IEEE8021-SECY-MIB Table View

Table-centric layout grouping table, row, and column objects.

Tables
17
Rows
17
Columns
117
.1.0.8802.1.1.3.1.1.1 · 1 row entry · 17 columns
A table with an entry for each service interface in this system
with MAC Security capability, i.e. for each SecY.
          
The configured value of writable objects in each table entry
shall be stored in persistent memory and remain unchanged across
a re-initialization of the system's management entity.
secyIfEntry entry .1.0.8802.1.1.3.1.1.1.1
A table entry with service information for a particular SecY.
Indexes
secyIfInterfaceIndex
Column Syntax OID
secyIfInterfaceIndex
An interface index, aligned with ifIndex in the
ifTable, pointing to the SecY's Controlled Port.
IF-MIBInterfaceIndex
Textual Convention: IF-MIBInterfaceIndex Integer32
Type Constraints:
range: 1..2147483647
.1.0.8802.1.1.3.1.1.1.1.1
secyIfMaxPeerSCs
The maximum number of peer SCs for this SecY.
security connectionsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.1.1.1.2
secyIfRxMaxKeys
The maximum number of keys in simultaneous use for
reception for this SecY.
keysSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.1.1.1.3
secyIfTxMaxKeys
The maximum number of keys in simultaneous use for
transmission for this SecY.
keysSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.1.1.1.4
secyIfProtectFramesEnable
Enables or disables protection of transmitted frames.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.1.1.5
secyIfValidateFrames
Controls validation of received frames.

disabled(1) : disable validation, remove SecTAGs and ICVs (if
present) from received frames.
check(2) : enable validation, do not discard invalid …
Enumerationr/w
Enumerated Values:
1disabled
2check
3strict
4null
.1.0.8802.1.1.3.1.1.1.1.6
secyIfReplayProtectEnable
Enables or disables replay protection.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.1.1.7
secyIfReplayProtectWindow
The replay protection window size.
PacketsSNMPv2-SMIUnsigned32r/w
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.1.1.1.8
secyIfCurrentCipherSuite
The Cipher Suite currently used by this SecY,
identified by the secyCipherSuiteTable entry index.
Should be read-only if secyIfCipherTable implemented.
SNMPv2-SMIUnsigned32r/w
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.1.1.1.9
secyIfAdminPt2PtMAC
Controls the value of operPointToPointMAC (secyOperPt2PtMAC)
reported to the user(s) of this SecY's Controlled Port.

forceTrue(1) : operPointToPointMAC is True, regardless of the
configu…
Enumerationr/w
Enumerated Values:
1forceTrue
2forceFalse
3auto
.1.0.8802.1.1.3.1.1.1.1.10
secyIfOperPt2PtMAC
Reflects the current service connectivity to be assumed by the
user(s) of the SecY's Controlled Port.

