OID reference

portSecurityAdminStatus

1.3.6.1.4.1.9.5.1.10.1.1.3

Description

Full description and source information

Identification

Identifier and names

Parent: 1.3.6.1.4.1.9.5.1.10.1.1 (portSecurityEntry)
Node code: 3
Node name: portSecurityAdminStatus
Category: SNMP management object
Numeric OID: 1.3.6.1.4.1.9.5.1.10.1.1.3
URN notation: urn:oid:1.3.6.1.4.1.9.5.1.10.1.1.3
Type: OBJECT-TYPE

ASN.1, OID-IRI and named path variants

ASN.1 notation

{1 3 6 1 4 1 9 5 1 10 1 1 3}

{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) cisco(9) workgroup(5) ciscoStackMIB(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) cisco(9) workgroup(5) stack(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) me1200(9) workgroup(5) ciscoStackMIB(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) me1200(9) workgroup(5) stack(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) cisco(9) workgroup(5) ciscoStackMIB(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) cisco(9) workgroup(5) stack(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) me1200(9) workgroup(5) ciscoStackMIB(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) me1200(9) workgroup(5) stack(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) cisco(9) workgroup(5) ciscoStackMIB(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) cisco(9) workgroup(5) stack(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) me1200(9) workgroup(5) ciscoStackMIB(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) me1200(9) workgroup(5) stack(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) cisco(9) workgroup(5) ciscoStackMIB(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) cisco(9) workgroup(5) stack(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) me1200(9) workgroup(5) ciscoStackMIB(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) me1200(9) workgroup(5) stack(1) securityGrp(10) portSecurityTable(1) portSecurityEntry(1) portSecurityAdminStatus(3)}
Additional combinations skipped.

OID-IRI notation

/1/3/6/1/4/1/9/5/1/10/1/1/3
/ISO/Identified-Organization/6/1/4/1/9/5/1/10/1/1/3
/ISO/3/6/1/4/1/9/5/1/10/1/1/3

Named path variants

/iso/identified-organization/dod/internet/private/enterprise/cisco/workgroup/ciscoStackMIB/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprise/cisco/workgroup/stack/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprise/me1200/workgroup/ciscoStackMIB/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprise/me1200/workgroup/stack/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprise/Cisco/workgroup/ciscoStackMIB/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprise/Cisco/workgroup/stack/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprises/cisco/workgroup/ciscoStackMIB/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprises/cisco/workgroup/stack/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprises/me1200/workgroup/ciscoStackMIB/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprises/me1200/workgroup/stack/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprises/Cisco/workgroup/ciscoStackMIB/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/enterprises/Cisco/workgroup/stack/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/ldap-enterprise/cisco/workgroup/ciscoStackMIB/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/ldap-enterprise/cisco/workgroup/stack/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/ldap-enterprise/me1200/workgroup/ciscoStackMIB/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
/iso/identified-organization/dod/internet/private/ldap-enterprise/me1200/workgroup/stack/securityGrp/portSecurityTable/portSecurityEntry/portSecurityAdminStatus
Additional combinations skipped.

SNMP properties

Value type: INTEGER
Maximum access defined by MIB: read-write
Status in MIB: mandatory, current
Default value: disabled

Definitions may combine these properties differently.

Compare 2 source variants

Variant 1 — MIBdepot, Cisco SMIv1

Value type: INTEGER
Maximum access defined by MIB: read-write
Status in MIB: mandatory
Default value: disabled

Variant 2 — Cisco, MIBdepot, and others

Value type: INTEGER
Maximum access defined by MIB: read-write
Status in MIB: current
Default value: disabled

Enumerated values

Numbers refer to source variants above. Each value is shown only for variants that define it.

Value	Name	Source variants
1	enabled	1, 2
2	disabled	1, 2

Using this OID with SNMP

At least one MIB declaration places this object in a table row. A value belongs to a row instance; its suffix depends on the row's INDEX or AUGMENTS definition.

In CISCO-STACK-MIB, the row index consists of these components in order:

portSecurityModuleIndex (INTEGER): one numeric subidentifier for the non-negative value.
portSecurityPortIndex (INTEGER): one numeric subidentifier for the non-negative value.

