Cisco Switch port security status

[shahzad_itp]

Dear All,

I have one query, I have Cisco switches in my network and I have applied port security at my switches, commands are mentioned below. I want to get the status of all the switch ports that have been configured or not for port security.

switchport port-security
switchport port-security violation restrict
switchport port-security mac-address sticky


Best Regards,

Shahzad

[Hendrik_VE]

Hi Shahzad,

I was looking for the same recently. Unfortunately, I don't believe it's possible with Lansweeper to query this information, because the oid is variable (it contains the MAC addresses that were discovered on the port).

Fortunately, we also use SolarWinds, in which you can run an SNMP Walk on specific oid's. Below you find oid's we query:

Via SolarWinds (or Paessler SNMP Tester): perform a 'Walk' on oid 1.3.6.1.4.1.9.9.315

Most important metrics:

https://oidref.com/1.3.6.1.4.1.9.9.315.1.2.2.1.2
1.3.6.1.4.1.9.9.315.1.2.2.1.2.port.MACAddress.status
--> 1 = Static
2 = Dynamic


https://oidref.com/1.3.6.1.4.1.9.9.315.1.2.1.1.2
1.3.6.1.4.1.9.9.315.1.2.1.1.2.port.status
1 = Secureup
2 = SecureDown - port security is not operational.
3 = Shutdown due to portsec violation

https://oidref.com/1.3.6.1.4.1.9.9.315.1.2.1.1.3
1.3.6.1.4.1.9.9.315.1.2.1.1.3.Port.MaxAddress
The maximum number (N) of MAC addresses to be secured on the interface

[shahzad_itp]

Hendrik.VE wrote:
Hi Shahzad,

I was looking for the same recently. Unfortunately, I don't believe it's possible with Lansweeper to query this information, because the oid is variable (it contains the MAC addresses that were discovered on the port).

Fortunately, we also use SolarWinds, in which you can run an SNMP Walk on specific oid's. Below you find oid's we query:

Via SolarWinds (or Paessler SNMP Tester): perform a 'Walk' on oid 1.3.6.1.4.1.9.9.315

Most important metrics:

https://oidref.com/1.3.6.1.4.1.9.9.315.1.2.2.1.2
1.3.6.1.4.1.9.9.315.1.2.2.1.2.port.MACAddress.status
--> 1 = Static
2 = Dynamic


https://oidref.com/1.3.6.1.4.1.9.9.315.1.2.1.1.2
1.3.6.1.4.1.9.9.315.1.2.1.1.2.port.status
1 = Secureup
2 = SecureDown - port security is not operational.
3 = Shutdown due to portsec violation

https://oidref.com/1.3.6.1.4.1.9.9.315.1.2.1.1.3
1.3.6.1.4.1.9.9.315.1.2.1.1.3.Port.MaxAddress
The maximum number (N) of MAC addresses to be secured on the interface

Hi, Hendrik

Thanks for your kind information please.

I'll check and apply this information.

Regards,
Shahzad