CISCO-L2-TUNNEL-CONFIG-MIB

All MIBs › CISCO-L2-TUNNEL-CONFIG-MIB

Organization: Cisco Systems Inc.

Last Updated: 2007-02-15

Category: Cisco Devices, VPN and Security

Description: Configures Layer 2 protocol tunneling over provider networks to transparently carry customer L2 control traffic.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-L2-TUNNEL-CONFIG-MIB?

CISCO-L2-TUNNEL-CONFIG-MIB configures Layer 2 protocol tunneling (L2PT) on Cisco switches, letting separate customer networks connected via a service-provider network appear as a single VLAN by tunneling Layer 2 control-plane traffic (such as CDP, STP, VTP) transparently across the provider network. It exposes configuration data about 802.1Q tunnel mode per interface, which protocols are being tunneled, class-of-service marking, and drop thresholds for tunneled traffic. It is used to monitor the software/configuration status of L2 tunneling features, in particular tracking drop-threshold breaches and drop-notification events that reveal when tunneled control-plane traffic is being discarded due to rate limiting, which could disrupt customer L2 protocol operation across the tunnel. It builds on standard 802.1Q VLAN tunneling concepts and works alongside Cisco's VLAN/Q-in-Q MIBs. It is typically deployed on Cisco service-provider edge switches offering Metro Ethernet or transparent LAN services to enterprise customers, where CISCO-L2-TUNNEL-CONFIG-MIB SNMP monitoring helps catch tunneled control-plane traffic being dropped.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-L2-TUNNEL-CONFIG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco service-provider edge switches (Metro Ethernet/L2PT)

Monitoring Examples

An operator would poll cltcDot1qTunnelTable/cltcDot1qTunnelEntry to confirm cltcDot1qTunnelMode is correctly enabled on customer-facing ports, and check cltcTunneledProtocolTable/cltcTunneledProtocolEntry to see which cltcTunneledProtocolType values (e.g., CDP, STP) are configured for tunneling. cltcTunnelThresholdTable/cltcTunnelThresholdEntry combined with cltcTunnelSysDropThreshold reveals whether tunneled traffic is being dropped due to exceeding configured thresholds. A rising drop count against cltcTunnelSysDropThreshold with cltcTunnelSysDropNotifEnable active would trigger a notification indicating the tunnel is discarding customer control-plane traffic.

What Can Be Monitored

Dot1Q tunnel mode per interface
tunneled protocol types
tunnel CoS marking
tunnel drop threshold breaches
system-wide drop notifications

Imported Objects

From CISCO-QOS-PIB-MIB

QosLayer2Cos

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TruthValue

How to Use in IPNetwork Monitor

Example using cltcTunnelEncapStats OID:

