All MIBs › CISCO-PRIVATE-VLAN-MIB
Organization: Cisco Systems, Inc.
Last Updated: 2005-09-08
Category: Cisco Devices, VLAN and Bridging
Description: Manages Private VLAN community, isolated, and promiscuous port associations on Cisco switching platforms.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCO-PRIVATE-VLAN-MIB?
CISCO-PRIVATE-VLAN-MIB is a Cisco-specific MIB module that manages the Cisco Private VLAN (PVLAN) feature on Cisco Catalyst and Nexus switching platforms, allowing isolated, community, and promiscuous VLAN relationships to be configured and inspected. It exposes configuration data covering VLAN-to-primary-VLAN associations, private VLAN type assignments, and per-port secondary VLAN mappings. Its primary monitoring value is in tracking Layer 2 configuration state and consistency rather than hardware health, letting operators confirm that isolated and community VLANs are correctly bound to their primary VLAN and that ports have the expected private VLAN roles. It relies on and complements the standard Cisco VLAN membership and VTP MIBs for full switch VLAN management. It is typically deployed on Cisco switches in multi-tenant or DMZ network segments where port isolation is required for security.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-PRIVATE-VLAN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco Catalyst 9300 Series (2017-present) — fixed-form-factor campus access switch, supports Private VLANs
- Cisco Nexus 9000 Series — data center switch supporting Private VLAN community/isolated/promiscuous ports
Monitoring Examples
An administrator would poll cpvlanVlanTable/cpvlanVlanEntry to check cpvlanVlanPrivateVlanType and cpvlanVlanAssociatedPrimaryVlan, confirming that a secondary VLAN is still correctly bound as isolated or community under its primary VLAN. Checking cpvlanPrivatePortTable's cpvlanPrivatePortSecondaryVlan reveals which secondary VLAN each host port is assigned to, while cpvlanPromPortTable shows which ports act as promiscuous uplinks. An unexpected change in cpvlanVlanEditTable entries (via cpvlanVlanEditPrivateVlanType) could indicate an unauthorized reconfiguration of VLAN isolation boundaries, a potential security concern in a segmented network.
What Can Be Monitored
- private VLAN type per VLAN
- primary-to-secondary VLAN association
- port secondary VLAN assignment
- promiscuous port mapping
- private VLAN row status/configuration changes
This MIB depends on
Related MIBs
Imported Objects
From CISCO-SMI
| ciscoMgmt | OBJECT-IDENTITY |
From CISCO-VTP-MIB
| vtpVlanEditEntry | OBJECT-TYPE |
| vtpVlanEntry | OBJECT-TYPE |
From IF-MIB
| ifIndex | OBJECT-TYPE |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ciscoPrivateVlanMIB | 1.3.6.1.4.1.9.9.173 | The MIB module to support Private VLAN feature on Cisco's switching devices. | ||
| cpvlanMIBCompliance | 1.3.6.1.4.1.9.9.173.2.1.1 | The compliance statement for Private VLAN feature implementation. | ||
| cpvlanMIBCompliances | 1.3.6.1.4.1.9.9.173.2.1 | |||
| cpvlanMIBConformance | 1.3.6.1.4.1.9.9.173.2 | |||
| cpvlanMIBGroups | 1.3.6.1.4.1.9.9.173.2.2 | |||
| cpvlanMIBObjects | 1.3.6.1.4.1.9.9.173.1 | |||
| INT cpvlanPortMode | 1.3.6.1.4.1.9.9.173.1.2.3.1.1 | INTEGER | read-write | The Private VLAN port mode on this port. nonPrivateVlan(1) -- this port is configured to be a non-Private-VLAN port. host(2) -- this port is configured to be a Private-VLAN host port, i.e., private port. promiscuous(3) -- this port is configured to be a Private-VLAN promiscuous port. secondaryTrunk(4) -- this port is configured to be a Private-VLAN isolated trunk port or community trunk port. promiscuousTrunk(5) -- this port is configured to be a Private-VLAN promiscuous trunk port. |
| cpvlanPortModeEntry | 1.3.6.1.4.1.9.9.173.1.2.3.1 | not-accessible | A conceptual row containing information of the configuration of port mode on each port for the Private VLAN feature. An entry of this table is created by the managed system when the capability to be a Private VLAN port is detected on an interface. | |
| cpvlanPortModeGroup | 1.3.6.1.4.1.9.9.173.2.2.5 | This is an optional group with a collection of objects providing basic port mode configuration for Private VLAN feature on devices which support Private VLAN port mode feature. | ||
