CISCO-SWITCH-RATE-LIMITER-MIB

All MIBs › CISCO-SWITCH-RATE-LIMITER-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2011-05-16

Category: Cisco Devices, Quality of Service

Description: Manages hardware rate limiters and policers on Cisco Catalyst switches for control-plane and data-plane traffic protection.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-SWITCH-RATE-LIMITER-MIB?

CISCO-SWITCH-RATE-LIMITER-MIB is a Cisco vendor MIB for the Switch Rate Limiter feature on Cisco Layer 2/Layer 3 devices, which throttles redirected control-plane exception packets so they cannot overwhelm the supervisor module. csrlRateLimiterClassTable enumerates the rate-limiter classes a device supports with a human-readable csrlRateLimiterClassDescr; csrlGlobalRateLimiterTable, per class, exposes the system-wide configured rate (csrlGlobalRateLimiterConfigured, in packets/sec, with -1 meaning disabled and 0 meaning fully blocked) alongside Counter64 allowed/dropped/total packet counts; csrlLocalRateLimiterTable extends this per hardware entity, indexed by entPhysicalIndex plus class ID, allowing an individual module to override the global rate (-2 meaning "inherit global") with its own allowed/dropped/total counters. This lets an operator both configure how aggressively control-plane traffic is throttled per class and entity, and monitor whether legitimate control packets are being dropped due to rate limiting — key for diagnosing routing protocol flaps or management issues traced to overly aggressive limits. It depends on ENTITY-MIB's entPhysicalIndex and SNMP-FRAMEWORK-MIB's SnmpAdminString, and is deployed on Cisco Catalyst switches and other CISCO-SMI-tree Layer 2/3 platforms; engineers can perform a CISCO-SWITCH-RATE-LIMITER-MIB download when tuning control-plane protection on these switches.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-SWITCH-RATE-LIMITER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Catalyst switches (Layer 2/3 platforms)

Monitoring Examples

An operator polls csrlGlobalRateLimiterTable for a given csrlRateLimiterClassId and compares csrlGlobalRateLimiterDropped against csrlGlobalRateLimiterTotal; a high drop ratio on a class covering routing-protocol packets would indicate the configured rate limit is too low and is silently discarding legitimate control traffic.

What Can Be Monitored

rate limiter class descriptions
global configured rate limit per class (packets/sec)
global allowed/dropped/total packet counters
per-entity local rate limit override and counters
control-plane exception packet protection status

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From ENTITY-MIB

entPhysicalIndex

OBJECT-TYPE

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

How to Use in IPNetwork Monitor

Example using csrlGlobalRateLimiterAllowed OID:

