BAYSTACK-IPV6-FIRST-HOP-SEC-MIB
- Registered at
- 1.3.6.1.4.1.45.5.45
- Last updated
- 2014-01-17 00:00
- Organization
- Avaya
- Revisions
- 2014-03-20 00:00, 2014-01-17 00:00, 2013-11-18 00:00, 2013-10-11 00:00, 2013-08-20 00:00, 2013-05-27 00:00
- Namespace
- nortel
- Source file
BAYSTACK-IPV6-FIRST-HOP-SEC-MIB- Digest
sha256:04f981f3f4973e8b09d46d6896f96a79ab39ae22013acdf5044c0246ae1f94ce
Description
This MIB module is used for IPv6 First Hop Security configuration. The purpose of First Hop Security feature is to take care of the treats caused by the immediate node to another immediate node attached to the same First Hop Security device.
Contact
avaya.com
Imports
| From | Symbols |
|---|---|
| IF-MIB | InterfaceIndex |
| IPV6-TC | Ipv6Address |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP |
| SNMPv2-SMI | Counter32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, iso |
| SNMPv2-TC | DisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue |
| SYNOPTICS-ROOT-MIB | bayStackMibs |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
BAYSTACK-IPV6-FIRST-HOP-SEC-MIB IANAifType-MIB IF-MIB IPV6-TC SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC SYNOPTICS-ROOT-MIB
Textual conventions
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| FhsAccessType TEXTUAL-CONVENTION A value indicating an access-type. | current | |||
| FhsDhcpv6GuardDeviceRole TEXTUAL-CONVENTION A value indicating dhcp-guard device role. | current | |||
| FhsListName TEXTUAL-CONVENTION First Hop Security list name. | current | |||
| FhsRaGuardDeviceRole TEXTUAL-CONVENTION A value indicating a role of ra-guard device. | current | |||
| FhsRaManagedConfigFlag TEXTUAL-CONVENTION A value indicating ra-guard managed config flag. | current | |||
| FhsRaRouterPrefMax TEXTUAL-CONVENTION A value indicating ra-guard router max preference. | current | |||
| FhsSbtState TEXTUAL-CONVENTION A value indicating state of SBT entry | current | |||
| FhsSbtType TEXTUAL-CONVENTION A value indicating SBT entry learn type | current |
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| bsIpv6FirstHopSecNotifications OBJECT-IDENTITY | 1.3.6.1.4.1.45.5.45.0 | |||
| bsIpv6FirstHopSecObjects OBJECT-IDENTITY | 1.3.6.1.4.1.45.5.45.1 | |||
| bsIpv6FHSScalVar OBJECT-IDENTITY | 1.3.6.1.4.1.45.5.45.1.1 | |||
| bsIpv6FHSAdmin OBJECT-TYPE First Hop Security Global Admin status | 1.3.6.1.4.1.45.5.45.1.1.1 | TruthValue | read-write | current |
| bsIpv6FHSRagAdmin OBJECT-TYPE RA guard Global Admin status | 1.3.6.1.4.1.45.5.45.1.1.2 | TruthValue | read-write | current |
| bsIpv6FHSDhcpv6gAdmin OBJECT-TYPE DHCPv6 guard Global Admin status | 1.3.6.1.4.1.45.5.45.1.1.3 | TruthValue | read-write | current |
| bsIpv6FHSNdInspectAdmin OBJECT-TYPE ND Inspection Global Admin status | 1.3.6.1.4.1.45.5.45.1.1.4 | TruthValue | read-write | current |
| bsIpv6FHSMaxDynSbtEntries OBJECT-TYPE Maximum Dynamic SBT entries allowed | 1.3.6.1.4.1.45.5.45.1.1.5 | INTEGER (0..1024) | read-write | current |
| bsIpv6FHSSbtReachLifeTime OBJECT-TYPE SBT Reachable state life time in seconds starts from 30 till 86400. Configure timer as 0 will not expire this timer | 1.3.6.1.4.1.45.5.45.1.1.6 | INTEGER (0..864000) | read-write | current |
| bsIpv6FHSSbtStaleLifeTime OBJECT-TYPE SBT Stale state life time in seconds starts from 30 till 86400. Configure timer as 0 will not expire this timer | 1.3.6.1.4.1.45.5.45.1.1.7 | INTEGER (0..86400) | read-write | current |
