Graham McIntire
b4f8b40b7f
- Remove PVC volume mount from k8s/deployment.yaml - Delete k8s/mib-pvc.yaml (no longer needed) - Update .gitignore to commit MIB files to git - Add mix import_mibs task to copy MIBs from LibreNMS - Add all MIB files from priv/mibs/ to git This fixes the multi-attach volume error in Kubernetes where new pods couldn't start because the RWO (ReadWriteOnce) PVC was attached to the old pod. MIBs are now part of the Docker image and can be used by all pods simultaneously.
317 lines
11 KiB
Text
317 lines
11 KiB
Text
-- Port Security MIB overview:
|
|
-- Port Security MIB falls under lb6m MIB node of the private subtree.
|
|
|
|
NETGEAR-PORTSECURITY-PRIVATE-MIB DEFINITIONS ::= BEGIN
|
|
|
|
-- Netgear Inc NETGEAR Port Security MIB
|
|
-- Copyright Netgear Inc(2004-2007) All rights reserved.
|
|
|
|
-- This SNMP Management Information Specification
|
|
-- embodies Netgear Inc's confidential and proprietary
|
|
-- intellectual property. Netgear Inc retains all title
|
|
-- and ownership in the Specification including any revisions.
|
|
|
|
-- This Specification is supplied "AS IS", Netgear Inc
|
|
-- makes no warranty, either expressed or implied,
|
|
-- as to the use, operation, condition, or performance of the
|
|
-- Specification.
|
|
|
|
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE,
|
|
Unsigned32 FROM SNMPv2-SMI
|
|
TEXTUAL-CONVENTION,RowStatus,
|
|
MacAddress FROM SNMPv2-TC
|
|
ifIndex FROM IF-MIB
|
|
|
|
DisplayString FROM RFC1213-MIB
|
|
lb6m FROM QUANTA-LB6M-REF-MIB;
|
|
|
|
fastPathPortSecurity MODULE-IDENTITY
|
|
LAST-UPDATED "201101260000Z" -- 26 January 2011 12:00:00 GMT
|
|
ORGANIZATION "Netgear Inc"
|
|
CONTACT-INFO ""
|
|
|
|
DESCRIPTION
|
|
"The Netgear Private MIB for NETGEAR Port Security Feature."
|
|
|
|
-- Revision history.
|
|
REVISION
|
|
"201101260000Z" -- 26 January 2011 12:00:00 GMT
|
|
DESCRIPTION
|
|
"Postal address updated."
|
|
REVISION
|
|
"200705230000Z" -- 23 May 2007 12:00:00 GMT
|
|
DESCRIPTION
|
|
"Netgear branding related changes."
|
|
|
|
::= { lb6m 20 }
|
|
|
|
|
|
--**************************************************************************************
|
|
-- agentPortSecurityGroup -> contains MIB objects displaying Port Security
|
|
-- and associated Functionality
|
|
--
|
|
--**************************************************************************************
|
|
|
|
agentPortSecurityGroup OBJECT IDENTIFIER ::= { fastPathPortSecurity 1}
|
|
|
|
agentGlobalPortSecurityMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Mode showing whether at the global level, port security is enabled or not."
|
|
DEFVAL { disable }
|
|
::={ agentPortSecurityGroup 1 }
|
|
|
|
agentPortSecurityTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AgentPortSecurityEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "A table for Port Security and associated functionality."
|
|
::= { agentPortSecurityGroup 2 }
|
|
|
|
agentPortSecurityEntry OBJECT-TYPE
|
|
SYNTAX AgentPortSecurityEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "Represents entry for port security table"
|
|
INDEX { ifIndex }
|
|
::={ agentPortSecurityTable 1}
|
|
|
|
AgentPortSecurityEntry ::=
|
|
SEQUENCE {
|
|
agentPortSecurityMode
|
|
INTEGER,
|
|
agentPortSecurityDynamicLimit
|
|
Unsigned32,
|
|
agentPortSecurityStaticLimit
|
|
Unsigned32,
|
|
agentPortSecurityViolationTrapMode
|
|
INTEGER,
|
|
agentPortSecurityStaticMACs
|
|
DisplayString,
|
|
agentPortSecurityLastDiscardedMAC
|
|
DisplayString,
|
|
agentPortSecurityMACAddressAdd
|
|
DisplayString,
|
|
agentPortSecurityMACAddressRemove
|
|
DisplayString,
|
|
agentPortSecurityMACAddressMove
|
|
INTEGER,
|
|
agentPortSecurityStickyMode
|
|
INTEGER
|
|
}
|
|
|
|
agentPortSecurityMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Mode showing whether at port level security is enabled or not."
|
|
DEFVAL { disable }
|
|
::={ agentPortSecurityEntry 1 }
|
|
|
|
agentPortSecurityDynamicLimit OBJECT-TYPE
|
|
SYNTAX Unsigned32(0..4096)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable signifies the limit of dynamically locked MAC addresses
|
|
allowed on a specific port."
|
|
DEFVAL { 4096 }
|
|
::={ agentPortSecurityEntry 2 }
|
|
|
|
agentPortSecurityStaticLimit OBJECT-TYPE
|
|
SYNTAX Unsigned32(0..20)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable signifies the limit of statically locked MAC addresses
|
|
allowed on a specific port."