An instance has the form .1.3.6.1.4.1.9.5.1.10.1.1.3.<portSecurityModuleIndex>.<portSecurityPortIndex>. Use values present on the device and permitted by its MIB. Other definitions can differ.

snmpwalk [connection options] DEVICE .1.3.6.1.4.1.9.5.1.10.1.1.3

Replace the placeholders with your connection and authentication options. Available permissions and device support can differ from the MIB.

Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.

Published definition

The displayed source records contain one distinct definition. Compare its source records.

portSecurityAdminStatus OBJECT-TYPE
        SYNTAX        INTEGER { enabled(1),  disabled(2) }
        ACCESS        read-write
        STATUS        mandatory
        DESCRIPTION   "When security is enabled, source MAC addresses are
                      monitored for all packets received on the port.  If
                      an address is detected that does not match the 
                      portSecuritySecureSrcAddr, the port is shut down and
                      a linkDown trap is sent."
        DEFVAL { disabled }
        ::= { portSecurityEntry 3 }

Meaning

Descriptions

3 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Description 1

When security is enabled, source MAC addresses are monitored for all packets received on the port. If an address is detected that does not match the portSecuritySecureSrcAddr and any corresponding portSecurityExtSecureSrcAddr, of which portSecurityExtModuleIndex and portSecurityExtPortIndex in the portSecurityExtTable is the same as the the portSecurityModuleIndex and portSecurityPortIndex, and the number of MAC address learned or configured for this port is equal to portSecurityMaxSrcAddr, the port will shutdown or drop packets. If the portSecurityViolationPolicy is set to shutdown(2), the port is shutdown and a linkDown trap is sent; otherwise, the port drops the invalid packets.

Original text from OID Repository

portSecurityAdminStatus OBJECT-TYPE SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "When security is enabled, source MAC addresses are monitored for all packets received on the port. If an address is detected that does not match the portSecuritySecureSrcAddr and any corresponding portSecurityExtSecureSrcAddr, of which portSecurityExtModuleIndex and portSecurityExtPortIndex in the portSecurityExtTable is the same as the the portSecurityModuleIndex and portSecurityPortIndex, and the number of MAC address learned or configured for this port is equal to portSecurityMaxSrcAddr, the port will shutdown or drop packets. If the portSecurityViolationPolicy is set to shutdown(2), the port is shutdown and a linkDown trap is sent; otherwise, the port drops the invalid packets." DEFVAL { disabled }

Sources for this description

OID Repository

View at oid-base.com

Automatically extracted from Cisco "SNMP v2 MIBs".

Description 2

When security is enabled, source MAC addresses
are monitored for all packets received on the
port. If an address is detected that does not
match the portSecuritySecureSrcAddr and any
corresponding portSecurityExtSecureSrcAddr, of
which portSecurityExtModuleIndex and
portSecurityExtPortIndex in the
portSecurityExtTable is the same as the
portSecurityModuleIndex and portSecurityPortIndex,
and the number of MAC address learned or
configured for this port is equal to
portSecurityMaxSrcAddr, the port will shutdown or
drop packets. If the
portSecurityViolationPolicy is set to shutdown(2),
the port is shutdown and a linkDown trap is sent;
otherwise the port drops the invalid packets.

Sources for this description

Circitor

Parsed from CISCO-STACK-MIB.mib · CISCO-STACK-MIB

Source file: Download CISCO-STACK-MIB.mib

Browse all files from Circitor

Cisco

Source file: Download CISCO-STACK-MIB.my · Publisher's file

Vendor MIB copy from the Netdisco archive.

Related source files and packages:

Source file: Download CISCO-STACK-MIB · Publisher's file

Vendor MIB copy from the LibreNMS archive. Cisco support.

Related source files and packages:

Other archive copies with the same file

Observium Community

Source file: Download CISCO-STACK-MIB.my · Publisher's file

Browse all files from Cisco

Cisco SMIv1

Source file: Download CISCO-STACK-MIB-V1SMI.my · Publisher's file

Source file: Download CISCO-STACK-MIB-V1SMI.my.txt

Browse all files from Cisco SMIv1

MIBdepot

Source file: Download cisco-stack-mib.mib.txt

Source file: Download CISCO-STACK-MIB.my.txt

Browse all files from MIBdepot

Description 3

When security is enabled, source MAC addresses are monitored for all packets received on the port. If an address is detected that does not match the portSecuritySecureSrcAddr, the port is shut down and a linkDown trap is sent.

