ZTE-AN-SECURITY-INTERFACE-MIB
File:
ZTE-AN-SECURITY-INTERFACE-MIB.mib (43281 bytes)
Imported modules
Imported symbols
Defined Types
StormCtrlPktType |
|
Storm control packet type. |
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
broadcast(1), unknownUnicast(2), multicast(3) |
|
ZxAnSecStormCtrlIfEntry |
|
SEQUENCE |
|
|
|
|
zxAnSecStormCtrlIfPktType |
StormCtrlPktType |
|
|
zxAnIfStormCtrlRateLmtUnit |
INTEGER |
|
|
zxAnIfStormCtrlRateLmtIngress |
Integer32 |
|
|
zxAnIfStormCtrlRateLmtEgress |
Integer32 |
|
ZxAnSecStormCtrlIfVlanEntry |
|
SEQUENCE |
|
|
|
|
zxAnSecStormCtrlIfVid |
VlanId |
|
|
zxAnSecStormCtrlIfVlanPktType |
StormCtrlPktType |
|
|
zxAnSecStormCtrlIfVlanRateLimit |
Integer32 |
|
|
zxAnSecStormCtrlIfVlanBurstSize |
Integer32 |
|
|
zxAnSecStormCtrlIfVlanRowStatus |
RowStatus |
|
RateLimitProtocolType |
|
Protocol Type. |
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
arp(1), dhcpv4(2), dhcpv6(3), igmp(4), pppoe(5), cfm(6), nd(7), mld(8), icmp(9), icmpv6(10), bpdu(11), linkLocalAddr(12) |
|
RateLimitScale |
|
Protocol Rate Limiting Scale. |
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
vlan(2), vport(3), vportAndVlan(4), physicalPort(5), pvc(6) |
|
ZxAnProtoRateLimitCapEntry |
|
SEQUENCE |
|
|
|
|
zxAnProtoRateLimitCapScale |
RateLimitScale |
|
|
zxAnProtoRateLimitCapType |
RateLimitProtocolType |
|
|
zxAnProtoRateLimitCapDirection |
INTEGER |
|
|
zxAnProtoRateLimitCapUnits |
INTEGER |
|
ZxAnProtoIfRateLimitEntry |
|
SEQUENCE |
|
|
|
|
zxAnProtoIfRateLimitProtoType |
RateLimitProtocolType |
|
|
zxAnProtoIfRateLimitIngress |
Integer32 |
|
|
zxAnProtoIfRateLimitEgress |
Integer32 |
|
ZxAnSecIfMacLearnedLimitEntry |
|
SEQUENCE |
|
|
|
|
zxAnSecIfMacLearnedLimitEnable |
INTEGER |
|
|
zxAnSecIfMaxLearnedMacs |
Integer32 |
|
ZxAnSecIfVlanMacLearnedEntry |
|
SEQUENCE |
|
|
|
|
zxAnSecIfVlanMacLearnedVid |
VlanId |
|
|
zxAnSecIfVlanMacLearnedMaxMacs |
Integer32 |
|
|
zxAnSecIfVlanMacLearnedRowStatus |
RowStatus |
|
ZxAnSecIfMacBindingEntry |
|
SEQUENCE |
|
|
|
|
zxAnSecIfMacBindingMacAddress |
MacAddress |
|
|
zxAnSecIfMacBindingRowStatus |
RowStatus |
|
ZxAnSecIfMacFilterEntry |
|
SEQUENCE |
|
|
|
|
zxAnSecIfMacFilterMacAddress |
MacAddress |
|
|
zxAnSecIfMacFilterRowStatus |
RowStatus |
|
ZxAnSecIpv6FilterVlanConfEntry |
|
SEQUENCE |
|
|
|
|
zxAnSecIpv6FilterVlanConfId |
Integer32 |
|
|
zxAnSecIpv6FilterVid |
VlanId |
|
|
zxAnSecIpv6FilterVlanMask |
Integer32 |
|
|
zxAnSecIpv6FilterVlanRowStatus |
RowStatus |
|
ZxAnSecVlanRateLimitEntry |
|
SEQUENCE |
|
|
|
|
zxAnSecVlanRateLimitVid |
VlanId |
|
|
zxAnSecVlanRateLimitDirection |
RateLimitDirection |
|
|
zxAnSecVlanRateLimit |
Integer32 |
|
|
zxAnSecVlanRateLimitRowStatus |
RowStatus |
|
ZxAnSecVlanRangeRateLmtEntry |
|
SEQUENCE |