Select a Cisco service-provider edge switch (Metro Ethernet/L2PT) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cltcTunnelEncapStats into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The tunneled PDU encapsulation statistics of an interface. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline (in encapsulated PDUs), since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoL2TunnelConfigMIB	1.3.6.1.4.1.9.9.246			This MIB module is for layer 2 tunneling related configurations on a device. Tunneling allows separate local networks to be considered as a single VLAN. These separate networks are connected via an ISP, which will tunnel the packets from one network to another, making it appear as if the two networks are actually just one.
cltcMIBObjects	1.3.6.1.4.1.9.9.246.1
cltcGlobal	1.3.6.1.4.1.9.9.246.1.1
QOS cltcTunnelCos	1.3.6.1.4.1.9.9.246.1.1.1	QosLayer2Cos	read-write	Specifies the user priority of the tunneled PDUs and applies to all ingress tunneling interfaces.
T/F cltcNotificationEnable	1.3.6.1.4.1.9.9.246.1.1.2	TruthValue	read-write	This object indicates whether the system will generate the cltcTunnelDropThresholdExceeded and cltcTunnelShutdownThresholdExceeded notifications.
U32 cltcTunnelSysDropThreshold	1.3.6.1.4.1.9.9.246.1.1.3	Unsigned32	read-write	This object specifies the drop threshold at the system level. A value of zero indicates that system level rate limiting is disabled.
T/F cltcTunnelSysDropNotifEnable	1.3.6.1.4.1.9.9.246.1.1.4	TruthValue	read-write	This object specifies whether the system will generate the cltcTunnelSysDropThresholdExceeded notification.
cltcDot1qTunnel	1.3.6.1.4.1.9.9.246.1.2
cltcDot1qTunnelTable	1.3.6.1.4.1.9.9.246.1.2.1		not-accessible	This table contains information about the dot1q tunnel interfaces. Only dot1q tunneling capable interfaces are shown. 1Q-in-1Q will allow service providers to separate the traffic of various customers within their infrastructure while the customers appear to be on the same VLANs.
cltcDot1qTunnelEntry	1.3.6.1.4.1.9.9.246.1.2.1.1		not-accessible	Information about the dot1q tunnel. Only dot1q tunneling capable interfaces are shown.
INT cltcDot1qTunnelMode	1.3.6.1.4.1.9.9.246.1.2.1.1.1	INTEGER	read-write	Indicates the dot1q tunnel mode of the interface. Setting the interface to dot1q tunnel 'disabled' mode causes the dot1q tunnel feature to be disabled on this interface. Setting the interface to dot1q tunnel 'enabled' mode causes the dot1q tunnel feature to be enabled on this interface.
cltcTunneledProtocol	1.3.6.1.4.1.9.9.246.1.3
cltcTunneledProtocolTable	1.3.6.1.4.1.9.9.246.1.3.1		not-accessible	This table contains information about the protocols being tunneled. Only tunneled protocol filtering capable interfaces are shown.
cltcTunneledProtocolEntry	1.3.6.1.4.1.9.9.246.1.3.1.1		not-accessible	Information about the protocols being tunneled. Only tunneled protocol filtering capable interfaces are shown.
BIT cltcTunneledProtocolType	1.3.6.1.4.1.9.9.246.1.3.1.1.1	Bits	read-write	Indicates tunneled protocol of the interface. If a BIT is set, then the value of the corresponding protocol is tunneled. Specifically, if the 'cdp(0)' BIT is set, then the Cisco Discovery Protocol PDU is tunneled; if the 'vtp(1)' BIT is set, then the VLAN Trunking Protocol PDU is tunneled; if the 'stp(2)' BIT is set, then the Spanning Tree Protocol PDU is tunneled; if the 'eoam(3)' BIT is set, then the ethernet Operation, Administration and Maintenance PDU is tunneled; if the 'lldp(4)' BIT is set, then the Link Layer Discovery Protocol is tunneled. If the bit for a given protocol is set for an interface, then the statistics for that interface and protocol will start to be monitored.
