All MIBs › DNOS-PORTSECURITY-PRIVATE-MIB
Organization: Dell, Inc.
Last Updated: 2011-01-26
Category: Domain: Security, Vendor: Dell/DNOS
Description: Manages port security MAC address limits and violation actions on Dell DNOS switch interfaces.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is DNOS-PORTSECURITY-PRIVATE-MIB?
DNOS-PORTSECURITY-PRIVATE-MIB is a Broadcom private MIB for Dell DNOS switches that manages port security, controlling how many MAC addresses are permitted on a switch port and what action is taken when a violation occurs. It exposes a global port security mode object and a per-port security table with learned/allowed MAC address limits and violation actions (e.g., shutdown, restrict, protect). While primarily a security/configuration MIB, it supports fault monitoring by letting administrators detect when a port has hit its MAC limit and been shut down or restricted, which shows up as an unexpected loss of connectivity on that port — effectively a hardware/link status symptom traceable to a security policy trigger. It is a vendor-specific private MIB dependent on the Dell DNOS agent and typically used alongside standard bridge/MAC MIB objects for full port/MAC visibility. It is deployed on Dell EMC DNOS access-layer switches to prevent MAC flooding and unauthorized device attachment, and administrators can download the DNOS-PORTSECURITY-PRIVATE-MIB file to load it directly into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in DNOS-PORTSECURITY-PRIVATE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Dell EMC DNOS-based network switches
Monitoring Examples
An admin would poll agentPortSecurityTable/agentPortSecurityEntry per port to see the configured MAC address limit and current violation action, then check agentGlobalPortSecurityMode to confirm the feature is globally enabled. A port that unexpectedly goes down can be diagnosed by checking whether its entry recorded a security violation (too many MAC addresses learned), rather than a cable or hardware fault. Reviewing agentPortSecurityGroup objects fleet-wide helps confirm consistent security policy across access ports.
What Can Be Monitored
- global port security mode
- per-port MAC address limit
- port security violation action
- learned MAC count vs. limit
- port shutdown/restrict events
Imported Objects
From DELL-REF-MIB
| dnOS | OBJECT-IDENTITY |
From IF-MIB
| ifIndex | OBJECT-TYPE |
From RFC1213-MIB
| DisplayString |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| MacAddress | |
| RowStatus | |
| TEXTUAL-CONVENTION |
OIDs
RFC description
Dell DNOS port security feature MIB for managing MAC-based port access control.
Start monitoring Dell EMC network switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.