HH3C-MACSEC-MIB

Description: Manages IEEE 802.1AE MACsec encryption key agreements and secure channel configuration on H3C switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

HH3C-MACSEC-MIB manages IEEE 802.1AE MACsec (Media Access Control Security) configuration on H3C switches, covering the secure key-agreement material used to encrypt Layer 2 traffic between directly connected devices. It exposes a per-port configuration table holding the pre-shared-key connectivity association key name (CKN) and the pre-shared connectivity association key value (CAK) used to establish a MACsec secure channel. Its configuration/monitoring value is security-status oriented: confirming which ports have MACsec keys provisioned, essential to verify encrypted links are actually configured rather than passing traffic in the clear, though this MIB centers on configuration more than runtime performance counters. It directly implements the IEEE 802.1AE MACsec standard, so it depends on that specification for its security model. It is deployed on H3C switches at network boundaries or high-security links (e.g., data-center interconnects) requiring Layer 2 encryption. Engineers can download the HH3C-MACSEC-MIB file directly to load it into their MIB browser.

hh3cMACsecCFGPortTable/hh3cMACsecCFGPortEntry, indexed by hh3cMACsecCFGPortIndex, hold hh3cMACsecCFGPortPSKCKNName and hh3cMACsecCFGPortPSKCAKValue, letting an admin verify that a given port has a pre-shared key configured for MACsec. An operator would check this table to confirm every port on a supposedly-encrypted trunk actually has a CAK provisioned, catching a port left unintentionally unencrypted.

MACsec (Media Access Control Security) configuration for secure layer 2 communication.