DLINK-PORT-SECURITY-MIB

All MIBs › DLINK-PORT-SECURITY-MIB

Organization: D-Link Corp.

Last Updated: 2012-10-16

Category: Domain: Security, Vendor: D-Link

Description:

Manages port security features including MAC-based access control and unauthorized access actions on D-Link switches.

Imported Objects

dlink-common-mgmt

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress

What Is DLINK-PORT-SECURITY-MIB?

This is a D-Link proprietary MIB for port security on D-Link switches, controlling MAC-based access control per switch port and the action taken (e.g., shutdown, discard, trap) when an unauthorized MAC address is seen. It exposes configuration for enabling port security, setting the maximum number of secure MAC addresses per port, and the violation action, plus status showing learned/secure MAC addresses and any triggered violations. For monitoring, it is used to confirm the security posture of each port and to catch security events; an admin would check whether a port has hit its secure-MAC limit or triggered a violation action, which reveals a potential unauthorized device attempting to connect or a MAC-spoofing attempt. It is a vendor-private feature that parallels the port-security concepts seen in various vendor-specific and 802.1X-adjacent MIBs without directly extending a single IETF standard. It is deployed on D-Link access-layer switches where physical port access needs to be restricted to known/authorized MAC addresses. Engineers can download the DLINK-PORT-SECURITY-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DLINK-PORT-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

What Can Be Monitored

port security enable state per port
secure MAC address count/limit
violation action taken
learned secure MAC addresses

Supported Devices

D-Link managed switch

Monitoring Examples

No sample object names were provided for this module, so specific OIDs cannot be cited here. Based on its description, a realistic monitoring scenario is polling per-port port-security enable state and the count of learned secure MAC addresses against the configured maximum, and checking for a triggered violation action (e.g., port shutdown) which would indicate an unauthorized device attempted to connect to that port.

