All MIBs › CISCO-PORT-SECURITY-MIB
Organization: Cisco Systems, Inc.
Last Updated: 2009-05-08
Category: Cisco Devices, Device Management, VPN and Security
Description: Manages port security configuration limiting MAC addresses and detecting violations on Cisco switch ports.
IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring CISCO-PORT-SECURITY-MIB with a free 30-day trial of IPNetwork Monitor.
What Is CISCO-PORT-SECURITY-MIB?
CISCO-PORT-SECURITY-MIB is a Cisco enterprise MIB for managing Port Security, a Layer 2 access-control feature that restricts the number and identity of MAC addresses allowed on a switch port to prevent unauthorized devices or MAC flooding attacks. It exposes global settings such as maximum secure addresses and notification rate, plus a per-interface table tracking enable state, port security operational status, configured maximum secure MAC count, and current secure MAC address count. Its monitoring value is in access-control and security-fault status: administrators track per-port violation status and current-versus-maximum MAC counts to detect security violations, unauthorized device attachment attempts, or ports nearing their MAC address ceiling. It relies on the standard Cisco enterprise interface-indexing conventions (ifIndex-based tables) common across Cisco switching MIBs. It is deployed on Cisco Catalyst and similar switches in enterprise networks enforcing physical port-level access control. Engineers can download the CISCO-PORT-SECURITY-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-PORT-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco Catalyst switch
- Cisco managed switch (Layer 2)
Monitoring Examples
An administrator would walk cpsIfConfigTable/cpsIfConfigEntry to compare cpsIfCurrentSecureMacAddrCount against cpsIfMaxSecureMacAddr per port, flagging ports at or near their limit. Checking cpsIfPortSecurityStatus alongside cpsGlobalTotalSecureAddress would reveal whether a specific port has entered a security-violation shutdown state while the global secure-address count stays within cpsGlobalMaxSecureAddress. A port showing cpsIfPortSecurityStatus as violated, with cpsIfCurrentSecureMacAddrCount exceeding its configured maximum, would indicate an unauthorized device or MAC-flood attempt on that port.
What Can Be Monitored
- per-port security violation status
- current vs. maximum secure MAC address count
- port security enable state
- global secure address totals
- SNMP notification rate for violations
This MIB depends on
Related MIBs
Imported Objects
From CISCO-SMI
| ciscoMgmt | OBJECT-IDENTITY |
From CISCO-VTP-MIB
| vtpVlanName | OBJECT-TYPE |
From IF-MIB
| ifIndex | OBJECT-TYPE |
| ifName | OBJECT-TYPE |
From Q-BRIDGE-MIB
| VlanIndex |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Integer32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| MacAddress | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using cpsIfViolationCount OID:
Select a Cisco Catalyst switch (Layer 2 port security) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cpsIfViolationCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This object indicates the number of violations occurred on a secure interface. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ciscoPortSecurityMIB | 1.3.6.1.4.1.9.9.315 | The MIB module for managing Cisco Port Security. | ||
| ciscoPortSecurityMIBNotifs | 1.3.6.1.4.1.9.9.315.0 | |||
| cpsInterfaceNotifs | 1.3.6.1.4.1.9.9.315.0.0 | |||
| NTF cpsSecureMacAddrViolation | 1.3.6.1.4.1.9.9.315.0.0.1 | The address violation notification is generated when port security address violation is detected on a secure non-trunk, access interface (that carries a single vlan) and the cpsIfViolationAction is set to 'dropNotify'. | ||
