TPLINK-USERSECURITY-MIB

All MIBs › TPLINK-USERSECURITY-MIB

Organization: TPLINK

Last Updated: 2020-09-07

Category: Access Control and Authentication

Description: Manages TP-Link switch user security policies including login attempt limits and password rules.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TPLINK-USERSECURITY-MIB?

TPLINK-USERSECURITY-MIB is a TP-LINK proprietary MIB implementing mandatory per-port, per-IP, and per-MAC access-control restrictions on TP-LINK managed switches. Its objects cover auth-type and global port-auth enable, per-service (SNMP/Telnet/SSH/HTTP/HTTPS/ping) access flags at the port level, a port-auth-configuration table, an equivalent IP-based auth table (index, per-service access flags, IP address/mask), and MAC-based auth enable and per-service access flags. As a configuration/security MIB it lets an administrator confirm which management protocols are permitted from a given port, IP address, or MAC address on a TP-LINK switch. It is deployed on TP-LINK managed switches. Engineers can download the TPLINK-USERSECURITY-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TPLINK-USERSECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

TP-LINK managed switches

Monitoring Examples

An administrator checks userSecurityUserAuthIpAccessSsh to confirm only an authorized management IP can reach SSH on a TP-LINK managed switch.

What Can Be Monitored

per-port/IP/MAC management-service access control

Imported Objects

From RFC1213-MIB

ifIndex

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From TPLINK-MIB

tplinkMgmt

OBJECT-IDENTITY

From TPLINK-TC-MIB

TPRowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
tplinkUserSecurity	1.3.6.1.4.1.11863.6.41			Implementation of the user security is mandatory for the swtich.
tplinkUserSecurityMIBObjects	1.3.6.1.4.1.11863.6.41.1
userSecurityUserAuth	1.3.6.1.4.1.11863.6.41.1.1
INT userSecurityUserAuthType	1.3.6.1.4.1.11863.6.41.1.1.1	INTEGER	read-only	disable(0), ip(1), mac(2), port(3) The mode of user authentication.
userSecurityUserAuthPort	1.3.6.1.4.1.11863.6.41.1.1.2
INT userSecurityUserAuthPortEnable	1.3.6.1.4.1.11863.6.41.1.1.2.1	INTEGER	read-write	0. disable 1.enable
INT userSecurityUserAuthPortAccessSnmp	1.3.6.1.4.1.11863.6.41.1.1.2.2	INTEGER	read-write	0. disable -- SNMP frame sent to the switch will be accepted by default 1. enable -- SNMP frame sent to the switch will be accepted only if it comes from the auth port(s)
INT userSecurityUserAuthPortAccessTelnet	1.3.6.1.4.1.11863.6.41.1.1.2.3	INTEGER	read-write	0. disable -- Telnet frame sent to the switch will be accepted by default 1. enable -- Telnet frame sent to the switch will be accepted only if it comes from the auth port(s)
INT userSecurityUserAuthPortAccessSsh	1.3.6.1.4.1.11863.6.41.1.1.2.4	INTEGER	read-write	0. disable -- SSH frame sent to the switch will be accepted by default 1. enable -- SSH frame sent to the switch will be accepted only if it comes from the auth port(s)
INT userSecurityUserAuthPortAccessHttp	1.3.6.1.4.1.11863.6.41.1.1.2.5	INTEGER	read-write	0. disable -- HTTP frame sent to the switch will be accepted by default 1. enable -- HTTP frame sent to the switch will be accepted only if it comes from the auth port(s)
INT userSecurityUserAuthPortAccessHttps	1.3.6.1.4.1.11863.6.41.1.1.2.6	INTEGER	read-write	0. disable -- HTTPS frame sent to the switch will be accepted by default 1. enable -- HTTPS frame sent to the switch will be accepted only if it comes from the auth port(s)
INT userSecurityUserAuthPortAccessPing	1.3.6.1.4.1.11863.6.41.1.1.2.7	INTEGER	read-write	0. disable -- Ping request frame sent to the switch will be accepted by default 1. enable -- Ping request frame sent to the switch will be accepted only if it comes from the auth port(s)
userSecurityUserAuthPortTable	1.3.6.1.4.1.11863.6.41.1.1.2.8		not-accessible	A list of port.
userSecurityUserAuthPortEntry	1.3.6.1.4.1.11863.6.41.1.1.2.8.1		not-accessible	An entry contains of the port for user auth .
INT userSecurityUserAuthPortConf	1.3.6.1.4.1.11863.6.41.1.1.2.8.1.2	INTEGER	read-write	0. disable 1.enable
userSecurityUserAuthIp	1.3.6.1.4.1.11863.6.41.1.1.3
INT userSecurityUserAuthIpEnable	1.3.6.1.4.1.11863.6.41.1.1.3.1	INTEGER	read-write	0. disable 1.enable
userSecurityUserAuthIpTable	1.3.6.1.4.1.11863.6.41.1.1.3.2		not-accessible	A list of IP.
userSecurityUserAuthIpEntry	1.3.6.1.4.1.11863.6.41.1.1.3.2.1		not-accessible	An entry contains of the IP for user authentication .
