EdgeSwitch-PORTSECURITY-PRIVATE-MIB

All MIBs › EdgeSwitch-PORTSECURITY-PRIVATE-MIB

Organization: Broadcom Inc

Last Updated: 2011-01-26

Category: Domain: Security, VPN and Security, Vendor: EdgeSwitch/Ubiquiti

Description: Ubiquiti EdgeSwitch port security MIB for configuring MAC address locking, violation actions, and secure port status.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is EdgeSwitch-PORTSECURITY-PRIVATE-MIB?

This is a Ubiquiti private MIB for the EdgeSwitch line of managed switches, covering the port security feature that locks switch ports to specific learned or configured MAC addresses. It exposes configuration data, a global port security mode plus a per-port security table describing per-port locking settings and violation behavior. While primarily a security-configuration MIB, it supports monitoring the software/security status of each port by letting administrators confirm port security is enabled where expected and check whether a port has triggered a violation, effectively a fault/status indicator for that port. As a vendor-private feature MIB it builds on standard bridge/port (ifIndex-based) conventions typical of L2 switch management, even though not explicitly named. It is typically deployed in enterprise or SMB networks using Ubiquiti EdgeSwitch devices where port-level MAC address locking protects against unauthorized device connections. Engineers can download the EdgeSwitch-PORTSECURITY-PRIVATE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in EdgeSwitch-PORTSECURITY-PRIVATE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ubiquiti EdgeSwitch managed switch

Monitoring Examples

An administrator checks agentGlobalPortSecurityMode to confirm port security is globally enabled, then reviews agentPortSecurityTable / agentPortSecurityEntry per port to see the configured locking mode and violation action. A port entry showing a triggered violation state would indicate an unauthorized device attempted to connect, prompting the administrator to investigate that switch port.

What Can Be Monitored

global port security mode
per-port security configuration
port security violation status
MAC address locking mode

Imported Objects

From EdgeSwitch-REF-MIB

fastPath

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
fastPathPortSecurity	1.3.6.1.4.1.4413.1.1.20			The Ubiquiti Private MIB for EdgeSwitch Port Security Feature.
agentPortSecurityGroup	1.3.6.1.4.1.4413.1.1.20.1
INT agentGlobalPortSecurityMode	1.3.6.1.4.1.4413.1.1.20.1.1	INTEGER	read-write	Mode showing whether at the global level, port security is enabled or not.
agentPortSecurityTable	1.3.6.1.4.1.4413.1.1.20.1.2		not-accessible	A table for Port Security and associated functionality.
agentPortSecurityEntry	1.3.6.1.4.1.4413.1.1.20.1.2.1		not-accessible	Represents entry for port security table
INT agentPortSecurityMode	1.3.6.1.4.1.4413.1.1.20.1.2.1.1	INTEGER	read-write	Mode showing whether at port level security is enabled or not.
U32 agentPortSecurityDynamicLimit	1.3.6.1.4.1.4413.1.1.20.1.2.1.2	Unsigned32	read-write	This variable signifies the limit of dynamically locked MAC addresses allowed on a specific port.
U32 agentPortSecurityStaticLimit	1.3.6.1.4.1.4413.1.1.20.1.2.1.3	Unsigned32	read-write	This variable signifies the limit of statically locked MAC addresses allowed on a specific port.
INT agentPortSecurityViolationTrapMode	1.3.6.1.4.1.4413.1.1.20.1.2.1.4	INTEGER	read-write	This variable is used to enable or disable the sending of new violation traps designating when a packet with a disallowed MAC address is received on a locked port.
STR agentPortSecurityStaticMACs	1.3.6.1.4.1.4413.1.1.20.1.2.1.6	DisplayString	read-only	This variable displays the statically locked MAC addresses for port. The list displayed in a particular fashion : 2 a0:b1:c2:d1:e3:a1,11 a0:b1:c2:d3:e4:f5 (i.e., VLAN MAC pairs followed by a 1 or 0 to indicate a sticky entry, separated by commas).
STR agentPortSecurityLastDiscardedMAC	1.3.6.1.4.1.4413.1.1.20.1.2.1.7	DisplayString	read-only	This variable displays the vlan-id and source MAC address of the last packet that was discarded on a locked port.
STR agentPortSecurityMACAddressAdd	1.3.6.1.4.1.4413.1.1.20.1.2.1.8	DisplayString	read-write	This MIB variable accepts a VLAN id, MAC address and the sticky value to be added to the list of statically locked MAC addresses on a port. The VLAN id, MAC address and sticky value combination would be entered in a particular fashion like :- 2 a0:b0:c0:d1:e2:a1 1(the vlan-id, MAC address and sticky value separated by blank-spaces).
STR agentPortSecurityMACAddressRemove	1.3.6.1.4.1.4413.1.1.20.1.2.1.9	DisplayString	read-write	This MIB variable accepts a VLAN id and MAC address to be removed from the list of statically locked MAC addresses on a port.. The VLAN id and MAC address combination would be entered in a particular fashion like :- 2 a0:b0:c0:d1:e2:a1(the vlan-id and MAC address separated by a blank-space).
INT agentPortSecurityMACAddressMove	1.3.6.1.4.1.4413.1.1.20.1.2.1.10	INTEGER	read-write	When this object is enabled, all the dynamically locked MAC addresses will be moved to statically locked addresses on a port. GET operation on this object will display disable.
INT agentPortSecurityStickyMode	1.3.6.1.4.1.4413.1.1.20.1.2.1.11	INTEGER	read-write	This object is used to configure port level security sticky mode in a port.
agentPortSecurityDynamicTable	1.3.6.1.4.1.4413.1.1.20.1.3		not-accessible	A table for Port Security Dynamic and associated functionality.
agentPortSecurityDynamicEntry	1.3.6.1.4.1.4413.1.1.20.1.3.1		not-accessible	Represents entry for port MAC Locking table
U32 agentPortSecurityDynamicVLANId	1.3.6.1.4.1.4413.1.1.20.1.3.1.1	Unsigned32	read-only	Source VLAN id of the packet that is received on the dynamically locked port.
MAC agentPortSecurityDynamicMACAddress	1.3.6.1.4.1.4413.1.1.20.1.3.1.2	MacAddress	read-only	Source MAC address of the packet that is received on the dynamically locked port.
INT agentGlobalPortSecurityStickyMode	1.3.6.1.4.1.4413.1.1.20.1.4	INTEGER	read-write	This object is used to apply the Sticky Mode to all ports. This is write-only value. It always returns 'disable' on request
INT agentGlobalPortSecurityViolationTrapMode	1.3.6.1.4.1.4413.1.1.20.1.5	INTEGER	read-write	This variable is used to enable or disable the sending of new violation traps designating when a packet with a disallowed MAC address is received on a locked port. The configuration will be done on all ports. This is write-only value. It always returns 'disable' on request
agentPortSecurityTraps	1.3.6.1.4.1.4413.1.1.20.2
NTF agentPortSecurityViolation	1.3.6.1.4.1.4413.1.1.20.2.1			Sent when a packet is received on a locked port with a source MAC address that is not allowed.

RFC description

Ubiquiti EdgeSwitch vendor-private MIB for port security; configures MAC-based port locking and dynamic security policies on managed switches.

Start monitoring Ubiquiti EdgeSwitch managed switch (port security/MAC locking) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download EdgeSwitch-PORTSECURITY-PRIVATE-MIB

What Is EdgeSwitch-PORTSECURITY-PRIVATE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description