiInitiatorLoginStatsTable 269 -- Counts successful and unsuccessful logins 270 iscsiInitiatorLogoutStatsTable 271 -- Counts normal and abnormal logouts 272 iscsiIntrAuthorization 273 iscsiIntrAuthAttributesTable 274 iscsiSession 275 iscsiSessionAttributesTable 276 iscsiSessionStatsTable 277 -- Performance-related counts (requests, responses, bytes) 278 iscsiSessionCxnErrorStatsTable 279 -- Counts digest errors, connection errors, etc. 281 iscsiConnection 282 iscsiConnectionAttributesTable 284 Note that this module does not attempt to count everything that could 285 be counted; it is designed to include only those counters that would 286 be useful for identifying performance, security, and fault problems 287 from a management station. 289 6.3. iscsiInstance 291 The iscsiInstanceAttributesTable is the primary table of the iSCSI 292 MIB module. Every table entry in this module is "owned" by exactly 293 one iSCSI instance; all other table entries in the module include 294 this table's index as their primary index. 296 Most implementations will include just one iSCSI instance row in this 297 table. However, this table exists to allow for multiple virtual 298 instances. For example, many IP routing products now allow multiple 299 virtual routers. The iSCSI MIB module has the same premise; a large 300 system could be "partitioned" into multiple, distinct virtual 301 systems. 303 This also allows a single SNMP agent to proxy for multiple 304 subsystems, perhaps a set of stackable devices, each of which have 305 one or even more instances. 307 The instance attributes include the iSCSI vendor and version, as well 308 as information on the last target or initiator at the other end of a 309 session that caused a session failure. 311 The iscsiInstanceSsnErrorStatsTable augments the attributes table, 312 and provides statistics on session failures due to digest, 313 connection, or iSCSI format errors. 315 6.4. iscsiPortal 317 The iscsiPortalAttributesTable lists iSCSI portals that can either be 318 used to listen for connections to targets, or initiate connections to 319 other targets, or both. 321 Each row in the table includes an IP address (either v4 or v6), and a 322 transport protocol (currently only TCP is defined). Each portal may 323 have additional attributes, depending on whether it is an initiator 324 portal, a target portal, or both. Initiator portals also have portal 325 tags; these are placed in corresponding rows in the 326 iscsiIntrPortalAttributesTable. Target portals have both portal tags 327 and ports (e.g. TCP listen ports if the transport protocol is TCP); 328 these are placed in rows in the iscsiTgtPortalAttributesTable. 330 Portal rows, along with their initiator and target portal 331 counterparts, may be created and destroyed through this MIB module by 332 a management station. Rows in the initiator and target portal tables 333 are created and destroyed automatically by the agent, whenever a row 334 is created or destroyed in the iscsiPortalAttributesTable, or if the 335 value of iscsiPortalRoles changes. Attributes in these tables may 336 then be modified by the management station if the agent 337 implementation allows. 339 When created by a management station, the iscsiPortalRoles attribute 340 is used to control row creation in the initiator and target portal 341 tables. Creating a row with the targetTypePortal bit set in 342 iscsiPortalRoles will cause the implementation to start listening for 343 iSCSI connections on the portal. Creating a row with the 344 initiatorTypePortal bit set in iscsiPortalRoles will not necessarily 345 cause connections to be established; it is left to the implementation 346 whether and when to make use of the portal. Both bits may be set if 347 the portal is to be used by both initiator and target nodes. 349 When deleting a row in the iscsiPortalAttibutesTable, all connections 350 associated with that row are terminated. The implementation may 351 either terminate the connection immediately, or request a clean 352 shutdown as specified in [RFC3720]. An outbound connection (when an 353 iscsiInitiatorPortal is deleted) matches the portal if its 354 iscsiCxnLocalAddr matches the iscsiPortalAddr. An inbound connection 355 (when an iscsiTargetPortal is deleted) matches the portal if both its 356 iscsiCxnLocalAddr matches the iscsiPortalAddr, and the 357 iscsiCxnLocalPort matches the iscsiTargetPortalPort. 359 Individual objects within a row in this table may not be modified 360 while the row is active. For instance, changing the IP address of a 361 portal requires that the rows associated with the old IP address be 362 deleted, and new rows be created (in either order). 364 6.5. iscsiTargetPortal 366 The iscsiTgtPortalAttributesTable contains target-specific attributes 367 for iSCSI Portals. Rows in this table use the same indices as their 368 corresponding rows in the iscsiPortalAttributesTable, with the 369 addition of iscsiNodeIndex. 371 Rows in this table are created when the targetTypePortal bit is set 372 in the iscsiPortalRoles attribute of the corresponding 373 iscsiPortalAttributesEntry; they are destroyed when this bit is 374 cleared. 376 This table contains the TCP (or other protocol) port on which the 377 socket is listening for incoming connections. It also includes a 378 portal group aggregation tag; iSCSI target portals within this 379 instance sharing the same tag can contain connections within the same 380 session. 382 This table will be empty for iSCSI instances that contain only 383 initiators (such as iSCSI host driver implementations). 385 Many implementations use the same target portal tag and protocol port 386 for all nodes accessed via a portal. These implementations will 387 create a single row in the iscsiTgtPortalAttributeTable, with an 388 iscsiNodeIndex of zero. 390 Other implementations do not use the same tag and/or port for all 391 nodes; these implementations will create a row in this table for each 392 (portal, node) tuple, using iscsiNodeIndex to designate the node for 393 this portal tag and port. 395 6.6. iscsiInitiatorPortal 397 The iscsiIntrPortalAttributesTable contains initiator-specific 398 objects for iSCSI Portals. Rows in this table use the same indices 399 as their corresponding entries in the iscsiPortalAttributesTable. A 400 row in this table is created when the initiatorTypePortal bit is set 401 in the iscsiPortalRoles attribute; it is destroyed when this bit is 402 cleared. 404 Each row in this table contains a portal group aggregation tag, 405 indicating which portals an initiator may use together within a 406 multiple-connection session. 408 This table will be empty for iSCSI instances that contain only 409 targets (such as most iSCSI devices). 411 Many implementations use the same initiator tag for all nodes 412 accessing targets via a given portal. These implementations will 413 create a single row in iscsiIntrPortalAttributeTable, with an 414 iscsiNodeIndex of zero. 416 Other implementations do not use the same tag and/or port for all 417 nodes; these implementations will create a row in this table for each 418 (portal, node) tuple, using iscsiNodeIndex to designate the node for 419 this portal tag and port. 421 6.7. iscsiNode 423 The iscsiNodeAttributesTable contains a list of iSCSI nodes, each of 424 which may have an initiator role, a target role, or both. 426 This table contains the node's attributes which are common to both 427 roles, such as its iSCSI Name and alias string. Attributes specific 428 to initiators or targets are available in the iscsiTarget and 429 iscsiInitiator objects. Each row in this table that can fulfill a 430 target role has a corresponding row in the iscsiTarget table; each 431 entry that fulfills an initiator role has a row in the iscsiInitiator 432 table. Nodes such as copy managers that can take on both roles have 433 a corresponding row in each table. 435 This table also contains the login negotiations preferences for this 436 node. These objects indicate the values this node will offer or 437 prefer in the operational negotiation phase of the login process. 439 For most implementations, each entry in the table also contains a 440 RowPointer to the transport table entry in the SCSI MIB module which 441 this iSCSI node represents. For implementations without a standard 442 SCSI layer above iSCSI, such as an iSCSI proxy or gateway, this 443 RowPointer can point to a row in an implementation specific table 444 that this iSCSI node represents. 446 6.8. iscsiTarget 448 The iscsiTargetAttributesTable contains target-specific attributes 449 for iSCSI nodes. Each entry in this table uses the same index values 450 as its corresponding iscsiNode entry. 452 This table contains attributes used to indicate the last failure that 453 was (or should have been) sent as a notification. 455 This table is augmented by the iscsiTargetLoginStatsTable and the 456 iscsiTargetLogoutStatsTable, which count the numbers of normal and 457 abnormal logins and logouts to this target. 459 6.9. iscsiTgtAuthorization 461 The iscsiTgtAuthAttributesTable contains an entry for each initiator 462 identifier that will be allowed to access the target under which it 463 appears. Each entry contains a RowPointer to a user identity in the 464 IPS Authorization MIB module, which contains the name, address, and 465 credential information necessary to authenticate the initiator. 467 6.10. iscsiInitiator 469 The iscsiInitiatorAttributesTable contains a list of initiator- 470 specific attributes for iSCSI nodes. Each entry in this table uses 471 the same index values as its corresponding iscsiNode entry. 473 Most implementations will include a single entry in this table, 474 regardless of the number of physical interfaces the initiator may 475 use. 477 This table is augmented by the iscsiInitiatorLoginStatsTable and the 478 iscsiInitiatorLogoutStatsTable, which count the numbers of normal and 479 abnormal logins and logouts from this initiator. 481 6.11. iscsiIntrAuthorization 483 The iscsiIntrAuthAttributesTable contains an entry for each target 484 identifier to which the initiator is configured to establish a 485 session. 487 Each entry contains a RowPointer to a user identity in the IPS 488 Authorization MIB module, which contains the name, address, and 489 credential information necessary to identify (for discovery purposes) 490 and authenticate the target. 492 6.12. iscsiSession 494 The iscsiSessionAttributesTable contains a set of rows that list the 495 sessions known to be existing locally for each node in each iSCSI 496 instance. 498 The session type for each session indicates whether the session is 499 used for normal SCSI commands or for discovery using the SendTargets 500 text command. Discovery sessions that do not belong to any 501 particular node have a node index attribute of zero. 503 The session direction for each session indicates whether it is an 504 Inbound Session or an Outbound Session. Inbound sessions are from 505 some other initiator to the target node under which the session 506 appears. Outbound sessions are from the initiator node under which 507 the session appears to a target outside this iSCSI instance. 509 Many attributes may be negotiated when starting an iSCSI session. 510 Most of these attributes are included in the session object. 512 Some attributes, such as the integrity and authentication schemes, 513 have some standard values which can be extended by vendors to include 514 their own schemes. These contain an object identifier, rather than 515 the expected enumerated type, to allow these values to be extended by 516 other MIB modules, such as an enterprise MIB module. 518 The iscsiSessionStatsTable includes statistics related to 519 performance; it counts iSCSI data bytes and PDUs. 521 For implementations that support error recovery without terminating a 522 session, the iscsiSessionCxnErrorStatsTable contains counters for the 523 numbers of digest and connection errors that have occurred within the 524 session. 526 6.13. iscsiConnection 528 The iscsiConnectionAttributesTable contains a list of active 529 connections within each session. It contains the IP addresses and 530 TCP (or other protocol) ports of both the local and remote side of 531 the connection. These may be used to locate other connection-related 532 information and statistics in the TCP MIB module [RFC2012]. 534 The attributes table also contains a connection state. This state is 535 not meant to directly map to the state tables included within the 536 iSCSI specification; they are meant to be simplified, higher-level 537 definitions of connection state that provide information more useful 538 to a user or network manager. 540 No statistics are kept for connections. 542 6.14. IP Addresses and TCP Port Numbers 544 The IP addresses in this module are represented by two attributes, 545 one of type InetAddressType, and the other of type InetAddress. 546 These are taken from [RFC4001], which specifies how to support 547 addresses that may be either IPv4 or IPv6. 549 The TCP port numbers that appear in a few of the structures are 550 described as simply port numbers, with a protocol attribute 551 indicating whether they are TCP ports, or something else. This will 552 allow the module to be compatible with iSCSI over transports other 553 than TCP in the future. 555 6.15. Descriptors: Using OIDs in Place of Enumerated Types 557 The iSCSI MIB module has a few attributes, namely the digest method 558 attributes, where an enumerated type would work well, except that an 559 implementation may need to extend the attribute and add types of its 560 own. To make this work, this MIB module defines a set of object 561 identities within the iscsiDescriptors subtree. Each of these object 562 identities is basically an enumerated type. 564 Attributes that make use of these object identities have a value 565 which is an OID instead of an enumerated type. These OIDs can either 566 indicate the object identities defined in this module, or object 567 identities defined elsewhere, such as in an enterprise MIB module. 568 Those implementations that add their own digest methods should also 569 define a corresponding object identity for each of these methods 570 within their own enterprise MIB module, and return its OID whenever 571 one of these attributes is using that method. 573 6.16. Notifications 575 Three notifications are provided. One is sent by an initiator 576 detecting a critical login failure; another is sent by a target 577 detecting a critical login failure, and the third is sent upon a 578 session being terminated due to an abnormal connection or digest 579 failure. Critical failures are defined as those that may expose 580 security-related problems that may require immediate action, such as 581 failures due to authentication, authorization, or negotiation 582 problems. Attributes in the initiator, target, and instance objects 583 provide the information necessary to send in the notification, such 584 as the initiator or target name and IP address at the other end that 585 may have caused the failure. 587 To avoid sending an excessive number of notifications due to multiple 588 errors counted, an SNMP agent implementing the iSCSI MIB module 589 SHOULD NOT send more than three iSCSI notifications in any 10-second 590 period. 592 The 3-in-10 rule was chosen because one notification every three 593 seconds was deemed often enough, but should two or three different 594 notifications happen at the same time, it would not be desirable to 595 suppress them. Three notifications in ten seconds is a happy medium, 596 where a short burst of notifications is allowed, without inundating 597 the network and/or notification host with a large number of 598 notifications. 