DLINKSW-PORT-SECURITY-MIB
- Registered at
- 1.3.6.1.4.1.171.14.8
- Last updated
- 2013-07-30 00:00
- Organization
- D-Link Corp.
- Revisions
- 2013-07-30 00:00
- Namespace
- dlink
- Source file
DLINKSW-PORT-SECURITY-MIB- Digest
sha256:16f1710d71357faecc2ea85795e997472c8d42f59649598de2ef21ad19f6af1b
Description
This MIB module defines objects for port security.
Contact
D-Link Corporation Postal: No. 289, Sinhu 3rd Rd., Neihu District, Taipei City 114, Taiwan, R.O.C Tel: +886-2-66000123 E-mail: tsd@dlink.com.tw
Imports
| From | Symbols |
|---|---|
| DLINK-ID-REC-MIB | dlinkIndustrialCommon |
| IF-MIB | InterfaceIndex, ifIndex |
| Q-BRIDGE-MIB | VlanId, VlanIdOrNone |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Counter64, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso |
| SNMPv2-TC | DisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
BRIDGE-MIB DLINK-ID-REC-MIB DLINKSW-PORT-SECURITY-MIB IANAifType-MIB IF-MIB P-BRIDGE-MIB Q-BRIDGE-MIB RFC1158-MIB RFC1271-MIB RMON-MIB RMON2-MIB SNMP-FRAMEWORK-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC TOKEN-RING-RMON-MIB
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| dPortSecNotifications OBJECT-IDENTITY | 1.3.6.1.4.1.171.14.8.0 | |||
| dPortSecObjects OBJECT-IDENTITY | 1.3.6.1.4.1.171.14.8.1 | |||
| dPortSecGlobalNotifControl OBJECT-TYPE Set to 'true' to enable global SNMP Notification for port security feature. Setting the object to 'false' will disable SNMP notifications. | 1.3.6.1.4.1.171.14.8.1.1 | TruthValue | read-write | current |
| dPortSecGlobalNotifRate OBJECT-TYPE Expressed in the number of notifications can be generated per second. The global control configures the rate-limit of SNMP Notification for port security feature. This object specifies the rate at which SNMP Notification is generated when dPortSecIfViolationCount increases. When the rate is over the configured rate, the SNMP Notification is suppressed but it does not affect dPortSecIfViolationCount. A value of 0 indicates that an SNMP Notification is generated for every security violation. | 1.3.6.1.4.1.171.14.8.1.2 | Unsigned32 (0..1000) | read-write | current |
| dPortSecNotifyInfo OBJECT-IDENTITY | 1.3.6.1.4.1.171.14.8.1.3 | |||
| dPortSecIfViolationMacAddress OBJECT-TYPE This object is also used as a variable in the dPortSecMacAddrViolation notification to contain the value of the MAC address which caused the violation. | 1.3.6.1.4.1.171.14.8.1.3.1 | MacAddress | accessible-for-notify | current |
| dPortSecGlobalMaximumNum OBJECT-TYPE Indicates the system maximum addresses number (users) allowed. A value of -1 means no-limit. The max entry range is (1..N). The value N means the max number and is determined by the project itself. | 1.3.6.1.4.1.171.14.8.1.4 | Integer32 | read-write | current |
| dPortSecVlanTable OBJECT-TYPE The table is used to configure and display port security settings and status for a particular VLAN. | 1.3.6.1.4.1.171.14.8.1.5 | not-accessible | current | |
| dPortSecVlanEntry OBJECT-TYPE An entry contains port security information for a particular VLAN. | 1.3.6.1.4.1.171.14.8.1.5.1 | not-accessible | current | |
| dPortSecVlanID OBJECT-TYPE This object specifies the VLAN ID for address learning. | 1.3.6.1.4.1.171.14.8.1.5.1.1 | VlanId | not-accessible | current |
| dPortSecVlanMaximumNum OBJECT-TYPE Indicates the VLAN maximum addresses number (users) allowed. A value of -1 means no-limit. The range is (1..N). The value N means the upper limit and is determined by the project itself. | 1.3.6.1.4.1.171.14.8.1.5.1.2 | Integer32 | read-write | current |
| dPortSecVlanCurrentNum OBJECT-TYPE Indicates the current number of secure MAC addresses on this VLAN. | 1.3.6.1.4.1.171.14.8.1.5.1.3 | Unsigned32 | read-only | current |