| bsIpv6FHSSbtDownLifeTime OBJECT-TYPE SBT Down state life time in seconds starts from 30 till 86400. Configure timer as 0 will not expire this timer | 1.3.6.1.4.1.45.5.45.1.1.8 | INTEGER (0..86400) | read-write | current |
| bsIpv6FHSSbtTblOverFlow OBJECT-TYPE SBT Table Overflow due to the maximum SBT entry restriction | 1.3.6.1.4.1.45.5.45.1.1.9 | Counter32 | read-only | current |
| bsIpv6FHSIpv6AccessListTable OBJECT-TYPE Table contains the list of IPv6 Access List used for Frist Hop Security Feature. | 1.3.6.1.4.1.45.5.45.1.2 | not-accessible | current | |
| bsIpv6FHSIpv6AccessListEntry OBJECT-TYPE Entry contains the list of IPv6 Access List used for Frist Hop Security Feature. | 1.3.6.1.4.1.45.5.45.1.2.1 | not-accessible | current | |
| bsIpv6FHSIpv6AccessListName OBJECT-TYPE IPv6 Access List Name | 1.3.6.1.4.1.45.5.45.1.2.1.1 | FhsListName | not-accessible | current |
| bsIpv6FHSIpv6AccessListPrefix OBJECT-TYPE IPv6 Prefix attached to this IPv6 access list Id | 1.3.6.1.4.1.45.5.45.1.2.1.2 | Ipv6Address | not-accessible | current |
| bsIpv6FHSIpv6AccessListPrefixMaskLen OBJECT-TYPE IPv6 Prefix mask length attached to this IPv6 access list Id | 1.3.6.1.4.1.45.5.45.1.2.1.3 | INTEGER (0..128) | not-accessible | current |
| bsIpv6FHSIpv6AccessListMaskLenFrom OBJECT-TYPE IPv6 Prefix mask length range from | 1.3.6.1.4.1.45.5.45.1.2.1.4 | INTEGER (0..128) | read-write | current |
| bsIpv6FHSIpv6AccessListMaskLenTo OBJECT-TYPE IPv6 Prefix mask length range to | 1.3.6.1.4.1.45.5.45.1.2.1.5 | INTEGER (0..128) | read-write | current |
| bsIpv6FHSIpv6AccessListAccessType OBJECT-TYPE IPv6 IP Access Type Allow or Deny | 1.3.6.1.4.1.45.5.45.1.2.1.6 | FhsAccessType | read-write | current |
| bsIpv6FHSIpv6AccessListRowStatus OBJECT-TYPE IPv6 IP Access List row status | 1.3.6.1.4.1.45.5.45.1.2.1.7 | RowStatus | read-write | current |
| bsIpv6FHSMacAccessListTable OBJECT-TYPE Table contains the list of MAC Access List used for Frist Hop Security Feature. | 1.3.6.1.4.1.45.5.45.1.3 | not-accessible | current | |
| bsIpv6FHSMacAccessListEntry OBJECT-TYPE Entry contains the list of MAC Access List used for Frist Hop Security Feature. | 1.3.6.1.4.1.45.5.45.1.3.3 | not-accessible | current | |
| bsIpv6FHSMacAccessListName OBJECT-TYPE MAC Access List Name | 1.3.6.1.4.1.45.5.45.1.3.3.1 | FhsListName | not-accessible | current |
| bsIpv6FHSMacAccessListMac OBJECT-TYPE MAC address attached to this MAC access list Id | 1.3.6.1.4.1.45.5.45.1.3.3.2 | MacAddress | not-accessible | current |
| bsIpv6FHSMacAccessListAccessType OBJECT-TYPE MAC Access Type Allow or Deny | 1.3.6.1.4.1.45.5.45.1.3.3.3 | FhsAccessType | read-write | current |
| bsIpv6FHSMacAccessListRowStatus OBJECT-TYPE MAC Access List row status | 1.3.6.1.4.1.45.5.45.1.3.3.4 | RowStatus | read-write | current |
| bsIpv6FHSPolicyPortMapTable OBJECT-TYPE Table contains the list of First Hop security Policies attached to the interface. | 1.3.6.1.4.1.45.5.45.1.4 | not-accessible | current | |
| bsIpv6FHSPolicyPortMapEntry OBJECT-TYPE Entry contains the list of First Hop security Policies attached to the interface. | 1.3.6.1.4.1.45.5.45.1.4.1 | not-accessible | current | |
| bsIpv6FHSPolicyPortMapIfIndex OBJECT-TYPE Interface index number | 1.3.6.1.4.1.45.5.45.1.4.1.1 | InterfaceIndex | not-accessible | current |
| bsIpv6FHSPolicyPortMapDhcpv6gPolicyName OBJECT-TYPE DHCPv6 guard policy name | 1.3.6.1.4.1.45.5.45.1.4.1.2 | FhsListName | read-write | current |