true(1) : connectivity is to at most one other system.
false(2) : connectivity is to one or more oth…
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.1.1.11
secyIfIncludeSCIEnable
Mandates inclusion of an explicit SCI in the SecTAG
when transmitting protected frames.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.1.1.12
secyIfUseESEnable
Enables use of the ES bit in the SecTAG when
transmitting protected frames.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.1.1.13
secyIfUseSCBEnable
Enables use of the SCB bit in the SecTAG when
transmitting protected frames.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.1.1.14
secyIfSCI
The SCI for the SecY's default traffic class.
SecySCI
Textual Convention: SecySCI OctetString
Type Constraints:
range: 8
.1.0.8802.1.1.3.1.1.1.1.15
secyIfIncludingSCI
True if an explicit SCI is included in the SecTAG when
transmitting protected frames.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.1.1.16
secyIfMaxTSCs
The maximum number of transmit SCs for this SecY.
security connectionsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.1.1.1.17
.1.0.8802.1.1.3.1.1.2 · 1 row entry · 7 columns
A table with an entry for each SecY's transmit SC.
secyTxSCEntry entry .1.0.8802.1.1.3.1.1.2.1
An entry with transmit SC information for a SecY.
Indexes
secyIfInterfaceIndex
Column Syntax OID
secyTxSCI
The SCI for the SecY's transmit SC.
SecySCI
Textual Convention: SecySCI OctetString
Type Constraints:
range: 8
.1.0.8802.1.1.3.1.1.2.1.1
secyTxSCState
The transmitting state of the SecY's transmit SC.
inUse(1) : one or more SAs are in use.
notInUse(2) : no SAs are in use.
Enumeration
Enumerated Values:
1inUse
2notInUse
.1.0.8802.1.1.3.1.1.2.1.2
secyTxSCEncodingSA
The SA currently used to encode the SecTAG for frames awaiting
transmission. The row pointer will point to an entry in the
secyTxSATable. If no such information is available, the value shall
be the OBJECT IDENTIFIER …
SNMPv2-TCRowPointer
Textual Convention: SNMPv2-TCRowPointer ObjectIdentifier
.1.0.8802.1.1.3.1.1.2.1.3
secyTxSCEncipheringSA deprecated
The SA currently used to encipher frames for transmission.
The row pointer will point to an entry in the secyTxSATable.
If no such information is available, the value shall be the
OBJECT IDENTIFIER { 0 0 }.
SNMPv2-TCRowPointer
Textual Convention: SNMPv2-TCRowPointer ObjectIdentifier
.1.0.8802.1.1.3.1.1.2.1.4
secyTxSCCreatedTime
The system time when this transmitting SC was created.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.2.1.5
secyTxSCStartedTime
The system time when this transmitting SC last started
transmitting MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.2.1.6
secyTxSCStoppedTime
The system time when this transmitting SC last stopped
transmitting MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.2.1.7
.1.0.8802.1.1.3.1.1.3 · 1 row entry · 8 columns
A table with an entry for each transmit SA for each of 
the system's SecYs.
secyTxSAEntry entry .1.0.8802.1.1.3.1.1.3.1
An entry for a transmit SA.
Indexes
secyIfInterfaceIndex secyTxSA
Column Syntax OID
secyTxSA
The association number (AN) for this transmit SA.
SecyAN
Textual Convention: SecyAN Unsigned32
Type Constraints:
range: 0..3
.1.0.8802.1.1.3.1.1.3.1.1
secyTxSAState
The current status of the transmitting SA.

inUse(1) : this SA is in use.
notInUse(2) : this SA is not in use.
Enumeration
Enumerated Values:
1inUse
2notInUse
.1.0.8802.1.1.3.1.1.3.1.2
secyTxSANextPN
The next packet number (PN) for this SA.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.1.3.1.3
secyTxSAConfidentiality
True if the SA provides confidentiality as well as
integrity for transmitted frames.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.3.1.4
secyTxSASAKUnchanged deprecated
A reference to an SAK that is unchanged for the life
of the transmitting SA.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.3.1.5
secyTxSACreatedTime
The system time when this transmit SA was created.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.3.1.6
secyTxSAStartedTime
The system time when this transmit SA last started
transmitting MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.3.1.7
secyTxSAStoppedTime
The system time when this transmit SA last stopped
transmitting MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.3.1.8
.1.0.8802.1.1.3.1.1.4 · 1 row entry · 6 columns
A table for the system's SecY's receive SCs.
secyRxSCEntry entry .1.0.8802.1.1.3.1.1.4.1
An entry for one of the SCs used by one of the system's
SecY's to receive protected frames.
Indexes
secyIfInterfaceIndex secyRxSCI
Column Syntax OID
secyRxSCI
The SCI for the receive SC.
SecySCI
Textual Convention: SecySCI OctetString
Type Constraints:
range: 8
.1.0.8802.1.1.3.1.1.4.1.1
secyRxSCState
The state of the receive SC.

