ESWITCH-MIB-V3-0: View SNMP OID List / Download MIB

A table that contains information about various characteristics associated with each interface on the switch.

A list that contains the interface number and various characteristics associated with the interface.

An index value that identifies the interface for which this entry defines various characteristics. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex.

This object assumes the value present(1), if the corresponding interface is present; it assumes a value of not-present(2), otherwise. An interface may not be present, for instance, if it is modular and not installed. Enumeration: 'not-present': 2, 'present': 1.

A table that contains information about and that may be used to configure various characteristics associated with each port on the switch.

A list that contains the port number and various characteristics associated with the port.

The port number of the switch port for which this entry defines various characteristics.

This object assumes the value failed(2), if the corresponding port is present, but has been determined to be faulty and has been declared failed; otherwise, the value not-failed(3) is returned, if the port is present. A value of unknown(1) is returned if the port is not present. Enumeration: 'unknown': 1, 'not-failed': 3, 'failed': 2.

When read, this object returns the current status of this port. This object may also be used to shut down a port that is currently connected(2), disconnected(3), or isolated(5), by setting this object to the value shut-down(4). A port that has been shut down due to security violations, or by management, may be brought back up by setting this object to connected(2). Any other values for this object are rejected for a set operation. All traffic (including in-band management traffic addressed to the switch, if any) on a port that has been shut down is filtered, no counters are incremented, and no frames are transmitted or forwarded on such a port. Enumeration: 'isolated': 5, 'connected': 2, 'undefined': 1, 'shutdown': 4, 'disconnected': 3.

The reason why this port is currently shut down. A value of none(1) is returned, if the port is not currently shutdown. A value of mgmt(3) is returned, if the port has been shut down due to a request from network management. A value of security(3) is returned if the port has been shut down due to a detected security violation. A value of internal(5) is returned, when the firmware determines that the port should be shut down at this time for proper operation of the device. For example, if the port has been configured to point to the hub or stack backplane, but has been shut down in order to wait for a backplane connection to be established by management, this value is returned. Enumeration: 'none': 1, 'other': 2, 'security': 4, 'internal': 5, 'mgmt': 3.

This object defines the switching mode in which this port operates. The switching mode of a port determines whether or not it learns station location information from source addresses of packets received on the port; the switching mode also determines whether or not packets with unknown destination addresses received on other ports are flooded out this port. The following notation is used in the switching mode definitions that follow: LRN: station location information is learned from source addresses of packets received on port. !LRN: station location information is NOT learned from source addresses of packets received on port. FUD: packets with unknown destination addresses received on other ports are flooded out this port. !FUD: packets with unknown destination addresses received on other ports are NOT flooded out this port. A port may be configured to operate in one of the following switching modes: standard(1): LRN & FUD This is the mode in which all ports of a 802.1D-compliant standard switch operates. workgroup(2): LRN & !FUD This is the mode in which workgroup side ports of a workgroup switch operates. backbone(3): !LRN & FUD This is the mode in which the backbone port of a workgroup switch operates. manual(4): !LRN & !FUD In this mode, forwarding out this port is fully determined by management-specified filters. When learning is disabled on a port (i.e., mode is changed to backbone(3) or manual(4)), whether addresses previously learned on the port are purged immediately or allowed to age out naturally is implementation dependent. Note that all ports may be configured to operate in the manual(4) switching mode with a single operation, viz. by enabling(2) the manual mode switch defined by the following object: eSwitchAddrFdbManualMode. Enumeration: 'backbone': 3, 'manual': 4, 'workgroup': 2, 'standard': 1.

The maximum number of address entries that can be accommodated in the filtering database of the switch. This number includes learned entries, static entries (entries in the RFC 1493 dot1dStaticTable), and entries that may be used by the switch for other purposes (e.g., security).

The maximum number of static address entries that may be installed by management in the filtering database of the switch. This number is identical to the maximum number of entries supported in the dot1dStaticTable (RFC 1493).

The maximum number of static address entries in the filtering database of the switch, that can be accommodated in non-volatile memory. Entries stored in non-volatile memory will be restored after a power cycle. This number is identical to the maximum number of entries that may have a status of 'permanent' in the dot1dStaticTable (RFC1493).

The current number of dynamic address entries (i.e., entries that were learnt) in the filtering database of the switch.

The current number of static entries in the filtering database of the switch. This number is identical to the current number of entries in the dot1dStaticTable (RFC 1493).

The number of static address entries in the filtering database of the switch, that are currently stored in non-volatile memory. Entries stored in non-volatile memory will be restored after a power cycle. This number is identical to the current number of entries in the dot1dStaticTable (RFC 1493) that have a status of 'permanent'.