OIDs

OID symbolic	OID numeric	Type	Access	Description
swPortSecCtrl	1.3.6.1.4.1.171.12.63.1
INT swPortSecDelCtrl	1.3.6.1.4.1.171.12.63.3.4.1.4	INTEGER	read-write	Used to delete this port security entry. Setting this value to 'start' will execute the delete action. Once deleted, the value returns to 'other'.
swPortSecEntriesEntry	1.3.6.1.4.1.171.12.63.3.4.1		not-accessible	A list of information contained in the swPortSecEntriesTable.
swPortSecEntriesTable	1.3.6.1.4.1.171.12.63.3.4		not-accessible	This table is used to show port security entries.
swPortSecInfo	1.3.6.1.4.1.171.12.63.2
INT swPortSecLogState	1.3.6.1.4.1.171.12.63.1.4	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, the relevant information will be logged into the system.
MAC swPortSecMac	1.3.6.1.4.1.171.12.63.3.4.1.1	MacAddress	read-only	Specifies a MAC address.
swPortSecMgmt	1.3.6.1.4.1.171.12.63.3
swPortSecMgmtByPort	1.3.6.1.4.1.171.12.63.3.1
swPortSecMgmtByVLAN	1.3.6.1.4.1.171.12.63.3.2
swPortSecMgmtByVLANOnPort	1.3.6.1.4.1.171.12.63.3.3
INT swPortSecMgmtByVLANOnPortClearAction	1.3.6.1.4.1.171.12.63.3.3.2.3	INTEGER	read-write	other(1): When user gets this object, it always returns other(1). start(2): Used to clear port security entries by VLAN on the special port.
swPortSecMgmtByVLANOnPortClearCtrl	1.3.6.1.4.1.171.12.63.3.3.2
INT swPortSecMgmtByVLANOnPortClearPort	1.3.6.1.4.1.171.12.63.3.3.2.1	INTEGER	read-write	Indicates the port.
INT swPortSecMgmtByVLANOnPortClearVID	1.3.6.1.4.1.171.12.63.3.3.2.2	INTEGER	read-write	Indicates the VID.
swPortSecMIB	1.3.6.1.4.1.171.12.63			The structure of port security for the proprietary enterprise.
INT swPortSecPort	1.3.6.1.4.1.171.12.63.3.4.1.3	INTEGER	read-only	Indicates the port.
INT swPortSecPortAdmState	1.3.6.1.4.1.171.12.63.3.1.1.1.4	INTEGER	read-write	Indicates the administration state of the locking address.
INT swPortSecPortClearCtrl	1.3.6.1.4.1.171.12.63.3.1.1.1.5	INTEGER	read-write	Used to clear port security entries by port. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
swPortSecPortEntry	1.3.6.1.4.1.171.12.63.3.1.1.1		not-accessible	A list of information contained in the swPortSecPortTable.
INT swPortSecPortIndex	1.3.6.1.4.1.171.12.63.3.1.1.1.1	INTEGER	not-accessible	Indicates the secured port to lock address learning.
INT swPortSecPortLockAddrMode	1.3.6.1.4.1.171.12.63.3.1.1.1.3	INTEGER	read-write	Indicates the mode of locking address. In deleteOnTimeout(2) mode, the locked addresses can be aged out after the aging timer expires. In this mode, when the locked address is aged out, the number of addresses that can be learned has to be increased by one. In deleteOnReset (3) mode, locked addresses never age out unless the system restarts which will prevent port movement or intrusion.
INT swPortSecPortMaxLernAddr	1.3.6.1.4.1.171.12.63.3.1.1.1.2	INTEGER	read-write	Indicates the allowable number of addresses to be learned on this port. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
swPortSecPortTable	1.3.6.1.4.1.171.12.63.3.1.1		not-accessible	A port security feature which controls the address learning capability and traffic forwarding decisions. Each port can be enabled or disabled for this function. When it is enabled and a number is given said N, which allows N addresses to be learned on this port, the first N learned addresses are locked at this port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this port.
