CISCO-PORT-SECURITY-MIB
File:
CISCO-PORT-SECURITY-MIB.mib (70190 bytes)
Imported modules
Imported symbols
Defined Types
ClearSecureMacAddrType |
|
This are the different type of secure mac addresses
which user is allowed to delete globally or
per interface.
When the address deletion is in progress
GET request will not show any values which
were set using SET operation.
done(0) - This the value which is always returned
in a GET request when the clear command has
completed or in progress.
Setting this value to this object has
no effect.
dynamic(1) - All secure MAC addresses which are
learned on the switch.
static(2) - All secure MAC addresses which are
configured by user.
sticky(3) - All secure MAC addresses which
are learned and retained across
reboots.
all(4) - All the MAC addresses on the switch. |
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
done(0), dynamic(1), static(2), sticky(3), all(4) |
|
CpsIfConfigEntry |
|
SEQUENCE |
|
|
|
|
cpsIfPortSecurityEnable |
TruthValue |
|
|
cpsIfPortSecurityStatus |
INTEGER |
|
|
cpsIfMaxSecureMacAddr |
Integer32 |
|
|
cpsIfCurrentSecureMacAddrCount |
Integer32 |
|
|
cpsIfSecureMacAddrAgingTime |
Integer32 |
|
|
cpsIfSecureMacAddrAgingType |
INTEGER |
|
|
cpsIfStaticMacAddrAgingEnable |
TruthValue |
|
|
cpsIfViolationAction |
INTEGER |
|
|
cpsIfViolationCount |
Counter32 |
|
|
cpsIfSecureLastMacAddress |
MacAddress |
|
|
cpsIfClearSecureAddresses |
TruthValue |
|
|
cpsIfUnicastFloodingEnable |
TruthValue |
|
|
cpsIfShutdownTimeout |
Unsigned32 |
|
|
cpsIfClearSecureMacAddresses |
ClearSecureMacAddrType |
|
|
cpsIfStickyEnable |
TruthValue |
|
|
cpsIfInvalidSrcRateLimitEnable |
TruthValue |
|
|
cpsIfInvalidSrcRateLimitValue |
Integer32 |
|
|
cpsIfSecureLastMacAddrVlanId |
VlanIndex |
|
CpsSecureMacAddressEntry |
|
SEQUENCE |
|
|
|
|
cpsSecureMacAddress |
MacAddress |
|
|
cpsSecureMacAddrType |
INTEGER |
|
|
cpsSecureMacAddrRemainingAge |
Integer32 |
|
|
cpsSecureMacAddrRowStatus |
RowStatus |
|
CpsIfVlanSecureMacAddrEntry |
|
SEQUENCE |
|
|
|
|
cpsIfVlanSecureMacAddress |
MacAddress |
|
|
cpsIfVlanSecureVlanIndex |
VlanIndex |
|
|
cpsIfVlanSecureMacAddrType |
INTEGER |
|
|
cpsIfVlanSecureMacAddrRemainAge |
Unsigned32 |
|
|
cpsIfVlanSecureMacAddrRowStatus |
RowStatus |
|
CpsIfVlanEntry |
|
SEQUENCE |
|
|
|
|
cpsIfVlanIndex |
VlanIndex |
|
|
cpsIfVlanMaxSecureMacAddr |
Unsigned32 |
|
|
cpsIfVlanCurSecureMacAddrCount |
Unsigned32 |
|
CpsIfMultiVlanEntry |
|
SEQUENCE |
|
|
|
|
cpsIfMultiVlanIndex |
VlanIndex |
|
|
cpsIfMultiVlanMaxSecureMacAddr |
Unsigned32 |
|
|
cpsIfMultiVlanSecureMacAddrCount |
Unsigned32 |
|
|
cpsIfMultiVlanClearSecureMacAddr |
ClearSecureMacAddrType |
|
|
cpsIfMultiVlanRowStatus |
RowStatus |
|
Defined Values
ciscoPortSecurityMIB |
1.3.6.1.4.1.9.9.315 |
The MIB module for managing Cisco Port Security. |
MODULE-IDENTITY |
|
|
|
cpsGlobalMaxSecureAddress |
1.3.6.1.4.1.9.9.315.1.1.1 |
The maximum number of secure MAC addresses
allowed in the device. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
1..2147483647 |
|
cpsGlobalTotalSecureAddress |
1.3.6.1.4.1.9.9.315.1.1.2 |
The total number of MAC addresses secured
in the device. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..2147483647 |
|
cpsGlobalPortSecurityEnable |
1.3.6.1.4.1.9.9.315.1.1.3 |
The global control to enable or disable
port security feature on the device. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
cpsGlobalSNMPNotifRate |
1.3.6.1.4.1.9.9.315.1.1.4 |
The global control to set the SNMP Notification
rate for port security feature. This object
specifies the rate at which SNMP Notifications
are generated when cpsIfViolationAction
selected is of the type 'dropNotify'.