This object when set to purge(1) causes all static address entries in the filtering database to be deleted both from volatile and non-volatile memory. The 'purge' action deletes only those entries in the address filtering database that are also in the dot1dStaticTable (RFC 1493). Enumeration: 'purge': 1.

Specifies what types of frames with group destination addresses are currently being regulated. Only the specified class of traffic is considered in detecting the presence of storms, and only this class of traffic is regulated when a storm is detected. The value none(1) specifies that storm control is disabled. The value broadcast(2) specifies that only broadcast storms are regulated. The value multicast(3) specifies that only multicast storms are regulated. The value broadcastAndMulticast specifies that storms involving a mixture of broadcast and multicast traffic are regulated. Enumeration: 'broadcast': 2, 'none': 1, 'multicast': 3, 'broadcastAndMulticast': 4.

The length of the interval in 10 millisecond units between successive instants when the storm control process examines the broadcast/multicast received frame counters to detect the presence or end of a storm.

The maximum number of regulated group address frames (broadcast, multicast, or a mixture of both - see eSwitchStormFrameTypeRegulated) that may be received on a port during a polling interval before the storm control process decides that storm conditions exist on the port. This object may not be set to a value below 1 packet per polling interval.

The action that the storm control process should take when storm conditions are detected on a port. Frame suppression consists of suspending the forwarding of regulated frames (broadcast, multicast, or both, depending on the value of the MIB object eSwitchStormFrameTypeRegulated) received on the port on which the storm is detected. Port isolation consists of disabling an offending port in a manner that will cause all frames received on that port to be discarded, while allowing receive packet counters to be maintained. Enumeration: 'port-isolation': 2, 'frame-suppression': 1.

The policy used by the storm control process to resume normal operation, once storm control action has been initiated. If continue-control(1) is specified, the storm control action continues to be in effect, until the user modifies one of the following storm control parameters: eSwitchStormFrameTypeRegulated, eSwitchStormControlAction, eSwitchStormResumptionPolicy. If auto-interval(2) is specified, normal operation is automatically resumed on the offending port after a time interval specified by the MIB object eSwitchStormAutoInterval. If rate-limit(3) is specified, the storm control action continues for the next p polling intervals, where p is the number of polling intervals that the control has to remain in effect in order to ensure that the long term average of the regulated traffic is less than the user specified rate limit. For example, if the user-specified rate limit is 500 packets/polling interval, and 5000 multicast packets were received during the last polling interval, the storm control action continues to be in effect for the next 9 polling intervals. This ensures that no more than 5000 multicast packets are forwarded out of the offending port in 10 polling intervals. Thus the long term multicast traffic average is maintained at 500 packets/polling interval. The responsive-rate-limit(4) resumption policy is identical to the rate-limit(3) policy, except for the following difference. Once storm control action has been initiated, if the switch determines that the storm has subsided (for example, less than 500 packets were received during the last polling interval), normal operation is immediately resumed, instead of waiting for 'p' polling intervals to complete. Enumeration: 'continue-control': 1, 'auto-interval': 2, 'responsive-rate-limit': 4, 'rate-limit': 3.

This parameter is used when the eSwitchStormResumptionPolicy specified is auto -interval(2). Normal operation is automatically resumed on the offending port after a length of time (in seconds) specified by this object. The minimum value allowed for this object is 1 second.

The number of regulated frames (broadcast, multicast or both, depending on the value of the object: eSwitchStormFrameTypeRegulated) received on any port that were dropped by the switch as a result of storm control action.

The number of times that storm control action was initiated on any port on the switch.

A table that contains storm status information for every port on the switch.

A list of storm control related information items for every port on the switch.

The port number of the switch port for which this entry contains storm control related information.

The current status of storm control on the port. The value inactive(1) indicates that no storm control action is currently in effect on the port. The value active(2) indicates that some storm control action is in effect on the port. Enumeration: 'active': 2, 'inactive': 1.

The number of regulated frames (broadcast, multicast or both, depending on the value of the object: eSwitchStormFrameTypeRegulated) received on this port that were dropped by the switch as a result of storm control action.

The number of times that storm control action was initiated on this port on the switch.

The total number of security violations detected on all the ports on this switch, since the switch was last reset. Depending on the implementation, a switch may not be able to count every security violation. This number therefore represents only a lower limit on the actual number of security violations that occured.

A table that contains information about the type of secure mode currently in effect on each port of the switch.

A list that contains the port number and the type of security mode currently in effect on the port for a switch port.