Sources for this description

MIBdepot

See 1 matching source record

Evidence

Source records

1 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 3MIBdepot1 record · 1 source

Description 3

portSecurityAdminStatus · mandatoryMIBdepot1 source

Status in source: mandatory.

Names: portSecurityAdminStatus

Technical details

{
  "smi_kind": "OBJECT-TYPE",
  "definition": [
    "portSecurityAdminStatus",
    "OBJECT-TYPE",
    "SYNTAX",
    "INTEGER",
    "{",
    "enabled",
    "(",
    "1",
    ")",
    ",",
    "disabled",
    "(",
    "2",
    ")",
    "}",
    "ACCESS",
    "read-write",
    "STATUS",
    "mandatory",
    "DESCRIPTION",
    "\"When security is enabled, source MAC addresses are monitored for all packets received on the port. If an address is detected that does not match the portSecuritySecureSrcAddr, the port is shut down and a linkDown trap is sent.\"",
    "DEFVAL",
    "{",
    "disabled",
    "}",
    "::=",
    "{",
    "portSecurityEntry",
    "3",
    "}"
  ],
  "syntax_tree": [
    [
      "SimpleSyntax",
      "INTEGER",
      [
        "enumSpec",
        [
          [
            "enabled",
            1
          ],
          [
            "disabled",
            2
          ]
        ]
      ]
    ],
    null,
    [
      "MaxAccessPart",
      "read-write"
    ],
    [
      "Status",
      "mandatory"
    ],
    [
      "DESCRIPTION",
      "When security is enabled, source MAC addresses are monitored for all packets received on the port. If an address is detected that does not match the portSecuritySecureSrcAddr, the port is shut down and a linkDown trap is sent."
    ],
    null,
    null,
    null,
    [
      "DEFVAL",
      "disabled"
    ]
  ]
}

Preserved mibdepot archive

Module: CISCO-STACK-MIB

See published definition above

Module imports

{'RFC-1212': ['OBJECT-TYPE'], 'RFC-1215': ['TRAP-TYPE'], 'RFC1155-SMI': ['enterprises', 'IpAddress', 'TimeTicks', 'Counter'], 'RFC1213-MIB': ['DisplayString'], 'FDDI-SMT73-MIB': ['fddimibPORTSMTIndex', 'fddimibPORTIndex']}

· Download CISCO-STACK.mib.txt

Historical records

Additional source information

Information from Circitor

portSecurityAdminStatus OBJECT-TYPE
        SYNTAX        INTEGER { enabled(1),  disabled(2) }
        MAX-ACCESS    read-write
        STATUS        current
        DESCRIPTION   "When security is enabled, source MAC addresses
                      are monitored for all packets received on the
                      port. If an address is detected that does not
                      match the portSecuritySecureSrcAddr and any
                      corresponding portSecurityExtSecureSrcAddr, of
                      which portSecurityExtModuleIndex and
                      portSecurityExtPortIndex in the
                      portSecurityExtTable is the same as the
                      portSecurityModuleIndex and portSecurityPortIndex,
                      and the number of MAC address learned or
                      configured for this port is equal to
                      portSecurityMaxSrcAddr, the port will shutdown or
                      drop packets. If the
                      portSecurityViolationPolicy is set to shutdown(2),
                      the port is shutdown and a linkDown trap is sent;
                      otherwise the port drops the invalid packets."
        DEFVAL { disabled }
        ::= { portSecurityEntry 3 }

Information from Cisco SMIv1

portSecurityAdminStatus OBJECT-TYPE
    SYNTAX INTEGER {
        enabled(1),
        disabled(2)
        }
    ACCESS read-write
    STATUS mandatory
    DESCRIPTION
        "When security is enabled, source MAC addresses
        are monitored for all packets received on the
        port. If an address is detected that does not
        match the portSecuritySecureSrcAddr and any
        corresponding portSecurityExtSecureSrcAddr, of
        which portSecurityExtModuleIndex and
        portSecurityExtPortIndex in the
        portSecurityExtTable is the same as the
        portSecurityModuleIndex and portSecurityPortIndex,
        and the number of MAC address learned or
        configured for this port is equal to
        portSecurityMaxSrcAddr, the port will shutdown or
        drop packets. If the
        portSecurityViolationPolicy is set to shutdown(2),
        the port is shutdown and a linkDown trap is sent;
        otherwise the port drops the invalid packets."
    DEFVAL { disabled }
    ::= { portSecurityEntry 3 }

