S5-SWITCH-BAYSECURE-MIB
AI MIB Summary
The S5-SWITCH-BAYSECURE-MIB enables SNMP-based monitoring and management of MAC address filtering, port security states, and unauthorized access violation counters on Avaya S5 series network switches. This module facilitates the enforcement of Layer 2 security policies by exposing real-time metrics regarding secure MAC address bindings and associated security event logs.
BaySecure MIB - MAC-based Security MIB
Copyright 1999-2012 Avaya All rights reserved. This Avaya SNMP Management Information Base Specification (Specification) embodies Avaya's confidential and proprietary intellectual property. Avaya retains all title and ownership in the Specification, including any revisions.
This Specification is supplied 'AS IS,' and Avaya makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification.
43
Objects
Active
Status
3
Dependencies
Imported Objects
Objects
43 total| Object Name |
|---|
s5SbsAuth OBJECT IDENTIFIER .1.3.6.1.4.1.45.1.6.5.3 |
RFC1155-SMI Unknown .1.3.6.1.4.1.45.1.6.5.3 |
s5SbsAuthSecurityLockIf s5SbsAuthSecurityLock is locked(2), the agent will refuse
all requests to modify the 'security configuration'.
Objects in s5SbsAuth, the Switch BaySecure MIB Group
that are part of the 'security configuration', includes
s5SbsAuthCtlPartTime, objects in s5SbsAuthCfgTable,
Set requests for all read/write objects in s5SbsAuth group
excluding this object will result in a BadValue return value.ro Enumeration .1.3.6.1.4.1.45.1.6.5.3.1 |
s5SbsAuthCtlPartTimeIf the value of s5SbsAuthCfgActionMode is partitionPort or
partitionPortAndSendTrap, time partition will be done if this
value is greater than 0. The value indicates the duration of
the time for port partitioning in seconds. The default value is
zero. When this value is zero, port remians partitioned until
manually re-enabled.rw INTEGER .1.3.6.1.4.1.45.1.6.5.3.2 |
s5SbsSecurityStatusIndicates whether the switch security feature is enabled or not.rw Enumeration .1.3.6.1.4.1.45.1.6.5.3.3 |
s5SbsSecurityModeThe mode of switch security. singleMACperPort(1) indicates
that the switch is in single-MAC-per-port mode which means it
allows to configure only one MAC address per port. macList(2)
indicates that the switch is in MAC-List mode, user can
configure more than one MAC address per port, the maximum numbers
of MAC address per port vary from switch to switch. autoLearn(3)
indicates that the switch will learn the first MAC address on each
port as an allowed address of that port. Change made between
singleMACperPort(1), macList(2) and autoLearn(3)
will erase all the data in s5SbsAuthCfgTable.rw Enumeration .1.3.6.1.4.1.45.1.6.5.3.4 |
s5SbsSecurityActionAction performed by software when a violation occurs (if
s5SbsSecurityStatus is enabled). The security action specified
here applies to all ports of the switch.
NOTE: da means destination address.
A blocked address will always cause the port to be partitioned
when unauthorized access is attempted. See
s5SbsAuthCfgAccessCtrlType for more information on allowed
and blocked addresses.rw Enumeration .1.3.6.1.4.1.45.1.6.5.3.5 |
s5SbsCurrNodesAllowedThe current number of entries of the nodes allowed in the
s5SbsAuthCfgTable.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.6 |
s5SbsMaxNodesAllowedThe maximum number of entries of the nodes allowed in the
s5SbsAuthCfgTable.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.7 |
s5SbsCurrNodesBlockedThe current number of entries of the nodes blocked in the
s5SbsAuthCfgTable.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.8 |
s5SbsMaxNodesBlockedThe maximum number of entries of the nodes blocked
in the s5SbsAuthCfgTable.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.9 |
s5SbsAuthCfgTableA table containing a list of boards and ports and MAC
addresses that constitute the security configuration. SEQUENCE OF S5SbsAuthCfgEntry .1.3.6.1.4.1.45.1.6.5.3.10 |
s5SbsAuthCfgEntryAn entry in this table indicates the security
configuration for a specified MAC address and a specified
port and a specified board. A SNMP SET PDU for a row of the
s5SbsAuthCfgTable requires the entired sequence of the
MIB Objects in each s5SbsAuthCfgEntry stored in one PDU.
