All MIBs › DECHUB900-ERPTR-MIB-V3-0 › erptrSecurityPortCtrlIntrusionMode
erptrSecurityPortCtrlIntrusionMode
Module: DECHUB900-ERPTR-MIB-V3-0
OID (symbolic): DECHUB900-ERPTR-MIB-V3-0::erptrSecurityPortCtrlIntrusionMode
OID (numeric): 1.3.6.1.4.1.36.2.18.11.5.1.1.4.3.1.1.4
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: To detect intrusion security violations, the repeater compares source addresses of packets received from this port with the addresses in the port's authorized address list (as specified in erptrSecurityPortAddrTable). If the addresses do not match, the intrusion is counted, logged in erptrSecurityRptrLogTable, and and the security rule specified by this object is enforced. Intrusion protection is not active unless authorized addresses are assigned to this port in erptrSecurityPortAddrTable.
Setting this object to disabled (1) disables intrusion detection/prevention on this port.
Setting this object to notifyOnly (2) causes the repeater to take no action, other than logging entries in erptrSecurityRptrLogTable, when it detects intrusion violations.
Setting this object to jamUnauthPackets (3) causes the repeater to jam/garble unauthorized packets before they are repeated to all other repeater ports.
Setting this object to disablePort (4) causes the repeater to disable this port if it detects intrusion security violations on this port. The port may be re-enabled by setting rptrPortAdminStatus to enabled.
Some implementations may not support setting this object to all defined enumerated values. A badValue error is returned if an attempt is made to set this object to an unsupported value.
Note: The default value for this object is disabled (1).
Note: The state of this object is preserved when the repeater undergoes a power-up reset.
What is erptrSecurityPortCtrlIntrusionMode?
This sets how the repeater reacts when a packet arrives on the port from a source MAC not in its authorized address list: disabled(1) (the default) takes no action, notifyOnly(2) just logs the violation, jamUnauthPackets(3) garbles the offending packet before repeating it, and disablePort(4) shuts the port down entirely until manually re-enabled. Intrusion protection only takes effect once at least one authorized address is assigned to the port.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.36.2.18.11.5.1.1.4.3.1.1.4 snmpwalk -v2c -c public <target> DECHUB900-ERPTR-MIB-V3-0::erptrSecurityPortCtrlIntrusionMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.36.2.18.11.5.1.1.4.3.1.1.4.1 snmpget -v2c -c public <target> DECHUB900-ERPTR-MIB-V3-0::erptrSecurityPortCtrlIntrusionMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.36.2.18.11.5.1.1.4.3.1.1.4.1 i <value>
Start monitoring DEC HUB 900 series modular hub/repeater chassis with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the DECHUB900-ERPTR-MIB-V3-0::erptrSecurityPortCtrlIntrusionMode OID value, configure state conditions and alerts, and monitor any DEC HUB 900 series modular hub/repeater chassis from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.36 | dec | DEC-ATM-CHASSIS-MIB |
| 1.3.6.1.4.1.36.2 | ema | DEC-ATM-CHASSIS-MIB |
| 1.3.6.1.4.1.36.2.18 | decMIBextension | DEC-ATM-CHASSIS-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.36.2.18.11 | decHub900 | DECHUB900-ERPTR-MIB-V3-0 |
| 1.3.6.1.4.1.36.2.18.11.5 | repeater | DECHUB900-ERPTR-MIB-V3-0 |
| 1.3.6.1.4.1.36.2.18.11.5.1 | rptrVersion1 | DECHUB900-ERPTR-MIB-V3-0 |
| 1.3.6.1.4.1.36.2.18.11.5.1.1 | rptrExtensions | DECHUB900-ERPTR-MIB-V3-0 |
| 1.3.6.1.4.1.36.2.18.11.5.1.1.4 | erptrSecurityPackage | DECHUB900-ERPTR-MIB-V3-0 |
| 1.3.6.1.4.1.36.2.18.11.5.1.1.4.3 | erptrSecurityPortInfo | DECHUB900-ERPTR-MIB-V3-0 |
| 1.3.6.1.4.1.36.2.18.11.5.1.1.4.3.1 | erptrSecurityPortCtrlTable | DECHUB900-ERPTR-MIB-V3-0 |
| 1.3.6.1.4.1.36.2.18.11.5.1.1.4.3.1.1 | erptrSecurityPortCtrlEntry | DECHUB900-ERPTR-MIB-V3-0 |
| 1.3.6.1.4.1.36.2.18.11.5.1.1.4.3.1.1.4 | erptrSecurityPortCtrlIntrusionMode | DECHUB900-ERPTR-MIB-V3-0 |