CISCO-PORT-SECURITY-MIB
AI MIB Summary
The CISCO-PORT-SECURITY-MIB enables monitoring and configuration of Cisco switch port security features, specifically tracking secure MAC address counts, violation counters, and the operational status of sticky, static, and dynamic secure address bindings.
The MIB module for managing Cisco Port Security.
40
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
40 total| Object Name |
|---|
ciscoPortSecurityMIB OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315 |
RFC1155-SMI Unknown .1.3.6.1.4.1.9.9.315 |
ciscoPortSecurityMIBNotifs OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.0 |
cpsInterfaceNotifs OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.0.0 |
cpsSecureMacAddrViolationThe address violation notification is generated
when port security address violation is detected
on a secure interface and the cpsIfViolationAction
is set to 'dropNotify'. TRAP-TYPE .1.3.6.1.4.1.9.9.315.0.0.1 |
ciscoPortSecurityMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.1 |
cpsGlobalObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.1.1 |
cpsGlobalMaxSecureAddressThe maximum number of secure MAC addresses
allowed in the device.ro INTEGER .1.3.6.1.4.1.9.9.315.1.1.1 |
cpsGlobalTotalSecureAddressThe total number of MAC addresses secured
in the device.ro INTEGER .1.3.6.1.4.1.9.9.315.1.1.2 |
cpsGlobalPortSecurityEnableThe global control to enable or disable
port security feature on the device.rw TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } .1.3.6.1.4.1.9.9.315.1.1.3 |
cpsGlobalSNMPNotifRateThe global control to set the SNMP Notification
rate for port security feature. This object
specifies the rate at which SNMP Notifications
are generated when cpsIfViolationAction
selected is of the type 'dropNotify'.
A value of 0 indicates that an SNMP Notification
is generated for every security violation.rw INTEGER .1.3.6.1.4.1.9.9.315.1.1.4 |
cpsGlobalSNMPNotifControlSet to 'true' to enable global SNMP Notification
for port security feature. Setting the object to
'false' will disable SNMP notifications even if
the cpsIfViolationAction is set to 'dropNotify'
on an interface. The default value is 'false'.rw TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } .1.3.6.1.4.1.9.9.315.1.1.5 |
cpsInterfaceObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.1.2 |
cpsIfConfigTableA list of port security configuration entries.
The number of entries is determined by the number of
interfaces in the system that can support the
port security feature. Interfaces that are not
port security capable will not be displayed
in this Table. This table includes interfaces
on which port security parameters can be set even
if port security feature itself cannot be enabled
due to conflict with other features. SEQUENCE OF CpsIfConfigEntry .1.3.6.1.4.1.9.9.315.1.2.1 |
cpsIfConfigEntryEntry containing port security information for a
particular interface. CpsIfConfigEntry .1.3.6.1.4.1.9.9.315.1.2.1.1 |
cpsIfPortSecurityEnableIndicates whether the port security feature
is enabled on an interface. Upon setting this
object to 'true', the source MAC address that
does not match any cpsSecureMacAddress for the
given interface in cpsSecureMacAddressTable and
the value of cpsIfCurrentSecureMacAddrCount is
equal to cpsIfMaxSecureMacAddr, is considered
as port security violation and an action as
specified in cpsIfViolationAction is taken on
the interface. The value of this object has no
effect when the value of
cpsGlobalPortSecurityEnable is set to 'false'.rw TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } .1.3.6.1.4.1.9.9.315.1.2.1.1.1 |
cpsIfPortSecurityStatusThis object represents the operational status
of the port security feature on an interface.
secureup(1) - This indicates port security
is operational.
securedown(2) - This indicates port security is
not operational. This happens
when port security is configured
to be enabled but could not be
enabled due to certain reasons
such as conflict with other
features.
shutdown(3) - This indicates that the port is
shutdown due to port security
violation when the object
cpsIfViolationAction is of type
'shutdown'.ro Enumeration .1.3.6.1.4.1.9.9.315.1.2.1.1.2 |
cpsIfMaxSecureMacAddrThe maximum number (N) of MAC addresses to be
secured on the interface. The first N MAC
addresses learned or configured are made secured.
Changing this object value from N to M is not
allowed if M is smaller than N, and M is less
than the value of cpsIfCurrentSecureMacAddrCount
on the interface. One way to change the number in
this case is by deleting sufficient number of
secure mac addresses configured or learned on the
device. Also, sum of this object value for all the
interfaces is less than or equal to
cpsGlobalMaxSecureAddress.rw INTEGER .1.3.6.1.4.1.9.9.315.1.2.1.1.3 |
cpsIfCurrentSecureMacAddrCountThe current number of MAC addresses secured
on this interface.ro INTEGER .1.3.6.1.4.1.9.9.315.1.2.1.1.4 |
cpsIfSecureMacAddrAgingTimeThe interval in which the interface is
secured. After the expiration of the
time, the corresponding cpsSecureMacAddressEntry
from the cpsSecureMacAddressTable will be
removed. If the value of this object is 0,
the aging mechanism is disabled.rw INTEGER .1.3.6.1.4.1.9.9.315.1.2.1.1.5 |
cpsIfSecureMacAddrAgingTypeThe aging type determines the way the
secure MAC addresses are aged out.
