DELLEMC-OS10-PORT-SECURITY-MIB

File: DELLEMC-OS10-PORT-SECURITY-MIB.mib (25667 bytes)

Imported modules

SNMPv2-SMI SNMPv2-CONF SNMPv2-TC
Q-BRIDGE-MIB IF-MIB DELLEMC-OS10-SMI-MIB

Imported symbols

MODULE-IDENTITY OBJECT-TYPE Unsigned32
Integer32 MODULE-COMPLIANCE OBJECT-GROUP
TruthValue MacAddress TEXTUAL-CONVENTION
VlanIndex InterfaceIndex os10

Defined Types

SecureMacAddrType  
Represents Secure mac address type. none(0) - Neither secure dynamic nor sticky macs are flushed. 0 will be returned on GET operation of os10PortSecurityGlobalClearSecureMacAddresses and os10PortSecurityIfClearSecureMacAddresses MIB objects . dynamic(1) - All secure MAC addresses which are learnt on the switch. sticky(2) - All secure MAC addresses which are learnt and retained across reboots. This will clear sticky MACs all(3) - All the secure dynamic and sticky mac addresses will be flushed.
TEXTUAL-CONVENTION    
  INTEGER none(0), dynamic(1), sticky(2), all(3)  

SecureMacViolationType  
Represents secure mac address violation type. none (0) macLimitViolation(1) - Secure Mac Learn Limit violation. stmvViolation(2) - Station move violation.
TEXTUAL-CONVENTION    
  INTEGER none(0), macLimitViolation(1), stmvViolation(2)  

Os10PortSecurityIfConfigEntry  
SEQUENCE    
  os10PortSecurityIfIndex InterfaceIndex
  os10PortSecurityIfPortSecurityEnable TruthValue
  os10PortSecurityIfViolationStatus INTEGER
  os10PortSecurityIfSecureMacLearnLimit Unsigned32
  os10PortSecurityIfStationMoveEnable TruthValue
  os10PortSecurityIfMacViolationAction INTEGER
  os10PortSecurityIfStmvViolationAction INTEGER
  os10PortSecurityIfStickyEnable TruthValue
  os10PortSecurityIfClearSecureMacAddresses SecureMacAddrType
  os10PortSecurityIfSecureMacAgeEnable TruthValue
  os10PortSecurityIfTotalSecureAddresses Integer32
  os10PortSecurityIfTotalSecureDynamicAddresses Integer32
  os10PortSecurityIfTotalSecureStickyAddresses Integer32
  os10PortSecurityIfTotalSecureStaticAddresses Integer32

Os10PortSecuritySecureMacAddrEntry  
SEQUENCE    
  os10PortSecuritySecureMacVlanId VlanIndex
  os10PortSecuritySecureMacAddress MacAddress
  os10PortSecuritySecureMacIfIndex InterfaceIndex
  os10PortSecuritySecureMacAddrType INTEGER

Defined Values

os10PortSecurityMib 1.3.6.1.4.1.674.11000.5000.100.5
The Mib module for managing Dell Networking L2 Port Security feature.
MODULE-IDENTITY    

os10PortSecurityMibObjects 1.3.6.1.4.1.674.11000.5000.100.5.1
OBJECT IDENTIFIER    

os10PortSecurityGlobalObjects 1.3.6.1.4.1.674.11000.5000.100.5.1.1
OBJECT IDENTIFIER    

os10PortSecurityInterfaceObjects 1.3.6.1.4.1.674.11000.5000.100.5.1.2
OBJECT IDENTIFIER    

os10PortSecurityMacObjects 1.3.6.1.4.1.674.11000.5000.100.5.1.3
OBJECT IDENTIFIER    

os10PortSecurityGlobalEnable 1.3.6.1.4.1.674.11000.5000.100.5.1.1.1
This object is used to enable or disable port security feature globally on the device.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

os10PortSecurityGlobalTotalSecureAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.1.2
The total number of MAC addresses secured in the device.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

os10PortSecurityGlobalTotalSecureDynamicAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.1.3
The total number of secure dynamic MAC addresses in the device.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

os10PortSecurityGlobalTotalSecureStickyAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.1.4
The total number of secure sticky MAC addresses in the device.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

os10PortSecurityGlobalTotalSecureStaticAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.1.5
The total number of secure static MAC addresses in the device.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

os10PortSecurityGlobalClearSecureMacAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.1.6
This object is used to delete all the secure MAC addresses in the device based on the specified type.
Status: current Access: read-write
OBJECT-TYPE    
  SecureMacAddrType  

