cpsIfPortSecurityEnable
CISCO-PORT-SECURITY-MIB ·
.1.3.6.1.4.1.9.9.315.1.2.1.1.1
Object
Indicates whether the port security feature is enabled on an interface. Upon setting this object to 'true', the source MAC address that does not match any cpsSecureMacAddress for the given interface in cpsSecureMacAddressTable and the value of cpsIfCurrentSecureMacAddrCount is equal to cpsIfMaxSecureMacAddr, is considered as port security violation and an action as specified in cpsIfViolationAction is taken on the interface. The value of this object has no effect when the value of cpsGlobalPortSecurityEnable is set to 'false'.
Context
- MIB
- CISCO-PORT-SECURITY-MIB
- OID
.1.3.6.1.4.1.9.9.315.1.2.1.1.1- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- cpsIfConfigEntry
- Table
- cpsIfConfigTable
- Siblings
- 17
Values & Constraints
Type Values
1 | true |
2 | false |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| cpsIfSecureLastMacAddress This object indicates the last MAC
address that is seen on this interface.
This object is also used as a variable in
the cpsSecureMacAddrViolation notification
to … | column | SNMPv2-TCMacAddress | .1.3.6.1.4.1.9.9.315.1.2.1.1.10 |
| cpsIfClearSecureAddresses deprecated Set to 'true' to delete all secure addresses on
this interface. Setting this object to 'false'
has no effect. This object always returns 'false'
when read. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.315.1.2.1.1.11 |
| cpsIfUnicastFloodingEnable Setting this object to true(1) will configure
the interface not to block unicast flooded
traffic when the secure address count reaches the
threshold.
Setting this object to fals… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.315.1.2.1.1.12 |
| cpsIfShutdownTimeout The interval in which the cpsIfPortSecurityStatus
may remain in shutdown(3). After the expiration of
the time, all the security configuration of this
port is re-installed and the… | column | minutes SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.9.9.315.1.2.1.1.13 |
| cpsIfClearSecureMacAddresses This objects allows the user to delete
secure MAC addresses based on the type specified. | column | ClearSecureMacAddrType | .1.3.6.1.4.1.9.9.315.1.2.1.1.14 |
| cpsIfStickyEnable Set to 'true' to enable and 'false' to
disable Sticky port security feature on this
interface. Enabling this feature allows the
device to secure learned MAC addresses on this
in… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.315.1.2.1.1.15 |
| cpsIfInvalidSrcRateLimitEnable Set to 'true' to enable and 'false' to disable
rate limiting for invalid source MAC addresses
received on this interface. Enabling this feature
will help to rate limit packets wh… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.315.1.2.1.1.16 |
| cpsIfInvalidSrcRateLimitValue If cpsIfInvalidSrcRateLimitEnable is set to
'true' then this value is used to limit the
rate at which packets with invalid source MAC
addresses are processed on this interf… | column | Packets per second Integer32 | .1.3.6.1.4.1.9.9.315.1.2.1.1.17 |
| cpsIfSecureLastMacAddrVlanId This object indicates the VLAN where the last
MAC address that is seen on this interface.
This object is also used as a variable in
the cpsIfVlanSecureMacAddrViolat… | column | Q-BRIDGE-MIBVlanIndex | .1.3.6.1.4.1.9.9.315.1.2.1.1.18 |
| cpsIfPortSecurityStatus This object represents the operational status
of the port security feature on an interface.
secureup(1) - This indicates port security
is operational.… | column | Enumeration | .1.3.6.1.4.1.9.9.315.1.2.1.1.2 |
| cpsIfMaxSecureMacAddr The maximum number (N) of MAC addresses to be
secured on the interface. The first N MAC
addresses learned or configured are made secured.
Changing this object value from N to M is… | column | Integer32 | .1.3.6.1.4.1.9.9.315.1.2.1.1.3 |
| cpsIfCurrentSecureMacAddrCount The current number of MAC addresses secured
on this interface. | column | Integer32 | .1.3.6.1.4.1.9.9.315.1.2.1.1.4 |
| cpsIfSecureMacAddrAgingTime The interval in which the interface is
secured. After the expiration of the
time, the corresponding cpsSecureMacAddressEntry
from the cpsSecureMacAddressTable will be
removed. If… | column | minutes Integer32 | .1.3.6.1.4.1.9.9.315.1.2.1.1.5 |
| cpsIfSecureMacAddrAgingType The aging type determines the way the
secure MAC addresses are aged out.
absolute(1) - all the secure MAC addresses
will be aged out after
cps… | column | Enumeration | .1.3.6.1.4.1.9.9.315.1.2.1.1.6 |
| cpsIfStaticMacAddrAgingEnable Indicates whether the secure MAC address aging
mechanism is enabled on static MAC address entries
in cpsSecureMacAddressTable.
Setting this object value to 'false' will cause
the … | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.315.1.2.1.1.7 |
| cpsIfViolationAction Determines the action that the device will
take if the traffic matches the port security
violation.
shutdown(1) - the interface will be forced to
… | column | Enumeration | .1.3.6.1.4.1.9.9.315.1.2.1.1.8 |
| cpsIfViolationCount This object indicates the number of violations
occurred on a secure interface. The counter will
be initialized to zero when the port security
feature is enabled on an interface. … | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.315.1.2.1.1.9 |