INT swPortSecPortViolationAction	1.3.6.1.4.1.171.12.63.3.1.1.1.6	INTEGER	read-write	Used to indicates the action when violation occurs. When the number of secure MAC address reaches the maximum learning number on the port, for drop action, new entry will be dropped and for shutdown action, the port will be shut down and enter error-disabled state immediately.
INT swPortSecSysMaxLernAddr	1.3.6.1.4.1.171.12.63.1.2	INTEGER	read-write	Indicates the maximum number of addresses to be authorized by port security on the system. A value of -1 means no-limit. The default value is no-limit. The max entry range is (1..N). The value N means the max number and is determined by the project itself.
INT swPortSecTrapLogState	1.3.6.1.4.1.171.12.63.1.1	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, traps will be sent out and the relevant information will be logged into the system.
INT swPortSecTrapState	1.3.6.1.4.1.171.12.63.1.3	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, trap will be sent out.
INT swPortSecVID	1.3.6.1.4.1.171.12.63.3.4.1.2	INTEGER	read-only	Indicates the VLAN ID.
INT swPortSecVLANClearCtrl	1.3.6.1.4.1.171.12.63.3.2.1.1.3	INTEGER	read-write	Used to clear port security entries by VLAN. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
swPortSecVLANEntry	1.3.6.1.4.1.171.12.63.3.2.1.1		not-accessible	A list of information contained in the swPortSecVLANTable.
INT swPortSecVLANID	1.3.6.1.4.1.171.12.63.3.2.1.1.1	INTEGER	not-accessible	Indicates the secured VLAN to lock address learning.
INT swPortSecVLANMaxLernAddr	1.3.6.1.4.1.171.12.63.3.2.1.1.2	INTEGER	read-write	Indicates allowable number of addresses to be learned on this VLAN. A value of -1 means no-limit. The default value is no-limit. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
INT swPortSecVLANOnPortAddCtrl	1.3.6.1.4.1.171.12.63.3.3.1.1.2	INTEGER	read-create	other (1): When user gets this object, it always returns other(1). add (2): Used to configure the VLAN limit from the special port. If 'add' is selected, swPortSecVLANOnPortMaxLernAddr must be set to a valid value except -1.
swPortSecVLANOnPortEntry	1.3.6.1.4.1.171.12.63.3.3.1.1		not-accessible	A list of information contained in the swPortSecVLANOnPortTable.
INT swPortSecVLANOnPortMaxLernAddr	1.3.6.1.4.1.171.12.63.3.3.1.1.1	INTEGER	read-write	Indicates allowable number of addresses to be learned on this VLAN from the special port. A value of -1 means no-limit. The default value is no-limit. Only VLANs with limitations will be displayed in this table. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
swPortSecVLANOnPortTable	1.3.6.1.4.1.171.12.63.3.3.1		not-accessible	A port security feature which controls the address learning capability. When number is given said N, which allows N addresses to be learned on this VLAN from the special port, the first N learned addresses are locked at this VLAN from the special port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN from the special port.
swPortSecVLANTable	1.3.6.1.4.1.171.12.63.3.2.1		not-accessible	A port security feature which controls the address leaning capability. When number is given said N, which allows N addresses to be learned on this VLAN, the first N learned addresses are locked at this VLAN as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN.

