BAYSTACK-IPV6-FIRST-HOP-SEC-MIB
119 objects
This MIB module is used for IPv6 First Hop Security configuration. The purpose of First Hop Security feature is to take care of the treats caused by the immediate node to another immediate node attached to the same First Hop Security device.
Imported Objects
| IF-MIB | InterfaceIndex |
| IPV6-TC | Ipv6Address |
| SNMPv2-SMI | Counter32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE |
| SNMPv2-TC | DisplayString MacAddress RowStatus TEXTUAL-CONVENTION TruthValue |
| SYNOPTICS-ROOT-MIB | bayStackMibs |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.45.5.45 | IdentitybayStackIpv6FirstHopSecMib | of | This MIB module is used for IPv6 First Hop Security configuration. The purpose of First Hop Security feature is to take care of the treats caused by the immedi… | |
| 1.3.6.1.4.1.45.5.45.0 | NodebsIpv6FirstHopSecNotifications | |||
| 1.3.6.1.4.1.45.5.45.0.1 | NotificationbsIpv6NDSBTTableFull | obsolete | This notification is generated when an attempt is made to add a new SBT entry when the Secure Binding Table is full. The value of bsIpv6NDInspectionNotificatio… | |
| 1.3.6.1.4.1.45.5.45.0.2 | NotificationbsIpv6NDNotificationsUntrustedPort | obsolete | This notification is generated when an ND message is suspected to be generated by the untrusted system/host. | |
| 1.3.6.1.4.1.45.5.45.0.3 | NotificationbsIpv6NDNotificationSBTTableFull | current | This notification is generated when an attempt is made to add a new SBT entry when the Secure Binding Table is full. The value of bsIpv6NDInspectionNotificatio… | |
| 1.3.6.1.4.1.45.5.45.0.4 | NotificationbsIpv6NDNotificationUntrustedPort | current | This notification is generated when an ND message is suspected to be generated by the untrusted system/host. | |
| 1.3.6.1.4.1.45.5.45.0.5 | NotificationbsIpv6RAGuardNotification | current | This notification is generated when an RA message comes in that does not match the RA Guard configuration | |
| 1.3.6.1.4.1.45.5.45.0.6 | NotificationbsIpv6DHCPGuardNotification | current | This notification is generated when an DHCPv6 message comes in that does not match the DHCPv6 Guard configuration | |
| 1.3.6.1.4.1.45.5.45.1 | NodebsIpv6FirstHopSecObjects | |||
| 1.3.6.1.4.1.45.5.45.1.1 | NodebsIpv6FHSScalVar | |||
| 1.3.6.1.4.1.45.5.45.1.1.1 | ScalarbsIpv6FHSAdmin | read-write | current | First Hop Security Global Admin status |
| 1.3.6.1.4.1.45.5.45.1.1.2 | ScalarbsIpv6FHSRagAdmin | read-write | current | RA guard Global Admin status |
| 1.3.6.1.4.1.45.5.45.1.1.3 | ScalarbsIpv6FHSDhcpv6gAdmin | read-write | current | DHCPv6 guard Global Admin status |
| 1.3.6.1.4.1.45.5.45.1.1.4 | ScalarbsIpv6FHSNdInspectAdmin | read-write | current | ND Inspection Global Admin status |
| 1.3.6.1.4.1.45.5.45.1.1.5 | ScalarbsIpv6FHSMaxDynSbtEntries | read-write | current | Maximum Dynamic SBT entries allowed |
| 1.3.6.1.4.1.45.5.45.1.1.6 | ScalarbsIpv6FHSSbtReachLifeTime | read-write | current | SBT Reachable state life time in seconds starts from 30 till 86400. Configure timer as 0 will not expire this timer |
| 1.3.6.1.4.1.45.5.45.1.1.7 | ScalarbsIpv6FHSSbtStaleLifeTime | read-write | current | SBT Stale state life time in seconds starts from 30 till 86400. Configure timer as 0 will not expire this timer |