A value of 0 indicates that an SNMP Notification
is generated for every security violation. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..1000 |
|
cpsGlobalSNMPNotifControl |
1.3.6.1.4.1.9.9.315.1.1.5 |
Set to 'true' to enable global SNMP Notification
for port security feature. Setting the object to
'false' will disable SNMP notifications even if
the cpsIfViolationAction is set to 'dropNotify'
on an interface. The default value is 'false'. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
cpsIfConfigTable |
1.3.6.1.4.1.9.9.315.1.2.1 |
A list of port security configuration entries.
The number of entries is determined by the number of
interfaces in the system that can support the
port security feature. Interfaces that are not
port security capable will not be displayed
in this Table. This table includes interfaces
on which port security parameters can be set even
if port security feature itself cannot be enabled
due to conflict with other features. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
CpsIfConfigEntry |
|
cpsIfConfigEntry |
1.3.6.1.4.1.9.9.315.1.2.1.1 |
Entry containing port security information for a
particular interface. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
CpsIfConfigEntry |
|
|
cpsIfPortSecurityEnable |
1.3.6.1.4.1.9.9.315.1.2.1.1.1 |
Indicates whether the port security feature
is enabled on an interface. Upon setting this
object to 'true', the source MAC address that
does not match any cpsSecureMacAddress for the
given interface in cpsSecureMacAddressTable and
the value of cpsIfCurrentSecureMacAddrCount is
equal to cpsIfMaxSecureMacAddr, is considered
as port security violation and an action as
specified in cpsIfViolationAction is taken on
the interface. The value of this object has no
effect when the value of
cpsGlobalPortSecurityEnable is set to 'false'. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
cpsIfPortSecurityStatus |
1.3.6.1.4.1.9.9.315.1.2.1.1.2 |
This object represents the operational status
of the port security feature on an interface.
secureup(1) - This indicates port security
is operational.
securedown(2) - This indicates port security is
not operational. This happens
when port security is configured
to be enabled but could not be
enabled due to certain reasons
such as conflict with other
features.
shutdown(3) - This indicates that the port is
shutdown due to port security
violation when the object
cpsIfViolationAction is of type
'shutdown'. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
secureup(1), securedown(2), shutdown(3) |
|
cpsIfMaxSecureMacAddr |
1.3.6.1.4.1.9.9.315.1.2.1.1.3 |
The maximum number (N) of MAC addresses to be
secured on the interface. The first N MAC
addresses learned or configured are made secured.
Changing this object value from N to M is not
allowed if M is smaller than N, and M is less
than the value of cpsIfCurrentSecureMacAddrCount
on the interface. One way to change the number in
this case is by deleting sufficient number of
secure mac addresses configured or learned on the
device. Also, some devices may choose to limit the
sum of this object value for all interfaces to
less than or equal to cpsGlobalMaxSecureAddress. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
1..2147483647 |
|
cpsIfSecureMacAddrAgingTime |
1.3.6.1.4.1.9.9.315.1.2.1.1.5 |
The interval in which the interface is
secured. After the expiration of the
time, the corresponding cpsSecureMacAddressEntry
from the cpsSecureMacAddressTable will be
removed. If the value of this object is 0,
the aging mechanism is disabled. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..1440 |
|
cpsIfSecureMacAddrAgingType |
1.3.6.1.4.1.9.9.315.1.2.1.1.6 |
The aging type determines the way the
secure MAC addresses are aged out.