Select a Cisco Catalyst switch (Layer 2/3, rate limiter) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type csrlGlobalRateLimiterAllowed into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This object indicates the number of packets allowed globally for this rate limiter class. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline (in packets), since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoSwitchRateLimiterMIB	1.3.6.1.4.1.9.9.773			This MIB module defines management objects for the Switch Rate Limiter features on Cisco Layer 2 and Layer 3 devices. Rate limits prevents redirected control packets for egress exceptions from overwhelming the supervisor module on a device.
ciscoSwitchRateLimiterMIBNotifs	1.3.6.1.4.1.9.9.773.0
ciscoSwitchRateLimiterMIBObjects	1.3.6.1.4.1.9.9.773.1
csrlRateLimiterInfo	1.3.6.1.4.1.9.9.773.1.1
csrlRateLimiterClassTable	1.3.6.1.4.1.9.9.773.1.1.1		not-accessible	A table containing descriptions of the rate limiter classes supported by the device.
csrlRateLimiterClassEntry	1.3.6.1.4.1.9.9.773.1.1.1.1		not-accessible	A conceptual row containing the description of a particular rate limiter class.
U32 csrlRateLimiterClassId	1.3.6.1.4.1.9.9.773.1.1.1.1.1	Unsigned32	not-accessible	An arbitrary positive integer value that uniquely identifies a rate limiter class.
STR csrlRateLimiterClassDescr	1.3.6.1.4.1.9.9.773.1.1.1.1.2	SnmpAdminString	read-only	This object indicates the description of the rate limiter class.
csrlGlobalRateLimiter	1.3.6.1.4.1.9.9.773.1.2
csrlGlobalRateLimiterTable	1.3.6.1.4.1.9.9.773.1.2.1		not-accessible	A table containing global configuration and statistics of rate limiter classes.
csrlGlobalRateLimiterEntry	1.3.6.1.4.1.9.9.773.1.2.1.1		not-accessible	A conceptual row containing global management information of a particular rate limiter class.
I32 csrlGlobalRateLimiterConfigured	1.3.6.1.4.1.9.9.773.1.2.1.1.1	Integer32	read-write	This object specifies the global rate limit configured for this rate limiter class. The global rate limit for this class is applied to every entity which does not have its local rate limit of same class configured, the value of the corresponding csrlLocalRateLimiterConfigured is -2. A value of -1 indicates that the global rate limit for this rate limiter class is disabled. A value of 0 indicates that the system does not allow any packets for this rate limiter class to go through the supervisor.
C64 csrlGlobalRateLimiterAllowedEx	1.3.6.1.4.1.9.9.773.1.2.1.1.2	Counter64	read-only	This object indicates the number of packets allowed globally for this rate limiter class. When the value of csrlGlobalRateLimiterConfigured is -1, the value of this object is always 0.
C64 csrlGlobalRateLimiterDropped	1.3.6.1.4.1.9.9.773.1.2.1.1.3	Counter64	read-only	This object indicates the number of packets which have been dropped globally for this rate limiter class. When the value of csrlGlobalRateLimiterConfigured is -1, the value of this object is always 0.
C64 csrlGlobalRateLimiterTotal	1.3.6.1.4.1.9.9.773.1.2.1.1.4	Counter64	read-only	This object indicates the total number of packets have been processed globally for this rate limiter class. When the value of csrlGlobalRateLimiterConfigured is -1, the value of this object is always 0.
csrlLocalRateLimiter	1.3.6.1.4.1.9.9.773.1.3
csrlLocalRateLimiterTable	1.3.6.1.4.1.9.9.773.1.3.1		not-accessible	A table containing local rate limiter configuration and statistics for a specific entity. For Example: A module on the device. A set of rate limiter class entries are added to this table when a rate limiter capable entity comes online. The same set of entries are deleted from this table when the entity goes offline.
csrlLocalRateLimiterEntry	1.3.6.1.4.1.9.9.773.1.3.1.1		not-accessible	A conceptual row containing the local rate limiter management information for a particular rate limiter capable entity.
I32 csrlLocalRateLimiterConfigured	1.3.6.1.4.1.9.9.773.1.3.1.1.1	Integer32	read-write	This object specifies the local rate limit configured for this rate limiter class on this entity. A value of -2 indicates that the entity does not have local rate limiter configured, and will pick up the configuration from csrlGlobalRateLimiterConfigured. A value of -1 indicates that this rate limiter class is disabled locally for this entity. A value of 0 indicates that the rate limiter does not allow any packets from this entity for this rate limiter class to go through the supervisor.
C64 csrlLocalRateLimiterAllowed	1.3.6.1.4.1.9.9.773.1.3.1.1.2	Counter64	read-only	This object indicates the number of packets allowed on this entity for this rate limiter class. When the value of csrlLocalRateLimiterConfigured is -1, the value of this object is always 0.
C64 csrlLocalRateLimiterDropped	1.3.6.1.4.1.9.9.773.1.3.1.1.3	Counter64	read-only	This object indicates the number of packets dropped on this entity for this rate limiter class. When the value of csrlLocalRateLimiterConfigured is -1, the value of this object is always 0.
C64 csrlLocalRateLimiterTotal	1.3.6.1.4.1.9.9.773.1.3.1.1.4	Counter64	read-only	This object indicates the number of packets processed on this entity for this rate limiter class. When the value of csrlLocalRateLimiterConfigured is -1, the value of this object is always 0.
ciscoSwitchRateLimiterMIBConform	1.3.6.1.4.1.9.9.773.2
csrlMIBCompliances	1.3.6.1.4.1.9.9.773.2.1
csrlMIBCompliance	1.3.6.1.4.1.9.9.773.2.1.1			The compliance statement for CISCO-SWITCH-RATE-LIMITER-MIB.my.
csrlMIBGroups	1.3.6.1.4.1.9.9.773.2.2
csrlRateLimiterClassGroup	1.3.6.1.4.1.9.9.773.2.2.1			A collection of objects providing Rate Limiter Class information.
csrlGlobalRateLimiterGroup	1.3.6.1.4.1.9.9.773.2.2.2			A collection of objects providing global rate limiter information.
csrlLocalRateLimiterGroup	1.3.6.1.4.1.9.9.773.2.2.3			A collection of objects providing local rate limiter information.

RFC description

Rate limiting control for redirected packets on Cisco Layer 2/3 switches to protect supervisor modules.

Start monitoring Cisco Catalyst switches (Layer 2/3, rate limiter) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-SWITCH-RATE-LIMITER-MIB