| NTF cpsTrunkSecureMacAddrViolation | 1.3.6.1.4.1.9.9.315.0.0.2 | The address violation notification is generated when port security address violation is detected on a secure trunk or a multi-vlan interface and the cpsIfViolationAction is set to 'dropNotify'. | ||
| NTF cpsIfVlanSecureMacAddrViolation | 1.3.6.1.4.1.9.9.315.0.0.3 | The address violation notification is generated when port security address violation is detected on a multi-vlan interface and the cpsIfViolationAction is set to 'dropNotify'. | ||
| ciscoPortSecurityMIBObjects | 1.3.6.1.4.1.9.9.315.1 | |||
| cpsGlobalObjects | 1.3.6.1.4.1.9.9.315.1.1 | |||
| I32 cpsGlobalMaxSecureAddress | 1.3.6.1.4.1.9.9.315.1.1.1 | Integer32 | read-only | The maximum number of secure MAC addresses allowed in the device. |
| I32 cpsGlobalTotalSecureAddress | 1.3.6.1.4.1.9.9.315.1.1.2 | Integer32 | read-only | The total number of MAC addresses secured in the device. |
| T/F cpsGlobalPortSecurityEnable | 1.3.6.1.4.1.9.9.315.1.1.3 | TruthValue | read-write | The global control to enable or disable port security feature on the device. |
| I32 cpsGlobalSNMPNotifRate | 1.3.6.1.4.1.9.9.315.1.1.4 | Integer32 | read-write | The global control to set the SNMP Notification rate for port security feature. This object specifies the rate at which SNMP Notifications are generated when cpsIfViolationAction selected is of the type 'dropNotify'. A value of 0 indicates that an SNMP Notification is generated for every security violation. |
| T/F cpsGlobalSNMPNotifControl | 1.3.6.1.4.1.9.9.315.1.1.5 | TruthValue | read-write | Set to 'true' to enable global SNMP Notification for port security feature. Setting the object to 'false' will disable SNMP notifications even if the cpsIfViolationAction is set to 'dropNotify' on an interface. The default value is 'false'. |
| CLE cpsGlobalClearSecureMacAddresses | 1.3.6.1.4.1.9.9.315.1.1.6 | ClearSecureMacAddrType | read-write | This objects allows the user to delete secure MAC addresses based on the specified type. |
| cpsInterfaceObjects | 1.3.6.1.4.1.9.9.315.1.2 | |||
| cpsIfConfigTable | 1.3.6.1.4.1.9.9.315.1.2.1 | not-accessible | A list of port security configuration entries. The number of entries is determined by the number of interfaces in the system that can support the port security feature. Interfaces that are not port security capable will not be displayed in this Table. This table includes interfaces on which port security parameters can be set even if port security feature itself cannot be enabled due to conflict with other features. | |
| cpsIfConfigEntry | 1.3.6.1.4.1.9.9.315.1.2.1.1 | not-accessible | Entry containing port security information for a particular interface. | |
| T/F cpsIfPortSecurityEnable | 1.3.6.1.4.1.9.9.315.1.2.1.1.1 | TruthValue | read-write | Indicates whether the port security feature is enabled on an interface. Upon setting this object to 'true', the source MAC address that does not match any cpsSecureMacAddress for the given interface in cpsSecureMacAddressTable and the value of cpsIfCurrentSecureMacAddrCount is equal to cpsIfMaxSecureMacAddr, is considered as port security violation and an action as specified in cpsIfViolationAction is taken on the interface. The value of this object has no effect when the value of cpsGlobalPortSecurityEnable is set to 'false'. |
| INT cpsIfPortSecurityStatus | 1.3.6.1.4.1.9.9.315.1.2.1.1.2 | INTEGER | read-only | This object represents the operational status of the port security feature on an interface. secureup(1) - This indicates port security is operational. securedown(2) - This indicates port security is not operational. This happens when port security is configured to be enabled but could not be enabled due to certain reasons such as conflict with other features. shutdown(3) - This indicates that the port is shutdown due to port security violation when the object cpsIfViolationAction is of type 'shutdown'. |
