MIBs Depot

IEEE8021-SECY-MIB

Registered at
1.0.8802.1.1.3
Last updated
2022-06-06 00:00
Organization
IEEE 802.1 Working Group
Revisions
2022-06-06 00:00, 2017-12-07 18:16, 2016-05-10 20:49, 2006-01-10 00:00
Namespace
standard
Source file
IEEE8021-SECY-MIB
Digest
sha256:2312fefa9ad4334c507e4af6b866c2e0fe195d2a8352d0b8f504d503c20db23e

Description

The MAC security entity (SecY) MIB module. A SecY is a shim in an interface stack that uses the MAC Security (MACsec) protocol. Copyright (C) IEEE (2021). This version of this MIB module is part of IEEE Std 802.1AEdk-2022; see that standard for full legal notices. Unless otherwise indicated, the references in this MIB module are to IEEE Std 802.1AE-2018 as amended by IEEE Std 802.1AE-2018/Cor 1-2020 and IEEE Std 802.1AEdk-2022. Each SecY transmits MACsec protected frames on one or more Secure Channels (SCs) to each of the other SecYs attached to the same LAN and participating in the same Secure Connectivity Association (CA). The CA is a security relationship, that is established and maintained by key agreement protocols and supported by MACsec to provide full connectivity between its participants. Each SC provides unidirectional point to multipoint connectivity from one participant to all the others and is supported by a succession of similarly point to multipoint Secure Associations (SAs). The Secure Association Key (SAK) used to protect frames is changed as an SA is replaced by its (overlapping) successor so fresh keys can be used without disrupting a long lived SC and CA. Two different upper interfaces, a Controlled Port (for frames protected by MACsec, providing an instance of the secure MAC service) and an Uncontrolled Port (for frames not requiring protection, like the key agreement frames used to establish the CA and distribute keys) are associated with a SecY shim. For each instance of a SecY two ifTable rows (one for each interface) run on top of an ifTable row representing the 'Common Port' interface, such as a row with ifType ='ethernetCsmacd(6)'. ___________________________________________________________________ | | | | Controlled Port Interface | Uncontrolled Port Interface | | (ifEntry = j,ifType = | (ifEntry = k, ifType = | | macSecControlledIF(231)) | macSecUncontrolledIF(232)) | |________________________________________________________________| | | | Physical Interface | | (ifEntry = i) | | (ifType = ethernetCsmacd(6)) | |________________________________________________________________| Example MACsec Interface Stack. i, j, k are ifIndexes each indicating a row in the ifTable.

Contact

WG-URL: http://www.ieee802.org/1/ WG-EMail: stds-802-1-l@ieee.org Contact: IEEE 802.1 Working Group Chair Postal: C/O IEEE 802.1 Working Group IEEE Standards Association 445 Hoes Lane Piscataway, NJ 08854 USA E-mail: stds-802-1-chairs@ieee.org

Imports

FromSymbols
IF-MIBInterfaceIndex, ifCounterDiscontinuityGroup
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Counter64, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, RowPointer, RowStatus, TEXTUAL-CONVENTION, TimeStamp, TruthValue

Imported by

4 module(s) in this corpus import this one.

Load order

Every file a consumer needs in order to load this module, dependencies first.

IANAifType-MIB
IEEE8021-SECY-MIB
IF-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Under this module's arcs

Where the registration tree carries on below this module.

ArcNameModule
1.0.8802.1.1.3.1secyMIBObjects

Textual conventions

NameOIDSyntaxAccessStatus
SecyAN
TEXTUAL-CONVENTION
Textual convention for an Association Number (AN). Each SC is comprised of a succession of SAs, each with a different SAK, identified by a Secure Association Identifier (SAI) comprising an SCI concatenated with a two-bit AN. The SAI is unique for SAs used by SecYs participating in a given CA at any instant.
current
SecySCI
TEXTUAL-CONVENTION
Textual convention for a Secure Channel Identifier (SCI). Each SC is identified by an SCI comprising a 48-bit MAC Address, allocated to the transmitting system and a 16-bit Port Identifier.
current