|
|
|
|
zxAnSecVlanRangeRateLmtConfId |
Integer32 |
|
|
zxAnSecVlanRangeRateLmtDirection |
INTEGER |
|
|
zxAnSecVlanRangeRateLmt |
Integer32 |
|
|
zxAnSecVlanRangeRateLmtBurstSize |
Integer32 |
|
|
zxAnSecVlanRangeRateLmtVlanIds |
DisplayString |
|
|
zxAnSecVlanRangeRateLmtRowStatus |
RowStatus |
|
Defined Values
zxAnSecurityInterfaceMib |
1.3.6.1.4.1.3902.1082.70.10 |
This MIB defines zte Access Node Security Interface managed
objects. |
MODULE-IDENTITY |
|
|
|
zxAnSecInterfaceCapabilities |
1.3.6.1.4.1.3902.1082.70.10.1.1 |
The security interface capabilities of this equipment.
The bit value 1 means the function represented by this bit is
supported by this equipment.
bit 0: value 1 means supporting zxAnSecVlanRangeRateLmtTable and
zxAnSecVlanRateLimitTable was deprecated.
bit 1: value 1 means supporting the valid range of
zxAnSecIfMaxLearnedMacs is from 0 to 1048576 or 2147483647,
otherwise the valid range is from 0 to 16383 or 65535.
NOTE: No recommended to display it in NMS. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
BITS |
supportVlanRateLmtBurstSize(0), supportMaxLearnedMacsRangeTo1M(1) |
|
zxAnSecStormCtrlBcastRateLimit |
1.3.6.1.4.1.3902.1082.70.10.2.2.1.1 |
Broadcast packet rate limit.
Value 0 means that the packet will be discarded.
0x7FFFFFFF means no limit. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..1000000 | 2147483647 |
|
zxAnSecStormCtrlMcastRateLimit |
1.3.6.1.4.1.3902.1082.70.10.2.2.1.2 |
Multicast packet rate limit.
Value 0 means that the packet will be discarded.
0x7FFFFFFF means no limit. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..1000000 | 2147483647 |
|
zxAnStormCtrlUnknownUcastRateLmt |
1.3.6.1.4.1.3902.1082.70.10.2.2.1.3 |
Unknown unicast packet rate limit.
Value 0 means that the packet will be discarded.
0x7FFFFFFF means no limit. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..1000000 | 2147483647 |
|
zxAnSecStormCtrlIfEntry |
1.3.6.1.4.1.3902.1082.70.10.2.2.3.1 |
A zxAnSecStormCtrlIfTable entry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnSecStormCtrlIfEntry |
|
|
zxAnIfStormCtrlRateLmtUnit |
1.3.6.1.4.1.3902.1082.70.10.2.2.3.1.2 |
The unit of packet rate limit. Option 'kbps' has been deprecated. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
pps(1), kbps(2) |
|
zxAnIfStormCtrlRateLmtIngress |
1.3.6.1.4.1.3902.1082.70.10.2.2.3.1.3 |
Ingress packet rate limit.
Value 0 means that the packet will be discarded.
0x7FFFFFFE means no limit.
0x7FFFFFFF means not supported. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..1000000 | 2147483646 | 2147483647 |
|
zxAnIfStormCtrlRateLmtEgress |
1.3.6.1.4.1.3902.1082.70.10.2.2.3.1.4 |
Egress packet rate limit.
Value 0 means that the packet will be discarded.
0x7FFFFFFE means no limit.
