BAYSTACK-IPV6-FIRST-HOP-SEC-MIB: View SNMP OID List / Download MIB
VENDOR: SYNOPTICS
| Home | MIB: BAYSTACK-IPV6-FIRST-HOP-SEC-MIB | |||
|---|---|---|---|---|
| Download as: |
Download standard MIB format if you are planning to load a MIB file into some system (OS, Zabbix, PRTG ...) or view it with a MIB browser. CSV is more suitable for analyzing and viewing OID' and other MIB objects in excel. JSON and YAML formats are usually used in programing even though some systems can use MIB in YAML format (like Logstash).
|
|||
| Object Name | OID | Type | Access | Info |
| bayStackIpv6FirstHopSecMib | 1.3.6.1.4.1.45.5.45 |
This MIB module is used for IPv6 First Hop Security configuration. The purpose of First Hop Security feature is to take care of the treats caused by the immediate node to another immediate node attached to the same First Hop Security device. |
||
| bsIpv6FirstHopSecNotifications | 1.3.6.1.4.1.45.5.45.0 | |||
| bsIpv6NDSBTTableFull | 1.3.6.1.4.1.45.5.45.0.1 |
This notification is generated when an attempt is made to add a new SBT entry when the Secure Binding Table is full. The value of bsIpv6NDInspectionNotificationClientMACAddr represents the MAC address that could not be added to the SBT table. This notification also indicates that additional packets will not be added to the SBT and will be dropped. |
||
| bsIpv6NDNotificationsUntrustedPort | 1.3.6.1.4.1.45.5.45.0.2 |
This notification is generated when an ND message is suspected to be generated by the untrusted system/host. |
||
| bsIpv6FirstHopSecObjects | 1.3.6.1.4.1.45.5.45.1 | |||
| bsIpv6FHSScalVar | 1.3.6.1.4.1.45.5.45.1.1 | |||
| bsIpv6FHSAdmin | 1.3.6.1.4.1.45.5.45.1.1.1 | truthvalue | read-write |
First Hop Security Global Admin status |
| bsIpv6FHSRagAdmin | 1.3.6.1.4.1.45.5.45.1.1.2 | truthvalue | read-write |
RA guard Global Admin status |
| bsIpv6FHSDhcpv6gAdmin | 1.3.6.1.4.1.45.5.45.1.1.3 | truthvalue | read-write |
DHCPv6 guard Global Admin status |
| bsIpv6FHSNdInspectAdmin | 1.3.6.1.4.1.45.5.45.1.1.4 | truthvalue | read-write |
ND Inspection Global Admin status |
| bsIpv6FHSMaxDynSbtEntries | 1.3.6.1.4.1.45.5.45.1.1.5 | integer32 | read-write |
Maximum Dynamic SBT entries allowed |
| bsIpv6FHSSbtReachLifeTime | 1.3.6.1.4.1.45.5.45.1.1.6 | integer32 | read-write |
SBT Reachable state life time in seconds starts from 30 till 86400. Configure timer as 0 will not expire this timer |
| bsIpv6FHSSbtStaleLifeTime | 1.3.6.1.4.1.45.5.45.1.1.7 | integer32 | read-write |
SBT Stale state life time in seconds starts from 30 till 86400. Configure timer as 0 will not expire this timer |
| bsIpv6FHSSbtDownLifeTime | 1.3.6.1.4.1.45.5.45.1.1.8 | integer32 | read-write |
SBT Down state life time in seconds starts from 30 till 86400. Configure timer as 0 will not expire this timer |
| bsIpv6FHSSbtTblOverFlow | 1.3.6.1.4.1.45.5.45.1.1.9 | counter32 | read-only |
SBT Table Overflow due to the maximum SBT entry restriction |
| bsIpv6FHSIpv6AccessListTable | 1.3.6.1.4.1.45.5.45.1.2 | no-access |
Table contains the list of IPv6 Access List used for Frist Hop Security Feature. |
