JUNIPER-SECURE-ACCESS-PORT-MIB
Updated May 15, 2007AI MIB Summary
The JUNIPER-SECURE-ACCESS-PORT-MIB manages Juniper Networks layer 2 security features, specifically DHCP Snooping, Dynamic ARP Inspection, IP Source Guard, MAC Source Guard, MAC limiting, and storm control, to enforce per-interface access policies and mitigate broadcast storms on switch ports.
This is Juniper Networks' implementation of enterprise specific MIB for configuration of Secure Access Port feature. DHCP Snooping and Dynamic ARP Inspection are mechanisms to provide per interface security capabilities. This MIB Module is also used to control some layer 2 functions like MAC limiting. It also supports IP Source Guard, Mac Source Guard and Storm Control features.
Main OID:
jnxExSecureAccessPortMIB.1.3.6.1.4.1.2636.3.40.1.2.1
25
Objects
Active
Status
4
Dependencies
Imported Objects
Objects
25 total| Object Name |
|---|
jnxExSecureAccessPortMIBThis is Juniper Networks' implementation of enterprise specific
MIB for configuration of Secure Access Port feature. DHCP Snooping
and Dynamic ARP Inspection are mechanisms to provide per interface
security capabilities. This MIB Module is also used to control
some layer 2 functions like MAC limiting. It also supports
IP Source Guard, Mac Source Guard and Storm Control features. MODULE-IDENTITY .1.3.6.1.4.1.2636.3.40.1.2.1 |
jnxSecAccessPortMIBNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.2636.3.40.1.2.1.0 |
jnxSecAccessdsRateLimitCrossedA jnxdsRateLimitCrossed notification is generated when
the number of DHCP packets from an untrusted interface exceeds
jnxSecAccessdsIfRateLimit. NOTIFICATION-TYPE .1.3.6.1.4.1.2636.3.40.1.2.1.0.1 |
jnxSecAccessIfMacLimitExceededNotification is sent when the number of MAC addresses learnt by
the interface has crossed the limit of MAC addresses(jnxSecAccessIfMacLimit)
and if MAC Limit Exceeded Action(jnxSecAccessIfMacLimitExceed) is
drop or alarm or shutdown. NOTIFICATION-TYPE .1.3.6.1.4.1.2636.3.40.1.2.1.0.2 |
jnxStormEventNotificationNotification is sent when the traffic in the interface exceeds
rising threshold(jnxStormCtlRisingThreshold). NOTIFICATION-TYPE .1.3.6.1.4.1.2636.3.40.1.2.1.0.3 |
jnxSecAccessPortMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.2636.3.40.1.2.1.1 |
jnxSecAccessPortVlanTableA table provides the mechanism to control DHCP Snooping
and Dynamic ARP Inspection per VLAN. When a VLAN is created
in a device supporting this table, a corresponding entry will
be added to this table. SEQUENCE OF JnxSecAccessPortVlanEntry .1.3.6.1.4.1.2636.3.40.1.2.1.1.1 |
jnxSecAccessPortVlanEntryA row instance contains whether DHCP Snooping and Dynamic
ARP Inspection at each existing VLAN is enabled or disabled. JnxSecAccessPortVlanEntry .1.3.6.1.4.1.2636.3.40.1.2.1.1.1.1 |
jnxSecAccessVlanNameThis object indicates the VLAN name on which Dhcp Snooping
feature and Dynamic ARP Inspection is enabled. DisplayString .1.3.6.1.4.1.2636.3.40.1.2.1.1.1.1.1 |
jnxSecAccessVlanDhcpSnoopStatusThis object indicates whether Dhcp Snooping is
enabled in this VLAN.
If this object is 'true', Dhcp Snooping is enabled in the
specified VLAN.
If this object is 'false', Dhcp Snooping is disabled in the
specified VLAN.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2636.3.40.1.2.1.1.1.1.2 |
jnxSecAccessVlanDAIStatusThis object indicates whether Dynamic ARP Inspection is
enabled in this VLAN.
If this object is 'true', Dynamic ARP Inspection is enabled.
If this object is 'false', Dynamic ARP Inspection is disabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2636.3.40.1.2.1.1.1.1.3 |
jnxSecAccessPortIfTableThe table contains the trust state and rate limit of each interface
for DHCP Snooping purpose. The table also contains information on MAC
address limit feature for each interface capable of this feature.
This table also specifies whether IP source guard and MAC source
guard are enabled on each interface. SEQUENCE OF JnxSecAccessPortIfEntry .1.3.6.1.4.1.2636.3.40.1.2.1.1.2 |
jnxSecAccessPortIfEntryA table entry contains the trust state and rate limit of an
interface, MAC address limit for that Interface. It also contains
the action to be undertaken if MAC address limit is exceeded. A table
entry specifies whether IP source guard and MAC source guard are enabled
on the specified interface. JnxSecAccessPortIfEntry .1.3.6.1.4.1.2636.3.40.1.2.1.1.2.1 |
jnxSecAccessdsIfTrustStateThis object indicates whether the interface is trusted for
DHCP Snooping purpose.
If this object is 'true', the interface is trusted.
DHCP packets coming to this interface will be forwarded without
checking.
If this object is 'false', the interface is not trusted. DHCP
packets coming to this interface will be subjected to DHCP checks.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2636.3.40.1.2.1.1.2.1.1 |
jnxSecAccessdsIfRateLimitThis object indicates rate limit value for DHCP Snooping purpose.
If the value of this object is 0, no rate limit is applied for DHCP
traffic at this interface.ro Unsigned32 UNITS "packets per second" .1.3.6.1.4.1.2636.3.40.1.2.1.1.2.1.2 |
jnxSecAccessIfMacLimitThis object specifies the threshold limit for the number of
MAC address entries on this interface.
