DLINKSW-PORT-SECURITY-MIB
This MIB module defines objects for port security.
Main OID:
dlinkSwPortSecurityMIB.1.3.6.1.4.1.171.14.8
38
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
38 total| Object Name |
|---|
dlinkSwPortSecurityMIBThis MIB module defines objects for port security. MODULE-IDENTITY .1.3.6.1.4.1.171.14.8 |
dPortSecNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.8.0 |
dPortSecMacAddrViolationThe address violation notification is generated when port security
address violation is detected (dPortSecIfViolationCount increases). NOTIFICATION-TYPE .1.3.6.1.4.1.171.14.8.0.1 |
dPortSecObjects OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.8.1 |
dPortSecGlobalNotifControlSet to 'true' to enable global SNMP Notification
for port security feature. Setting the object to
'false' will disable SNMP notifications.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.8.1.1 |
dPortSecGlobalNotifRateExpressed in the number of notifications can be generated
per second.
The global control configures the rate-limit of
SNMP Notification for port security feature. This object
specifies the rate at which SNMP Notification is generated
when dPortSecIfViolationCount increases. When the rate is over
the configured rate, the SNMP Notification is suppressed but it
does not affect dPortSecIfViolationCount.
A value of 0 indicates that an SNMP Notification is generated
for every security violation.rw Unsigned32 .1.3.6.1.4.1.171.14.8.1.2 |
dPortSecNotifyInfo OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.8.1.3 |
dPortSecIfViolationMacAddressThis object is also used as a variable in the dPortSecMacAddrViolation
notification to contain the value of the MAC address which caused the violation.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.8.1.3.1 |
dPortSecGlobalMaximumNumIndicates the system maximum addresses number (users) allowed.
A value of -1 means no-limit. The max entry range is (1..N).
The value N means the max number and is determined by the project itself.rw Integer32 .1.3.6.1.4.1.171.14.8.1.4 |
dPortSecVlanTableThe table is used to configure and display port security settings
and status for a particular VLAN. SEQUENCE OF DPortSecVlanEntry .1.3.6.1.4.1.171.14.8.1.5 |
dPortSecVlanEntryAn entry contains port security information for a particular
VLAN. DPortSecVlanEntry .1.3.6.1.4.1.171.14.8.1.5.1 |
dPortSecVlanIDThis object specifies the VLAN ID for address learning. VlanId (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.8.1.5.1.1 |
dPortSecVlanMaximumNumIndicates the VLAN maximum addresses number (users) allowed.
A value of -1 means no-limit. The range is (1..N).
The value N means the upper limit and is determined by the project
itself.rw Integer32 .1.3.6.1.4.1.171.14.8.1.5.1.2 |
dPortSecVlanCurrentNumIndicates the current number of secure MAC addresses on this VLAN.ro Unsigned32 .1.3.6.1.4.1.171.14.8.1.5.1.3 |
dPortSecIfTableThe table is used to configure and display port security settings
and status for a particular interface. SEQUENCE OF DPortSecIfEntry .1.3.6.1.4.1.171.14.8.1.6 |
dPortSecIfEntryEntry containing port security information for a particular
interface. DPortSecIfEntry .1.3.6.1.4.1.171.14.8.1.6.1 |
dPortSecIfEnableUses the object to enable or disable port security.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.8.1.6.1.1 |
dPortSecIfCurrentStatusThis object represents the operational status
of the port security feature on an interface.
notEnabled(1) - This indicates port security
is not enabled.
forwarding(2) - This indicates port security is
operational.
errDisabled(3) - This indicates that the port is
shutdown due to port security
violation when the object
dPortSecIfViolationAction is of type
'shutdown'.ro Enumeration .1.3.6.1.4.1.171.14.8.1.6.1.2 |
dPortSecIfMaximumNumThis object sets the maximum number of secure MAC addresses
(users) allowed.rw Unsigned32 .1.3.6.1.4.1.171.14.8.1.6.1.3 |
dPortSecIfViolationActionThis object sets the action to be taken when a security violation is detected.