| I32 cpsIfMaxSecureMacAddr | 1.3.6.1.4.1.9.9.315.1.2.1.1.3 | Integer32 | read-write | The maximum number (N) of MAC addresses to be secured on the interface. The first N MAC addresses learned or configured are made secured. Changing this object value from N to M is not allowed if M is smaller than N, and M is less than the value of cpsIfCurrentSecureMacAddrCount on the interface. One way to change the number in this case is by deleting sufficient number of secure mac addresses configured or learned on the device. Also, some devices may choose to limit the sum of this object value for all interfaces to less than or equal to cpsGlobalMaxSecureAddress. |
| I32 cpsIfCurrentSecureMacAddrCount | 1.3.6.1.4.1.9.9.315.1.2.1.1.4 | Integer32 | read-only | The current number of MAC addresses secured on this interface. |
| I32 cpsIfSecureMacAddrAgingTime | 1.3.6.1.4.1.9.9.315.1.2.1.1.5 | Integer32 | read-write | The interval in which the interface is secured. After the expiration of the time, the corresponding cpsSecureMacAddressEntry from the cpsSecureMacAddressTable will be removed. If the value of this object is 0, the aging mechanism is disabled. |
| INT cpsIfSecureMacAddrAgingType | 1.3.6.1.4.1.9.9.315.1.2.1.1.6 | INTEGER | read-write | The aging type determines the way the secure MAC addresses are aged out. absolute(1) - all the secure MAC addresses will be aged out after cpsIfSecureMacAddrAgingTime minutes since the time the secure MAC address is learned or configured. inactivity(2) - all the secure MAC addresses will age out and will be removed from the cpsSecureMacAddressTable only if there is no data traffic from the secure source MAC address for the specified time period. |
| T/F cpsIfStaticMacAddrAgingEnable | 1.3.6.1.4.1.9.9.315.1.2.1.1.7 | TruthValue | read-write | Indicates whether the secure MAC address aging mechanism is enabled on static MAC address entries in cpsSecureMacAddressTable. Setting this object value to 'false' will cause the static MAC addresses to remain in the cpsSecureMacAddressTable regardless of the aging time and type configured on the interface. Setting this object value to 'true' will cause the static MAC addresses to be aged out from cpsSecureMacAddressTable according to the aging time and type specified on the interface. |
| INT cpsIfViolationAction | 1.3.6.1.4.1.9.9.315.1.2.1.1.8 | INTEGER | read-write | Determines the action that the device will take if the traffic matches the port security violation. shutdown(1) - the interface will be forced to shut down. dropNotify(2) - the matched traffic will be dropped and cpsSecureMacAddrViolation notification will be generated. drop(3) - the matched traffic will be dropped. |
| C32 cpsIfViolationCountEx | 1.3.6.1.4.1.9.9.315.1.2.1.1.9 | Counter32 | read-only | This object indicates the number of violations occurred on a secure interface. The counter will be initialized to zero when the port security feature is enabled on an interface. This MIB object is only instantiated if the device can provide this violation statistics on the interface. |
| MAC cpsIfSecureLastMacAddress | 1.3.6.1.4.1.9.9.315.1.2.1.1.10 | MacAddress | read-only | This object indicates the last MAC address that is seen on this interface. This object is also used as a variable in the cpsSecureMacAddrViolation notification to contain the value of the MAC address which caused the violation. |
| T/F cpsIfClearSecureAddresses | 1.3.6.1.4.1.9.9.315.1.2.1.1.11 | TruthValue | read-write | Set to 'true' to delete all secure addresses on this interface. Setting this object to 'false' has no effect. This object always returns 'false' when read. |
| T/F cpsIfUnicastFloodingEnable | 1.3.6.1.4.1.9.9.315.1.2.1.1.12 | TruthValue | read-write | Setting this object to true(1) will configure the interface not to block unicast flooded traffic when the secure address count reaches the threshold. Setting this object to false(2) will configure the interface to block unicast flooded traffic when the secure address count reaches the threshold. |