| 1.3.6.1.4.1.45.5.45.1.1.8 | ScalarbsIpv6FHSSbtDownLifeTime | read-write | current | SBT Down state life time in seconds starts from 30 till 86400. Configure timer as 0 will not expire this timer |
| 1.3.6.1.4.1.45.5.45.1.1.9 | ScalarbsIpv6FHSSbtTblOverFlow | read-only | current | SBT Table Overflow due to the maximum SBT entry restriction |
| 1.3.6.1.4.1.45.5.45.1.2 | TablebsIpv6FHSIpv6AccessListTable | not-accessible | current | Table contains the list of IPv6 Access List used for Frist Hop Security Feature. |
| 1.3.6.1.4.1.45.5.45.1.2.1 | RowbsIpv6FHSIpv6AccessListEntry | not-accessible | current | Entry contains the list of IPv6 Access List used for Frist Hop Security Feature. |
| 1.3.6.1.4.1.45.5.45.1.2.1.1 | ColumnbsIpv6FHSIpv6AccessListName | not-accessible | current | IPv6 Access List Name |
| 1.3.6.1.4.1.45.5.45.1.2.1.2 | ColumnbsIpv6FHSIpv6AccessListPrefix | not-accessible | current | IPv6 Prefix attached to this IPv6 access list Id |
| 1.3.6.1.4.1.45.5.45.1.2.1.3 | ColumnbsIpv6FHSIpv6AccessListPrefixMaskLen | not-accessible | current | IPv6 Prefix mask length attached to this IPv6 access list Id |
| 1.3.6.1.4.1.45.5.45.1.2.1.4 | ColumnbsIpv6FHSIpv6AccessListMaskLenFrom | read-write | current | IPv6 Prefix mask length range from |
| 1.3.6.1.4.1.45.5.45.1.2.1.5 | ColumnbsIpv6FHSIpv6AccessListMaskLenTo | read-write | current | IPv6 Prefix mask length range to |
| 1.3.6.1.4.1.45.5.45.1.2.1.6 | ColumnbsIpv6FHSIpv6AccessListAccessType | read-write | current | IPv6 IP Access Type Allow or Deny |
| 1.3.6.1.4.1.45.5.45.1.2.1.7 | ColumnbsIpv6FHSIpv6AccessListRowStatus | read-write | current | IPv6 IP Access List row status |
| 1.3.6.1.4.1.45.5.45.1.3 | TablebsIpv6FHSMacAccessListTable | not-accessible | current | Table contains the list of MAC Access List used for Frist Hop Security Feature. |
| 1.3.6.1.4.1.45.5.45.1.3.3 | RowbsIpv6FHSMacAccessListEntry | not-accessible | current | Entry contains the list of MAC Access List used for Frist Hop Security Feature. |
| 1.3.6.1.4.1.45.5.45.1.3.3.1 | ColumnbsIpv6FHSMacAccessListName | not-accessible | current | MAC Access List Name |
| 1.3.6.1.4.1.45.5.45.1.3.3.2 | ColumnbsIpv6FHSMacAccessListMac | not-accessible | current | MAC address attached to this MAC access list Id |
| 1.3.6.1.4.1.45.5.45.1.3.3.3 | ColumnbsIpv6FHSMacAccessListAccessType | read-write | current | MAC Access Type Allow or Deny |
| 1.3.6.1.4.1.45.5.45.1.3.3.4 | ColumnbsIpv6FHSMacAccessListRowStatus | read-write | current | MAC Access List row status |
| 1.3.6.1.4.1.45.5.45.1.4 | TablebsIpv6FHSPolicyPortMapTable | not-accessible | current | Table contains the list of First Hop security Policies attached to the interface. |
| 1.3.6.1.4.1.45.5.45.1.4.1 | RowbsIpv6FHSPolicyPortMapEntry | not-accessible | current | Entry contains the list of First Hop security Policies attached to the interface. |
| 1.3.6.1.4.1.45.5.45.1.4.1.1 | ColumnbsIpv6FHSPolicyPortMapIfIndex | not-accessible | current | Interface index number |
| 1.3.6.1.4.1.45.5.45.1.4.1.2 | ColumnbsIpv6FHSPolicyPortMapDhcpv6gPolicyName | read-write | current | DHCPv6 guard policy name |