600 7. MIB Definitions 602 ISCSI-MIB DEFINITIONS ::= BEGIN 604 IMPORTS 605 MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, NOTIFICATION-TYPE, 606 Unsigned32, Counter32, Counter64, Gauge32, 607 mib-2 608 FROM SNMPv2-SMI 610 TEXTUAL-CONVENTION, TruthValue, RowPointer, TimeStamp, RowStatus, 611 AutonomousType, StorageType 612 FROM SNMPv2-TC 614 MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP 615 FROM SNMPv2-CONF 617 SnmpAdminString 618 FROM SNMP-FRAMEWORK-MIB -- RFC 3411 620 InetAddressType, InetAddress, InetPortNumber 621 FROM INET-ADDRESS-MIB -- RFC 4001 622 ; 624 iscsiMibModule MODULE-IDENTITY 625 LAST-UPDATED "200510100000Z" -- October 10, 2005 626 ORGANIZATION "IETF IPS Working Group" 627 CONTACT-INFO 628 " 629 Mark Bakke 630 Postal: Cisco Systems, Inc 631 7900 International Drive, Suite 400 632 Bloomington, MN 633 USA 55425 635 E-mail: mbakke@cisco.com 637 Marjorie Krueger 638 Postal: Hewlett-Packard 639 Networked Storage Architecture 640 Networked Storage Solutions Org. 641 8000 Foothills Blvd. 642 Roseville, CA 95747 644 E-mail: marjorie_krueger@hp.com 645 Tom McSweeney 646 Postal: IBM Corporation 647 600 Park Offices Drive 648 Research Triangle Park, NC 649 USA 27709 651 E-mail: tommcs@us.ibm.com 653 James Muchow 654 Postal: Qlogic Corp. 655 6321 Bury Dr. 656 Eden Prairie, MN 657 USA 55346 659 E-Mail: james.muchow@qlogic.com" 661 DESCRIPTION 662 "The iSCSI Protocol MIB module. 663 Copyright (C) The Internet Society (2005). This version of 664 this MIB module is part of RFC yyyy; see the RFC itself for 665 full legal notices." 666 -- RFC Ed.: replace yyyy with actual RFC number & remove this note 667 REVISION "200510100000Z" -- October 10, 2005 668 DESCRIPTION 669 "Initial version of the iSCSI Protocol MIB module" 671 ::= { mib-2 xx } -- xx to be assigned by IANA 673 iscsiNotifications OBJECT IDENTIFIER ::= { iscsiMibModule 0 } 674 iscsiObjects OBJECT IDENTIFIER ::= { iscsiMibModule 1 } 675 iscsiConformance OBJECT IDENTIFIER ::= { iscsiMibModule 2 } 676 iscsiAdmin OBJECT IDENTIFIER ::= { iscsiMibModule 3 } 678 -- Textual Conventions 680 IscsiTransportProtocol ::= TEXTUAL-CONVENTION 681 DISPLAY-HINT "d" 682 STATUS current 683 DESCRIPTION 684 "This data type is used to define the transport 685 protocols that will carry iSCSI PDUs." 686 REFERENCE 687 "RFC791, RFC1700 689 The presently known, officially delegated numbers 690 can be found at: 691 http://www.iana.org/assignments/protocol-numbers" 692 SYNTAX Unsigned32 (0..255) 694 IscsiDigestMethod ::= TEXTUAL-CONVENTION 695 STATUS current 696 DESCRIPTION 697 "This data type represents the methods possible 698 for digest negotiation. 699 none - a placeholder for a secondary digest method 700 that means only the primary method can be 701 used. 702 other - a digest method other than those defined below; 703 noDigest - does not support digests (will operate without 704 a digest (NOTE: implementations must support 705 digests to be compliant with the RFC3720); 706 CRC32c - require a CRC32C digest." 707 REFERENCE 708 "RFC 3720, Section 12.1, HeaderDigest and DataDigest" 709 SYNTAX INTEGER { 710 none(1), 711 other(2), 712 noDigest(3), 713 crc32c(4) 714 } 716 IscsiName ::= TEXTUAL-CONVENTION 717 DISPLAY-HINT "223t" 718 STATUS current 719 DESCRIPTION 720 "This data type is used for objects whose value is an 721 iSCSI Name with the properties described in RFC 3720 722 section 3.2.6.1, and encoded as specified in RFC 3720 723 section 3.2.6.2. A zero-length string indicates the 724 absense of an iSCSI name." 725 REFERENCE 726 "RFC 3720, Section 3.2.6, iSCSI Names." 727 SYNTAX OCTET STRING (SIZE(0 | 16..223)) 729 --********************************************************************** 731 iscsiDescriptors OBJECT IDENTIFIER ::= { iscsiAdmin 1 } 733 iscsiHeaderIntegrityTypes OBJECT IDENTIFIER ::= { iscsiDescriptors 1 } 735 iscsiHdrIntegrityNone OBJECT-IDENTITY 736 STATUS current 737 DESCRIPTION 738 "The authoritative identifier when no integrity 739 scheme (for either the header or data) is being 740 used." 741 REFERENCE 742 "RFC 3720, Section 12.1, HeaderDigest and DataDigest" 743 ::= { iscsiHeaderIntegrityTypes 1 } 745 iscsiHdrIntegrityCrc32c OBJECT-IDENTITY 746 STATUS current 747 DESCRIPTION 748 "The authoritative identifier when the integrity 749 scheme (for either the header or data) is CRC-32c." 750 REFERENCE 751 "RFC 3720, Section 12.1, HeaderDigest and DataDigest" 752 ::= { iscsiHeaderIntegrityTypes 2 } 754 iscsiDataIntegrityTypes OBJECT IDENTIFIER ::= { iscsiDescriptors 2 } 756 iscsiDataIntegrityNone OBJECT-IDENTITY 757 STATUS current 758 DESCRIPTION 759 "The authoritative identifier when no integrity 760 scheme (for either the header or data) is being 761 used." 762 REFERENCE 763 "RFC 3720, Section 12.1, HeaderDigest and DataDigest" 764 ::= { iscsiDataIntegrityTypes 1 } 766 iscsiDataIntegrityCrc32c OBJECT-IDENTITY 767 STATUS current 768 DESCRIPTION 769 "The authoritative identifier when the integrity 770 scheme (for either the header or data) is CRC-32c." 771 REFERENCE 772 "RFC 3720, Section 12.1, HeaderDigest and DataDigest" 773 ::= { iscsiDataIntegrityTypes 2 } 775 --********************************************************************** 777 iscsiInstance OBJECT IDENTIFIER ::= { iscsiObjects 1 } 779 -- Instance Attributes Table 781 iscsiInstanceAttributesTable OBJECT-TYPE 782 SYNTAX SEQUENCE OF IscsiInstanceAttributesEntry 783 MAX-ACCESS not-accessible 784 STATUS current 785 DESCRIPTION 786 "A list of iSCSI instances present on the system." 787 ::= { iscsiInstance 1 } 789 iscsiInstanceAttributesEntry OBJECT-TYPE 790 SYNTAX IscsiInstanceAttributesEntry 791 MAX-ACCESS not-accessible 792 STATUS current 793 DESCRIPTION 794 "An entry (row) containing management information applicable 795 to a particular iSCSI instance." 796 INDEX { iscsiInstIndex } 797 ::= { iscsiInstanceAttributesTable 1 } 799 IscsiInstanceAttributesEntry ::= SEQUENCE { 800 iscsiInstIndex Unsigned32, 801 iscsiInstDescr SnmpAdminString, 802 iscsiInstVersionMin Unsigned32, 803 iscsiInstVersionMax Unsigned32, 804 iscsiInstVendorID SnmpAdminString, 805 iscsiInstVendorVersion SnmpAdminString, 806 iscsiInstPortalNumber Unsigned32, 807 iscsiInstNodeNumber Unsigned32, 808 iscsiInstSessionNumber Unsigned32, 809 iscsiInstSsnFailures Counter32, 810 iscsiInstLastSsnFailureType AutonomousType, 811 iscsiInstLastSsnRmtNodeName IscsiName, 812 iscsiInstDiscontinuityTime TimeStamp 813 } 815 iscsiInstIndex OBJECT-TYPE 816 SYNTAX Unsigned32 (1..4294967295) 817 MAX-ACCESS not-accessible 818 STATUS current 819 DESCRIPTION 820 "An arbitrary integer used to uniquely identify a particular 821 ISCSI instance. This index value must not be modified or 822 reused by an agent unless a reboot has occurred. An agent 823 should attempt to keep this value persistent across reboots." 824 ::= { iscsiInstanceAttributesEntry 1 } 826 iscsiInstDescr OBJECT-TYPE 827 SYNTAX SnmpAdminString 828 MAX-ACCESS read-only 829 STATUS current 830 DESCRIPTION 831 "A UTF-8 string, determined by the implementation to 832 describe the iSCSI instance. When only a single instance 833 is present, this object may be set to the zero-length 834 string; with multiple iSCSI instances, it may be used in 835 an implementation-dependent manner to describe the purpose 836 of the respective instance." 837 ::= { iscsiInstanceAttributesEntry 2 } 838 iscsiInstVersionMin OBJECT-TYPE 839 SYNTAX Unsigned32 (0..255) 840 MAX-ACCESS read-only 841 STATUS current 842 DESCRIPTION 843 "The minimum version number of the iSCSI specification 844 such that this iSCSI instance supports this minimum 845 value, the maximum value indicated by the corresponding 846 instance in iscsiInstVersionMax, and all versions in 847 between." 848 REFERENCE 849 "RFC 3720, Section 10.12, Login Request" 850 ::= { iscsiInstanceAttributesEntry 3 } 852 iscsiInstVersionMax OBJECT-TYPE 853 SYNTAX Unsigned32 (0..255) 854 MAX-ACCESS read-only 855 STATUS current 856 DESCRIPTION 857 "The maximum version number of the iSCSI specification 858 such that this iSCSI instance supports this maximum 859 value, the minimum value indicated by the corresponding 860 instance in iscsiInstVersionMin, and all versions in 861 between." 862 REFERENCE 863 "RFC 3720, Section 10.12, Login Request" 864 ::= { iscsiInstanceAttributesEntry 4 } 866 iscsiInstVendorID OBJECT-TYPE 867 SYNTAX SnmpAdminString 868 MAX-ACCESS read-only 869 STATUS current 870 DESCRIPTION 871 "A UTF-8 string describing the manufacturer of the 872 implementation of this instance." 873 ::= { iscsiInstanceAttributesEntry 5 } 875 iscsiInstVendorVersion OBJECT-TYPE 876 SYNTAX SnmpAdminString 877 MAX-ACCESS read-only 878 STATUS current 879 DESCRIPTION 880 "A UTF-8 string set by the manufacturer describing the 881 version of the implementation of this instance. The 882 format of this string is determined solely by the 883 manufacturer, and is for informational purposes only. 884 It is unrelated to the iSCSI specification version numbers." 885 ::= { iscsiInstanceAttributesEntry 6 } 886 iscsiInstPortalNumber OBJECT-TYPE 887 SYNTAX Unsigned32 888 UNITS "transport endpoints" 889 MAX-ACCESS read-only 890 STATUS current 891 DESCRIPTION 892 "The number of rows in the iscsiPortalAttributesTable 893 which are currently associated with this iSCSI instance." 894 ::= { iscsiInstanceAttributesEntry 7 } 896 iscsiInstNodeNumber OBJECT-TYPE 897 SYNTAX Unsigned32 898 UNITS "iSCSI nodes" 899 MAX-ACCESS read-only 900 STATUS current 901 DESCRIPTION 902 "The number of rows in the iscsiNodeAttributesTable 903 which are currently associated with this iSCSI instance." 904 ::= { iscsiInstanceAttributesEntry 8 } 906 iscsiInstSessionNumber OBJECT-TYPE 907 SYNTAX Unsigned32 908 UNITS "sessions" 909 MAX-ACCESS read-only 910 STATUS current 911 DESCRIPTION 912 "The number of rows in the iscsiSessionAttributesTable 913 which are currently associated with this iSCSI instance." 914 ::= { iscsiInstanceAttributesEntry 9 } 916 iscsiInstSsnFailures OBJECT-TYPE 917 SYNTAX Counter32 918 UNITS "sessions" 919 MAX-ACCESS read-only 920 STATUS current 921 DESCRIPTION 922 "This object counts the number of times a session belonging 923 to this instance has been failed. If this counter has 924 suffered a discontinuity, the time of the last discontinuity 925 is indicated in iscsiInstDiscontinuityTime." 926 REFERENCE 927 "RFC 3720, Section 12.1, HeaderDigest and DataDigest" 928 ::= { iscsiInstanceAttributesEntry 10 } 930 iscsiInstLastSsnFailureType OBJECT-TYPE 931 SYNTAX AutonomousType 932 MAX-ACCESS read-only 933 STATUS current 934 DESCRIPTION 935 "The counter object in the iscsiInstSsnErrorStatsTable 936 that was incremented when the last session failure occurred. 938 If the reason for failure is not found in the 939 iscsiInstSsnErrorStatsTable, the value { 0.0 } is 940 used instead." 941 ::= { iscsiInstanceAttributesEntry 11 } 943 iscsiInstLastSsnRmtNodeName OBJECT-TYPE 944 SYNTAX IscsiName 945 MAX-ACCESS read-only 946 STATUS current 947 DESCRIPTION 948 "The iSCSI Name of the remote node from the failed 949 session." 950 ::= { iscsiInstanceAttributesEntry 12 } 952 iscsiInstDiscontinuityTime OBJECT-TYPE 953 SYNTAX TimeStamp 954 MAX-ACCESS read-only 955 STATUS current 956 DESCRIPTION 957 "The value of SysUpTime on the most recent occasion 958 at which any one or more of this instance's counters 959 suffered a discontinuity. 960 If no such discontinuities have occurred since the last 961 re-initialization of the local management subsystem 962 then this object contains a zero value." 963 ::= { iscsiInstanceAttributesEntry 13 } 965 -- Instance Session Failure Stats Table 967 iscsiInstanceSsnErrorStatsTable OBJECT-TYPE 968 SYNTAX SEQUENCE OF IscsiInstanceSsnErrorStatsEntry 969 MAX-ACCESS not-accessible 970 STATUS current 971 DESCRIPTION 972 "Statistics regarding the occurrences of error types 973 that result in a session failure." 974 ::= { iscsiInstance 2 } 976 iscsiInstanceSsnErrorStatsEntry OBJECT-TYPE 977 SYNTAX IscsiInstanceSsnErrorStatsEntry 978 MAX-ACCESS not-accessible 979 STATUS current 980 DESCRIPTION 981 "An entry (row) containing management information applicable 982 to a particular iSCSI instance." 983 AUGMENTS { iscsiInstanceAttributesEntry } 984 ::= { iscsiInstanceSsnErrorStatsTable 1 } 986 IscsiInstanceSsnErrorStatsEntry ::= SEQUENCE { 987 iscsiInstSsnDigestErrors Counter32, 988 iscsiInstSsnCxnTimeoutErrors Counter32, 989 iscsiInstSsnFormatErrors Counter32 990 } 992 iscsiInstSsnDigestErrors OBJECT-TYPE 993 SYNTAX Counter32 994 UNITS "sessions" 995 MAX-ACCESS read-only 996 STATUS current 997 DESCRIPTION 998 "The count of sessions which were failed due to receipt of 999 a PDU containing header or data digest errors. If this 1000 counter has suffered a discontinuity, the time of the last 1001 discontinuity is indicated in iscsiInstDiscontinuityTime." 1002 REFERENCE 1003 "RFC 3720, Section 6.7, Digest Errors" 1004 ::= { iscsiInstanceSsnErrorStatsEntry 1 } 1006 iscsiInstSsnCxnTimeoutErrors OBJECT-TYPE 1007 SYNTAX Counter32 1008 UNITS "sessions" 1009 MAX-ACCESS read-only 1010 STATUS current 1011 DESCRIPTION 1012 "The count of sessions which were failed due to a sequence 1013 exceeding a time limit. If this counter has suffered a 1014 discontinuity, the time of the last discontinuity 1015 is indicated in iscsiInstDiscontinuityTime." 1016 REFERENCE 1017 "RFC 3720, Section 6.4, Connection Timeout Management" 1018 ::= { iscsiInstanceSsnErrorStatsEntry 2 } 1020 iscsiInstSsnFormatErrors OBJECT-TYPE 1021 SYNTAX Counter32 1022 UNITS "sessions" 1023 MAX-ACCESS read-only 1024 STATUS current 1025 DESCRIPTION 1026 "The count of sessions which were failed due to receipt of 1027 a PDU which contained a format error. If this counter has 1028 suffered a discontinuity, the time of the last discontinuity 1029 is indicated in iscsiInstDiscontinuityTime." 1030 REFERENCE 1031 "RFC 3720, Section 6.6, Format Errors" 1032 ::= { iscsiInstanceSsnErrorStatsEntry 3 } 1034 --********************************************************************** 1036 iscsiPortal OBJECT IDENTIFIER ::= { iscsiObjects 2 } 1038 -- Portal Attributes Table 1040 iscsiPortalAttributesTable OBJECT-TYPE 1041 SYNTAX SEQUENCE OF IscsiPortalAttributesEntry 1042 MAX-ACCESS not-accessible 1043 STATUS current 1044 DESCRIPTION 1045 "A list of transport endpoints (using TCP or another transport 1046 protocol) used by this iSCSI instance. An iSCSI instance may 1047 use a portal to listen for incoming connections to its targets, 1048 to initiate connections to other targets, or both." 1049 ::= { iscsiPortal 1 } 1051 iscsiPortalAttributesEntry OBJECT-TYPE 1052 SYNTAX IscsiPortalAttributesEntry 1053 MAX-ACCESS not-accessible 1054 STATUS current 1055 DESCRIPTION 1056 "An entry (row) containing management information applicable 1057 to a particular portal instance." 1058 INDEX { iscsiInstIndex, iscsiPortalIndex } 1059 ::= { iscsiPortalAttributesTable 1 } 1061 IscsiPortalAttributesEntry ::= SEQUENCE { 1062 iscsiPortalIndex Unsigned32, 1063 iscsiPortalRowStatus RowStatus, 1064 iscsiPortalRoles BITS, 1065 iscsiPortalAddrType InetAddressType, 1066 iscsiPortalAddr InetAddress, 1067 iscsiPortalProtocol IscsiTransportProtocol, 1068 iscsiPortalMaxRecvDataSegLength Unsigned32, 1069 iscsiPortalPrimaryHdrDigest IscsiDigestMethod, 1070 iscsiPortalPrimaryDataDigest IscsiDigestMethod, 1071 iscsiPortalSecondaryHdrDigest IscsiDigestMethod, 1072 iscsiPortalSecondaryDataDigest IscsiDigestMethod, 1073 iscsiPortalRecvMarker TruthValue, 1074 iscsiPortalStorageType StorageType 1075 } 1076 iscsiPortalIndex OBJECT-TYPE 1077 SYNTAX Unsigned32 (1..4294967295) 1078 MAX-ACCESS not-accessible 1079 STATUS current 1080 DESCRIPTION 1081 "An arbitrary integer used to uniquely identify a particular 1082 transport endpoint within this iSCSI instance. This index 1083 value must not be modified or reused by an agent unless a 1084 reboot has occurred. An agent should attempt to keep this 1085 value persistent across reboots." 