CISCO-VMPS-MIB

All MIBs › CISCO-VMPS-MIB

Organization: Cisco System Inc.

Last Updated: 2004-01-20

Category: VLAN and Bridging, Vendor: Cisco Devices

Description: Manages Cisco VLAN Membership Policy Server (VMPS) for dynamic VLAN assignment based on MAC addresses.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-VMPS-MIB?

CISCO-VMPS-MIB manages the Cisco VLAN Membership Policy Server (VMPS) feature, which dynamically assigns switch ports to VLANs based on the MAC address of the connected device, using a downloaded VLAN database file. It exposes configuration objects for the VMPS client/server role including admin status, the download server address and database filename, fallback VLAN, and security mode. Its monitoring value is largely operational/configuration health -- confirming VMPS is enabled and correctly pointed at its database server, tracking whether a manual database re-download succeeded, and verifying the configured fallback VLAN for unmatched MAC addresses. It depends on the underlying VLAN numbering model shared with other Cisco Catalyst VLAN MIBs and often coexists with the VMPS AGENT-CAPABILITIES module. It is deployed on Cisco Catalyst switches using dynamic, MAC-based VLAN assignment rather than static port-to-VLAN configuration. Engineers can download the CISCO-VMPS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-VMPS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Catalyst switches

Monitoring Examples

vmpsConfigTable/vmpsConfigEntry exposes vmpsAdminStatus, vmpsDownloadServerAddress, and vmpsConfigFileName, letting an admin confirm VMPS is administratively enabled and pointed at the correct database server. vmpsFallbackVlan and vmpsSecureMode reveal what happens to unmatched clients and whether secure mode is enforced, while vmpsTriggerDownload lets an operator force a re-fetch of the VLAN database and verify it completes without error.

What Can Be Monitored

VMPS admin status
VLAN database download server/filename
fallback VLAN assignment
secure mode setting
database download trigger/status

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using vmpsInConfigReqs OID:

