IEEE8021-SECY-MIB :: secyRxSANextPN

MIB Reference — IPNetwork Monitor

All MIBsIEEE8021-SECY-MIBsecyRxSANextPN

secyRxSANextPN

Module: IEEE8021-SECY-MIB

OID (symbolic): IEEE8021-SECY-MIB::secyRxSANextPN

OID (numeric): 1.0.8802.1.1.3.1.1.5.1.3

Node type: OBJECT-TYPE

Type: Unsigned32

Access: read-write

Description:

One more than the highest PN conveyed in the SecTAG of a frame received on this SA that has been successfully validated (if validateFrames has not been disabled). Deprecated: use secyRxSANextXPN for both 32-bit PN and 64-bit XPN PN values. If this object is implemented and an XPN Cipher Suite is used, it contains the lowest 32-bits of the XPN.

What is secyRxSANextPN?

This object tracks the next expected packet number (PN) for incoming MACsec-encrypted frames on a receive security association, used to detect replayed or out-of-order packets. For 32-bit PN mode it stores the full value; for 64-bit extended PN mode it contains only the lower 32 bits. Security administrators and automation systems check this value to validate frame sequence integrity and detect potential tampering on secure Ethernet links.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.0.8802.1.1.3.1.1.5.1.3
snmpwalk -v2c -c public <target> IEEE8021-SECY-MIB::secyRxSANextPN

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.0.8802.1.1.3.1.1.5.1.3.1
snmpget -v2c -c public <target> IEEE8021-SECY-MIB::secyRxSANextPN.1

Set instance 1 (SNMPv2c):

snmpset -v2c -c private <target> 1.0.8802.1.1.3.1.1.5.1.3.1 i <value>

OID Breakdown

Numeric OIDNameModule
1isoLANART-AGENT
1.0stdSTART-MIB
1.0.8802iso8802START-MIB
1.0.8802.1ieee802dot1START-MIB
1.0.8802.1.1ieee802dot1mibsSTART-MIB
1.0.8802.1.1.3ieee8021SecyMIBIEEE8021-SECY-MIB
1.0.8802.1.1.3.1secyMIBObjectsIEEE8021-SECY-MIB
1.0.8802.1.1.3.1.1secyMgmtMIBObjectsIEEE8021-SECY-MIB
1.0.8802.1.1.3.1.1.5secyRxSATableIEEE8021-SECY-MIB
1.0.8802.1.1.3.1.1.5.1secyRxSAEntryIEEE8021-SECY-MIB
1.0.8802.1.1.3.1.1.5.1.3secyRxSANextPNIEEE8021-SECY-MIB