0x7FFFFFFF means not supported. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..1000000 | 2147483646 | 2147483647 |
|
zxAnSecStormCtrlIfVlanEntry |
1.3.6.1.4.1.3902.1082.70.10.2.2.4.1 |
A zxAnSecStormCtrlIfVlanTable entry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnSecStormCtrlIfVlanEntry |
|
|
zxAnSecStormCtrlIfVlanRateLimit |
1.3.6.1.4.1.3902.1082.70.10.2.2.4.1.3 |
Packet rate limit.
Value 0 means that the packet will be discarded. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..65535 |
|
zxAnSecStormCtrlIfVlanRowStatus |
1.3.6.1.4.1.3902.1082.70.10.2.2.4.1.50 |
The status of this conceptual row.
The supported actions of this conceptual row only include:
'createAndGo' and 'destroy'.
To create a row in this table, a manager must set this object to
createAndGo(4), and must comply with the multi-variables binding
rule described in zxAnSecStormCtrlIfVlanEntry.
To delete a row in this table, a manager must set this object to
destroy(6).
To get this object, the agent always returns active(1). |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnProtoRateLimitCapTable |
1.3.6.1.4.1.3902.1082.70.10.2.3.2.2 |
The supported protocol rate limiting table.
This table specifies which kinds of information on protocol type,
rate limiting scale and unit are supported for current device. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
ZxAnProtoRateLimitCapEntry |
|
zxAnProtoRateLimitCapEntry |
1.3.6.1.4.1.3902.1082.70.10.2.3.2.2.1 |
The supported protocol rate limiting entry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnProtoRateLimitCapEntry |
|
|
zxAnProtoRateLimitCapDirection |
1.3.6.1.4.1.3902.1082.70.10.2.3.2.2.1.3 |
The VLAN rate limit direction. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
both(1), ingress(2), egress(3) |
|
zxAnProtoRateLimitCapUnits |
1.3.6.1.4.1.3902.1082.70.10.2.3.2.2.1.4 |
Supported unit type of rate for a specific protocol. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
pps(1) |
|
zxAnProtoIfRateLimitTable |
1.3.6.1.4.1.3902.1082.70.10.2.3.4 |
The global protocol rate limiting table.
This table specifies protocol rate limiting configuration,
which is used to reduce the maximum traffic rate for
each protocol such as DHCP, IGMP, ICMP and so on. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
ZxAnProtoIfRateLimitEntry |
|
zxAnProtoIfRateLimitEntry |
1.3.6.1.4.1.3902.1082.70.10.2.3.4.1 |
The vport protocol rate limiting entry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnProtoIfRateLimitEntry |
|
|
zxAnProtoIfRateLimitIngress |
1.3.6.1.4.1.3902.1082.70.10.2.3.4.1.4 |
The packet rate limit ingress value.
Value 0 means that the packet will be discarded.
0x7FFFFFFE means no limit.
0x7FFFFFFF means not supported. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..65535 | 2147483646 | 2147483647 |
|
zxAnProtoIfRateLimitEgress |
1.3.6.1.4.1.3902.1082.70.10.2.3.4.1.5 |
The packet rate egress value.
Value 0 means that the packet will be discarded.
0x7FFFFFFE means no limit.
0x7FFFFFFF means not supported. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..65535 | 2147483646 | 2147483647 |
|
zxAnSecIfMacLearnedLimitEntry |
1.3.6.1.4.1.3902.1082.70.10.2.4.2.1 |
An entry in zxAnSecIfSecurityConfTable. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnSecIfMacLearnedLimitEntry |
|
|
zxAnSecIfMacLearnedLimitEnable |
1.3.6.1.4.1.3902.1082.70.10.2.4.2.1.3 |
Enable/disable MAC learning limit. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enable(1), disable(2) |
|
zxAnSecIfMaxLearnedMacs |
1.3.6.1.4.1.3902.1082.70.10.2.4.2.1.4 |
Configure the number of the MAC address learnt. One port can only
learn a maximum of the MACs configured.
