- Table of Contents
-
- 17-User Access and Authentication
- 01-HH3C-8021X-EXT2-MIB
- 02-HH3C-AAA-MIB
- 03-HH3C-DOMAIN-MIB
- 04-HH3C-LOCAL-AAA-SERVER-MIB
- 05-HH3C-PORT-SECURITY-MIB
- 06-HH3C-PORTAL-MIB
- 07-HH3C-RADIUS-MIB
- 08-HH3C-USER-MIB
- 09-IEEE8021-PAE-MIB
- 10-IEEE8021-SECY-MIB
- 11-IEEE8021X-PAE-MIB
- 12-RADIUS-ACC-CLIENT-MIB
- 13-RADIUS-AUTH-CLIENT-MIB
- Related Documents
-
Title | Size | Download |
---|---|---|
10-IEEE8021-SECY-MIB | 80.85 KB |
Contents
IEEE8021-SECY-MIB
About this MIB
Use this MIB to manage MACsec.
MIB file name
ieee8021-secy.mib
Root object
iso(1).std(0).iso8802(8802).ieee802dot1(1).ieee802dot1mibs(1).ieee8021SecyMIB(3)
Tabular objects
secyIFTable
About this table
Use this table to configure or obtain information about MACsec-enabled interfaces.
Support for operations
Create:Not supported
Edit/Modify:Supported
Delete:Not supported
Read:Supported
Columns
The table index is secyIfInterfaceIndex.
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
secyIfInterfaceIndex (1.0.8802.1.1.3.1.1.1.1.1) |
not-accessible |
InterfaceIndex |
Integer32 (1..2147483647) |
An interface index for a port with SecY management ability. |
As per the MIB. |
secyIfMaxPeerSCs (1.0.8802.1.1.3.1.1.1.1.2) |
read-only |
Unsigned32 |
Standard MIB values. |
Maximum number of peer SCs that this SecY can support. |
Not supported. |
secyIfRxMaxKeys (1.0.8802.1.1.3.1.1.1.1.3) |
read-only |
Unsigned32 |
Standard MIB values. |
Maximum number of keys in simultaneous use for reception that this SecY can support. |
Not supported. |
secyIfTxMaxKeys (1.0.8802.1.1.3.1.1.1.1.4) |
read-only |
Unsigned32 |
Standard MIB values. |
Maximum number of keys in simultaneous use for transmission that this SecY can support. |
Not supported. |
secyIfValidateFrames (1.0.8802.1.1.3.1.1.1.1.6) |
read-write |
INTEGER |
disabled(1), check(2), strict(3) |
An object to control the validation function for ingress frames. |
Default: strict. |
secyIfReplayProtectEnable (1.0.8802.1.1.3.1.1.1.1.7) |
read-write |
TruthValue |
true(1), false(2) |
An object to enable or disable the replay protection function. |
Supports only the read operation. |
secyIfReplayProtectWindow (1.0.8802.1.1.3.1.1.1.1.8) |
read-write |
Unsigned32 |
Standard MIB values. |
Replay protection window size, in frames. |
Supports only the read operation. |
secyIfCurrentCipherSuite (1.0.8802.1.1.3.1.1.1.1.9) |
read-write |
Unsigned32 |
Standard MIB values. |
An object that points to an entry of the secyCipherSuiteTable with active row status to indicate the cipher suite that this SecY is currently using. |
Not supported. |
secyIfAdminPt2PtMAC (1.0.8802.1.1.3.1.1.1.1.10) |
read-write |
INTEGER |
forceTrue(1), forceFalse(2), auto(3) |
An object to control the service connectivity to at most one other system. |
Not supported. |
secyIfOperPt2PtMAC (1.0.8802.1.1.3.1.1.1.1.11) |
read-only |
TruthValue |
true(1), false(2) |
An object to reflect the current service connectivity status. |
Not supported. |
secyIfIncludeSCIEnable (1.0.8802.1.1.3.1.1.1.1.12) |
read-write |
TruthValue |
true(1), false(2) |
An object indicates whether to include the SCI information in security TAG (SecTAG) field while transmitting MACsec frames. |
Not supported. |
secyIfUseESEnable (1.0.8802.1.1.3.1.1.1.1.13) |
read-write |
TruthValue |
true(1), false(2) |
An object indicates whether to enable the ES bit in security TAG (SecTAG) field while transmitting MACsec frames. |
Not supported. |
secyIfUseSCBEnable (1.0.8802.1.1.3.1.1.1.1.14) |
read-write |
TruthValue |
true(1), false(2) |
An object indicates whether to enable the SCB bit in security TAG (SecTAG) field while transmitting MACsec frames. |
Not supported. |
secyTxSCTable
About this table
Use this table to obtain information about transmitting SCs.
Support for operations
Create:Not supported
Edit/Modify:Not supported
Delete:Not supported
Read:Supported
Columns
The table index is secyIfInterfaceIndex.