inUse(1) : one or more SAs for this SC are in use.
notInUse(2) : no SAs for this SC is in use.
Enumeration
Enumerated Values:
1inUse
2notInUse
.1.0.8802.1.1.3.1.1.4.1.2
secyRxSCCurrentSA deprecated
The current receiving association number of the SC in use.
The row pointer will point to an entry in the secyRxSATable. If no
such information can be identified, the value of this object shall
be the OBJECT IDENTIFIE…
SNMPv2-TCRowPointer
Textual Convention: SNMPv2-TCRowPointer ObjectIdentifier
.1.0.8802.1.1.3.1.1.4.1.3
secyRxSCCreatedTime
The system time when this receiving SC was created.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.4.1.4
secyRxSCStartedTime
The system time when this receiving SC last started
receiving MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.4.1.5
secyRxSCStoppedTime
The system time when this receiving SC last stopped
receiving MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.4.1.6
.1.0.8802.1.1.3.1.1.5 · 1 row entry · 11 columns
A table with entries for the system's receive SAs.
secyRxSAEntry entry .1.0.8802.1.1.3.1.1.5.1
An entry for one of the SAs used by one of the system's
SecY's to receive protected frames.
Indexes
secyIfInterfaceIndex secyRxSCI secyRxSA
Column Syntax OID
secyRxSA
The association number (AN) for this receive SA.
SecyAN
Textual Convention: SecyAN Unsigned32
Type Constraints:
range: 0..3
.1.0.8802.1.1.3.1.1.5.1.1
secyRxSAState
The current state for this receive SA.
Enumeration
Enumerated Values:
1inUse
2notInUse
.1.0.8802.1.1.3.1.1.5.1.2
secyRxSANextPN deprecated
One more than the highest PN conveyed in the SecTAG of a frame
received on this SA that has been successfully validated (if
validateFrames has not been disabled). Deprecated: use
secyRxSANextXPN for both 32-bit PN an…
SNMPv2-SMIUnsigned32r/w
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.1.5.1.3
secyRxSASAKUnchanged deprecated
A reference to an SAK that is unchanged for the life
of the receiving SA.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.5.1.4
secyRxSACreatedTime
The system time when this receiving SA was created.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.5.1.5
secyRxSAStartedTime
The system time when this receiving SA last started
receiving MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.5.1.6
secyRxSAStoppedTime
The system time when this receiving SA last stopped
receiving MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.5.1.7
secyRxSANextXPN
One more than the highest PN conveyed in the SecTAG of
successfully validates frames received on this SA.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.1.5.1.8
secyRxSALowestXPN
The lowest acceptable packet number. A received frame
with a lower PN is discarded if
secyIfReplayProtectEnable is enabled.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.1.5.1.9
secyRxSAKeyIdentifier
The Key Identifier (KI) for the SAK for this SA.
OctetString
Constraints:
range: 1-32
.1.0.8802.1.1.3.1.1.5.1.10
secyRxSASSCI
The SSCI for this SA, 0 if an XPN Cipher Suite is not
being used.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.0.8802.1.1.3.1.1.5.1.11
.1.0.8802.1.1.3.1.1.6 · 1 row entry · 9 columns
A table of the system's Cipher Suite capabilities, which can differ
by Cipher Suite implementation, so there can be more than one entry 
with the same secyCipherSuiteId. The secyIfCipherTable lists 
available entries by SecY, avoiding the need for remote network 
management to  write objects or create rows in this table. Any 
configured values shall be stored in persistent memory and remain 
unchanged across a re-initialization of the management system.
secyCipherSuiteEntry entry .1.0.8802.1.1.3.1.1.6.1
An entry for a Cipher Suite implementation.
Indexes
secyCipherSuiteIndex
Column Syntax OID
secyCipherSuiteIndex
The CipherSuiteTable entry index.
Unsigned32
Constraints:
range: 1-4294967295
.1.0.8802.1.1.3.1.1.6.1.1
secyCipherSuiteId
A unique 64-bit (EUI-64) identifier for the Cipher
Suite.
OctetStringr/w
Constraints:
range: 8-8
.1.0.8802.1.1.3.1.1.6.1.2
secyCipherSuiteName
The Cipher Suite Name, 128 octets or fewer.
OctetStringr/w
Constraints:
range: 1-128
.1.0.8802.1.1.3.1.1.6.1.3
secyCipherSuiteCapability
Cipher Suite implementation capability information.

integrity(0) : integrity protection.
confidentiality(1) : confidentiality protection.
offsetConfidentiality(2) : offset confidentialit…
Bitsr/w
Enumerated Values:
0integrity
1confidentiality
2offsetConfidentiality
.1.0.8802.1.1.3.1.1.6.1.4
secyCipherSuiteProtection deprecated
The secyIfCipherSuite table should be used instead of this object
to allow per SecY Cipher Suite configuration.