1086 ::= { iscsiPortalAttributesEntry 1 } 1088 iscsiPortalRowStatus OBJECT-TYPE 1089 SYNTAX RowStatus 1090 MAX-ACCESS read-create 1091 STATUS current 1092 DESCRIPTION 1093 "This field allows entries to be dynamically added and 1094 removed from this table via SNMP. When adding a row to 1095 this table, all non-Index/RowStatus objects must be set. 1096 When the value of this object is 'active', the values of 1097 the other objects in this table cannot be changed. 1098 Rows may be discarded using RowStatus. 1100 Note that creating a row in this table will typically 1101 cause the agent to create one or more rows in 1102 iscsiTgtPortalAttributesTable and/or 1103 iscsiIntrPortalAttributesTable." 1104 ::= { iscsiPortalAttributesEntry 2 } 1106 iscsiPortalRoles OBJECT-TYPE 1107 SYNTAX BITS { 1108 targetTypePortal(0), 1109 initiatorTypePortal(1) 1110 } 1111 MAX-ACCESS read-create 1112 STATUS current 1113 DESCRIPTION 1114 "A portal can operate in one or both of two roles: 1115 as a target portal and/or an initiator portal. If 1116 the portal will operate in both roles, both bits 1117 must be set. 1119 This object will define a corresponding row that 1120 will exist or must be created in the 1121 iscsiTgtPortalAttributesTable, the 1122 iscsiIntrPortalAttributesTable or both. If the 1123 targetTypePortal bit is set, one or more corresponding 1124 iscsiTgtPortalAttributesEntry rows will be found or 1125 created. If the initiatorTypePortal bit is set, 1126 one or more corresponding iscsiIntrPortalAttributesEntry 1127 rows will be found or created. If both bits are set, one 1128 or more corresponding rows will be found or created in 1129 of the above tables." 1130 ::= { iscsiPortalAttributesEntry 3 } 1132 iscsiPortalAddrType OBJECT-TYPE 1133 SYNTAX InetAddressType 1134 MAX-ACCESS read-create 1135 STATUS current 1136 DESCRIPTION 1137 "The type of Internet Network Address contained in the 1138 corresponding instance of the iscsiPortalAddr." 1139 DEFVAL { ipv4 } 1140 ::= { iscsiPortalAttributesEntry 4 } 1142 iscsiPortalAddr OBJECT-TYPE 1143 SYNTAX InetAddress 1144 MAX-ACCESS read-create 1145 STATUS current 1146 DESCRIPTION 1147 "The portal's Internet Network Address, of the type 1148 specified by the object iscsiPortalAddrType. If 1149 iscsiPortalAddrType has the value 'dns', this address 1150 gets resolved to an IP address whenever a new iSCSI 1151 connection is established using this portal." 1152 ::= { iscsiPortalAttributesEntry 5 } 1154 iscsiPortalProtocol OBJECT-TYPE 1155 SYNTAX IscsiTransportProtocol 1156 MAX-ACCESS read-create 1157 STATUS current 1158 DESCRIPTION 1159 "The portal's transport protocol." 1160 DEFVAL { 6 } -- TCP 1161 ::= { iscsiPortalAttributesEntry 6 } 1163 iscsiPortalMaxRecvDataSegLength OBJECT-TYPE 1164 SYNTAX Unsigned32 (512..16777215) 1165 UNITS "bytes" 1166 MAX-ACCESS read-create 1167 STATUS current 1168 DESCRIPTION 1169 "The maximum PDU length this portal can receive. 1170 This may be constrained by hardware characteristics 1171 and individual implementations may choose not to 1172 allow this object to be changed." 1173 REFERENCE 1174 "RFC 3720, Section 12.12, MaxRecvDataSegmentLength" 1175 DEFVAL { 8192 } 1176 ::= { iscsiPortalAttributesEntry 7 } 1178 iscsiPortalPrimaryHdrDigest OBJECT-TYPE 1179 SYNTAX IscsiDigestMethod 1180 MAX-ACCESS read-create 1181 STATUS current 1182 DESCRIPTION 1183 "The preferred header digest for this portal." 1184 DEFVAL { crc32c } 1185 ::= { iscsiPortalAttributesEntry 8 } 1187 iscsiPortalPrimaryDataDigest OBJECT-TYPE 1188 SYNTAX IscsiDigestMethod 1189 MAX-ACCESS read-create 1190 STATUS current 1191 DESCRIPTION 1192 "The preferred data digest method for this portal." 1193 DEFVAL { crc32c } 1194 ::= { iscsiPortalAttributesEntry 9 } 1196 iscsiPortalSecondaryHdrDigest OBJECT-TYPE 1197 SYNTAX IscsiDigestMethod 1198 MAX-ACCESS read-create 1199 STATUS current 1200 DESCRIPTION 1201 "An alternate header digest preference for this portal." 1202 DEFVAL { noDigest } 1203 ::= { iscsiPortalAttributesEntry 10 } 1205 iscsiPortalSecondaryDataDigest OBJECT-TYPE 1206 SYNTAX IscsiDigestMethod 1207 MAX-ACCESS read-create 1208 STATUS current 1209 DESCRIPTION 1210 "An alternate data digest preference for this portal." 1211 DEFVAL { noDigest } 1212 ::= { iscsiPortalAttributesEntry 11 } 1214 iscsiPortalRecvMarker OBJECT-TYPE 1215 SYNTAX TruthValue 1216 MAX-ACCESS read-create 1217 STATUS current 1218 DESCRIPTION 1219 "This object indicates whether or not this portal will 1220 request markers in it's incoming data stream." 1221 REFERENCE 1222 "RFC 3720, Appendix A." 1223 DEFVAL { false } 1224 ::= { iscsiPortalAttributesEntry 12 } 1226 iscsiPortalStorageType OBJECT-TYPE 1227 SYNTAX StorageType 1228 MAX-ACCESS read-create 1229 STATUS current 1230 DESCRIPTION 1231 "The storage type for this row. Rows in this table that were 1232 created through an external process may have a storage type of 1233 readOnly or permanent. 1235 Conceptual rows having the value 'permanent' need not 1236 allow write access to any columnar objects in the row." 1237 DEFVAL { nonVolatile } 1238 ::= { iscsiPortalAttributesEntry 13 } 1240 --********************************************************************** 1241 iscsiTargetPortal OBJECT IDENTIFIER ::= { iscsiObjects 3 } 1243 -- Target Portal Attributes Table 1245 iscsiTgtPortalAttributesTable OBJECT-TYPE 1246 SYNTAX SEQUENCE OF IscsiTgtPortalAttributesEntry 1247 MAX-ACCESS not-accessible 1248 STATUS current 1249 DESCRIPTION 1250 "A list of transport endpoints (using TCP or another transport 1251 protocol) on which this iSCSI instance listens for incoming 1252 connections to its targets." 1253 ::= { iscsiTargetPortal 1 } 1255 iscsiTgtPortalAttributesEntry OBJECT-TYPE 1256 SYNTAX IscsiTgtPortalAttributesEntry 1257 MAX-ACCESS not-accessible 1258 STATUS current 1259 DESCRIPTION 1260 "An entry (row) containing management information applicable 1261 to a particular portal instance that is used to listen for 1262 incoming connections to local targets. One or more rows in 1263 this table is populated by the agent for each 1264 iscsiPortalAttributesEntry row that has the bit 1265 targetTypePortal set in its iscsiPortalRoles column." 1266 INDEX { iscsiInstIndex, iscsiPortalIndex, 1267 iscsiTgtPortalNodeIndexOrZero } 1269 ::= { iscsiTgtPortalAttributesTable 1 } 1271 IscsiTgtPortalAttributesEntry ::= SEQUENCE { 1272 iscsiTgtPortalNodeIndexOrZero Unsigned32, 1273 iscsiTgtPortalPort InetPortNumber, 1274 iscsiTgtPortalTag Unsigned32 1275 } 1277 iscsiTgtPortalNodeIndexOrZero OBJECT-TYPE 1278 SYNTAX Unsigned32 (0..4294967295) 1279 MAX-ACCESS not-accessible 1280 STATUS current 1281 DESCRIPTION 1282 "An arbitrary integer used to uniquely identify a 1283 particular node within an iSCSI instance present 1284 on the local system. 1286 For implementations where each {portal, node} tuple 1287 can have a different portal tag, this value will 1288 map to the iscsiNodeIndex. 1290 For implementations where the portal tag is the 1291 same for a given portal regardless of which node 1292 is using the portal, the value 0 (zero) is used." 1293 ::= { iscsiTgtPortalAttributesEntry 1 } 1295 iscsiTgtPortalPort OBJECT-TYPE 1296 SYNTAX InetPortNumber (1..65535) 1297 MAX-ACCESS read-write 1298 STATUS current 1299 DESCRIPTION 1300 "The portal's transport protocol port number on which the 1301 portal listens for incoming iSCSI connections when the 1302 portal is used as a target portal. This object's storage 1303 type is specified in iscsiPortalStorageType." 1304 ::= { iscsiTgtPortalAttributesEntry 2 } 1306 iscsiTgtPortalTag OBJECT-TYPE 1307 SYNTAX Unsigned32 (1..65535) 1308 MAX-ACCESS read-write 1309 STATUS current 1310 DESCRIPTION 1311 "The portal's aggregation tag when portal is used as 1312 a target portal. Multiple-connection sessions may 1313 be aggregated over portals sharing an identical 1314 aggregation tag. This object's storage type is 1315 specified in iscsiPortalStorageType." 1316 REFERENCE 1317 "RFC 3720, Section 3.4.1, iSCSI Architectural Modell" 1318 ::= { iscsiTgtPortalAttributesEntry 3 } 1320 --********************************************************************** 1322 iscsiInitiatorPortal OBJECT IDENTIFIER ::= { iscsiObjects 4 } 1324 -- Initiator Portal Attributes Table 1326 iscsiIntrPortalAttributesTable OBJECT-TYPE 1327 SYNTAX SEQUENCE OF IscsiIntrPortalAttributesEntry 1328 MAX-ACCESS not-accessible 1329 STATUS current 1330 DESCRIPTION 1331 "A list of Internet Network Addresses (using TCP or another 1332 transport protocol) from which this iSCSI instance may 1333 initiate connections to other targets." 1334 ::= { iscsiInitiatorPortal 1 } 1336 iscsiIntrPortalAttributesEntry OBJECT-TYPE 1337 SYNTAX IscsiIntrPortalAttributesEntry 1338 MAX-ACCESS not-accessible 1339 STATUS current 1340 DESCRIPTION 1341 "An entry (row) containing management information applicable 1342 to a particular portal instance that is used to initiate 1343 connections to iSCSI targets. One or more rows in 1344 this table is populated by the agent for each 1345 iscsiPortalAttributesEntry row that has the bit 1346 initiatorTypePortal set in its iscsiPortalRoles column." 1347 INDEX { iscsiInstIndex, iscsiPortalIndex, 1348 iscsiIntrPortalNodeIndexOrZero } 1349 ::= { iscsiIntrPortalAttributesTable 1 } 1351 IscsiIntrPortalAttributesEntry ::= SEQUENCE { 1352 iscsiIntrPortalNodeIndexOrZero Unsigned32, 1353 iscsiIntrPortalTag Unsigned32 1354 } 1356 iscsiIntrPortalNodeIndexOrZero OBJECT-TYPE 1357 SYNTAX Unsigned32 (0..4294967295) 1358 MAX-ACCESS not-accessible 1359 STATUS current 1360 DESCRIPTION 1361 "An arbitrary integer used to uniquely identify a 1362 particular node within an iSCSI instance present 1363 on the local system. 1365 For implementations where each {portal, node} tuple 1366 can have a different portal tag, this value will 1367 map to the iscsiNodeIndex. 1369 For implementations where the portal tag is the 1370 same for a given portal regardless of which node 1371 is using the portal, the value 0 (zero) is used." 1372 ::= { iscsiIntrPortalAttributesEntry 1 } 1374 iscsiIntrPortalTag OBJECT-TYPE 1375 SYNTAX Unsigned32 (1..65535) 1376 MAX-ACCESS read-write 1377 STATUS current 1378 DESCRIPTION 1379 "The portal's aggregation tag when the portal is used as 1380 an initiator portal. Multiple-connection sessions may 1381 be aggregated over portals sharing an identical 1382 aggregation tag. This object's storage type is 1383 specified in iscsiPortalStorageType." 1384 REFERENCE 1385 "RFC 3720, Section 3.4.1, iSCSI Architectural Model" 1386 ::= { iscsiIntrPortalAttributesEntry 2 } 1388 --********************************************************************** 1390 iscsiNode OBJECT IDENTIFIER ::= { iscsiObjects 5 } 1392 -- Node Attributes Table 1394 iscsiNodeAttributesTable OBJECT-TYPE 1395 SYNTAX SEQUENCE OF IscsiNodeAttributesEntry 1396 MAX-ACCESS not-accessible 1397 STATUS current 1398 DESCRIPTION 1399 "A list of iSCSI nodes belonging to each iSCSI instance 1400 present on the local system. An iSCSI node can act as 1401 an initiator, a target, or both." 1402 ::= { iscsiNode 1 } 1404 iscsiNodeAttributesEntry OBJECT-TYPE 1405 SYNTAX IscsiNodeAttributesEntry 1406 MAX-ACCESS not-accessible 1407 STATUS current 1408 DESCRIPTION 1409 "An entry (row) containing management information applicable 1410 to a particular iSCSI node." 1411 INDEX { iscsiInstIndex, iscsiNodeIndex } 1412 ::= { iscsiNodeAttributesTable 1 } 1413 IscsiNodeAttributesEntry ::= SEQUENCE { 1414 iscsiNodeIndex Unsigned32, 1415 iscsiNodeName IscsiName, 1416 iscsiNodeAlias SnmpAdminString, 1417 iscsiNodeRoles BITS, 1418 iscsiNodeTransportType RowPointer, 1419 iscsiNodeInitialR2T TruthValue, 1420 iscsiNodeImmediateData TruthValue, 1421 iscsiNodeMaxOutstandingR2T Unsigned32, 1422 iscsiNodeFirstBurstLength Unsigned32, 1423 iscsiNodeMaxBurstLength Unsigned32, 1424 iscsiNodeMaxConnections Unsigned32, 1425 iscsiNodeDataSequenceInOrder TruthValue, 1426 iscsiNodeDataPDUInOrder TruthValue, 1427 iscsiNodeDefaultTime2Wait Unsigned32, 1428 iscsiNodeDefaultTime2Retain Unsigned32, 1429 iscsiNodeErrorRecoveryLevel Unsigned32, 1430 iscsiNodeDiscontinuityTime TimeStamp, 1431 iscsiNodeStorageType StorageType 1432 } 1434 iscsiNodeIndex OBJECT-TYPE 1435 SYNTAX Unsigned32 (1..4294967295) 1436 MAX-ACCESS not-accessible 1437 STATUS current 1438 DESCRIPTION 1439 "An arbitrary integer used to uniquely identify a particular 1440 node within an iSCSI instance. This index value must not be 1441 modified or reused by an agent unless a reboot has occurred. 1442 An agent should attempt to keep this value persistent across 1443 reboots." 1444 ::= { iscsiNodeAttributesEntry 1 } 1446 iscsiNodeName OBJECT-TYPE 1447 SYNTAX IscsiName 1448 MAX-ACCESS read-only 1449 STATUS current 1450 DESCRIPTION 1451 "This node's iSCSI Name, which is independent of the location 1452 of the node, and can be resolved into a set of addresses 1453 through various discovery services." 1454 ::= { iscsiNodeAttributesEntry 2 } 1456 iscsiNodeAlias OBJECT-TYPE 1457 SYNTAX SnmpAdminString 1458 MAX-ACCESS read-only 1459 STATUS current 1460 DESCRIPTION 1461 "A character string that is a human-readable name or 1462 description of the iSCSI node. If configured, this alias 1463 may be communicated to the initiator or target node at 1464 the remote end of the connection during a Login Request 1465 or Response message. This string is not used as an 1466 identifier, but can be displayed by the system's user 1467 interface in a list of initiators and/or targets to 1468 which it is connected. 1470 If no alias exists, the value is a zero-length string." 1471 REFERENCE 1472 "RFC 3720, Section 12.6, TargetAlias, 12.7, InitiatorAlias" 1473 ::= { iscsiNodeAttributesEntry 3 } 1475 iscsiNodeRoles OBJECT-TYPE 1476 SYNTAX BITS { 1477 targetTypeNode(0), 1478 initiatorTypeNode(1) 1479 } 1480 MAX-ACCESS read-only 1481 STATUS current 1482 DESCRIPTION 1483 "A node can operate in one or both of two roles: 1484 a target role and/or an initiator role. If the node 1485 will operate in both roles, both bits must be set. 1487 This object will also define the corresponding rows that 1488 will exist in the iscsiTargetAttributesTable, the 1489 iscsiInitiatorAttributesTable or both. If the 1490 targetTypeNode bit is set, there will be a corresponding 1491 iscsiTargetAttributesEntry. If the initiatorTypeNode bit 1492 is set, there will be a corresponding 1493 iscsiInitiatorAttributesEntry. If both bits are set, 1494 there will be a corresponding iscsiTgtPortalAttributesEntry 1495 and iscsiPortalAttributesEntry." 1496 ::= { iscsiNodeAttributesEntry 4 } 1498 iscsiNodeTransportType OBJECT-TYPE 1499 SYNTAX RowPointer 1500 MAX-ACCESS read-only 1501 STATUS current 1502 DESCRIPTION 1503 "A pointer to the corresponding row in the appropriate 1504 table for this SCSI transport, thereby allowing management 1505 stations to locate the SCSI-level device that is represented 1506 by this iscsiNode. For example, it will usually point to the 1507 corresponding scsiTrnspt object in the SCSI MIB module. 