MY-SECURITY-MIB

All MIBs › MY-SECURITY-MIB

Organization: D-Link Crop.

Last Updated: 2002-03-20

Category: Security

Description: Manages D-Link switch security features including port security and storm control.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is MY-SECURITY-MIB?

MY-SECURITY-MIB is a D-Link enterprise MIB covering security-related management features on D-Link switches, including enabling/disabling the SNMP agent, web management interface, and Telnet access, plus host-based access restriction tables for Telnet and web management. It exposes configuration and enable/disable status objects (myEnableSnmpAgent, myEnableWeb, myEnableTelnet) along with tables of permitted host IP addresses for Telnet (myTelnetHostIpTable) and web (myWebHostIpTable) access, and a broader security address table. It is used to monitor the software status of the switch's management-plane security posture — whether risky management protocols like Telnet or the SNMP agent are enabled, and whether host-based access restrictions are correctly populated — important for confirming a device hasn't drifted from its intended security hardening. As a self-contained vendor MIB it has no notable dependency on external standard MIBs beyond the base SNMP framework. It is typically deployed by network security/operations teams auditing D-Link switch configurations across an estate to ensure management interfaces are locked down per policy, often after completing a MY-SECURITY-MIB download to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in MY-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switch

Monitoring Examples

An admin would poll myEnableTelnet and myEnableWeb to confirm insecure management protocols are disabled where policy requires it, and walk myTelnetHostIpTable/myTelnetHostIpEntry (myTelnetHostIpAddress, myTelnetHostIpEnable) and myWebHostIpTable/myWebHostIpEntry to verify only authorized management-station IPs are permitted. A switch reporting myEnableTelnet true with an empty or overly broad myTelnetHostIpTable would flag a security exposure allowing Telnet access from any host.

What Can Be Monitored

SNMP agent enabled/disabled
web management enabled/disabled
Telnet enabled/disabled
authorized Telnet host addresses
authorized web management host addresses