| bsIpv6FHSPolicyPortMapRagPolicyName OBJECT-TYPE RA guard policy name | 1.3.6.1.4.1.45.5.45.1.4.1.3 | FhsListName | read-write | current |
| bsIpv6FHSPolicyPortMapNDAdmin OBJECT-TYPE Enable/Disable ND-inspection | 1.3.6.1.4.1.45.5.45.1.4.1.4 | TruthValue | read-write | current |
| bsIpv6FHSPolicyPortMapSbtDynLearnAdmin OBJECT-TYPE Enable/Disable learning dynamic SBT entry | 1.3.6.1.4.1.45.5.45.1.4.1.5 | TruthValue | read-write | current |
| bsIpv6FHSPolicyPortMapTotDhcpv6PktRcv OBJECT-TYPE Total Number of Dhcpv6 packets Received | 1.3.6.1.4.1.45.5.45.1.4.1.6 | Counter32 | read-only | current |
| bsIpv6FHSPolicyPortMapTotDhcpv6PktDropped OBJECT-TYPE Total Number of Dhcpv6 packets dropped | 1.3.6.1.4.1.45.5.45.1.4.1.7 | Counter32 | read-only | current |
| bsIpv6FHSPolicyPortMapTotRaPktRcv OBJECT-TYPE Total Number of RA packets Received | 1.3.6.1.4.1.45.5.45.1.4.1.8 | Counter32 | read-only | current |
| bsIpv6FHSPolicyPortMapTotRaPktDropped OBJECT-TYPE Total Number of RA packets dropped | 1.3.6.1.4.1.45.5.45.1.4.1.9 | Counter32 | read-only | current |
| bsIpv6FHSPolicyPortMapTotNdPktRcv OBJECT-TYPE Total Number of ND Packets Received | 1.3.6.1.4.1.45.5.45.1.4.1.10 | Counter32 | read-only | current |
| bsIpv6FHSPolicyPortMapTotNdPktDropped OBJECT-TYPE Total Number of ND Packets Dropped | 1.3.6.1.4.1.45.5.45.1.4.1.11 | Counter32 | read-only | current |
| bsIpv6FHSPolicyPortMapClearDhcpGuardStats OBJECT-TYPE First Hop security clear stats: bsIpv6FHSPolicyPortMapTotDhcpv6PktRcv and bsIpv6FHSPolicyPortMapTotDhcpv6PktDropped | 1.3.6.1.4.1.45.5.45.1.4.1.12 | TruthValue | read-write | current |
| bsIpv6FHSPolicyPortMapClearRaGuardStats OBJECT-TYPE First Hop security clear stats: bsIpv6FHSPolicyPortMapTotRaPktRcv and bsIpv6FHSPolicyPortMapTotRaPktDropped | 1.3.6.1.4.1.45.5.45.1.4.1.13 | TruthValue | read-write | current |
| bsIpv6FHSPolicyPortMapClearNDInspectStats OBJECT-TYPE First Hop security clear stats: bsIpv6FHSPolicyPortMapTotNdPktRcv, bsIpv6FHSPolicyPortMapTotNdPktDropped and bsIpv6FHSPolicyPortMapTotSbtEntDropped | 1.3.6.1.4.1.45.5.45.1.4.1.14 | TruthValue | read-write | current |
| bsIpv6FHSPolicyPortMapRowStatus OBJECT-TYPE First Hop security row status | 1.3.6.1.4.1.45.5.45.1.4.1.15 | RowStatus | read-write | current |
| bsIpv6FHSDhcpv6gPolicyListTable OBJECT-TYPE Table contains the list of DHCPv6 guard Policies used for Hop Security Feature. | 1.3.6.1.4.1.45.5.45.1.5 | not-accessible | current | |
| bsIpv6FHSDhcpv6gPolicyListEntry OBJECT-TYPE Entry contains the list of DHCPv6 guard Policies used for Hop Security Feature. | 1.3.6.1.4.1.45.5.45.1.5.1 | not-accessible | current | |
| bsIpv6FHSDhcpv6gPolicyName OBJECT-TYPE This is the DHCPv6 guard Policy Name | 1.3.6.1.4.1.45.5.45.1.5.1.1 | FhsListName | not-accessible | current |
| bsIpv6FHSDhcpv6gDeviceRole OBJECT-TYPE This is the device role of the received port. If the device role is client and if it receives DHCPv6 reply then those packets should be dropped | 1.3.6.1.4.1.45.5.45.1.5.1.2 | FhsDhcpv6GuardDeviceRole | read-write | current |
| bsIpv6FHSDhcpv6gServerAccessListName OBJECT-TYPE This is the IPv6 access list which will be validating source IPv6 address of the DHCPv6 Reply packet from the server | 1.3.6.1.4.1.45.5.45.1.5.1.3 | FhsListName | read-write | current |
| bsIpv6FHSDhcpv6gReplyPrefixListName OBJECT-TYPE Validate the prefix information in the DHCPv6 reply against the configured reply prefix list. | 1.3.6.1.4.1.45.5.45.1.5.1.4 | FhsListName | read-write | current |