1509 If no corresponding row exists, the value 0.0 must be 1510 used to indicate this." 1511 REFERENCE 1512 "SCSI-MIB" 1513 ::= { iscsiNodeAttributesEntry 5 } 1515 iscsiNodeInitialR2T OBJECT-TYPE 1516 SYNTAX TruthValue 1517 MAX-ACCESS read-only 1518 STATUS current 1519 DESCRIPTION 1520 "This object indicates the InitialR2T preference for this 1521 node: 1522 true = YES, 1523 false = will try to negotiate NO, will accept YES " 1524 REFERENCE 1525 "RFC 3720, Section 12.10, InitialR2T" 1526 ::= { iscsiNodeAttributesEntry 6 } 1528 iscsiNodeImmediateData OBJECT-TYPE 1529 SYNTAX TruthValue 1530 MAX-ACCESS read-write 1531 STATUS current 1532 DESCRIPTION 1533 "This object indicates ImmediateData preference for this 1534 node 1535 true = YES (but will accept NO), 1536 false = NO " 1537 REFERENCE 1538 "RFC 3720, Section 12.11, ImmediateData" 1539 DEFVAL { true } 1540 ::= { iscsiNodeAttributesEntry 7 } 1542 iscsiNodeMaxOutstandingR2T OBJECT-TYPE 1543 SYNTAX Unsigned32 (1..65535) 1544 UNITS "R2Ts" 1545 MAX-ACCESS read-write 1546 STATUS current 1547 DESCRIPTION 1548 "Maximum number of outstanding R2Ts allowed per ISCSI task." 1549 REFERENCE 1550 "RFC 3720, Section 12.17, MaxOutstandingR2T" 1551 DEFVAL { 1 } 1552 ::= { iscsiNodeAttributesEntry 8 } 1554 iscsiNodeFirstBurstLength OBJECT-TYPE 1555 SYNTAX Unsigned32 (512..16777215) 1556 UNITS "bytes" 1557 MAX-ACCESS read-write 1558 STATUS current 1559 DESCRIPTION 1560 "The maximum length (bytes) supported for unsolicited data 1561 to/from this node." 1562 REFERENCE 1563 "RFC 3720, Section 12.14, FirstBurstLength" 1564 DEFVAL { 65536 } 1565 ::= { iscsiNodeAttributesEntry 9 } 1567 iscsiNodeMaxBurstLength OBJECT-TYPE 1568 SYNTAX Unsigned32 (512..16777215) 1569 UNITS "bytes" 1570 MAX-ACCESS read-write 1571 STATUS current 1572 DESCRIPTION 1573 "The maximum number of bytes which can be sent within 1574 a single sequence of Data-In or Data-Out PDUs." 1575 REFERENCE 1576 "RFC 3720, Section 12.13, MaxBurstLength" 1577 DEFVAL { 262144 } 1578 ::= { iscsiNodeAttributesEntry 10 } 1580 iscsiNodeMaxConnections OBJECT-TYPE 1581 SYNTAX Unsigned32 (1..65535) 1582 UNITS "connections" 1583 MAX-ACCESS read-write 1584 STATUS current 1585 DESCRIPTION 1586 "The maximum number of connections allowed in each 1587 session to and/or from this node." 1588 REFERENCE 1589 "RFC 3720, Section 12.2, MaxConnections" 1590 DEFVAL { 1 } 1591 ::= { iscsiNodeAttributesEntry 11 } 1593 iscsiNodeDataSequenceInOrder OBJECT-TYPE 1594 SYNTAX TruthValue 1595 MAX-ACCESS read-write 1596 STATUS current 1597 DESCRIPTION 1598 "The DataSequenceInOrder preference of this node. 1599 False (=No) indicates that iSCSI data PDU sequences may 1600 be transferred in any order. True (=Yes) indicates that 1601 data PDU sequences must be transferred using 1602 continuously increasing offsets, except during 1603 error recovery." 1604 REFERENCE 1605 "RFC 3720, Section 12.19, DataSequenceInOrder" 1606 DEFVAL { true } 1607 ::= { iscsiNodeAttributesEntry 12 } 1609 iscsiNodeDataPDUInOrder OBJECT-TYPE 1610 SYNTAX TruthValue 1611 MAX-ACCESS read-write 1612 STATUS current 1613 DESCRIPTION 1614 "The DataPDUInOrder preference of this node. 1615 False (=No) indicates that iSCSI data PDUs within sequences 1616 may be in any order. True (=Yes) indicates that data PDUs 1617 within sequences must be at continuously increasing 1618 addresses, with no gaps or overlay between PDUs." 1619 REFERENCE 1620 "RFC 3720, Section 12.18, DataPDUInOrder" 1621 DEFVAL { true } 1622 ::= { iscsiNodeAttributesEntry 13 } 1624 iscsiNodeDefaultTime2Wait OBJECT-TYPE 1625 SYNTAX Unsigned32 (0..3600) 1626 UNITS "seconds" 1627 MAX-ACCESS read-write 1628 STATUS current 1629 DESCRIPTION 1630 "The DefaultTime2Wait preference of this node. This is the 1631 minimum time, in seconds, to wait before attempting an 1632 explicit/implicit logout or active iSCSI task reassignment 1633 after an unexpected connection termination or a connection 1634 reset." 1635 REFERENCE 1636 "RFC 3720, Section 12.15, DefaultTime2Wait" 1637 DEFVAL { 2 } 1638 ::= { iscsiNodeAttributesEntry 14 } 1640 iscsiNodeDefaultTime2Retain OBJECT-TYPE 1641 SYNTAX Unsigned32 (0..3600) 1642 UNITS "seconds" 1643 MAX-ACCESS read-write 1644 STATUS current 1645 DESCRIPTION 1646 "The DefaultTime2Retain preference of this node. This is 1647 the maximum time, in seconds after an initial wait 1648 (Time2Wait), before which an active iSCSI task reassignment 1649 is still possible after an unexpected connection termination 1650 or a connection reset." 1651 REFERENCE 1652 "RFC 3720, Section 12.16, DefaultTime2Retain" 1654 DEFVAL { 20 } 1655 ::= { iscsiNodeAttributesEntry 15 } 1657 iscsiNodeErrorRecoveryLevel OBJECT-TYPE 1658 SYNTAX Unsigned32 (0..255) 1659 MAX-ACCESS read-write 1660 STATUS current 1661 DESCRIPTION 1662 "The ErrorRecoveryLevel preference of this node. 1663 Currently, only 0-2 are valid. 1664 This object is designed to accommodate future error recover 1665 levels. 1666 Higher error recovery levels imply support in addition to 1667 support for the lower error level functions. In other words, 1668 error level 2 implies support for levels 0-1, since those 1669 functions are subsets of error level 2." 1670 REFERENCE 1671 "RFC 3720, Section 12.20, ErrorRecoveryLevel" 1672 DEFVAL { 0 } 1673 ::= { iscsiNodeAttributesEntry 16 } 1675 iscsiNodeDiscontinuityTime OBJECT-TYPE 1676 SYNTAX TimeStamp 1677 MAX-ACCESS read-only 1678 STATUS current 1679 DESCRIPTION 1680 "The value of SysUpTime on the most recent occasion 1681 at which any one or more of this node's counters 1682 suffered a discontinuity. 1683 If no such discontinuities have occurred since the last 1684 re-initialization of the local management subsystem 1685 then this object contains a zero value." 1686 ::= { iscsiNodeAttributesEntry 17 } 1688 iscsiNodeStorageType OBJECT-TYPE 1689 SYNTAX StorageType 1690 MAX-ACCESS read-write 1691 STATUS current 1692 DESCRIPTION 1693 "The storage type for all read-write objects within this 1694 row. Rows in this table are always created via an 1695 external process, and may have a storage type of readOnly 1696 or permanent. Conceptual rows having the value 'permanent' 1697 need not allow write access to any columnar objects in 1698 the row. 1700 If this object has the value 'volatile', modifications 1701 to read-write objects in this row are not persistent 1702 across reboots. If this object has the value 1703 'nonVolatile', modifications to objects in this row 1704 are persistent. 1706 An implementation may choose to allow this object 1707 to be set to either 'nonVolatile' or 'volatile', 1708 allowing the management application to choose this 1709 behavior." 1710 DEFVAL { volatile } 1711 ::= { iscsiNodeAttributesEntry 18 } 1713 --********************************************************************** 1715 iscsiTarget OBJECT IDENTIFIER ::= { iscsiObjects 6 } 1717 -- Target Attributes Table 1719 iscsiTargetAttributesTable OBJECT-TYPE 1720 SYNTAX SEQUENCE OF IscsiTargetAttributesEntry 1721 MAX-ACCESS not-accessible 1722 STATUS current 1723 DESCRIPTION 1724 "A list of iSCSI nodes that can take on a target role, 1725 belonging to each iSCSI instance present on the local 1726 system." 1727 ::= { iscsiTarget 1 } 1729 iscsiTargetAttributesEntry OBJECT-TYPE 1730 SYNTAX IscsiTargetAttributesEntry 1731 MAX-ACCESS not-accessible 1732 STATUS current 1733 DESCRIPTION 1734 "An entry (row) containing management information applicable 1735 to a particular node that can take on a target role." 1736 INDEX { iscsiInstIndex, iscsiNodeIndex } 1737 ::= { iscsiTargetAttributesTable 1 } 1739 IscsiTargetAttributesEntry ::= SEQUENCE { 1740 iscsiTgtLoginFailures Counter32, 1741 iscsiTgtLastFailureTime TimeStamp, 1742 iscsiTgtLastFailureType AutonomousType, 1743 iscsiTgtLastIntrFailureName IscsiName, 1744 iscsiTgtLastIntrFailureAddrType InetAddressType, 1745 iscsiTgtLastIntrFailureAddr InetAddress 1746 } 1748 iscsiTgtLoginFailures OBJECT-TYPE 1749 SYNTAX Counter32 1750 UNITS "failed login attempts" 1751 MAX-ACCESS read-only 1752 STATUS current 1753 DESCRIPTION 1754 "This object counts the number of times a login attempt to this 1755 local target has failed. 1756 If this counter has suffered a discontinuity, the time of the 1757 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 1758 REFERENCE 1759 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 1760 ::= { iscsiTargetAttributesEntry 1 } 1762 iscsiTgtLastFailureTime OBJECT-TYPE 1763 SYNTAX TimeStamp 1764 MAX-ACCESS read-only 1765 STATUS current 1766 DESCRIPTION 1767 "The timestamp of the most recent failure of a login attempt 1768 to this target. A value of zero indicates that no such 1769 failures have occurred since the last system boot." 1770 ::= { iscsiTargetAttributesEntry 2 } 1772 iscsiTgtLastFailureType OBJECT-TYPE 1773 SYNTAX AutonomousType 1774 MAX-ACCESS read-only 1775 STATUS current 1776 DESCRIPTION 1777 "The type of the most recent failure of a login attempt 1778 to this target, represented as the OID of the counter 1779 object in iscsiTargetLoginStatsTable for which the 1780 relevant instance was incremented. A value of 0.0 1781 indicates a type which is not represented by any of 1782 the counters in iscsiTargetLoginStatsTable." 1783 ::= { iscsiTargetAttributesEntry 3 } 1785 iscsiTgtLastIntrFailureName OBJECT-TYPE 1786 SYNTAX IscsiName 1787 MAX-ACCESS read-only 1788 STATUS current 1789 DESCRIPTION 1790 "The iSCSI Name of the initiator that failed the last 1791 login attempt." 1792 ::= { iscsiTargetAttributesEntry 4 } 1794 iscsiTgtLastIntrFailureAddrType OBJECT-TYPE 1795 SYNTAX InetAddressType 1796 MAX-ACCESS read-only 1797 STATUS current 1798 DESCRIPTION 1799 "The type of Internet Network Address contained in the 1800 corresponding instance of the iscsiTgtLastIntrFailureAddr. 1801 The value 'dns' is not allowed." 1802 ::= { iscsiTargetAttributesEntry 5 } 1804 iscsiTgtLastIntrFailureAddr OBJECT-TYPE 1805 SYNTAX InetAddress 1806 MAX-ACCESS read-only 1807 STATUS current 1808 DESCRIPTION 1809 "An Internet Network Address, of the type specified by 1810 the object iscsiTgtLastIntrFailureAddrType, giving the 1811 host address of the initiator that failed the last login 1812 attempt." 1813 ::= { iscsiTargetAttributesEntry 6 } 1815 -- Target Login Stats Table 1817 iscsiTargetLoginStatsTable OBJECT-TYPE 1818 SYNTAX SEQUENCE OF IscsiTargetLoginStatsEntry 1819 MAX-ACCESS not-accessible 1820 STATUS current 1821 DESCRIPTION 1822 "A table of counters which keep a record of the results 1823 of initiators' login attempts to this target." 1824 ::= { iscsiTarget 2 } 1826 iscsiTargetLoginStatsEntry OBJECT-TYPE 1827 SYNTAX IscsiTargetLoginStatsEntry 1828 MAX-ACCESS not-accessible 1829 STATUS current 1830 DESCRIPTION 1831 "An entry (row) containing counters for each result of 1832 a login attempt to this target." 1833 AUGMENTS { iscsiTargetAttributesEntry } 1834 ::= { iscsiTargetLoginStatsTable 1 } 1836 IscsiTargetLoginStatsEntry ::= SEQUENCE { 1837 iscsiTgtLoginAccepts Counter32, 1838 iscsiTgtLoginOtherFails Counter32, 1839 iscsiTgtLoginRedirects Counter32, 1840 iscsiTgtLoginAuthorizeFails Counter32, 1841 iscsiTgtLoginAuthenticateFails Counter32, 1842 iscsiTgtLoginNegotiateFails Counter32 1843 } 1845 iscsiTgtLoginAccepts OBJECT-TYPE 1846 SYNTAX Counter32 1847 UNITS "successful logins" 1848 MAX-ACCESS read-only 1849 STATUS current 1850 DESCRIPTION 1851 "The count of Login Response PDUs with status 1852 0x0000, Accept Login, transmitted by this 1853 target. 1854 If this counter has suffered a discontinuity, the time of the 1855 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 1856 REFERENCE 1857 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 1858 ::= { iscsiTargetLoginStatsEntry 1 } 1860 iscsiTgtLoginOtherFails OBJECT-TYPE 1861 SYNTAX Counter32 1862 UNITS "failed logins" 1863 MAX-ACCESS read-only 1864 STATUS current 1865 DESCRIPTION 1866 "The number of Login Response PDUs which were transmitted 1867 by this target, and which were not counted by any other 1868 object in the row. 1869 If this counter has suffered a discontinuity, the time of the 1870 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 1871 REFERENCE 1872 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 1873 ::= { iscsiTargetLoginStatsEntry 2 } 1875 iscsiTgtLoginRedirects OBJECT-TYPE 1876 SYNTAX Counter32 1877 UNITS "redirected logins" 1878 MAX-ACCESS read-only 1879 STATUS current 1880 DESCRIPTION 1881 "The count of Login Response PDUs with status class 0x01, 1882 Redirection, transmitted by this target. 1883 If this counter has suffered a discontinuity, the time of the 1884 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 1885 REFERENCE 1886 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 1887 ::= { iscsiTargetLoginStatsEntry 3 } 1889 iscsiTgtLoginAuthorizeFails OBJECT-TYPE 1890 SYNTAX Counter32 1891 UNITS "failed logins" 1892 MAX-ACCESS read-only 1893 STATUS current 1894 DESCRIPTION 1895 "The count of Login Response PDUs with status 0x0202, 1896 Forbidden Target, transmitted by this target. 1898 If this counter is incremented, an iscsiTgtLoginFailure 1899 notification should be generated. 1900 If this counter has suffered a discontinuity, the time of the 1901 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 1902 REFERENCE 1903 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 1904 ::= { iscsiTargetLoginStatsEntry 4 } 1906 iscsiTgtLoginAuthenticateFails OBJECT-TYPE 1907 SYNTAX Counter32 1908 UNITS "failed logins" 1909 MAX-ACCESS read-only 1910 STATUS current 1911 DESCRIPTION 1912 "The count of Login Response PDUs with status 0x0201, 1913 Authentication Failed, transmitted by this target 1915 If this counter is incremented, an iscsiTgtLoginFailure 1916 notification should be generated. 1917 If this counter has suffered a discontinuity, the time of the 1918 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 1919 REFERENCE 1920 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 1921 ::= { iscsiTargetLoginStatsEntry 5 } 1923 iscsiTgtLoginNegotiateFails OBJECT-TYPE 1924 SYNTAX Counter32 1925 UNITS "failed logins" 1926 MAX-ACCESS read-only 1927 STATUS current 1928 DESCRIPTION 1929 "The number of times a target has effectively refused a 1930 login because the parameter negotiation failed. 1932 If this counter is incremented, an iscsiTgtLoginFailure 1933 notification should be generated. 1934 If this counter has suffered a discontinuity, the time of the 1935 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 1936 ::= { iscsiTargetLoginStatsEntry 6 } 1938 -- Target Logout Stats Table 1940 iscsiTargetLogoutStatsTable OBJECT-TYPE 1941 SYNTAX SEQUENCE OF IscsiTargetLogoutStatsEntry 1942 MAX-ACCESS not-accessible 1943 STATUS current 1944 DESCRIPTION 1945 "When a target receives a Logout command, it responds 1946 with a Logout Response that carries a status code. 1947 This table contains counters for both normal and 1948 abnormal logout requests received by this target." 1949 ::= { iscsiTarget 3 } 1951 iscsiTargetLogoutStatsEntry OBJECT-TYPE 1952 SYNTAX IscsiTargetLogoutStatsEntry 1953 MAX-ACCESS not-accessible 1954 STATUS current 1955 DESCRIPTION 1956 "An entry (row) containing counters of Logout Response 1957 PDUs that were received by this target." 1958 AUGMENTS { iscsiTargetAttributesEntry } 1959 ::= { iscsiTargetLogoutStatsTable 1 } 1961 IscsiTargetLogoutStatsEntry ::= SEQUENCE { 1962 iscsiTgtLogoutNormals Counter32, 1963 iscsiTgtLogoutOthers Counter32 1964 } 1966 iscsiTgtLogoutNormals OBJECT-TYPE 1967 SYNTAX Counter32 1968 UNITS "normal logouts" 1969 MAX-ACCESS read-only 1970 STATUS current 1971 DESCRIPTION 1972 "The count of Logout Command PDUs received by this target, 1973 with reason code 0 (closes the session). 1974 If this counter has suffered a discontinuity, the time of the 1975 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 1976 REFERENCE 1977 "RFC 3720, Section 10.14.1, Reason Code" 1978 ::= { iscsiTargetLogoutStatsEntry 1 } 1980 iscsiTgtLogoutOthers OBJECT-TYPE 1981 SYNTAX Counter32 1982 UNITS "abnormal logouts" 1983 MAX-ACCESS read-only 1984 STATUS current 1985 DESCRIPTION 1986 "The count of Logout Command PDUs received by this target, 1987 with any reason code other than 0. 