absolute(1) - all the secure MAC addresses
will be aged out after
cpsIfSecureMacAddrAgingTime
minutes since the time the
secure MAC address is learned
or configured.
inactivity(2) - all the secure MAC addresses
will age out and will be removed
from the cpsSecureMacAddressTable
only if there is no data traffic
from the secure source MAC address
for the specified time period. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
absolute(1), inactivity(2) |
|
cpsIfStaticMacAddrAgingEnable |
1.3.6.1.4.1.9.9.315.1.2.1.1.7 |
Indicates whether the secure MAC address aging
mechanism is enabled on static MAC address entries
in cpsSecureMacAddressTable.
Setting this object value to 'false' will cause
the static MAC addresses to remain in the
cpsSecureMacAddressTable regardless of the aging
time and type configured on the interface.
Setting this object value to 'true' will cause
the static MAC addresses to be aged out from
cpsSecureMacAddressTable according to the aging
time and type specified on the interface. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
cpsIfViolationAction |
1.3.6.1.4.1.9.9.315.1.2.1.1.8 |
Determines the action that the device will
take if the traffic matches the port security
violation.
shutdown(1) - the interface will be forced to
shut down.
dropNotify(2) - the matched traffic will be
dropped and
cpsSecureMacAddrViolation
notification will be generated.
drop(3) - the matched traffic will be
dropped. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
shutdown(1), dropNotify(2), drop(3) |
|
cpsIfViolationCount |
1.3.6.1.4.1.9.9.315.1.2.1.1.9 |
This object indicates the number of violations
occurred on a secure interface. The counter will
be initialized to zero when the port security
feature is enabled on an interface. This MIB
object is only instantiated if the device can
provide this violation statistics on the
interface. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
cpsIfSecureLastMacAddress |
1.3.6.1.4.1.9.9.315.1.2.1.1.10 |
This object indicates the last MAC
address that is seen on this interface.
This object is also used as a variable in
the cpsSecureMacAddrViolation notification
to contain the value of the MAC address
which caused the violation. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
MacAddress |
|
|
cpsIfClearSecureAddresses |
1.3.6.1.4.1.9.9.315.1.2.1.1.11 |
Set to 'true' to delete all secure addresses on
this interface. Setting this object to 'false'
has no effect. This object always returns 'false'
when read. |
Status: deprecated |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
cpsIfUnicastFloodingEnable |
1.3.6.1.4.1.9.9.315.1.2.1.1.12 |
Setting this object to true(1) will configure
the interface not to block unicast flooded
traffic when the secure address count reaches the
threshold.
Setting this object to false(2) will configure
the interface to block unicast flooded traffic
when the secure address count reaches the
threshold. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
cpsIfShutdownTimeout |
1.3.6.1.4.1.9.9.315.1.2.1.1.13 |
The interval in which the cpsIfPortSecurityStatus
may remain in shutdown(3). After the expiration of
the time, all the security configuration of this
port is re-installed and the port is enabled. If
the value of this object is 0, the port is shut
down permanently. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
cpsIfStickyEnable |
1.3.6.1.4.1.9.9.315.1.2.1.1.15 |
Set to 'true' to enable and 'false' to
disable Sticky port security feature on this
interface. Enabling this feature allows the
device to secure learned MAC addresses on this
interface permanently. In order to remove the
sticky addresses on this interface, user has to
manually delete the sticky MAC address(es) or
disable the sticky feature itself. Manual deletion
of all addresses can be accomplished by
cpsIfClearSecureMacAddresses object. Manual
of single address can be accomplished by
cpsIfVlanSecureMacAddrRowStatus object. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
cpsIfInvalidSrcRateLimitEnable |
1.3.6.1.4.1.9.9.315.1.2.1.1.16 |
Set to 'true' to enable and 'false' to disable
rate limiting for invalid source MAC addresses
received on this interface. Enabling this feature
will help to rate limit packets which comes with
invalid src MAC address on this interface. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
cpsIfInvalidSrcRateLimitValue |
1.3.6.1.4.1.9.9.315.1.2.1.1.17 |
If cpsIfInvalidSrcRateLimitEnable is set to
'true' then this value is used to limit the
rate at which packets with invalid source MAC
addresses are processed on this interface. Upon
exceeding the rate, the port is shutdown. If
cpsIfInvalidSrcRateLimitEnable is set to 'false'
then this value will be -1. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Integer32 |
-1..1000 |
|
cpsIfSecureLastMacAddrVlanId |
1.3.6.1.4.1.9.9.315.1.2.1.1.18 |
This object indicates the VLAN where the last
MAC address that is seen on this interface.