| dPortSecIfTable OBJECT-TYPE The table is used to configure and display port security settings and status for a particular interface. | 1.3.6.1.4.1.171.14.8.1.6 | not-accessible | current | |
| dPortSecIfEntry OBJECT-TYPE Entry containing port security information for a particular interface. | 1.3.6.1.4.1.171.14.8.1.6.1 | not-accessible | current | |
| dPortSecIfEnable OBJECT-TYPE Uses the object to enable or disable port security. | 1.3.6.1.4.1.171.14.8.1.6.1.1 | TruthValue | read-write | current |
| dPortSecIfCurrentStatus OBJECT-TYPE This object represents the operational status of the port security feature on an interface. notEnabled(1) - This indicates port security is not enabled. forwarding(2) - This indicates port security is operational. errDisabled(3) - This indicates that the port is shutdown due to port security violation when the object dPortSecIfViolationAction is of type 'shutdown'. | 1.3.6.1.4.1.171.14.8.1.6.1.2 | INTEGER {notEnabled(1), forwarding(2), errDisabled(3)} | read-only | current |
| dPortSecIfMaximumNum OBJECT-TYPE This object sets the maximum number of secure MAC addresses (users) allowed. | 1.3.6.1.4.1.171.14.8.1.6.1.3 | Unsigned32 | read-write | current |
| dPortSecIfViolationAction OBJECT-TYPE This object sets the action to be taken when a security violation is detected. protect(1) - Drops all the packets from the insecure hosts at the port-security process level but does not increment the security-violation count. restrict(2) - Drops all packets from the insecure hosts at the port-security process level and increments the security-violation count. shutdown(3) - Shuts down the port if there is a security violation. | 1.3.6.1.4.1.171.14.8.1.6.1.4 | INTEGER {protect(1), restrict(2), shutdown(3)} | read-write | current |
| dPortSecIfSecureMode OBJECT-TYPE Use the object to set the port security mode. permanent(1) - Under this mode all learned MAC addresses won't be purged unless a user deletes these entries manually. deleteOnTimeout(2) - Under this mode all learned MAC addresses will be purged when an entry ages out or a user deletes these entries manually. | 1.3.6.1.4.1.171.14.8.1.6.1.5 | INTEGER {permanent(1), deleteOnTimeout(2)} | read-write | current |
| dPortSecIfAgingTime OBJECT-TYPE Use the object to set aging time for auto-learned dynamic secured address. When 0 is set on the specified interface, it means the port security aging has been disabled. | 1.3.6.1.4.1.171.14.8.1.6.1.6 | INTEGER (0..1440) | read-write | current |
| dPortSecIfAgingType OBJECT-TYPE Use the object to set aging type for auto-learned dynamic secured address. absolute(1) - Under this aging type, all the secured address on this interface will age out exactly after the time specified. inactivity(2) - Under this aging type, all learned MAC addresses on this interface will age out only if there is no data traffic from the secure source address for the specified time period. | 1.3.6.1.4.1.171.14.8.1.6.1.7 | INTEGER {absolute(1), inactivity(2)} | read-write | current |
| dPortSecIfClearDynamicAddr OBJECT-TYPE Setting this object to 'clear' to clear the addresses which will be purged out when an entry is aged out on the corresponding interface. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned. | 1.3.6.1.4.1.171.14.8.1.6.1.8 | INTEGER {clear(1), noOp(2)} | read-write | current |
| dPortSecIfCurrentNum OBJECT-TYPE Indicates the current number of secure MAC addresses on this interface. | 1.3.6.1.4.1.171.14.8.1.6.1.9 | Unsigned32 | read-only | current |
| dPortSecIfViolationCount OBJECT-TYPE Indicates the number of address violations occurred on a secure interface. The counter will be initialized to zero when the port security feature is enabled on an interface. | 1.3.6.1.4.1.171.14.8.1.6.1.10 | Counter64 | read-only | current |