| 1.3.6.1.4.1.45.5.45.1.4.1.3 | ColumnbsIpv6FHSPolicyPortMapRagPolicyName | read-write | current | RA guard policy name |
| 1.3.6.1.4.1.45.5.45.1.4.1.4 | ColumnbsIpv6FHSPolicyPortMapNDAdmin | read-write | current | Enable/Disable ND-inspection |
| 1.3.6.1.4.1.45.5.45.1.4.1.5 | ColumnbsIpv6FHSPolicyPortMapSbtDynLearnAdmin | read-write | current | Enable/Disable learning dynamic SBT entry |
| 1.3.6.1.4.1.45.5.45.1.4.1.6 | ColumnbsIpv6FHSPolicyPortMapTotDhcpv6PktRcv | read-only | current | Total Number of Dhcpv6 packets Received |
| 1.3.6.1.4.1.45.5.45.1.4.1.7 | ColumnbsIpv6FHSPolicyPortMapTotDhcpv6PktDropped | read-only | current | Total Number of Dhcpv6 packets dropped |
| 1.3.6.1.4.1.45.5.45.1.4.1.8 | ColumnbsIpv6FHSPolicyPortMapTotRaPktRcv | read-only | current | Total Number of RA packets Received |
| 1.3.6.1.4.1.45.5.45.1.4.1.9 | ColumnbsIpv6FHSPolicyPortMapTotRaPktDropped | read-only | current | Total Number of RA packets dropped |
| 1.3.6.1.4.1.45.5.45.1.4.1.10 | ColumnbsIpv6FHSPolicyPortMapTotNdPktRcv | read-only | current | Total Number of ND Packets Received |
| 1.3.6.1.4.1.45.5.45.1.4.1.11 | ColumnbsIpv6FHSPolicyPortMapTotNdPktDropped | read-only | current | Total Number of ND Packets Dropped |
| 1.3.6.1.4.1.45.5.45.1.4.1.12 | ColumnbsIpv6FHSPolicyPortMapClearDhcpGuardStats | read-write | current | First Hop security clear stats: bsIpv6FHSPolicyPortMapTotDhcpv6PktRcv and bsIpv6FHSPolicyPortMapTotDhcpv6PktDropped |
| 1.3.6.1.4.1.45.5.45.1.4.1.13 | ColumnbsIpv6FHSPolicyPortMapClearRaGuardStats | read-write | current | First Hop security clear stats: bsIpv6FHSPolicyPortMapTotRaPktRcv and bsIpv6FHSPolicyPortMapTotRaPktDropped |
| 1.3.6.1.4.1.45.5.45.1.4.1.14 | ColumnbsIpv6FHSPolicyPortMapClearNDInspectStats | read-write | current | First Hop security clear stats: bsIpv6FHSPolicyPortMapTotNdPktRcv, bsIpv6FHSPolicyPortMapTotNdPktDropped and bsIpv6FHSPolicyPortMapTotSbtEntDropped |
| 1.3.6.1.4.1.45.5.45.1.4.1.15 | ColumnbsIpv6FHSPolicyPortMapRowStatus | read-write | current | First Hop security row status |
| 1.3.6.1.4.1.45.5.45.1.4.1.16 | ColumnbsIpv6FHSPolicyPortMapDhcpv6gDeviceRole | read-write | current | This is the device role of the received port. If the device role is client and if it receives DHCPv6 reply then those packets should be dropped. This object is… |
| 1.3.6.1.4.1.45.5.45.1.4.1.17 | ColumnbsIpv6FHSPolicyPortMapRagDeviceRole | read-write | current | This is the device role to the received port. If the device role is host and if it receives RAs then those packets should be dropped. This object is currently … |
| 1.3.6.1.4.1.45.5.45.1.5 | TablebsIpv6FHSDhcpv6gPolicyListTable | not-accessible | current | Table contains the list of DHCPv6 guard Policies used for Hop Security Feature. |
| 1.3.6.1.4.1.45.5.45.1.5.1 | RowbsIpv6FHSDhcpv6gPolicyListEntry | not-accessible | current | Entry contains the list of DHCPv6 guard Policies used for Hop Security Feature. |
| 1.3.6.1.4.1.45.5.45.1.5.1.1 | ColumnbsIpv6FHSDhcpv6gPolicyName | not-accessible | current | This is the DHCPv6 guard Policy Name |
| 1.3.6.1.4.1.45.5.45.1.5.1.2 | ColumnbsIpv6FHSDhcpv6gDeviceRole | read-write | current | This is the device role of the received port. If the device role is client and if it receives DHCPv6 reply then those packets should be dropped |
