EdgeSwitch-PORTSECURITY-PRIVATE-MIB
AI MIB Summary
The EdgeSwitch-PORTSECURITY-PRIVATE-MIB enables monitoring and management of port security states, MAC address violations, and access control enforcement on Ubiquiti EdgeSwitch hardware via SNMP. This private module exposes vendor-specific counters and status variables required to audit Layer 2 security policies and detect unauthorized device connections on managed switch ports.
The Ubiquiti Private MIB for EdgeSwitch Port Security Feature.
Main OID:
fastPathPortSecurity.1.3.6.1.4.1.4413.1.1.20
23
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
23 total| Object Name |
|---|
fastPathPortSecurityThe Ubiquiti Private MIB for EdgeSwitch Port Security Feature. MODULE-IDENTITY .1.3.6.1.4.1.4413.1.1.20 |
agentPortSecurityGroup OBJECT IDENTIFIER .1.3.6.1.4.1.4413.1.1.20.1 |
agentGlobalPortSecurityModeMode showing whether at the global level, port security is enabled or not.rw Enumeration .1.3.6.1.4.1.4413.1.1.20.1.1 |
agentPortSecurityTableA table for Port Security and associated functionality. SEQUENCE OF AgentPortSecurityEntry .1.3.6.1.4.1.4413.1.1.20.1.2 |
agentPortSecurityEntryRepresents entry for port security table AgentPortSecurityEntry .1.3.6.1.4.1.4413.1.1.20.1.2.1 |
agentPortSecurityModeMode showing whether at port level security is enabled or not.rw Enumeration .1.3.6.1.4.1.4413.1.1.20.1.2.1.1 |
agentPortSecurityDynamicLimitThis variable signifies the limit of dynamically locked MAC addresses
allowed on a specific port.rw Unsigned32 .1.3.6.1.4.1.4413.1.1.20.1.2.1.2 |
agentPortSecurityStaticLimitThis variable signifies the limit of statically locked MAC addresses
allowed on a specific port.rw Unsigned32 .1.3.6.1.4.1.4413.1.1.20.1.2.1.3 |
agentPortSecurityViolationTrapModeThis variable is used to enable or disable the sending of new violation
traps designating when a packet with a disallowed MAC address is
received on a locked port.rw Enumeration .1.3.6.1.4.1.4413.1.1.20.1.2.1.4 |
agentPortSecurityStaticMACsThis variable displays the statically locked MAC addresses for port.
The list displayed in a particular fashion :
2 a0:b1:c2:d1:e3:a1,11 a0:b1:c2:d3:e4:f5
(i.e., VLAN MAC pairs followed by a 1 or 0 to indicate a sticky entry, separated by commas).ro DisplayString (SNMPv2-TC) .1.3.6.1.4.1.4413.1.1.20.1.2.1.6 |
agentPortSecurityLastDiscardedMACThis variable displays the vlan-id and source MAC address of the last packet that was
discarded on a locked port.ro DisplayString (SNMPv2-TC) .1.3.6.1.4.1.4413.1.1.20.1.2.1.7 |
agentPortSecurityMACAddressAddThis MIB variable accepts a VLAN id, MAC address and the sticky value to be added to the list
of statically locked MAC addresses on a port. The VLAN id, MAC address and sticky value combination
would be entered in a particular fashion like :- 2 a0:b0:c0:d1:e2:a1 1(the vlan-id, MAC address
and sticky value separated by blank-spaces).rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.4413.1.1.20.1.2.1.8 |
agentPortSecurityMACAddressRemoveThis MIB variable accepts a VLAN id and MAC address to be removed from the list
of statically locked MAC addresses on a port.. The VLAN id and MAC address combination
would be entered in a particular fashion like :- 2 a0:b0:c0:d1:e2:a1(the vlan-id and
MAC address separated by a blank-space).rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.4413.1.1.20.1.2.1.9 |
agentPortSecurityMACAddressMoveWhen this object is enabled, all the dynamically locked MAC addresses will
be moved to statically locked addresses on a port. GET operation on this object will display
disable.rw Enumeration .1.3.6.1.4.1.4413.1.1.20.1.2.1.10 |
agentPortSecurityStickyModeThis object is used to configure port level security sticky mode in a port.rw Enumeration .1.3.6.1.4.1.4413.1.1.20.1.2.1.11 |
agentPortSecurityDynamicTableA table for Port Security Dynamic and associated functionality. SEQUENCE OF AgentPortSecurityDynamicEntry .1.3.6.1.4.1.4413.1.1.20.1.3 |
agentPortSecurityDynamicEntryRepresents entry for port MAC Locking table AgentPortSecurityDynamicEntry .1.3.6.1.4.1.4413.1.1.20.1.3.1 |
agentPortSecurityDynamicVLANIdSource VLAN id of the packet that is received on the dynamically locked port.ro Unsigned32 .1.3.6.1.4.1.4413.1.1.20.1.3.1.1 |
agentPortSecurityDynamicMACAddressSource MAC address of the packet that is received on the dynamically locked port.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.4413.1.1.20.1.3.1.2 |
agentGlobalPortSecurityStickyModeThis object is used to apply the Sticky Mode to all ports.
This is write-only value. It always returns 'disable' on requestrw Enumeration .1.3.6.1.4.1.4413.1.1.20.1.4 |
agentGlobalPortSecurityViolationTrapModeThis variable is used to enable or disable the sending of new violation
traps designating when a packet with a disallowed MAC address is
received on a locked port. The configuration will be done on all ports.
This is write-only value. It always returns 'disable' on requestrw Enumeration .1.3.6.1.4.1.4413.1.1.20.1.5 |
agentPortSecurityTraps OBJECT IDENTIFIER .1.3.6.1.4.1.4413.1.1.20.2 |
agentPortSecurityViolationSent when a packet is received on a locked port with a source MAC address
that is not allowed. NOTIFICATION-TYPE .1.3.6.1.4.1.4413.1.1.20.2.1 |