mac-security
AsterNOS YANG Model for MacSecurity.
YANG Tree Diagram
module: asternos-mac-security
augment /if:interfaces/if:interface:
+--rw mac-security
+--rw port-security
| +--rw enabled? boolean
| +--rw sticky-enabled? boolean
| +--rw violation-action? enumeration
| +--rw maximum? uint16
| +--rw secure-addresses
| +--rw secure-address* [vlan-id mac-address]
| +--rw mac-address yang:mac-address
| +--rw vlan-id uint16
+--rw mac-limit
| +--rw maximum? uint32
+--rw mac-learning-priority
| +--rw priority? priority
+--rw mac-learning-group? uint8
rpcs:
+---x show-mac-limit
| +---w input
| | +---w (filter)
| | +--:(port-name)
| | | +---w port-name? cmn:ethernet-port-name
| | +--:(portchannel-name)
| | | +---w portchannel-name? cmn:port-channel-name
| | +--:(vlan-id)
| | | +---w vlan-id? cmn:vlan-id
| | +--:(all)
| | +---w all? empty
| +--ro output
| +--ro data? <anydata>
+---x show-mac-learning-priority
| +---w input
| | +---w interface? union
| +--ro output
| +--ro data? <anydata>
+---x show-mac-learning-group
| +---w input
| | +---w interface? union
| +--ro output
| +--ro data? <anydata>
+---x show-port-security
| +---w input
| | +---w interface? union
| +--ro output
| +--ro data? <anydata>
+---x show-port-security-address
| +---w input
| | +---w interface? union
| +--ro output
| +--ro data? <anydata>
+---x clear-port-security-address
+---w input
| +---w interface? union
| +---w fdb-type? enumeration
+--ro output
+--ro data? <anydata>Resources
Resource List
Path | Access |
|---|---|
/?/interfaces/interface/mac-security | Read-Write |
/?/interfaces/interface/mac-security/port-security | Read-Write |
/?/interfaces/interface/mac-security/port-security/enabled | Read-Write |
/?/interfaces/interface/mac-security/port-security/sticky-enabled | Read-Write |
/?/interfaces/interface/mac-security/port-security/violation-action | Read-Write |
/?/interfaces/interface/mac-security/port-security/maximum | Read-Write |
/?/interfaces/interface/mac-security/port-security/secure-addresses | Read-Write |
/?/interfaces/interface/mac-security/port-security/secure-addresses/secure-address | Read-Write |
/?/interfaces/interface/mac-security/port-security/secure-addresses/secure-address/mac-address | Read-Write |
/?/interfaces/interface/mac-security/port-security/secure-addresses/secure-address/vlan-id | Read-Write |
/?/interfaces/interface/mac-security/mac-limit | Read-Write |
/?/interfaces/interface/mac-security/mac-limit/maximum | Read-Write |
/?/interfaces/interface/mac-security/mac-learning-priority | Read-Write |
/?/interfaces/interface/mac-security/mac-learning-priority/priority | Read-Write |
/?/interfaces/interface/mac-security/mac-learning-group | Read-Write |
Detailed Nodes
/?/interfaces/interface/mac-security
Path
/?/interfaces/interface/mac-security
Node Type
container
Access
Read-Write
/?/interfaces/interface/mac-security/port-security
Path
/?/interfaces/interface/mac-security/port-security
Node Type
container
Description
Port security configurations for port
Access
Read-Write
/?/interfaces/interface/mac-security/port-security/enabled
Path
/?/interfaces/interface/mac-security/port-security/enabled
Node Type
leaf
Description
Enable port security on this interface.
Access
Read-Write
Data Type
<YANG type boolean>
Constraints
Valid in [true, false]
/?/interfaces/interface/mac-security/port-security/sticky-enabled
Path
/?/interfaces/interface/mac-security/port-security/sticky-enabled
Node Type
leaf
Description
Enable sticky MAC on this interface.
Access
Read-Write
Data Type
<YANG type boolean>
Constraints
Valid in [true, false]
/?/interfaces/interface/mac-security/port-security/violation-action
Path
/?/interfaces/interface/mac-security/port-security/violation-action
Node Type
leaf
Description
Action to take when security violation occurs
Access
Read-Write
Data Type
<YANG type enumeration>
Constraints
Enumeration with options:
- protect
- restrict
- shutdown
/?/interfaces/interface/mac-security/port-security/maximum
Path
/?/interfaces/interface/mac-security/port-security/maximum
Node Type
leaf
Description
Maximum number of secure MAC addresses allowed on this port
Access
Read-Write
Data Type
<YANG type uint16>
/?/interfaces/interface/mac-security/port-security/secure-addresses
Path
/?/interfaces/interface/mac-security/port-security/secure-addresses
Node Type
container
Access
Read-Write
/?/interfaces/interface/mac-security/port-security/secure-addresses/secure-address
Path
/?/interfaces/interface/mac-security/port-security/secure-addresses/secure-address
Node Type
list
Description
Statically configured secure MAC addresses
Access
Read-Write
/?/interfaces/interface/mac-security/port-security/secure-addresses/secure-address/mac-address
Path
/?/interfaces/interface/mac-security/port-security/secure-addresses/secure-address/mac-address
Node Type
leaf
Description
Static secure MAC address
Access
Read-Write
Data Type
<YANG type mac-address>
Constraints
The mac-address type represents an IEEE 802 MAC address.
The canonical representation uses lowercase characters.
In the value set and its semantics, this type is equivalent to the MacAddress textual convention of the SMIv2.
/?/interfaces/interface/mac-security/port-security/secure-addresses/secure-address/vlan-id
Path
/?/interfaces/interface/mac-security/port-security/secure-addresses/secure-address/vlan-id
Node Type
leaf
Access
Read-Write
Data Type
<YANG type uint16>
Constraints
Valid range: 1 to 4094
/?/interfaces/interface/mac-security/mac-limit
Path
/?/interfaces/interface/mac-security/mac-limit
Node Type
container
Access
Read-Write
/?/interfaces/interface/mac-security/mac-limit/maximum
Path
/?/interfaces/interface/mac-security/mac-limit/maximum
Node Type
leaf
Description
Set LAG dynamic MAC quantity limit.
Access
Read-Write
Data Type
<YANG type uint32>
Constraints
Valid range: 0 to 32000
/?/interfaces/interface/mac-security/mac-learning-priority
Path
/?/interfaces/interface/mac-security/mac-learning-priority
Node Type
container
Access
Read-Write
/?/interfaces/interface/mac-security/mac-learning-priority/priority
Path
/?/interfaces/interface/mac-security/mac-learning-priority/priority
Node Type
leaf
Description
Set interface MAC learning priority.
Access
Read-Write
Data Type
<YANG type priority>
Constraints
Enumeration with options:
- low
- high
/?/interfaces/interface/mac-security/mac-learning-group
Path
/?/interfaces/interface/mac-security/mac-learning-group
Node Type
leaf
Description
Address movement between same priority interfaces is allowed only if both interfaces belong to the same learning group.
Access
Read-Write
Data Type
<YANG type uint8>
Constraints
Valid range: 0 to 15