| U32 cpsIfShutdownTimeout | 1.3.6.1.4.1.9.9.315.1.2.1.1.13 | Unsigned32 | read-write | The interval in which the cpsIfPortSecurityStatus may remain in shutdown(3). After the expiration of the time, all the security configuration of this port is re-installed and the port is enabled. If the value of this object is 0, the port is shut down permanently. |
| CLE cpsIfClearSecureMacAddresses | 1.3.6.1.4.1.9.9.315.1.2.1.1.14 | ClearSecureMacAddrType | read-write | This objects allows the user to delete secure MAC addresses based on the type specified. |
| T/F cpsIfStickyEnable | 1.3.6.1.4.1.9.9.315.1.2.1.1.15 | TruthValue | read-write | Set to 'true' to enable and 'false' to disable Sticky port security feature on this interface. Enabling this feature allows the device to secure learned MAC addresses on this interface permanently. In order to remove the sticky addresses on this interface, user has to manually delete the sticky MAC address(es) or disable the sticky feature itself. Manual deletion of all addresses can be accomplished by cpsIfClearSecureMacAddresses object. Manual of single address can be accomplished by cpsIfVlanSecureMacAddrRowStatus object. |
| T/F cpsIfInvalidSrcRateLimitEnable | 1.3.6.1.4.1.9.9.315.1.2.1.1.16 | TruthValue | read-write | Set to 'true' to enable and 'false' to disable rate limiting for invalid source MAC addresses received on this interface. Enabling this feature will help to rate limit packets which comes with invalid src MAC address on this interface. |
| I32 cpsIfInvalidSrcRateLimitValue | 1.3.6.1.4.1.9.9.315.1.2.1.1.17 | Integer32 | read-write | If cpsIfInvalidSrcRateLimitEnable is set to 'true' then this value is used to limit the rate at which packets with invalid source MAC addresses are processed on this interface. Upon exceeding the rate, the port is shutdown. If cpsIfInvalidSrcRateLimitEnable is set to 'false' then this value will be -1. |
| VLA cpsIfSecureLastMacAddrVlanId | 1.3.6.1.4.1.9.9.315.1.2.1.1.18 | VlanIndex | read-only | This object indicates the VLAN where the last MAC address that is seen on this interface. This object is also used as a variable in the cpsIfVlanSecureMacAddrViolation notification to contain the value of the VLAN received the mac address which caused the violation. |
| cpsSecureMacAddressTable | 1.3.6.1.4.1.9.9.315.1.2.2 | not-accessible | A list of port security entries containing the secure MAC address information. | |
| cpsSecureMacAddressEntry | 1.3.6.1.4.1.9.9.315.1.2.2.1 | not-accessible | Entry containing secure MAC address information for a particular interface. A secure MAC address can be configured by the user and can be added by the agent when the device learns a new secured MAC address. Note that the secure MAC addresses can be configured on an interface even if port security feature is disabled. | |
| MAC cpsSecureMacAddress | 1.3.6.1.4.1.9.9.315.1.2.2.1.1 | MacAddress | not-accessible | This object indicates a secure MAC address configured or learned on an interface. |
| INT cpsSecureMacAddrType | 1.3.6.1.4.1.9.9.315.1.2.2.1.2 | INTEGER | read-only | This object indicates if the secure MAC address is a configured (static) or learned (dynamic) address on this interface. |
| I32 cpsSecureMacAddrRemainingAge | 1.3.6.1.4.1.9.9.315.1.2.2.1.3 | Integer32 | read-only | This object indicates the remaining age of the secure MAC address if aging is enabled on that port. A value of 0 indicates that aging is disabled for this MAC address entry. |