protect(1) - Drops all the packets from the insecure hosts at the
port-security process level but does not increment
the security-violation count.
restrict(2) - Drops all packets from the insecure hosts at the
port-security process level and increments the
security-violation count.
shutdown(3) - Shuts down the port if there is a security violation.rw Enumeration .1.3.6.1.4.1.171.14.8.1.6.1.4 |
dPortSecIfSecureModeUse the object to set the port security mode.
permanent(1) - Under this mode all learned MAC addresses won't be
purged unless a user deletes these entries manually.
deleteOnTimeout(2) - Under this mode all learned MAC addresses
will be purged when an entry ages out or a user deletes
these entries manually.rw Enumeration .1.3.6.1.4.1.171.14.8.1.6.1.5 |
dPortSecIfAgingTimeUse the object to set aging time for auto-learned dynamic secured address.
When 0 is set on the specified interface, it means the port security aging
has been disabled.rw INTEGER .1.3.6.1.4.1.171.14.8.1.6.1.6 |
dPortSecIfAgingTypeUse the object to set aging type for auto-learned dynamic secured address.
absolute(1) - Under this aging type, all the secured address on this interface will
age out exactly after the time specified.
inactivity(2) - Under this aging type, all learned MAC addresses on this interface
will age out only if there is no data traffic from the secure source
address for the specified time period.rw Enumeration .1.3.6.1.4.1.171.14.8.1.6.1.7 |
dPortSecIfClearDynamicAddrSetting this object to 'clear' to clear the addresses which will be
purged out when an entry is aged out on the corresponding
interface.
No action is taken if this object is set to 'noOp'.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.8.1.6.1.8 |
dPortSecIfCurrentNumIndicates the current number of secure MAC addresses
on this interface.ro Unsigned32 .1.3.6.1.4.1.171.14.8.1.6.1.9 |
dPortSecIfViolationCountIndicates the number of address violations
occurred on a secure interface. The counter will
be initialized to zero when the port security
feature is enabled on an interface.ro Counter64 .1.3.6.1.4.1.171.14.8.1.6.1.10 |
dPortSecAddrTableCurrentNumThis object indicates the number of entries present in the dPortSecAddrTable.ro Unsigned32 .1.3.6.1.4.1.171.14.8.1.7 |
dPortSecAddrTableA list of port security entries containing the secure MAC address
information. SEQUENCE OF DPortSecAddrEntry .1.3.6.1.4.1.171.14.8.1.8 |
dPortSecAddrEntryAn entry contains secure MAC address information for a particular
interface. A secure MAC address can be added by the user
and can be added when the device learns a new secure MAC address. DPortSecAddrEntry .1.3.6.1.4.1.171.14.8.1.8.1 |
dPortSecAddrIfIndexThe ifIndex value of the interface. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.171.14.8.1.8.1.1 |
dPortSecAddrVlanIDThis object specifies the VLAN ID where the user-defined secure
MAC address is located. If this object is set to 0 at row creation
time, the PVID (default port VLAN ID) will be used for the MAC
address. VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.8.1.8.1.2 |
dPortSecAddrMacAddressThis object indicates the secure MAC address to gain port access
rights. MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.8.1.8.1.3 |
dPortSecAddrSecureModeSpecifies the secure mode.
For manually configured secure MAC addresses, the dPortSecAddrSecureMode is
permanent.ro Enumeration .1.3.6.1.4.1.171.14.8.1.8.1.4 |
dPortSecAddrRemainTimeSpecifies the remaining aging time for the auto-learned dynamic secured address.ro INTEGER .1.3.6.1.4.1.171.14.8.1.8.1.5 |
dPortSecAddrRowStatusThe status of this conceptual row.
This object is used to create and delete instances
of this table. In other words, besides 'permanent' secure MAC
address, a 'deleteOnTimeout' address can be cleared by
this object.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.8.1.8.1.99 |
dPortSecConformance OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.8.2 |
dPortSecMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.8.2.1 |
dPortSecMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.8.2.2 |