os10PortSecurityGlobalResetViolation 1.3.6.1.4.1.674.11000.5000.100.5.1.1.7
This object is used to reset the selected violation type on all port security interfaces in the device. Get request of this object always returns zero as value set through this object will not be stored in database
Status: current Access: read-write
OBJECT-TYPE    
  SecureMacViolationType  

os10PortSecurityIfConfigTable 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1
A table for Port Security configuration entries. The number of entries is determined by the number of interfaces in the system that can support the port security feature.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Os10PortSecurityIfConfigEntry

os10PortSecurityIfConfigEntry 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1
Entry containing port security information for a particular interface.
Status: current Access: not-accessible
OBJECT-TYPE    
  Os10PortSecurityIfConfigEntry  

os10PortSecurityIfIndex 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.1
Index to this table. The index value used to identify the port security configurations associated with this entry
Status: current Access: not-accessible
OBJECT-TYPE    
  InterfaceIndex  

os10PortSecurityIfPortSecurityEnable 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.2
This Mib object specifies if the port security feature is enabled or not on an interface. The value of this object has no effect when the value of os10PortSecurityGlobalEnable is set to 'false'.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

os10PortSecurityIfViolationStatus 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.3
This object represents the port security status of an interface. normal(1) - This indicates port is operating normally without any violation. macLearnLimitErrDisable(2) - This indicates that the port is shutdown due to mac learn limit violation when the object os10PortSecurityIfMacViolationAction is of type 'shutdown'. stationMoveErrDisable(3) - This indicates that the port is shutdown due to station move violation when the object os10PortSecurityIfStmvViolationAction is of type 'shutdownOrig' or 'shutdownOffending' or 'shutdownBoth'.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER normal(1), macLearnLimitErrDisable(2), stationMoveErrDisable(3)  

os10PortSecurityIfSecureMacLearnLimit 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.4
The maximum number of MAC addresses to be secured on the interface. User can secure a minimum of one and maximum of 3072 mac addresses on a port. i.e set operation is allowed only with in range 1-3072. If the newly configured mac learning limit value is smaller than already learnt secure MAC addresses, then all the secure MAC addresses learnt so far (secure sticky or secure dynamic) will be flushed. In case, total number of secure static mac addresses (configured) count is greater than newly specified mac learn limit, configuration will be rejected. Administrator has to delete the extra secure static addresses or mac learn limit should be modified to accomodate existing secure static mac addresses. User can remove the mac learing limit restriction by setting value 4294967295.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32 0..4294967295  

os10PortSecurityIfStationMoveEnable 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.5
This object is used to enable or disable station movement on the dynamically secured mac addresses learnt on the interface. By default, this is set to false. It is not possible to enable the station movement on a port with sticky feature enabled
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

os10PortSecurityIfMacViolationAction 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.6
Determines the action to be taken when mac limit violation occurs in the system. drop(1) - No further MAC learning is allowed on the interface. Packets received with a source MAC address which is not in the secured MAC address list will be dropped. dropAndNotify(2) - No further MAC learning is allowed on the interface and a syslog message or an event is emitted to notify about port security violation. shutdown(3) - The interface will be shut down. forward(4) - No further MAC learning is allowed on the interface. Packets received with a source MAC address which is not in the secured MAC address list will be flooded or forwarded.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER drop(1), dropAndNotify(2), shutdown(3), forward(4)  

os10PortSecurityIfStmvViolationAction 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.7
Determines the action to be taken when a secure dynamic mac address move violation occurs in the system. drop(1) - The MAC address that triggered the violation shall not be learned on the new port (offending port). The packets that triggered the violation shall be dropped. dropAndNotify(2) - Raises a syslog to notify about station movement violation. The log will contain MAC causing violation, vlanId, original interface name and offending interface name. shutdownOrigPort(3) - The original interface on which MAC is learnt will be shutdown. shutdownOffendigPort(4) - The offending interface causing station move will be shutdown. shutdowBoth(5) - Both the original and offending interfaces will be shutdown.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER drop(1), dropAndNotify(2), shutdownOrigPort(3), shutDownOffendingPort(4), shutdownBoth(5)  