|
| 1.3.6.1.4.1.45.5.45.1.2.1 | no-access |
Entry contains the list of IPv6 Access List used for Frist Hop Security Feature. |
||
| bsIpv6FHSIpv6AccessListName | 1.3.6.1.4.1.45.5.45.1.2.1.1 | fhslistname | no-access |
IPv6 Access List Name |
| bsIpv6FHSIpv6AccessListPrefix | 1.3.6.1.4.1.45.5.45.1.2.1.2 | ipv6address | no-access |
IPv6 Prefix attached to this IPv6 access list Id |
| bsIpv6FHSIpv6AccessListPrefixMaskLen | 1.3.6.1.4.1.45.5.45.1.2.1.3 | integer32 | no-access |
IPv6 Prefix mask length attached to this IPv6 access list Id |
| bsIpv6FHSIpv6AccessListMaskLenFrom | 1.3.6.1.4.1.45.5.45.1.2.1.4 | integer32 | read-write |
IPv6 Prefix mask length range from |
| bsIpv6FHSIpv6AccessListMaskLenTo | 1.3.6.1.4.1.45.5.45.1.2.1.5 | integer32 | read-write |
IPv6 Prefix mask length range to |
| bsIpv6FHSIpv6AccessListAccessType | 1.3.6.1.4.1.45.5.45.1.2.1.6 | fhsaccesstype | read-write |
IPv6 IP Access Type Allow or Deny |
| bsIpv6FHSIpv6AccessListRowStatus | 1.3.6.1.4.1.45.5.45.1.2.1.7 | rowstatus | read-write |
IPv6 IP Access List row status |
| bsIpv6FHSMacAccessListTable | 1.3.6.1.4.1.45.5.45.1.3 | no-access |
Table contains the list of MAC Access List used for Frist Hop Security Feature. |
|
| 1.3.6.1.4.1.45.5.45.1.3.3 | no-access |
Entry contains the list of MAC Access List used for Frist Hop Security Feature. |
||
| bsIpv6FHSMacAccessListName | 1.3.6.1.4.1.45.5.45.1.3.3.1 | fhslistname | no-access |
MAC Access List Name |
| bsIpv6FHSMacAccessListMac | 1.3.6.1.4.1.45.5.45.1.3.3.2 | macaddress | no-access |
MAC address attached to this MAC access list Id |
| bsIpv6FHSMacAccessListAccessType | 1.3.6.1.4.1.45.5.45.1.3.3.3 | fhsaccesstype | read-write |
MAC Access Type Allow or Deny |
| bsIpv6FHSMacAccessListRowStatus | 1.3.6.1.4.1.45.5.45.1.3.3.4 | rowstatus | read-write |
MAC Access List row status |
| bsIpv6FHSPolicyPortMapTable | 1.3.6.1.4.1.45.5.45.1.4 | no-access |
Table contains the list of First Hop security Policies attached to the interface. |
|
| 1.3.6.1.4.1.45.5.45.1.4.1 | no-access |
Entry contains the list of First Hop security Policies attached to the interface. |
||
| bsIpv6FHSPolicyPortMapIfIndex | 1.3.6.1.4.1.45.5.45.1.4.1.1 | interfaceindex | no-access |
Interface index number |
| bsIpv6FHSPolicyPortMapDhcpv6gPolicyName | 1.3.6.1.4.1.45.5.45.1.4.1.2 | fhslistname | read-write |
DHCPv6 guard policy name |
| bsIpv6FHSPolicyPortMapRagPolicyName | 1.3.6.1.4.1.45.5.45.1.4.1.3 | fhslistname | read-write |
RA guard policy name |
| bsIpv6FHSPolicyPortMapNDAdmin | 1.3.6.1.4.1.45.5.45.1.4.1.4 | truthvalue | read-write |
Enable/Disable ND-inspection |
| bsIpv6FHSPolicyPortMapSbtDynLearnAdmin | 1.3.6.1.4.1.45.5.45.1.4.1.5 | truthvalue | read-write |
Enable/Disable learning dynamic SBT entry |
| bsIpv6FHSPolicyPortMapTotDhcpv6PktRcv | 1.3.6.1.4.1.45.5.45.1.4.1.6 | counter32 | read-only |
Total Number of Dhcpv6 packets Received |
| bsIpv6FHSPolicyPortMapTotDhcpv6PktDropped | 1.3.6.1.4.1.45.5.45.1.4.1.7 | counter32 | read-only |
Total Number of Dhcpv6 packets dropped |