1988 If this counter has suffered a discontinuity, the time of the 1989 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 1991 REFERENCE 1992 "RFC 3720, Section 10.14.1, Reason Code" 1993 ::= { iscsiTargetLogoutStatsEntry 2 } 1995 --********************************************************************** 1997 iscsiTgtAuthorization OBJECT IDENTIFIER ::= { iscsiObjects 7 } 1999 -- Target Authorization Attributes Table 2001 iscsiTgtAuthAttributesTable OBJECT-TYPE 2002 SYNTAX SEQUENCE OF IscsiTgtAuthAttributesEntry 2003 MAX-ACCESS not-accessible 2004 STATUS current 2005 DESCRIPTION 2006 "A list of initiator identities that are authorized to 2007 access each target node within each iSCSI instance 2008 present on the local system." 2009 ::= { iscsiTgtAuthorization 1 } 2011 iscsiTgtAuthAttributesEntry OBJECT-TYPE 2012 SYNTAX IscsiTgtAuthAttributesEntry 2013 MAX-ACCESS not-accessible 2014 STATUS current 2015 DESCRIPTION 2016 "An entry (row) containing management information 2017 applicable to a particular target node's authorized 2018 initiator identity." 2019 INDEX { iscsiInstIndex, iscsiNodeIndex, iscsiTgtAuthIndex } 2020 ::= { iscsiTgtAuthAttributesTable 1 } 2022 IscsiTgtAuthAttributesEntry ::= SEQUENCE { 2023 iscsiTgtAuthIndex Unsigned32, 2024 iscsiTgtAuthRowStatus RowStatus, 2025 iscsiTgtAuthIdentity RowPointer, 2026 iscsiTgtAuthStorageType StorageType 2027 } 2029 iscsiTgtAuthIndex OBJECT-TYPE 2030 SYNTAX Unsigned32 (1..4294967295) 2031 MAX-ACCESS not-accessible 2032 STATUS current 2033 DESCRIPTION 2034 "An arbitrary integer used to uniquely identify a particular 2035 target's authorized initiator identity within an iSCSI 2036 instance present on the local system. This index value must 2037 not be modified or reused by an agent unless a reboot has 2038 occurred. An agent should attempt to keep this value 2039 persistent across reboots." 2040 ::= { iscsiTgtAuthAttributesEntry 1 } 2042 iscsiTgtAuthRowStatus OBJECT-TYPE 2043 SYNTAX RowStatus 2044 MAX-ACCESS read-create 2045 STATUS current 2046 DESCRIPTION 2047 "This field allows entries to be dynamically added and 2048 removed from this table via SNMP. When adding a row to 2049 this table, all non-Index/RowStatus objects must be set. 2050 When the value of this object is 'active', the values of 2051 the other objects in this table cannot be changed. 2052 Rows may be discarded using RowStatus." 2053 ::= { iscsiTgtAuthAttributesEntry 2 } 2055 iscsiTgtAuthIdentity OBJECT-TYPE 2056 SYNTAX RowPointer 2057 MAX-ACCESS read-create 2058 STATUS current 2059 DESCRIPTION 2060 "A pointer to the corresponding user entry in the IPS-AUTH 2061 MIB module that will be allowed to access this iSCSI target." 2062 REFERENCE 2063 "IPS-AUTH MIB" 2064 ::= { iscsiTgtAuthAttributesEntry 3 } 2066 iscsiTgtAuthStorageType OBJECT-TYPE 2067 SYNTAX StorageType 2068 MAX-ACCESS read-create 2069 STATUS current 2070 DESCRIPTION 2071 "The storage type for this row. Rows in this table that were 2072 created through an external process may have a storage type of 2073 readOnly or permanent. 2075 Conceptual rows having the value 'permanent' need not 2076 allow write access to any columnar objects in the row." 2077 DEFVAL { nonVolatile } 2078 ::= { iscsiTgtAuthAttributesEntry 4 } 2080 --********************************************************************** 2082 iscsiInitiator OBJECT IDENTIFIER ::= { iscsiObjects 8 } 2084 -- Initiator Attributes Table 2086 iscsiInitiatorAttributesTable OBJECT-TYPE 2087 SYNTAX SEQUENCE OF IscsiInitiatorAttributesEntry 2088 MAX-ACCESS not-accessible 2089 STATUS current 2090 DESCRIPTION 2091 "A list of iSCSI nodes that can take on an initiator 2092 role, belonging to each iSCSI instance present on 2093 the local system." 2094 ::= { iscsiInitiator 1 } 2096 iscsiInitiatorAttributesEntry OBJECT-TYPE 2097 SYNTAX IscsiInitiatorAttributesEntry 2098 MAX-ACCESS not-accessible 2099 STATUS current 2100 DESCRIPTION 2101 "An entry (row) containing management information 2102 applicable to a particular iSCSI node that has 2103 initiator capabilities." 2104 INDEX { iscsiInstIndex, iscsiNodeIndex } 2105 ::= { iscsiInitiatorAttributesTable 1 } 2107 IscsiInitiatorAttributesEntry ::= SEQUENCE { 2108 iscsiIntrLoginFailures Counter32, 2109 iscsiIntrLastFailureTime TimeStamp, 2110 iscsiIntrLastFailureType AutonomousType, 2111 iscsiIntrLastTgtFailureName IscsiName, 2112 iscsiIntrLastTgtFailureAddrType InetAddressType, 2113 iscsiIntrLastTgtFailureAddr InetAddress 2114 } 2116 iscsiIntrLoginFailures OBJECT-TYPE 2117 SYNTAX Counter32 2118 UNITS "failed logins" 2119 MAX-ACCESS read-only 2120 STATUS current 2121 DESCRIPTION 2122 "This object counts the number of times a login attempt from 2123 this local initiator has failed. 2124 If this counter has suffered a discontinuity, the time of the 2125 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 2126 REFERENCE 2127 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 2128 ::= { iscsiInitiatorAttributesEntry 1 } 2130 iscsiIntrLastFailureTime OBJECT-TYPE 2131 SYNTAX TimeStamp 2132 MAX-ACCESS read-only 2133 STATUS current 2134 DESCRIPTION 2135 "The timestamp of the most recent failure of a login attempt 2136 from this initiator. A value of zero indicates that no such 2137 failures have occurred since the last system boot." 2138 ::= { iscsiInitiatorAttributesEntry 2 } 2140 iscsiIntrLastFailureType OBJECT-TYPE 2141 SYNTAX AutonomousType 2142 MAX-ACCESS read-only 2143 STATUS current 2144 DESCRIPTION 2145 "The type of the most recent failure of a login attempt 2146 from this initiator, represented as the OID of the counter 2147 object in iscsiInitiatorLoginStatsTable for which the 2148 relevant instance was incremented. A value of 0.0 2149 indicates a type which is not represented by any of 2150 the counters in iscsiInitiatorLoginStatsTable." 2151 ::= { iscsiInitiatorAttributesEntry 3 } 2153 iscsiIntrLastTgtFailureName OBJECT-TYPE 2154 SYNTAX IscsiName 2155 MAX-ACCESS read-only 2156 STATUS current 2157 DESCRIPTION 2158 "A UTF-8 string giving the name of the target that failed 2159 the last login attempt." 2160 ::= { iscsiInitiatorAttributesEntry 4 } 2162 iscsiIntrLastTgtFailureAddrType OBJECT-TYPE 2163 SYNTAX InetAddressType 2164 MAX-ACCESS read-only 2165 STATUS current 2166 DESCRIPTION 2167 "The type of Internet Network Address contained in the 2168 corresponding instance of the iscsiIntrLastTgtFailureAddr. 2169 The value 'dns' is not allowed." 2170 ::= { iscsiInitiatorAttributesEntry 5 } 2172 iscsiIntrLastTgtFailureAddr OBJECT-TYPE 2173 SYNTAX InetAddress 2174 MAX-ACCESS read-only 2175 STATUS current 2176 DESCRIPTION 2177 "An Internet Network Address, of the type specified by the 2178 object iscsiIntrLastTgtFailureAddrType, giving the host 2179 address of the target that failed the last login attempt." 2180 ::= { iscsiInitiatorAttributesEntry 6 } 2182 -- Initiator Login Stats Table 2183 iscsiInitiatorLoginStatsTable OBJECT-TYPE 2184 SYNTAX SEQUENCE OF IscsiInitiatorLoginStatsEntry 2185 MAX-ACCESS not-accessible 2186 STATUS current 2187 DESCRIPTION 2188 "A table of counters which keep track of the results of 2189 this initiator's login attempts." 2190 ::= { iscsiInitiator 2 } 2192 iscsiInitiatorLoginStatsEntry OBJECT-TYPE 2193 SYNTAX IscsiInitiatorLoginStatsEntry 2194 MAX-ACCESS not-accessible 2195 STATUS current 2196 DESCRIPTION 2197 "An entry (row) containing counters of each result 2198 of this initiator's login attempts." 2199 AUGMENTS { iscsiInitiatorAttributesEntry } 2200 ::= { iscsiInitiatorLoginStatsTable 1 } 2202 IscsiInitiatorLoginStatsEntry ::= SEQUENCE { 2203 iscsiIntrLoginAcceptRsps Counter32, 2204 iscsiIntrLoginOtherFailRsps Counter32, 2205 iscsiIntrLoginRedirectRsps Counter32, 2206 iscsiIntrLoginAuthFailRsps Counter32, 2207 iscsiIntrLoginAuthenticateFails Counter32, 2208 iscsiIntrLoginNegotiateFails Counter32 2209 } 2211 iscsiIntrLoginAcceptRsps OBJECT-TYPE 2212 SYNTAX Counter32 2213 UNITS "successful logins" 2214 MAX-ACCESS read-only 2215 STATUS current 2216 DESCRIPTION 2217 "The count of Login Response PDUs with status 2218 0x0000, Accept Login, received by this initiator. 2219 If this counter has suffered a discontinuity, the time of the 2220 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 2221 REFERENCE 2222 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 2223 ::= { iscsiInitiatorLoginStatsEntry 1 } 2225 iscsiIntrLoginOtherFailRsps OBJECT-TYPE 2226 SYNTAX Counter32 2227 UNITS "failed logins" 2228 MAX-ACCESS read-only 2229 STATUS current 2230 DESCRIPTION 2231 "The count of Login Response PDUs received by this 2232 initiator with any status code not counted in the 2233 objects below. 2234 If this counter has suffered a discontinuity, the time of the 2235 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 2236 REFERENCE 2237 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 2238 ::= { iscsiInitiatorLoginStatsEntry 2 } 2240 iscsiIntrLoginRedirectRsps OBJECT-TYPE 2241 SYNTAX Counter32 2242 UNITS "failed logins" 2243 MAX-ACCESS read-only 2244 STATUS current 2245 DESCRIPTION 2246 "The count of Login Response PDUs with status class 0x01, 2247 Redirection, received by this initiator. 2248 If this counter has suffered a discontinuity, the time of the 2249 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 2250 REFERENCE 2251 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 2252 ::= { iscsiInitiatorLoginStatsEntry 3 } 2254 iscsiIntrLoginAuthFailRsps OBJECT-TYPE 2255 SYNTAX Counter32 2256 UNITS "failed logins" 2257 MAX-ACCESS read-only 2258 STATUS current 2259 DESCRIPTION 2260 "The count of Login Response PDUs with status class 0x201, 2261 Authentication Failed, received by this initiator. 2262 If this counter has suffered a discontinuity, the time of the 2263 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 2264 REFERENCE 2265 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 2266 ::= { iscsiInitiatorLoginStatsEntry 4 } 2268 iscsiIntrLoginAuthenticateFails OBJECT-TYPE 2269 SYNTAX Counter32 2270 UNITS "failed logins" 2271 MAX-ACCESS read-only 2272 STATUS current 2273 DESCRIPTION 2274 "The number of times the initiator has aborted a 2275 login because the target could not be authenticated. 2277 No response is generated. 2279 If this counter is incremented, an iscsiIntrLoginFailure 2280 notification should be generated. 2281 If this counter has suffered a discontinuity, the time of the 2282 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 2283 REFERENCE 2284 "RFC 3720, Section 10.13.5, Status-Class and Status-Detail" 2285 ::= { iscsiInitiatorLoginStatsEntry 5 } 2287 iscsiIntrLoginNegotiateFails OBJECT-TYPE 2288 SYNTAX Counter32 2289 UNITS "failed logins" 2290 MAX-ACCESS read-only 2291 STATUS current 2292 DESCRIPTION 2293 "The number of times the initiator has aborted a 2294 login because parameter negotiation with the target 2295 failed. 2297 No response is generated. 2299 If this counter is incremented, an iscsiIntrLoginFailure 2300 notification should be generated. 2301 If this counter has suffered a discontinuity, the time of the 2302 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 2303 REFERENCE 2304 "RFC 3720, Section 6.10, Negotiation Failures" 2305 ::= { iscsiInitiatorLoginStatsEntry 6 } 2307 -- Initiator Logout Stats Table 2309 iscsiInitiatorLogoutStatsTable OBJECT-TYPE 2310 SYNTAX SEQUENCE OF IscsiInitiatorLogoutStatsEntry 2311 MAX-ACCESS not-accessible 2312 STATUS current 2313 DESCRIPTION 2314 "When an initiator attempts send a Logout command, the target 2315 responds with a Logout Response that carries a status code. 2316 This table contains a list of counters of Logout Response 2317 PDUs of each status code, that were received by each 2318 initiator belonging to this iSCSI instance present on this 2319 system." 2320 ::= { iscsiInitiator 3 } 2322 iscsiInitiatorLogoutStatsEntry OBJECT-TYPE 2323 SYNTAX IscsiInitiatorLogoutStatsEntry 2324 MAX-ACCESS not-accessible 2325 STATUS current 2326 DESCRIPTION 2327 "An entry (row) containing counters of Logout Response 2328 PDUs of each status code, that were generated by this 2329 initiator." 2330 AUGMENTS { iscsiInitiatorAttributesEntry } 2331 ::= { iscsiInitiatorLogoutStatsTable 1 } 2333 IscsiInitiatorLogoutStatsEntry ::= SEQUENCE { 2334 iscsiIntrLogoutNormals Counter32, 2335 iscsiIntrLogoutOthers Counter32 2336 } 2338 iscsiIntrLogoutNormals OBJECT-TYPE 2339 SYNTAX Counter32 2340 UNITS "normal logouts" 2341 MAX-ACCESS read-only 2342 STATUS current 2343 DESCRIPTION 2344 "The count of Logout Command PDUs generated by this initiator 2345 with reason code 0 (closes the session). 2346 If this counter has suffered a discontinuity, the time of the 2347 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 2348 REFERENCE 2349 "RFC 3720, Section 10.14.1, Reason Code" 2350 ::= { iscsiInitiatorLogoutStatsEntry 1 } 2352 iscsiIntrLogoutOthers OBJECT-TYPE 2353 SYNTAX Counter32 2354 UNITS "abnormal logouts" 2355 MAX-ACCESS read-only 2356 STATUS current 2357 DESCRIPTION 2358 "The count of Logout Command PDUs generated by this initiator 2359 with any status code other than 0. 2360 If this counter has suffered a discontinuity, the time of the 2361 last discontinuity is indicated in iscsiNodeDiscontinuityTime." 2362 REFERENCE 2363 "RFC 3720, Section 10.14.1, Reason Code" 2364 ::= { iscsiInitiatorLogoutStatsEntry 2 } 2366 --********************************************************************** 2368 iscsiIntrAuthorization OBJECT IDENTIFIER ::= { iscsiObjects 9 } 2370 -- Initiator Authorization Attributes Table 2372 iscsiIntrAuthAttributesTable OBJECT-TYPE 2373 SYNTAX SEQUENCE OF IscsiIntrAuthAttributesEntry 2374 MAX-ACCESS not-accessible 2375 STATUS current 2376 DESCRIPTION 2377 "A list of target identities which each initiator 2378 on the local system may access." 2379 ::= { iscsiIntrAuthorization 1 } 2381 iscsiIntrAuthAttributesEntry OBJECT-TYPE 2382 SYNTAX IscsiIntrAuthAttributesEntry 2383 MAX-ACCESS not-accessible 2384 STATUS current 2385 DESCRIPTION 2386 "An entry (row) containing management information applicable 2387 to a particular initiator node's authorized target identity." 2388 INDEX { iscsiInstIndex, iscsiNodeIndex, iscsiIntrAuthIndex } 2389 ::= { iscsiIntrAuthAttributesTable 1 } 2391 IscsiIntrAuthAttributesEntry ::= SEQUENCE { 2392 iscsiIntrAuthIndex Unsigned32, 2393 iscsiIntrAuthRowStatus RowStatus, 2394 iscsiIntrAuthIdentity RowPointer, 2395 iscsiIntrAuthStorageType StorageType 2396 } 2398 iscsiIntrAuthIndex OBJECT-TYPE 2399 SYNTAX Unsigned32 (1..4294967295) 2400 MAX-ACCESS not-accessible 2401 STATUS current 2402 DESCRIPTION 2403 "An arbitrary integer used to uniquely identify a 2404 particular initiator node's authorized target 2405 identity within an iSCSI instance present on the 2406 local system. This index value must not be modified 2407 or reused by an agent unless a reboot has occurred. 2408 An agent should attempt to keep this value persistent 2409 across reboots." 2410 ::= { iscsiIntrAuthAttributesEntry 1 } 2412 iscsiIntrAuthRowStatus OBJECT-TYPE 2413 SYNTAX RowStatus 2414 MAX-ACCESS read-create 2415 STATUS current 2416 DESCRIPTION 2417 "This field allows entries to be dynamically added and 2418 removed from this table via SNMP. When adding a row to 2419 this table, all non-Index/RowStatus objects must be set. 2420 When the value of this object is 'active', the values of 2421 the other objects in this table cannot be changed. 2422 Rows may be discarded using RowStatus." 2424 ::= { iscsiIntrAuthAttributesEntry 2 } 2426 iscsiIntrAuthIdentity OBJECT-TYPE 2427 SYNTAX RowPointer 2428 MAX-ACCESS read-create 2429 STATUS current 2430 DESCRIPTION 2431 "A pointer to the corresponding user entry in the IPS-AUTH 2432 MIB module to which this initiator node should attempt to 2433 establish an iSCSI session." 