ZTE-AN-MAC-ANTI-SPOOFING-MIB
File:
ZTE-AN-MAC-ANTI-SPOOFING-MIB.mib (19594 bytes)
Imported modules
Imported symbols
Defined Types
ZxAnMasMacMoveLogEntry |
|
SEQUENCE |
|
|
|
|
zxAnMasMacMoveLogIndex |
Integer32 |
|
|
zxAnMasMacMoveLogMacAddr |
MacAddress |
|
|
zxAnMasMacMoveLogVid |
Integer32 |
|
|
zxAnMasMacMoveLogFromIfIndex |
Integer32 |
|
|
zxAnMasMacMoveLogFromSubIfIndex |
ZxAnSubIfIndex |
|
|
zxAnMasMacMoveLogToIfIndex |
Integer32 |
|
|
zxAnMasMacMoveLogToSubIfIndex |
ZxAnSubIfIndex |
|
ZxAnMasIfConfEntry |
|
SEQUENCE |
|
|
|
|
zxAnMasIfTrustEnable |
INTEGER |
|
Defined Values
zxAnMasMib |
1.3.6.1.4.1.3902.1082.70.20 |
This MIB defines mac-anti-spoofing objects of zte Access Node,
Mas means mac-anti-spoofing. |
MODULE-IDENTITY |
|
|
|
zxAnMasEnable |
1.3.6.1.4.1.3902.1082.70.20.1.1 |
Enable or disable MAC-anti-spoofing(Mas). |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enabled(1), disabled(2) |
|
zxAnMasUplinkProtectEnable |
1.3.6.1.4.1.3902.1082.70.20.1.2 |
Enable or disable global uplink-protect status.When zxAnMasEnable
is enable, this value is valid.
As follows are the combination of zxAnMasEnable and
zxAnMasUplinkProtectEnable:
1) zxAnMasEnable is disabled, then MAC move can happen and won't be
forbidden by the system.
2) zxAnMasEnable is enable and zxAnMasUplinkProtectEnable is
enabled, then MAC move between user-port is forbidden, MAC can
move from user-port to uplink-port and MAC can move between
two uplink-port, can't move from uplink-port to user-port.
This combination is the recommended configure.
3) zxAnMasEnable is enable and zxAnMasUplinkProtectEnable is
disabled, then any MAC move will be forbidden by the system.
4)Only supports C3XX, not supports C6XX. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enabled(1), disabled(2) |
|
zxAnMasUserSideMacMoveEnable |
1.3.6.1.4.1.3902.1082.70.20.1.3 |
Enable or disable user-side MAC address moving function. When
zxAnMasEnable and zxAnMasUplinkProtectEnable are all enabled,
zxAnMasUserSideMacMoveEnable is activated.
enabled(1) - MAC address can move between user ports, but can't
move from uplink port to user port.
disabled(2) - MAC address can't move between user ports.
Only supports C3XX, not supports C6XX. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enabled(1), disabled(2) |
|
zxAnMasMacMovePermitVlanList |
1.3.6.1.4.1.3902.1082.70.20.1.4 |
MAC-anti-spoofing(Mas) VLAN ID list for permitting MAC address
moving.
| Byte 0 | Byte 1 | Byte 2 | Byte 3 ... Byte 512 |
+-----------+-----------+-----------+-----------...--------------+
| BitMap | BitMap | BitMap | BitMap ... BitMap |
| VLAN 0-7 | VLAN8-15 | VLAN16-23 | VLAN24-31 ...VLAN4088-4095 |
+-----------+-----------+-----------+-----------...--------------+
If one bit is set to '1', the corresponding VLAN ID is configured
to permit MAC address moving.
VLAN 0 and VLAN 4095 are invalid, so bit 0 and bit 4095 must be
always '0'.
This object is effective only when zxAnMasEnable is enabled. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
OCTET STRING |
Size(512) |
|
zxAnMasMacMoveReportEnable |
1.3.6.1.4.1.3902.1082.70.20.2.1.1.1 |
Enable or disable MAC move notification report control.
The related notification group is zxAnMasMacMoving and
zxAnMasMacMoveForbidden.
When zxAnMasMacMoveReportEnable is disabled, the system
can't detect any MAC move.
When zxAnMasMacMoveReportEnable is enabled, the system
can detect MAC move.A MAC move can be detected by main-card
or user-card and will be recorded as a MAC move log.
Based on the MAC move log, a MAC move notification will be
reported to NMS. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enabled(1), disabled(2) |
|
zxAnMasMacMoveReportInterval |
1.3.6.1.4.1.3902.1082.70.20.2.1.1.2 |
The report interval of the same MAC move notification.When
zxAnMasMacMoveReportEnable is enable and a MAC move is
detected by system, the system will record a MAC move log.
The first time this MAC move log will be reported to NMS in 5
seconds,later this same MAC move log will be reported to NMS
after the defined zxAnMasMacMoveReportInterval. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
1..300 |
|
zxAnMasMacMoveLogEntry |
1.3.6.1.4.1.3902.1082.70.20.2.1.2.1 |
This table contains information about a specific MAC move log.
