PORT-SECURITY-MIB

All MIBs › PORT-SECURITY-MIB

Organization: D-Link Corp.

Last Updated: 2009-08-18

Category: Security, Switching

Description: Manages IEEE 802.1X and MAC-based port security on D-Link switches, tracking secure MAC addresses and violation actions.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is PORT-SECURITY-MIB?

PORT-SECURITY-MIB is a D-Link enterprise MIB module managing IEEE 802.1X and MAC-based port security features on D-Link managed switches, tracking which MAC addresses are permitted on a given switch port and what action is taken when an unauthorized address is detected. It exposes configuration objects for enabling/configuring port security per interface along with tables of learned/authorized secure MAC addresses and violation-action settings (e.g. shutdown, restrict, protect). Its monitoring value centers on software/security status rather than physical hardware: detecting security violations (an unauthorized device plugged into a locked-down port), tracking how many secure MAC addresses are learned on each port, and confirming whether a port has been administratively shut down due to a violation. As a proprietary D-Link security feature MIB it likely complements standard IF-MIB interface objects and the IEEE 802.1X framework, though the source data does not confirm specific imports. It is deployed on D-Link managed switches in enterprise or campus environments where physical port access control is enforced to prevent unauthorized device connections, and administrators setting this up typically perform a PORT-SECURITY-MIB download from D-Link's support site before compiling it alongside the switch's other management MIBs.

IPNetwork Monitor allows you to monitor SNMP objects defined in PORT-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switches (802.1X/MAC-based port security)

Monitoring Examples

No sample objects were extracted for this module, so table/object names cannot be confirmed from the provided data; based on the module's stated purpose, a realistic scenario would involve an admin polling a per-port secure-MAC-address table to confirm the expected number of learned addresses on an access port, and watching a violation-action or port-status object to detect when a port has shut down after an unauthorized MAC address was seen (indicating a possible rogue device or MAC spoofing attempt). This should be treated as a plausible use case rather than a confirmed technical detail, since no object list was available in the source data.