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
secyTxSCI (1.0.8802.1.1.3.1.1.2.1.1) |
read-only |
SecySCI |
OCTET STRING (0..65535) |
SCI for transmitting MACsec frames of a transmitting SC in a SecY. |
The read operation is returned a value only when MACsec is enabled on the port that holds the transmitting SC. |
secyTxSCState (1.0.8802.1.1.3.1.1.2.1.2) |
read-only |
INTEGER |
inUse(1), notInUse(2) |
State of the current transmitting SC in the SecY. |
Not supported. |
secyTxSCEncodingSA (1.0.8802.1.1.3.1.1.2.1.3) |
read-only |
RowPointer |
Standard MIB values. |
Current transmitting SA in use. |
The read operation is returned a value only when MACsec is enabled on the port that holds the transmitting SC. |
secyTxSCEncipheringSA (1.0.8802.1.1.3.1.1.2.1.4) |
read-only |
RowPointer |
Standard MIB values. |
Previous transmitting SA in use. |
The read operation is returned a value only when MACsec is enabled on the port that holds the transmitting SC. |
secyTxSCCreatedTime (1.0.8802.1.1.3.1.1.2.1.5) |
read-only |
TimeStamp |
Standard MIB values. |
System time when the transmitting SC was created. |
Not supported. |
secyTxSCStartedTime (1.0.8802.1.1.3.1.1.2.1.6) |
read-only |
TimeStamp |
Standard MIB values. |
System time when the transmitting SC last started transmitting MACsec frames. |
Not supported. |
secyTxSCStoppedTime (1.0.8802.1.1.3.1.1.2.1.7) |
read-only |
TimeStamp |
Standard MIB values. |
System time when the transmitting SC last stopped transmitting MACsec frames. |
Not supported. |
secyTXSATable
About this table
Use this table to obtain information about transmitting SAs.
Support for operations
Create:Not supported
Edit/Modify:Not supported
Delete:Not supported
Read:Supported
Columns
The table indexes are secyIfInterfaceIndex and secyTxSA.
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
secyTxSA (1.0.8802.1.1.3.1.1.3.1.1) |
not-accessible |
SecyAN |
Unsigned32(0..4294967295) |
Association number (AN) for identifying a transmitting SA. |
As per the MIB. |
secyTxSAState (1.0.8802.1.1.3.1.1.3.1.2) |
read-only |
INTEGER |
inUse(1), notInUse(2) |
Current status of the transmitting SA. |
Not supported. |
secyTxSANextPN (1.0.8802.1.1.3.1.1.3.1.3) |
read-only |
Unsigned32 |
Unsigned32 (0..4294967295) |
Next packet number (PN) that will be used in transmitting MACsec frames in the SA. |
Supports only the read operation. The read operation is returned a value only when MACsec is enabled on the port that holds the transmitting SA. |
secyTxSAConfidentiality (1.0.8802.1.1.3.1.1.3.1.4) |
read-only |
TruthValue |
true(1), false(2) |
Whether the SA supports the confidentiality as well as integrity function in transmitting frames. |
Not supported. |
secyTxSASAKUnchanged (1.0.8802.1.1.3.1.1.3.1.5) |
read-only |
TruthValue |
true(1), false(2) |
A reference to an SAK that is unchanged for the life of the transmitting SA. |
Not supported. |
secyTxSACreatedTime (1.0.8802.1.1.3.1.1.3.1.6) |
read-only |
TimeStamp |
Standard MIB values. |
System time when the transmitting SA was created. |
Not supported. |
secyTxSAStartedTime (1.0.8802.1.1.3.1.1.3.1.7) |
read-only |
TimeStamp |
Standard MIB values. |
System time when the transmitting SA last started transmitting MACsec frames. |
Not supported. |
SecyTxSAStoppedTime (1.0.8802.1.1.3.1.1.3.1.8) |
read-only |
TimeStamp |
Standard MIB values. |
System time when the transmitting SA last stopped transmitting MACsec frames. |
Not supported. |
secyRxSCTable
About this table
Use this table to obtain information about receiving SCs.
Support for operations
Create:Not supported
Edit/Modify:Not supported
Delete:Not supported
Read:Supported
Columns
The table indexes are secyIfInterfaceIndex and secyRxSCI.
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
secyRxSA (1.0.8802.1.1.3.1.1.5.1.1) |
not-accessible |
SecyAN |
Standard MIB values. |
Association number (AN) for identifying a receiving SA. |
As per the MIB. |
secyRxSAState (1.0.8802.1.1.3.1.1.5.1.2) |
read-only |
INTEGER |
inUse(1), notInUse(2) |
Current state for the receiving SA. |
Not supported. |
secyRxSANextPN (1.0.8802.1.1.3.1.1.5.1.3) |
read-write |
Unsigned32 |
Standard MIB values. |
Stored packet number (PN) for replay protection in the SA. |
Supports only the read operation. The read operation is returned a value only when MACsec is enabled on the port that holds the receiving SA. |
secyRxSASAKUnchanged (1.0.8802.1.1.3.1.1.5.1.4) |
read-only |
TruthValue |
true(1), false(2) |
A reference to an SAK that is unchanged for the life of the receiving SA. |
Not supported. |
secyRxSACreatedTime (1.0.8802.1.1.3.1.1.5.1.5) |
read-only |
TimeStamp |
Standard MIB values. |
System time when the receiving SA was created. |
Not supported. |
secyRxSAStartedTime (1.0.8802.1.1.3.1.1.5.1.6) |
read-only |
TimeStamp |
Standard MIB values. |
System time when the receiving SA last started receiving MACsec frames. |
Not supported. |
SecyRxSAStoppedTime (1.0.8802.1.1.3.1.1.5.1.7) |
read-only |
TimeStamp |
Standard MIB values. |
System time when the receiving SA last stopped receiving MACsec frames. |
Not supported. |