| bsIpv6FHSPolicyPortMapTotRaPktRcv | 1.3.6.1.4.1.45.5.45.1.4.1.8 | counter32 | read-only |
Total Number of RA packets Received |
| bsIpv6FHSPolicyPortMapTotRaPktDropped | 1.3.6.1.4.1.45.5.45.1.4.1.9 | counter32 | read-only |
Total Number of RA packets dropped |
| bsIpv6FHSPolicyPortMapTotNdPktRcv | 1.3.6.1.4.1.45.5.45.1.4.1.10 | counter32 | read-only |
Total Number of ND Packets Received |
| bsIpv6FHSPolicyPortMapTotNdPktDropped | 1.3.6.1.4.1.45.5.45.1.4.1.11 | counter32 | read-only |
Total Number of ND Packets Dropped |
| bsIpv6FHSPolicyPortMapClearDhcpGuardStats | 1.3.6.1.4.1.45.5.45.1.4.1.12 | truthvalue | read-write |
First Hop security clear stats: bsIpv6FHSPolicyPortMapTotDhcpv6PktRcv and bsIpv6FHSPolicyPortMapTotDhcpv6PktDropped |
| bsIpv6FHSPolicyPortMapClearRaGuardStats | 1.3.6.1.4.1.45.5.45.1.4.1.13 | truthvalue | read-write |
First Hop security clear stats: bsIpv6FHSPolicyPortMapTotRaPktRcv and bsIpv6FHSPolicyPortMapTotRaPktDropped |
| bsIpv6FHSPolicyPortMapClearNDInspectStats | 1.3.6.1.4.1.45.5.45.1.4.1.14 | truthvalue | read-write |
First Hop security clear stats: bsIpv6FHSPolicyPortMapTotNdPktRcv, bsIpv6FHSPolicyPortMapTotNdPktDropped and bsIpv6FHSPolicyPortMapTotSbtEntDropped |
| bsIpv6FHSPolicyPortMapRowStatus | 1.3.6.1.4.1.45.5.45.1.4.1.15 | rowstatus | read-write |
First Hop security row status |
| bsIpv6FHSDhcpv6gPolicyListTable | 1.3.6.1.4.1.45.5.45.1.5 | no-access |
Table contains the list of DHCPv6 guard Policies used for Hop Security Feature. |
|
| 1.3.6.1.4.1.45.5.45.1.5.1 | no-access |
Entry contains the list of DHCPv6 guard Policies used for Hop Security Feature. |
||
| bsIpv6FHSDhcpv6gPolicyName | 1.3.6.1.4.1.45.5.45.1.5.1.1 | fhslistname | no-access |
This is the DHCPv6 guard Policy Name |
| bsIpv6FHSDhcpv6gDeviceRole | 1.3.6.1.4.1.45.5.45.1.5.1.2 | fhsdhcpv6guarddevicerole | read-write |
This is the device role of the received port. If the device role is client and if it receives DHCPv6 reply then those packets should be dropped |
| bsIpv6FHSDhcpv6gServerAccessListName | 1.3.6.1.4.1.45.5.45.1.5.1.3 | fhslistname | read-write |
This is the IPv6 access list which will be validating source IPv6 address of the DHCPv6 Reply packet from the server |
| bsIpv6FHSDhcpv6gReplyPrefixListName | 1.3.6.1.4.1.45.5.45.1.5.1.4 | fhslistname | read-write |
Validate the prefix information in the DHCPv6 reply against the configured reply prefix list. |
| bsIpv6FHSDhcpv6gPrefLimitMin | 1.3.6.1.4.1.45.5.45.1.5.1.5 | integer32 | read-write |
This is check against the DHCPv6 server / relay router preference. If the received router preference is less than the configured router preference than drop the packet |
| bsIpv6FHSDhcpv6gPrefLimitMax | 1.3.6.1.4.1.45.5.45.1.5.1.6 | integer32 | read-write |
This is check against the DHCPv6 server / relay router preference. If the received router preference is greater than the configured router preference than drop the packet |
| bsIpv6FHSDhcpv6gPolicyListRowStatus | 1.3.6.1.4.1.45.5.45.1.5.1.7 | rowstatus | read-write |
DHCPv6 guard policy row status |
