CISCO-PORT-SECURITY-MIB Download

cpsGlobalMaxSecureAddress

allowed in the device.

cpsGlobalTotalSecureAddress

in the device.

cpsGlobalPortSecurityEnable

port security feature on the device.

cpsGlobalSNMPNotifRate

rate for port security feature. This object specifies the rate at which SNMP Notifications are generated when cpsIfViolationAction selected is of the type 'dropNotify'. A value of 0 indicates that an SNMP Notification is generated for every security viola ...

cpsGlobalSNMPNotifControl

for port security feature. Setting the object to 'false' will disable SNMP notifications even if the cpsIfViolationAction is set to 'dropNotify' on an interface. The default value is 'false'.

cpsGlobalClearSecureMacAddresses

secure MAC addresses based on the specified type.

cpsIfConfigTable

A list of port security configuration entries. The number of entries is determined by the number of interfaces in the system that can support the port security feature. Interfaces that are not port security capable will not be displayed in this Table. T ...

cpsIfConfigEntry

Entry containing port security information for a particular interface.

cpsIfPortSecurityEnable

is enabled on an interface. Upon setting this object to 'true', the source MAC address that does not match any cpsSecureMacAddress for the given interface in cpsSecureMacAddressTable and the value of cpsIfCurrentSecureMacAddrCount is equal to cpsIfMaxSec ...

cpsIfPortSecurityStatus

of the port security feature on an interface. secureup(1) - This indicates port security is operational. securedown(2) - This indicates port security is not operational. This happens when port security is configured to be enabled but could not be enabled ...

cpsIfMaxSecureMacAddr

secured on the interface. The first N MAC addresses learned or configured are made secured. Changing this object value from N to M is not allowed if M is smaller than N, and M is less than the value of cpsIfCurrentSecureMacAddrCount on the interface. One ...

cpsIfCurrentSecureMacAddrCount

on this interface.

cpsIfSecureMacAddrAgingTime

secured. After the expiration of the time, the corresponding cpsSecureMacAddressEntry from the cpsSecureMacAddressTable will be removed. If the value of this object is 0, the aging mechanism is disabled.

cpsIfSecureMacAddrAgingType

secure MAC addresses are aged out. absolute(1) - all the secure MAC addresses will be aged out after cpsIfSecureMacAddrAgingTime minutes since the time the secure MAC address is learned or configured. inactivity(2) - all the secure MAC addresses will ag ...

cpsIfStaticMacAddrAgingEnable

mechanism is enabled on static MAC address entries in cpsSecureMacAddressTable. Setting this object value to 'false' will cause the static MAC addresses to remain in the cpsSecureMacAddressTable regardless of the aging time and type configured on the inte ...

cpsIfViolationAction

take if the traffic matches the port security violation. shutdown(1) - the interface will be forced to shut down. dropNotify(2) - the matched traffic will be dropped and cpsSecureMacAddrViolation notification will be generated. drop(3) - the match ...

cpsIfViolationCount

occurred on a secure interface. The counter will be initialized to zero when the port security feature is enabled on an interface. This MIB object is only instantiated if the device can provide this violation statistics on the interface.

cpsIfSecureLastMacAddress

address that is seen on this interface. This object is also used as a variable in the cpsSecureMacAddrViolation notification to contain the value of the MAC address which caused the violation.

cpsIfClearSecureAddresses

this interface. Setting this object to 'false' has no effect. This object always returns 'false' when read.

cpsIfUnicastFloodingEnable

the interface not to block unicast flooded traffic when the secure address count reaches the threshold. Setting this object to false(2) will configure the interface to block unicast flooded traffic when the secure address count reaches the threshold.

cpsIfShutdownTimeout

may remain in shutdown(3). After the expiration of the time, all the security configuration of this port is re-installed and the port is enabled. If the value of this object is 0, the port is shut down permanently.

cpsIfClearSecureMacAddresses

secure MAC addresses based on the type specified.

cpsIfStickyEnable

disable Sticky port security feature on this interface. Enabling this feature allows the device to secure learned MAC addresses on this interface permanently. In order to remove the sticky addresses on this interface, user has to manually delete the stic ...

cpsIfInvalidSrcRateLimitEnable

rate limiting for invalid source MAC addresses received on this interface. Enabling this feature will help to rate limit packets which comes with invalid src MAC address on this interface.

cpsIfInvalidSrcRateLimitValue

'true' then this value is used to limit the rate at which packets with invalid source MAC addresses are processed on this interface. Upon exceeding the rate, the port is shutdown. If cpsIfInvalidSrcRateLimitEnable is set to 'false' then this value will b ...

cpsIfSecureLastMacAddrVlanId

MAC address that is seen on this interface. This object is also used as a variable in the cpsIfVlanSecureMacAddrViolation notification to contain the value of the VLAN received the mac address which caused the violation.

cpsSecureMacAddressTable

the secure MAC address information.

cpsSecureMacAddressEntry

information for a particular interface. A secure MAC address can be configured by the user and can be added by the agent when the device learns a new secured MAC address. Note that the secure MAC addresses can be configured on an interface even if port se ...

cpsSecureMacAddress

address configured or learned on an interface.

cpsSecureMacAddrType

is a configured (static) or learned (dynamic) address on this interface.