When the instance value of this object is set to 0, no threshold
limit will be applied for this interfacew and the
corresponding instance value of jnxIfMacLimitExceedAction
of the same row has no effect.ro Unsigned32 .1.3.6.1.4.1.2636.3.40.1.2.1.1.2.1.3 |
jnxSecAccessIfMacLimitExceedThis object specifies the action to be taken by the system for this
interface while the number of MAC addresses has exceeded the value
of jnxIfMacLimit.
This object value is only effective when the corresponding instance
value of jnxIfMacLimit is not set to 0.ro JnxMacLimitExceededAction .1.3.6.1.4.1.2636.3.40.1.2.1.1.2.1.4 |
jnxSecAccessIfIpSrcGuardStatusThis object indicates whether IP Source Guard is enabled on
the specified interface.
If this object is 'true', then IP Source Guard is enabled on the
specified interface.
If this object is 'false', then IP Source Guard is disabled on
the specified interface.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2636.3.40.1.2.1.1.2.1.5 |
jnxSecAccessIfMacSrcGuardStatusThis object indicates whether Mac Source Guard is enabled on
the specified interface.
If this object is 'true', then Mac Source Guard is enabled on the
specified interface.
If this object is 'false', then IP Source Guard is disabled on
the specified interface.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2636.3.40.1.2.1.1.2.1.6 |
jnxStormCtlTableStorm control monitors each type of traffic level on an interface.
If traffic level exceeds the threshold value(rising threshold),
switch will drop all packets of that type until traffic level drops
to the threshold level (falling threshold). If traffic rate for a
particular type exceeds the rising threshold, action will be taken
to shutdown or add configured filter on the port.
This table describes the traffic type for each interface, the rising
threshold, falling threshold and the action to be taken if the traffic
exceeds the rising threshold. SEQUENCE OF JnxStormCtlEntry .1.3.6.1.4.1.2636.3.40.1.2.1.1.3 |
jnxStormCtlEntryAn entry contains the interface index,traffic type for the interface,
the rising threshold, falling threshold and the action to be taken
if the traffic exceeds the rising threshold. JnxStormCtlEntry .1.3.6.1.4.1.2636.3.40.1.2.1.1.3.1 |
jnxStormCtlIfTrafficTypeThis object specifies the traffic type on the particular
interface. Value 1 specifies that it is broadcast traffic,
value 2 specifies that it is multicast traffic and
value 3 specifies that it is unicast traffic. Enumeration .1.3.6.1.4.1.2636.3.40.1.2.1.1.3.1.1 |
jnxStormCtlRisingThresholdThis object specifies the rising threshold value in packets
per second. The storm control action is occurs when the traffic
exceeds this threshold value.ro Integer32 UNITS "packets per second" .1.3.6.1.4.1.2636.3.40.1.2.1.1.3.1.2 |
jnxStormCtlFallingThresholdThis object specifies the falling threshold value in packets
per second. The storm control action ceases when the traffic
drops to this threshold value.ro Integer32 UNITS "packets per second" .1.3.6.1.4.1.2636.3.40.1.2.1.1.3.1.3 |
jnxStormCtlActionThis object specifies the action to be taken, when traffic exceeds
rising threshold value. Value 1 specifies that the action taken is
to shutdown the port. Value 2 specifies that the action taken is to
apply a policy filter on the interface for the given packet type.
Default is to shutdown(1) the port.ro Enumeration .1.3.6.1.4.1.2636.3.40.1.2.1.1.3.1.4 |
More MIBs from Juniper Networks
Browse all Juniper NetworksMIBs →JUNIPER-CHASSIS-DEFINES-MIB
The JUNIPER-CHASSIS-DEFINES-MIB establishes the foundational Object Identifier (OID) namespace and data type definitions required to map and identify specific Juniper chassis hardware platforms and their internal physical components. This module serves as the structural prerequisite for the JUNIPER-CHASSIS-MIB, enabling the retrieval of inventory data, component status, and hardware topology details for Juniper MX, PTX, and EX series devices.
5187 objects→
JUNIPER-MOBILE-GATEWAY-GTP-MIB
The JUNIPER-MOBILE-GATEWAY-GTP-MIB provides SNMP objects for monitoring GTP (GPRS Tunneling Protocol) session states, tunnel endpoints, and protocol counters on Juniper mobile gateway platforms. It enables administrators to track GTP-C and GTP-U traffic statistics, error conditions, and active tunnel metrics essential for validating mobile core network connectivity.
1616 objects→
GGSN-MIB
SNMP MIB module
789 objects→
JUNIPER-IFOPTICS-MIB
SNMP MIB module
754 objects→
JUNIPER-MOBILE-GATEWAY-SGW-GTP-MIB
The JUNIPER-MOBILE-GATEWAY-SGW-GTP-MIB module enables monitoring of GTP (GPRS Tunneling Protocol) session states and traffic counters on Juniper Mobile Gateway Serving Gateways (SGW). It provides specific objects for tracking GTP-C and GTP-U tunnel establishment, teardown, and packet throughput metrics essential for validating mobile core network connectivity.
683 objects→
JUNIPER-IPSEC-FLOW-MON-MIB
The JUNIPER-IPSEC-FLOW-MON-MIB monitors Juniper Networks IPsec VPN infrastructure by exposing tables for IKE tunnels, IPSec tunnels, and IPSec security associations to track tunnel states, association parameters, and flow statistics. This module facilitates the management of IPsec security policies and the operational status of encrypted traffic flows within the device's security architecture.
453 objects→