All MIBs › PRVT-PORT-SECURITY-MIB
Organization: BATM Advanced Communication
Last Updated: 2008-06-18
Category: Security
Description: Manages BATM Advanced Communication port security configuration including MAC learning limits, sticky MAC, and violation responses.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is PRVT-PORT-SECURITY-MIB?
PRVT-PORT-SECURITY-MIB is a BATM Advanced Communication proprietary MIB for port security, a switch access-control technology area that restricts which MAC addresses may communicate on a given port. It exposes configuration data for MAC address learning limits, sticky MAC address behavior, and the violation response action taken when an unauthorized MAC is seen. Its monitoring value is security/access-control state rather than physical hardware health -- an operator uses it to verify port security policy is correctly applied and to be alerted, via its notifications group, when a violation (e.g. MAC limit exceeded or unauthorized device) occurs on a port. It is a vendor-specific extension layered on top of standard bridge/port MIB concepts (interface indexing) common across switch MIBs. It is deployed on BATM Advanced Communication managed switches in environments requiring strict endpoint access control, such as carrier access or campus edge networks, and administrators can download the PRVT-PORT-SECURITY-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in PRVT-PORT-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- BATM Advanced Communication managed switches
Monitoring Examples
An administrator would check the port security configuration objects under prvtPortSECObjects to confirm MAC learning limits and violation-response mode are set as intended for a given port, and would subscribe to prvtPortSECNotifications to be alerted in real time when a port exceeds its configured MAC limit or sees an unauthorized address. A spike in violation notifications on a single port would indicate a rogue device connection attempt or a misconfigured downstream hub/switch. Conformance objects under prvtPortSECConformance/prvtPortSECMIBGroups would be used by an NMS to confirm which port security capabilities the device supports.
What Can Be Monitored
- MAC address learning limit
- sticky MAC configuration
- port security violation action
- port security violation notifications
Imported Objects
From PRVT-SWITCH-MIB
| configL2IfaceEnable | OBJECT-TYPE |
| switch | OBJECT-IDENTITY |
From Q-BRIDGE-MIB
| dot1qTpFdbStatus | OBJECT-TYPE |
| dot1qVlanStatus | OBJECT-TYPE |
From SNMPv2-CONF
| NOTIFICATION-GROUP |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE |
OIDs
RFC description
BATM Advanced Communications private MIB for Ethernet and Fast Ethernet IP switches port security management.
Start monitoring BATM managed switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.