CIE1000-PSEC-MIB
AI MIB Summary
The CIE1000-PSEC-MIB module provides vendor-specific SNMP access to monitor and configure port security policies, including MAC address table entries, violation counters, and interface security states on CIE1000 series network devices. This private extension enables granular visibility into unauthorized access attempts and port-level security enforcement mechanisms that are not covered by standard IETF Port Security MIBs.
This is a private version of the Port Security MIB
Main OID:
cie1000PsecMib.1.3.6.1.4.1.9.9.832.1.66
50
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
50 total| Object Name |
|---|
cie1000PsecMibThis is a private version of the Port Security MIB MODULE-IDENTITY .1.3.6.1.4.1.9.9.832.1.66 |
SNMPv2-CONFThis is a private version of the Port Security MIB NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.832.1.66 |
cie1000PsecMibObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.1 |
cie1000PsecConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.1.2 |
cie1000PsecConfigGlobals OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.1.2.1 |
cie1000PsecConfigGlobalsEnabledGlobally enable/disable aging of secured entries. This doesn't affect
aging of addresses secured by other modules.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.832.1.66.1.2.1.1 |
cie1000PsecConfigGlobalsEnableAgingIf aging is globally enabled, this is the aging period in seconds.
Valid range is [10; 10000000] seconds(max is around 115 days).rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.832.1.66.1.2.1.2 |
cie1000PsecConfigGlobalsAgingPeriodSecsIf aging is globally enabled, this is the aging period in seconds.
Valid range is [10; 10000000] seconds(max is around 115 days).rw Unsigned32 .1.3.6.1.4.1.9.9.832.1.66.1.2.1.3 |
cie1000PsecConfigPortTableThis is a table of port configuration per session SEQUENCE OF CIE1000PsecConfigPortEntry .1.3.6.1.4.1.9.9.832.1.66.1.2.2 |
cie1000PsecConfigPortEntryEach session has a set of parameters CIE1000PsecConfigPortEntry .1.3.6.1.4.1.9.9.832.1.66.1.2.2.1 |
cie1000PsecConfigPortIfIndexLogical interface number of the physical port.ro CIE1000InterfaceIndex (CIE1000-TC) .1.3.6.1.4.1.9.9.832.1.66.1.2.2.1.1 |
cie1000PsecConfigPortEnabledControls whether Port Security Limit Control is enabled for this port.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.832.1.66.1.2.2.1.2 |
cie1000PsecConfigPortLimitMaximum number of MAC addresses allowed on this port.Valid values =
[PSEC_LIMIT_MIN; PSEC_LIMIT_MAX].rw Unsigned32 .1.3.6.1.4.1.9.9.832.1.66.1.2.2.1.3 |
cie1000PsecConfigPortActionAction to take if number of MAC addresses exceeds the limit. NONE(0) Do
nothing, except disallowing further clients. TRAP(1) Send an SNMP trap
notification. SHUTDOWN(2) Shut-down the port. TRAP_AND_SHUTDOWN(3) Send
an SNMP trap notification and shut-down the port.rw CIE1000PsecLimitActionType .1.3.6.1.4.1.9.9.832.1.66.1.2.2.1.4 |
cie1000PsecStatus OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.1.3 |
cie1000PsecStatusPortTableThis is a table of port configuration per session SEQUENCE OF CIE1000PsecStatusPortEntry .1.3.6.1.4.1.9.9.832.1.66.1.3.1 |
cie1000PsecStatusPortEntryEach session has a set of parameters CIE1000PsecStatusPortEntry .1.3.6.1.4.1.9.9.832.1.66.1.3.1.1 |
cie1000PsecStatusPortIfIndexLogical interface number of the physical port.ro CIE1000InterfaceIndex (CIE1000-TC) .1.3.6.1.4.1.9.9.832.1.66.1.3.1.1.1 |
cie1000PsecStatusPortUsersBit masks to indicate what users currently use port security on this
port. Where bit 0 - port security limit, bit 1 - 802.1x, bit 2 - voice
VLAN.ro Unsigned32 .1.3.6.1.4.1.9.9.832.1.66.1.3.1.1.2 |
cie1000PsecStatusPortLimitReachedTRUE if the limit is reached on the port, FALSE otherwise.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.832.1.66.1.3.1.1.3 |
cie1000PsecStatusPortShutdownTRUE if the port is shut down, FALSE otherwise.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.832.1.66.1.3.1.1.4 |
cie1000PsecStatusPortMacCountNumber of MAC addresses currently assigned to this port. The number
does NOT include the number of entries that are held due to a H/W
failure or S/W failure.ro Unsigned32 .1.3.6.1.4.1.9.9.832.1.66.1.3.1.1.5 |