The options provided by this control are a subset of those
defined by the object secyCipher…
Bitsr/w
Enumerated Values:
0integrity
1confidentiality
2offsetConfidentiality
.1.0.8802.1.1.3.1.1.6.1.5
secyCipherSuiteProtectionOffset deprecated
The confidentiality protection offset options of this cipher suite.
Options should depend on the choice of secyCipherSuiteProtection.
If the value of secyCipherSuiteProtection only turns on integrity
bit, users can o…
bytesInteger32r/w
Constraints:
range: 0-0
range: 30-30
range: 50-50
.1.0.8802.1.1.3.1.1.6.1.6
secyCipherSuiteDataLengthChange
True if cipher suite changes the length of the data.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.6.1.7
secyCipherSuiteICVLength
The length of the integrity check value (ICV) field.
octetsUnsigned32r/w
Constraints:
range: 8-16
.1.0.8802.1.1.3.1.1.6.1.8
secyCipherSuiteRowStatus
The secyIfCipherTable (if implemented) avoids the need for
network manager creation of entries in the secyCipherSuiteTable,
and RowStatus should always be valid(1), with any per SecY
unavailability indicated by an abse…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.0.8802.1.1.3.1.1.6.1.9
.1.0.8802.1.1.3.1.1.7 · 1 row entry · 3 columns
A table with an entry for the Cipher Suite capabilities
implemented for each SecY in this system, providing per SecY
control of Cipher Suite use.
          
The configured value of writable objects in each table entry
shall be stored in persistent memory and remain unchanged across
a re-initialization of the system's management entity.
secyIfCipherEntry entry .1.0.8802.1.1.3.1.1.7.1
A table entry with Cipher Suite control for a SecY.
Indexes
secyIfInterfaceIndex secyCipherSuiteIndex
Column Syntax OID
secyIfCipherImplemented
True if the Cipher Suite implementation can be used by
this SecY (if secIfCipherEnablUse is true).
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.7.1.1
secyIfCipherEnableUse
Enables use of the Cipher Suite by this SecY.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.7.1.2
secyIfCipherRqConfidentiality
True if confidentiality protection (without an offset)
is required if this Cipher Suite is used.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.7.1.3
.1.0.8802.1.1.3.1.1.8 · 1 row entry · 2 columns
The Traffic Class Table for each SecY in this system.
          
The configured value of writable objects in each table entry
shall be stored in persistent memory and remain unchanged across
a re-initialization of the system's management entity.
secyIfTCEntry entry .1.0.8802.1.1.3.1.1.8.1
A table entry providing Traffic Class selection for a
given SecY and User Priority.
Indexes
secyIfInterfaceIndex secyIfTCUserPriority
Column Syntax OID
secyIfTCUserPriority
One of the possible User Priority values for a frame.
Integer32
Constraints:
range: 0-7
.1.0.8802.1.1.3.1.1.8.1.1
secyIfTCTrafficClass
The Traffic Class for this SecY and User Priority, as
transmitted in the four most significant bits of the Port
Identifier component of the SCI of protected frames.
Integer32r/w
Constraints:
range: 0-7
.1.0.8802.1.1.3.1.1.8.1.2
.1.0.8802.1.1.3.1.1.9 · 1 row entry · 2 columns
The Access Priority Table for each SecY in this system.
          