| cpvlanPortModeTable | 1.3.6.1.4.1.9.9.173.1.2.3 | not-accessible | A table containing information of the configuration of port mode for the Private VLAN feature. | |
| cpvlanPortObjects | 1.3.6.1.4.1.9.9.173.1.2 | |||
| cpvlanPrivatePortEntry | 1.3.6.1.4.1.9.9.173.1.2.1.1 | not-accessible | A conceptual row containing information of the configuration of secondary VLAN for each port. An entry is created by the managed system for each interface which can be configured as a private port for Private VLAN feature. | |
| cpvlanPrivatePortGroup | 1.3.6.1.4.1.9.9.173.2.2.2 | A collection of objects providing basic private port configuration for Private VLAN feature. | ||
| VLA cpvlanPrivatePortSecondaryVlan | 1.3.6.1.4.1.9.9.173.1.2.1.1.1 | VlanIndexOrZero | read-write | The VLAN ID of the secondary VLAN configured on this private port. A private port is a port that allows the ingress traffic of the secondary VLAN as well as egress traffic of its associated primary VLAN, but blocks the egress traffic of the isolated VLAN while allowing the egress traffic of the community or twoWayCommunity VLAN depending on the type of the secondary VLAN. Note that a port can join a secondary VLAN only after this secondary VLAN has been associated with a primary VLAN, i.e., the cpvlanVlanAssociatedPrimaryVlan has a non-zero value. The default value of 0 for this object means this port has not joined any secondary VLAN yet. |
| cpvlanPrivatePortTable | 1.3.6.1.4.1.9.9.173.1.2.1 | not-accessible | A table containing information of the configuration of secondary VLAN on the ports of the device. | |
| cpvlanPromPort4kGroup | 1.3.6.1.4.1.9.9.173.2.2.4 | A collection of objects providing basic promiscuous port configuration for Private VLAN feature on devices with VlanIndexOrZero range of up to 4095. | ||
| cpvlanPromPortEntry | 1.3.6.1.4.1.9.9.173.1.2.2.1 | not-accessible | A conceptual row containing information of secondary VLAN to primary VLAN remapping for each port. An entry is created by the managed system for each interface which can be configured as a promiscuous port for Private VLAN feature. | |
| cpvlanPromPortGroup | 1.3.6.1.4.1.9.9.173.2.2.3 | A collection of objects providing basic promiscuous port configuration for Private VLAN feature. | ||
| T/F cpvlanPromPortMultiPrimaryVlan | 1.3.6.1.4.1.9.9.173.1.2.2.1.1 | TruthValue | read-only | Indicates whether all the bits set as secondary VLANs in the corresponding remapping objects (i.e. cpvlanPromPortSecondaryRemap, cpvlanPromPortSecondaryRemap2k, cpvlanPromPortSecondaryRemap3k, cpvlanPromPortSecondaryRemap4k) can belong to multiple primary VLANs or not for this port. If this object value is false(2), then the object values of cpvlanVlanAssociatedPrimaryVlan for the secondary VLANs with their bits turned on as '1' in those remapping objects must be the same. If this object value is true(1), then the object values of cpvlanVlanAssociatedPrimaryVlan for the secondary VLANs with their bits turned on as '1' in those remapping objects need not be the same. A promiscuous port can remap a secondary VLAN to its associated primary VLAN for egress traffic on the fly as defined for Private VLAN feature. |
| OCT cpvlanPromPortSecondaryRemap | 1.3.6.1.4.1.9.9.173.1.2.2.1.2 | OCTET STRING | read-write | A string of octets containing one bit per VLAN in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 0 through 7; the second octet to VLANs 8 through 15; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. A bit can only be set to '1' when the bit is corresponding to a VLAN of Private VLAN isolated, community or twoWayCommunity type which has already been associated with a primary VLAN. Setting this bit to '1' makes this promiscuous port remap the secondary VLAN to its associated primary VLAN for egress traffic on the fly, or remap the associated primary VLAN to the secondary VLAN if the secondary VLAN is of twoWayCommunity type and the object value of cpvlanPromPortTwoWayRemapCapable for this promiscuous port is true(1). Note that if the length of this string is less than 128 octets, any 'missing' octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. |