Objects

NameOIDSyntaxAccessStatus
secyMIBNotifications
OBJECT-IDENTITY
1.0.8802.1.1.3.0
secyMIBObjects
OBJECT-IDENTITY
1.0.8802.1.1.3.1
secyMgmtMIBObjects
OBJECT-IDENTITY
1.0.8802.1.1.3.1.1
secyIfTable
OBJECT-TYPE
A table with an entry for each MAC Security protocol (MACsec) capable interface in the system, i.e. for each SecY. Configured value of writable objects in each table entry MUST be persistent and remain unchanged across re-initialization of the system's management entity.
1.0.8802.1.1.3.1.1.1not-accessiblecurrent
secyIfEntry
OBJECT-TYPE
A table entry with service information for a particular SecY.
1.0.8802.1.1.3.1.1.1.1not-accessiblecurrent
secyIfInterfaceIndex
OBJECT-TYPE
The Interface Index for this SecY's Controlled Port.
1.0.8802.1.1.3.1.1.1.1.1InterfaceIndexnot-accessiblecurrent
secyIfMaxPeerSCs
OBJECT-TYPE
The maximum number of peer SCs for this SecY.
1.0.8802.1.1.3.1.1.1.1.2Unsigned32read-onlycurrent
secyIfRxMaxKeys
OBJECT-TYPE
The maximum number of keys in simultaneous use for reception for this SecY.
1.0.8802.1.1.3.1.1.1.1.3Unsigned32read-onlycurrent
secyIfTxMaxKeys
OBJECT-TYPE
The maximum number of keys in simultaneous use for transmission for this SecY.
1.0.8802.1.1.3.1.1.1.1.4Unsigned32read-onlycurrent
secyIfProtectFramesEnable
OBJECT-TYPE
Enables or disables protection of transmitted frames.
1.0.8802.1.1.3.1.1.1.1.5TruthValueread-writecurrent
secyIfValidateFrames
OBJECT-TYPE
Controls validation of received frames. disabled(1) : disable validation, remove SecTAGs and ICVs (if present. check(2) : enable validation, do not discard invalid frames. strict(3) : enable validation and discard invalid frames. null(4) : no processing, do not remove SecTAGs or ICVs.
1.0.8802.1.1.3.1.1.1.1.6INTEGER {disabled(1), check(2), strict(3), null(4)}read-writecurrent
secyIfReplayProtectEnable
OBJECT-TYPE
Enables or disables replay protection.
1.0.8802.1.1.3.1.1.1.1.7TruthValueread-writecurrent
secyIfReplayProtectWindow
OBJECT-TYPE
The replay protection window size.
1.0.8802.1.1.3.1.1.1.1.8Unsigned32read-writecurrent
secyIfCurrentCipherSuite
OBJECT-TYPE
The secyCipherSuiteTableindex for this SecY's in use Cipher Suite. Should be read-only if secyIfCipherTable implemented.
1.0.8802.1.1.3.1.1.1.1.9Unsigned32read-writecurrent
secyIfAdminPt2PtMAC
OBJECT-TYPE
Controls the value of operPointToPointMAC (secyOperPt2PtMAC) reported to the user(s) of this SecY's Controlled Port: forceTrue(1) : operPointToPointMAC is True, regardless of the configuration and status of the SecY. forceFalse(2) : operPointToPointMAC is False, regardless of the configuration and status of the SecY. auto(3) : OperPointMAC is True if secyIfvalidateFrames is strict and reception is from at most one peer SecY, or if secyIfvalidateFrames is not strict and operPointToPointMAC is True for the Common Port, and is False otherwise.
1.0.8802.1.1.3.1.1.1.1.10INTEGER {forceTrue(1), forceFalse(2), auto(3)}read-writecurrent
secyIfOperPt2PtMAC
OBJECT-TYPE
Reflects the current service connectivity to be assumed by the user(s) of the SecY's Controlled Port: true(1) : connectivity is to at most one other system. false(2) : connectivity is to one or more other systems.
1.0.8802.1.1.3.1.1.1.1.11TruthValueread-onlycurrent
secyIfIncludeSCIEnable
OBJECT-TYPE
Mandates inclusion of an explicit SCI in the SecTAG when transmitting protected frames.
1.0.8802.1.1.3.1.1.1.1.12TruthValueread-writecurrent
secyIfUseESEnable
OBJECT-TYPE
Enables use of the ES bit in the SecTAG when transmitting protected frames.
1.0.8802.1.1.3.1.1.1.1.13TruthValueread-writecurrent
secyIfUseSCBEnable
OBJECT-TYPE
Enables use of the SCB bit in the SecTAG when transmitting protected frames.
1.0.8802.1.1.3.1.1.1.1.14TruthValueread-writecurrent
secyIfSCI
OBJECT-TYPE
The SCI for the SecY's default traffic class.
1.0.8802.1.1.3.1.1.1.1.15SecySCIread-onlycurrent
secyIfIncludingSCI
OBJECT-TYPE
True if an explicit SCI is included in the SecTAG when transmitting protected frames.
1.0.8802.1.1.3.1.1.1.1.16TruthValueread-onlycurrent
secyIfMaxTSCs
OBJECT-TYPE
The maximum number of transmit SCs for this SecY.
1.0.8802.1.1.3.1.1.1.1.17Unsigned32read-onlycurrent
secyTxSCTable
OBJECT-TYPE
A transmit SC management table for systems not supporting traffic class SC's, with an entry for each SecY.
1.0.8802.1.1.3.1.1.2not-accessiblecurrent
secyTxSCEntry
OBJECT-TYPE
An entry with transmit SC information for a SecY.
1.0.8802.1.1.3.1.1.2.1not-accessiblecurrent
secyTxSCI
OBJECT-TYPE
The SCI for the SecY's transmit SC.
1.0.8802.1.1.3.1.1.2.1.1SecySCIread-onlycurrent
secyTxSCState
OBJECT-TYPE
The transmitting state of the SecY's transmit SC.
1.0.8802.1.1.3.1.1.2.1.2INTEGER {inUse(1), notInUse(2)}read-onlycurrent
secyTxSCEncodingSA
OBJECT-TYPE
The SA currently used to encode the SecTAG for frames awaiting transmission. The row pointer points to an entry in the secyTxSATable. If no such information is available, the value shall be the OBJECT IDENTIFIER { 0 0 }.