Imported Objects

From DLINK-ID-REC-MIB

dlink-common-mgmt

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
swPortSecCtrl	1.3.6.1.4.1.171.12.63.1
INT swPortSecDelCtrl	1.3.6.1.4.1.171.12.63.3.4.1.4	INTEGER	read-write	Used to delete this port security entry. Setting this value to 'start' will execute the delete action. Once deleted, the value returns to 'other'.
swPortSecEntriesEntry	1.3.6.1.4.1.171.12.63.3.4.1		not-accessible	A list of information contained in the swPortSecEntriesTable.
swPortSecEntriesTable	1.3.6.1.4.1.171.12.63.3.4		not-accessible	This table is used to show port security entries.
swPortSecInfo	1.3.6.1.4.1.171.12.63.2
INT swPortSecLogState	1.3.6.1.4.1.171.12.63.1.4	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, the relevant information will be logged into the system.
MAC swPortSecMac	1.3.6.1.4.1.171.12.63.3.4.1.1	MacAddress	read-only	Specifies a MAC address.
swPortSecMgmt	1.3.6.1.4.1.171.12.63.3
swPortSecMgmtByPort	1.3.6.1.4.1.171.12.63.3.1
swPortSecMgmtByVLAN	1.3.6.1.4.1.171.12.63.3.2
swPortSecMgmtByVLANOnPort	1.3.6.1.4.1.171.12.63.3.3
INT swPortSecMgmtByVLANOnPortClearAction	1.3.6.1.4.1.171.12.63.3.3.2.3	INTEGER	read-write	other(1): When user gets this object, it always returns other(1). start(2): Used to clear port security entries by VLAN on the special port.
swPortSecMgmtByVLANOnPortClearCtrl	1.3.6.1.4.1.171.12.63.3.3.2
INT swPortSecMgmtByVLANOnPortClearPort	1.3.6.1.4.1.171.12.63.3.3.2.1	INTEGER	read-write	Indicates the port.
INT swPortSecMgmtByVLANOnPortClearVID	1.3.6.1.4.1.171.12.63.3.3.2.2	INTEGER	read-write	Indicates the VID.
swPortSecMIB	1.3.6.1.4.1.171.12.63			The structure of port security for the proprietary enterprise.
INT swPortSecPort	1.3.6.1.4.1.171.12.63.3.4.1.3	INTEGER	read-only	Indicates the port.
INT swPortSecPortAdmState	1.3.6.1.4.1.171.12.63.3.1.1.1.4	INTEGER	read-write	Indicates the administration state of the locking address.
INT swPortSecPortClearCtrl	1.3.6.1.4.1.171.12.63.3.1.1.1.5	INTEGER	read-write	Used to clear port security entries by port. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
swPortSecPortEntry	1.3.6.1.4.1.171.12.63.3.1.1.1		not-accessible	A list of information contained in the swPortSecPortTable.
INT swPortSecPortIndex	1.3.6.1.4.1.171.12.63.3.1.1.1.1	INTEGER	not-accessible	Indicates the secured port to lock address learning.
INT swPortSecPortLockAddrMode	1.3.6.1.4.1.171.12.63.3.1.1.1.3	INTEGER	read-write	Indicates the mode of locking address. In deleteOnTimeout(2) mode, the locked addresses can be aged out after the aging timer expires. In this mode, when the locked address is aged out, the number of addresses that can be learned has to be increased by one. In deleteOnReset (3) mode, locked addresses never age out unless the system restarts which will prevent port movement or intrusion.
INT swPortSecPortMaxLernAddr	1.3.6.1.4.1.171.12.63.3.1.1.1.2	INTEGER	read-write	Indicates the allowable number of addresses to be learned on this port. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
swPortSecPortTable	1.3.6.1.4.1.171.12.63.3.1.1		not-accessible	A port security feature which controls the address learning capability and traffic forwarding decisions. Each port can be enabled or disabled for this function. When it is enabled and a number is given said N, which allows N addresses to be learned on this port, the first N learned addresses are locked at this port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this port.
INT swPortSecSysMaxLernAddr	1.3.6.1.4.1.171.12.63.1.2	INTEGER	read-write	Indicates the maximum number of addresses to be authorized by port security on the system. The max entry range is (1..N). The value N means the max number and is determined by the project itself.
INT swPortSecTrapLogState	1.3.6.1.4.1.171.12.63.1.1	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, traps will be sent out and the relevant information will be logged into the system.
INT swPortSecTrapState	1.3.6.1.4.1.171.12.63.1.3	INTEGER	read-write	When enabled(1), whenever there's a new MAC address that violates the pre-defined port security configuration, trap will be sent out.
INT swPortSecVID	1.3.6.1.4.1.171.12.63.3.4.1.2	INTEGER	read-only	Indicates the VLAN ID.
INT swPortSecVLANClearCtrl	1.3.6.1.4.1.171.12.63.3.2.1.1.3	INTEGER	read-write	Used to clear port security entries by VLAN. Setting this value to 'start' will execute the clear action. Once cleared, the value returns to 'other'.
swPortSecVLANEntry	1.3.6.1.4.1.171.12.63.3.2.1.1		not-accessible	A list of information contained in the swPortSecVLANTable.
INT swPortSecVLANID	1.3.6.1.4.1.171.12.63.3.2.1.1.1	INTEGER	not-accessible	Indicates the secured VLAN to lock address learning.
INT swPortSecVLANMaxLernAddr	1.3.6.1.4.1.171.12.63.3.2.1.1.2	INTEGER	read-write	Indicates allowable number of addresses to be learned on this VLAN. A value of -1 means no-limit. The default value is no-limit. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
INT swPortSecVLANOnPortAddCtrl	1.3.6.1.4.1.171.12.63.3.3.1.1.2	INTEGER	read-create	other (1): When user gets this object, it always returns other(1). add (2): Used to configure the VLAN limit from the special port. If 'add' is selected, swPortSecVLANOnPortMaxLernAddr must be set to a valid value except -1.
swPortSecVLANOnPortEntry	1.3.6.1.4.1.171.12.63.3.3.1.1		not-accessible	A list of information contained in the swPortSecVLANOnPortTable.
INT swPortSecVLANOnPortMaxLernAddr	1.3.6.1.4.1.171.12.63.3.3.1.1.1	INTEGER	read-write	Indicates allowable number of addresses to be learned on this VLAN from the special port. A value of -1 means no-limit. The default value is no-limit. Only VLANs with limitations will be displayed in this table. The max entry range is (0..N). The value N means the max number and is determined by the project itself.
swPortSecVLANOnPortTable	1.3.6.1.4.1.171.12.63.3.3.1		not-accessible	A port security feature which controls the address learning capability. When number is given said N, which allows N addresses to be learned on this VLAN from the special port, the first N learned addresses are locked at this VLAN from the special port as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN from the special port.
swPortSecVLANTable	1.3.6.1.4.1.171.12.63.3.2.1		not-accessible	A port security feature which controls the address leaning capability. When number is given said N, which allows N addresses to be learned on this VLAN, the first N learned addresses are locked at this VLAN as static entries. When the learned addresses number reaches N, any incoming packet without learned source addresses are discarded (e.g. dropped) and no more new addresses can be learned on this VLAN.

RFC description

Provides management objects for port security functionality on network switches, controlling MAC address learning and unauthorized access prevention.

Start monitoring D-Link managed switches (802.1X/MAC-based port security) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download PORT-SECURITY-MIB

What Is PORT-SECURITY-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description