When the value of bit 1 (supportMaxLearnedMacsRangeTo1M) of
zxAnSecInterfaceCapabilities is 1, the valid range of the object is
from 0 to 1048576 or 2147483647, the value 2147483647 means no
limit, and the default value is 2147483647, otherwise the valid
range is from 0 to 16383 or 65535, the value 65535 means no limit,
and the default value is 65535. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..1048576 | 2147483647 |
|
zxAnSecIfVlanMacLearnedEntry |
1.3.6.1.4.1.3902.1082.70.10.2.4.3.1 |
An entry in zxAnSecIfVlanMacLearnedTable. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnSecIfVlanMacLearnedEntry |
|
|
zxAnSecIfVlanMacLearnedMaxMacs |
1.3.6.1.4.1.3902.1082.70.10.2.4.3.1.2 |
Configure the number of the MAC address learnt limit.
Value 0 mean to disable MAC address learning. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..4095 |
|
zxAnSecIfVlanMacLearnedRowStatus |
1.3.6.1.4.1.3902.1082.70.10.2.4.3.1.50 |
The status of this conceptual row.
The supported actions of this conceptual row only include:
'createAndGo' and 'destroy'.
To create a row in this table, a manager must set this object to
createAndGo(4), and must comply with the multi-variables binding
rule described in zxAnSecIfVlanMacLearnedEntry.
To delete a row in this table, a manager must set this object to
destroy(6).
To get this object, the agent always returns active(1). |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnSecIfMacBindingEntry |
1.3.6.1.4.1.3902.1082.70.10.2.4.4.1 |
An entry in zxAnSecIfMacBindingTable. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnSecIfMacBindingEntry |
|
|
zxAnSecIfMacBindingRowStatus |
1.3.6.1.4.1.3902.1082.70.10.2.4.4.1.50 |
The status of this conceptual row.
The supported actions of this conceptual row only include:
'createAndGo' and 'destroy'.
To create a row in this table, a manager must set this object to
createAndGo(4), and must comply with the multi-variables binding
rule described in zxAnSecIfMacBindingEntry.
To delete a row in this table, a manager must set this object to
destroy(6).
To get this object, the agent always returns active(1). |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnSecIfMacFilterEntry |
1.3.6.1.4.1.3902.1082.70.10.2.4.5.1 |
An entry in zxAnSecIfMacFilterTable. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnSecIfMacFilterEntry |
|
|
zxAnSecIfMacFilterRowStatus |
1.3.6.1.4.1.3902.1082.70.10.2.4.5.1.50 |
The status of this conceptual row.
The supported actions of this conceptual row only include:
'createAndGo' and 'destroy'.
To create a row in this table, a manager must set this object to
createAndGo(4), and must comply with the multi-variables binding
rule described in zxAnSecIfMacFilterEntry.
To delete a row in this table, a manager must set this object to
destroy(6).
To get this object, the agent always returns active(1). |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnSecIpv6FiltVlanConfNextId |
1.3.6.1.4.1.3902.1082.70.10.2.5.1.1 |
This object contains an unused value for
zxAnSecIpv6FilterVlanConfId in the zxAnSecIpv6FilterVlanConfTable.
The value 0 indicates that no unassigned entries are available. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..32 |
|
zxAnSecIpv6FilterVlanConfEntry |
1.3.6.1.4.1.3902.1082.70.10.2.5.2.1 |
An entry in zxAnSecIpv6FilterVlanConfTable. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnSecIpv6FilterVlanConfEntry |
|
|
zxAnSecIpv6FilterVlanMask |
1.3.6.1.4.1.3902.1082.70.10.2.5.2.1.3 |
The wildcard mask for the zxAnSecIpv6FilterVid bits that must
match.
1 bits in the mask indicate the corresponding bits in the
zxAnSecIpv6FilterVid must match in order for the matching to
be successful, and 0 bits are don't care bits in the matching.
A value of zero causes only packets of source address the same as
zxAnSecIpv6FilterVid to match. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..4095 |
|
zxAnSecIpv6FilterVlanRowStatus |
1.3.6.1.4.1.3902.1082.70.10.2.5.2.1.50 |
The status of this conceptual row.
