All MIBs › BPDU-PROTECTION-MIB
Organization: D-Link Corp.
Last Updated: 2009-03-12
Category: VLAN and Bridging, VPN and Security
Description: Monitors and configures 802.1D BPDU guard protection on switch ports to prevent STP topology attacks.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is BPDU-PROTECTION-MIB?
BPDU-PROTECTION-MIB is a proprietary enterprise MIB for configuring and monitoring 802.1D BPDU Guard protection on switch ports, a Layer 2 security feature that shuts down or blocks ports receiving unexpected Bridge Protocol Data Units to prevent Spanning Tree topology manipulation attacks. It belongs to the Layer 2 switch security/configuration category. Its monitoring relevance is software/port-status oriented rather than physical: it would let an operator see which ports have BPDU guard enabled and whether any port has been err-disabled or blocked due to a detected rogue BPDU, functioning as a security-fault indicator on the switch's control-plane software. It builds on and extends the IEEE 802.1D bridge/Spanning Tree standard referenced in its module description, implying dependency on that standard's bridge MIB concepts. It is deployed on enterprise Layer 2 switches at the network edge where BPDU Guard is used to protect against unauthorized switches or STP attacks on access ports, making this BPDU-PROTECTION-MIB reference useful for confirming which ports have guard enabled.
IPNetwork Monitor allows you to monitor SNMP objects defined in BPDU-PROTECTION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- enterprise Layer 2 switch
Monitoring Examples
No sample_objects were provided for this module, so no concrete object/table names can be cited; based on its description it would expose a per-port BPDU-guard-enabled flag and a violation/blocked-status object. An operator would poll such per-port status to detect a port that has been shut down after receiving an unexpected BPDU, revealing a potential rogue switch or STP attack on that access port. No fabricated object names are used given the empty sample_objects list.
Imported Objects
From DLINK-ID-REC-MIB
| dlink-common-mgmt |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE |
OIDs
RFC description
BPDU protection management for D-Link switches to prevent spanning tree topology attacks.
Start monitoring D-Link managed switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.