Port MAC Security Interface Table

The following table shows the same information as the show port security ethernet slot/port command. Beginning with SmarZone 7.1.1, you can configure Port MAC Security on SmartZone.

Note: SmartZone 7.1.1 is an upcoming release of SmartZone.

Name, OID, and syntax

Access

Description

snPortMacSecurityIntfContentTable

1.3.6.1.4.1.1991.1.1.3.24.1.1.3

None

The port MAC security interface table that shows the port MAC security statistics for an Ethernet interface.

snPortMacSecurityIntfContentIfIndex

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.1

Syntax: InterfaceIndex

None

Shows the ifIndex value of the local interface.

snPortMacSecurityIntfContentSecurity

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.2

Syntax: Integer

Read- write

Indicates whether MAC port security is enabled or disabled on this interface:

  • disabled(0)
  • enabled(1)
snPortMacSecurityIntfContentViolationType

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.3

Syntax: Integer

Read-write

Indicates the port security violation type for this interface:

  • shutdown(0)
  • restrict(1)
  • protected(2)
snPortMacSecurityIntfContentShutdownTime

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.4

Syntax: Unsigned32 (0 to 1440)

Read-write

If snPortMacSecurityIntfContentViolationType is 0 (shutdown), this value indicates the number of seconds within which the interface shuts down when the violation occurs.

If snPortMacSecurityIntfContentViolationType is 1 (restrict) and this value is 0, the interface is permanently down.

If snPortMacSecurityIntfContentViolationType is 1 (restrict) or 2 (protect), this value will always be 0.
snPortMacSecurityIntfContentShutdownTimeLeft

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.5

Syntax: Unsigned32

Read-only

If snPortMacSecurityIntfContentViolationType is 0 (shutdown), this value indicates the number of seconds before this interface will be re-enabled.

If snPortMacSecurityIntfContentViolationType is 1 (restrict), this value will always be 0.

snPortMacSecurityIntfContentAgeOutTime

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.6

Syntax: Unsigned32

Read-write

The amount of time, in minutes, the MAC addresses learned on this interface will remain secure. A value of 0 indicates no aging is in effect.

snPortMacSecurityIntfContentMaxLockedMacAllowed

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.7

Syntax: Unsigned32

Read-write

The maximum number of secure MAC addresses that can be locked to this interface.

snPortMacSecurityIntfContentTotalMACs

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.8

Syntax: Unsigned32

Read-only

The total number of secure MAC addresses that are locked to this interface.

snPortMacSecurityIntfContentViolationCounts

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.9

Syntax: Unsigned32

Read-only

The total number of security violations that occurred on this interface.

snPortMacSecurityIntfContentRestrictTime

1.3.6.1.4.1.1991.1.1.3.24.1.1.3.1.10

Syntax: Unsigned32

Read-only

If snPortMacSecurityIntfContentViolationType is 1 (restrict), the value represents the number of seconds the interface will remain shut down when a violation occurs. In this case, a value of 0 indicates that the interface is permanently disabled. If snPortMacSecurityIntfContentViolationType is 0 (shutdown) or 2 (protect), the associated value will always be 5 seconds.
Parent topic: Port MAC Security