PORT-SECURITY-MIB
AI MIB Summary
The PORT-SECURITY-MIB monitors and manages Layer 2 port security configurations, including MAC address table limits, violation modes, and secure address counts, specifically for proprietary enterprise network devices. This module enables administrators to track dynamic MAC learning states and enforce access control policies at the switch port level to prevent unauthorized device attachment.
The structure of port security for the proprietary enterprise.
Main OID:
swPortSecMIB.1.3.6.1.4.1.171.12.63
38
Objects
Active
Status
3
Dependencies
Imported Objects
Objects
38 total| Object Name |
|---|
swPortSecMIBThe structure of port security for the proprietary enterprise. MODULE-IDENTITY .1.3.6.1.4.1.171.12.63 |
swPortSecCtrl OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.63.1 |
swPortSecTrapLogStateWhen enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, traps will be sent out and the relevant information will be logged into the system.rw Enumeration .1.3.6.1.4.1.171.12.63.1.1 |
swPortSecSysMaxLernAddrIndicates the maximum number of addresses to be authorized by port security on the system. A value of -1 means no-limit. The default value is no-limit. The max entry range is (1..N). The value N means the max number and is determined by the project itself.rw INTEGER .1.3.6.1.4.1.171.12.63.1.2 |
swPortSecTrapStateWhen enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, trap will be sent out.rw Enumeration .1.3.6.1.4.1.171.12.63.1.3 |
swPortSecLogStateWhen enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, the relevant information will be logged into the system.rw Enumeration .1.3.6.1.4.1.171.12.63.1.4 |
swPortSecInfo OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.63.2 |
swPortSecMgmt OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.63.3 |
swPortSecMgmtByPort OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.63.3.1 |
swPortSecPortTableA port security feature which controls the address learning capability and traffic forwarding decisions. Each port can be enabled or disabled for this function. When it is enabled and a number is given said N, which allows N addresses to be learned on this port, the first N learned addresses are locked at this port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this port. SEQUENCE OF SwPortSecPortEntry .1.3.6.1.4.1.171.12.63.3.1.1 |
swPortSecPortEntryA list of information contained in the swPortSecPortTable. SwPortSecPortEntry .1.3.6.1.4.1.171.12.63.3.1.1.1 |
swPortSecPortIndexIndicates the secured port to lock address learning. INTEGER .1.3.6.1.4.1.171.12.63.3.1.1.1.1 |
swPortSecPortMaxLernAddrIndicates the allowable number of addresses to be learned on this port. The max entry range is (0..N). The value N means the max number and is determined by the project itself.rw INTEGER .1.3.6.1.4.1.171.12.63.3.1.1.1.2 |
swPortSecPortLockAddrModeIndicates the mode of locking address. In deleteOnTimeout(2) mode, the locked addresses can be aged out after the aging timer expires. In this mode, when the locked address is aged out, the number of addresses that can be learned has to be increased by one. In deleteOnReset (3) mode, locked addresses never age out unless the system restarts which will prevent port movement or intrusion.rw Enumeration .1.3.6.1.4.1.171.12.63.3.1.1.1.3 |
swPortSecPortAdmStateIndicates the administration state of the locking address.rw Enumeration .1.3.6.1.4.1.171.12.63.3.1.1.1.4 |
swPortSecPortClearCtrlUsed to clear port security entries by port. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.rw Enumeration .1.3.6.1.4.1.171.12.63.3.1.1.1.5 |
swPortSecPortViolationActionUsed to indicates the action when violation occurs. When the number of secure MAC address reaches the maximum learning number on the port, for drop action, new entry will be dropped and for shutdown action, the port will be shut down and enter error-disabled state immediately.rw Enumeration .1.3.6.1.4.1.171.12.63.3.1.1.1.6 |