OID symbolic	OID numeric	Type	Access	Description
swPortSecMIB	1.3.6.1.4.1.171.12.63			The structure of port security for the proprietary enterprise.
swPortSecCtrl	1.3.6.1.4.1.171.12.63.1
INT swPortSecTrapLogState	1.3.6.1.4.1.171.12.63.1.1	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, traps will be sent out and the relevant information will be logged into the system.
INT swPortSecSysMaxLernAddr	1.3.6.1.4.1.171.12.63.1.2	INTEGER	read-write	Indicates the maximum number of addresses to be authorized by port security on the system. A value of -1 means no-limit. The default value is no-limit. The max entry range is (1..N). The value N means the max number and is determined by the project itself.
INT swPortSecTrapState	1.3.6.1.4.1.171.12.63.1.3	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, trap will be sent out.
INT swPortSecLogState	1.3.6.1.4.1.171.12.63.1.4	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, the relevant information will be logged into the system.
swPortSecInfo	1.3.6.1.4.1.171.12.63.2
swPortSecMgmt	1.3.6.1.4.1.171.12.63.3
swPortSecMgmtByPort	1.3.6.1.4.1.171.12.63.3.1
swPortSecPortTable	1.3.6.1.4.1.171.12.63.3.1.1		not-accessible	A port security feature which controls the address learning capability and traffic forwarding decisions. Each port can be enabled or disabled for this function. When it is enabled and a number is given said N, which allows N addresses to be learned on this port, the first N learned addresses are locked at this port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this port.
swPortSecPortEntry	1.3.6.1.4.1.171.12.63.3.1.1.1		not-accessible	A list of information contained in the swPortSecPortTable.
INT swPortSecPortIndex	1.3.6.1.4.1.171.12.63.3.1.1.1.1	INTEGER	not-accessible	Indicates the secured port to lock address learning.
INT swPortSecPortMaxLernAddr	1.3.6.1.4.1.171.12.63.3.1.1.1.2	INTEGER	read-write	Indicates the allowable number of addresses to be learned on this port. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
INT swPortSecPortLockAddrMode	1.3.6.1.4.1.171.12.63.3.1.1.1.3	INTEGER	read-write	Indicates the mode of locking address. In deleteOnTimeout(2) mode, the locked addresses can be aged out after the aging timer expires. In this mode, when the locked address is aged out, the number of addresses that can be learned has to be increased by one. In deleteOnReset (3) mode, locked addresses never age out unless the system restarts which will prevent port movement or intrusion.
INT swPortSecPortAdmState	1.3.6.1.4.1.171.12.63.3.1.1.1.4	INTEGER	read-write	Indicates the administration state of the locking address.
INT swPortSecPortClearCtrl	1.3.6.1.4.1.171.12.63.3.1.1.1.5	INTEGER	read-write	Used to clear port security entries by port. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
INT swPortSecPortViolationAction	1.3.6.1.4.1.171.12.63.3.1.1.1.6	INTEGER	read-write	Used to indicates the action when violation occurs. When the number of secure MAC address reaches the maximum learning number on the port, for drop action, new entry will be dropped and for shutdown action, the port will be shut down and enter error-disabled state immediately.
swPortSecMgmtByVLAN	1.3.6.1.4.1.171.12.63.3.2
swPortSecVLANTable	1.3.6.1.4.1.171.12.63.3.2.1		not-accessible	A port security feature which controls the address leaning capability. When number is given said N, which allows N addresses to be learned on this VLAN, the first N learned addresses are locked at this VLAN as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN.
swPortSecVLANEntry	1.3.6.1.4.1.171.12.63.3.2.1.1		not-accessible	A list of information contained in the swPortSecVLANTable.
INT swPortSecVLANID	1.3.6.1.4.1.171.12.63.3.2.1.1.1	INTEGER	not-accessible	Indicates the secured VLAN to lock address learning.
INT swPortSecVLANMaxLernAddr	1.3.6.1.4.1.171.12.63.3.2.1.1.2	INTEGER	read-write	Indicates allowable number of addresses to be learned on this VLAN. A value of -1 means no-limit. The default value is no-limit. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
INT swPortSecVLANClearCtrl	1.3.6.1.4.1.171.12.63.3.2.1.1.3	INTEGER	read-write	Used to clear port security entries by VLAN. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
swPortSecMgmtByVLANOnPort	1.3.6.1.4.1.171.12.63.3.3
swPortSecVLANOnPortTable	1.3.6.1.4.1.171.12.63.3.3.1		not-accessible	A port security feature which controls the address learning capability. When number is given said N, which allows N addresses to be learned on this VLAN from the special port, the first N learned addresses are locked at this VLAN from the special port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN from the special port.
swPortSecVLANOnPortEntry	1.3.6.1.4.1.171.12.63.3.3.1.1		not-accessible	A list of information contained in the swPortSecVLANOnPortTable.
INT swPortSecVLANOnPortMaxLernAddr	1.3.6.1.4.1.171.12.63.3.3.1.1.1	INTEGER	read-write	Indicates allowable number of addresses to be learned on this VLAN from the special port. A value of -1 means no-limit. The default value is no-limit. Only VLANs with limitations will be displayed in this table. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
INT swPortSecVLANOnPortAddCtrl	1.3.6.1.4.1.171.12.63.3.3.1.1.2	INTEGER	read-create	other (1): When user gets this object, it always returns other(1). add (2): Used to configure the VLAN limit from the special port. If 'add' is selected, swPortSecVLANOnPortMaxLernAddr must be set to a valid value except -1.
swPortSecMgmtByVLANOnPortClearCtrl	1.3.6.1.4.1.171.12.63.3.3.2
INT swPortSecMgmtByVLANOnPortClearPort	1.3.6.1.4.1.171.12.63.3.3.2.1	INTEGER	read-write	Indicates the port.
INT swPortSecMgmtByVLANOnPortClearVID	1.3.6.1.4.1.171.12.63.3.3.2.2	INTEGER	read-write	Indicates the VID.
INT swPortSecMgmtByVLANOnPortClearAction	1.3.6.1.4.1.171.12.63.3.3.2.3	INTEGER	read-write	other(1): When user gets this object, it always returns other(1). start(2): Used to clear port security entries by VLAN on the special port.
swPortSecEntriesTable	1.3.6.1.4.1.171.12.63.3.4		not-accessible	This table is used to show port security entries.
swPortSecEntriesEntry	1.3.6.1.4.1.171.12.63.3.4.1		not-accessible	A list of information contained in the swPortSecEntriesTable.
MAC swPortSecMac	1.3.6.1.4.1.171.12.63.3.4.1.1	MacAddress	read-only	Specifies a MAC address.
INT swPortSecVID	1.3.6.1.4.1.171.12.63.3.4.1.2	INTEGER	read-only	Indicates the VLAN ID.
INT swPortSecPort	1.3.6.1.4.1.171.12.63.3.4.1.3	INTEGER	read-only	Indicates the port.
INT swPortSecDelCtrl	1.3.6.1.4.1.171.12.63.3.4.1.4	INTEGER	read-write	Used to delete this port security entry. Setting this value to 'start' will execute the delete action. Once deleted, the value returns to 'other'.