Otherwise, GENERR return-value will be returned. S5SbsAuthCfgEntry .1.3.6.1.4.1.45.1.6.5.3.10.1 |
s5SbsAuthCfgBrdIndxThe index of the slot containing the board on which the
port is located. This value is meaningful
only if s5SbsAuthCfgSecureList value is zero.
For other SecureList values it should have the value of zero.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.10.1.1 |
s5SbsAuthCfgPortIndxThe index of the port on the board. This value is meaningful
only if s5SbsAuthCfgSecureList value is zero.
For other SecureList values it should have the value of zero.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.10.1.2 |
s5SbsAuthCfgMACIndxThe index of source MAC address of allowed station or
not-allowed station.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.45.1.6.5.3.10.1.3 |
s5SbsAuthCfgAccessCtrlTypeThis Node Access Control Type represents whether
the node entry is node allowed or node blocked type.
A MAC address may be allowed on multiple ports.rw Enumeration .1.3.6.1.4.1.45.1.6.5.3.10.1.4 |
s5SbsAuthCfgStatusThe status of the AuthCfg entry. The primary use of
this object is for modifying the AuthCfg table. Values
that can be written create(2), delete(3), modify(4).
Values that can be read: valid(1). Setting this entry
to delete(3) causes the entry to be deleted from the
table. Setting a new entry with create(2) causes the
entry to be created in the table. Setting an entry with
modify(4) causes the entry to be modified. The response
to a get request or get-next request will always indicate
a status of valid (1), since invalid entries are removed
from the table.rw Enumeration .1.3.6.1.4.1.45.1.6.5.3.10.1.5 |
s5SbsAuthCfgSecureListThe index of the security list. This value is meaningful
only if s5SbsAuthCfgBrdIndx and s5SbsAuthCfgPortIndx values
are zero. For other board and port index values
it should have the value of zero. This value is used
as an index into s5SbsSecurityListTable.
The corresponding MAC Address of this entry is allowed or blocked
on all the ports of that port list.rw INTEGER .1.3.6.1.4.1.45.1.6.5.3.10.1.6 |
s5SbsAuthStatusTableA table containing a snapshot of the authorized boards
and ports status data collection. Port security
information consists of an action to be performed when
an unAuthorized station is detected and the current
security status of a port. SEQUENCE OF S5SbsAuthStatusEntry .1.3.6.1.4.1.45.1.6.5.3.11 |
s5SbsAuthStatusEntryAn entry in this table may represent a single MAC address,
all MAC addresses on a single port, a single port,
all the ports on a single board, a particuler port on all
the boards, or all the ports on all the boards. S5SbsAuthStatusEntry .1.3.6.1.4.1.45.1.6.5.3.11.1 |
s5SbsAuthStatusBrdIndxThe index of the board. This corresponds to the index of
the slot containing the board if the index is greater
than zero. A zero index is a wild card.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.11.1.1 |
s5SbsAuthStatusPortIndxThe index of the port on the board. This corresponds to
the index of the last manageable port on the board if
the index is greater than zero. A zero index is a wild
card.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.11.1.2 |
s5SbsAuthStatusMACIndxThe index of MAC address on the port. This corresponds to
the index of the MAC address on the port if
the index is greater than zero. A zero index is a wild
card.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.45.1.6.5.3.11.1.3 |
s5SbsCurrentAccessCtrlTypeThis Node Access Control Type represents whether
the node entry is node allowed or node blocked type.ro Enumeration .1.3.6.1.4.1.45.1.6.5.3.11.1.4 |
s5SbsCurrentActionModeAn integer value representing the type of information
contained in this s5SbsAuthStatusEntry.
noAction(1) represents that port does not have any security
assigned or the security is turned off.
partitionPort(2) represents port is partitioned.
partitionPortAndsendTrap(3) represents port is partitioned
and a trap will be sent to trap receive station(s).
daFiltering(4) represents port will filter out the frames with
the desitnation address field is the MAC address of unauthorized
station.
daFilteringAndsendTrap(5) represents port will filter out the
frames with the desitnation address field is the MAC address
of unauthorized station and a trap will be sent to trap receive
station(s).