swPortSecMgmtByVLAN OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.63.3.2 |
swPortSecVLANTableA port security feature which controls the address leaning capability. When number is given said N, which allows N addresses to be learned on this VLAN, the first N learned addresses are locked at this VLAN as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN. SEQUENCE OF SwPortSecVLANEntry .1.3.6.1.4.1.171.12.63.3.2.1 |
swPortSecVLANEntryA list of information contained in the swPortSecVLANTable. SwPortSecVLANEntry .1.3.6.1.4.1.171.12.63.3.2.1.1 |
swPortSecVLANIDIndicates the secured VLAN to lock address learning. INTEGER .1.3.6.1.4.1.171.12.63.3.2.1.1.1 |
swPortSecVLANMaxLernAddrIndicates allowable number of addresses to be learned on this VLAN. A value of -1 means no-limit. The default value is no-limit. The max entry range is (0..N). The value N means the max number and is determined by the project itself.rw INTEGER .1.3.6.1.4.1.171.12.63.3.2.1.1.2 |
swPortSecVLANClearCtrlUsed to clear port security entries by VLAN. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.rw Enumeration .1.3.6.1.4.1.171.12.63.3.2.1.1.3 |
swPortSecMgmtByVLANOnPort OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.63.3.3 |
swPortSecVLANOnPortTableA port security feature which controls the address learning capability. When number is given said N, which allows N addresses to be learned on this VLAN from the special port, the first N learned addresses are locked at this VLAN from the special port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN from the special port. SEQUENCE OF SwPortSecVLANOnPortEntry .1.3.6.1.4.1.171.12.63.3.3.1 |
swPortSecVLANOnPortEntryA list of information contained in the swPortSecVLANOnPortTable. SwPortSecVLANOnPortEntry .1.3.6.1.4.1.171.12.63.3.3.1.1 |
swPortSecVLANOnPortMaxLernAddrIndicates allowable number of addresses to be learned on this VLAN from the special port. A value of -1 means no-limit. The default value is no-limit. Only VLANs with limitations will be displayed in this table. The max entry range is (0..N). The value N means the max number and is determined by the project itself.rw INTEGER .1.3.6.1.4.1.171.12.63.3.3.1.1.1 |
swPortSecVLANOnPortAddCtrlother (1): When user gets this object, it always returns other(1). add (2): Used to configure the VLAN limit from the special port. If 'add' is selected, swPortSecVLANOnPortMaxLernAddr must be set to a valid value except -1.rw Enumeration .1.3.6.1.4.1.171.12.63.3.3.1.1.2 |
swPortSecMgmtByVLANOnPortClearCtrl OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.63.3.3.2 |
swPortSecMgmtByVLANOnPortClearPortIndicates the port.rw INTEGER .1.3.6.1.4.1.171.12.63.3.3.2.1 |
swPortSecMgmtByVLANOnPortClearVIDIndicates the VID.rw INTEGER .1.3.6.1.4.1.171.12.63.3.3.2.2 |
swPortSecMgmtByVLANOnPortClearActionother(1): When user gets this object, it always returns other(1). start(2): Used to clear port security entries by VLAN on the special port.rw Enumeration .1.3.6.1.4.1.171.12.63.3.3.2.3 |
swPortSecEntriesTableThis table is used to show port security entries. SEQUENCE OF SwPortSecEntriesEntry .1.3.6.1.4.1.171.12.63.3.4 |
swPortSecEntriesEntryA list of information contained in the swPortSecEntriesTable. SwPortSecEntriesEntry .1.3.6.1.4.1.171.12.63.3.4.1 |
swPortSecMacSpecifies a MAC address.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.12.63.3.4.1.1 |
swPortSecVIDIndicates the VLAN ID.ro INTEGER .1.3.6.1.4.1.171.12.63.3.4.1.2 |
swPortSecPortIndicates the port.ro INTEGER .1.3.6.1.4.1.171.12.63.3.4.1.3 |
swPortSecDelCtrlUsed to delete this port security entry. Setting this value to 'start' will execute the delete action. Once deleted, the value returns to 'other'.rw Enumeration .1.3.6.1.4.1.171.12.63.3.4.1.4 |