1.0.8802.1.1.3.1.1.2.1.3RowPointerread-onlycurrent
secyTxSCEncipheringSA
OBJECT-TYPE
The SA currently used to encipher frames for transmission. The row pointer points to an entry in the secyTxSATable. If no such information is available, the value shall be the OBJECT IDENTIFIER { 0 0 }.
1.0.8802.1.1.3.1.1.2.1.4RowPointerread-onlydeprecated
secyTxSCCreatedTime
OBJECT-TYPE
The system time when this transmitting SC was created.
1.0.8802.1.1.3.1.1.2.1.5TimeStampread-onlycurrent
secyTxSCStartedTime
OBJECT-TYPE
The system time when this SC last started transmitting.
1.0.8802.1.1.3.1.1.2.1.6TimeStampread-onlycurrent
secyTxSCStoppedTime
OBJECT-TYPE
The system time when this SC last stopped transmitting.
1.0.8802.1.1.3.1.1.2.1.7TimeStampread-onlycurrent
secyTxSATable
OBJECT-TYPE
A transmit SA management table for a system with no SecYs capable of supporting traffic class transmit SCs.
1.0.8802.1.1.3.1.1.3not-accessiblecurrent
secyTxSAEntry
OBJECT-TYPE
An entry for a transmit SA.
1.0.8802.1.1.3.1.1.3.1not-accessiblecurrent
secyTxSA
OBJECT-TYPE
The association number (AN) for this transmit SA.
1.0.8802.1.1.3.1.1.3.1.1SecyANnot-accessiblecurrent
secyTxSAState
OBJECT-TYPE
The transmit SAs current status: inUse(1), notInUse(2).
1.0.8802.1.1.3.1.1.3.1.2INTEGER {inUse(1), notInUse(2)}read-onlycurrent
secyTxSANextPN
OBJECT-TYPE
The next packet number (PN) for this SA.
1.0.8802.1.1.3.1.1.3.1.3Unsigned32read-onlycurrent
secyTxSAConfidentiality
OBJECT-TYPE
True if the SA provides confidentiality as well as integrity for transmitted frames.
1.0.8802.1.1.3.1.1.3.1.4TruthValueread-onlycurrent
secyTxSASAKUnchanged
OBJECT-TYPE
A reference to an SAK that is unchanged for the life of the transmitting SA.
1.0.8802.1.1.3.1.1.3.1.5TruthValueread-onlydeprecated
secyTxSACreatedTime
OBJECT-TYPE
The system time when this transmit SA was created.
1.0.8802.1.1.3.1.1.3.1.6TimeStampread-onlycurrent
secyTxSAStartedTime
OBJECT-TYPE
The system time when this SA last started transmitting.
1.0.8802.1.1.3.1.1.3.1.7TimeStampread-onlycurrent
secyTxSAStoppedTime
OBJECT-TYPE
The system time when this SA last stopped transmitting.
1.0.8802.1.1.3.1.1.3.1.8TimeStampread-onlycurrent
secyRxSCTable
OBJECT-TYPE
A table of receive SCs for the system.
1.0.8802.1.1.3.1.1.4not-accessiblecurrent
secyRxSCEntry
OBJECT-TYPE
A table entry for a receive SC.
1.0.8802.1.1.3.1.1.4.1not-accessiblecurrent
secyRxSCI
OBJECT-TYPE
The SCI for the receive SC.
1.0.8802.1.1.3.1.1.4.1.1SecySCInot-accessiblecurrent
secyRxSCState
OBJECT-TYPE
The receive SCs current state: inUse(1) : one or more SAs for this SC are in use. notInUse(2) : no SAs for this SC is in use.
1.0.8802.1.1.3.1.1.4.1.2INTEGER {inUse(1), notInUse(2)}read-onlycurrent
secyRxSCCurrentSA
OBJECT-TYPE
The current receiving association number for the SC in use. The row pointer points to an entry in the secyRxSATable. If no such information can be identified, the value of this object shall be the OBJECT IDENTIFIER { 0 0 }.
1.0.8802.1.1.3.1.1.4.1.3RowPointerread-onlydeprecated
secyRxSCCreatedTime
OBJECT-TYPE
The system time when this receiving SC was created.
1.0.8802.1.1.3.1.1.4.1.4TimeStampread-onlycurrent
secyRxSCStartedTime
OBJECT-TYPE
The system time when this SC last started receiving.
1.0.8802.1.1.3.1.1.4.1.5TimeStampread-onlycurrent
secyRxSCStoppedTime
OBJECT-TYPE
The system time when this SC last stopped receiving.
1.0.8802.1.1.3.1.1.4.1.6TimeStampread-onlycurrent
secyRxSATable
OBJECT-TYPE
A table with entries for the system's receive SAs.
1.0.8802.1.1.3.1.1.5not-accessiblecurrent
secyRxSAEntry
OBJECT-TYPE
An entry for one of the SAs used by one of the system's SecY's to receive protected frames.
1.0.8802.1.1.3.1.1.5.1not-accessiblecurrent
secyRxSA
OBJECT-TYPE
This receive SA's association number (AN).
1.0.8802.1.1.3.1.1.5.1.1SecyANnot-accessiblecurrent
secyRxSAState
OBJECT-TYPE
This receive SA's current state.
1.0.8802.1.1.3.1.1.5.1.2INTEGER {inUse(1), notInUse(2)}read-onlycurrent
secyRxSANextPN
OBJECT-TYPE
Use secyRxSANextXPN for both 32-bit PN and 64-bit XPN values. If implemented, this object contains the lower 32 bits.
1.0.8802.1.1.3.1.1.5.1.3Unsigned32read-writedeprecated
secyRxSASAKUnchanged
OBJECT-TYPE
An SAK reference, unchanged for the receiving SA's life.
1.0.8802.1.1.3.1.1.5.1.4TruthValueread-onlydeprecated
secyRxSACreatedTime
OBJECT-TYPE
The system time when this receiving SA was created.
1.0.8802.1.1.3.1.1.5.1.5TimeStampread-onlycurrent
secyRxSAStartedTime
OBJECT-TYPE
The system time when this SA last started receiving.
1.0.8802.1.1.3.1.1.5.1.6TimeStampread-onlycurrent
secyRxSAStoppedTime
OBJECT-TYPE
The system time when this SA last stopped receiving frames.
1.0.8802.1.1.3.1.1.5.1.7TimeStampread-onlycurrent
secyRxSANextXPN
OBJECT-TYPE
One more than the highest PN conveyed in the SecTAG of successfully validates frames received on this SA.
1.0.8802.1.1.3.1.1.5.1.8Counter64read-onlycurrent