cltcTunnelThreshold	1.3.6.1.4.1.9.9.246.1.4
cltcTunnelThresholdTable	1.3.6.1.4.1.9.9.246.1.4.1		not-accessible	This table contains information about the thresholds for protocol tunneling. Only tunneled protocol filtering capable interfaces are shown. The objects will be on a per interface, per protocol basis.
cltcTunnelThresholdEntry	1.3.6.1.4.1.9.9.246.1.4.1.1		not-accessible	Information about the thresholds for protocol tunneling. Only tunneled protocol filtering capable interfaces are shown. The entries will be on a per interface, per protocol basis
INT cltcTunnelThresholdProtocolIndex	1.3.6.1.4.1.9.9.246.1.4.1.1.1	INTEGER	not-accessible	A tunneled protocol of an interface. - all(1) is supported for devices which allow the setting of thresholds on a per interface basis. This threshold is a combined threshold for the interface which includes all supported protocols. - cdp(2), vtp(3), stp(4), eoam(5) and lldp(6) are supported for devices which allow the setting of thresholds on a per interface, per protocol basis.
U32 cltcTunnelDropThreshold	1.3.6.1.4.1.9.9.246.1.4.1.1.2	Unsigned32	read-write	The drop threshold on an interface for a given protocol. After reaching this drop threshold, the interface will start dropping PDUs for the given protocol. This value cannot be greater than the value of cltcTunnelShutdownThreshold. A value of 0 indicates that no limit is set.
U32 cltcTunnelShutdownThreshold	1.3.6.1.4.1.9.9.246.1.4.1.1.3	Unsigned32	read-write	The shutdown threshold on an interface for a given protocol. After reaching the shutdown threshold, the interface will shutdown for the given protocol. This value cannot be less than the value of cltcTunnelDropThreshold. A value of 0 indicates that no limit is set.
cltcTunnelStatistics	1.3.6.1.4.1.9.9.246.1.5
cltcTunnelStatisticsTable	1.3.6.1.4.1.9.9.246.1.5.1		not-accessible	This table contains protocol tunneling statistics on the interface.
cltcTunnelStatisticsEntry	1.3.6.1.4.1.9.9.246.1.5.1.1		not-accessible	Protocol tunneling statistics on the interface.
INT cltcTunneledProtocolIndex	1.3.6.1.4.1.9.9.246.1.5.1.1.1	INTEGER	not-accessible	A tunneled protocol of an interface.
C32 cltcTunnelEncapStatsEx	1.3.6.1.4.1.9.9.246.1.5.1.1.2	Counter32	read-only	The tunneled PDU encapsulation statistics of an interface. These statistics cover the number of tunneled ingress PDUs.
C32 cltcTunnelDeEncapStats	1.3.6.1.4.1.9.9.246.1.5.1.1.3	Counter32	read-only	The tunneled PDU de-encapsulation statistics of an interface. These statistics cover the number of tunneled egress PDUs.
C32 cltcTunnelDropStats	1.3.6.1.4.1.9.9.246.1.5.1.1.4	Counter32	read-only	The number of PDUs dropped on an interface for a given protocol. The PDUs will be dropped when the cltcTunnelDropThreshold is reached.
cltcTunnelDropStatTable	1.3.6.1.4.1.9.9.246.1.5.2		not-accessible	This table contains protocol tunneling drop statistics.
cltcTunnelDropStatEntry	1.3.6.1.4.1.9.9.246.1.5.2.1		not-accessible	Drop statistics for a tunneled protocol.
C32 cltcTunnelTotalDropStats	1.3.6.1.4.1.9.9.246.1.5.2.1.1	Counter32	read-only	The number of tunneled ingress PDUs that have been dropped.
cltcDot1qAllTagged	1.3.6.1.4.1.9.9.246.1.6
T/F cltcDot1qAllTaggedEnabled	1.3.6.1.4.1.9.9.246.1.6.1	TruthValue	read-write	This object controls if dot1q-all-tagged feature is enabled in the managed system.