2434 REFERENCE 2435 "IPS-AUTH MIB" 2436 ::= { iscsiIntrAuthAttributesEntry 3 } 2438 iscsiIntrAuthStorageType OBJECT-TYPE 2439 SYNTAX StorageType 2440 MAX-ACCESS read-create 2441 STATUS current 2442 DESCRIPTION 2443 "The storage type for this row. Rows in this table that were 2444 created through an external process may have a storage type of 2445 readOnly or permanent. 2447 Conceptual rows having the value 'permanent' need not 2448 allow write access to any columnar objects in the row." 2449 DEFVAL { nonVolatile } 2450 ::= { iscsiIntrAuthAttributesEntry 4 } 2452 --********************************************************************** 2454 iscsiSession OBJECT IDENTIFIER ::= { iscsiObjects 10 } 2456 -- Session Attributes Table 2458 iscsiSessionAttributesTable OBJECT-TYPE 2459 SYNTAX SEQUENCE OF IscsiSessionAttributesEntry 2460 MAX-ACCESS not-accessible 2461 STATUS current 2462 DESCRIPTION 2463 "A list of sessions belonging to each iSCSI instance 2464 present on the system." 2465 ::= { iscsiSession 1 } 2467 iscsiSessionAttributesEntry OBJECT-TYPE 2468 SYNTAX IscsiSessionAttributesEntry 2469 MAX-ACCESS not-accessible 2470 STATUS current 2471 DESCRIPTION 2472 "An entry (row) containing management information applicable 2473 to a particular session. 2475 If this session is a discovery session which is not attached 2476 to any particular node, the iscsiSsnNodeIndex will be zero. 2477 Otherwise, the iscsiSsnNodeIndex will have the same value as 2478 iscsiNodeIndex." 2479 INDEX { iscsiInstIndex, iscsiSsnNodeIndex, iscsiSsnIndex } 2480 ::= { iscsiSessionAttributesTable 1 } 2482 IscsiSessionAttributesEntry ::= SEQUENCE { 2483 iscsiSsnNodeIndex Unsigned32, 2484 iscsiSsnIndex Unsigned32, 2485 iscsiSsnDirection INTEGER, 2486 iscsiSsnInitiatorName IscsiName, 2487 iscsiSsnTargetName IscsiName, 2488 iscsiSsnTSIH Unsigned32, 2489 iscsiSsnISID OCTET STRING, 2490 iscsiSsnInitiatorAlias SnmpAdminString, 2491 iscsiSsnTargetAlias SnmpAdminString, 2492 iscsiSsnInitialR2T TruthValue, 2493 iscsiSsnImmediateData TruthValue, 2494 iscsiSsnType INTEGER, 2495 iscsiSsnMaxOutstandingR2T Unsigned32, 2496 iscsiSsnFirstBurstLength Unsigned32, 2497 iscsiSsnMaxBurstLength Unsigned32, 2498 iscsiSsnConnectionNumber Gauge32, 2499 iscsiSsnAuthIdentity RowPointer, 2500 iscsiSsnDataSequenceInOrder TruthValue, 2501 iscsiSsnDataPDUInOrder TruthValue, 2502 iscsiSsnErrorRecoveryLevel Unsigned32, 2503 iscsiSsnDiscontinuityTime TimeStamp 2504 } 2506 iscsiSsnNodeIndex OBJECT-TYPE 2507 SYNTAX Unsigned32 (0..4294967295) 2508 MAX-ACCESS not-accessible 2509 STATUS current 2510 DESCRIPTION 2511 "An arbitrary integer used to uniquely identify a 2512 particular node within an iSCSI instance present 2513 on the local system. For normal, non-discovery 2514 sessions, this value will map to the iscsiNodeIndex. 2515 For discovery sessions which do not have a node 2516 associated, the value 0 (zero) is used." 2517 ::= { iscsiSessionAttributesEntry 1 } 2519 iscsiSsnIndex OBJECT-TYPE 2520 SYNTAX Unsigned32 (1..4294967295) 2521 MAX-ACCESS not-accessible 2522 STATUS current 2523 DESCRIPTION 2524 "An arbitrary integer used to uniquely identify a 2525 particular session within an iSCSI instance present 2526 on the local system. An agent should attempt to 2527 not reuse index values unless a reboot has occurred. 2528 iSCSI sessions are destroyed during a reboot; rows 2529 in this table are not persistent across reboots." 2530 ::= { iscsiSessionAttributesEntry 2 } 2532 iscsiSsnDirection OBJECT-TYPE 2533 SYNTAX INTEGER { 2534 inboundSession(1), 2535 outboundSession(2) 2536 } 2537 MAX-ACCESS read-only 2538 STATUS current 2539 DESCRIPTION 2540 "Direction of iSCSI session: 2541 InboundSession - session is established from an external 2542 initiator to a target within this iSCSI 2543 instance. 2544 OutboundSession - session is established from an initiator 2545 within this iSCSI instance to an external 2546 target." 2547 ::= { iscsiSessionAttributesEntry 3 } 2549 iscsiSsnInitiatorName OBJECT-TYPE 2550 SYNTAX IscsiName 2551 MAX-ACCESS read-only 2552 STATUS current 2553 DESCRIPTION 2554 "If iscsiSsnDirection is Inbound, this object is a 2555 UTF-8 string that will contain the name of the remote 2556 initiator. If this session is a discovery session that 2557 does not specify a particular initiator, this object 2558 will contain a zero-length string. 2560 If iscsiSsnDirection is Outbound, this object will 2561 contain a zero-length string." 2562 ::= { iscsiSessionAttributesEntry 4 } 2564 iscsiSsnTargetName OBJECT-TYPE 2565 SYNTAX IscsiName 2566 MAX-ACCESS read-only 2567 STATUS current 2568 DESCRIPTION 2569 "If iscsiSsnDirection is Outbound, this object is a 2570 UTF-8 string that will contain the name of the remote 2571 target. If this session is a discovery session that 2572 does not specify a particular target, this object will 2573 contain a zero-length string. 2575 If iscsiSsnDirection is Inbound, this object will 2576 contain a zero-length string." 2577 ::= { iscsiSessionAttributesEntry 5 } 2579 iscsiSsnTSIH OBJECT-TYPE 2580 SYNTAX Unsigned32 (1..65535) 2581 MAX-ACCESS read-only 2582 STATUS current 2583 DESCRIPTION 2584 "The target-defined identification handle for this session." 2585 REFERENCE 2586 "RFC 3720, Section 10.12.6, TSIH" 2587 ::= { iscsiSessionAttributesEntry 6 } 2589 iscsiSsnISID OBJECT-TYPE 2590 SYNTAX OCTET STRING (SIZE(6)) 2591 MAX-ACCESS read-only 2592 STATUS current 2593 DESCRIPTION 2594 "The initiator-defined portion of the iSCSI Session ID." 2595 REFERENCE 2596 "RFC 3720, Section 10.12.5, ISID" 2597 ::= { iscsiSessionAttributesEntry 7 } 2599 iscsiSsnInitiatorAlias OBJECT-TYPE 2600 SYNTAX SnmpAdminString 2601 MAX-ACCESS read-only 2602 STATUS current 2603 DESCRIPTION 2604 "A UTF-8 string that gives the alias communicated by the 2605 initiator end of the session during the login phase. 2607 If no alias exists, the value is a zero-length string." 2608 REFERENCE 2609 "RFC 3720, Section 12.7, InitiatorAlias" 2610 ::= { iscsiSessionAttributesEntry 8 } 2612 iscsiSsnTargetAlias OBJECT-TYPE 2613 SYNTAX SnmpAdminString 2614 MAX-ACCESS read-only 2615 STATUS current 2616 DESCRIPTION 2617 "A UTF-8 string that gives the alias communicated by the 2618 target end of the session during the login phase. 2620 If no alias exists, the value is a zero-length string." 2621 REFERENCE 2622 "RFC 3720, Section 12.6, TargetAlias" 2623 ::= { iscsiSessionAttributesEntry 9 } 2625 iscsiSsnInitialR2T OBJECT-TYPE 2626 SYNTAX TruthValue 2627 MAX-ACCESS read-only 2628 STATUS current 2629 DESCRIPTION 2630 "If set to true, indicates that the initiator must wait 2631 for an R2T before sending to the target. If set to false, 2632 the initiator may send data immediately, within limits set 2633 by iscsiSsnFirstBurstLength and the expected data transfer 2634 length of the request." 2635 REFERENCE 2636 "RFC 3720, Section 12.10, InitialR2T" 2637 ::= { iscsiSessionAttributesEntry 10 } 2639 iscsiSsnImmediateData OBJECT-TYPE 2640 SYNTAX TruthValue 2641 MAX-ACCESS read-only 2642 STATUS current 2643 DESCRIPTION 2644 "Indicates whether the initiator and target have agreed to 2645 support immediate data on this session." 2646 REFERENCE 2647 "RFC 3720, Section 12.11, ImmediateData" 2648 ::= { iscsiSessionAttributesEntry 11 } 2650 iscsiSsnType OBJECT-TYPE 2651 SYNTAX INTEGER { 2652 normalSession(1), 2653 discoverySession(2) 2654 } 2655 MAX-ACCESS read-only 2656 STATUS current 2657 DESCRIPTION 2658 "Type of iSCSI session: 2659 normalSession - session is a normal iSCSI session 2660 discoverySession - session is being used only for discovery." 2661 REFERENCE 2662 "RFC 3720, Section 12.21, SessionType" 2663 ::= { iscsiSessionAttributesEntry 12 } 2664 iscsiSsnMaxOutstandingR2T OBJECT-TYPE 2665 SYNTAX Unsigned32 (1..65535) 2666 UNITS "R2Ts" 2667 MAX-ACCESS read-only 2668 STATUS current 2669 DESCRIPTION 2670 "The maximum number of outstanding request-to-transmit 2671 (R2T)s per iSCSI task within this session." 2672 REFERENCE 2673 "RFC 3720, Section 12.17, MaxOutstandingR2T" 2674 ::= { iscsiSessionAttributesEntry 13 } 2676 iscsiSsnFirstBurstLength OBJECT-TYPE 2677 SYNTAX Unsigned32 (512..16777215) 2678 UNITS "bytes" 2679 MAX-ACCESS read-only 2680 STATUS current 2681 DESCRIPTION 2682 "The maximum length supported for unsolicited data sent 2683 within this session." 2684 REFERENCE 2685 "RFC 3720, Section 12.14, FirstBurstLength" 2686 ::= { iscsiSessionAttributesEntry 14 } 2688 iscsiSsnMaxBurstLength OBJECT-TYPE 2689 SYNTAX Unsigned32 (512..16777215) 2690 UNITS "bytes" 2691 MAX-ACCESS read-only 2692 STATUS current 2693 DESCRIPTION 2694 "The maximum number of bytes which can be sent within 2695 a single sequence of Data-In or Data-Out PDUs." 2696 REFERENCE 2697 "RFC 3720, Section 12.13, MaxBurstLength" 2698 ::= { iscsiSessionAttributesEntry 15 } 2700 iscsiSsnConnectionNumber OBJECT-TYPE 2701 SYNTAX Gauge32 (1..65535) 2702 UNITS "connections" 2703 MAX-ACCESS read-only 2704 STATUS current 2705 DESCRIPTION 2706 "The number of transport protocol connections that currently 2707 belong to this session." 2708 ::= { iscsiSessionAttributesEntry 16 } 2710 iscsiSsnAuthIdentity OBJECT-TYPE 2711 SYNTAX RowPointer 2712 MAX-ACCESS read-only 2713 STATUS current 2714 DESCRIPTION 2715 "This object contains a pointer to a row in the 2716 IPS-AUTH MIB module which identifies the authentication 2717 method being used on this session, as communicated 2718 during the login phase." 2719 REFERENCE 2720 "IPS-AUTH MIB" 2721 ::= { iscsiSessionAttributesEntry 17 } 2723 iscsiSsnDataSequenceInOrder OBJECT-TYPE 2724 SYNTAX TruthValue 2725 MAX-ACCESS read-only 2726 STATUS current 2727 DESCRIPTION 2728 "False indicates that iSCSI data PDU sequences may 2729 be transferred in any order. True indicates that 2730 data PDU sequences must be transferred using 2731 continuously increasing offsets, except during 2732 error recovery." 2733 REFERENCE 2734 "RFC 3720, Section 12.19, DataSequenceInOrder" 2735 ::= { iscsiSessionAttributesEntry 18 } 2737 iscsiSsnDataPDUInOrder OBJECT-TYPE 2738 SYNTAX TruthValue 2739 MAX-ACCESS read-only 2740 STATUS current 2741 DESCRIPTION 2742 "False indicates that iSCSI data PDUs within sequences 2743 may be in any order. True indicates that data PDUs 2744 within sequences must be at continuously increasing 2745 addresses, with no gaps or overlay between PDUs. 2747 Default is true." 2748 REFERENCE 2749 "RFC 3720, Section 12.18, DataPDUInOrder" 2750 ::= { iscsiSessionAttributesEntry 19 } 2752 iscsiSsnErrorRecoveryLevel OBJECT-TYPE 2753 SYNTAX Unsigned32 (0..255) 2754 MAX-ACCESS read-only 2755 STATUS current 2756 DESCRIPTION 2757 "The level of error recovery negotiated between 2758 the initiator and the target. Higher numbers 2759 represent more detailed recovery schemes." 2761 REFERENCE 2762 "RFC 3720, Section 12.20, ErrorRecoveryLevel" 2763 ::= { iscsiSessionAttributesEntry 20 } 2765 iscsiSsnDiscontinuityTime OBJECT-TYPE 2766 SYNTAX TimeStamp 2767 MAX-ACCESS read-only 2768 STATUS current 2769 DESCRIPTION 2770 "The value of SysUpTime on the most recent occasion 2771 at which any one or more of this session's counters 2772 suffered a discontinuity. 2773 When a session is established, and this object is 2774 created, it is initialized to the current value 2775 of SysUpTime." 2776 ::= { iscsiSessionAttributesEntry 21 } 2778 -- Session Stats Table 2780 iscsiSessionStatsTable OBJECT-TYPE 2781 SYNTAX SEQUENCE OF IscsiSessionStatsEntry 2782 MAX-ACCESS not-accessible 2783 STATUS current 2784 DESCRIPTION 2785 "A list of general iSCSI traffic counters for each of the 2786 sessions present on the system." 2787 ::= { iscsiSession 2 } 2789 iscsiSessionStatsEntry OBJECT-TYPE 2790 SYNTAX IscsiSessionStatsEntry 2791 MAX-ACCESS not-accessible 2792 STATUS current 2793 DESCRIPTION 2794 "An entry (row) containing general iSCSI traffic counters 2795 for a particular session." 2796 AUGMENTS { iscsiSessionAttributesEntry } 2797 ::= { iscsiSessionStatsTable 1 } 2799 IscsiSessionStatsEntry ::= SEQUENCE { 2800 iscsiSsnCmdPDUs Counter32, 2801 iscsiSsnRspPDUs Counter32, 2802 iscsiSsnTxDataOctets Counter64, 2803 iscsiSsnRxDataOctets Counter64, 2804 iscsiSsnLCTxDataOctets Counter32, 2805 iscsiSsnLCRxDataOctets Counter32 2806 } 2808 iscsiSsnCmdPDUs OBJECT-TYPE 2809 SYNTAX Counter32 2810 UNITS "PDUs" 2811 MAX-ACCESS read-only 2812 STATUS current 2813 DESCRIPTION 2814 "The count of Command PDUs transferred on this session. 2815 If this counter has suffered a discontinuity, the time of the 2816 last discontinuity is indicated in iscsiSsnDiscontinuityTime." 2817 ::= { iscsiSessionStatsEntry 1 } 2819 iscsiSsnRspPDUs OBJECT-TYPE 2820 SYNTAX Counter32 2821 UNITS "PDUs" 2822 MAX-ACCESS read-only 2823 STATUS current 2824 DESCRIPTION 2825 "The count of Response PDUs transferred on this session. 2826 If this counter has suffered a discontinuity, the time of the 2827 last discontinuity is indicated in iscsiSsnDiscontinuityTime." 2828 ::= { iscsiSessionStatsEntry 2 } 2830 iscsiSsnTxDataOctets OBJECT-TYPE 2831 SYNTAX Counter64 2832 UNITS "octets" 2833 MAX-ACCESS read-only 2834 STATUS current 2835 DESCRIPTION 2836 "The count of data octets that were transmitted by 2837 the local iSCSI node on this session. 2838 If this counter has suffered a discontinuity, the time of the 2839 last discontinuity is indicated in iscsiSsnDiscontinuityTime." 2840 ::= { iscsiSessionStatsEntry 3 } 2842 iscsiSsnRxDataOctets OBJECT-TYPE 2843 SYNTAX Counter64 2844 UNITS "octets" 2845 MAX-ACCESS read-only 2846 STATUS current 2847 DESCRIPTION 2848 "The count of data octets that were received by 2849 the local iSCSI node on this session. 2850 If this counter has suffered a discontinuity, the time of the 2851 last discontinuity is indicated in iscsiSsnDiscontinuityTime." 2852 ::= { iscsiSessionStatsEntry 4 } 2854 iscsiSsnLCTxDataOctets OBJECT-TYPE 2855 SYNTAX Counter32 2856 UNITS "octets" 2857 MAX-ACCESS read-only 2858 STATUS current 2859 DESCRIPTION 2860 "A Low Capacity shadow object of iscsiSsnTxDataOctets 2861 for those systems that don't support Counter64. 2862 If this counter has suffered a discontinuity, the time of the 2863 last discontinuity is indicated in iscsiSsnDiscontinuityTime." 2864 ::= { iscsiSessionStatsEntry 5 } 2866 iscsiSsnLCRxDataOctets OBJECT-TYPE 2867 SYNTAX Counter32 2868 UNITS "octets" 2869 MAX-ACCESS read-only 2870 STATUS current 2871 DESCRIPTION 2872 "A Low Capacity shadow object of iscsiSsnRxDataOctets 2873 for those systems that don't support Counter64. 2874 If this counter has suffered a discontinuity, the time of the 2875 last discontinuity is indicated in iscsiSsnDiscontinuityTime." 2876 ::= { iscsiSessionStatsEntry 6 } 2878 -- Session Connection Error Stats Table 2880 iscsiSessionCxnErrorStatsTable OBJECT-TYPE 2881 SYNTAX SEQUENCE OF IscsiSessionCxnErrorStatsEntry 2882 MAX-ACCESS not-accessible 2883 STATUS current 2884 DESCRIPTION 2885 "A list of error counters for each of the sessions 2886 present on this system." 2887 ::= { iscsiSession 3 } 2889 iscsiSessionCxnErrorStatsEntry OBJECT-TYPE 2890 SYNTAX IscsiSessionCxnErrorStatsEntry 2891 MAX-ACCESS not-accessible 2892 STATUS current 2893 DESCRIPTION 2894 "An entry (row) containing error counters for 2895 a particular session." 2896 AUGMENTS { iscsiSessionAttributesEntry } 2897 ::= { iscsiSessionCxnErrorStatsTable 1 } 2899 IscsiSessionCxnErrorStatsEntry ::= SEQUENCE { 2900 iscsiSsnCxnDigestErrors Counter32, 2901 iscsiSsnCxnTimeoutErrors Counter32 2902 } 2904 iscsiSsnCxnDigestErrors OBJECT-TYPE 2905 SYNTAX Counter32 2906 UNITS "PDUs" 2907 MAX-ACCESS read-only 2908 STATUS current 2909 DESCRIPTION 2910 "The count of PDUs which were received on the session and 2911 contained header or data digest errors. 2912 If this counter has suffered a discontinuity, the time of the 2913 last discontinuity is indicated in iscsiSsnDiscontinuityTime." 