| 1.3.6.1.4.1.45.5.45.1.5.1.3 | ColumnbsIpv6FHSDhcpv6gServerAccessListName | read-write | current | This is the IPv6 access list which will be validating source IPv6 address of the DHCPv6 Reply packet from the server |
| 1.3.6.1.4.1.45.5.45.1.5.1.4 | ColumnbsIpv6FHSDhcpv6gReplyPrefixListName | read-write | current | Validate the prefix information in the DHCPv6 reply against the configured reply prefix list. |
| 1.3.6.1.4.1.45.5.45.1.5.1.5 | ColumnbsIpv6FHSDhcpv6gPrefLimitMin | read-write | current | This is check against the DHCPv6 server / relay router preference. If the received router preference is less than the configured router preference than drop th… |
| 1.3.6.1.4.1.45.5.45.1.5.1.6 | ColumnbsIpv6FHSDhcpv6gPrefLimitMax | read-write | current | This is check against the DHCPv6 server / relay router preference. If the received router preference is greater than the configured router preference than drop… |
| 1.3.6.1.4.1.45.5.45.1.5.1.7 | ColumnbsIpv6FHSDhcpv6gPolicyListRowStatus | read-write | current | DHCPv6 guard policy row status |
| 1.3.6.1.4.1.45.5.45.1.6 | TablebsIpv6FHSRagPolicyListTable | not-accessible | current | Table contains the list of RA guard Policies used for Hop Security Feature. |
| 1.3.6.1.4.1.45.5.45.1.6.1 | RowbsIpv6FHSRagPolicyListEntry | not-accessible | current | Entry contains the list of RA guard Policies used for Hop Security Feature. |
| 1.3.6.1.4.1.45.5.45.1.6.1.1 | ColumnbsIpv6FHSRagPolicyName | not-accessible | current | RA guard policy Name |
| 1.3.6.1.4.1.45.5.45.1.6.1.2 | ColumnbsIpv6FHSRagDeviceRole | read-write | current | This is the device role to be checked against |
| 1.3.6.1.4.1.45.5.45.1.6.1.3 | ColumnbsIpv6FHSRagIpv6AccessListName | read-write | current | This is the IPv6 access list which will be validating the source IPv6 address of the RA packet |
| 1.3.6.1.4.1.45.5.45.1.6.1.4 | ColumnbsIpv6FHSRagIpv6PrefixListName | read-write | current | This is the IPv6 access list which will be validating the Prefix present in the RA packet |
| 1.3.6.1.4.1.45.5.45.1.6.1.5 | ColumnbsIpv6FHSRagMacListName | read-write | current | This is the MAC access list which will be validating the source MAC of the received RA packet |
| 1.3.6.1.4.1.45.5.45.1.6.1.6 | ColumnbsIpv6FHSRagManagedConfigFlag | read-write | current | In the RA packets, there is an M flag (Managed Address configuration Flag) which is set indicating that the address assignments are available via DHCPv6. This … |
| 1.3.6.1.4.1.45.5.45.1.6.1.7 | ColumnbsIpv6FHSRagRouterPrefMax | read-write | current | In the RA packet there is router preference information is available in the Flags. This could be HIGH or LOW or MEDIUM. This filtering policy option would veri… |
| 1.3.6.1.4.1.45.5.45.1.6.1.8 | ColumnbsIpv6FHSRagHopLimitMin | read-write | current | This is the minimum value check for the hop limit value present in the RA packet. If the value is less than configured minimum value then drop the RA packet |
| 1.3.6.1.4.1.45.5.45.1.6.1.9 | ColumnbsIpv6FHSRagHopLimitMax | read-write | current | This is the maximum value check for the hop limit value present in the RA packet. If the value is greater than configured maximum value then drop the RA packet |