This object is also used as a variable in
the cpsIfVlanSecureMacAddrViolation notification
to contain the value of the VLAN received the
mac address which caused the violation. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
VlanIndex |
|
|
cpsSecureMacAddressEntry |
1.3.6.1.4.1.9.9.315.1.2.2.1 |
Entry containing secure MAC address
information for a particular interface.
A secure MAC address can be configured
by the user and can be added by the agent
when the device learns a new secured
MAC address.
Note that the secure MAC addresses can be
configured on an interface even if port
security feature is disabled. |
Status: deprecated |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
CpsSecureMacAddressEntry |
|
|
cpsSecureMacAddress |
1.3.6.1.4.1.9.9.315.1.2.2.1.1 |
This object indicates a secure MAC
address configured or learned on an
interface. |
Status: deprecated |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
MacAddress |
|
|
cpsSecureMacAddrType |
1.3.6.1.4.1.9.9.315.1.2.2.1.2 |
This object indicates if the secure MAC address
is a configured (static) or learned (dynamic)
address on this interface. |
Status: deprecated |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
static(1), dynamic(2) |
|
cpsSecureMacAddrRemainingAge |
1.3.6.1.4.1.9.9.315.1.2.2.1.3 |
This object indicates the remaining age
of the secure MAC address if aging is
enabled on that port. A value of 0 indicates
that aging is disabled for this MAC address
entry. |
Status: deprecated |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..1440 |
|
cpsSecureMacAddrRowStatus |
1.3.6.1.4.1.9.9.315.1.2.2.1.4 |
This object is a conceptual row entry that allows to add
or delete entries to or from the cpsSecureMacAddressTable.
1. When creating an entry in this table 'createAndGo'
method is used and the value of this object is set to
'active'. Deactivation of an 'active' entry is not
allowed.
2. When deleting an entry in this table 'destroy' method
is used. |
Status: deprecated |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
cpsIfVlanSecureMacAddrTable |
1.3.6.1.4.1.9.9.315.1.2.3 |
A list of port security entries containing
the secure MAC address information.
This table is simular to cpsSecureMacAddressTable
except that cpsIfVlanSecureVlanIndex is part of
the INDEX clause.
This table is used to configure a secure MAC
address on either an access interface or trunking
interface which support port security feature. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
CpsIfVlanSecureMacAddrEntry |
|
cpsIfVlanSecureMacAddrEntry |
1.3.6.1.4.1.9.9.315.1.2.3.1 |
Entry containing secure MAC address
information for a particular interface.
A secure MAC address can be configured
by the user and can be added by the agent
when the device learns a new secure MAC address.
Note that the secure MAC addresses can be
configured on an interface even if the port
security feature is disabled. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
CpsIfVlanSecureMacAddrEntry |
|
|
cpsIfVlanSecureMacAddress |
1.3.6.1.4.1.9.9.315.1.2.3.1.1 |
This object indicates a secure MAC
address configured or learned on an
interface. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
MacAddress |
|
|
cpsIfVlanSecureVlanIndex |
1.3.6.1.4.1.9.9.315.1.2.3.1.2 |
This object indicates the vlan
configured on an interface. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
VlanIndex |
|
|
cpsIfVlanSecureMacAddrType |
1.3.6.1.4.1.9.9.315.1.2.3.1.3 |
This object indicates if the secure MAC address
is a configured 'static' or learned 'dynamic' or
learned and retained across reboots 'sticky'. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
static(1), dynamic(2), sticky(3) |
|
cpsIfVlanSecureMacAddrRemainAge |
1.3.6.1.4.1.9.9.315.1.2.3.1.4 |
This object indicates the remaining age
of the secure MAC address if aging is
enabled on that port. A value of 0 indicates
that aging is disabled for this MAC address
entry. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
cpsIfVlanSecureMacAddrRowStatus |
1.3.6.1.4.1.9.9.315.1.2.3.1.5 |
This object is a conceptual row entry that allows adding
or deleting entries to or from the
cpsIfVlanSecureMacAddressTable.