| OCT cpvlanPromPortSecondaryRemap2k | 1.3.6.1.4.1.9.9.173.1.2.2.1.3 | OCTET STRING | read-write | A string of octets containing one bit per VLAN for VLANs with VlanIndexOrZero values of 1024 through 2047 in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 1024 through 1031; the second octet to VLANs 1032 through 1039; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. A bit can only be set to '1' when the bit is corresponding to a VLAN of Private VLAN isolated or community type which has already been associated with a primary VLAN. Setting this bit to '1' makes this promiscuous port remap the secondary VLAN to its associated primary VLAN for egress traffic on the fly, or remap the associated primary VLAN to the secondary VLAN if the secondary VLAN is of twoWayCommunity type and the object value of cpvlanPromPortTwoWayRemapCapable for this promiscuous port is true(1). Note that if the length of this string is less than 128 octets, any 'missing' octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095. |
| OCT cpvlanPromPortSecondaryRemap3k | 1.3.6.1.4.1.9.9.173.1.2.2.1.4 | OCTET STRING | read-write | A string of octets containing one bit per VLAN for VLANs with VlanIndexOrZero values of 2048 through 3071 in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 2048 through 2055; the second octet to VLANs 2056 through 2063; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. A bit can only be set to '1' when the bit is corresponding to a VLAN of Private VLAN isolated or community type which has already been associated with a primary VLAN. Setting this bit to '1' makes this promiscuous port remap the secondary VLAN to its associated primary VLAN for egress traffic on the fly, or remap the associated primary VLAN to the secondary VLAN if the secondary VLAN is of twoWayCommunity type and the object value of cpvlanPromPortTwoWayRemapCapable for this promiscuous port is true(1). Note that if the length of this string is less than 128 octets, any 'missing' octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095. |
| OCT cpvlanPromPortSecondaryRemap4k | 1.3.6.1.4.1.9.9.173.1.2.2.1.5 | OCTET STRING | read-write | A string of octets containing one bit per VLAN for VLANs with VlanIndexOrZero values of 3072 through 4095 in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 3072 through 3079; the second octet to VLANs 3080 through 3087; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. A bit can only be set to '1' when the bit is corresponding to a VLAN of Private VLAN isolated or community type which has already been associated with a primary VLAN. Setting this bit to '1' makes this promiscuous port remap the secondary VLAN to its associated primary VLAN for egress traffic on the fly, or remap the associated primary VLAN to the secondary VLAN if the secondary VLAN is of twoWayCommunity type and the object value of cpvlanPromPortTwoWayRemapCapable for this promiscuous port is true(1). Note that if the length of this string is less than 128 octets, any 'missing' octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095. |
| cpvlanPromPortTable | 1.3.6.1.4.1.9.9.173.1.2.2 | not-accessible | A table containing information of secondary VLAN to primary VLAN remapping on ports of the device. | |
| T/F cpvlanPromPortTwoWayRemapCapable | 1.3.6.1.4.1.9.9.173.1.2.2.1.6 | TruthValue | read-only | Indicates whether the port is capable to perform remapping from primary VLANs to the twoWayCommunity VLANs associated with them for the Private VLAN feature. A promiscuous port with this object value of false(2) can only perform one-way remapping from secondary VLANs to their associated primary VLANs, while a promiscuous port with this object value of true(1) can also perform remapping from primary VLANs to the twoWayCommunity VLANs associated with them in addition to that. |
| cpvlanSVIMappingEntry | 1.3.6.1.4.1.9.9.173.1.3.1.1 | not-accessible | A conceptual row containing the Primary VLAN SVI mapping configuration for the existing secondary VLANs. An entry is created by the managed system for each VLAN with corresponding VLAN's cpvlanVlanPrivateVlanType of isolated(3), community(4), and twoWayCommunity(5). | |
| cpvlanSVIMappingGroup | 1.3.6.1.4.1.9.9.173.2.2.6 | This is an optional group with a collection of objects providing primary VLAN SVI mapping configuration for the Private VLAN feature on devices which support Primary VLAN SVI mapping feature. | ||