| 1.3.6.1.4.1.45.5.45.1.6.1.10 | ColumnbsIpv6FHSRagPolicyListRowStatus | read-write | current | RA guard policy row status |
| 1.3.6.1.4.1.45.5.45.1.7 | TablebsIpv6FHSSbtTable | not-accessible | current | Table contains the list of SBT entries learnt Dynamically and statically configure. |
| 1.3.6.1.4.1.45.5.45.1.7.1 | RowbsIpv6FHSSbtListEntry | not-accessible | current | Entry contains the list of SBT entries. |
| 1.3.6.1.4.1.45.5.45.1.7.1.1 | ColumnbsIpv6FHSSbtInterfaceIndex | not-accessible | current | Derive unit and port number from this ifindex |
| 1.3.6.1.4.1.45.5.45.1.7.1.2 | ColumnbsIpv6FHSSbtVlan | not-accessible | current | VLAN |
| 1.3.6.1.4.1.45.5.45.1.7.1.3 | ColumnbsIpv6FHSSbtSrcIp | not-accessible | current | Source IPv6 Address |
| 1.3.6.1.4.1.45.5.45.1.7.1.4 | ColumnbsIpv6FHSSbtLinkLayerAddress | read-write | current | Link Layer MAC address |
| 1.3.6.1.4.1.45.5.45.1.7.1.5 | ColumnbsIpv6FHSSbtLearnType | read-only | current | SBT Entry Type |
| 1.3.6.1.4.1.45.5.45.1.7.1.6 | ColumnbsIpv6FHSSbtLearnPriority | read-only | current | SBT Entry priority |
| 1.3.6.1.4.1.45.5.45.1.7.1.7 | ColumnbsIpv6FHSSbtLearnState | read-only | current | SBT Entry state |
| 1.3.6.1.4.1.45.5.45.1.7.1.8 | ColumnbsIpv6FHSSbtLearnAge | read-only | current | Time Elapsed after being in this state |
| 1.3.6.1.4.1.45.5.45.1.7.1.9 | ColumnbsIpv6FHSSbtRowStatus | read-write | current | SBT entry row status |
| 1.3.6.1.4.1.45.5.45.1.8 | NodebsIpv6NDTrapNotificationObjects | |||
| 1.3.6.1.4.1.45.5.45.1.8.1 | ScalarbsIpv6NDInspectionNotificationClientMACAddr | accessible-for-notify | obsolete | This value indicates the source MAC Address of a dropped ND inspection packet. |
| 1.3.6.1.4.1.45.5.45.1.8.2 | ScalarbsIpv6NDInspectionNotificationMsgType | accessible-for-notify | obsolete | This value indicates the message type of a dropped ND packet. |
| 1.3.6.1.4.1.45.5.45.1.8.3 | ScalarbsIpv6FHSNDInterfaceIndex | accessible-for-notify | obsolete | This value indicates the unit and port number of a dropped ND inspection packet. |
| 1.3.6.1.4.1.45.5.45.1.8.4 | ScalarbsIpv6FHSNDIpv6Address | accessible-for-notify | obsolete | This value indicates the Ipv6 source address of a dropped ND inspection packet. |
| 1.3.6.1.4.1.45.5.45.1.8.5 | ScalarbsIpv6FHSNDVlanID | accessible-for-notify | obsolete | This value indicates the Vlan ID of a dropped ND inspection packet. |
| 1.3.6.1.4.1.45.5.45.1.9 | TablebsIpv6FHSSourceGuardInterfaceConfigTable | not-accessible | current | IPv6 Source Guard Interface table. |
| 1.3.6.1.4.1.45.5.45.1.9.1 | RowbsIpv6FHSSourceGuardInterfaceConfigEntry | not-accessible | current | An entry of this table. |
| 1.3.6.1.4.1.45.5.45.1.9.1.1 | ColumnbsIpv6FHSSourceGuardIfIndex | not-accessible | current | Interface index number. |
| 1.3.6.1.4.1.45.5.45.1.9.1.2 | ColumnbsIpv6FHSSourceGuardInterfaceState | read-write | current | IPv6 Source Guard Admin state of an interface. |
| 1.3.6.1.4.1.45.5.45.1.9.1.3 | ColumnbsIpv6FHSSourceGuardMaxAddr | read-write | current | Maximum allowed IPv6 Source Addresses on an interface. |
| 1.3.6.1.4.1.45.5.45.1.9.1.4 | ColumnbsIpv6FHSSourceGuardOverflowCount | read-only | current | Number of times the SBT entries could not be added to the allowed list. |