cltcDot1qAllTaggedIfTable	1.3.6.1.4.1.9.9.246.1.6.2		not-accessible	This table contains information about the dot1q-all-tagged feature's configuration of capable interfaces in the system.
cltcDot1qAllTaggedIfEntry	1.3.6.1.4.1.9.9.246.1.6.2.1		not-accessible	Configuration of dot1q-all-tagged feature on interfaces. Each entry is created for a dot1q-all-tagged capable interface in the system.
T/F cltcDot1qAllTaggedIfEnabled	1.3.6.1.4.1.9.9.246.1.6.2.1.1	TruthValue	read-write	This object specifies whether dot1q-all-tagged feature has been enabled on a specific interface.
cltcMIBNotifications	1.3.6.1.4.1.9.9.246.2
cltcMIBNotificationsPrefix	1.3.6.1.4.1.9.9.246.2.0
NTF cltcTunnelDropThresholdExceeded	1.3.6.1.4.1.9.9.246.2.0.1			This notification is generated when the cltcTunnelDropThreshold has been exceeded.
NTF cltcTunnelShutdownThresholdExceeded	1.3.6.1.4.1.9.9.246.2.0.2			This notification is generated when the cltcTunnelShutdownThreshold has been exceeded.
NTF cltcTunnelSysDropThresholdExceeded	1.3.6.1.4.1.9.9.246.2.0.3			This notification is generated when the cltcTunnelSysDropThreshold has been exceeded.
cltcMIBConformance	1.3.6.1.4.1.9.9.246.3
cltcMIBCompliances	1.3.6.1.4.1.9.9.246.3.1
cltcMIBCompliance	1.3.6.1.4.1.9.9.246.3.1.1			The compliance statement for the CISCO-L2-TUNNEL-CONFIG-MIB.
cltcMIBCompliance2	1.3.6.1.4.1.9.9.246.3.1.2			The compliance statement for the CISCO-L2-TUNNEL-CONFIG-MIB.
cltcMIBCompliance3	1.3.6.1.4.1.9.9.246.3.1.3			The compliance statement for the CISCO-L2-TUNNEL-CONFIG-MIB.
cltcMIBCompliance4	1.3.6.1.4.1.9.9.246.3.1.4			The compliance statement for the CISCO-L2-TUNNEL-CONFIG-MIB.
cltcMIBCompliance5	1.3.6.1.4.1.9.9.246.3.1.5			The compliance statement for the CISCO-L2-TUNNEL-CONFIG-MIB.
cltcMIBGroups	1.3.6.1.4.1.9.9.246.3.2
cltcDot1qTunnelGroup	1.3.6.1.4.1.9.9.246.3.2.1			A collection of objects for configuring dot1q tunnneling.
cltcTunneledProtocolGroup	1.3.6.1.4.1.9.9.246.3.2.2			A collection of objects for configuring tunneled protocols.
cltcTunnelThresholdGroup	1.3.6.1.4.1.9.9.246.3.2.3			A collection of objects for configuring the thresholds for protocol tunneling.
cltcTunnelStatisticsGroup	1.3.6.1.4.1.9.9.246.3.2.4			A collection of objects which give the statistics regarding the tunneling interfaces.
cltcDot1qAllTaggedGroup	1.3.6.1.4.1.9.9.246.3.2.5			A collection of objects for configuring the dot1q-all-tagged feature in the system.
cltcTunnelDropStatisticsGroup	1.3.6.1.4.1.9.9.246.3.2.6			A collection of objects which give the statistics regarding dropped PDUs on the tunneling interfaces.
cltcNotifsEnableGroup	1.3.6.1.4.1.9.9.246.3.2.7			A collections of objects used to enable notifications.
cltcTunnelThresholdNotifsGroup	1.3.6.1.4.1.9.9.246.3.2.8			A collection of notifications used for the tunnel thresholds.
cltcTunnelTotalDropGroup	1.3.6.1.4.1.9.9.246.3.2.9			A collection of objects which give the statistics regarding total number of dropped PDUs per protocol type.
cltcTunnelSysDropNotifEnableGroup	1.3.6.1.4.1.9.9.246.3.2.10			A collection of object to enable cltcTunnelSysDropThresholdExceeded notification.
cltcTunnelSysDropGroup	1.3.6.1.4.1.9.9.246.3.2.11			A collection of object for configuring the system level rate limiting.
cltcTunnelSysDropNotifGroup	1.3.6.1.4.1.9.9.246.3.2.12			A collection of notification used for the system level rate limiting has been exceeded.

RFC description

Cisco Layer 2 tunneling MIB for connecting separate networks as single VLANs via ISP tunnels.

Start monitoring Cisco service-provider edge switches (Metro Ethernet/L2PT) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-L2-TUNNEL-CONFIG-MIB