| VLA cpvlanSVIMappingPrimarySVI | 1.3.6.1.4.1.9.9.173.1.3.1.1.2 | VlanIndexOrZero | read-write | The Vlan ID of the primary VLAN SVI this secondary VLAN is mapped to for the Private VLAN feature. This object has the value of zero if this secondary VLAN is not mapped to any primary VLAN SVI. |
| cpvlanSVIMappingTable | 1.3.6.1.4.1.9.9.173.1.3.1 | not-accessible | A table containing the configuration of primary VLAN SVI (Switch Virtual Interfaces) mapping for the secondary VLANs for the Private VLAN feature. | |
| VLA cpvlanSVIMappingVlanIndex | 1.3.6.1.4.1.9.9.173.1.3.1.1.1 | VlanIndexOrZero | not-accessible | An index value that uniquely identifies the Virtual LAN associated with this information. |
| cpvlanSVIObjects | 1.3.6.1.4.1.9.9.173.1.3 | |||
| INT cpvlanTrunkPortDynamicState | 1.3.6.1.4.1.9.9.173.1.2.4.1.1 | INTEGER | read-write | For private VLAN trunk ports, this object allows the operator to mandate the trunking behavior of the port on(1) dictates that the private VLAN port will always be a trunk. If the negotiation is supported on this port, negotiation will take place with the far end to attempt to bring the far end into trunking state. onNoNegotiate(2) is used to indicate that the interface is permanently set to be a trunk, and no negotiation takes place with the far end on the link to ensure consistent operation. This is similar to on(1) except no negotiation takes place with the far end. If a port does not support negotiation, the value of on(1) is not allowed. If the port's cpvlanTrunkPortEncapType is set to negotiate(3), onNoNegotiate(2) is not allowed. |
| INT cpvlanTrunkPortDynamicStatus | 1.3.6.1.4.1.9.9.173.1.2.4.1.12 | INTEGER | read-only | Indicates the current dynamic trunking status of the specified private VLAN port. trunking(1) indicates that the private VLAN port is currently operating as a private VLAN trunk port notTrunking(2) indicates that the private VLAN port is currently not trunking but is operating as an access port. |
| INT cpvlanTrunkPortEncapOperType | 1.3.6.1.4.1.9.9.173.1.2.4.1.13 | INTEGER | read-only | The type of VLAN encapsulation in use on this private vlan trunk port. dot1Q(1) indicates that the port accepts and transmits packets with IEEE 802.1q VLAN encapsulation isl(2) indicates that the port accepts and transmits packets with Inter Switch Link (ISL) VLAN encapsulation If the cpvlanTrunkPortDynamicStatus is notTrunking(2) or if the encapsulation type negotiation has not been completed, the object is set to notApplicable(3). |
| INT cpvlanTrunkPortEncapType | 1.3.6.1.4.1.9.9.173.1.2.4.1.2 | INTEGER | read-write | The type of VLAN encapsulation desired to be used on this private vlan trunk port. It is either a particular type, or 'negotiate' meaning whatever type results from the negotiation. dot1Q(1) indicates that the port should accept and transmit packets with IEEE 802.1q VLAN encapsulation isl(2) indicates that the port should accept and transmit packets with Inter Switch Link (ISL) VLAN encapsulation negotiate(3) indicates that the VLAN encapsulation is negotiated with the far end. The negotiated VLAN encapsulation can be dot1Q or isl. negotiate(2) is not allowed if the port does not support negotiation of VLAN encapsulation type or if its cpvlanTrunkPortDynamicState is set to onNoNegotiate(2) |
| cpvlanTrunkPortEntry | 1.3.6.1.4.1.9.9.173.1.2.4.1 | not-accessible | A conceptual row containing information of the configuration of one private vlan trunk port. An entry is created by the managed system for each interface which can be configured as a private vlan trunk port | |
| cpvlanTrunkPortGroup | 1.3.6.1.4.1.9.9.173.2.2.7 | A collection of objects providing basic private VLAN trunk port configuration for Private VLAN feature. | ||
| VLA cpvlanTrunkPortNativeVlan | 1.3.6.1.4.1.9.9.173.1.2.4.1.3 | VlanIndexOrZero | read-write | The VlanIndex of the VLAN which is represented by native frames on this private vlan trunk port. For private vlan trunk ports that need to drop untagged frames or not supporting the sending and receiving of native frames, this value should be set to zero |
