ieee8021XKayMacSecCapability
IEEE8021X-PAE-MIB ·
.1.3.111.2.802.1.1.15.1.6.1.1.12
Object
column
Enumeration
This object indicates whether MACsec is implemented, and if so
whether the implementation provides integrity protection only,
integrity and integrity with confidentiality, or integrity and
integrity with confidentiality with a selectable confidentiality offset
of 0, 30, or 50 octets (see IEEE Std 802.1AE).
'noMACsec' : the MACsec is not implemented.
'macSecCapability1' : capable in 'integrity protection without
confidentiality'.
'macSecCapability2' : capable in 'integrity protection without
confidentiality' and integrity protection and confidentiali
with a confidentiality offset 0',.
'macSecCapability3' : capable in 'integrity protection without
confidentiality' and integrity protection and confidentiali
with a confidentiality offset 0, 30 or 50'.
Context
- MIB
- IEEE8021X-PAE-MIB
- OID
.1.3.111.2.802.1.1.15.1.6.1.1.12- Type
- column
- Access
- readonly
- Status
- current
- Parent
- ieee8021XKayMkaEntry
- Table
- ieee8021XKayMkaTable
- Siblings
- 23
Syntax
Enumeration
Values & Constraints
Enumerated Values
0 | noMACsec |
1 | macSecCapability1 |
2 | macSecCapability2 |
3 | macSecCapability3 |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ieee8021XKayMkaActive This object will be 'true' if there is at least one MKA active
actor, transmitting MKPDUs | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.1 |
| ieee8021XKayAllowedFormGroup This object will be 'true' if the KaY will attempt to use
point-to-point CAKs to distribute a group CAK, if it is the
Key Server for the MKA instances for all the point-to-point C… | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.10 |
| ieee8021XKayCreateNewGroup This object is set 'true' if a new Group CAK is to be
distributed if the KaY is the Key Server for the MKA instances
for all the point-to-point CAKs. This object will be set 'fal… | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.11 |
| ieee8021XKayMacSecDesired This object will be set 'true' if the MKA participants desire
the use of MACsec to protect frames with this KaY. | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.13 |
| ieee8021XKayMacSecProtect The status of the MACsec protection function for this KaY.
'true' : then the status of the MACsec protection function will
be as object secyIfProtectFramesEnabl… | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.14 |
| ieee8021XKayMacSecReplayProtect The status of the MACsec replay protection function for this
KaY.
'true' : then the status of the MACsec replay protection
function will be as secyIfReplayProte… | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.15 |
| ieee8021XKayMacSecValidate The status of the MACsec validation function for this KaY.
'true' : then the status of the MACsec validation function
will be as secyIfValidateFrames object con… | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.16 |
| ieee8021XKayMacSecConfidentialityOffset The confidentiality protection offset options for the selected
cipher suite in the MACsec. If the cipher suite does not have
this capability, the configured value of the object w… | column | bytes Integer32 | .1.3.111.2.802.1.1.15.1.6.1.1.17 |
| ieee8021XKayMkaTxKN The key number assigned by the key server to the SAK currently
being used for transmission. This object will be 0 if MACsec
is not being used or the key number is not available y… | column | Ieee8021XMkaKN | .1.3.111.2.802.1.1.15.1.6.1.1.18 |
| ieee8021XKayMkaTxAN The AN assigned by the key server for use with the key number
for transmission.
This row pointer will point to an entry in the secyTxSATable
which the secyTxSCEncod… | column | SNMPv2-TCRowPointer | .1.3.111.2.802.1.1.15.1.6.1.1.19 |
| ieee8021XKayMkaAuthenticated This object will be 'true' if the principal actor,
i.e. the actor controlling the PAC or SecY associated with
the KaY, has determined that Controlled Port communication
communicat… | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.2 |
| ieee8021XKayMkaRxKN The key number assigned by the key server to the oldest SAK
currently being used for reception. It is the same as the key
number for transmission if a single SAK is currently in … | column | Ieee8021XMkaKN | .1.3.111.2.802.1.1.15.1.6.1.1.20 |
| ieee8021XKayMkaRxAN The AN assigned by the key server for use with the key number
for reception. It is the same as AN for transmission if a
single SAK is currently in use.
This row po… | column | SNMPv2-TCRowPointer | .1.3.111.2.802.1.1.15.1.6.1.1.21 |
| ieee8021XKayMkaSuspendFor Set by management to a non-zero number of seconds between 1
and MKA Suspension Limit to initiate a suspension (9.18) of
that duration (if the KaY's principal actor is the Key
Serv… | column | Integer32 | .1.3.111.2.802.1.1.15.1.6.1.1.22 |
| ieee8021XKayMkaSuspendOnRequest The status of the suspendOnRequest function for this KaY.
'true' : then the KaY's principal actor will initiate a
suspension if it is the Key Server and another participant
has re… | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.23 |
| ieee8021XKayMkaSuspendedWhile Read by management to determine if a suspension is in
progress and to discover the remaining duration of that
suspension. May be set directly to coordinate in-service
upgrades. | column | Integer32 | .1.3.111.2.802.1.1.15.1.6.1.1.24 |
| ieee8021XKayMkaSecured This object will be 'true' if the principal actor has
determined that communication should use MACsec. | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.3 |
| ieee8021XKayMkaFailed This object will be 'true' if the object
ieee8021XKayMkaSecured in
the same row is 'false' and MKA Life Time has elapsed since an
MKA participant was last created. | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.4 |
| ieee8021XKayMkaActorSCI The SCI assigned by the system to the port, applies to all the
port's MKA actors. | column | IEEE8021-SECY-MIBSecySCI | .1.3.111.2.802.1.1.15.1.6.1.1.5 |
| ieee8021XKayMkaActorsPriority The Key Server priority for all the port's MKA actors. Each
participant encodes a key server priority, an 8-bit integer, in
each MKPDU. | column | Ieee8021XMkaKeyServerPriority | .1.3.111.2.802.1.1.15.1.6.1.1.6 |
| ieee8021XKayMkaKeyServerPriority The priority of the elected Key Server through MKA in the CA. | column | Ieee8021XMkaKeyServerPriority | .1.3.111.2.802.1.1.15.1.6.1.1.7 |
| ieee8021XKayMkaKeyServerSCI The SCI for key server for the MKA principal actor. The length
of this object is 0 if there is no principal actor, or that
actor has no live peers. This object matches the
ieee8… | column | IEEE8021-SECY-MIBSecySCI | .1.3.111.2.802.1.1.15.1.6.1.1.8 |
| ieee8021XKayAllowedJoinGroup This object will be 'true' if the KaY will accept Group CAKs
distributed by MKA protocol. | column | SNMPv2-TCTruthValue | .1.3.111.2.802.1.1.15.1.6.1.1.9 |