cie1000PsecStatusPortTrapsTableThis is a table of port configuration per session SEQUENCE OF CIE1000PsecStatusPortTrapsEntry .1.3.6.1.4.1.9.9.832.1.66.1.3.2 |
cie1000PsecStatusPortTrapsEntryEach session has a set of parameters CIE1000PsecStatusPortTrapsEntry .1.3.6.1.4.1.9.9.832.1.66.1.3.2.1 |
cie1000PsecStatusPortTrapsIfIndexLogical interface number of the physical port.ro CIE1000InterfaceIndex (CIE1000-TC) .1.3.6.1.4.1.9.9.832.1.66.1.3.2.1.1 |
cie1000PsecStatusPortTrapsUsersBit masks to indicate what users currently use port security on this
port. Where bit 0 - port security limit, bit 1 - 802.1x, bit 2 - voice
VLAN.ro Unsigned32 .1.3.6.1.4.1.9.9.832.1.66.1.3.2.1.2 |
cie1000PsecStatusPortTrapsLimitReachedTRUE if the limit is reached on the port, FALSE otherwise.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.832.1.66.1.3.2.1.3 |
cie1000PsecStatusPortTrapsShutdownTRUE if the port is shut down, FALSE otherwise.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.832.1.66.1.3.2.1.4 |
cie1000PsecStatusPortTrapsMacCountNumber of MAC addresses currently assigned to this port. The number
does NOT include the number of entries that are held due to a H/W
failure or S/W failure.ro Unsigned32 .1.3.6.1.4.1.9.9.832.1.66.1.3.2.1.5 |
cie1000PsecControl OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.1.4 |
cie1000PsecControlPortReopenTableThis is a table to re-open port and move it to ready state, if it was
being disabled after limit was reached. SEQUENCE OF CIE1000PsecControlPortReopenEntry .1.3.6.1.4.1.9.9.832.1.66.1.4.1 |
cie1000PsecControlPortReopenEntryEach session has a set of parameters CIE1000PsecControlPortReopenEntry .1.3.6.1.4.1.9.9.832.1.66.1.4.1.1 |
cie1000PsecControlPortReopenIfIndexLogical interface number of the physical port.ro CIE1000InterfaceIndex (CIE1000-TC) .1.3.6.1.4.1.9.9.832.1.66.1.4.1.1.1 |
cie1000PsecControlPortReopenPortReOpenSet to true to reopen after it is shutdownrw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.832.1.66.1.4.1.1.2 |
cie1000PsecStatistics OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.1.5 |
cie1000PsecStatisticsPortTableThis is a table of port statistics per session SEQUENCE OF CIE1000PsecStatisticsPortEntry .1.3.6.1.4.1.9.9.832.1.66.1.5.1 |
cie1000PsecStatisticsPortEntryEach session has a set of parameters CIE1000PsecStatisticsPortEntry .1.3.6.1.4.1.9.9.832.1.66.1.5.1.1 |
cie1000PsecStatisticsPortIfIndexLogical interface number of the physical port.ro CIE1000InterfaceIndex (CIE1000-TC) .1.3.6.1.4.1.9.9.832.1.66.1.5.1.1.1 |
cie1000PsecStatisticsPortAgeOrHoldDown-counter used in block and ageing process.ro CIE1000DisplayString .1.3.6.1.4.1.9.9.832.1.66.1.5.1.1.5 |
cie1000PsecStatisticsPortCreationTimeTime when this entry was orignally added.ro CIE1000DisplayString .1.3.6.1.4.1.9.9.832.1.66.1.5.1.1.6 |
cie1000PsecStatisticsPortStateCurrent State of a entry, expected state can be either FORWARDING or
BLOCKED.ro CIE1000PsecStateType .1.3.6.1.4.1.9.9.832.1.66.1.5.1.1.7 |
cie1000PsecStatisticsPortMacIdThe MAC address that this is all about.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.9.9.832.1.66.1.5.1.1.8 |
cie1000PsecStatisticsPortVlanIdThe VID that this is all about.ro CIE1000Unsigned16 (CIE1000-TC) .1.3.6.1.4.1.9.9.832.1.66.1.5.1.1.9 |
cie1000PsecTrap OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.1.6 |
cie1000PsecTrapLimitExceededThis trap signals that a row has been added. The index(es) and value(s)
of the row is included in the trap. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.832.1.66.1.6.1 |
cie1000PsecTrapModThis trap signals that one or more of the objects included in the trap
has been updated. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.832.1.66.1.6.2 |
cie1000PsecTrapLimitRecoveredThis trap signals that a row has been deleted. The index(es) of the
row is included in the trap. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.832.1.66.1.6.3 |
cie1000PsecMibConformance OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.2 |
cie1000PsecMibCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.2.1 |
cie1000PsecMibGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.832.1.66.2.2 |