INTEGER (21)
INT swPortSecDelCtrl	1.3.6.1.4.1.171.12.63.3.4.1.4	INTEGER	read-write	Used to delete this port security entry. Setting this value to 'start' will execute the delete action. Once deleted, the value returns to 'other'.
INT swPortSecLogState	1.3.6.1.4.1.171.12.63.1.4	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, the relevant information will be logged into the system.
INT swPortSecMgmtByVLANOnPortClearAction	1.3.6.1.4.1.171.12.63.3.3.2.3	INTEGER	read-write	other(1): When user gets this object, it always returns other(1). start(2): Used to clear port security entries by VLAN on the special port.
INT swPortSecMgmtByVLANOnPortClearPort	1.3.6.1.4.1.171.12.63.3.3.2.1	INTEGER	read-write	Indicates the port.
INT swPortSecMgmtByVLANOnPortClearVID	1.3.6.1.4.1.171.12.63.3.3.2.2	INTEGER	read-write	Indicates the VID.
INT swPortSecPort	1.3.6.1.4.1.171.12.63.3.4.1.3	INTEGER	read-only	Indicates the port.
INT swPortSecPortAdmState	1.3.6.1.4.1.171.12.63.3.1.1.1.4	INTEGER	read-write	Indicates the administration state of the locking address.
INT swPortSecPortClearCtrl	1.3.6.1.4.1.171.12.63.3.1.1.1.5	INTEGER	read-write	Used to clear port security entries by port. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
INT swPortSecPortIndex	1.3.6.1.4.1.171.12.63.3.1.1.1.1	INTEGER	not-accessible	Indicates the secured port to lock address learning.
INT swPortSecPortLockAddrMode	1.3.6.1.4.1.171.12.63.3.1.1.1.3	INTEGER	read-write	Indicates the mode of locking address. In deleteOnTimeout(2) mode, the locked addresses can be aged out after the aging timer expires. In this mode, when the locked address is aged out, the number of addresses that can be learned has to be increased by one. In deleteOnReset (3) mode, locked addresses never age out unless the system restarts which will prevent port movement or intrusion.
INT swPortSecPortMaxLernAddr	1.3.6.1.4.1.171.12.63.3.1.1.1.2	INTEGER	read-write	Indicates the allowable number of addresses to be learned on this port. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
INT swPortSecPortViolationAction	1.3.6.1.4.1.171.12.63.3.1.1.1.6	INTEGER	read-write	Used to indicates the action when violation occurs. When the number of secure MAC address reaches the maximum learning number on the port, for drop action, new entry will be dropped and for shutdown action, the port will be shut down and enter error-disabled state immediately.
INT swPortSecSysMaxLernAddr	1.3.6.1.4.1.171.12.63.1.2	INTEGER	read-write	Indicates the maximum number of addresses to be authorized by port security on the system. A value of -1 means no-limit. The default value is no-limit. The max entry range is (1..N). The value N means the max number and is determined by the project itself.
INT swPortSecTrapLogState	1.3.6.1.4.1.171.12.63.1.1	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, traps will be sent out and the relevant information will be logged into the system.
INT swPortSecTrapState	1.3.6.1.4.1.171.12.63.1.3	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, trap will be sent out.
INT swPortSecVID	1.3.6.1.4.1.171.12.63.3.4.1.2	INTEGER	read-only	Indicates the VLAN ID.
INT swPortSecVLANClearCtrl	1.3.6.1.4.1.171.12.63.3.2.1.1.3	INTEGER	read-write	Used to clear port security entries by VLAN. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
INT swPortSecVLANID	1.3.6.1.4.1.171.12.63.3.2.1.1.1	INTEGER	not-accessible	Indicates the secured VLAN to lock address learning.