Information from MIBdepot

portSecurityAdminStatus OBJECT-TYPE
        SYNTAX        INTEGER { enabled(1),  disabled(2) }
        MAX-ACCESS    read-write
        STATUS        current
        DESCRIPTION   "When security is enabled, source MAC addresses
                      are monitored for all packets received on the 
                      port. If an address is detected that does not 
                      match the portSecuritySecureSrcAddr and any 
                      corresponding portSecurityExtSecureSrcAddr, of 
                      which portSecurityExtModuleIndex and 
                      portSecurityExtPortIndex in the 
                      portSecurityExtTable is the same as the 
                      portSecurityModuleIndex and portSecurityPortIndex,
                      and the number of MAC address learned or 
                      configured for this port is equal to 
                      portSecurityMaxSrcAddr, the port will shutdown or
                      drop packets. If the 
                      portSecurityViolationPolicy is set to shutdown(2),
                      the port is shutdown and a linkDown trap is sent;
                      otherwise the port drops the invalid packets."
        DEFVAL { disabled }
        ::= { portSecurityEntry 3 }

Information from Cisco

portSecurityAdminStatus OBJECT-TYPE
        SYNTAX        INTEGER { enabled(1),  disabled(2) }
        MAX-ACCESS    read-write
        STATUS        current
        DESCRIPTION   "When security is enabled, source MAC addresses
                      are monitored for all packets received on the
                      port. If an address is detected that does not
                      match the portSecuritySecureSrcAddr and any
                      corresponding portSecurityExtSecureSrcAddr, of
                      which portSecurityExtModuleIndex and
                      portSecurityExtPortIndex in the
                      portSecurityExtTable is the same as the
                      portSecurityModuleIndex and portSecurityPortIndex,
                      and the number of MAC address learned or
                      configured for this port is equal to
                      portSecurityMaxSrcAddr, the port will shutdown or
                      drop packets. If the
                      portSecurityViolationPolicy is set to shutdown(2),
                      the port is shutdown and a linkDown trap is sent;
                      otherwise the port drops the invalid packets."
        DEFVAL { disabled }
        ::= { portSecurityEntry 3 }

Registration

Registration authorities

First Registration Authority (inferred from ancestor 1.3.6.1.4.1.9)

Greg Satz

Current Registration Authority (inferred from ancestor 1.3.6.1.4.1.9)

Cisco Systems, Inc.

Siblings (9)

OID	Name	Description
1.3.6.1.4.1.9.5.1.10.1.1.1	portSecurityModuleIndex	An index value that uniquely identifies the module where this port is located (see portModuleIndex).
1.3.6.1.4.1.9.5.1.10.1.1.2	portSecurityPortIndex	An index value that uniquely identifies this port within a module (see portIndex).
1.3.6.1.4.1.9.5.1.10.1.1.4	portSecurityOperStatus	An indication of whether the port has been shut down as a result of an insecure address being detected on a secure port.
1.3.6.1.4.1.9.5.1.10.1.1.5	portSecurityLastSrcAddr	The last source MAC address in a receive packet seen on the port.
1.3.6.1.4.1.9.5.1.10.1.1.6	portSecuritySecureSrcAddr	The address to be compared with source MAC addresses of received packets when the portSecurityAdminStatus is enabled(1). Setting t…
1.3.6.1.4.1.9.5.1.10.1.1.7	portSecurityMaxSrcAddr	The maximum number (N) of MAC address to be secured on the port. The first N MAC addresses learned or configured are made secured…
1.3.6.1.4.1.9.5.1.10.1.1.8	portSecurityAgingTime	The interval in which the port is secured. After the expiration of the time, the corresponding portSecuritySecureSrcAddr or portSe…
1.3.6.1.4.1.9.5.1.10.1.1.9	portSecurityShutdownTimeOut	The interval in which the port is shutdown due to the violation of security. After the expiration of the time all the security co…
1.3.6.1.4.1.9.5.1.10.1.1.10	portSecurityViolationPolicy	If the value of this object is restrict(1) - the port drops all packets with insecured addresses. shutdown(2) - the port is forc…