Brocade Communications Systems IP250 user manual Security events for FC devices

Security events C

Security events

Security events are those that indicate authentication success or failure, a security violation, or user login and logout.

Security events for FC devices

For FOS switches, if the event is a RASLOG event and the RASLOG ID contains 'SEC', then the event is categorized as a security event.

Security events for IP devices

For IOS devices, if the event OID starts with any of the following OIDs, then the event is categorized as a security event.

•1.3.6.1.2.1.14.16.2.6 [ospfIfAuthFailure]

•1.3.6.1.2.1.14.16.2.7 [ospfVirtIfAuthFailure]

•1.3.6.1.4.1.1991.0.9 [snOspfIfAuthFailure]

•1.3.6.1.4.1.1991.0.10 [snOspfVirtIfAuthFailure]

•1.3.6.1.4.1.1991.0.75 [snTrapUserLogin]

•1.3.6.1.4.1.1991.0.76 [snTrapUserLogout]

•1.3.6.1.4.1.1991.0.77 [snTrapPortSecurityViolation]

•1.3.6.1.4.1.1991.0.78 [snTrapPortSecurityShutdown]

•1.3.6.1.4.1.1991.0.85 [snTrapMacAuthEnable]

•1.3.6.1.4.1.1991.0.86 [snTrapMacAuthDisable]

•1.3.6.1.4.1.1991.0.87 [snTrapMacAuthMACAccepted]

•1.3.6.1.4.1.1991.0.88 [snTrapMacAuthMACRejected]

•1.3.6.1.4.1.1991.0.89 [snTrapMacAuthPortDisabled]

•1.3.6.1.4.1.1991.0.110 [snTrapClientLoginReject]

•1.3.6.1.4.1.1991.0.131 [snTrapDot1xSecurityViolation]

•1.3.6.1.4.1.1991.0.143 [snTrapMacAuthRadiusTimeout]

•1.3.6.1.4.1.1991.0.144 [snTrapDot1xRadiusTimeout]

•1.3.6.1.4.1.1991.1.5.1.1.2.1.0.36 [swPortSecurityTrap]

•1.3.6.1.4.1.1991.1.6.1.1.5.2.3 [sysRadiusServerChanged]

•1.3.6.1.4.1.1991.1.6.1.1.6.2.3 [sysRadiusServerChanged]

•1.3.6.1.4.1.1991.1.6.1.7.4.2.3 [dot11StationAuthentication]

•1.3.6.1.4.1.1991.1.6.1.7.4.2.7 [dot1xMacAddrAuthSuccess]

•1.3.6.1.4.1.1991.1.6.1.7.4.2.8 [dot1xMacAddrAuthFail]

•1.3.6.1.4.1.1991.1.6.1.7.4.2.9 [dot1xAuthNotInitiated]

•1.3.6.1.4.1.1991.1.6.1.7.4.2.10 [dot1xAuthSuccess]

•1.3.6.1.4.1.1991.1.6.1.7.4.2.11 [dot1xAuthFail]

•1.3.6.1.4.1.1991.1.6.1.7.4.2.12 [localMacAddrAuthSuccess]

Brocade Network Advisor IP User Manual	1279
53-1003056-01