sendtrap(6) represents a trap will be sent to trap receive station(s).
partitionPortAnddaFiltering(7) represents port is partitioned and
port will filter out the frames with the destination address field
is the MAC address of unauthorized station.
partitionPortdaFilteringAndsendTrap(8) represents port is partitioned,
port will filter out the frames with the destination address field
is the MAC address of unauthorized station and a trap will be sent to
trap receive station(s).ro Enumeration .1.3.6.1.4.1.45.1.6.5.3.11.1.5 |
s5SbsCurrentPortSecurStatusThis represents the current port security status.
If s5SbsSecurityStatus is disable, notApplicable(1) will
be returned. The port in a normal situation returns the
status with portSecure(2). portPartition(3) will be returned
only if the port is partitioned.ro Enumeration .1.3.6.1.4.1.45.1.6.5.3.11.1.6 |
s5SbsViolationStatusTableA table containing a list of boards, ports where
network access violations have occurred. Information
also contains the offending MAC addrersses. SEQUENCE OF S5SbsViolationStatusEntry .1.3.6.1.4.1.45.1.6.5.3.12 |
s5SbsViolationStatusEntryAn entry in this table S5SbsViolationStatusEntry .1.3.6.1.4.1.45.1.6.5.3.12.1 |
s5SbsViolationStatusBrdIndxThe index of the board. This corresponds to the
slot containing the board. This index will be 1 where
it is not applicable, e.g., ByaStack 303/304.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.12.1.1 |
s5SbsViolationStatusPortIndxThe index of the port on the board. This corresponds to
the port on which a security violation was seen.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.12.1.2 |
s5SbsViolationStatusMACAddressThe MAC address of the device attempting unauthorized
network access. (MAC addrees-based security)ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.45.1.6.5.3.12.1.3 |
s5SbsMgmViolationTypeType of management access attempted when the violation
occurred.ro Enumeration .1.3.6.1.4.1.45.1.6.5.3.13 |
s5SbsMgmViolationIpAddressIP Address of the station attempting unauthorized
management access.ro IpAddress .1.3.6.1.4.1.45.1.6.5.3.14 |
s5SbsPortSecurityStatusThe set of ports for which security is enabled.
The bitwise AND of s5SbsPortSecurityStatus and
s5SbsPortLearnStatus must be the empty set.rw PortSet .1.3.6.1.4.1.45.1.6.5.3.15 |
s5SbsPortLearnStatusThe set of ports for which auto learning is enabled.rw PortSet .1.3.6.1.4.1.45.1.6.5.3.16 |
s5SbsCurrSecurityListsThe current number of entries of the Security lists in the
s5SbsSecurityListTable.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.17 |
s5SbsMaxSecurityListsThe maximum number of entries of the Security lists in the
s5SbsSecurityListTable.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.18 |
s5SbsSecurityListTableA table containing a list of Security port lists. SEQUENCE OF S5SbsSecurityListEntry .1.3.6.1.4.1.45.1.6.5.3.19 |
s5SbsSecurityListEntryAn entry in this table S5SbsSecurityListEntry .1.3.6.1.4.1.45.1.6.5.3.19.1 |
s5SbsSecurityListIndxThe index of the security list. This corresponds to the
Security port list which can be used as index into
s5SbsAuthCfgTable.ro INTEGER .1.3.6.1.4.1.45.1.6.5.3.19.1.1 |
s5SbsSecurityListMembersThe set of ports that are currently members in
this Port list.rw PortSet .1.3.6.1.4.1.45.1.6.5.3.19.1.2 |
s5SbsSecurityListStatusThe status of the SecurityList entry. The primary use of
this object is for modifying the SecurityList table. Values
that can be written create(2), delete(3), modify(4).
Values that can be read: valid(1). Setting this entry
to delete(3) causes the entry to be deleted from the
table. Setting a new entry with create(2) causes the
entry to be created in the table. Setting an entry with
modify(4) causes the entry to be modified. The response
to a get request or get-next request will always indicate
a status of valid (1), since invalid entries are removed
from the table.rw Enumeration .1.3.6.1.4.1.45.1.6.5.3.19.1.3 |