1. When creating an entry in this table the 'createAndGo'
method is used and the value of this object is set to
'active'. Deactivation of an 'active' entry is not
allowed.
2. When deleting an entry in this table 'destroy' method
is used. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
cpsIfVlanTable |
1.3.6.1.4.1.9.9.315.1.2.4 |
Each entry in this table represents
port-security information for each vlan
that is allowed on trunk interface.
The number of entries is determined by
the number of allowed VLANs on trunk
interface in the system .
An Entry in the table gets created when
a vlan becomes allowed and gets deleted
when a vlan becomes disallowed on a trunk
port.
User cannot create new entries in this
table, but can only read and modify
existing entries.
This table is obsolete and replaced with
cpsIfMultiVlanTable. |
Status: obsolete |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
CpsIfVlanEntry |
|
cpsIfVlanEntry |
1.3.6.1.4.1.9.9.315.1.2.4.1 |
Entry containing port security information for
a particular VLAN within a trunk port. |
Status: obsolete |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
CpsIfVlanEntry |
|
|
cpsIfVlanIndex |
1.3.6.1.4.1.9.9.315.1.2.4.1.1 |
The ID of a VLAN within this trunk port. |
Status: obsolete |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
VlanIndex |
|
|
cpsIfVlanMaxSecureMacAddr |
1.3.6.1.4.1.9.9.315.1.2.4.1.2 |
The maximum number of MAC addresses to
be secured in the VLAN indicated by
cpsIfVlanIndex on this interface.
If cpsIfVlanMaxSecureMacAddr is not set,
its value is 1.
If cpsIfVlanMaxSecureMacAddr is not set, then
the cpsIfMaxSecureMacAddr applies to this
VLAN.
If cpsIfVlanMaxSecureMacAddr is set
and is less than cpsIfMaxSecureMacAddr, then
the cpsIfVlanMaxSecureMacAddr applies to this
VLAN.
If cpsIfVlanMaxSecureMacAddr is set
and is greater than cpsIfMaxSecureMacAddr, then
the cpsIfMaxSecureMacAddr applies to this
VLAN. |
Status: obsolete |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
1..2147483647 |
|
cpsIfVlanCurSecureMacAddrCount |
1.3.6.1.4.1.9.9.315.1.2.4.1.3 |
The current number of MAC addresses secured
in the VLAN indicated by cpsIfVlanIndex on this
interface. |
Status: obsolete |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
0..2147483647 |
|
cpsIfMultiVlanTable |
1.3.6.1.4.1.9.9.315.1.2.5 |
Each entry in this table represents port-security
information such as the maximum value of secured
mac address allowed, the current number of secure
mac address applied on a VLAN that is allowed on
multi-vlan interface as well as a mechanism to
clear the secure mac address on such VLANs. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
CpsIfMultiVlanEntry |
|
cpsIfMultiVlanEntry |
1.3.6.1.4.1.9.9.315.1.2.5.1 |
Entry containing port security information for
a particular VLAN within a multi-vlan port. When
secured mac addresses are learned or configured on
such interface denoted by ifIndex and an allowed VLAN
in this interface denoted by cpsIfMultiVlanIndex,
an entry will be automatically created in this table.
If there is no corresponding entry in this table
for a specific interface and VLAN, the maximum number
of secured MAC addresses allowed in such interface
and VLAN will be limited in the manner which the device
limits the aggregate maximum number of secured MAC
address allowed in this specific interface. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
CpsIfMultiVlanEntry |
|
|
cpsIfMultiVlanIndex |
1.3.6.1.4.1.9.9.315.1.2.5.1.1 |
The VLAN ID of an allowed VLAN for this multi-vlan port. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
VlanIndex |
|
|
cpsIfMultiVlanMaxSecureMacAddr |
1.3.6.1.4.1.9.9.315.1.2.5.1.2 |
The maximum number (N) of MAC addresses to be secured
in the VLAN indicated by cpsIfMultiVlanIndex object on
this interface.