The port number of the switch port for which this entry defines the type of secure mode.

The type of security currently in effect on the switch port. A value of none(1) indicates that the port is not currently in the secure mode of operation. A value of manual-authorize(2) indicates that any packet, whose source addresse does not match one of the addresses authorized on the port by management via the eSwitchSecurityPortAuthTable, is discarded upon receipt. A value of auto-authorize(3) indicates that upto a maximum of N addresses will be added by the switch to the eSwitchSecurityPortAuthTable automatically, when a packet with a source address corresponding to one of these addresses is seen on the port. 'N' is a user-settable value that may be configured through the following object: eSwitchSecurityPortMaxAutoAuthAddr Further, any packet with a source address that does not match one of the addresses in the eSwitchSecurityAuthTable is discared upon receipt. Depending on the implementation, a station may have to send 1 or more frames before its address gets 'auto-authorized' on the port. The policy used to select stations for authorization (e.g., FCFS, random, etc.) is left to individual implementations. The N authorized addresses may be read by management from the following object: eSwitchSecurityPortAuthorizedAddressTable. All authorized addresses on the port are purged whenever the value of this object is modified. Enumeration: 'none': 1, 'manual-authorize': 2, 'auto-authorize': 3.

The number of security violations detected on this port, since the port entered its current mode of security. Depending on the implementation, a switch may not be able to count every security violation. This number therefore represents only a lower limit on the actual number of security violations that occured.

The policy for dealing with security violations on this switch port. A security violation is deemed to have occured, when a frame with an unauthorized source address is received on a port. A value of filter(1) indicates that frame with source addresses that are not authorized on the port will be silently filtered. If this object is set to the filter-and-log(2), frames with unauthorized source addresses will be filtered, and the security violation logged in the following table: eSwitchSecurityLogTable. If this object is set to the value shutdown-and-log(3), the port is entirely shut down when a frame with an unauthorized source address is received on the port. The port remains shut down until management brings up the port by setting the following MIB object to the value connected(1): eSwitchPortStatus. Enumeration: 'filter': 1, 'filter-and-log': 2, 'shutdown-and-log': 3.

The maximum number of addresses that may be authorized on this port, when the port is in the manual-authorize(2) secure mode. When the port is in the auto-authorize(3) secure mode, the maximum number of addresses that may be authorized on this port is the smaller of the values of this and the following object: eSwitchSecurityPortMaxAutoAuthAddr.

The maximum number of addresses that may be authorized on this port, when the port is in the auto-authorize(3) secure mode. The value of this object may not exceed the value of the following object: eSwitchSecurityPortMaxAuthAddr If the port is currently in the auto-authorize secure mode, any addresses already authorized on this port are purged whenever the value of this object is decreased from its current value.

The number of addresses currently authorized on this port. If the current type of secure mode on this port as given by the corresponding instance of eSwitchSecurityPortType is none(1), this has a value of 0; otherwise this object may have any INTEGER value smaller than the value of the following object: eSwitchSecurityPortMaxAuthAddr.

This object when set to the value trigger(1) causes all the currently authorized addresses on the port to be purged. Enumeration: 'trigger': 1.

A table that lists the set of addresses that are authorized on a port for each port of the switch.

An address authorization entry that consists of a port and an address authorized on the port.

The port number of the switch port for which this entry defines an authorized address.

The address that this entry authorizes on the port specified by the corresponding instance of the object eSwitchSecurityAuthPort.

This object when set to the value invalid(1) deletes the corresponding authorized address entry, i.e., the address is no longer authorized on the port associated with the entry. When read, this object returns active(2) for any entry that is currently in the authorized address table. It is upto individual implementations to allow or disallow the same address from being authorized on more than one port at the same time. Enumeration: 'active': 2, 'invalid': 1.

The maximum number of security violation entries that will be retained in the security log table: eSwitchSecurityLogTable. If more security violations than this number occur, then later entries will overwrite earlier entries, the earliest recorded entries being replaced first.

A table that contains a log of security violations indexed by violating address and violated port.

A security log entry that consists of a violating address, the port on which this address was seen, and the sysUpTime at the time the violation was detected.

The index corresponding to this log entry. The earliest recorded entry has the smallest value. This object ranges in value from 1 to the value of the following object: eSwitchSecurityLogMaxEntries.

The port number of the switch port on which this violation occured.

The violating address that caused this entry to be logged.

The value of pcomErrLogResetNumber at the time this entry was logged.

The time in 10 millisecond clock ticks since the switch was last reset, at which the violation recorded by this entry occured.