Imported Objects

From IF-MIB

ifIndex

OBJECT-TYPE

From MY-SMI

myMgmt

OBJECT-IDENTITY

From MY-TC

ConfigStatus
IfIndex

From P-BRIDGE-MIB

EnabledStatus

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
mySecurityMIB	1.3.6.1.4.1.171.10.97.2.6			This module defines my security mibs.
mySecurityMIBObjects	1.3.6.1.4.1.171.10.97.2.6.1
myUserManagementObjects	1.3.6.1.4.1.171.10.97.2.6.1.1
ENA myEnableSnmpAgent	1.3.6.1.4.1.171.10.97.2.6.1.1.1	EnabledStatus	read-write	Enabled indicate that user can manage switch by snmp agent, disabled indicate that user can't manage switch by snmp agent.
ENA myEnableWeb	1.3.6.1.4.1.171.10.97.2.6.1.1.2	EnabledStatus	read-write	Enabled indicate that user can manage switch by web, disabled indicate that user can't manage switch by web.
ENA myEnableTelnet	1.3.6.1.4.1.171.10.97.2.6.1.1.3	EnabledStatus	read-write	Enabled indicate that user can manage switch by telnet, disabled indicate that user can't manage switch by telnet.
myTelnetHostIpTable	1.3.6.1.4.1.171.10.97.2.6.1.1.4		not-accessible	The table of telnet client's IP address, only these hostes can access the telnet server.
myTelnetHostIpEntry	1.3.6.1.4.1.171.10.97.2.6.1.1.4.1		not-accessible	The entry of telnet host IP address table.
IP myTelnetHostIpAddress	1.3.6.1.4.1.171.10.97.2.6.1.1.4.1.1	IpAddress	read-only	The telnet client's IP address, Only these hostes can access the telnet server
INT myTelnetHostIpEnable	1.3.6.1.4.1.171.10.97.2.6.1.1.4.1.2	INTEGER	read-write	The telnet client's IP address enable state
myWebHostIpTable	1.3.6.1.4.1.171.10.97.2.6.1.1.5		not-accessible	The table of web client's IP address, only these hostes can access the web server.
myWebHostIpEntry	1.3.6.1.4.1.171.10.97.2.6.1.1.5.1		not-accessible	The entry of web host IP address table.
IP myWebHostIpAddress	1.3.6.1.4.1.171.10.97.2.6.1.1.5.1.1	IpAddress	read-only	The web client's IP address, Only these hostes can access the web server
INT myWebHostIpEnable	1.3.6.1.4.1.171.10.97.2.6.1.1.5.1.2	INTEGER	read-write	The web client's IP address enable state
mySecurityAddressObjects	1.3.6.1.4.1.171.10.97.2.6.1.2
mySecurityAddressTable	1.3.6.1.4.1.171.10.97.2.6.1.2.1		not-accessible	The table of security address.
mySecurityAddressEntry	1.3.6.1.4.1.171.10.97.2.6.1.2.1.1		not-accessible	The entry of Security address table.
U32 mySecurityAddressFdbId	1.3.6.1.4.1.171.10.97.2.6.1.2.1.1.1	Unsigned32	not-accessible	The VID of vlan which the security address blongs to.
MAC mySecurityAddressAddress	1.3.6.1.4.1.171.10.97.2.6.1.2.1.1.2	MacAddress	not-accessible	The MAC address of the security address.
IFI mySecurityAddressPort	1.3.6.1.4.1.171.10.97.2.6.1.2.1.1.3	IfIndex	not-accessible	The interface which the security address blongs to.
IP mySecurityAddressIpAddr	1.3.6.1.4.1.171.10.97.2.6.1.2.1.1.4	IpAddress	not-accessible	The IP address which the security address bind.It's meaning only when mySecurityAddressIfBindIp is true.
T/F mySecurityAddressIfBindIp	1.3.6.1.4.1.171.10.97.2.6.1.2.1.1.5	TruthValue	read-write	this object offer the means whether security address will bind IP.
I32 mySecurityAddressRemainAge	1.3.6.1.4.1.171.10.97.2.6.1.2.1.1.6	Integer32	read-only	The remain age of the security address, in units of minute.
INT mySecurityAddressType	1.3.6.1.4.1.171.10.97.2.6.1.2.1.1.7	INTEGER	read-only	The type of the security address
ROW mySecurityAddressStatus	1.3.6.1.4.1.171.10.97.2.6.1.2.1.1.8	RowStatus	read-create	entry status of this entry. and the means in this enviraments can reffer to the text-convention definition of the RowStatus.
myBindAddressTable	1.3.6.1.4.1.171.10.97.2.6.1.2.2		not-accessible	IP-MAC bind table. The source MAC address must be bound when the switch receives the frame with source IP address defined in this table. Otherwise, the frame will be discarded.
myBindAddressEntry	1.3.6.1.4.1.171.10.97.2.6.1.2.2.1		not-accessible	The entry of Bind address table.
IP myBindAddressIpAddr	1.3.6.1.4.1.171.10.97.2.6.1.2.2.1.1	IpAddress	not-accessible	The IP address which the security address bind.It's meaning only when myBindAddressIfBindIp is true.
MAC myBindMacAddress	1.3.6.1.4.1.171.10.97.2.6.1.2.2.1.2	MacAddress	read-create	The MAC address of the security address.
CON myBindAddressStatus	1.3.6.1.4.1.171.10.97.2.6.1.2.2.1.3	ConfigStatus	read-write	entry status. Setting this value to 'invalid' will remove this entry
myPortSecrrityObjects	1.3.6.1.4.1.171.10.97.2.6.1.3
myPortSecurityTable	1.3.6.1.4.1.171.10.97.2.6.1.3.1		not-accessible	list of port security configuration objects.
myPortSecurityEntry	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1		not-accessible	Entry contains port security configurations.
IFI myPortSecurityPortIndex	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1.1	IfIndex	read-only
ENA myPortSecurityStatus	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1.2	EnabledStatus	read-write
INT myPortSecurViolationType	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1.3	INTEGER	read-write	this object define 3 grades of port security: violation-protect(1): normal security grade, indicate that when the a datagram received on a port with illegal MAC address will be discarded but not send trap, legal and illegal MAC to a port security is defined by per port's security below. violation-restrict(2): normal security grade, indicate that when the a datagram received on a port with illegal MAC address will be discarded and send trap, legal and illegal MAC to a port security is defined by per port's security below. violation-shutdown(3): strict security grade, indicate that when the a datagram received on a port with illegal MAC address, the port will be disabled for the violation of the port's security and send trap.
I32 myPortSecurityAddrNum	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1.4	Integer32	read-write	This value means the address number threshold of this port. A new address want to add to the port address will be refused when address num exceed this value. This value is valid when myPortSecurityStatus is 'disabled'
I32 myPortSecurityAddrAge	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1.5	Integer32	read-write	Aging time in units of minute of security address of interface
ENA myPortStaticSecurAddrIfAge	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1.6	EnabledStatus	read-write	This object offer the means whether enable static configured security address aging.
I32 myPortSecurityAddressCurrentNum	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1.7	Integer32	read-only	Current number of the security address of interface.
I32 myPortStaticSecurAddrCurrentNum	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1.8	Integer32	read-only	Current number of the static configured security address of interface.
INT myPortSecurityIpDistrMode	1.3.6.1.4.1.171.10.97.2.6.1.3.1.1.9	INTEGER	read-only	IP Distrute Mode (0:Static-only mode, 1:Dynamic-only mode, 2:Dynamic and Static mode, 3:Unspecified mode)
mySecurityTraps	1.3.6.1.4.1.171.10.97.2.6.2
NTF portSecurityViolate	1.3.6.1.4.1.171.10.97.2.6.2.1			the mac lock violate trap indicates that if you have set the threshold number of learned addresses from a port, and their comes a new address from the port, but the addresses for the port is already full.
mySecurityMIBConformance	1.3.6.1.4.1.171.10.97.2.6.3
mySecurityMIBCompliances	1.3.6.1.4.1.171.10.97.2.6.3.1
mySecurityMIBCompliance	1.3.6.1.4.1.171.10.97.2.6.3.1.1			The compliance statement for entities which implement the My Security MIB
mySecurityMIBGroups	1.3.6.1.4.1.171.10.97.2.6.3.2
myUserManageMIBGroup	1.3.6.1.4.1.171.10.97.2.6.3.2.1			A collection of objects providing status snmp and web and telnet management agent to a My agent.
mySecurityAddressMIBGroup	1.3.6.1.4.1.171.10.97.2.6.3.2.2			A collection of objects providing security address to a My agent.
myPortSecurityMIBGroup	1.3.6.1.4.1.171.10.97.2.6.3.2.3			A collection of objects providing port security to a My agent.

RFC description

Manages security policies including user authentication and port security on D-Link switches.

Start monitoring D-Link managed switch (management-plane security posture) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download MY-SECURITY-MIB

What Is MY-SECURITY-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description