secyRxSALowestXPN
OBJECT-TYPE
The lowest acceptable packet number. A received frame with a lower PN is discarded if secyIfReplayProtectEnable is enabled.
1.0.8802.1.1.3.1.1.5.1.9Counter64read-onlycurrent
secyRxSAKeyIdentifier
OBJECT-TYPE
The Key Identifier (KI) for the SAK for this SA.
1.0.8802.1.1.3.1.1.5.1.10SnmpAdminString (SIZE(1..32))read-onlycurrent
secyRxSASSCI
OBJECT-TYPE
The SSCI for this SA, 0 if an XPN Cipher Suite is not in use.
1.0.8802.1.1.3.1.1.5.1.11Integer32read-onlycurrent
secyCipherSuiteTable
OBJECT-TYPE
A table of the system's Cipher Suite capabilities, which can differ by Cipher Suite implementation, so there can be more than one entry with the same secyCipherSuiteId. The secyIfCipherTable lists available entries by SecY, avoiding the need for remote network management to write objects or create rows in this table. Any configured values shall be stored in persistent memory and remain unchanged across a re-initialization of the management system.
1.0.8802.1.1.3.1.1.6not-accessiblecurrent
secyCipherSuiteEntry
OBJECT-TYPE
An entry for a Cipher Suite implementation.
1.0.8802.1.1.3.1.1.6.1not-accessiblecurrent
secyCipherSuiteIndex
OBJECT-TYPE
The CipherSuiteTable entry index.
1.0.8802.1.1.3.1.1.6.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
secyCipherSuiteId
OBJECT-TYPE
A unique 64-bit (EUI-64) identifier for the Cipher Suite.
1.0.8802.1.1.3.1.1.6.1.2OCTET STRING (SIZE(8))read-createcurrent
secyCipherSuiteName
OBJECT-TYPE
The Cipher Suite Name, 128 octets or fewer.
1.0.8802.1.1.3.1.1.6.1.3SnmpAdminString (SIZE(1..128))read-createcurrent
secyCipherSuiteCapability
OBJECT-TYPE
Cipher Suite implementation capability information. integrity(0) : integrity protection. confidentiality(1) : confidentiality protection. offsetConfidentiality(2) : offset confidentiality protection.
1.0.8802.1.1.3.1.1.6.1.4Bits {integrity(0), confidentiality(1), offsetConfidentiality(2)}read-createcurrent
secyCipherSuiteProtection
OBJECT-TYPE
The secyIfCipherSuite table supports per SecY configuration and should be used instead of this object.If the secyCipherSuiteCapability integrity bit is on, it can be turned on for this object. If the integrity and confidentiality bits of the secyCipherSuiteCapability are both on, the confidentiality bit of this object can be turned on provided that the integrity bit is also turned on, and the offsetConfidentiality bit can also be turned on if the secyCipherSuiteCapability has that bit on. integrity(0) : enable (on) or disable integrity protection. confidentiality(1) : enable (on) or disable confidentiality protection. offsetConfidentiality(2) : enable (on) or disable offset confidentiality.
1.0.8802.1.1.3.1.1.6.1.5Bits {integrity(0), confidentiality(1), offsetConfidentiality(2)}read-createdeprecated
secyCipherSuiteProtectionOffset
OBJECT-TYPE
The confidentiality protection offset options provided by the cipher suite. Can only be non-zero if the secyCipherSuiteProtection offset confidentiality bit is on, and then can only be 0 if the confidentiality bit is on.
1.0.8802.1.1.3.1.1.6.1.6Integer32 (0 | 30 | 50)read-createdeprecated
secyCipherSuiteDataLengthChange
OBJECT-TYPE
True if cipher suite changes the length of the data.
1.0.8802.1.1.3.1.1.6.1.7TruthValueread-createcurrent
secyCipherSuiteICVLength
OBJECT-TYPE
The length of the integrity check value (ICV) field.
1.0.8802.1.1.3.1.1.6.1.8Unsigned32 (8..16)read-createcurrent
secyCipherSuiteRowStatus
OBJECT-TYPE
The secyIfCipherTable (if implemented) avoids the need for network manager creation of entries in the secyCipherSuiteTable, and RowStatus should always be valid(1), with any per SecY unavailability indicated by an absence of a corresponding secyIfCipherTable entry or one with secyCipherSuiteAvailable false (the latter can indicate temporary unavailability).
1.0.8802.1.1.3.1.1.6.1.9RowStatusread-createcurrent
secyIfCipherTable
OBJECT-TYPE
A table with an entry for the Cipher Suite capabilities implemented for each SecY in this system, providing per SecY control of Cipher Suite use. The configured value of writable objects in each table entry shall be stored in persistent memory and remain unchanged across a re-initialization of the system's management entity.
1.0.8802.1.1.3.1.1.7not-accessiblecurrent
secyIfCipherEntry
OBJECT-TYPE
A table entry with Cipher Suite control for a SecY.
1.0.8802.1.1.3.1.1.7.1not-accessiblecurrent
secyIfCipherImplemented
OBJECT-TYPE
True if the Cipher Suite implementation can be used by this SecY (if secIfCipherEnableUse is true).
1.0.8802.1.1.3.1.1.7.1.1TruthValueread-onlycurrent
secyIfCipherEnableUse
OBJECT-TYPE
Enables use of the Cipher Suite by this SecY.
1.0.8802.1.1.3.1.1.7.1.2TruthValueread-writecurrent
secyIfCipherRqConfidentiality
OBJECT-TYPE
True if confidentiality protection (without an offset) is required if this Cipher Suite is used.
1.0.8802.1.1.3.1.1.7.1.3TruthValueread-writecurrent