os10PortSecurityIfStickyEnable 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.8
Set to 'true' to enable and 'false' to disable Sticky port security feature on this interface. Enabling this feature allows the device to secure learnt MAC addresses on this interface permanently. In order to remove the sticky addresses on this interface, user has to manually delete the sticky MAC address(es) or disable the sticky feature itself. Manual deletion of all addresses can be accomplished by os10PortSecurityIfClearSecureMacAddresses object. It is possible to enable sticky feature on a port only if mac learning limit restriction is enabled with os10PortSecurityIfSecureMacLearnLimit.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

os10PortSecurityIfClearSecureMacAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.9
This object is used to delete secure MAC addresses based on the specified type.
Status: current Access: read-write
OBJECT-TYPE    
  SecureMacAddrType  

os10PortSecurityIfSecureMacAgeEnable 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.10
This object is used to enable aging of the dynamically secured mac addresses learnt on the interface. Sticky and static macs will never age out. It is not possible to enable aging on a port on which sticky feature is enabled. By default, this is set to false.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

os10PortSecurityIfTotalSecureAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.11
The total number of secured MAC addresses learnt (dynamic or stickt) or configured (static) on a particular interface.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

os10PortSecurityIfTotalSecureDynamicAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.12
The total number of secure dynamic MAC addresses learnt on a particular interface.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

os10PortSecurityIfTotalSecureStickyAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.13
The total number of secure sticky MAC addresses learnt on a particular interface.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

os10PortSecurityIfTotalSecureStaticAddresses 1.3.6.1.4.1.674.11000.5000.100.5.1.2.1.1.14
The total number of secure static MAC addresses configured on a particular interface.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

os10PortSecuritySecureMacAddrTable 1.3.6.1.4.1.674.11000.5000.100.5.1.3.1
A table containing the list of secure MAC addresses.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Os10PortSecuritySecureMacAddrEntry

os10PortSecuritySecureMacAddrEntry 1.3.6.1.4.1.674.11000.5000.100.5.1.3.1.1
Entry containing secure MAC address information for a particular interface.
Status: current Access: not-accessible
OBJECT-TYPE    
  Os10PortSecuritySecureMacAddrEntry  

os10PortSecuritySecureMacVlanId 1.3.6.1.4.1.674.11000.5000.100.5.1.3.1.1.1
This is the vlan on which the os10PortSecuritySecureMacAddress is configured or learnt.
Status: current Access: not-accessible
OBJECT-TYPE    
  VlanIndex  

os10PortSecuritySecureMacAddress 1.3.6.1.4.1.674.11000.5000.100.5.1.3.1.1.2
This is a secure MAC address configured or learnt on an interface.
Status: current Access: not-accessible
OBJECT-TYPE    
  MacAddress  

os10PortSecuritySecureMacIfIndex 1.3.6.1.4.1.674.11000.5000.100.5.1.3.1.1.3
This is the interface on which the os10PortSecuritySecureMacAddress is configured or learnt.
Status: current Access: read-only
OBJECT-TYPE    
  InterfaceIndex  

os10PortSecuritySecureMacAddrType 1.3.6.1.4.1.674.11000.5000.100.5.1.3.1.1.4
This object indicates if the secure MAC address is a configured 'static' or learnt 'dynamic' or learnt and retained across reboots 'sticky'.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER static(1), dynamic(2), sticky(3)  

os10PortSecurityMibConformance 1.3.6.1.4.1.674.11000.5000.100.5.2
OBJECT IDENTIFIER    

os10PortSecurityCompliances 1.3.6.1.4.1.674.11000.5000.100.5.2.1
OBJECT IDENTIFIER    

os10PortSecurityGroups 1.3.6.1.4.1.674.11000.5000.100.5.2.2
OBJECT IDENTIFIER    

os10PortSecurityMibConform 1.3.6.1.4.1.674.11000.5000.100.5.2.1.1
The compliance statement for the Dell Networking OS Port Security Mib.
Status: current Access: read-only
MODULE-COMPLIANCE    

os10PortSecurityGlobalGroup 1.3.6.1.4.1.674.11000.5000.100.5.2.2.1
A set of global objects for use with the Port Security feature.
Status: current Access: read-only
OBJECT-GROUP    

os10PortSecurityInterfaceGroup 1.3.6.1.4.1.674.11000.5000.100.5.2.2.2
A set of interface level objects for use with the Port Security feature.
Status: current Access: read-only
OBJECT-GROUP    

os10PortSecuritySecureMacAddrGroup 1.3.6.1.4.1.674.11000.5000.100.5.2.2.3
Static secure MAC addresss configuration parameters on an interface.
Status: current Access: read-only
OBJECT-GROUP