| bsIpv6FHSDhcpv6gPrefLimitMin OBJECT-TYPE This is check against the DHCPv6 server / relay router preference. If the received router preference is less than the configured router preference than drop the packet | 1.3.6.1.4.1.45.5.45.1.5.1.5 | INTEGER (0..255) | read-write | current |
| bsIpv6FHSDhcpv6gPrefLimitMax OBJECT-TYPE This is check against the DHCPv6 server / relay router preference. If the received router preference is greater than the configured router preference than drop the packet | 1.3.6.1.4.1.45.5.45.1.5.1.6 | INTEGER (0..255) | read-write | current |
| bsIpv6FHSDhcpv6gPolicyListRowStatus OBJECT-TYPE DHCPv6 guard policy row status | 1.3.6.1.4.1.45.5.45.1.5.1.7 | RowStatus | read-write | current |
| bsIpv6FHSRagPolicyListTable OBJECT-TYPE Table contains the list of RA guard Policies used for Hop Security Feature. | 1.3.6.1.4.1.45.5.45.1.6 | not-accessible | current | |
| bsIpv6FHSRagPolicyListEntry OBJECT-TYPE Entry contains the list of RA guard Policies used for Hop Security Feature. | 1.3.6.1.4.1.45.5.45.1.6.1 | not-accessible | current | |
| bsIpv6FHSRagPolicyName OBJECT-TYPE RA guard policy Name | 1.3.6.1.4.1.45.5.45.1.6.1.1 | FhsListName | not-accessible | current |
| bsIpv6FHSRagDeviceRole OBJECT-TYPE This is the device role to be checked against | 1.3.6.1.4.1.45.5.45.1.6.1.2 | FhsRaGuardDeviceRole | read-write | current |
| bsIpv6FHSRagIpv6AccessListName OBJECT-TYPE This is the IPv6 access list which will be validating the source IPv6 address of the RA packet | 1.3.6.1.4.1.45.5.45.1.6.1.3 | FhsListName | read-write | current |
| bsIpv6FHSRagIpv6PrefixListName OBJECT-TYPE This is the IPv6 access list which will be validating the Prefix present in the RA packet | 1.3.6.1.4.1.45.5.45.1.6.1.4 | FhsListName | read-write | current |
| bsIpv6FHSRagMacListName OBJECT-TYPE This is the MAC access list which will be validating the source MAC of the received RA packet | 1.3.6.1.4.1.45.5.45.1.6.1.5 | FhsListName | read-write | current |
| bsIpv6FHSRagManagedConfigFlag OBJECT-TYPE In the RA packets, there is an M flag (Managed Address configuration Flag) which is set indicating that the address assignments are available via DHCPv6. This means that DHCPv6 would take care of the interface address assignment in that LAN segment. If filtering policy is enabled then all the RA packets with M flag not set will be dropped. By default this check will be ignored | 1.3.6.1.4.1.45.5.45.1.6.1.6 | FhsRaManagedConfigFlag | read-write | current |
| bsIpv6FHSRagRouterPrefMax OBJECT-TYPE In the RA packet there is router preference information is available in the Flags. This could be HIGH or LOW or MEDIUM. This filtering policy option would verify that the advertised default router preference parameter value is lower than or equal to a specified limit | 1.3.6.1.4.1.45.5.45.1.6.1.7 | FhsRaRouterPrefMax | read-write | current |
| bsIpv6FHSRagHopLimitMin OBJECT-TYPE This is the minimum value check for the hop limit value present in the RA packet. If the value is less than configured minimum value then drop the RA packet | 1.3.6.1.4.1.45.5.45.1.6.1.8 | INTEGER (0..255) | read-write | current |
| bsIpv6FHSRagHopLimitMax OBJECT-TYPE This is the maximum value check for the hop limit value present in the RA packet. If the value is greater than configured maximum value then drop the RA packet | 1.3.6.1.4.1.45.5.45.1.6.1.9 | INTEGER (0..255) | read-write | current |