secyIfTCTable
OBJECT-TYPE
The Traffic Class Table for each SecY in this system. The configured value of writable objects in each table entry MUST be stored in persistent memory and remain unchanged across a re-initialization of the system's management entity.
1.0.8802.1.1.3.1.1.8not-accessiblecurrent
secyIfTCEntry
OBJECT-TYPE
A table entry providing Traffic Class selection for a given SecY and user priority.
1.0.8802.1.1.3.1.1.8.1not-accessiblecurrent
secyIfTCUserPriority
OBJECT-TYPE
One of the possible user priority values for a frame.
1.0.8802.1.1.3.1.1.8.1.1Integer32 (0..7)not-accessiblecurrent
secyIfTCTrafficClass
OBJECT-TYPE
The Traffic Class for this SecY and user priority, as transmitted in the four most significant bits of the Port Identifier component of the SCI of protected frames.
1.0.8802.1.1.3.1.1.8.1.2Integer32 (0..7)read-writecurrent
secyIfAPTable
OBJECT-TYPE
The Access Priority Table for each SecY in this system. The configured value of writable objects in each table entry MUST be stored in persistent memory and remain unchanged across a re-initialization of the system's management entity.
1.0.8802.1.1.3.1.1.9not-accessiblecurrent
secyIfAPEntry
OBJECT-TYPE
A table entry for a given SecY, selecting the access priority and the drop_eligible parameter value used for a given user priority and drop_eligible parameter value.
1.0.8802.1.1.3.1.1.9.1not-accessiblecurrent
secyIfAPUserPCP
OBJECT-TYPE
The user priority (3 more significant bits) and drop_eligible parameter (least significant bit) values.
1.0.8802.1.1.3.1.1.9.1.1Integer32 (0..15)not-accessiblecurrent
secyIfAPAccessPCP
OBJECT-TYPE
The access priority (3 more significant bits) and drop_eligible parameter (least significant bit) values.
1.0.8802.1.1.3.1.1.9.1.2Integer32 (0..15)read-writecurrent
secyTSCTable
OBJECT-TYPE
A transmit SC management table for systems with SecY's capable of supporting traffic class SCs.
1.0.8802.1.1.3.1.1.10not-accessiblecurrent
secyTSCEntry
OBJECT-TYPE
An entry with transmit SC information for one of the system's SecYs and one of its traffic classes.
1.0.8802.1.1.3.1.1.10.1not-accessiblecurrent
secyTSCI
OBJECT-TYPE
The SCI for the transmit SC for this SecY and traffic class.
1.0.8802.1.1.3.1.1.10.1.1SecySCInot-accessiblecurrent
secyTSCState
OBJECT-TYPE
The state of the transmit SC for this SecY and traffic class: inUse(1) : one or more SAs are in use. notInUse(2) : no SAs are in use for this SC.
1.0.8802.1.1.3.1.1.10.1.2INTEGER {inUse(1), notInUse(2)}read-onlycurrent
secyTSCEncodingSA
OBJECT-TYPE
The SA currently used to encode the SecTAG. The row pointer points to an entry in the secyTSATable. If no such information is available, the value shall be the OBJECT IDENTIFIER { 0 0 }.
1.0.8802.1.1.3.1.1.10.1.3RowPointerread-onlycurrent
secyTSCCreatedTime
OBJECT-TYPE
The system time when this transmitting SC was created.
1.0.8802.1.1.3.1.1.10.1.4TimeStampread-onlycurrent
secyTSCStartedTime
OBJECT-TYPE
The system time when this SC last started transmitting.
1.0.8802.1.1.3.1.1.10.1.5TimeStampread-onlycurrent
secyTSCStoppedTime
OBJECT-TYPE
The system time when this SC last stopped transmitting.
1.0.8802.1.1.3.1.1.10.1.6TimeStampread-onlycurrent
secyTSATable
OBJECT-TYPE
A transmit SA management table for systems with SecY's capable of supporting traffic class SC's.
1.0.8802.1.1.3.1.1.11not-accessiblecurrent
secyTSAEntry
OBJECT-TYPE
An entry for a transmit SA.
1.0.8802.1.1.3.1.1.11.1not-accessiblecurrent
secyTSA
OBJECT-TYPE
The association number (AN) for this transmit SA.
1.0.8802.1.1.3.1.1.11.1.1SecyANnot-accessiblecurrent
secyTSAState
OBJECT-TYPE
The transmit SA current status: inUse(1) , notInUse(2).
1.0.8802.1.1.3.1.1.11.1.2INTEGER {inUse(1), notInUse(2)}read-onlycurrent
secyTSANextXPN
OBJECT-TYPE
The next packet number (PN) for this SA.
1.0.8802.1.1.3.1.1.11.1.3Counter64read-onlycurrent
secyTSAConfidentiality
OBJECT-TYPE
True if the SA provides confidentiality.
1.0.8802.1.1.3.1.1.11.1.4TruthValueread-onlycurrent
secyTSAKeyIdentifier
OBJECT-TYPE
The Key Identifier (KI) for the SAK for this SA.
1.0.8802.1.1.3.1.1.11.1.5SnmpAdminString (SIZE(1..32))read-onlycurrent
secyTSASSCI
OBJECT-TYPE
The SSCI for this SA, 0 if not using an XPN Cipher Suite.
1.0.8802.1.1.3.1.1.11.1.6Integer32read-onlycurrent
secyTSACreatedTime
OBJECT-TYPE
The system time when this transmit SA was created.
1.0.8802.1.1.3.1.1.11.1.7TimeStampread-onlycurrent
secyTSAStartedTime
OBJECT-TYPE
The system time when this SA last started transmitting.
1.0.8802.1.1.3.1.1.11.1.8TimeStampread-onlycurrent
secyTSAStoppedTime
OBJECT-TYPE
The system time when this SA last stopped transmitting.
1.0.8802.1.1.3.1.1.11.1.9TimeStampread-onlycurrent
secyStatsMIBObjects
OBJECT-IDENTITY
1.0.8802.1.1.3.1.2
secyTxSAStatsTable
OBJECT-TYPE
A table of statistics for each transmit SA for each of the system's SecYs.
1.0.8802.1.1.3.1.2.1not-accessibledeprecated
secyTxSAStatsEntry