| ROW cpsSecureMacAddrRowStatus | 1.3.6.1.4.1.9.9.315.1.2.2.1.4 | RowStatus | read-create | This object is a conceptual row entry that allows to add or delete entries to or from the cpsSecureMacAddressTable. 1. When creating an entry in this table 'createAndGo' method is used and the value of this object is set to 'active'. Deactivation of an 'active' entry is not allowed. 2. When deleting an entry in this table 'destroy' method is used. |
| cpsIfVlanSecureMacAddrTable | 1.3.6.1.4.1.9.9.315.1.2.3 | not-accessible | A list of port security entries containing the secure MAC address information. This table is simular to cpsSecureMacAddressTable except that cpsIfVlanSecureVlanIndex is part of the INDEX clause. This table is used to configure a secure MAC address on either an access interface or trunking interface which support port security feature. | |
| cpsIfVlanSecureMacAddrEntry | 1.3.6.1.4.1.9.9.315.1.2.3.1 | not-accessible | Entry containing secure MAC address information for a particular interface. A secure MAC address can be configured by the user and can be added by the agent when the device learns a new secure MAC address. Note that the secure MAC addresses can be configured on an interface even if the port security feature is disabled. | |
| MAC cpsIfVlanSecureMacAddress | 1.3.6.1.4.1.9.9.315.1.2.3.1.1 | MacAddress | not-accessible | This object indicates a secure MAC address configured or learned on an interface. |
| VLA cpsIfVlanSecureVlanIndex | 1.3.6.1.4.1.9.9.315.1.2.3.1.2 | VlanIndex | not-accessible | This object indicates the vlan configured on an interface. |
| INT cpsIfVlanSecureMacAddrType | 1.3.6.1.4.1.9.9.315.1.2.3.1.3 | INTEGER | read-only | This object indicates if the secure MAC address is a configured 'static' or learned 'dynamic' or learned and retained across reboots 'sticky'. |
| U32 cpsIfVlanSecureMacAddrRemainAge | 1.3.6.1.4.1.9.9.315.1.2.3.1.4 | Unsigned32 | read-only | This object indicates the remaining age of the secure MAC address if aging is enabled on that port. A value of 0 indicates that aging is disabled for this MAC address entry. |
| ROW cpsIfVlanSecureMacAddrRowStatus | 1.3.6.1.4.1.9.9.315.1.2.3.1.5 | RowStatus | read-create | This object is a conceptual row entry that allows adding or deleting entries to or from the cpsIfVlanSecureMacAddressTable. 1. When creating an entry in this table the 'createAndGo' method is used and the value of this object is set to 'active'. Deactivation of an 'active' entry is not allowed. 2. When deleting an entry in this table 'destroy' method is used. |
| cpsIfVlanTable | 1.3.6.1.4.1.9.9.315.1.2.4 | not-accessible | Each entry in this table represents port-security information for each vlan that is allowed on trunk interface. The number of entries is determined by the number of allowed VLANs on trunk interface in the system . An Entry in the table gets created when a vlan becomes allowed and gets deleted when a vlan becomes disallowed on a trunk port. User cannot create new entries in this table, but can only read and modify existing entries. This table is obsolete and replaced with cpsIfMultiVlanTable. | |
| cpsIfVlanEntry | 1.3.6.1.4.1.9.9.315.1.2.4.1 | not-accessible | Entry containing port security information for a particular VLAN within a trunk port. | |
| VLA cpsIfVlanIndex | 1.3.6.1.4.1.9.9.315.1.2.4.1.1 | VlanIndex | not-accessible | The ID of a VLAN within this trunk port. |
| U32 cpsIfVlanMaxSecureMacAddr | 1.3.6.1.4.1.9.9.315.1.2.4.1.2 | Unsigned32 | read-write | The maximum number of MAC addresses to be secured in the VLAN indicated by cpsIfVlanIndex on this interface. If cpsIfVlanMaxSecureMacAddr is not set, its value is 1. If cpsIfVlanMaxSecureMacAddr is not set, then the cpsIfMaxSecureMacAddr applies to this VLAN. If cpsIfVlanMaxSecureMacAddr is set and is less than cpsIfMaxSecureMacAddr, then the cpsIfVlanMaxSecureMacAddr applies to this VLAN. If cpsIfVlanMaxSecureMacAddr is set and is greater than cpsIfMaxSecureMacAddr, then the cpsIfMaxSecureMacAddr applies to this VLAN. |