| bsIpv6FHSRagPolicyListRowStatus OBJECT-TYPE RA guard policy row status | 1.3.6.1.4.1.45.5.45.1.6.1.10 | RowStatus | read-write | current |
| bsIpv6FHSSbtTable OBJECT-TYPE Table contains the list of SBT entries learnt Dynamically and statically configure. | 1.3.6.1.4.1.45.5.45.1.7 | not-accessible | current | |
| bsIpv6FHSSbtListEntry OBJECT-TYPE Entry contains the list of SBT entries. | 1.3.6.1.4.1.45.5.45.1.7.1 | not-accessible | current | |
| bsIpv6FHSSbtInterfaceIndex OBJECT-TYPE Derive unit and port number from this ifindex | 1.3.6.1.4.1.45.5.45.1.7.1.1 | InterfaceIndex | not-accessible | current |
| bsIpv6FHSSbtVlan OBJECT-TYPE VLAN | 1.3.6.1.4.1.45.5.45.1.7.1.2 | INTEGER (1..4094) | not-accessible | current |
| bsIpv6FHSSbtSrcIp OBJECT-TYPE Source IPv6 Address | 1.3.6.1.4.1.45.5.45.1.7.1.3 | Ipv6Address | not-accessible | current |
| bsIpv6FHSSbtLinkLayerAddress OBJECT-TYPE Link Layer MAC address | 1.3.6.1.4.1.45.5.45.1.7.1.4 | MacAddress | read-write | current |
| bsIpv6FHSSbtLearnType OBJECT-TYPE SBT Entry Type | 1.3.6.1.4.1.45.5.45.1.7.1.5 | FhsSbtType | read-only | current |
| bsIpv6FHSSbtLearnPriority OBJECT-TYPE SBT Entry priority | 1.3.6.1.4.1.45.5.45.1.7.1.6 | Integer32 | read-only | current |
| bsIpv6FHSSbtLearnState OBJECT-TYPE SBT Entry state | 1.3.6.1.4.1.45.5.45.1.7.1.7 | FhsSbtState | read-only | current |
| bsIpv6FHSSbtLearnAge OBJECT-TYPE Time Elapsed after being in this state | 1.3.6.1.4.1.45.5.45.1.7.1.8 | Integer32 | read-only | current |
| bsIpv6FHSSbtRowStatus OBJECT-TYPE SBT entry row status | 1.3.6.1.4.1.45.5.45.1.7.1.9 | RowStatus | read-write | current |
| bsIpv6NDTrapNotificationObjects OBJECT-IDENTITY | 1.3.6.1.4.1.45.5.45.1.8 | |||
| bsIpv6NDInspectionNotificationClientMACAddr OBJECT-TYPE This value indicates the source MAC Address of a dropped ND inspection packet. | 1.3.6.1.4.1.45.5.45.1.8.1 | MacAddress | accessible-for-notify | current |
| bsIpv6NDInspectionNotificationMsgType OBJECT-TYPE This value indicates the message type of a dropped ND packet. | 1.3.6.1.4.1.45.5.45.1.8.2 | INTEGER {ipv6NDNS(1), ipv6NDNA(2), ipv6NDRS(3), ipv6NDRA(4), ipv6NDRedir(5)} | accessible-for-notify | current |
| bsIpv6FHSNDInterfaceIndex OBJECT-TYPE This value indicates the unit and port number of a dropped ND inspection packet. | 1.3.6.1.4.1.45.5.45.1.8.3 | InterfaceIndex | accessible-for-notify | current |
| bsIpv6FHSNDIpv6Address OBJECT-TYPE This value indicates the Ipv6 source address of a dropped ND inspection packet. | 1.3.6.1.4.1.45.5.45.1.8.4 | Ipv6Address | accessible-for-notify | current |
| bsIpv6FHSNDVlanID OBJECT-TYPE This value indicates the Vlan ID of a dropped ND inspection packet. | 1.3.6.1.4.1.45.5.45.1.8.5 | INTEGER (1..4094) | accessible-for-notify | current |
Notifications
| Name | OID | Status |
|---|---|---|
| bsIpv6NDSBTTableFull NOTIFICATION-TYPE This notification is generated when an attempt is made to add a new SBT entry when the Secure Binding Table is full. The value of bsIpv6NDInspectionNotificationClientMACAddr represents the MAC address that could not be added to the SBT table. This notification also indicates that additional packets will not be added to the SBT and will be dropped. | 1.3.6.1.4.1.45.5.45.0.1 | current |
| bsIpv6NDNotificationsUntrustedPort NOTIFICATION-TYPE This notification is generated when an ND message is suspected to be generated by the untrusted system/host. | 1.3.6.1.4.1.45.5.45.0.2 | current |