2914 REFERENCE 2915 "RFC 3720, Section 6.7, Digest Errors" 2916 ::= { iscsiSessionCxnErrorStatsEntry 1 } 2918 iscsiSsnCxnTimeoutErrors OBJECT-TYPE 2919 SYNTAX Counter32 2920 UNITS "connections" 2921 MAX-ACCESS read-only 2922 STATUS current 2923 DESCRIPTION 2924 "The count of connections within this session 2925 which have been terminated due to timeout. 2926 If this counter has suffered a discontinuity, the time of the 2927 last discontinuity is indicated in iscsiSsnDiscontinuityTime." 2928 REFERENCE 2929 "RFC 3720, Section 6.4, Connection Timeout Management" 2930 ::= { iscsiSessionCxnErrorStatsEntry 2 } 2932 --********************************************************************** 2934 iscsiConnection OBJECT IDENTIFIER ::= { iscsiObjects 11 } 2936 -- Connection Attributes Table 2938 iscsiConnectionAttributesTable OBJECT-TYPE 2939 SYNTAX SEQUENCE OF IscsiConnectionAttributesEntry 2940 MAX-ACCESS not-accessible 2941 STATUS current 2942 DESCRIPTION 2943 "A list of connections belonging to each iSCSI instance 2944 present on the system." 2945 ::= { iscsiConnection 1 } 2947 iscsiConnectionAttributesEntry OBJECT-TYPE 2948 SYNTAX IscsiConnectionAttributesEntry 2949 MAX-ACCESS not-accessible 2950 STATUS current 2951 DESCRIPTION 2952 "An entry (row) containing management information applicable 2953 to a particular connection." 2954 INDEX { iscsiInstIndex, iscsiSsnNodeIndex, iscsiSsnIndex, 2955 iscsiCxnIndex } 2956 ::= { iscsiConnectionAttributesTable 1 } 2958 IscsiConnectionAttributesEntry ::= SEQUENCE { 2959 iscsiCxnIndex Unsigned32, 2960 iscsiCxnCid Unsigned32, 2961 iscsiCxnState INTEGER, 2962 iscsiCxnAddrType InetAddressType, 2963 iscsiCxnLocalAddr InetAddress, 2964 iscsiCxnProtocol IscsiTransportProtocol, 2965 iscsiCxnLocalPort InetPortNumber, 2966 iscsiCxnRemoteAddr InetAddress, 2967 iscsiCxnRemotePort InetPortNumber, 2968 iscsiCxnMaxRecvDataSegLength Unsigned32, 2969 iscsiCxnMaxXmitDataSegLength Unsigned32, 2970 iscsiCxnHeaderIntegrity IscsiDigestMethod, 2971 iscsiCxnDataIntegrity IscsiDigestMethod, 2972 iscsiCxnRecvMarker TruthValue, 2973 iscsiCxnSendMarker TruthValue, 2974 iscsiCxnVersionActive Unsigned32 2975 } 2977 iscsiCxnIndex OBJECT-TYPE 2978 SYNTAX Unsigned32 (1..4294967295) 2979 MAX-ACCESS not-accessible 2980 STATUS current 2981 DESCRIPTION 2982 "An arbitrary integer used to uniquely identify a 2983 particular connection of a particular session within 2984 an iSCSI instance present on the local system. An 2985 agent should attempt to not reuse index values unless 2986 a reboot has occurred. iSCSI connections are destroyed 2987 during a reboot; rows in this table are not persistent 2988 across reboots." 2989 ::= { iscsiConnectionAttributesEntry 1 } 2991 iscsiCxnCid OBJECT-TYPE 2992 SYNTAX Unsigned32 (1..65535) 2993 MAX-ACCESS read-only 2994 STATUS current 2995 DESCRIPTION 2996 "The iSCSI Connection ID for this connection." 2997 ::= { iscsiConnectionAttributesEntry 2 } 2999 iscsiCxnState OBJECT-TYPE 3000 SYNTAX INTEGER { 3001 login(1), 3002 full(2), 3003 logout(3) 3004 } 3005 MAX-ACCESS read-only 3006 STATUS current 3007 DESCRIPTION 3008 "The current state of this connection, from an iSCSI negotiation 3009 point of view. Here are the states: 3011 login - The transport protocol connection has been established, 3012 but a valid iSCSI login response with the final bit set 3013 has not been sent or received. 3014 full - A valid iSCSI login response with the final bit set 3015 has been sent or received. 3016 logout - A valid iSCSI logout command has been sent or 3017 received, but the transport protocol connection has 3018 not yet been closed." 3019 ::= { iscsiConnectionAttributesEntry 3 } 3021 iscsiCxnAddrType OBJECT-TYPE 3022 SYNTAX InetAddressType 3023 MAX-ACCESS read-only 3024 STATUS current 3025 DESCRIPTION 3026 "The type of Internet Network Addresses contained in the 3027 corresponding instances of iscsiCxnLocalAddr and 3028 iscsiCxnRemoteAddr. 3029 The value 'dns' is not allowed." 3030 ::= { iscsiConnectionAttributesEntry 4 } 3032 iscsiCxnLocalAddr OBJECT-TYPE 3033 SYNTAX InetAddress 3034 MAX-ACCESS read-only 3035 STATUS current 3036 DESCRIPTION 3037 "The local Internet Network Address, of the type specified 3038 by iscsiCxnAddrType, used by this connection." 3039 ::= { iscsiConnectionAttributesEntry 5 } 3041 iscsiCxnProtocol OBJECT-TYPE 3042 SYNTAX IscsiTransportProtocol 3043 MAX-ACCESS read-only 3044 STATUS current 3045 DESCRIPTION 3046 "The transport protocol over which this connection is 3047 running." 3048 ::= { iscsiConnectionAttributesEntry 6 } 3049 iscsiCxnLocalPort OBJECT-TYPE 3050 SYNTAX InetPortNumber 3051 MAX-ACCESS read-only 3052 STATUS current 3053 DESCRIPTION 3054 "The local transport protocol port used by this connection. 3055 This object cannot have the value zero, since it represents 3056 an established connection." 3057 ::= { iscsiConnectionAttributesEntry 7 } 3059 iscsiCxnRemoteAddr OBJECT-TYPE 3060 SYNTAX InetAddress 3061 MAX-ACCESS read-only 3062 STATUS current 3063 DESCRIPTION 3064 "The remote Internet Network Address, of the type specified 3065 by iscsiCxnAddrType, used by this connection." 3066 ::= { iscsiConnectionAttributesEntry 8 } 3068 iscsiCxnRemotePort OBJECT-TYPE 3069 SYNTAX InetPortNumber 3070 MAX-ACCESS read-only 3071 STATUS current 3072 DESCRIPTION 3073 "The remote transport protocol port used by this connection. 3074 This object cannot have the value zero, since it represents 3075 an established connection." 3076 ::= { iscsiConnectionAttributesEntry 9 } 3078 iscsiCxnMaxRecvDataSegLength OBJECT-TYPE 3079 SYNTAX Unsigned32 (512..16777215) 3080 UNITS "bytes" 3081 MAX-ACCESS read-only 3082 STATUS current 3083 DESCRIPTION 3084 "The maximum data payload size supported for command 3085 or data PDUs able to be received on this connection." 3086 REFERENCE 3087 "RFC 3720, Section 12.12, MaxRecvDataSegmentLength" 3088 ::= { iscsiConnectionAttributesEntry 10 } 3090 iscsiCxnMaxXmitDataSegLength OBJECT-TYPE 3091 SYNTAX Unsigned32 (512..16777215) 3092 UNITS "bytes" 3093 MAX-ACCESS read-only 3094 STATUS current 3095 DESCRIPTION 3096 "The maximum data payload size supported for command 3097 or data PDUs to be sent on this connection." 3098 REFERENCE 3099 "RFC 3720, Section 12.12, MaxRecvDataSegmentLength" 3100 ::= { iscsiConnectionAttributesEntry 11 } 3102 iscsiCxnHeaderIntegrity OBJECT-TYPE 3103 SYNTAX IscsiDigestMethod 3104 MAX-ACCESS read-only 3105 STATUS current 3106 DESCRIPTION 3107 "This object identifies the iSCSI header 3108 digest scheme in use within this connection." 3109 ::= { iscsiConnectionAttributesEntry 12 } 3111 iscsiCxnDataIntegrity OBJECT-TYPE 3112 SYNTAX IscsiDigestMethod 3113 MAX-ACCESS read-only 3114 STATUS current 3115 DESCRIPTION 3116 "This object identifies the iSCSI data 3117 digest scheme in use within this connection." 3118 ::= { iscsiConnectionAttributesEntry 13 } 3120 iscsiCxnRecvMarker OBJECT-TYPE 3121 SYNTAX TruthValue 3122 MAX-ACCESS read-only 3123 STATUS current 3124 DESCRIPTION 3125 "This object indicates whether or not this connection 3126 is receiving markers in in its incoming data stream." 3127 REFERENCE 3128 "RFC 3720, Appendix A." 3129 ::= { iscsiConnectionAttributesEntry 14 } 3131 iscsiCxnSendMarker OBJECT-TYPE 3132 SYNTAX TruthValue 3133 MAX-ACCESS read-only 3134 STATUS current 3135 DESCRIPTION 3136 "This object indicates whether or not this connection 3137 is inserting markers in in its outgoing data stream." 3138 REFERENCE 3139 "RFC 3720, Appendix A." 3140 ::= { iscsiConnectionAttributesEntry 15 } 3142 iscsiCxnVersionActive OBJECT-TYPE 3143 SYNTAX Unsigned32 (0..255) 3144 MAX-ACCESS read-only 3145 STATUS current 3146 DESCRIPTION 3147 "Active version number of the iSCSI specification negotiated 3148 on this connection." 3149 REFERENCE 3150 "RFC 3720, Section 10.12, Login Request" 3151 ::= { iscsiConnectionAttributesEntry 16 } 3153 --********************************************************************** 3154 -- Notifications 3156 iscsiTgtLoginFailure NOTIFICATION-TYPE 3157 OBJECTS { 3158 iscsiTgtLoginFailures, 3159 iscsiTgtLastFailureType, 3160 iscsiTgtLastIntrFailureName, 3161 iscsiTgtLastIntrFailureAddrType, 3162 iscsiTgtLastIntrFailureAddr 3163 } 3164 STATUS current 3165 DESCRIPTION 3166 "Sent when a login is failed by a target. 3168 To avoid sending an excessive number of notifications due 3169 to multiple errors counted, an SNMP agent implementing this 3170 notification SHOULD NOT send more than 3 notifications of 3171 this type in any 10 second time period." 3172 ::= { iscsiNotifications 1 } 3174 iscsiIntrLoginFailure NOTIFICATION-TYPE 3175 OBJECTS { 3176 iscsiIntrLoginFailures, 3177 iscsiIntrLastFailureType, 3178 iscsiIntrLastTgtFailureName, 3179 iscsiIntrLastTgtFailureAddrType, 3180 iscsiIntrLastTgtFailureAddr 3181 } 3182 STATUS current 3183 DESCRIPTION 3184 "Sent when a login is failed by a initiator. 3186 To avoid sending an excessive number of notifications due 3187 to multiple errors counted, an SNMP agent implementing this 3188 notification SHOULD NOT send more than 3 notifications of 3189 this type in any 10 second time period." 3190 ::= { iscsiNotifications 2 } 3192 iscsiInstSessionFailure NOTIFICATION-TYPE 3193 OBJECTS { 3194 iscsiInstSsnFailures, 3195 iscsiInstLastSsnFailureType, 3196 iscsiInstLastSsnRmtNodeName 3197 } 3198 STATUS current 3199 DESCRIPTION 3200 "Sent when an active session is failed by either the initiator 3201 or the target. 3203 To avoid sending an excessive number of notifications due 3204 to multiple errors counted, an SNMP agent implementing this 3205 notification SHOULD NOT send more than 3 notifications of 3206 this type in any 10 second time period." 3207 ::= { iscsiNotifications 3 } 3209 --********************************************************************** 3211 -- Conformance Statements 3213 iscsiCompliances OBJECT IDENTIFIER ::= { iscsiConformance 1 } 3214 iscsiGroups OBJECT IDENTIFIER ::= { iscsiConformance 2 } 3216 iscsiInstanceAttributesGroup OBJECT-GROUP 3217 OBJECTS { 3218 iscsiInstDescr, 3219 iscsiInstVersionMin, 3220 iscsiInstVersionMax, 3221 iscsiInstVendorID, 3222 iscsiInstVendorVersion, 3223 iscsiInstPortalNumber, 3224 iscsiInstNodeNumber, 3225 iscsiInstSessionNumber, 3226 iscsiInstSsnFailures, 3227 iscsiInstLastSsnFailureType, 3228 iscsiInstLastSsnRmtNodeName, 3229 iscsiInstDiscontinuityTime 3230 } 3231 STATUS current 3232 DESCRIPTION 3233 "A collection of objects providing information about iSCSI 3234 instances." 3235 ::= { iscsiGroups 1 } 3237 iscsiInstanceSsnErrorStatsGroup OBJECT-GROUP 3238 OBJECTS { 3239 iscsiInstSsnDigestErrors, 3240 iscsiInstSsnCxnTimeoutErrors, 3241 iscsiInstSsnFormatErrors 3242 } 3243 STATUS current 3244 DESCRIPTION 3245 "A collection of objects providing information about 3246 errors that have caused a session failure for an 3247 iSCSI instance." 3248 ::= { iscsiGroups 2 } 3250 iscsiPortalAttributesGroup OBJECT-GROUP 3251 OBJECTS { 3252 iscsiPortalRowStatus, 3253 iscsiPortalStorageType, 3254 iscsiPortalRoles, 3255 iscsiPortalAddrType, 3256 iscsiPortalAddr, 3257 iscsiPortalProtocol, 3258 iscsiPortalMaxRecvDataSegLength, 3259 iscsiPortalPrimaryHdrDigest, 3260 iscsiPortalPrimaryDataDigest, 3261 iscsiPortalSecondaryHdrDigest, 3262 iscsiPortalSecondaryDataDigest, 3263 iscsiPortalRecvMarker 3264 } 3265 STATUS current 3266 DESCRIPTION 3267 "A collection of objects providing information about 3268 the transport protocol endpoints of the local targets." 3269 ::= { iscsiGroups 3 } 3271 iscsiTgtPortalAttributesGroup OBJECT-GROUP 3272 OBJECTS { 3273 iscsiTgtPortalPort, 3274 iscsiTgtPortalTag 3275 } 3276 STATUS current 3277 DESCRIPTION 3278 "A collection of objects providing information about 3279 the transport protocol endpoints of the local targets." 3280 ::= { iscsiGroups 4 } 3282 iscsiIntrPortalAttributesGroup OBJECT-GROUP 3283 OBJECTS { 3284 iscsiIntrPortalTag 3285 } 3286 STATUS current 3287 DESCRIPTION 3288 "An object providing information about 3289 the portal tags used by the local initiators." 3290 ::= { iscsiGroups 5 } 3292 iscsiNodeAttributesGroup OBJECT-GROUP 3293 OBJECTS { 3294 iscsiNodeName, 3295 iscsiNodeAlias, 3296 iscsiNodeRoles, 3297 iscsiNodeTransportType, 3298 iscsiNodeInitialR2T, 3299 iscsiNodeImmediateData, 3300 iscsiNodeMaxOutstandingR2T, 3301 iscsiNodeFirstBurstLength, 3302 iscsiNodeMaxBurstLength, 3303 iscsiNodeMaxConnections, 3304 iscsiNodeDataSequenceInOrder, 3305 iscsiNodeDataPDUInOrder, 3306 iscsiNodeDefaultTime2Wait, 3307 iscsiNodeDefaultTime2Retain, 3308 iscsiNodeErrorRecoveryLevel, 3309 iscsiNodeDiscontinuityTime, 3310 iscsiNodeStorageType 3311 } 3312 STATUS current 3313 DESCRIPTION 3314 "A collection of objects providing information about all 3315 local targets." 3316 ::= { iscsiGroups 6 } 3318 iscsiTargetAttributesGroup OBJECT-GROUP 3319 OBJECTS { 3320 iscsiTgtLoginFailures, 3321 iscsiTgtLastFailureTime, 3322 iscsiTgtLastFailureType, 3323 iscsiTgtLastIntrFailureName, 3324 iscsiTgtLastIntrFailureAddrType, 3325 iscsiTgtLastIntrFailureAddr 3326 } 3327 STATUS current 3328 DESCRIPTION 3329 "A collection of objects providing information about all 3330 local targets." 3331 ::= { iscsiGroups 7 } 3333 iscsiTargetLoginStatsGroup OBJECT-GROUP 3334 OBJECTS { 3335 iscsiTgtLoginAccepts, 3336 iscsiTgtLoginOtherFails, 3337 iscsiTgtLoginRedirects, 3338 iscsiTgtLoginAuthorizeFails, 3339 iscsiTgtLoginAuthenticateFails, 3340 iscsiTgtLoginNegotiateFails 3341 } 3342 STATUS current 3343 DESCRIPTION 3344 "A collection of objects providing information about all 3345 login attempts by remote initiators to local targets." 3346 ::= { iscsiGroups 8 } 3348 iscsiTargetLogoutStatsGroup OBJECT-GROUP 3349 OBJECTS { 3350 iscsiTgtLogoutNormals, 3351 iscsiTgtLogoutOthers 3352 } 3353 STATUS current 3354 DESCRIPTION 3355 "A collection of objects providing information about all 3356 logout events between remote initiators to local targets." 3357 ::= { iscsiGroups 9 } 3359 iscsiTargetAuthGroup OBJECT-GROUP 3360 OBJECTS { 3361 iscsiTgtAuthRowStatus, 3362 iscsiTgtAuthStorageType, 3363 iscsiTgtAuthIdentity 3364 } 3365 STATUS current 3366 DESCRIPTION 3367 "A collection of objects providing information about all 3368 remote initiators that are authorized to connect to local 3369 targets." 3370 ::= { iscsiGroups 10 } 3372 iscsiInitiatorAttributesGroup OBJECT-GROUP 3373 OBJECTS { 3374 iscsiIntrLoginFailures, 3375 iscsiIntrLastFailureTime, 3376 iscsiIntrLastFailureType, 3377 iscsiIntrLastTgtFailureName, 3378 iscsiIntrLastTgtFailureAddrType, 3379 iscsiIntrLastTgtFailureAddr 3380 } 3381 STATUS current 3382 DESCRIPTION 3383 "A collection of objects providing information about 3384 all local initiators." 3386 ::= { iscsiGroups 11 } 3388 iscsiInitiatorLoginStatsGroup OBJECT-GROUP 3389 OBJECTS { 3390 iscsiIntrLoginAcceptRsps, 3391 iscsiIntrLoginOtherFailRsps, 3392 iscsiIntrLoginRedirectRsps, 3393 iscsiIntrLoginAuthFailRsps, 3394 iscsiIntrLoginAuthenticateFails, 3395 iscsiIntrLoginNegotiateFails 3396 } 3397 STATUS current 3398 DESCRIPTION 3399 "A collection of objects providing information about all 3400 login attempts by local initiators to remote targets." 3401 ::= { iscsiGroups 12 } 3403 iscsiInitiatorLogoutStatsGroup OBJECT-GROUP 3404 OBJECTS { 3405 iscsiIntrLogoutNormals, 3406 iscsiIntrLogoutOthers 3407 } 3408 STATUS current 3409 DESCRIPTION 3410 "A collection of objects providing information about all 3411 logout events between local initiators to remote targets." 3412 ::= { iscsiGroups 13 } 3414 iscsiInitiatorAuthGroup OBJECT-GROUP 3415 OBJECTS { 3416 iscsiIntrAuthRowStatus, 3417 iscsiIntrAuthStorageType, 3418 iscsiIntrAuthIdentity 3419 } 3420 STATUS current 3421 DESCRIPTION 3422 "A collection of objects providing information about all 3423 remote targets that are initiators of the local system are 3424 authorized to access." 