OBJECT-TYPE
An entry with statistics for a transmit SA. The AN that identifies an SA (for a given SC) and this corresponding entry can be reused. When creating the SA and before (re)using the entry, the SA counters are (re)set to 0. When the SA is stopped (secyTxSA notInuse) the counters stop incrementing. The secyTxSATable timestamps SA creation, start, and stop.
1.0.8802.1.1.3.1.2.1.1not-accessibledeprecated
secyTxSAStatsProtectedPkts
OBJECT-TYPE
Count of integrity protected but unencrypted packets for this transmit SA. Zero if secyTxSAConfidentiality is True, and one less than secyTxSANextPN otherwise.
1.0.8802.1.1.3.1.2.1.1.1Counter32read-onlydeprecated
secyTxSAStatsEncryptedPkts
OBJECT-TYPE
Count of integrity protected and encrypted packets for this transmit SA. Zero if secyTxSAConfidentiality is False, and one less than secyTxSANextPN otherwise.
1.0.8802.1.1.3.1.2.1.1.2Counter32read-onlydeprecated
secyTxSCStatsTable
OBJECT-TYPE
A transmit SC statistics table for systems without traffic class SC support, with an entry for each SecY.
1.0.8802.1.1.3.1.2.2not-accessiblecurrent
secyTxSCStatsEntry
OBJECT-TYPE
A transmit SC statistics table entry (for systems without traffic class SC support) with cumulative counts for a given SecY's current and prior SAs.
1.0.8802.1.1.3.1.2.2.1not-accessiblecurrent
secyTxSCStatsProtectedPkts
OBJECT-TYPE
Count of integrity protected but unencrypted packets for this transmit SC.
1.0.8802.1.1.3.1.2.2.1.1Counter64read-onlycurrent
secyTxSCStatsEncryptedPkts
OBJECT-TYPE
Count of integrity protected and encrypted packets for this transmit SC.
1.0.8802.1.1.3.1.2.2.1.4Counter64read-onlycurrent
secyTxSCStatsOctetsProtected
OBJECT-TYPE
Count of integrity protected plain text octets that are integrity protected but not encrypted for this transmit SC.
1.0.8802.1.1.3.1.2.2.1.10Counter64read-onlydeprecated
secyTxSCStatsOctetsEncrypted
OBJECT-TYPE
The number of plain text octets that are integrity protected and encrypted on the transmit SC.
1.0.8802.1.1.3.1.2.2.1.11Counter64read-onlydeprecated
secyRxSAStatsTable
OBJECT-TYPE
A table that contains the statistics objects for each receiving SA in the MAC security entity.
1.0.8802.1.1.3.1.2.3not-accessibledeprecated
secyRxSAStatsEntry
OBJECT-TYPE
An entry with statistics for a receive SA. The AN that identifies an SA (for a given SC) and this corresponding entry can be reused. When creating the SA and before (re)using the entry, the SA counters are (re)set to 0. When the SA is stopped (secyRxSA notInuse) the counters stop incrementing. The secyRxSATable timestamps SA creation, start, and stop.
1.0.8802.1.1.3.1.2.3.1not-accessibledeprecated
secyRxSAStatsUnusedSAPkts
OBJECT-TYPE
For this SA which is not currently in use, the number of received, unencrypted, packets with secyValidateFrames not in the strict mode.
1.0.8802.1.1.3.1.2.3.1.1Counter32read-onlydeprecated
secyRxSAStatsNoUsingSAPkts
OBJECT-TYPE
For this SA which is not currently in use, the number of received packets that have been discarded, and have either the packets encrypted or secyValidateFrames set to strict mode.
1.0.8802.1.1.3.1.2.3.1.4Counter32read-onlydeprecated
secyRxSAStatsNotValidPkts
OBJECT-TYPE
For this SA, the number discarded packets with the condition that the packets are not valid and one of the following conditions are true: either secyValidateFrames in strict mode or the packets encrypted.
1.0.8802.1.1.3.1.2.3.1.13Counter32read-onlydeprecated
secyRxSAStatsInvalidPkts
OBJECT-TYPE
For this SA, the number of packets with the condition that the packets are not valid and secyValidateFrames is in check mode.
1.0.8802.1.1.3.1.2.3.1.16Counter32read-onlydeprecated
secyRxSAStatsOKPkts
OBJECT-TYPE
For this SA, the number of validated packets.
1.0.8802.1.1.3.1.2.3.1.25Counter32read-onlydeprecated
secyRxSCStatsTable
OBJECT-TYPE
A table of statistics for each receive SC for each of the system's SecYs.
1.0.8802.1.1.3.1.2.4not-accessiblecurrent
secyRxSCStatsEntry
OBJECT-TYPE
An entry containing counts for a receive SC. SA counters are reset when the SA's AN is reused, so these SC counts are a summation for all current and prior SAs belonging to the SC.
1.0.8802.1.1.3.1.2.4.1not-accessiblecurrent
secyRxSCStatsUnusedSAPkts
OBJECT-TYPE
The sum of secyRxSAStatsUnusedSAPkts counts for all current and prior SAs belonging to this SC.
1.0.8802.1.1.3.1.2.4.1.1Counter64read-onlydeprecated
secyRxSCStatsNoUsingSAPkts
OBJECT-TYPE
The sum of secyRxSAStatsNoUsingSAPkts counts for all current and prior SAs belonging to this SC.
1.0.8802.1.1.3.1.2.4.1.2Counter64read-onlydeprecated
secyRxSCStatsLatePkts
OBJECT-TYPE
Count of packets discarded for this SC, with a received PN lower than the lowest acceptable PN (secyRxSALowestXPN) while secyIfReplayProtectEnable was true.
1.0.8802.1.1.3.1.2.4.1.3Counter64read-onlycurrent
secyRxSCStatsNotValidPkts
OBJECT-TYPE