INT swPortSecVLANMaxLernAddr	1.3.6.1.4.1.171.12.63.3.2.1.1.2	INTEGER	read-write	Indicates allowable number of addresses to be learned on this VLAN. A value of -1 means no-limit. The default value is no-limit. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
INT swPortSecVLANOnPortAddCtrl	1.3.6.1.4.1.171.12.63.3.3.1.1.2	INTEGER	read-create	other (1): When user gets this object, it always returns other(1). add (2): Used to configure the VLAN limit from the special port. If 'add' is selected, swPortSecVLANOnPortMaxLernAddr must be set to a valid value except -1.
INT swPortSecVLANOnPortMaxLernAddr	1.3.6.1.4.1.171.12.63.3.3.1.1.1	INTEGER	read-write	Indicates allowable number of addresses to be learned on this VLAN from the special port. A value of -1 means no-limit. The default value is no-limit. Only VLANs with limitations will be displayed in this table. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
MacAddress (1)
MAC swPortSecMac	1.3.6.1.4.1.171.12.63.3.4.1.1	MacAddress	read-only	Specifies a MAC address.
No type (16)
swPortSecCtrl	1.3.6.1.4.1.171.12.63.1
swPortSecEntriesEntry	1.3.6.1.4.1.171.12.63.3.4.1		not-accessible	A list of information contained in the swPortSecEntriesTable.
swPortSecEntriesTable	1.3.6.1.4.1.171.12.63.3.4		not-accessible	This table is used to show port security entries.
swPortSecInfo	1.3.6.1.4.1.171.12.63.2
swPortSecMgmt	1.3.6.1.4.1.171.12.63.3
swPortSecMgmtByPort	1.3.6.1.4.1.171.12.63.3.1
swPortSecMgmtByVLAN	1.3.6.1.4.1.171.12.63.3.2
swPortSecMgmtByVLANOnPort	1.3.6.1.4.1.171.12.63.3.3
swPortSecMgmtByVLANOnPortClearCtrl	1.3.6.1.4.1.171.12.63.3.3.2
swPortSecMIB	1.3.6.1.4.1.171.12.63			The structure of port security for the proprietary enterprise.
swPortSecPortEntry	1.3.6.1.4.1.171.12.63.3.1.1.1		not-accessible	A list of information contained in the swPortSecPortTable.
swPortSecPortTable	1.3.6.1.4.1.171.12.63.3.1.1		not-accessible	A port security feature which controls the address learning capability and traffic forwarding decisions. Each port can be enabled or disabled for this function. When it is enabled and a number is given said N, which allows N addresses to be learned on this port, the first N learned addresses are locked at this port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this port.
swPortSecVLANEntry	1.3.6.1.4.1.171.12.63.3.2.1.1		not-accessible	A list of information contained in the swPortSecVLANTable.
swPortSecVLANOnPortEntry	1.3.6.1.4.1.171.12.63.3.3.1.1		not-accessible	A list of information contained in the swPortSecVLANOnPortTable.
swPortSecVLANOnPortTable	1.3.6.1.4.1.171.12.63.3.3.1		not-accessible	A port security feature which controls the address learning capability. When number is given said N, which allows N addresses to be learned on this VLAN from the special port, the first N learned addresses are locked at this VLAN from the special port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN from the special port.
swPortSecVLANTable	1.3.6.1.4.1.171.12.63.3.2.1		not-accessible	A port security feature which controls the address leaning capability. When number is given said N, which allows N addresses to be learned on this VLAN, the first N learned addresses are locked at this VLAN as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN.

RFC description

D-Link MIB for port security management including MAC address learning and violation control.

Start monitoring D-Link managed switch (MAC-based port security) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DLINK-PORT-SECURITY-MIB

This MIB depends on

Related MIBs

What Is DLINK-PORT-SECURITY-MIB?

What Can Be Monitored

Supported Devices

Monitoring Examples

RFC description