Setting the value of this object to zero indicates that
there is no specific restriction on the maximum number
of MAC adddress to be secured for this particular VLAN
in this interface. In this case, the maximum number of
secured MAC addresses allowed in this VLAN will be limited
in the manner which the device limits the aggregate maximum
number of secured MAC address allowed in this interface.
Changing this object value from N to M (M is greater
than 0) is not allowed if M is smaller than N, and M is
less than the value of cpsIfMultiVlanSecureMacAddrCount
on this VLAN. One way to change the number in this case
is by deleting sufficient number of secure mac addresses
configured or learned on the VLAN.
If cpsIfMultiVlanMaxSecureMacAddr is less than
cpsIfMaxSecureMacAddr, then the aggregate maximum number
of secure mac address allowed in this interface is limited
by the value of cpsIfMaxSecureMacAddr, and the maximum
number of secure mac address allowed in this VLAN for this
interface is the value of cpsIfMultiVlanMaxSecureMacAddr
object.
If cpsIfMultiVlanMaxSecureMacAddr is greater than
cpsIfMaxSecureMacAddr, then this object value does not
have any effect. The aggregate maximum number of secure mac
address allowed in all VLANs for this interface is limited
by the value of cpsIfMaxSecureMacAddr object. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
cpsIfMultiVlanSecureMacAddrCount |
1.3.6.1.4.1.9.9.315.1.2.5.1.3 |
The current number of MAC addresses secured in the VLAN
indicated by cpsIfMultiVlanIndex object on this interface. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
cpsIfMultiVlanRowStatus |
1.3.6.1.4.1.9.9.315.1.2.5.1.5 |
The object is used to manage the creation and deletion
of row in this table. It only supports 'active', 'destroy',
and 'createAndGo' value.
Entry in the table gets created by setting
cpsIfMultiVlanRowStatus object to 'createAndGo'.
Entry in this table gets deleted by setting
cpsIfMultiVlanRowStatus object to 'destroy' or
when a VLAN indicated by cpsIfMultiVlanIndex object
becomes disallowed on a multi-vlan port.
If the value of cpsIfMultiVlanSecureMacAddrCount object
in the same row is greater than zero, this entry cannot
be deleted.
Value of cpsIfMultiVlanMaxSecureMacAddr object can be
modified when the value of this RowStatus object is
'active'. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
cpsSecureMacAddrViolation |
1.3.6.1.4.1.9.9.315.0.0.1 |
The address violation notification is generated
when port security address violation is detected
on a secure non-trunk, access interface (that carries
a single vlan) and the cpsIfViolationAction is set to
'dropNotify'. |
Status: current |
Access: read-create |
NOTIFICATION-TYPE |
|
|
|
cpsTrunkSecureMacAddrViolation |
1.3.6.1.4.1.9.9.315.0.0.2 |
The address violation notification is generated when port
security address violation is detected on a secure trunk
or a multi-vlan interface and the cpsIfViolationAction is
set to 'dropNotify'. |
Status: deprecated |
Access: read-create |
NOTIFICATION-TYPE |
|
|
|
cpsIfVlanSecureMacAddrViolation |
1.3.6.1.4.1.9.9.315.0.0.3 |
The address violation notification is generated
when port security address violation is detected
on a multi-vlan interface and the cpsIfViolationAction
is set to 'dropNotify'. |
Status: current |
Access: read-create |
NOTIFICATION-TYPE |
|
|
|
ciscoPortSecurityMIBCompliance |
1.3.6.1.4.1.9.9.315.2.1.1 |
The compliance statement for the Port Security MIB. |
Status: deprecated |
Access: read-only |
MODULE-COMPLIANCE |
|
|
|
ciscoPortSecurityMIBCompliance1 |
1.3.6.1.4.1.9.9.315.2.1.2 |
The compliance statement for the Port Security MIB. |
Status: deprecated |
Access: read-only |
MODULE-COMPLIANCE |
|
|
|
ciscoPortSecurityMIBCompliance2 |
1.3.6.1.4.1.9.9.315.2.1.3 |
The compliance statement for the Port Security MIB. |
