ZYXEL-PORT-SECURITY-MIB

Description: Manages ZyXEL port security for limiting and controlling MAC addresses allowed on each switch port.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

ZYXEL-PORT-SECURITY-MIB is a ZyXEL enterprise MIB covering port security, the feature that limits and controls which MAC addresses may communicate on each switch port to prevent unauthorized devices or MAC-flooding attacks. Despite the module description text referencing "dhcp" (likely a documentation artifact from shared subtree definitions), the MIB's stated purpose is port security enforcement, exposing objects such as maximum allowed MAC addresses per port, learned/secured MAC address entries, and the violation action taken (shutdown, restrict, etc.). This gives it direct value for monitoring both software policy state and fault conditions: administrators can check how many secure MAC addresses are currently learned on a port versus the configured limit, and detect security violation events indicating a potential unauthorized device or attack. It works closely with the ZyXEL error-disable MIB, since port security violations commonly trigger errdisable, and shares port-indexing conventions with IF-MIB. It is deployed on ZyXEL access switches requiring MAC-address-level access control at the edge, such as enterprise wiring closets or public-facing kiosks. Engineers can download the ZYXEL-PORT-SECURITY-MIB file directly to load it into their MIB browser.

No sample objects were provided, but this MIB would typically define a secure-MAC-address table and a per-port security configuration table recording the configured maximum MAC count, the currently learned count, and the violation action. An administrator would poll the learned-count field against the configured maximum to detect when a port is at capacity, or check violation counters to spot an attempted unauthorized device connection.

Port security configuration for ZyXEL switches including MAC-based access control and port state management.