| U32 cpsIfVlanCurSecureMacAddrCount | 1.3.6.1.4.1.9.9.315.1.2.4.1.3 | Unsigned32 | read-only | The current number of MAC addresses secured in the VLAN indicated by cpsIfVlanIndex on this interface. |
| cpsIfMultiVlanTable | 1.3.6.1.4.1.9.9.315.1.2.5 | not-accessible | Each entry in this table represents port-security information such as the maximum value of secured mac address allowed, the current number of secure mac address applied on a VLAN that is allowed on multi-vlan interface as well as a mechanism to clear the secure mac address on such VLANs. | |
| cpsIfMultiVlanEntry | 1.3.6.1.4.1.9.9.315.1.2.5.1 | not-accessible | Entry containing port security information for a particular VLAN within a multi-vlan port. When secured mac addresses are learned or configured on such interface denoted by ifIndex and an allowed VLAN in this interface denoted by cpsIfMultiVlanIndex, an entry will be automatically created in this table. If there is no corresponding entry in this table for a specific interface and VLAN, the maximum number of secured MAC addresses allowed in such interface and VLAN will be limited in the manner which the device limits the aggregate maximum number of secured MAC address allowed in this specific interface. | |
| VLA cpsIfMultiVlanIndex | 1.3.6.1.4.1.9.9.315.1.2.5.1.1 | VlanIndex | not-accessible | The VLAN ID of an allowed VLAN for this multi-vlan port. |
| U32 cpsIfMultiVlanMaxSecureMacAddr | 1.3.6.1.4.1.9.9.315.1.2.5.1.2 | Unsigned32 | read-create | The maximum number (N) of MAC addresses to be secured in the VLAN indicated by cpsIfMultiVlanIndex object on this interface. Setting the value of this object to zero indicates that there is no specific restriction on the maximum number of MAC adddress to be secured for this particular VLAN in this interface. In this case, the maximum number of secured MAC addresses allowed in this VLAN will be limited in the manner which the device limits the aggregate maximum number of secured MAC address allowed in this interface. Changing this object value from N to M (M is greater than 0) is not allowed if M is smaller than N, and M is less than the value of cpsIfMultiVlanSecureMacAddrCount on this VLAN. One way to change the number in this case is by deleting sufficient number of secure mac addresses configured or learned on the VLAN. If cpsIfMultiVlanMaxSecureMacAddr is less than cpsIfMaxSecureMacAddr, then the aggregate maximum number of secure mac address allowed in this interface is limited by the value of cpsIfMaxSecureMacAddr, and the maximum number of secure mac address allowed in this VLAN for this interface is the value of cpsIfMultiVlanMaxSecureMacAddr object. If cpsIfMultiVlanMaxSecureMacAddr is greater than cpsIfMaxSecureMacAddr, then this object value does not have any effect. The aggregate maximum number of secure mac address allowed in all VLANs for this interface is limited by the value of cpsIfMaxSecureMacAddr object. |
| U32 cpsIfMultiVlanSecureMacAddrCount | 1.3.6.1.4.1.9.9.315.1.2.5.1.3 | Unsigned32 | read-only | The current number of MAC addresses secured in the VLAN indicated by cpsIfMultiVlanIndex object on this interface. |
| CLE cpsIfMultiVlanClearSecureMacAddr | 1.3.6.1.4.1.9.9.315.1.2.5.1.4 | ClearSecureMacAddrType | read-create | This objects allows the user to delete secure MAC addresses based on the type specified per interface per VLAN. |
| ROW cpsIfMultiVlanRowStatus | 1.3.6.1.4.1.9.9.315.1.2.5.1.5 | RowStatus | read-create | The object is used to manage the creation and deletion of row in this table. It only supports 'active', 'destroy', and 'createAndGo' value. Entry in the table gets created by setting cpsIfMultiVlanRowStatus object to 'createAndGo'. Entry in this table gets deleted by setting cpsIfMultiVlanRowStatus object to 'destroy' or when a VLAN indicated by cpsIfMultiVlanIndex object becomes disallowed on a multi-vlan port. If the value of cpsIfMultiVlanSecureMacAddrCount object in the same row is greater than zero, this entry cannot be deleted. Value of cpsIfMultiVlanMaxSecureMacAddr object can be modified when the value of this RowStatus object is 'active'. |