The configured value of writable objects in each table entry
shall be stored in persistent memory and remain unchanged across
a re-initialization of the system's management entity.
secyIfAPEntry entry .1.0.8802.1.1.3.1.1.9.1
A table entry selecting the Access Priority Code Point
for a given SecY and User Priority Code Point.
Indexes
secyIfInterfaceIndex secyIfAPUserPCP
Column Syntax OID
secyIfAPUserPCP
A User Priority Code Point.
Integer32
Constraints:
range: 0-15
.1.0.8802.1.1.3.1.1.9.1.1
secyIfAPAccessPCP
The Access Priority Code Point for this SecY and User
PCP. Defaults to the User PCP value.
Integer32r/w
Constraints:
range: 0-15
.1.0.8802.1.1.3.1.1.9.1.2
.1.0.8802.1.1.3.1.1.10 · 1 row entry · 6 columns
A table of entries for each SecY's traffic class SCs.
secyTSCEntry entry .1.0.8802.1.1.3.1.1.10.1
An entry with transmit SC information for one of the
system's SecYs and one of its traffic classes.
Indexes
secyIfInterfaceIndex secyTSCI
Column Syntax OID
secyTSCI
The SCI for the transmit SC for this SecY and
traffic class.
SecySCI
Textual Convention: SecySCI OctetString
Type Constraints:
range: 8
.1.0.8802.1.1.3.1.1.10.1.1
secyTSCState
The state of the transmit SC for this SecY and traffic class.

inUse(1) : one or more SAs for the traffic class SC are in use.
notInUse(2) : no SAs for the traffic class SC are in use.
Enumeration
Enumerated Values:
1inUse
2notInUse
.1.0.8802.1.1.3.1.1.10.1.2
secyTSCEncodingSA
The SA currently used to encode the SecTAG for frames awaiting
transmission. The row pointer will point to an entry in the
secyTxSATable. If no such information is available, the value shall
be the OBJECT IDENTIFIER …
SNMPv2-TCRowPointer
Textual Convention: SNMPv2-TCRowPointer ObjectIdentifier
.1.0.8802.1.1.3.1.1.10.1.3
secyTSCCreatedTime
The system time when this transmitting SC was created.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.10.1.4
secyTSCStartedTime
The system time when this transmitting SC last started
transmitting MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.10.1.5
secyTSCStoppedTime
The system time when this transmitting SC last stopped
transmitting MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.10.1.6
.1.0.8802.1.1.3.1.1.11 · 1 row entry · 9 columns
A table with an entry for each transmit SA for each of 
the system's SecYs.
secyTSAEntry entry .1.0.8802.1.1.3.1.1.11.1
An entry for a transmit SA.
Indexes
secyIfInterfaceIndex secyTSCI secyTSA
Column Syntax OID
secyTSA
The association number (AN) for this transmit SA.
SecyAN
Textual Convention: SecyAN Unsigned32
Type Constraints:
range: 0..3
.1.0.8802.1.1.3.1.1.11.1.1
secyTSAState
The current status of the transmit SA.

inUse(1) : this SA is in use.
notInUse(2) : this SA is not in use.
Enumeration
Enumerated Values:
1inUse
2notInUse
.1.0.8802.1.1.3.1.1.11.1.2
secyTSANextXPN
The next packet number (PN) for this SA.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.1.11.1.3
secyTSAConfidentiality
True if the SA provides confidentiality as well as
integrity for transmitted frames.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.0.8802.1.1.3.1.1.11.1.4
secyTSAKeyIdentifier
The Key Identifier (KI) for the SAK for this SA.
OctetString
Constraints:
range: 1-32
.1.0.8802.1.1.3.1.1.11.1.5
secyTSASSCI
The SSCI for this SA, 0 if an XPN Cipher Suite is not
being used.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.0.8802.1.1.3.1.1.11.1.6
secyTSACreatedTime
The system time when this transmit SA was created.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.11.1.7
secyTSAStartedTime
The system time when this transmit SA last started
transmitting MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.11.1.8
secyTSAStoppedTime
The system time when this transmit SA last stopped
transmitting MACsec frames.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.0.8802.1.1.3.1.1.11.1.9