3425 ::= { iscsiGroups 14 } 3427 iscsiSessionAttributesGroup OBJECT-GROUP 3428 OBJECTS { 3429 iscsiSsnDirection, 3430 iscsiSsnInitiatorName, 3431 iscsiSsnTargetName, 3432 iscsiSsnTSIH, 3433 iscsiSsnISID, 3434 iscsiSsnInitiatorAlias, 3435 iscsiSsnTargetAlias, 3436 iscsiSsnInitialR2T, 3437 iscsiSsnImmediateData, 3438 iscsiSsnType, 3439 iscsiSsnMaxOutstandingR2T, 3440 iscsiSsnFirstBurstLength, 3441 iscsiSsnMaxBurstLength, 3442 iscsiSsnConnectionNumber, 3443 iscsiSsnAuthIdentity, 3444 iscsiSsnDataSequenceInOrder, 3445 iscsiSsnDataPDUInOrder, 3446 iscsiSsnErrorRecoveryLevel, 3447 iscsiSsnDiscontinuityTime 3448 } 3449 STATUS current 3450 DESCRIPTION 3451 "A collection of objects providing information applicable to 3452 all sessions." 3453 ::= { iscsiGroups 15 } 3455 iscsiSessionPDUStatsGroup OBJECT-GROUP 3456 OBJECTS { 3457 iscsiSsnCmdPDUs, 3458 iscsiSsnRspPDUs 3459 } 3460 STATUS current 3461 DESCRIPTION 3462 "A collection of objects providing information about PDU 3463 traffic for each session." 3464 ::= { iscsiGroups 16 } 3466 iscsiSessionOctetStatsGroup OBJECT-GROUP 3467 OBJECTS { 3468 iscsiSsnTxDataOctets, 3469 iscsiSsnRxDataOctets 3470 } 3471 STATUS current 3472 DESCRIPTION 3473 "A collection of objects providing information about octet 3474 traffic for each session using a Counter64 data type." 3475 ::= { iscsiGroups 17 } 3477 iscsiSessionLCOctetStatsGroup OBJECT-GROUP 3478 OBJECTS { 3479 iscsiSsnLCTxDataOctets, 3480 iscsiSsnLCRxDataOctets 3481 } 3482 STATUS current 3483 DESCRIPTION 3484 "A collection of objects providing information about octet 3485 traffic for each session using a Counter32 data type." 3486 ::= { iscsiGroups 18 } 3488 iscsiSessionCxnErrorStatsGroup OBJECT-GROUP 3489 OBJECTS { 3490 iscsiSsnCxnDigestErrors, 3491 iscsiSsnCxnTimeoutErrors 3492 } 3493 STATUS current 3494 DESCRIPTION 3495 "A collection of objects providing information about connection 3496 errors for all sessions." 3497 ::= { iscsiGroups 19 } 3499 iscsiConnectionAttributesGroup OBJECT-GROUP 3500 OBJECTS { 3501 iscsiCxnCid, 3502 iscsiCxnState, 3503 iscsiCxnProtocol, 3504 iscsiCxnAddrType, 3505 iscsiCxnLocalAddr, 3506 iscsiCxnLocalPort, 3507 iscsiCxnRemoteAddr, 3508 iscsiCxnRemotePort, 3509 iscsiCxnMaxRecvDataSegLength, 3510 iscsiCxnMaxXmitDataSegLength, 3511 iscsiCxnHeaderIntegrity, 3512 iscsiCxnDataIntegrity, 3513 iscsiCxnRecvMarker, 3514 iscsiCxnSendMarker, 3515 iscsiCxnVersionActive 3516 } 3517 STATUS current 3518 DESCRIPTION 3519 "A collection of objects providing information about all 3520 connections used by all sessions." 3521 ::= { iscsiGroups 20 } 3523 iscsiTgtLgnNotificationsGroup NOTIFICATION-GROUP 3524 NOTIFICATIONS { 3525 iscsiTgtLoginFailure 3526 } 3527 STATUS current 3528 DESCRIPTION 3529 "A collection of notifications which indicate a login 3530 failure from a remote initiator to a local target." 3531 ::= { iscsiGroups 21 } 3533 iscsiIntrLgnNotificationsGroup NOTIFICATION-GROUP 3534 NOTIFICATIONS { 3535 iscsiIntrLoginFailure 3536 } 3537 STATUS current 3538 DESCRIPTION 3539 "A collection of notifications which indicate a login 3540 failure from a local initiator to a remote target." 3541 ::= { iscsiGroups 22 } 3543 iscsiSsnFlrNotificationsGroup NOTIFICATION-GROUP 3544 NOTIFICATIONS { 3545 iscsiInstSessionFailure 3546 } 3547 STATUS current 3548 DESCRIPTION 3549 "A collection of notifications which indicate session 3550 failures occurring after login." 3551 ::= { iscsiGroups 23 } 3553 --********************************************************************** 3555 iscsiComplianceV1 MODULE-COMPLIANCE 3556 STATUS current 3557 DESCRIPTION 3558 "Initial version of compliance statement based on 3559 initial version of this MIB module. 3561 If an implementation can be both a target and an 3562 initiator, all groups are mandatory." 3563 MODULE -- this module 3564 MANDATORY-GROUPS { 3565 iscsiInstanceAttributesGroup, 3566 iscsiInstanceSsnErrorStatsGroup, 3567 iscsiPortalAttributesGroup, 3568 iscsiNodeAttributesGroup, 3569 iscsiSessionAttributesGroup, 3570 iscsiSessionPDUStatsGroup, 3571 iscsiSessionCxnErrorStatsGroup, 3572 iscsiConnectionAttributesGroup, 3573 iscsiSsnFlrNotificationsGroup 3574 } 3576 -- Conditionally mandatory groups depending on the ability 3577 -- to support Counter64 data types and/or to provide counter 3578 -- information to SNMPv1 applications. 3580 GROUP iscsiSessionOctetStatsGroup 3581 DESCRIPTION 3582 "This group is mandatory for all iSCSI implementations 3583 that can support Counter64 data types." 3585 GROUP iscsiSessionLCOctetStatsGroup 3586 DESCRIPTION 3587 "This group is mandatory for all iSCSI implementations 3588 that provide information to SNMPv1-only applications; 3589 this includes agents that cannot support Counter64 3590 data types." 3592 -- Conditionally mandatory groups to be included with 3593 -- the mandatory groups when the implementation has 3594 -- iSCSI target facilities. 3596 GROUP iscsiTgtPortalAttributesGroup 3597 DESCRIPTION 3598 "This group is mandatory for all iSCSI implementations 3599 that have iSCSI target facilities." 3601 OBJECT iscsiPortalMaxRecvDataSegLength 3602 MIN-ACCESS read-only 3603 DESCRIPTION 3604 "Write access is not required." 3606 OBJECT iscsiNodeStorageType 3607 MIN-ACCESS read-only 3608 DESCRIPTION 3609 "Write access is not required; an implementation may 3610 choose to allow this object to be set to 'volatile' 3611 or 'nonVolatile'." 3613 GROUP iscsiTargetAttributesGroup 3614 DESCRIPTION 3615 "This group is mandatory for all iSCSI implementations 3616 that have iSCSI target facilities." 3618 GROUP iscsiTargetLoginStatsGroup 3619 DESCRIPTION 3620 "This group is mandatory for all iSCSI implementations 3621 that have iSCSI target facilities." 3623 GROUP iscsiTargetLogoutStatsGroup 3624 DESCRIPTION 3625 "This group is mandatory for all iSCSI implementations 3626 that have iSCSI target facilities." 3628 GROUP iscsiTgtLgnNotificationsGroup 3629 DESCRIPTION 3630 "This group is mandatory for all iSCSI implementations 3631 that have iSCSI target facilities." 3633 GROUP iscsiTargetAuthGroup 3634 DESCRIPTION 3635 "This group is mandatory for all iSCSI implementations 3636 that have iSCSI target facilities." 3638 -- Conditionally mandatory groups to be included with 3639 -- the mandatory groups when the implementation has 3640 -- iSCSI initiator facilities. 3642 GROUP iscsiIntrPortalAttributesGroup 3643 DESCRIPTION 3644 "This group is mandatory for all iSCSI implementations 3645 that have iSCSI initiator facilities." 3647 GROUP iscsiInitiatorAttributesGroup 3648 DESCRIPTION 3649 "This group is mandatory for all iSCSI implementations 3650 that have iSCSI initiator facilities." 3652 GROUP iscsiInitiatorLoginStatsGroup 3653 DESCRIPTION 3654 "This group is mandatory for all iSCSI implementations 3655 that have iSCSI initiator facilities." 3657 GROUP iscsiInitiatorLogoutStatsGroup 3658 DESCRIPTION 3659 "This group is mandatory for all iSCSI implementations 3660 that have iSCSI initiator facilities." 3662 GROUP iscsiIntrLgnNotificationsGroup 3663 DESCRIPTION 3664 "This group is mandatory for all iSCSI implementations 3665 that have iSCSI initiator facilities." 3667 GROUP iscsiInitiatorAuthGroup 3668 DESCRIPTION 3669 "This group is mandatory for all iSCSI implementations 3670 that have iSCSI initiator facilities." 3672 OBJECT iscsiNodeErrorRecoveryLevel 3673 SYNTAX Unsigned32 (0..2) 3674 DESCRIPTION 3675 "Only values 0-2 are defined at present." 3677 ::= { iscsiCompliances 1 } 3679 END 3680 8. Security Considerations 3682 There are a number of management objects defined in this MIB module 3683 with a MAX-ACCESS clause of read-write and/or read-create. Such 3684 objects may be considered sensitive or vulnerable in some network 3685 environments. The support for SET operations in a non-secure 3686 environment without proper protection can have a negative effect on 3687 network operations. These are the tables and objects and their 3688 sensitivity/vulnerability: 3690 iscsiPortalAttributesTable, iscsiTgtPortalAttributesTable, and 3691 iscsiIntrPortalAttributes table can be used to add or remove IP 3692 addresses to be used by iSCSI. 3694 iscsiTgtAuthAttributesTable entries can be added or removed, to 3695 allow or disallow access to a target by an initiator. 3697 Some of the readable objects in this MIB module (i.e., objects with a 3698 MAX-ACCESS other than not-accessible) may be considered sensitive or 3699 vulnerable in some network environments. It is thus important to 3700 control even GET and/or NOTIFY access to these objects and possibly 3701 to even encrypt the values of these objects when sending them over 3702 the network via SNMP. These are the tables and objects and their 3703 sensitivity/vulnerability: 3705 iscsiNodeAttributesTable, iscsiTargetAttributesTable, and 3706 iscsiTgtAuthorization can be used to glean information needed to 3707 make connections to the iSCSI targets this module represents. 3708 However, it is the responsibility of the initiators and targets 3709 involved to authenticate each other to ensure that an 3710 inappropriately advertised or discovered initiator or target does 3711 not compromise their security. These issues are discussed in 3712 [RFC3720]. 3714 SNMP versions prior to SNMPv3 did not include adequate security. 3715 Even if the network itself is secure (for example by using IPsec), 3716 even then, there is no control as to who on the secure network is 3717 allowed to access and GET/SET (read/change/create/delete) the objects 3718 in this MIB module. 3720 It is RECOMMENDED that implementors consider the security features as 3721 provided by the SNMPv3 framework (see [RFC3410], section 8), 3722 including full support for the SNMPv3 cryptographic mechanisms (for 3723 authentication and privacy). 3725 Further, deployment of SNMP versions prior to SNMPv3 is NOT 3726 RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to 3727 enable cryptographic security. It is then a customer/operator 3728 responsibility to ensure that the SNMP entity giving access to an 3729 instance of this MIB module is properly configured to give access to 3730 the objects only to those principals (users) that have legitimate 3731 rights to indeed GET or SET (change/create/delete) them. 3733 9. IANA Considerations 3735 9.1. OID Assignment 3736 IANA is requested to make a MIB OID assignment under the mib-2 3737 branch. 3739 10. Normative References 3741 [RFC3720] Satran, J., Meth, K., Sapuntzakis, C., Chadalapaka, M., and 3742 E. Zeidner, "Internet Small Computer Systems Interface 3743 (iSCSI)", RFC 3720, March 2004. 3745 [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate 3746 Requirement Levels", BCP 14, RFC 2119, March 1997. 3748 [RFC2578] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J. , 3749 Rose, M., and S. Waldbusser, "Structure of Management 3750 Information Version 2 (SMIv2)", STD 58, RFC 2578, April 3751 1999. 3753 [RFC2579] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., 3754 Rose, M., and S. Waldbusser, "Textual Conventions for 3755 SMIv2", STD 58, RFC 2579, April 1999. 3757 [RFC2580] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., 3758 Rose, M., and S. Waldbusser, "Conformance Statements for 3759 SMIv2", STD 58, RFC 2580, April 1999. 3761 [RFC4001] Daniele, M., Haberman, B., Routhier, S., and J. 3762 Schoenwaelder, "Textual Conventions for Internet Network 3763 Addresses", RFC 4001, February 2005. 3765 [RFC3411] Harrington, D., Presuhn, R., and B. Wijnen, "An Architecture 3766 for Describing Simple Network Management Protocol (SNMP) 3767 Management Frameworks", STD 62, RFC 3411, December 2002. 3769 [AUTHMIB] Bakke, M., and J. Muchow, "Definitions of Managed Objects 3770 for User Identity Authorization", Work in Progress, draft- 3771 ietf-ips-auth-mib-06.txt, January 2005. 3773 11. Informative References 3775 [RFC3410] Case, J., Mundy, R., Partain, D., and B. Stewart, 3776 "Introduction and Applicability Statements for Internet- 3777 Standard Management Framework", RFC 3410, December 2002. 3779 [RFC2012] McCloghrie, K., "SNMPv2 Management Information Base for the 3780 Transmission Control Protocol using SMIv2", RFC 2012, 3781 November 1996. 3783 [SCSIMIB] Hallak-Stamler, M., Bakke, M., McCloghrie, K., Lederman, Y., 3784 and M. Krueger, "Definitions of Managed Objects for SCSI 3785 Entities", Work in Progress, draft-ietf-ips-scsi-mib-06.txt, 3786 August 2004. 3788 12. Acknowledgments 3790 In addition to the authors, several people contributed to the 3791 development of this MIB module. Thanks especially to those who took 3792 the time to participate in our weekly conference calls to build our 3793 requirements, object models, table structures, and attributes: John 3794 Hufferd, Tom McSweeney (IBM), Kevin Gibbons (Nishan Systems), Chad 3795 Gregory (Intel), Jack Harwood (EMC), Hari Mudaliar (Adaptec), Ie Wei 3796 Njoo (Agilent), Lawrence Lamers (SAN Valley), Satish Mali (Stonefly 3797 Networks), and William Terrell (Troika). 3799 Special thanks to Tom McSweeney, Ie Wei Njoo, and Kevin Gibbons, who 3800 wrote the descriptions for many of the tables and attributes in this 3801 MIB module, to Ayman Ghanem for finding and suggesting changes for 3802 many problems in this module, and to Keith McCloghrie for serving as 3803 advisor to the team. 3805 Authors' Addresses 3807 Mark Bakke 3808 Postal: Cisco Systems, Inc 3809 7900 International Drive, Suite 400 3810 Bloomington, MN 3811 USA 55425 3813 E-mail: mbakke@cisco.com 3814 Marjorie Krueger 3815 Postal: Hewlett-Packard 3816 Networked Storage Architecture 3817 Networked Storage Solutions Org. 3818 8000 Foothills Blvd. 3819 Roseville, CA 3820 USA 95747 3822 E-mail: marjorie_krueger@hp.com 3824 Tom McSweeney 3825 Postal: IBM Corporation 3826 600 Park Offices Drive 3827 Research Triangle Park, NC 3828 USA 27709 3830 E-mail: tommcs@us.ibm.com 3832 James Muchow 3833 Postal: Qlogic Corp. 3834 6321 Bury Drive 3835 Eden Prairie, MN 3836 USA 55346 3838 Email: james.muchow@qlogic.com 3840 IPR Notice 3842 The IETF takes no position regarding the validity or scope of any 3843 Intellectual Property Rights or other rights that might be claimed to 3844 pertain to the implementation or use of the technology described in 3845 this document or the extent to which any license under such rights 3846 might or might not be available; nor does it represent that it has 3847 made any independent effort to identify any such rights. Information 3848 on the procedures with respect to rights in RFC documents can be 3849 found in BCP 78 and BCP 79. 3851 Copies of IPR disclosures made to the IETF Secretariat and any 3852 assurances of licenses to be made available, or the result of an 3853 attempt made to obtain a general license or permission for the use of 3854 such proprietary rights by implementers or users of this 3855 specification can be obtained from the IETF on-line IPR repository at 3856 http://www.ietf.org/ipr. 3858 The IETF invites any interested party to bring to its attention any 3859 copyrights, patents or patent applications, or other proprietary 3860 rights that may cover technology that may be required to implement 3861 this standard. Please address the information to the IETF at ietf- 3862 ipr@ietf.org. 3864 Full Copyright Notice 3866 Copyright (C) The Internet Society (2005). This document is subject 3867 to the rights, licenses and restrictions contained in BCP 78, and 3868 except as set forth therein, the authors retain all their rights. 3870 This document and the information contained herein are provided on an 3871 "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS 3872 OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET 3873 ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, 3874 INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE 3875 INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED 3876 WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.