absolute(1) - all the secure MAC addresses
will be aged out after
cpsIfSecureMacAddrAgingTime
minutes since the time the
secure MAC address is learned
or configured.
inactivity(2) - all the secure MAC addresses
will age out and will be removed
from the cpsSecureMacAddressTable
only if there is no data traffic
from the secure source MAC address
for the specified time period.rw Enumeration .1.3.6.1.4.1.9.9.315.1.2.1.1.6 |
cpsIfStaticMacAddrAgingEnableIndicates whether the secure MAC address aging
mechanism is enabled on static MAC address entries
in cpsSecureMacAddressTable.
Setting this object value to 'false' will cause
the static MAC addresses to remain in the
cpsSecureMacAddressTable regardless of the aging
time and type configured on the interface.
Setting this object value to 'true' will cause
the static MAC addresses to be aged out from
cpsSecureMacAddressTable according to the aging
time and type specified on the interface.rw TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } .1.3.6.1.4.1.9.9.315.1.2.1.1.7 |
cpsIfViolationActionDetermines the action that the device will
take if the traffic matches the port security
violation.
shutdown(1) - the interface will be forced to
shut down.
dropNotify(2) - the matched traffic will be
dropped and
cpsSecureMacAddrViolation
notification will be generated.
drop(3) - the matched traffic will be
dropped.rw Enumeration .1.3.6.1.4.1.9.9.315.1.2.1.1.8 |
cpsIfViolationCountThis object indicates the number of violations
occurred on a secure interface. The counter will
be initialized to zero when the port security
feature is enabled on an interface. This MIB
object is only instantiated if the device can
provide this violation statistics on the
interface.ro Counter .1.3.6.1.4.1.9.9.315.1.2.1.1.9 |
cpsIfSecureLastMacAddressThis object indicates the last secure MAC
address that is learned or configured on
this interface.ro MacAddress -- Rsyntax OCTET STRING .1.3.6.1.4.1.9.9.315.1.2.1.1.10 |
cpsIfClearSecureAddressesSet to true(1) to delete all secure addresses on
this interface. Setting this object to false(2)
has no effect. This object always returns false(2)
when read.rw TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } .1.3.6.1.4.1.9.9.315.1.2.1.1.11 |
cpsSecureMacAddressTableA list of port security entries containing
the secure MAC address information. SEQUENCE OF CpsSecureMacAddressEntry .1.3.6.1.4.1.9.9.315.1.2.2 |
cpsSecureMacAddressEntryEntry containing secure MAC address
information for a particular interface.
A secure MAC address can be configured
by the user and can be added by the agent
when the device learns a new secured
MAC address.
Note that the secure MAC addresses can be
configured on an interface even if port
security feature is disabled. CpsSecureMacAddressEntry .1.3.6.1.4.1.9.9.315.1.2.2.1 |
cpsSecureMacAddressThis object indicates a secure MAC
address configured or learned on an
interface. MacAddress -- Rsyntax OCTET STRING .1.3.6.1.4.1.9.9.315.1.2.2.1.1 |
cpsSecureMacAddrTypeThis object indicates if the secure MAC address
is a configured (static) or learned (dynamic)
address on this interface.ro Enumeration .1.3.6.1.4.1.9.9.315.1.2.2.1.2 |
cpsSecureMacAddrRemainingAgeThis object indicates the remaining age
of the secure MAC address if aging is
enabled on that port. A value of 0 indicates
that aging is disabled for this MAC address
entry.ro INTEGER .1.3.6.1.4.1.9.9.315.1.2.2.1.3 |
cpsSecureMacAddrRowStatusThis object is a conceptual row entry that allows to add
or delete entries to or from the cpsSecureMacAddressTable.
1. When creating an entry in this table 'createAndGo'
method is used and the value of this object is set to
'active'. Deactivation of an 'active' entry is not
allowed.
2. When deleting an entry in this table 'destroy' method
is used.rw RowStatus -- Rsyntax INTEGER { -- active(1), -- notInService(2), -- notReady(3), -- createAndGo(4), -- createAndWait(5), -- destroy(6) -- } .1.3.6.1.4.1.9.9.315.1.2.2.1.4 |
ciscoPortSecurityMIBConform OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.2 |
ciscoPortSecurityMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.2.1 |
ciscoPortSecurityMIBCompliance OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.2.1.1 |
ciscoPortSecurityMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.2.2 |
cpsGlobalGroup OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.2.2.1 |
cpsInterfaceGroup OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.2.2.2 |
cpsExtInterfaceGroup OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.2.2.3 |
cpsNotificationGroup OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.315.2.2.4 |