| VLA cpvlanTrunkPortNormalVlans | 1.3.6.1.4.1.9.9.173.1.2.4.1.8 | VlanIndexBitmap | read-write | A string of octets containing one bit per VLAN for VLANs with values of 0 through 1023 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a normal VLAN, it allows packets belonging to this vlan on this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a normal VLAN, then the local system is enabled to transmit and receive frames as normal VLAN If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a secondary VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. |
| VLA cpvlanTrunkPortNormalVlans2k | 1.3.6.1.4.1.9.9.173.1.2.4.1.9 | VlanIndexBitmap | read-write | A string of octets containing one bit per VLAN for VLANs with values of 1024 through 2047 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a normal VLAN, it allows packets belonging to this vlan on this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a normal VLAN, then the local system is enabled to transmit and receive frames as normal VLAN If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a secondary VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095. |
| VLA cpvlanTrunkPortNormalVlans3k | 1.3.6.1.4.1.9.9.173.1.2.4.1.10 | VlanIndexBitmap | read-write | A string of octets containing one bit per VLAN for VLANs with values of 2048 through 3071 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a normal VLAN, it allows packets belonging to this vlan on this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a normal VLAN, then the local system is enabled to transmit and receive frames as normal VLAN If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a secondary VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095. |
| VLA cpvlanTrunkPortNormalVlans4k | 1.3.6.1.4.1.9.9.173.1.2.4.1.11 | VlanIndexBitmap | read-write | A string of octets containing one bit per VLAN for VLANs with values of 3072 through 4095 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a normal VLAN, it allows packets belonging to this vlan on this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a normal VLAN, then the local system is enabled to transmit and receive frames as normal VLAN If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a secondary VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095. |
| VLA cpvlanTrunkPortSecondaryVlans | 1.3.6.1.4.1.9.9.173.1.2.4.1.4 | VlanIndexBitmap | read-write | A string of octets containing one bit per VLAN for VLANs with values of 0 through 1023 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a secondary VLAN that has already been associated with a primary VLAN, it allows this private VLAN trunk port to remap the secondary VLAN to its primary VLAN for ingress traffic and to remap its associated primary VLAN to the secondary VLAN for egress traffic. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a secondary VLAN, then the local system is enabled to transmit and receive frames with proper VLAN remapping via this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a normal VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. |
| VLA cpvlanTrunkPortSecondaryVlans2k | 1.3.6.1.4.1.9.9.173.1.2.4.1.5 | VlanIndexBitmap | read-write | A string of octets containing one bit per VLAN for VLANs with values of 1024 through 2047 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a secondary VLAN that has already been associated with a primary VLAN, it allows this private VLAN trunk port to remap the secondary VLAN to its primary VLAN for ingress traffic and to remap its associated primary VLAN to the secondary VLAN for egress traffic. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a secondary VLAN, then the local system is enabled to transmit and receive frames with proper VLAN remapping via this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a normal VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of VLANs up to 4095. |
| VLA cpvlanTrunkPortSecondaryVlans3k | 1.3.6.1.4.1.9.9.173.1.2.4.1.6 | VlanIndexBitmap | read-write | A string of octets containing one bit per VLAN for VLANs with values of 2048 through 3071 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a secondary VLAN that has already been associated with a primary VLAN, it allows this private VLAN trunk port to remap the secondary VLAN to its primary VLAN for ingress traffic and to remap its associated primary VLAN to the secondary VLAN for egress traffic. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a secondary VLAN, then the local system is enabled to transmit and receive frames with proper VLAN remapping via this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a normal VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of up to 4095. |