| bsIpv6FHSRagPolicyListTable | 1.3.6.1.4.1.45.5.45.1.6 | no-access |
Table contains the list of RA guard Policies used for Hop Security Feature. |
|
| 1.3.6.1.4.1.45.5.45.1.6.1 | no-access |
Entry contains the list of RA guard Policies used for Hop Security Feature. |
||
| bsIpv6FHSRagPolicyName | 1.3.6.1.4.1.45.5.45.1.6.1.1 | fhslistname | no-access |
RA guard policy Name |
| bsIpv6FHSRagDeviceRole | 1.3.6.1.4.1.45.5.45.1.6.1.2 | fhsraguarddevicerole | read-write |
This is the device role to be checked against |
| bsIpv6FHSRagIpv6AccessListName | 1.3.6.1.4.1.45.5.45.1.6.1.3 | fhslistname | read-write |
This is the IPv6 access list which will be validating the source IPv6 address of the RA packet |
| bsIpv6FHSRagIpv6PrefixListName | 1.3.6.1.4.1.45.5.45.1.6.1.4 | fhslistname | read-write |
This is the IPv6 access list which will be validating the Prefix present in the RA packet |
| bsIpv6FHSRagMacListName | 1.3.6.1.4.1.45.5.45.1.6.1.5 | fhslistname | read-write |
This is the MAC access list which will be validating the source MAC of the received RA packet |
| bsIpv6FHSRagManagedConfigFlag | 1.3.6.1.4.1.45.5.45.1.6.1.6 | fhsramanagedconfigflag | read-write |
In the RA packets, there is an M flag (Managed Address configuration Flag) which is set indicating that the address assignments are available via DHCPv6. This means that DHCPv6 would take care of the interface address assignment in that LAN segment. If filtering policy is enabled then all the RA packets with M flag not set will be dropped. By default this check will be ignored |
| bsIpv6FHSRagRouterPrefMax | 1.3.6.1.4.1.45.5.45.1.6.1.7 | fhsrarouterprefmax | read-write |
In the RA packet there is router preference information is available in the Flags. This could be HIGH or LOW or MEDIUM. This filtering policy option would verify that the advertised default router preference parameter value is lower than or equal to a specified limit |
| bsIpv6FHSRagHopLimitMin | 1.3.6.1.4.1.45.5.45.1.6.1.8 | integer32 | read-write |
This is the minimum value check for the hop limit value present in the RA packet. If the value is less than configured minimum value then drop the RA packet |
| bsIpv6FHSRagHopLimitMax | 1.3.6.1.4.1.45.5.45.1.6.1.9 | integer32 | read-write |
This is the maximum value check for the hop limit value present in the RA packet. If the value is greater than configured maximum value then drop the RA packet |
| bsIpv6FHSRagPolicyListRowStatus | 1.3.6.1.4.1.45.5.45.1.6.1.10 | rowstatus | read-write |
RA guard policy row status |
| bsIpv6FHSSbtTable | 1.3.6.1.4.1.45.5.45.1.7 | no-access |
Table contains the list of SBT entries learnt Dynamically and statically configure. |
|
| 1.3.6.1.4.1.45.5.45.1.7.1 | no-access |
Entry contains the list of SBT entries. |
||
| bsIpv6FHSSbtInterfaceIndex | 1.3.6.1.4.1.45.5.45.1.7.1.1 | interfaceindex | no-access |
Derive unit and port number from this ifindex |
| bsIpv6FHSSbtVlan | 1.3.6.1.4.1.45.5.45.1.7.1.2 | integer32 | no-access |
VLAN |
| bsIpv6FHSSbtSrcIp | 1.3.6.1.4.1.45.5.45.1.7.1.3 | ipv6address | no-access |