secyTxSAStatsTable

table deprecated
.1.0.8802.1.1.3.1.2.1 · 1 row entry · 2 columns
A table of statistics for each transmit SA for each of 
the system's SecYs.
secyTxSAStatsEntry entry .1.0.8802.1.1.3.1.2.1.1
An entry with statistics for a transmit SA. The AN that
identifies an SA (for a given SC) and this corresponding entry
can be reused. When creating the SA and before (re)using the
entry, the SA counters are (re)set to…
Indexes
No indexes recorded
Column Syntax OID
secyTxSAStatsProtectedPkts deprecated
The number of integrity protected but not encrypted
packets for this transmit SA. Zero if
secyTxSAConfidentiality is True, and one less than
secyTxSANextPN otherwise.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.2.1.1.1
secyTxSAStatsEncryptedPkts deprecated
The number of integrity protected and encrypted packets
for this transmit SA. Zero if secyTxSAConfidentiality
is False, and one less than secyTxSANextPN otherwise.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.2.1.1.2
.1.0.8802.1.1.3.1.2.2 · 1 row entry · 4 columns
A table of statistics for each SecY's transmit SC.
secyTxSCStatsEntry entry .1.0.8802.1.1.3.1.2.2.1
An entry containing counts for a transmit SC. SA counters are
reset when the SA's AN is reused, so these SC counts are
a summation for all current and prior SAs belonging to the SC.
Indexes
No indexes recorded
Column Syntax OID
secyTxSCStatsProtectedPkts
The number of integrity protected but not encrypted
packets for this transmit SC.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.2.1.1
secyTxSCStatsEncryptedPkts
The number of integrity protected and encrypted packets
for this transmit SC.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.2.1.4
secyTxSCStatsOctetsProtected deprecated
The number of plain text octets that are integrity
protected but not encrypted for this transmit SC.
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.2.1.10
secyTxSCStatsOctetsEncrypted deprecated
The number of plain text octets that are integrity protected
and encrypted on the transmit SC.
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.2.1.11