Status: obsolete |
Access: read-only |
MODULE-COMPLIANCE |
|
|
|
ciscoPortSecurityMIBCompliance3 |
1.3.6.1.4.1.9.9.315.2.1.4 |
The compliance statement for the Port Security MIB. |
Status: obsolete |
Access: read-only |
MODULE-COMPLIANCE |
|
|
|
ciscoPortSecurityMIBCompliance4 |
1.3.6.1.4.1.9.9.315.2.1.5 |
The compliance statement for the Port Security MIB. |
Status: current |
Access: read-only |
MODULE-COMPLIANCE |
|
|
|
cpsGlobalGroup |
1.3.6.1.4.1.9.9.315.2.2.1 |
A collection of objects for use with the Port
Security feature. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsInterfaceGroup |
1.3.6.1.4.1.9.9.315.2.2.2 |
********* THIS GROUP IS DEPRECATED **********
A collection of objects for use with the Port
Security feature. |
Status: deprecated |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsExtInterfaceGroup |
1.3.6.1.4.1.9.9.315.2.2.3 |
A collection of objects providing the additional
information for the Port Security feature. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsNotificationGroup |
1.3.6.1.4.1.9.9.315.2.2.4 |
A collection of notifications for use
with the Port Security feature. |
Status: current |
Access: read-only |
NOTIFICATION-GROUP |
|
|
|
cpsUnicastFloodingInterfaceGroup |
1.3.6.1.4.1.9.9.315.2.2.5 |
A collection of objects providing the
unicast flooding information for the
Port Security feature. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsShutdownTimeoutInterfaceGroup |
1.3.6.1.4.1.9.9.315.2.2.6 |
A collection of objects providing the
shutdown timeout information for the
Port Security feature. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsIfVlanSecureMacAddrGroup |
1.3.6.1.4.1.9.9.315.2.2.8 |
A collection of objects for use with the Port
Security feature. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsInterfaceGroup1 |
1.3.6.1.4.1.9.9.315.2.2.9 |
********* THIS GROUP IS DEPRECATED **********
A collection of objects for use with the Port
Security configuration. |
Status: deprecated |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsExtConfigInterfaceGroup |
1.3.6.1.4.1.9.9.315.2.2.10 |
********* THIS GROUP IS DEPRECATED **********
A collection of objects providing the additional
information for the Port Security feature. |
Status: deprecated |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsIfVlanGroup |
1.3.6.1.4.1.9.9.315.2.2.11 |
A collection of objects providing additional trunk
VLAN information for the Port Security feature on a
given interface. |
Status: obsolete |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsGlobalClearAddressGroup |
1.3.6.1.4.1.9.9.315.2.2.12 |
A collection of objects for clearing addresses
on the device. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsInterfaceGroup2 |
1.3.6.1.4.1.9.9.315.2.2.13 |
A collection of objects for use with the Port
Security configuration. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsTrunkSecureNotificationGroup |
1.3.6.1.4.1.9.9.315.2.2.14 |
A collection of trunk or multi-vlan port related
notifications for use with the port-security feature. |
Status: deprecated |
Access: read-only |
NOTIFICATION-GROUP |
|
|
|
cpsIfMultiVlanGroup |
1.3.6.1.4.1.9.9.315.2.2.15 |
A collection of objects providing additional per
interface per VLAN port security feature information
on a multi-vlan interface. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
cpsIfVlanSecureNotificationGroup |
1.3.6.1.4.1.9.9.315.2.2.16 |
A collection of trunk or multi-vlan port related
notifications for use with the port-security feature. |
Status: current |
Access: read-only |
NOTIFICATION-GROUP |
|
|
|
cpsExtInterfaceGroup1 |
1.3.6.1.4.1.9.9.315.2.2.17 |
A collection of objects providing the information of
the VLAN-id for the last MAC address seen on the
interface. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|