| 1.3.6.1.4.1.45.5.45.1.9.1.5 | ColumnbsIpv6FHSSourceGuardClearOverflowCount | read-write | current | This object clears counter object bsIpv6FHSSourceGuardOverflowCount. |
| 1.3.6.1.4.1.45.5.45.1.9.1.6 | ColumnbsIpv6FHSSourceGuardDropCount | read-only | current | Number of dropped packets per port of source guard. |
| 1.3.6.1.4.1.45.5.45.1.9.1.7 | ColumnbsIpv6FHSSourceGuardClearDropCount | read-write | current | This object clears counter object: bsIpv6FHSSourceGuardDropCount. |
| 1.3.6.1.4.1.45.5.45.1.10 | TablebsIpv6FHSSourceGuardBindingTable | not-accessible | current | List of IPv6 Source Guard binding entries for each Source Guard enabled interface. |
| 1.3.6.1.4.1.45.5.45.1.10.1 | RowbsIpv6FHSSourceGuardBindingEntry | not-accessible | current | An entry of this table. |
| 1.3.6.1.4.1.45.5.45.1.10.1.1 | ColumnbsIpv6FHSSourceGuardEntryIfIndex | not-accessible | current | Interface index number. |
| 1.3.6.1.4.1.45.5.45.1.10.1.2 | ColumnbsIpv6FHSSourceGuardEntryIpv6Addr | read-only | current | IPv6 address allowed on the interface. |
| 1.3.6.1.4.1.45.5.45.1.11 | NodebsIpv6FHSTrapNotificationObjects | |||
| 1.3.6.1.4.1.45.5.45.1.11.1 | ScalarbsIpv6FHSTrapClientMACAddr | accessible-for-notify | current | This value indicates the source MAC Address of a dropped ND/RS/RA/DHCP packet. |
| 1.3.6.1.4.1.45.5.45.1.11.2 | ScalarbsIpv6FHSTrapInterfaceIndex | accessible-for-notify | current | This value indicates the unit and port number of a dropped ND/RS/RA/DHCP inspection packet. |
| 1.3.6.1.4.1.45.5.45.1.11.3 | ScalarbsIpv6FHSTrapClientIpv6Address | accessible-for-notify | current | This value indicates the Ipv6 source address of a dropped ND/RS/RA/DHCP inspection packet. |
| 1.3.6.1.4.1.45.5.45.1.11.4 | ScalarbsIpv6FHSTrapVlanID | accessible-for-notify | current | This value indicates the Vlan ID of a dropped ND/RS/RA/DHCP inspection packet. |
| 1.3.6.1.4.1.45.5.45.1.11.5 | ScalarbsIpv6FHSTrapMsgType | accessible-for-notify | current | This value indicates the message type of a dropped ND/RS/RA/DHCP packet. |
| 1.3.6.1.4.1.45.5.45.1.11.6 | ScalarbsIpv6FhsTrapPktDropReason | accessible-for-notify | current | This value indicates reason for dropped packet in FHS. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| FhsAccessType | INTEGER { allow(1), deny(2) } | current | A value indicating an access-type. |
| FhsDhcpv6GuardDeviceRole | INTEGER { server(1), client(2), none(3) } | current | A value indicating dhcp-guard device role. |
| FhsListName | DisplayString (SIZE(1..64)) | current | First Hop Security list name. |
| FhsRaGuardDeviceRole | INTEGER { router(1), host(2), none(3) } | current | A value indicating a role of ra-guard device. |
| FhsRaManagedConfigFlag | INTEGER { none(1), on(2), off(3) } | current | A value indicating ra-guard managed config flag. |
| FhsRaRouterPrefMax | INTEGER { none(1), high(2), medium(3), low(4) } | current | A value indicating ra-guard router max preference. |
| FhsSbtState | INTEGER { incomplete(1), reachable(2), stale(3), down(4) } | current | A value indicating state of SBT entry |
| FhsSbtType | INTEGER { static(1), nd(2), dhcp(3) } | current | A value indicating SBT entry learn type |