H3C-PORT-SECURITY-MIB
55 objects
The MIB module is used for managing port security.
Imported Objects
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.2011.10.2.26.1 | Identityh3cPortSecurityMIB | The MIB module is used for managing port security. | ||
| 1.3.6.1.4.1.2011.10.2.26.1.1 | Nodeh3cPortSecurityLeaf | |||
| 1.3.6.1.4.1.2011.10.2.26.1.1.1 | Scalarh3cSecurePortSecurityControl | read-write | current | This attribute controls the system wide operation of network access control. The configured port security options only become operational when this attribute i… |
| 1.3.6.1.4.1.2011.10.2.26.1.1.2 | Scalarh3cSecurePortVlanMembershipList | accessible-for-notify | current | This is a dummy MIB object referenced by the h3csecureLogon and h3csecureLogoff traps. This object contains a comma separated list of the VLAN identifiers (0-4… |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4 | Nodeh3cSecureRalmObjects | |||
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.1 | Scalarh3cSecureRalmDefaultSessionTime | read-write | current | Specifies the default session lifetime in seconds before a forwarding MAC address is re-authenticated. The default time is 1800 seconds. |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.2 | Scalarh3cSecureRalmHoldoffTime | read-write | current | Specifies the time in seconds before a blocked (denied) MAC address can be re-authenticated. The default time is 60 seconds. |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.3 | Scalarh3cSecureRalmReauthenticate | read-write | current | Writing a MAC address to this object causes an immediate RALM re-authentication of this address (can be on any port). If the MAC address not currently known to… |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.4 | Scalarh3cSecureRalmAuthMode | read-write | current | This controls how MAC addresses are authenticated. papUsernameAsMacAddress(1) Authentication uses the RADIUS server by sending a PAP request with Username and … |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.5 | Scalarh3cSecureRalmAuthUsername | read-write | current | This is the username used for authentication requests where h3cSecureRalmAuthMode is papUsernameFixed. Default shall be 'mac'. |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.6 | Scalarh3cSecureRalmAuthPassword | read-write | current | This is the password used for authentication requests where h3cSecureRalmAuthMode is papUsernameFixed. Default shall be a null string. |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.7 | Scalarh3cSecureRalmAuthDomain | read-write | current | MAC-authentication users may be configured in a specific domain, which excludes 802.1x and other authentication users. This specifies the domain of all MAC-aut… |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.8 | Scalarh3cSecureRalmAuthOfflineTime | read-write | current | Switch isn't informed when online user is offline, so switch should be able to detect offline and inform radius server to stop accounting when there is no traf… |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.9 | Scalarh3cSecureRalmAuthServerTimeoutTime | read-write | current | When switch sends request packets (include connecting request and offline request, etc) to radius server and there is no response, switch will terminate the au… |
| 1.3.6.1.4.1.2011.10.2.26.1.1.4.10 | Scalarh3cSecureMacControl | read-write | current | This attribute controls the system wide operation of mac-authentication. The system-wide mac-authentication options become non-operational when this attribute … |
| 1.3.6.1.4.1.2011.10.2.26.1.2 | Nodeh3cPortSecurityTables | |||
| 1.3.6.1.4.1.2011.10.2.26.1.2.1 | Tableh3cSecurePortTable | not-accessible | current | This table defines the security status of each secure port. Each port can have a number of authorised MAC addresses, and these are stored in the h3cSecureAddre… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.1.1 | Rowh3cSecurePortEntry | not-accessible | current | There is a row in this table for each secure port, and allows repeater ports to be configured for security on a per port basis. It is indexed using the object … |
| 1.3.6.1.4.1.2011.10.2.26.1.2.1.1.1 | Columnh3cSecurePortMode | read-write | current | Determines the learning and security modes of the port. See h3cSecureNeedToKnowMode and h3cSecureIntrusionAction to configure Need To Know and Intrusion Action… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.1.1.2 | Columnh3cSecureNeedToKnowMode | read-write | current | Attribute to determine which frames are to be forwarded to this port intact. 1 - Need To Know is not available. 2 - All frames. 3 - Frames addressed to the aut… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.1.1.3 | Columnh3cSecureIntrusionAction | read-write | current | Attribute to determine the action if an unauthorised device transmits on this port. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.1.1.4 | Columnh3cSecureNumberAddresses | read-write | current | The maximum number of addresses that the port can learn or store. Reducing this number may cause some addresses to be deleted. This value is set by the user an… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.1.1.5 | Columnh3cSecureNumberAddressesStored | read-only | current | The number of addresses that are currently in the AddressTable for this port. If this object has the same value as h3cSecureNumberAddresses, then no more addre… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.1.1.6 | Columnh3cSecureMaximumAddresses | read-only | current | This indicates the maximum value that h3cSecureNumberAddresses can be set to. It is dependent on the resources available so may change, eg. if resources are sh… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.2 | Tableh3cSecureAddressTable | not-accessible | current | This table stores the MAC addresses assigned to each port. This table can be written to by the agent as well as the management station. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.2.1 | Rowh3cSecureAddressEntry | not-accessible | current | This table allows multiple addresses to be assigned to each secure port. It is indexed using the objects ifIndex, h3cSecureAddrMAC and h3cSecureVlanID. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.2.1.1 | Columnh3cSecureAddrMAC | accessible-for-notify | current | The MAC address of a station assigned to this port. This is the second index into the h3cSecureAddressTable. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.2.1.2 | Columnh3cSecureAddrVlanID | read-create | current | The Vlan ID associate with the port and the MAC address. This is the third index into the h3cSecureAddressTable. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.2.1.3 | Columnh3cSecureAddrMACStatus | read-create | current | The state of the mac address assigned to this port. addressBlackhole (1) the mac address is a blackhole address, Each packet whose source address is equal to t… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.2.1.4 | Columnh3cSecureAddrRowStatus | read-create | current | This manages the creation and deletion or rows, and shows the current status of the indexed MAC address. This object has the following values. active(1) The in… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.3 | Tableh3cSecureOUITable | not-accessible | current | This table stores the OUI values for OUI based authentication. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.3.1 | Rowh3cSecureOUIEntry | not-accessible | current | This is a row in the h3cSecureOUITable. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.3.1.1 | Columnh3cSecureOUIIndex | not-accessible | current | The index number. This is the first index into the h3cSecureOUITable. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.3.1.2 | Columnh3cSecureOUI | read-create | current | The OUI value for an authorised device. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.3.1.3 | Columnh3cSecureOUIRowStatus | read-create | current | This manages the creation and deletion of rows, and shows the current status of the entry. active(1) The indexed OUI value is authorised. notInService(2) Not S… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.4 | Tableh3cSecureBindingTable | not-accessible | current | This table stores the elements of binding rules include the MAC addresses, the IP address and the port. Only the frame exactly matching the binding rules can b… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.4.1 | Rowh3cSecureBindingEntry | not-accessible | current | This table allows multiple binding rules. It is indexed using the object h3cSecureBindingIndex. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.4.1.1 | Columnh3cSecureBindingIndex | not-accessible | current | The index number. This is the first index into the h3cSecureBindingTable. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.4.1.2 | Columnh3cSecureBindingPort | read-create | current | The port number of the port bound with the IP address and the MAC address. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.4.1.3 | Columnh3cSecureBindingAddrMAC | read-create | current | The MAC address bound with the port and the IP address. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.4.1.4 | Columnh3cSecureBindingAddrIp | read-create | current | The IP address bound with the port and the MAC address. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.4.1.5 | Columnh3cSecureBindingRowStatus | read-create | current | This manages the creation and deletion or rows, and shows status of the entry. This object has the following values. active(1) The indexed MAC address is autho… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.5 | Tableh3cSecureAssignTable | not-accessible | current | Table of port assignment management information about authorised user. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.5.1 | Rowh3cSecureAssignEntry | not-accessible | current | An entry (conceptual row) representing information about port assignment about authorised user. |
| 1.3.6.1.4.1.2011.10.2.26.1.2.5.1.1 | Columnh3cSecureAssignEnable | read-write | current | The user-based port configuration control. Setting this attribute TRUE causes the port to be configured with any configuration parameters supplied by the authe… |
| 1.3.6.1.4.1.2011.10.2.26.1.2.5.1.2 | Columnh3cSecureVlanAssignment | read-only | current | The VLAN membership assigned to the port for the authorised user. This contains the actual value received from the authentication server. This object will cont… |
| 1.3.6.1.4.1.2011.10.2.26.1.3 | Nodeh3cPortSecurityNotifications | |||
| 1.3.6.1.4.1.2011.10.2.26.1.3.1 | Notificationh3cSecureAddressLearned | current | This trap is sent when a new station has been learned. The port on which the address was received is the first object, and the MAC address of the learned stati… | |
| 1.3.6.1.4.1.2011.10.2.26.1.3.2 | Notificationh3cSecureViolation | current | This trap is sent whenever a security violation has occurred. The port on which the violation occured is the first object, and the MAC address of the offending… | |
| 1.3.6.1.4.1.2011.10.2.26.1.3.3 | Notificationh3cSecureLoginFailure | current | This trap is sent whenever a user network access authentication has failed. The port on which the violation occured is the first object, and the MAC address of… | |
| 1.3.6.1.4.1.2011.10.2.26.1.3.4 | Notificationh3cSecureLogon | current | This trap is sent when a new session is started for an authorised port user. The port on which the violation occured is the first object, and the MAC address o… | |
| 1.3.6.1.4.1.2011.10.2.26.1.3.5 | Notificationh3cSecureLogoff | current | This trap is sent when a user session is terminated. The port on which the violation occured is the first object, and the MAC address of the offending station … | |
| 1.3.6.1.4.1.2011.10.2.26.1.3.6 | Notificationh3cSecureRalmLoginFailure | current | This trap is sent whenever a user network access authentication has failed. The port on which the violation occured is the first object, and the MAC address of… | |
| 1.3.6.1.4.1.2011.10.2.26.1.3.7 | Notificationh3cSecureRalmLogon | current | This trap is sent when a new session is started for an authorised port user. The port on which the violation occured is the first object, and the MAC address o… | |
| 1.3.6.1.4.1.2011.10.2.26.1.3.8 | Notificationh3cSecureRalmLogoff | current | This trap is sent when a new session is started for an authorised port user. The port on which the violation occured is the first object, and the MAC address o… |