Login
- Table of Contents
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 04-HH3C-MACSEC-MIB | 71.47 KB |
Contents
HH3C-MACSEC-MIB
About this MIB
Use this MIB to configure MACsec.
MIB file name
hh3c-macsec.mib
Root object
iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).hh3c(25506).hh3cCommon(2).hh3cMACsec(163)
Scalar objects
hh3cMACsecDeviceRole
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cMACsecDeviceRole (1.3.6.1.4.1.25506.2.163.2.1.1) |
accessible-for-notify |
INTEGER |
unknown(1), server(2) client(3) |
Local MACsec device role. |
As per the MIB. |
Tabular objects
hh3cMACsecCFGPortTable
About this table
Use this table to obtain or configure preshared key settings for MACsec-capable ports.
Support for operations
|
Create |
Edit/Modify |
Delete |
Read |
|
Not supported |
Supported. You must specify hh3cMACsecCFGPortPSKCKNName and hh3cMACsecCFGPortPSKCAKValue in pairs in an SNMP request. |
Not supported |
Supported. The hh3cMACsecCFGPortPSKCAKValue object is confidential. N/A is returned for the read operation. |
Columns
The table index is hh3cMACsecCFGPortIndex.
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cMACsecCFGPortIndex (1.3.6.1.4.1.25506.2.163.1.1.1.1) |
not-accessible |
InterfaceIndex |
Standard MIB values. |
Interface index. |
As per the MIB. |
|
hh3cMACsecCFGPortPSKCKNName (1.3.6.1.4.1.25506.2.163.1.1.1.2) |
read-write |
OCTET STRING |
OCTET STRING (0..128) |
CAK name. |
Octet string, 0 to 64 characters, an even number of hexadecimal characters. |
|
hh3cMACsecCFGPortPSKCAKValue (1.3.6.1.4.1.25506.2.163.1.1.1.3) |
read-write |
OCTET STRING |
OCTET STRING (0..128) |
CAK value. |
Octet string, 0 to 64 characters, an even number of hexadecimal characters. |
Notifications
hh3cMACsecTimeout
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.163.2.0.1 |
MKA session timeout on the interface. |
Error |
Warning |
1.3.6.1.4.1.25506.2.163.2.0.2 (hh3cMACsecTimeoutResume) |
ON |
Notification triggers
This notification is generated when the device has not received any MKA protocol packets on the MACsec-configured interface from its peer within the timeout time.
System impact
The interface cannot forward packets because the device and its peer cannot establish MKA sessions.
Status control
This notification cannot be disabled.
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.2.1.2.2.1.1 (ifIndex) |
Interface index. |
ifIndex |
Integer32 |
Integer32 (1..2147483647) |
|
1.3.6.1.2.1.2.2.1.2 (ifDescr) |
Local interface name. |
ifIndex |
OCTET STRING |
OCTET STRING (0..255) |
|
1.3.6.1.4.1.25506.2.163.2.1.1 (hh3cMACsecDeviceRole) |
Local MACsec device role. |
N/A |
INTEGER |
unknown(0), server(1), client(2) |
Recommended action
To resolve this issue:
1. Execute the display interface command in any view on both the device and its peer to view the link status of the MACsec-configured interfaces:
¡ If the link status of an interface is abnormal, restore the link and then check whether the notification has been cleared. If the issue persists, go to step 2.
¡ If the link status of each interface is normal, go to step 2.
hh3cMACsecTimeoutResume
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.163.2.0.2 |
MKA session resumption on the interface. |
Recovery |
Warning |
N/A |
ON |
Notification triggers
This notification is generated when a new MKA session has been established on the MACsec-configured interface after the previous MKA session was removed because of session timeout.
System impact
The interface can forward packets because the device and its peer can establish an MKA session.
Status control
This notification cannot be disabled.
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.2.1.2.2.1.1 (ifIndex) |
Interface index. |
ifIndex |
Integer32 |
Integer32 (1..2147483647) |
|
1.3.6.1.2.1.2.2.1.2 (ifDescr) |
Local interface name. |
ifIndex |
OCTET STRING |
OCTET STRING (0..255) |
|
1.3.6.1.4.1.25506.2.163.2.1.1 (hh3cMACsecDeviceRole) |
Local MACsec device role. |
N/A |
INTEGER |
unknown(0), server(1), client(2) |
Recommended action
No action is required.