SWITCH-PORTSECURITY-MIB

Description: Manages Raisecom switch port security policies, MAC-based access control, and violation actions.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

SWITCH-PORTSECURITY-MIB is a Raisecom switch module that manages per-port MAC address security policy, including learning limits, violation actions, and sticky-MAC behavior, part of Raisecom's Ethernet switch management MIB family. It exposes configuration data (max allowed MAC count, aging time, violation action, sticky-MAC enable) alongside status/fault data such as the current MAC count on a port and trap enablement for violations. Its monitoring value is primarily in security/fault status: it lets an operator see how many MAC addresses are currently learned on a port versus the configured maximum, whether a port has been shut down due to a violation, and whether violation traps are enabled, effectively surfacing port-level security fault conditions rather than general hardware health. It depends on the switch's underlying interface/port numbering scheme (implicitly aligned with ifIndex-style port identifiers) from the vendor's broader switch MIB tree. It is deployed on Raisecom managed Ethernet switches in enterprise or carrier access networks to enforce and monitor port-level MAC security. Engineers can download the SWITCH-PORTSECURITY-MIB file directly to load it into their MIB browser.

An admin would poll rcPortSecTable/rcPortSecEntry indexed by rcPortSecIndx to compare rcPortSecCurMacNum against rcPortSecMaxAllowedMac on each port, catching a port that has hit its learned-MAC limit. If rcPortSecMacViolationAction is set to shut down the port, rcPortSecShutUp would reveal a port administratively disabled after a security violation, prompting investigation of a rogue device or MAC flooding attempt. rcPortSecTrapEnable would be checked to confirm violation traps are active so such events are reported in real time rather than only discoverable by polling.

Configures port-level MAC address security and aging policies on Raisecom network switches.