Count of packets discarded for this SC, because validation failed and they were encrypted (unrecoverable) or secyIfvalidateFrames was 'strict'.
1.0.8802.1.1.3.1.2.4.1.4Counter64read-onlycurrent
secyRxSCStatsInvalidPkts
OBJECT-TYPE
Count of packets received for this SC, that failed validation but were received unencrypted while secyIfvalidateFrames was 'check'.
1.0.8802.1.1.3.1.2.4.1.5Counter64read-onlycurrent
secyRxSCStatsDelayedPkts
OBJECT-TYPE
Count of packets received for this SC, with PN lower than the lowest acceptable PN (secyRxSALowestXPN) while secyIfReplayProtectEnable was false.
1.0.8802.1.1.3.1.2.4.1.6Counter64read-onlycurrent
secyRxSCStatsUncheckedPkts
OBJECT-TYPE
Count of packets received for this SC while secyValidateFrames was 'disabled'.
1.0.8802.1.1.3.1.2.4.1.7Counter64read-onlycurrent
secyRxSCStatsOKPkts
OBJECT-TYPE
Count of packets received for this SC that were successfully validated and within the replay window.
1.0.8802.1.1.3.1.2.4.1.8Counter64read-onlycurrent
secyRxSCStatsOctetsValidated
OBJECT-TYPE
Count of plaintext octets recovered from packets that were integrity protected but not encrypted.
1.0.8802.1.1.3.1.2.4.1.9Counter64read-onlydeprecated
secyRxSCStatsOctetsDecrypted
OBJECT-TYPE
Count of plaintext octets recovered from packets that were integrity protected and encrypted.
1.0.8802.1.1.3.1.2.4.1.10Counter64read-onlydeprecated
secyStatsTable
OBJECT-TYPE
A table of statistics for each of the system's SecYs.
1.0.8802.1.1.3.1.2.5not-accessiblecurrent
secyStatsEntry
OBJECT-TYPE
An entry containing counts for a SecY.
1.0.8802.1.1.3.1.2.5.1not-accessiblecurrent
secyStatsTxUntaggedPkts
OBJECT-TYPE
The number of packets transmitted without a SecTAG because secyProtectFramesEnable is configured false.
1.0.8802.1.1.3.1.2.5.1.1Counter64read-onlycurrent
secyStatsTxTooLongPkts
OBJECT-TYPE
The number of transmit packets discarded because their length is greater than the ifMtu of the Common Port.
1.0.8802.1.1.3.1.2.5.1.2Counter64read-onlycurrent
secyStatsRxUntaggedPkts
OBJECT-TYPE
The number of packets without the MACsec tag (SecTAG) received while secyValidateFrames was not 'strict'.
1.0.8802.1.1.3.1.2.5.1.3Counter64read-onlycurrent
secyStatsRxNoTagPkts
OBJECT-TYPE
The number of received packets without a SecTAG discarded because secyValidateFrames was 'strict'.
1.0.8802.1.1.3.1.2.5.1.4Counter64read-onlycurrent
secyStatsRxBadTagPkts
OBJECT-TYPE
The number of received packets discarded with an invalid SecTAG, zero value PN, or invalid ICV.
1.0.8802.1.1.3.1.2.5.1.5Counter64read-onlycurrent
secyStatsRxUnknownSCIPkts
OBJECT-TYPE
The number of received packets with an unknown SCI.
1.0.8802.1.1.3.1.2.5.1.6Counter64read-onlydeprecated
secyStatsRxNoSCIPkts
OBJECT-TYPE
The number of discarded packets with an unknown SCI.
1.0.8802.1.1.3.1.2.5.1.7Counter64read-onlydeprecated
secyStatsRxOverrunPkts
OBJECT-TYPE
The number of packets discarded because they exceeded cryptographic performance capabilities.
1.0.8802.1.1.3.1.2.5.1.8Counter64read-onlycurrent
secyStatsRxNoSAPkts
OBJECT-TYPE
The number of received packets with an unknown SCI or for an unused SA.
1.0.8802.1.1.3.1.2.5.1.9Counter64read-onlycurrent
secyStatsRxNoSAErrorPkts
OBJECT-TYPE
The number of packets discarded because the received SCI is unknown or the SA is not in use.
1.0.8802.1.1.3.1.2.5.1.10Counter64read-onlycurrent
secyStatsTxOctetsProtected
OBJECT-TYPE
The number of plain text octets integrity protected but not encrypted in transmitted frames.
1.0.8802.1.1.3.1.2.5.1.11Counter64read-onlycurrent
secyStatsTxOctetsEncrypted
OBJECT-TYPE
The number of plain text octets integrity protected and encrypted in transmitted frames.
1.0.8802.1.1.3.1.2.5.1.12Counter64read-onlycurrent
secyStatsRxOctetsValidated
OBJECT-TYPE
The number of plaintext octets recovered from packets that were integrity protected but not encrypted.
1.0.8802.1.1.3.1.2.5.1.13Counter64read-onlycurrent
secyStatsRxOctetsDecrypted
OBJECT-TYPE
The number of plaintext octets recovered from packets that were integrity protected and encrypted.
1.0.8802.1.1.3.1.2.5.1.14Counter64read-onlycurrent
secyTSCStatsTable
OBJECT-TYPE
A table of statistics for each SecY's transmit SCs.
1.0.8802.1.1.3.1.2.12not-accessiblecurrent
secyTSCStatsEntry
OBJECT-TYPE
A entry containing counts for a transmit SC, since SA counters are reset when the SA's AN is reused these are a summation for all current and prior SAs belonging to the SC.
1.0.8802.1.1.3.1.2.12.1not-accessiblecurrent
secyTSCStatsProtectedPkts
OBJECT-TYPE
The number of integrity protected but not encrypted packets for this transmit SC.
1.0.8802.1.1.3.1.2.12.1.1Counter64read-onlycurrent
secyTSCStatsEncryptedPkts
OBJECT-TYPE
The number of integrity protected and encrypted packets for this transmit SC.
1.0.8802.1.1.3.1.2.12.1.2Counter64read-onlycurrent
secyMIBConformance
OBJECT-IDENTITY
1.0.8802.1.1.3.2
secyMIBCompliances
OBJECT-IDENTITY
1.0.8802.1.1.3.2.1
secyMIBGroups
OBJECT-IDENTITY
1.0.8802.1.1.3.2.2