Source IPv6 Address |
| bsIpv6FHSSbtLinkLayerAddress | 1.3.6.1.4.1.45.5.45.1.7.1.4 | macaddress | read-write |
Link Layer MAC address |
| bsIpv6FHSSbtLearnType | 1.3.6.1.4.1.45.5.45.1.7.1.5 | fhssbttype | read-only |
SBT Entry Type |
| bsIpv6FHSSbtLearnPriority | 1.3.6.1.4.1.45.5.45.1.7.1.6 | integer32 | read-only |
SBT Entry priority |
| bsIpv6FHSSbtLearnState | 1.3.6.1.4.1.45.5.45.1.7.1.7 | fhssbtstate | read-only |
SBT Entry state |
| bsIpv6FHSSbtLearnAge | 1.3.6.1.4.1.45.5.45.1.7.1.8 | integer32 | read-only |
Time Elapsed after being in this state |
| bsIpv6FHSSbtRowStatus | 1.3.6.1.4.1.45.5.45.1.7.1.9 | rowstatus | read-write |
SBT entry row status |
| bsIpv6NDTrapNotificationObjects | 1.3.6.1.4.1.45.5.45.1.8 | |||
| bsIpv6NDInspectionNotificationClientMACAddr | 1.3.6.1.4.1.45.5.45.1.8.1 | macaddress | no-access |
This value indicates the source MAC Address of a dropped ND inspection packet. |
| bsIpv6NDInspectionNotificationMsgType | 1.3.6.1.4.1.45.5.45.1.8.2 | integer | no-access |
This value indicates the message type of a dropped ND packet. Enumeration: 'ipv6NDRS': 3, 'ipv6NDRedir': 5, 'ipv6NDRA': 4, 'ipv6NDNS': 1, 'ipv6NDNA': 2. |
| bsIpv6FHSNDInterfaceIndex | 1.3.6.1.4.1.45.5.45.1.8.3 | interfaceindex | no-access |
This value indicates the unit and port number of a dropped ND inspection packet. |
| bsIpv6FHSNDIpv6Address | 1.3.6.1.4.1.45.5.45.1.8.4 | ipv6address | no-access |
This value indicates the Ipv6 source address of a dropped ND inspection packet. |
| bsIpv6FHSNDVlanID | 1.3.6.1.4.1.45.5.45.1.8.5 | integer32 | no-access |
This value indicates the Vlan ID of a dropped ND inspection packet. |
| bsIpv6FHSSourceGuardInterfaceConfigTable | 1.3.6.1.4.1.45.5.45.1.9 | no-access |
IPv6 Source Guard Interface table. |
|
| 1.3.6.1.4.1.45.5.45.1.9.1 | no-access |
An entry of this table. |
||
| bsIpv6FHSSourceGuardIfIndex | 1.3.6.1.4.1.45.5.45.1.9.1.1 | interfaceindex | no-access |
Interface index number. |
| bsIpv6FHSSourceGuardInterfaceState | 1.3.6.1.4.1.45.5.45.1.9.1.2 | truthvalue | read-write |
IPv6 Source Guard Admin state of an interface. |
| bsIpv6FHSSourceGuardMaxAddr | 1.3.6.1.4.1.45.5.45.1.9.1.3 | integer32 | read-write |
Maximum allowed IPv6 Source Addresses on an interface. |
| bsIpv6FHSSourceGuardOverflowCount | 1.3.6.1.4.1.45.5.45.1.9.1.4 | counter32 | read-only |
Number of times the SBT entries could not be added to the allowed list. |
| bsIpv6FHSSourceGuardClearOverflowCount | 1.3.6.1.4.1.45.5.45.1.9.1.5 | truthvalue | read-write |
This object clears counter object bsIpv6FHSSourceGuardOverflowCount. |
| bsIpv6FHSSourceGuardBindingTable | 1.3.6.1.4.1.45.5.45.1.10 | no-access |
List of IPv6 Source Guard binding entries for each Source Guard enabled interface. |
|
| 1.3.6.1.4.1.45.5.45.1.10.1 | no-access |
An entry of this table. |
||
| bsIpv6FHSSourceGuardEntryIfIndex | 1.3.6.1.4.1.45.5.45.1.10.1.1 | interfaceindex | no-access |
Interface index number. |
| bsIpv6FHSSourceGuardEntryIpv6Addr | 1.3.6.1.4.1.45.5.45.1.10.1.2 | ipv6address | read-only |
IPv6 address allowed on the interface. |