F3-CONNECTGUARD-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › F3-CONNECTGUARD-MIB

Organization: ADVA Optical Networking

Last Updated: 2016-07-11

Description: F3-CONNECTGUARD-MIB module

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is F3-CONNECTGUARD-MIB?

F3-CONNECTGUARD-MIB is a vendor-specific SNMP module from ADVA Optical Networking for the FSP150CM/CC family of carrier Ethernet access devices, covering the 'Connect Guard' encryption/security feature for Ethernet flows. It exposes configuration and status data for encrypted flow instances, including cipher suite selection, key exchange profiles, and VLAN tagging used for the key-exchange control channel. Monitoring-wise it is squarely a hardware/software status MIB: it reports per-flow administrative, operational, and secondary states so an operator can see whether an encrypted flow on a given card/port is actually passing traffic or has failed to establish a security association, plus performance counters tied to those flows. It builds on the F3 platform's general flow/interface model rather than any external standards MIB. It is typically deployed by carriers and enterprises using ADVA FSP150 metro/access transport boxes to protect point-to-point or point-to-multipoint Ethernet services with MACsec-like link encryption. Engineers can download the F3-CONNECTGUARD-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in F3-CONNECTGUARD-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • ADVA FSP150CM/CC carrier Ethernet access/aggregation device

Monitoring Examples

An operator would poll f3ConnectGuardFlowTable/f3ConnectGuardFlowEntry, indexed by f3ConnectGuardFlowIndex, to check f3ConnectGuardFlowOperationalState and f3ConnectGuardFlowSecondaryState for each secured flow; a flow stuck in a non-operational secondary state while f3ConnectGuardFlowAdminState shows enabled typically indicates a key-exchange or cipher mismatch. f3ConnectGuardFlowCipherSuite and f3ConnectGuardFlowKeyExchangeProfile reveal which encryption parameters are configured, while f3ConnectGuardFlowEgressInterface ties the flow to a physical port for fault isolation. The f3ConnectGuardFlowKeyExchangeFrameOuterVlanEnabled/Id objects let an admin confirm the key-exchange control frames are tagged correctly when the secured flow rides a tagged interface.

What Can Be Monitored

  • encrypted flow admin state
  • encrypted flow operational state
  • encrypted flow secondary state
  • cipher suite in use
  • key exchange profile
  • key exchange VLAN tagging
  • egress interface for secured flow
Imported Objects

From ADVA-MIB

fsp150cmOBJECT-IDENTITY

From CM-COMMON-MIB

AdminState
AfpTagControl
CmPmBinAction
CmPmIntervalType
EthernetMediaType
EthernetPortSpeed
F3DisplayString
OperationalState
PerfCounter64
PriorityMapMode
SecondaryState
SfpConnectorValue
SfpMediaType
TrafficDirection
VlanEthertype
VlanId
VlanPriority
VlanTagType

From CM-ENTITY-MIB

f3UsbHostIndexOBJECT-TYPE
neIndexOBJECT-TYPE
networkElementEntryOBJECT-TYPE
shelfIndexOBJECT-TYPE
slotIndexOBJECT-TYPE

From CM-FACILITY-MIB

cmFlowEntryOBJECT-TYPE

From ENTITY-MIB

PhysicalIndex

From F3-FPM-MIB

f3AccFlowPointEntryOBJECT-TYPE
f3NetFlowPointEntryOBJECT-TYPE

From IEEE8021-SECY-MIB

SecySCI

From IF-MIB

InterfaceIndex
ifIndexOBJECT-TYPE

From IPV6-TC

Ipv6Address

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
DisplayString
MacAddress
RowStatus
StorageType
TEXTUAL-CONVENTION
TimeStamp
TruthValue
VariablePointer
OIDs

RFC description

Defines Connect Guard flow security management objects for ADVA FSP150CM/CC optical networking platforms with encryption and key exchange features.

Start monitoring ADVA Optical Networking FSP150CM/CC (F3 platform) carrier Ethernet device (Connect Guard link encryption) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download F3-CONNECTGUARD-MIB