| VLA cpvlanTrunkPortSecondaryVlans4k | 1.3.6.1.4.1.9.9.173.1.2.4.1.7 | VlanIndexBitmap | read-write | A string of octets containing one bit per VLAN for VLANs with values of 3072 through 4095 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a secondary VLAN that has already been associated with a primary VLAN, it allows this private VLAN trunk port to remap the secondary VLAN to its primary VLAN for ingress traffic and to remap its associated primary VLAN to the secondary VLAN for egress traffic. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a secondary VLAN, then the local system is enabled to transmit and receive frames with proper VLAN remapping via this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a normal VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of up to 4095. |
| cpvlanTrunkPortTable | 1.3.6.1.4.1.9.9.173.1.2.4 | not-accessible | A table containing information of the configuration of a private vlan trunk port in the device. This includes secondary and normal allowed VLAN, encapsulation type, trunk native vlan (as applied to private vlan trunks). | |
| VLA cpvlanVlanAssociatedPrimaryVlan | 1.3.6.1.4.1.9.9.173.1.1.1.1.2 | VlanIndexOrZero | read-only | The VLAN ID of The associated primary VLAN used for the Private VLAN feature if cpvlanVlanPrivateVlanType has the value of isolated(3), community(4) or twoWayCommunity(5). If cpvlanVlanPrivateVlanType has the value of normal(1) or primary(2), then this object has the value of 0. Note that one isolated VLAN can only be associated with one unique primary VLAN. One primary VLAN can only be associated with one isolated VLAN. One primary VLAN can be associated with multiple VLANs of community or twoWayCommunity type; one community or twoWayCommunity VLAN can only be associated with one unique primary VLAN. |
| VLA cpvlanVlanEditAssocPrimaryVlan | 1.3.6.1.4.1.9.9.173.1.1.2.1.2 | VlanIndexOrZero | read-write | The VLAN ID of the associated primary VLAN used for the Private VLAN feature if cpvlanVlanEditPrivateVlanType has the value of isolated(3), community(4), twoWayCommunity(5). If cpvlanVlanEditPrivateVlanType has the value of normal(1) or primary(2), then this object has the value of 0. Note that one isolated VLAN can only be associated with one unique primary VLAN. One primary VLAN can only be associated with one isolated VLAN. One primary VLAN can be associated with multiple VLANs of community or twoWayCommunity type; one community or twoWayCommunity VLAN can only be associated with one unique primary VLAN. |
| cpvlanVlanEditEntry | 1.3.6.1.4.1.9.9.173.1.1.2.1 | not-accessible | A conceptual row containing the Private VLAN information on the VLANs in the VLAN Edit Buffer for a particular management domain. | |
| PRI cpvlanVlanEditPrivateVlanType | 1.3.6.1.4.1.9.9.173.1.1.2.1.1 | PrivateVlanType | read-write | The VLAN type as defined for Private VLAN feature. Note that a VLAN's Private VLAN type can not be changed once it already has any ports in it. |
| cpvlanVlanEditTable | 1.3.6.1.4.1.9.9.173.1.1.2 | not-accessible | A table containing Private VLAN information on the VLANs in the VLAN Edit Buffer for a particular management domain. | |
| cpvlanVlanEntry | 1.3.6.1.4.1.9.9.173.1.1.1.1 | not-accessible | A conceptual row containing the Private VLAN information on the VLANs for a particular management domain. | |
| cpvlanVlanGroup | 1.3.6.1.4.1.9.9.173.2.2.1 | A collection of objects providing basic VLAN configuration for Private VLAN feature. | ||
| cpvlanVlanObjects | 1.3.6.1.4.1.9.9.173.1.1 | |||
| PRI cpvlanVlanPrivateVlanType | 1.3.6.1.4.1.9.9.173.1.1.1.1.1 | PrivateVlanType | read-only | Indicated the VLAN type as defined for Private VLAN feature. |
| cpvlanVlanTable | 1.3.6.1.4.1.9.9.173.1.1.1 | not-accessible | A table containing Private VLAN information on the VLANs which currently exist. |
RFC description
Cisco private VLAN (PVLAN) port isolation and community management objects.
Start monitoring Cisco Catalyst/Nexus switches (Private VLAN) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.