All MIBs › HUAWEI-MACSEC-MIB
Organization: Huawei Technologies Co.,Ltd.
Last Updated: 2016-03-10
Category: Domain: Security, Vendor: Huawei
Description: Huawei MACsec (IEEE 802.1AE) MIB for managing MACsec sessions, security associations, and encryption statistics.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HUAWEI-MACSEC-MIB?
HUAWEI-MACSEC-MIB is a Huawei MIB implementing management objects for MACsec (IEEE 802.1AE), the Layer 2 link-layer encryption standard, on Huawei switches and routers. It exposes configuration and status for MACsec sessions/connectivity associations, security association parameters, and encryption/decryption traffic statistics. For monitoring, it lets an operator confirm that link-layer encryption sessions are established and healthy, tracking counters such as encrypted/decrypted frame counts or integrity-check failures as software-level indicators of a security session dropping or being tampered with, distinct from general hardware faults. It is a Huawei implementation of the IEEE 802.1AE MACsec standard, so it depends conceptually on that standard's security-association model even though the MIB itself is proprietary. It is deployed on Huawei switches and routers used on links requiring point-to-point or point-to-multipoint encryption, such as data center interconnects or metro Ethernet trunks. Engineers can download the HUAWEI-MACSEC-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-MACSEC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Huawei switches
- Huawei routers
Monitoring Examples
No sample objects were provided, but a realistic scenario would involve polling MACsec session/SA status objects to confirm an encrypted link is up and comparing integrity-check-failure counters over time. A rising failure count would reveal a MACsec key mismatch or an attempted tampering/attack on the encrypted link.
What Can Be Monitored
- MACsec session status
- security association state
- encrypted/decrypted frame counters
- integrity check failures
Imported Objects
From HUAWEI-MIB
| hwDatacomm | OBJECT-IDENTITY |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
OIDs
RFC description
Vendor-private Huawei MIB for Media Access Control Security (MACSec) management; defines objects for MACSec encryption, key exchange, and link security on Huawei devices.
Start monitoring Huawei switch or router (802.1AE MACsec link-layer encryption) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.