MIBs Depot

PORT-SECURITY-MIB

Registered at
1.3.6.1.4.1.171.12.63
Last updated
1912-10-16 10:30
Organization
D-Link Corp.
Namespace
dlink
Source file
PORT-SECURITY-MIB
Digest
sha256:a5e13cf7b044d1151df65d5db2ff66d3da540c6d9ef201add7f1444491cc8ca2

Description

The structure of port security for the proprietary enterprise.

Contact

http://support.dlink.com

Imports

FromSymbols
DLINK-ID-REC-MIBdlink-common-mgmt
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP
SNMPv2-SMIInteger32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, TEXTUAL-CONVENTION

Imported by

6 module(s) in this corpus import this one.

Load order

Every file a consumer needs in order to load this module, dependencies first.

DLINK-ID-REC-MIB
PORT-SECURITY-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
swPortSecCtrl
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.63.1
swPortSecTrapLogState
OBJECT-TYPE
When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, traps will be sent out and the relevant information will be logged into the system.
1.3.6.1.4.1.171.12.63.1.1INTEGER {enabled(1), disabled(2)}read-writecurrent
swPortSecSysMaxLernAddr
OBJECT-TYPE
Indicates the maximum number of addresses to be authorized by port security on the system. A value of -1 means no-limit. The default value is no-limit. The max entry range is (1..N). The value N means the max number and is determined by the project itself.
1.3.6.1.4.1.171.12.63.1.2INTEGERread-writecurrent
swPortSecTrapState
OBJECT-TYPE
When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, trap will be sent out.
1.3.6.1.4.1.171.12.63.1.3INTEGER {enabled(1), disabled(2)}read-writecurrent
swPortSecLogState
OBJECT-TYPE
When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, the relevant information will be logged into the system.
1.3.6.1.4.1.171.12.63.1.4INTEGER {enabled(1), disabled(2)}read-writecurrent
swPortSecInfo
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.63.2
swPortSecMgmt
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.63.3
swPortSecMgmtByPort
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.63.3.1
swPortSecPortTable
OBJECT-TYPE
A port security feature which controls the address learning capability and traffic forwarding decisions. Each port can be enabled or disabled for this function. When it is enabled and a number is given said N, which allows N addresses to be learned on this port, the first N learned addresses are locked at this port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this port.
1.3.6.1.4.1.171.12.63.3.1.1not-accessiblecurrent
swPortSecPortEntry
OBJECT-TYPE
A list of information contained in the swPortSecPortTable.
1.3.6.1.4.1.171.12.63.3.1.1.1not-accessiblecurrent
swPortSecPortIndex
OBJECT-TYPE
Indicates the secured port to lock address learning.
1.3.6.1.4.1.171.12.63.3.1.1.1.1INTEGERnot-accessiblecurrent
swPortSecPortMaxLernAddr
OBJECT-TYPE
Indicates the allowable number of addresses to be learned on this port. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
1.3.6.1.4.1.171.12.63.3.1.1.1.2INTEGERread-writecurrent
swPortSecPortLockAddrMode
OBJECT-TYPE
Indicates the mode of locking address. In deleteOnTimeout(2) mode, the locked addresses can be aged out after the aging timer expires. In this mode, when the locked address is aged out, the number of addresses that can be learned has to be increased by one. In deleteOnReset (3) mode, locked addresses never age out unless the system restarts which will prevent port movement or intrusion.
1.3.6.1.4.1.171.12.63.3.1.1.1.3INTEGER {permanent(1), deleteOnTimeout(2), deleteOnReset(3)}read-writecurrent
swPortSecPortAdmState
OBJECT-TYPE
Indicates the administration state of the locking address.
1.3.6.1.4.1.171.12.63.3.1.1.1.4INTEGER {enabled(1), disabled(2)}read-writecurrent
swPortSecPortClearCtrl
OBJECT-TYPE
Used to clear port security entries by port. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
1.3.6.1.4.1.171.12.63.3.1.1.1.5INTEGER {other(1), start(2)}read-writecurrent
swPortSecPortViolationAction
OBJECT-TYPE
Used to indicates the action when violation occurs. When the number of secure MAC address reaches the maximum learning number on the port, for drop action, new entry will be dropped and for shutdown action, the port will be shut down and enter error-disabled state immediately.