Conformance

NameOIDStatus
secyMIBCompliance
MODULE-COMPLIANCE
The compliance statement for the IEEE8021-SECY-MIB as specified in IEEE Std 802.1AE-2006.
1.0.8802.1.1.3.2.1.1deprecated
secyMIBTcCompliance
MODULE-COMPLIANCE
The compliance statement for an IEEE8021-SECY-MIB supporting traffic class transmit SCs, added by IEEE 802.1AEcg.
1.0.8802.1.1.3.2.1.2current
secyIfCtrlGroup
OBJECT-GROUP
SecY service management (secyIfTable) objects.
1.0.8802.1.1.3.2.2.1deprecated
secyTxSCGroup
OBJECT-GROUP
Transmit SC management objects (for systems without traffic class SC capabilities).
1.0.8802.1.1.3.2.2.2deprecated
secyTxSAGroup
OBJECT-GROUP
Transmit SA management objects (for systems without traffic class SC capabilities).
1.0.8802.1.1.3.2.2.3deprecated
secyRxSCGroup
OBJECT-GROUP
Receive SC management objects.
1.0.8802.1.1.3.2.2.4deprecated
secyRxSAGroup
OBJECT-GROUP
Receive SA management objects.
1.0.8802.1.1.3.2.2.5deprecated
secyCipherSuiteGroup
OBJECT-GROUP
Cipher Suite information objects.
1.0.8802.1.1.3.2.2.6deprecated
secyTxSAStatsGroup
OBJECT-GROUP
Transmit SA statistics objects.
1.0.8802.1.1.3.2.2.7deprecated
secyRxSAStatsGroup
OBJECT-GROUP
Receive SA statistics objects.
1.0.8802.1.1.3.2.2.8deprecated
secyTxSCStatsGroup
OBJECT-GROUP
Transmit SC statistics objects.
1.0.8802.1.1.3.2.2.9deprecated
secyRxSCStatsGroup
OBJECT-GROUP
Receive SC statistics objects.
1.0.8802.1.1.3.2.2.10deprecated
secyStatsGroup
OBJECT-GROUP
SecY statistics objects.
1.0.8802.1.1.3.2.2.11deprecated
secyIfGroup
OBJECT-GROUP
SecY service management (secyIfTable objects) for systems supporting traffic class SCs.
1.0.8802.1.1.3.2.2.12current
secyIfCipherGroup
OBJECT-GROUP
Cipher Suite use control (secyIfCipherTable objects).
1.0.8802.1.1.3.2.2.13current
secyIfTCGroup
OBJECT-GROUP
Traffic class control (secyIfTCTable).
1.0.8802.1.1.3.2.2.14current
secyIfAPGroup
OBJECT-GROUP
Access Priority Code Point control (secyIfAPTable).
1.0.8802.1.1.3.2.2.15current
secyTSCGroup
OBJECT-GROUP
Transmit SC management (secyTSCTable objects) for systems supporting traffic class SCs.
1.0.8802.1.1.3.2.2.16current
secyTSAGroup
OBJECT-GROUP
Transmit SA management (secyTSATable objects) for systems supporting traffic class SCs.
1.0.8802.1.1.3.2.2.17current
secyRSCGroup
OBJECT-GROUP
Receive SC management (secyRxSCTable objects).
1.0.8802.1.1.3.2.2.18current
secyRSAGroup
OBJECT-GROUP
Receive SA (secyRxSATable objects).
1.0.8802.1.1.3.2.2.19current
secyIfStatsGroup
OBJECT-GROUP
SecY statistics (secyStatsTable objects).
1.0.8802.1.1.3.2.2.20current
secyCipherInfoGroup
OBJECT-GROUP
Cipher Suite implementation information (secyCipherSuiteTable objects).
1.0.8802.1.1.3.2.2.21current
secyTSCStatsGroup
OBJECT-GROUP
Transmit SC statistics (secyTSCStatsTable objects).
1.0.8802.1.1.3.2.2.22current
secyRSCStatsGroup
OBJECT-GROUP
Receive SC statistics (secyRxSCStatsTable objects).
1.0.8802.1.1.3.2.2.23current
secyCipherStatsGroup
OBJECT-GROUP
Cipher Suite performance statistics (from secyStatsTable).
1.0.8802.1.1.3.2.2.24current