cpsSecureMacAddrRemainingAge

of the secure MAC address if aging is enabled on that port. A value of 0 indicates that aging is disabled for this MAC address entry.

cpsSecureMacAddrRowStatus

This object is a conceptual row entry that allows to add or delete entries to or from the cpsSecureMacAddressTable. 1. When creating an entry in this table 'createAndGo' method is used and the value of this object is set to 'active'. Deactivation of an 'a ...

cpsIfVlanSecureMacAddrTable

the secure MAC address information. This table is simular to cpsSecureMacAddressTable except that cpsIfVlanSecureVlanIndex is part of the INDEX clause. This table is used to configure a secure MAC address on either an access interface or trunking interfac ...

cpsIfVlanSecureMacAddrEntry

information for a particular interface. A secure MAC address can be configured by the user and can be added by the agent when the device learns a new secure MAC address. Note that the secure MAC addresses can be configured on an interface even if the port ...

cpsIfVlanSecureMacAddress

address configured or learned on an interface.

cpsIfVlanSecureVlanIndex

configured on an interface.

cpsIfVlanSecureMacAddrType

is a configured 'static' or learned 'dynamic' or learned and retained across reboots 'sticky'.

cpsIfVlanSecureMacAddrRemainAge

of the secure MAC address if aging is enabled on that port. A value of 0 indicates that aging is disabled for this MAC address entry.

cpsIfVlanSecureMacAddrRowStatus

This object is a conceptual row entry that allows adding or deleting entries to or from the cpsIfVlanSecureMacAddressTable. 1. When creating an entry in this table the 'createAndGo' method is used and the value of this object is set to 'active'. Deactivat ...

cpsIfVlanTable

port-security information for each vlan that is allowed on trunk interface. The number of entries is determined by the number of allowed VLANs on trunk interface in the system . An Entry in the table gets created when a vlan becomes allowed and gets delet ...

cpsIfVlanEntry

a particular VLAN within a trunk port.

cpsIfVlanIndex

The ID of a VLAN within this trunk port.

cpsIfVlanMaxSecureMacAddr

be secured in the VLAN indicated by cpsIfVlanIndex on this interface. If cpsIfVlanMaxSecureMacAddr is not set, its value is 1. If cpsIfVlanMaxSecureMacAddr is not set, then the cpsIfMaxSecureMacAddr applies to this VLAN. If cpsIfVlanMaxSecureMacAddr is se ...

cpsIfVlanCurSecureMacAddrCount

in the VLAN indicated by cpsIfVlanIndex on this interface.

cpsIfMultiVlanTable

Each entry in this table represents port-security information such as the maximum value of secured mac address allowed, the current number of secure mac address applied on a VLAN that is allowed on multi-vlan interface as well as a mechanism to clear the ...

cpsIfMultiVlanEntry

Entry containing port security information for a particular VLAN within a multi-vlan port. When secured mac addresses are learned or configured on such interface denoted by ifIndex and an allowed VLAN in this interface denoted by cpsIfMultiVlanIndex, an e ...

cpsIfMultiVlanIndex

The VLAN ID of an allowed VLAN for this multi-vlan port.

cpsIfMultiVlanMaxSecureMacAddr

The maximum number (N) of MAC addresses to be secured in the VLAN indicated by cpsIfMultiVlanIndex object on this interface. Setting the value of this object to zero indicates that there is no specific restriction on the maximum number of MAC adddress to ...

cpsIfMultiVlanSecureMacAddrCount

The current number of MAC addresses secured in the VLAN indicated by cpsIfMultiVlanIndex object on this interface.

cpsIfMultiVlanClearSecureMacAddr

This objects allows the user to delete secure MAC addresses based on the type specified per interface per VLAN.

cpsIfMultiVlanRowStatus

The object is used to manage the creation and deletion of row in this table. It only supports 'active', 'destroy', and 'createAndGo' value. Entry in the table gets created by setting cpsIfMultiVlanRowStatus object to 'createAndGo'. Entry in this table get ...

cpsGlobalGroup

A collection of objects for use with the Port Security feature.

cpsInterfaceGroup

********* THIS GROUP IS DEPRECATED ********** A collection of objects for use with the Port Security feature.

cpsExtInterfaceGroup

A collection of objects providing the additional information for the Port Security feature.

cpsUnicastFloodingInterfaceGroup

A collection of objects providing the unicast flooding information for the Port Security feature.

cpsShutdownTimeoutInterfaceGroup

A collection of objects providing the shutdown timeout information for the Port Security feature.

cpsIfVlanSecureMacAddrGroup

A collection of objects for use with the Port Security feature.

cpsInterfaceGroup1

********* THIS GROUP IS DEPRECATED ********** A collection of objects for use with the Port Security configuration.

cpsExtConfigInterfaceGroup

********* THIS GROUP IS DEPRECATED ********** A collection of objects providing the additional information for the Port Security feature.

cpsIfVlanGroup

A collection of objects providing additional trunk VLAN information for the Port Security feature on a given interface.

cpsGlobalClearAddressGroup

A collection of objects for clearing addresses on the device.

cpsInterfaceGroup2

A collection of objects for use with the Port Security configuration.

cpsIfMultiVlanGroup

A collection of objects providing additional per interface per VLAN port security feature information on a multi-vlan interface.

cpsExtInterfaceGroup1

A collection of objects providing the information of the VLAN-id for the last MAC address seen on the interface.