1.3.6.1.4.1.171.12.63.3.1.1.1.6INTEGER {drop(1), shutdown(2)}read-writecurrent
swPortSecMgmtByVLAN
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.63.3.2
swPortSecVLANTable
OBJECT-TYPE
A port security feature which controls the address leaning capability. When number is given said N, which allows N addresses to be learned on this VLAN, the first N learned addresses are locked at this VLAN as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN.
1.3.6.1.4.1.171.12.63.3.2.1not-accessiblecurrent
swPortSecVLANEntry
OBJECT-TYPE
A list of information contained in the swPortSecVLANTable.
1.3.6.1.4.1.171.12.63.3.2.1.1not-accessiblecurrent
swPortSecVLANID
OBJECT-TYPE
Indicates the secured VLAN to lock address learning.
1.3.6.1.4.1.171.12.63.3.2.1.1.1INTEGER (1..4094)not-accessiblecurrent
swPortSecVLANMaxLernAddr
OBJECT-TYPE
Indicates allowable number of addresses to be learned on this VLAN. A value of -1 means no-limit. The default value is no-limit. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
1.3.6.1.4.1.171.12.63.3.2.1.1.2INTEGERread-writecurrent
swPortSecVLANClearCtrl
OBJECT-TYPE
Used to clear port security entries by VLAN. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
1.3.6.1.4.1.171.12.63.3.2.1.1.3INTEGER {other(1), start(2)}read-writecurrent
swPortSecMgmtByVLANOnPort
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.63.3.3
swPortSecVLANOnPortTable
OBJECT-TYPE
A port security feature which controls the address learning capability. When number is given said N, which allows N addresses to be learned on this VLAN from the special port, the first N learned addresses are locked at this VLAN from the special port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN from the special port.
1.3.6.1.4.1.171.12.63.3.3.1not-accessiblecurrent
swPortSecVLANOnPortEntry
OBJECT-TYPE
A list of information contained in the swPortSecVLANOnPortTable.
1.3.6.1.4.1.171.12.63.3.3.1.1not-accessiblecurrent
swPortSecVLANOnPortMaxLernAddr
OBJECT-TYPE
Indicates allowable number of addresses to be learned on this VLAN from the special port. A value of -1 means no-limit. The default value is no-limit. Only VLANs with limitations will be displayed in this table. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
1.3.6.1.4.1.171.12.63.3.3.1.1.1INTEGERread-writecurrent
swPortSecVLANOnPortAddCtrl
OBJECT-TYPE
other (1): When user gets this object, it always returns other(1). add (2): Used to configure the VLAN limit from the special port. If 'add' is selected, swPortSecVLANOnPortMaxLernAddr must be set to a valid value except -1.
1.3.6.1.4.1.171.12.63.3.3.1.1.2INTEGER {other(1), add(2)}read-createcurrent
swPortSecMgmtByVLANOnPortClearCtrl
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.63.3.3.2
swPortSecMgmtByVLANOnPortClearPort
OBJECT-TYPE
Indicates the port.
1.3.6.1.4.1.171.12.63.3.3.2.1INTEGERread-writecurrent
swPortSecMgmtByVLANOnPortClearVID
OBJECT-TYPE
Indicates the VID.
1.3.6.1.4.1.171.12.63.3.3.2.2INTEGERread-writecurrent
swPortSecMgmtByVLANOnPortClearAction
OBJECT-TYPE
other(1): When user gets this object, it always returns other(1). start(2): Used to clear port security entries by VLAN on the special port.
1.3.6.1.4.1.171.12.63.3.3.2.3INTEGER {other(1), start(2)}read-writecurrent
swPortSecEntriesTable
OBJECT-TYPE
This table is used to show port security entries.
1.3.6.1.4.1.171.12.63.3.4not-accessiblecurrent
swPortSecEntriesEntry
OBJECT-TYPE
A list of information contained in the swPortSecEntriesTable.
1.3.6.1.4.1.171.12.63.3.4.1not-accessiblecurrent
swPortSecMac
OBJECT-TYPE
Specifies a MAC address.
1.3.6.1.4.1.171.12.63.3.4.1.1MacAddressread-onlycurrent
swPortSecVID
OBJECT-TYPE
Indicates the VLAN ID.
1.3.6.1.4.1.171.12.63.3.4.1.2INTEGER (1..4094)read-onlycurrent
swPortSecPort
OBJECT-TYPE
Indicates the port.
1.3.6.1.4.1.171.12.63.3.4.1.3INTEGERread-onlycurrent
swPortSecDelCtrl
OBJECT-TYPE
Used to delete this port security entry. Setting this value to 'start' will execute the delete action. Once deleted, the value returns to 'other'.
1.3.6.1.4.1.171.12.63.3.4.1.4INTEGER {other(1), start(2)}read-writecurrent