| ciscoPortSecurityMIBConform | 1.3.6.1.4.1.9.9.315.2 | |||
| ciscoPortSecurityMIBCompliances | 1.3.6.1.4.1.9.9.315.2.1 | |||
| ciscoPortSecurityMIBCompliance | 1.3.6.1.4.1.9.9.315.2.1.1 | The compliance statement for the Port Security MIB. | ||
| ciscoPortSecurityMIBCompliance1 | 1.3.6.1.4.1.9.9.315.2.1.2 | The compliance statement for the Port Security MIB. | ||
| ciscoPortSecurityMIBCompliance2 | 1.3.6.1.4.1.9.9.315.2.1.3 | The compliance statement for the Port Security MIB. | ||
| ciscoPortSecurityMIBCompliance3 | 1.3.6.1.4.1.9.9.315.2.1.4 | The compliance statement for the Port Security MIB. | ||
| ciscoPortSecurityMIBCompliance4 | 1.3.6.1.4.1.9.9.315.2.1.5 | The compliance statement for the Port Security MIB. | ||
| ciscoPortSecurityMIBGroups | 1.3.6.1.4.1.9.9.315.2.2 | |||
| cpsGlobalGroup | 1.3.6.1.4.1.9.9.315.2.2.1 | A collection of objects for use with the Port Security feature. | ||
| cpsInterfaceGroup | 1.3.6.1.4.1.9.9.315.2.2.2 | ********* THIS GROUP IS DEPRECATED ********** A collection of objects for use with the Port Security feature. | ||
| cpsExtInterfaceGroup | 1.3.6.1.4.1.9.9.315.2.2.3 | A collection of objects providing the additional information for the Port Security feature. | ||
| cpsNotificationGroup | 1.3.6.1.4.1.9.9.315.2.2.4 | A collection of notifications for use with the Port Security feature. | ||
| cpsUnicastFloodingInterfaceGroup | 1.3.6.1.4.1.9.9.315.2.2.5 | A collection of objects providing the unicast flooding information for the Port Security feature. | ||
| cpsShutdownTimeoutInterfaceGroup | 1.3.6.1.4.1.9.9.315.2.2.6 | A collection of objects providing the shutdown timeout information for the Port Security feature. | ||
| cpsIfVlanSecureMacAddrGroup | 1.3.6.1.4.1.9.9.315.2.2.8 | A collection of objects for use with the Port Security feature. | ||
| cpsInterfaceGroup1 | 1.3.6.1.4.1.9.9.315.2.2.9 | ********* THIS GROUP IS DEPRECATED ********** A collection of objects for use with the Port Security configuration. | ||
| cpsExtConfigInterfaceGroup | 1.3.6.1.4.1.9.9.315.2.2.10 | ********* THIS GROUP IS DEPRECATED ********** A collection of objects providing the additional information for the Port Security feature. | ||
| cpsIfVlanGroup | 1.3.6.1.4.1.9.9.315.2.2.11 | A collection of objects providing additional trunk VLAN information for the Port Security feature on a given interface. | ||
| cpsGlobalClearAddressGroup | 1.3.6.1.4.1.9.9.315.2.2.12 | A collection of objects for clearing addresses on the device. | ||
| cpsInterfaceGroup2 | 1.3.6.1.4.1.9.9.315.2.2.13 | A collection of objects for use with the Port Security configuration. | ||
| cpsTrunkSecureNotificationGroup | 1.3.6.1.4.1.9.9.315.2.2.14 | A collection of trunk or multi-vlan port related notifications for use with the port-security feature. | ||
| cpsIfMultiVlanGroup | 1.3.6.1.4.1.9.9.315.2.2.15 | A collection of objects providing additional per interface per VLAN port security feature information on a multi-vlan interface. | ||
| cpsIfVlanSecureNotificationGroup | 1.3.6.1.4.1.9.9.315.2.2.16 | A collection of trunk or multi-vlan port related notifications for use with the port-security feature. | ||
| cpsExtInterfaceGroup1 | 1.3.6.1.4.1.9.9.315.2.2.17 | A collection of objects providing the information of the VLAN-id for the last MAC address seen on the interface. |
RFC description
Manages MAC address-based port security, violations, and sticky address configuration on Cisco switches.
Start monitoring Cisco Catalyst switch (Layer 2 port security) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.