secyRxSAStatsTable

table deprecated
.1.0.8802.1.1.3.1.2.3 · 1 row entry · 5 columns
A table that contains the statistics objects for each
receiving SA in the MAC security entity.
secyRxSAStatsEntry entry .1.0.8802.1.1.3.1.2.3.1
An entry with statistics for a receive SA. The AN that
identifies an SA (for a given SC) and this corresponding entry
can be reused. When creating the SA and before (re)using the
entry, the SA counters are (re)set to …
Indexes
No indexes recorded
Column Syntax OID
secyRxSAStatsUnusedSAPkts deprecated
For this SA which is not currently in use, the number of
received, unencrypted, packets with secyValidateFrames
not in the strict mode.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.2.3.1.1
secyRxSAStatsNoUsingSAPkts deprecated
For this SA which is not currently in use, the number of
received packets that have been discarded, and have
either the packets encrypted or secyValidateFrames set to
strict mode.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.2.3.1.4
secyRxSAStatsNotValidPkts deprecated
For this SA, the number discarded packets with the
condition that the packets are not valid and one of the
following conditions are true: either secyValidateFrames in
strict mode or the packets encrypted.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.2.3.1.13
secyRxSAStatsInvalidPkts deprecated
For this SA, the number of packets with the condition
that the packets are not valid and secyValidateFrames is in
check mode.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.2.3.1.16
secyRxSAStatsOKPkts deprecated
For this SA, the number of validated packets.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.0.8802.1.1.3.1.2.3.1.25
.1.0.8802.1.1.3.1.2.4 · 1 row entry · 10 columns
A table of statistics for each receive SC for each of
the system's SecYs.
secyRxSCStatsEntry entry .1.0.8802.1.1.3.1.2.4.1
An entry containing counts for a receive SC. SA counters are
reset when the SA's AN is reused, so these SC counts are a
summation for all current and prior SAs belonging to the SC.
Indexes
No indexes recorded
Column Syntax OID
secyRxSCStatsUnusedSAPkts deprecated
The sum of secyRxSAStatsUnusedSAPkts counts for all
current and prior SAs belonging to this SC.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.1
secyRxSCStatsNoUsingSAPkts deprecated
The sum of secyRxSAStatsNoUsingSAPkts counts for all
current and prior SAs belonging to this SC.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.2
secyRxSCStatsLatePkts
The number of packets discarded, for this SC, because the
the received PN was lower than the lowest acceptable PN
(secyRxSALowestXPN) and secyIfReplayProtectEnable was true.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.3
secyRxSCStatsNotValidPkts
The number of packets discarded, for this SC, because validation
failed and secyIfvalidateFrames was 'strict' or the data was
encrypted (so the original frame could not be recovered).
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.4
secyRxSCStatsInvalidPkts
The number of packets, for this SC, that failed validation but
could be received because secyIfvalidateFrames was 'check' and
the data was not encrypted (so the original frame could be
recovered).
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.5
secyRxSCStatsDelayedPkts
The number of received packets, for this SC, with PN lower
than the lowest acceptable PN (secyRxSALowestXPN) and
secyIfReplayProtectEnable false.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.6
secyRxSCStatsUncheckedPkts
The number of packets received for this SC, while
secyValidateFrames was 'disabled'.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.7
secyRxSCStatsOKPkts
The number of packets received for this SC
successfully validated and within the replay window.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.8
secyRxSCStatsOctetsValidated deprecated
The number of plaintext octets recovered from packets
that were integrity protected but not encrypted.
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.9
secyRxSCStatsOctetsDecrypted deprecated
The number of plaintext octets recovered from packets
that were integrity protected and encrypted.
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.4.1.10
.1.0.8802.1.1.3.1.2.5 · 1 row entry · 14 columns
A table of statistics for each of the system's SecYs.
secyStatsEntry entry .1.0.8802.1.1.3.1.2.5.1
An entry containing counts for a SecY.
Indexes
No indexes recorded
Column Syntax OID
secyStatsTxUntaggedPkts
The number of packets transmitted without a SecTAG
because secyProtectFramesEnable is configured false.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.1
secyStatsTxTooLongPkts
The number of transmit packets discarded because their
length is greater than the ifMtu of the Common Port.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.2
secyStatsRxUntaggedPkts
The number of packets without the MACsec tag (SecTAG)
received while secyValidateFrames was not 'strict'.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.3
secyStatsRxNoTagPkts
The number of received packets without a SecTAG
discarded because secyValidateFrames was 'strict'.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.4
secyStatsRxBadTagPkts
The number of received packets discarded with an
invalid SecTAG, zero value PN, or invalid ICV.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.5
secyStatsRxUnknownSCIPkts deprecated
The number of received packets with an unknown SCI.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.6
secyStatsRxNoSCIPkts deprecated
The number of discarded packets with an unknown SCI.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.7
secyStatsRxOverrunPkts
The number of packets discarded because they exceeded
cryptographic performance capabilities.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.8
secyStatsRxNoSAPkts
The number of received packets with an unknown SCI
or for an unused SA.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.9
secyStatsRxNoSAErrorPkts
The number of packets discarded because the received
SCI is unknown or the SA is not in use.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.10
secyStatsTxOctetsProtected
The number of plain text octets integrity protected
but not encrypted in transmitted frames.
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.11
secyStatsTxOctetsEncrypted
The number of plain text octets integrity protected
and encrypted in transmitted frames.
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.12
secyStatsRxOctetsValidated
The number of plaintext octets recovered from packets
that were integrity protected but not encrypted.
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.13
secyStatsRxOctetsDecrypted
The number of plaintext octets recovered from packets
that were integrity protected and encrypted.
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.5.1.14
.1.0.8802.1.1.3.1.2.12 · 1 row entry · 2 columns
A table of statistics for each SecY's transmit SCs.
secyTSCStatsEntry entry .1.0.8802.1.1.3.1.2.12.1
A entry containing counts for a transmit SC, since SA counters
are reset when the SA's AN is reused these are a summation for
all current and prior SAs belonging to the SC.
Indexes
No indexes recorded
Column Syntax OID
secyTSCStatsProtectedPkts
The number of integrity protected but not encrypted packets
for this transmit SC.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.12.1.1
secyTSCStatsEncryptedPkts
The number of integrity protected and encrypted packets for
this transmit SC.
PacketsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.0.8802.1.1.3.1.2.12.1.2