INT userSecurityUserAuthIpIndex	1.3.6.1.4.1.11863.6.41.1.1.3.2.1.1	INTEGER	read-only	IP entry ID
INT userSecurityUserAuthIpAccessSnmp	1.3.6.1.4.1.11863.6.41.1.1.3.2.1.2	INTEGER	read-write	0. disable -- SNMP frame sent to the switch will be accepted by default 1.enable -- SNMP frame sent to the switch will be accepted only if its source ip is in the same network segment with auth ip
INT userSecurityUserAuthIpAccessTelnet	1.3.6.1.4.1.11863.6.41.1.1.3.2.1.3	INTEGER	read-write	0. disable -- Telnet frame sent to the switch will be accepted by default 1.enable -- Telnet frame sent to the switch will be accepted only if its source ip is in the same network segment with auth ip
INT userSecurityUserAuthIpAccessSsh	1.3.6.1.4.1.11863.6.41.1.1.3.2.1.4	INTEGER	read-write	0. disable -- SSH frame sent to the switch will be accepted by default 1.enable -- SSH frame sent to the switch will be accepted only if its source ip is in the same network segment with auth ip
INT userSecurityUserAuthIpAccessHttp	1.3.6.1.4.1.11863.6.41.1.1.3.2.1.5	INTEGER	read-write	0. disable -- HTTP frame sent to the switch will be accepted by default 1.enable -- HTTP frame sent to the switch will be accepted only if its source ip is in the same network segment with auth ip
INT userSecurityUserAuthIpAccessHttps	1.3.6.1.4.1.11863.6.41.1.1.3.2.1.6	INTEGER	read-write	0. disable -- HTTPS frame sent to the switch will be accepted by default 1.enable -- HTTPS frame sent to the switch will be accepted only if its source ip is in the same network segment with auth ip
INT userSecurityUserAuthIpAccessPing	1.3.6.1.4.1.11863.6.41.1.1.3.2.1.7	INTEGER	read-write	0. disable -- Ping request frame sent to the switch will be accepted by default 1.enable -- Ping request frame sent to the switch will be accepted only if its source ip is in the same network segment with auth ip
IP userSecurityUserAuthIpAddress	1.3.6.1.4.1.11863.6.41.1.1.3.2.1.8	IpAddress	read-write	the auth ip address.for example: 192.168.0.1
IP userSecurityUserAuthIpMask	1.3.6.1.4.1.11863.6.41.1.1.3.2.1.9	IpAddress	read-write	the subnet mask of the auth ip address.for example: 255.255.255.0
userSecurityUserAuthMac	1.3.6.1.4.1.11863.6.41.1.1.4
INT userSecurityUserAuthMacEnable	1.3.6.1.4.1.11863.6.41.1.1.4.1	INTEGER	read-write	0. disable 1.enable
INT userSecurityUserAuthMacAccessSnmp	1.3.6.1.4.1.11863.6.41.1.1.4.2	INTEGER	read-write	0. disable -- SNMP frame sent to the switch will be accepted by default 1. enable -- SNMP frame sent to the switch will be accepted only if its source mac is auth mac
INT userSecurityUserAuthMacAccessTelnet	1.3.6.1.4.1.11863.6.41.1.1.4.3	INTEGER	read-write	0. disable -- Telnet frame sent to the switch will be accepted by default 1. enable -- Telnet frame sent to the switch will be accepted only if its source mac is auth mac
INT userSecurityUserAuthMacAccessSsh	1.3.6.1.4.1.11863.6.41.1.1.4.4	INTEGER	read-write	0. disable -- SSH frame sent to the switch will be accepted by default 1. enable -- SSH frame sent to the switch will be accepted only if its source mac is auth mac
INT userSecurityUserAuthMacAccessHttp	1.3.6.1.4.1.11863.6.41.1.1.4.5	INTEGER	read-write	0. disable -- HTTP frame sent to the switch will be accepted by default 1. enable -- HTTP frame sent to the switch will be accepted only if its source mac is auth mac
INT userSecurityUserAuthMacAccessHttps	1.3.6.1.4.1.11863.6.41.1.1.4.6	INTEGER	read-write	0. disable -- HTTPS frame sent to the switch will be accepted by default 1. enable -- HTTPS frame sent to the switch will be accepted only if its source mac is auth mac
INT userSecurityUserAuthMacAccessPing	1.3.6.1.4.1.11863.6.41.1.1.4.7	INTEGER	read-write	0. disable -- Ping request frame sent to the switch will be accepted by default 1. enable -- Ping request frame sent to the switch will be accepted only if its source mac is auth mac
OCT userSecurityUserAuthMacAddress	1.3.6.1.4.1.11863.6.41.1.1.4.8	OCTET STRING	read-write	the auth mac
tplinkUserSecurityMIBNotifications	1.3.6.1.4.1.11863.6.41.2

RFC description

TP-Link user security MIB providing management objects for user authentication, access control, and security policy configuration on TP-Link network devices.

Start monitoring TP-LINK managed switches (per-port/IP/MAC service-access-control status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TPLINK-USERSECURITY-MIB

What Is TPLINK-USERSECURITY-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description