Brocade Communications Systems Network Advisor 12.3.0, User Manual

Page: 1497 / 1940

Brocade Network Advisor SAN User Manual 1445
53-1003154-01
Security events
C
Security events
Security events are those that indicate authentication success or failure, a security violation, or
user login and logout.
Security events for FC devices
For FOS switches, if the event is a RASLOG event and the RASLOG ID contains 'SEC', then the event
is categorized as a security event.
Security events for IP devices
For IOS devices, if the event OID starts with any of the following OIDs, then the event is categorized
as a security event.
•
1.3.6.1.2.1.14.16.2.6 [ospfIfAuthFailure]
•
1.3.6.1.2.1.14.16.2.7 [ospfVirtIfAuthFailure]
•
1.3.6.1.4.1.1991.0.9 [snOspfIfAuthFailure]
•
1.3.6.1.4.1.1991.0.10 [snOspfVirtIfAuthFailure]
•
1.3.6.1.4.1.1991.0.75 [snTrapUserLogin]
•
1.3.6.1.4.1.1991.0.76 [snTrapUserLogout]
•
1.3.6.1.4.1.1991.0.77 [snTrapPortSecurityViolation]
•
1.3.6.1.4.1.1991.0.78 [snTrapPortSecurityShutdown]
•
1.3.6.1.4.1.1991.0.85 [snTrapMacAuthEnable]
•
1.3.6.1.4.1.1991.0.86 [snTrapMacAuthDisable]
•
1.3.6.1.4.1.1991.0.87 [snTrapMacAuthMACAccepted]
•
1.3.6.1.4.1.1991.0.88 [snTrapMacAuthMACRejected]
•
1.3.6.1.4.1.1991.0.89 [snTrapMacAuthPortDisabled]
•
1.3.6.1.4.1.1991.0.110 [snTrapClientLoginReject]
•
1.3.6.1.4.1.1991.0.131 [snTrapDot1xSecurityViolation]
•
1.3.6.1.4.1.1991.0.143 [snTrapMacAuthRadiusTimeout]
•
1.3.6.1.4.1.1991.0.144 [snTrapDot1xRadiusTimeout]
•
1.3.6.1.4.1.1991.1.5.1.1.2.1.0.36 [swPortSecurityTrap]
•
1.3.6.1.4.1.1991.1.6.1.1.5.2.3 [sysRadiusServerChanged]
•
1.3.6.1.4.1.1991.1.6.1.1.6.2.3 [sysRadiusServerChanged]
•
1.3.6.1.4.1.1991.1.6.1.7.4.2.3 [dot11StationAuthentication]
•
1.3.6.1.4.1.1991.1.6.1.7.4.2.7 [dot1xMacAddrAuthSuccess]
•
1.3.6.1.4.1.1991.1.6.1.7.4.2.8 [dot1xMacAddrAuthFail]
•
1.3.6.1.4.1.1991.1.6.1.7.4.2.9 [dot1xAuthNotInitiated]
•
1.3.6.1.4.1.1991.1.6.1.7.4.2.10 [dot1xAuthSuccess]
•
1.3.6.1.4.1.1991.1.6.1.7.4.2.11 [dot1xAuthFail]
•
1.3.6.1.4.1.1991.1.6.1.7.4.2.12 [localMacAddrAuthSuccess]