|
|
DEFVAL { 20 }
|
|
::={ agentPortSecurityEntry 3 }
|
|
|
|
|
|
agentPortSecurityViolationTrapMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable is used to enable or disable the sending of new violation
|
|
traps designating when a packet with a disallowed MAC address is
|
|
received on a locked port."
|
|
::={agentPortSecurityEntry 4 }
|
|
|
|
agentPortSecurityStaticMACs OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable displays the statically locked MAC addresses for port.
|
|
The list displayed in a particular fashion :
|
|
2 a0:b1:c2:d1:e3:a1,11 a0:b1:c2:d3:e4:f5
|
|
(i.e., VLAN MAC pairs followed by a 1 or 0 to indicate a sticky entry, separated by commas)."
|
|
::={agentPortSecurityEntry 6 }
|
|
|
|
agentPortSecurityLastDiscardedMAC OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable displays the vlan-id and source MAC address of the last packet that was
|
|
discarded on a locked port."
|
|
::={agentPortSecurityEntry 7 }
|
|
|
|
|
|
agentPortSecurityMACAddressAdd OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This MIB variable accepts a VLAN id, MAC address and the sticky value to be added to the list
|
|
of statically locked MAC addresses on a port. The VLAN id, MAC address and sticky value combination
|
|
would be entered in a particular fashion like :- 2 a0:b0:c0:d1:e2:a1 1(the vlan-id, MAC address
|
|
and sticky value separated by blank-spaces)."
|
|
::={ agentPortSecurityEntry 8 }
|
|
|
|
agentPortSecurityMACAddressRemove OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This MIB variable accepts a VLAN id and MAC address to be removed from the list
|
|
of statically locked MAC addresses on a port.. The VLAN id and MAC address combination
|
|
would be entered in a particular fashion like :- 2 a0:b0:c0:d1:e2:a1(the vlan-id and
|
|
MAC address separated by a blank-space)."
|
|
::={ agentPortSecurityEntry 9 }
|
|
|
|
agentPortSecurityMACAddressMove OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"When this object is enabled, all the dynamically locked MAC addresses will
|
|
be moved to statically locked addresses on a port. GET operation on this object will display
|
|
disable."
|
|
::={ agentPortSecurityEntry 10 }
|
|
|
|
agentPortSecurityStickyMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object is used to configure port level security sticky mode in a port."
|
|
DEFVAL { disable }
|
|
::={ agentPortSecurityEntry 11 }
|
|
|
|
--**********************************************************************--
|
|
|
|
agentPortSecurityDynamicTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AgentPortSecurityDynamicEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "A table for Port Security Dynamic and associated functionality."
|
|
::= { agentPortSecurityGroup 3 }
|
|
|
|
agentPortSecurityDynamicEntry OBJECT-TYPE
|
|
SYNTAX AgentPortSecurityDynamicEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "Represents entry for port MAC Locking table"
|
|
INDEX { ifIndex,agentPortSecurityDynamicVLANId,agentPortSecurityDynamicMACAddress }
|
|
::={ agentPortSecurityDynamicTable 1}
|
|
|
|
AgentPortSecurityDynamicEntry ::=
|
|
SEQUENCE {
|
|
agentPortSecurityDynamicVLANId
|
|
Unsigned32,
|
|
agentPortSecurityDynamicMACAddress
|
|
MacAddress
|
|
}
|
|
|
|
|
|
agentPortSecurityDynamicVLANId OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Source VLAN id of the packet that is received on the dynamically locked port."
|
|
::={agentPortSecurityDynamicEntry 1 }
|
|
|
|
|
|
agentPortSecurityDynamicMACAddress OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Source MAC address of the packet that is received on the dynamically locked port."
|
|
::={ agentPortSecurityDynamicEntry 2 }
|
|
|
|
|
|
agentGlobalPortSecurityStickyMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object is used to apply the Sticky Mode to all ports.
|
|
This is write-only value. It always returns 'disable' on request"
|
|
DEFVAL { disable }
|
|
::={ agentPortSecurityGroup 4 }
|
|
|
|
agentGlobalPortSecurityViolationTrapMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
enable(1),
|
|
disable(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable is used to enable or disable the sending of new violation
|
|
traps designating when a packet with a disallowed MAC address is
|
|
received on a locked port. The configuration will be done on all ports.
|
|
This is write-only value. It always returns 'disable' on request"
|
|
DEFVAL { disable }
|
|
::={ agentPortSecurityGroup 5 }
|
|
|
|
--**************************************************************************************
|
|
-- agentPortSecurity Traps
|
|
--
|
|
--**************************************************************************************
|
|
|
|
agentPortSecurityTraps OBJECT IDENTIFIER ::= { fastPathPortSecurity 2 }
|
|
|
|
agentPortSecurityViolation NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
ifIndex,
|
|
agentPortSecurityLastDiscardedMAC
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sent when a packet is received on a locked port with a source MAC address
|
|
that is not allowed."
|
|
::= { agentPortSecurityTraps 1 }
|
|
|
|
|
|
|
|
END
|