H3C-PORT-SECURITY-MIB Table View

This table defines the security status of each secure port.
Each port can have a number of authorised MAC addresses, and these are
stored in the h3cSecureAddressTable.

h3cSecurePortEntry row .1.3.6.1.4.1.2011.10.2.26.1.2.1.1

There is a row in this table for each secure port, and
allows repeater ports to be configured for security on a per port basis.
It is indexed using the object ifIndex in RFC1213-MIB.

Indexes

RFC1213-MIBifIndex

Column	Syntax	OID
h3cSecurePortMode Determines the learning and security modes of the port. See h3cSecureNeedToKnowMode and h3cSecureIntrusionAction to configure Need To Know and Intrusion Action on each port. (When in a learning mode, h3cSecureNumberAddr…	Enumerationr/w Enumerated Values: 1 noRestrictions 2 continuousLearning 3 autoLearn 4 secure 5 userLogin 6 userLoginSecure 7 userLoginWithOUI 8 macAddressWithRadius 9 macAddressOrUserLoginSecure 10 macAddressElseUserLoginSecure 11 userLoginSecureExt 12 macAddressOrUserLoginSecureExt 13 macAddressElseUserLoginSecureExt 14 macAddressAndUserLoginSecure 15 macAddressAndUserLoginSecureExt	.1.3.6.1.4.1.2011.10.2.26.1.2.1.1.1
h3cSecureNeedToKnowMode Attribute to determine which frames are to be forwarded to this port intact. 1 - Need To Know is not available. 2 - All frames. 3 - Frames addressed to the authorised devices only. 4 - Frames addressed to…	Enumerationr/w Enumerated Values: 1 notAvailable 2 disabled 3 needToKnowOnly 4 needToKnowWithBroadcastsAllowed 5 needToKnowWithMulticastsAllowed 6 permanentNeedToKnowOnly 7 permanentNeedToKnowWithBroadcastsAllowed 8 permanentNeedToKnowWithMulticastsAllowed	.1.3.6.1.4.1.2011.10.2.26.1.2.1.1.2
h3cSecureIntrusionAction Attribute to determine the action if an unauthorised device transmits on this port.	Enumerationr/w Enumerated Values: 1 notAvailable 2 noAction 3 disablePort 4 disablePortTemporarily 5 allowDefaultAccess 6 blockMacAddress	.1.3.6.1.4.1.2011.10.2.26.1.2.1.1.3
h3cSecureNumberAddresses The maximum number of addresses that the port can learn or store. Reducing this number may cause some addresses to be deleted. This value is set by the user and cannot be automatically changed by the agent. The maximum…	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.10.2.26.1.2.1.1.4
h3cSecureNumberAddressesStored The number of addresses that are currently in the AddressTable for this port. If this object has the same value as h3cSecureNumberAddresses, then no more addresses can be authorised on this port. The number will not i…	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.10.2.26.1.2.1.1.5
h3cSecureMaximumAddresses This indicates the maximum value that h3cSecureNumberAddresses can be set to. It is dependent on the resources available so may change, eg. if resources are shared between ports, then this value can both increase and d…	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.10.2.26.1.2.1.1.6

This table stores the MAC addresses assigned to each
port.  This table can be written to by the agent as well as the
management station.

h3cSecureAddressEntry row .1.3.6.1.4.1.2011.10.2.26.1.2.2.1

This table allows multiple addresses to be assigned to each
secure port. It is indexed using the objects ifIndex,
h3cSecureAddrMAC and h3cSecureVlanID.

Indexes

RFC1213-MIBifIndex h3cSecureAddrMAC h3cSecureAddrVlanID

Column	Syntax	OID
h3cSecureAddrMAC The MAC address of a station assigned to this port. This is the second index into the h3cSecureAddressTable.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.2011.10.2.26.1.2.2.1.1
h3cSecureAddrVlanID The Vlan ID associate with the port and the MAC address. This is the third index into the h3cSecureAddressTable.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.10.2.26.1.2.2.1.2
h3cSecureAddrMACStatus The state of the mac address assigned to this port. addressBlackhole (1) the mac address is a blackhole address, Each packet whose source address is equal to this address will be dropped by the ag…	Enumerationr/w Enumerated Values: 1 addressBlackhole 2 addressUserConfig 3 addressDot1xAuth 4 addressRALM	.1.3.6.1.4.1.2011.10.2.26.1.2.2.1.3
h3cSecureAddrRowStatus This manages the creation and deletion or rows, and shows the current status of the indexed MAC address. This object has the following values. active(1) The indexed MAC address is authorised on th…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.10.2.26.1.2.2.1.4

This table stores the OUI values for OUI based
authentication.

h3cSecureOUIEntry row .1.3.6.1.4.1.2011.10.2.26.1.2.3.1

This is a row in the h3cSecureOUITable.

Indexes

h3cSecureOUIIndex

Column	Syntax	OID
h3cSecureOUIIndex The index number. This is the first index into the h3cSecureOUITable.	Integer32 Constraints: range: 1-1024	.1.3.6.1.4.1.2011.10.2.26.1.2.3.1.1
h3cSecureOUI The OUI value for an authorised device.	OctetStringr/w Constraints: range: 3-3	.1.3.6.1.4.1.2011.10.2.26.1.2.3.1.2
h3cSecureOUIRowStatus This manages the creation and deletion of rows, and shows the current status of the entry. active(1) The indexed OUI value is authorised. notInService(2) Not Supported. notReady(3) Not Supported…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.10.2.26.1.2.3.1.3

This table stores the elements of binding rules include the
MAC addresses, the IP address and the port.  Only the frame exactly
matching the binding rules can be forwarded.  This table can be
written to by the agent as well as the management station.

h3cSecureBindingEntry row .1.3.6.1.4.1.2011.10.2.26.1.2.4.1

This table allows multiple binding rules. It is indexed using the object
h3cSecureBindingIndex.

Indexes

h3cSecureBindingIndex

Column	Syntax	OID
h3cSecureBindingIndex The index number. This is the first index into the h3cSecureBindingTable.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.10.2.26.1.2.4.1.1
h3cSecureBindingPort The port number of the port bound with the IP address and the MAC address.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.10.2.26.1.2.4.1.2
h3cSecureBindingAddrMAC The MAC address bound with the port and the IP address.	SNMPv2-TCMacAddressr/w Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.2011.10.2.26.1.2.4.1.3
h3cSecureBindingAddrIp The IP address bound with the port and the MAC address.	RFC1155-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.10.2.26.1.2.4.1.4
h3cSecureBindingRowStatus This manages the creation and deletion or rows, and shows status of the entry. This object has the following values. active(1) The indexed MAC address is authorised on this port. notInService(2) …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.10.2.26.1.2.4.1.5

Table of port assignment management information about authorised user.

h3cSecureAssignEntry row .1.3.6.1.4.1.2011.10.2.26.1.2.5.1

An entry (conceptual row) representing information about port assignment
about authorised user.

Indexes

RFC1213-MIBifIndex

Column	Syntax	OID
h3cSecureAssignEnable The user-based port configuration control. Setting this attribute TRUE causes the port to be configured with any configuration parameters supplied by the authentication server. Setting this attribute to FALSE causes any…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.10.2.26.1.2.5.1.1
h3cSecureVlanAssignment The VLAN membership assigned to the port for the authorised user. This contains the actual value received from the authentication server. This object will contain a null value if there is no user authorised to access th…	OctetString Constraints: range: 0-255	.1.3.6.1.4.1.2011.10.2.26.1.2.5.1.2