| dPortSecAddrTableCurrentNum OBJECT-TYPE This object indicates the number of entries present in the dPortSecAddrTable. | 1.3.6.1.4.1.171.14.8.1.7 | Unsigned32 | read-only | current |
| dPortSecAddrTable OBJECT-TYPE A list of port security entries containing the secure MAC address information. | 1.3.6.1.4.1.171.14.8.1.8 | not-accessible | current | |
| dPortSecAddrEntry OBJECT-TYPE An entry contains secure MAC address information for a particular interface. A secure MAC address can be added by the user and can be added when the device learns a new secure MAC address. | 1.3.6.1.4.1.171.14.8.1.8.1 | not-accessible | current | |
| dPortSecAddrIfIndex OBJECT-TYPE The ifIndex value of the interface. | 1.3.6.1.4.1.171.14.8.1.8.1.1 | InterfaceIndex | not-accessible | current |
| dPortSecAddrVlanID OBJECT-TYPE This object specifies the VLAN ID where the user-defined secure MAC address is located. If this object is set to 0 at row creation time, the PVID (default port VLAN ID) will be used for the MAC address. | 1.3.6.1.4.1.171.14.8.1.8.1.2 | VlanIdOrNone | not-accessible | current |
| dPortSecAddrMacAddress OBJECT-TYPE This object indicates the secure MAC address to gain port access rights. | 1.3.6.1.4.1.171.14.8.1.8.1.3 | MacAddress | not-accessible | current |
| dPortSecAddrSecureMode OBJECT-TYPE Specifies the secure mode. For manually configured secure MAC addresses, the dPortSecAddrSecureMode is permanent. | 1.3.6.1.4.1.171.14.8.1.8.1.4 | INTEGER {permanent(1), deleteOnTimeout(2)} | read-only | current |
| dPortSecAddrRemainTime OBJECT-TYPE Specifies the remaining aging time for the auto-learned dynamic secured address. | 1.3.6.1.4.1.171.14.8.1.8.1.5 | INTEGER | read-only | current |
| dPortSecAddrRowStatus OBJECT-TYPE The status of this conceptual row. This object is used to create and delete instances of this table. In other words, besides 'permanent' secure MAC address, a 'deleteOnTimeout' address can be cleared by this object. | 1.3.6.1.4.1.171.14.8.1.8.1.99 | RowStatus | read-create | current |
| dPortSecConformance OBJECT-IDENTITY | 1.3.6.1.4.1.171.14.8.2 | |||
| dPortSecMIBCompliances OBJECT-IDENTITY | 1.3.6.1.4.1.171.14.8.2.1 | |||
| dPortSecMIBGroups OBJECT-IDENTITY | 1.3.6.1.4.1.171.14.8.2.2 |
Notifications
| Name | OID | Status |
|---|---|---|
| dPortSecMacAddrViolation NOTIFICATION-TYPE The address violation notification is generated when port security address violation is detected (dPortSecIfViolationCount increases). | 1.3.6.1.4.1.171.14.8.0.1 | current |
Conformance
| Name | OID | Status |
|---|---|---|
| dPortSecMIBCompliance MODULE-COMPLIANCE The compliance statement for the Port Security MIB. | 1.3.6.1.4.1.171.14.8.2.1.1 | current |
| dPortSecIfCfgGroup OBJECT-GROUP A collection of objects for configuring port security feature. | 1.3.6.1.4.1.171.14.8.2.2.1 | current |
| dPortSecIfStatusGroup OBJECT-GROUP A collection of objects providing the counter information for the port security feature. | 1.3.6.1.4.1.171.14.8.2.2.2 | current |
| dPortSecAddrGroup OBJECT-GROUP A collection of objects providing the address information for the port security feature. | 1.3.6.1.4.1.171.14.8.2.2.3 | current |
| dPortSecAddrNumCtrlGroup OBJECT-GROUP A collection of objects provides the configuration of the maximum secure MAC address number on system or VLAN specific. | 1.3.6.1.4.1.171.14.8.2.2.4 | current |
| dPortSecNotifEnableGroup OBJECT-GROUP A collection of object(s) that provides control over port security related notification(s). | 1.3.6.1.4.1.171.14.8.2.2.5 | current |
| dPortSecNotifGroup NOTIFICATION-GROUP A collection of notifications providing information about address violation. | 1.3.6.1.4.1.171.14.8.2.2.6 | current |