The supported actions of this conceptual row only include:
'createAndGo' and 'destroy'.
To create a row in this table, a manager must set this object to
createAndGo(4), and must comply with the multi-variables binding
rule described in zxAnSecIpv6FilterVlanConfEntry.
To delete a row in this table, a manager must set this object to
destroy(6).
To get this object, the agent always returns active(1). |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnSecVlanRateLimitEntry |
1.3.6.1.4.1.3902.1082.70.10.2.6.2.1 |
A zxAnSecVlanRateLimitTable entry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnSecVlanRateLimitEntry |
|
|
zxAnSecVlanRateLimit |
1.3.6.1.4.1.3902.1082.70.10.2.6.2.1.3 |
VLAN rate limit, granularity is 64kbps. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
Integer32 |
64..10000000 |
|
zxAnSecVlanRateLimitRowStatus |
1.3.6.1.4.1.3902.1082.70.10.2.6.2.1.50 |
The status of this conceptual row.
The supported actions of this conceptual row only include:
'createAndGo' and 'destroy'.
To create a row in this table, a manager must set this object to
createAndGo(4), and must comply with the multi-variables binding
rule described in zxAnSecVlanRateLimitEntry.
To delete a row in this table, a manager must set this object to
destroy(6).
To get this object, the agent always returns active(1). |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnSecVlanRangeRateLmtEntry |
1.3.6.1.4.1.3902.1082.70.10.2.6.3.1 |
A zxAnSecVlanRangeRateLmtTable entry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnSecVlanRangeRateLmtEntry |
|
|
zxAnSecVlanRangeRateLmtDirection |
1.3.6.1.4.1.3902.1082.70.10.2.6.3.1.2 |
VLAN rate limit direction. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
INTEGER |
ingress(1), egress(2) |
|
zxAnSecVlanRangeRateLmt |
1.3.6.1.4.1.3902.1082.70.10.2.6.3.1.3 |
VLAN rate limit, with a granularity of 64 kbps. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
Integer32 |
64..10000000 |
|
zxAnSecVlanRangeRateLmtVlanIds |
1.3.6.1.4.1.3902.1082.70.10.2.6.3.1.5 |
The VLAN range for rate limiting.
Each VLAN ID ranges from 1 to 4094.
For multiple discrete VLAN IDs, separate them by commas.
For multiple continuous VLAN IDs, configure them by '-' character.
E.g., 100,200-1000,2000. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
DisplayString |
Size(1..32) |
|
zxAnSecVlanRangeRateLmtRowStatus |
1.3.6.1.4.1.3902.1082.70.10.2.6.3.1.50 |
The status of this conceptual row.
The supported actions of this conceptual row only include:
'createAndGo' and 'destroy'.
To create a row in this table, a manager must set this object to
createAndGo(4), and must comply with the multi-variables binding
rule described in zxAnSecVlanRateLimitEntry.
To delete a row in this table, a manager must set this object to
destroy(6).
To get this object, the agent always returns active(1). |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnSecInterfaceCompliance |
1.3.6.1.4.1.3902.1082.70.10.4.1.1 |
The compliance statement for the ZTE-AN-SECURITY-INTERFACE-MIB. |
Status: current |
Access: read-create |
MODULE-COMPLIANCE |
|
|
|
zxAnSecStormCtrlIfGroup |
1.3.6.1.4.1.3902.1082.70.10.4.2.1 |
A collection of objects providing the interface storm control
configuration information. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|
zxAnProtoRateLimitCapGroup |
1.3.6.1.4.1.3902.1082.70.10.4.2.2 |
A collection of objects providing the interface rate protocal limit
capability control configuration information. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|
zxAnProtoIfRateLimitGroup |
1.3.6.1.4.1.3902.1082.70.10.4.2.3 |
A collection of objects providing the interface protocol rate limit
control configuration information. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|
zxAnSecIfMacLearnedLimitGroup |
1.3.6.1.4.1.3902.1082.70.10.4.2.4 |
A collection of objects providing the interface max mac learn
control configuration information. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|