All MIBs › CISCO-EVC-MIB › cevcMacSecurityViolationNotification
cevcMacSecurityViolationNotification
Module: CISCO-EVC-MIB
OID (symbolic): CISCO-EVC-MIB::cevcMacSecurityViolationNotification
OID (numeric): 1.3.6.1.4.1.9.9.613.0.0.4
Node type: NOTIFICATION-TYPE
Description: A SNMP entity generates this notification in the following cases:
When the system MAC Address limit is exceeded, the cevcMacSecurityViolationCauseType will contain 'exceedSystemLimit' value.
When the Bridge domain limit is exceeded, the cevcMacSecurityViolationCauseType will contain 'exceedBdLimit' value.
When the Service Instance limit is exceeded, the cevcMacSecurityViolationCauseType will contain 'exceedSILimit' value.
If the MAC address is present in the Black list then cevcMacSecurityViolationCauseType will contain 'blackListDeny' value.
Description of all the varbinds for this Notification is as follows:
ifIndex indicates the interface index which identifies the interface that the service instance is attached.
cevcSIForwardBdNumberBase indicates the base of bridge domain. The bridge domain range is 1~16k, this object is to track the base of each 4k bitmap.
cevcSIForwardBdNumber1kBitmap indicates a string of octets containing one bit per Bridge domain per service instance. This 128-octet bitmap represents bridge domain ID values 0~1023.
cevcSIForwardBdNumber2kBitmap indicates a string of octets containing one bit per Bridge domain per service instance. This 128-octet bitmap represents bridge domain ID values 1024~2047.
cevcSIForwardBdNumber3kBitmap indicates a string of octets containing one bit per Bridge domain per service instance. This 128-octet bitmap represents bridge domain ID values 2048~3071.
cevcSIForwardBdNumber4kBitmap indicates a string of octets containing one bit per Bridge domain per service instance. This 128-octet bitmap represents bridge domain ID values 3072~4095.
cevcSIID indicates the service instance ID for the Mac security violation notification.
cevcMacAddress indicates the Mac address which has violated the Mac security rules.
cevcMaxMacConfigLimit indicates the maximum Mac configuration limit. This is also sent as a part of Mac security violation notification.
cevcViolationCause indicates the Mac security violation cause.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' CISCO-EVC-MIB::cevcMacSecurityViolationNotification snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.9.9.613.0.0.4
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:49912->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (199819000) 23 days, 3:03:10.00 SNMPv2-MIB::snmpTrapOID.0 = OID: CISCO-EVC-MIB::cevcMacSecurityViolationNotification
SNMPv3 example:
snmptrap -v3 -l authPriv -u snmpv3user -a SHA -A "AuthPass1" -x AES -X "PrivPass1" <manager> '' CISCO-EVC-MIB::cevcMacSecurityViolationNotification
Start monitoring Cisco Metro/Carrier Ethernet switch or router with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-EVC-MIB::cevcMacSecurityViolationNotification OID value, configure state conditions and alerts, and monitor any Cisco Metro/Carrier Ethernet switch or router from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.613 | ciscoEvcMIB | CISCO-EVC-MIB |
| 1.3.6.1.4.1.9.9.613.0 | ciscoEvcMIBNotifications | CISCO-EVC-MIB |
| 1.3.6.1.4.1.9.9.613.0.0 | ciscoEvcNotificationPrefix | CISCO-EVC-MIB |
| 1.3.6.1.4.1.9.9.613.0.0.4 | cevcMacSecurityViolationNotification | CISCO-EVC-MIB |