When a MAC move is detected by the system, it will be recorded
as a MAC move log. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnMasMacMoveLogEntry |
|
|
zxAnMasMacMoveLogIndex |
1.3.6.1.4.1.3902.1082.70.20.2.1.2.1.1 |
The index of a specific MAC move log.The system will store
at most 256 different MAC move logs in current. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
Integer32 |
1..2147483647 |
|
zxAnMasMacMoveLogMacAddr |
1.3.6.1.4.1.3902.1082.70.20.2.1.2.1.2 |
This value indicates the MAC address that move between
zxAnMasMacMoveLogFromIfIndex and zxAnMasMacMoveLogToIfIndex on
zxAnMasMacMoveLogVid. This object is instantiated only when
zxAnMasMacMoveReportEnable value is set to enable(1) and a MAC
move is detected by the MAC move notification feature. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
MacAddress |
|
|
zxAnMasMacMoveLogVid |
1.3.6.1.4.1.3902.1082.70.20.2.1.2.1.3 |
This value indicates the VLAN on which the
zxAnMasMacMoveLogMacAddr is moving.This object is instantiated
only when zxAnMasMacMoveReportEnable value is set to enable(1)
and a MAC move is detected by the MAC move notification feature. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
|
|
zxAnMasMacMoveLogFromIfIndex |
1.3.6.1.4.1.3902.1082.70.20.2.1.2.1.4 |
The value of the port from which the zxAnMasMacMoveLogMacAddr
is moving on zxAnMasMacMoveLogVid.
This object is instantiated only when zxAnMasEnable and
zxAnMasMacMoveReportEnable value is set to enable(1) and a MAC
move is detected by the MAC move notification feature. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
|
|
zxAnMasMacMoveLogFromSubIfIndex |
1.3.6.1.4.1.3902.1082.70.20.2.1.2.1.5 |
The value of the sub-port from which the zxAnMasMacMoveLogMacAddr
is moving on zxAnMasMacMoveLogVid.This object is instantiated
only when zxAnMasMacMoveReportEnable value is set to enable(1)
and a MAC move is detected by the MAC move notification feature. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
ZxAnSubIfIndex |
|
|
zxAnMasMacMoveLogToIfIndex |
1.3.6.1.4.1.3902.1082.70.20.2.1.2.1.6 |
The value of the port to which the zxAnMasMacMoveLogMacAddr
is moving on zxAnMasMacMoveLogVid.This object is instantiated
only when zxAnMasMacMoveReportEnable value is set to enable(1)
and a MAC move is detected by the MAC move notification feature. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
|
|
zxAnMasMacMoveLogToSubIfIndex |
1.3.6.1.4.1.3902.1082.70.20.2.1.2.1.7 |
The value of the sub-port to which the zxAnMasMacMoveLogMacAddr
is moving on zxAnMasMacMoveLogVid. This object is instantiated
only when zxAnMasMacMoveReportEnable value is set to enable(1)
and a MAC move is detected by the MAC move notification feature. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
ZxAnSubIfIndex |
|
|
zxAnMasIfConfTable |
1.3.6.1.4.1.3902.1082.70.20.2.2.2 |
MAC-anti-spoofing(Mas) trust configuration for permitting MAC
address moving based on interface table. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
ZxAnMasIfConfEntry |
|
zxAnMasIfConfEntry |
1.3.6.1.4.1.3902.1082.70.20.2.2.2.1 |
An entry in zxAnMasIfConfTable. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnMasIfConfEntry |
|
|
zxAnMasIfTrustEnable |
1.3.6.1.4.1.3902.1082.70.20.2.2.2.1.1 |
Enable or disable MAC-anti-spoofing(Mas) trust enabling on uplink
interface. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enabled(1), disabled(2) |
|
zxAnMasMacMoving |
1.3.6.1.4.1.3902.1082.70.20.3.1.1 |
zxAnMasMacMoving means the mac move is generated and successful.
If zxAnMasMacMoveReportEnable is enable, zxAnMasMacMoving may be
generated when a MAC entry is moving between two interfaces. |
Status: current |
Access: read-write |
NOTIFICATION-TYPE |
|
|
|
zxAnMasMacMoveForbidden |
1.3.6.1.4.1.3902.1082.70.20.3.1.2 |
zxAnMasMacMoveForbidden means the mac move is forbbiden by
system.If both zxAnMasEnable and zxAnMasMacMoveReportEnable
is enable,zxAnMasMacMoveForbidden may be generated when a MAC
entry attempts to move between two interfaces. |
Status: current |
Access: read-write |
NOTIFICATION-TYPE |
|
|
|
zxAnMasCompliance |
1.3.6.1.4.1.3902.1082.70.20.4.1.1 |
The compliance statement for entities which implement the
ZTE-AN-MAC-ANTI-SPOOFING-MIB.OnlyC3XX support,C6XX not support anymore |
Status: current |
Access: read-write |
MODULE-COMPLIANCE |
|
|
|
zxAnMasGlobalGroup |
1.3.6.1.4.1.3902.1082.70.20.4.2.1 |
A collection of objects providing MAC-anti-spoofing global
information. |
Status: current |
Access: read-write |
OBJECT-GROUP |
|
|
|
zxAnMasMacMoveGlbGroup |
1.3.6.1.4.1.3902.1082.70.20.4.2.2 |
A collection of objects providing MAC move notification
report-control information. |
Status: current |
Access: read-write |
OBJECT-GROUP |
|
|
|
zxAnMasMacMoveLogGroup |
1.3.6.1.4.1.3902.1082.70.20.4.2.3 |
A collection of objects providing MAC move log information. |
Status: current |
Access: read-write |
OBJECT-GROUP |
|
|
|
zxAnMasIfConfGroup |
1.3.6.1.4.1.3902.1082.70.20.4.2.4 |
A collection of objects providing MAC port configuration. |
Status: current |
Access: read-write |
OBJECT-GROUP |
|
|
|
zxAnMasMacMoveTrapsGroup |
1.3.6.1.4.1.3902.1082.70.20.4.2.50 |
A collection of objects providing MAC move notification information. |
Status: current |
Access: read-write |
NOTIFICATION-GROUP |
|
|
|