Select a Cisco Catalyst switch (VLAN Membership Policy Server) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type vmpsInConfigReqs into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of configure requests, including vmpsInConfigErrors, that have been received by the VMPS. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoVmpsMIB	1.3.6.1.4.1.9.9.53			The MIB module for the management of the VLAN Membership Policy Server.
ciscoVlanMemberPolicyServerMIBObjects	1.3.6.1.4.1.9.9.53.1
vmpsInfo	1.3.6.1.4.1.9.9.53.1.1
vmpsConfigTable	1.3.6.1.4.1.9.9.53.1.1.1		not-accessible	A table for creating and controling an instance of the VMPS.
vmpsConfigEntry	1.3.6.1.4.1.9.9.53.1.1.1.1		not-accessible	An entry (conceptual row) in the vmpsConfigTable.
I32 vmpsIndex	1.3.6.1.4.1.9.9.53.1.1.1.1.1	Integer32	not-accessible	An arbitrary index identifying this particular instance of the VMPS. This index need not be consistent across reboots. For devices only supporting one instance of the VMPS this object need only accept the value of 1. Different instances of the VMPS of one device will presumable be for different management domains.
INT vmpsAdminStatus	1.3.6.1.4.1.9.9.53.1.1.1.1.2	INTEGER	read-create	The desired state of the VMPS as prescribed by the operator. The actions of the agent will, if at all possible, eventually result in the desired state being reflected in the lecsOperStatus.
IP vmpsDownloadServerAddress	1.3.6.1.4.1.9.9.53.1.1.1.1.3	IpAddress	read-create	The IP address of the host supplying the TFTP configuration data for the VMPS. If this value of this object is 0.0.0.0 then the VMPS will not attempt to download configuration information.
STR vmpsConfigFileName	1.3.6.1.4.1.9.9.53.1.1.1.1.4	DisplayString	read-create	The filename of the configuration file the VMPS will attempt to download.
INT vmpsTriggerDownload	1.3.6.1.4.1.9.9.53.1.1.1.1.5	INTEGER	read-create	When set to `loadDatabase' this object will cause the VMPS to initiate a TFTP download of the configuration tables stored at the host identified by the vmpsDownloadServerAddress. Setting to 'loadRcpDataBase' will cause the VMPs to initiate RCP download. A download cannot be preformed unless the host address is properly set. This object will always return noOperation(1) when read. Setting this object to loadDatabase(2) while the vmpsOperStatus is loading(3) is effectively a no-op.
VLA vmpsFallbackVlan	1.3.6.1.4.1.9.9.53.1.1.1.1.6	VlanName	read-create	This is the VLAN returned in the configuration response when a given configuration request contains data that matches nothing in the VMPS database (given the specified classifiers). A value of the empty string signifies that there is no fall-back VLAN.
INT vmpsSecureMode	1.3.6.1.4.1.9.9.53.1.1.1.1.7	INTEGER	read-create	If in secure mode the VMPS will instruct the requesting device to shutdown a port as a result of a match failure.
STR vmpsManagementDomain	1.3.6.1.4.1.9.9.53.1.1.1.1.8	DisplayString	read-create	The management domain this VMPS is servicing.
ROW vmpsRowStatus	1.3.6.1.4.1.9.9.53.1.1.1.1.9	RowStatus	read-create	The status of the conceptual row. A valid value of vmpsManagementDomain must be set before the row can become active. Devices that only support one instance of the VMPS may opt to always have a row in this table instantiated and not allow row manipulations.
STR vmpsRcpRemoteUserName	1.3.6.1.4.1.9.9.53.1.1.1.1.10	SnmpAdminString	read-create	Remote username for download of the VMPS database file via RCP protocol. This object must be set when vmpsTriggerDownload is set to loadRcpDataBase(3). This object will be have no effect for protocols other than RCP.
STR vmpsRcpRemoteUserName2	1.3.6.1.4.1.9.9.53.1.1.1.1.11	SnmpAdminString	read-create	This object deprecates the object vmpsRcpRemoteUserName to support full range, i.e. SIZE(0..255), of TEXTUAL-CONVENTION SnmpAdminString. The object indicates remote username for download of the VMPS database file via RCP protocol. This object must be set when vmpsTriggerDownload is to loadRcpDataBase(3). This object will be have no effect for protocols other than RCP.
vmpsStatsTable	1.3.6.1.4.1.9.9.53.1.1.2		not-accessible	Statistics relating to this instance of the VMPS.
vmpsStatsEntry	1.3.6.1.4.1.9.9.53.1.1.2.1		not-accessible	An entry (conceptual row) in the vmpsStatsTable.
TIM vmpsLastRestart	1.3.6.1.4.1.9.9.53.1.1.2.1.1	TimeStamp	read-only	The value of sysUpTime when the VMPS was last restarted.
C32 vmpsInConfigReqsEx	1.3.6.1.4.1.9.9.53.1.1.2.1.2	Counter32	read-only	The total number of configure requests, including vmpsInConfigErrors, that have been received by the VMPS.
C32 vmpsInConfigErrors	1.3.6.1.4.1.9.9.53.1.1.2.1.3	Counter32	read-only	Then number of packets received by the VMPS but which were not correctly formatted configure requests.
C32 vmpsOutConfigFails	1.3.6.1.4.1.9.9.53.1.1.2.1.4	Counter32	read-only	The number of configure responses sent by this particular VMPS whose status was other than success.
MAC vmpsLastFailClient	1.3.6.1.4.1.9.9.53.1.1.2.1.5	MacAddress	read-only	The MAC address of the VLAN client whose last configuration request was rejected. This MAC address will be for the VLAN client who was delivered the last configure response that caused the vmpsOutConfigFails object to increment. This value is taken directly from the configure request and is not guaranteed to be correctly identify a client.
INT vmpsOperStatus	1.3.6.1.4.1.9.9.53.1.1.2.1.6	INTEGER	read-only	This object reflects the actual state of the VMPS which may differ from that of the vmpsAdminStatus object. This can occur when the configuration database fails to load but the corresponding vmpsAdminStatus is `active'. The state loading(3) indicates that the VMPS is currently loading the configuration database from the TFTP server.
vmpsDatabase	1.3.6.1.4.1.9.9.53.1.2
vmpsMacConfigTable	1.3.6.1.4.1.9.9.53.1.2.1		not-accessible	A (conceptual) table utilized by a VMPS to map a MAC address of a end station to a VLAN.
vmpsMacConfigEntry	1.3.6.1.4.1.9.9.53.1.2.1.1		not-accessible	An entry (conceptual row) of a mapping between a MAC address in utilization by an end station and a VLAN.
MAC vmpsMacConfigAddress	1.3.6.1.4.1.9.9.53.1.2.1.1.1	MacAddress	not-accessible	The MAC address of an end station to be associated with an VLAN.
VLA vmpsMacConfigVlan	1.3.6.1.4.1.9.9.53.1.2.1.1.2	VlanName	read-create	A VLAN that will be returned to an end station that provides the corresponding MAC address in a configuration request. A zero length string indicates that the corresponding MAC address is not permitted on any VLANs, including the fall-back.
TIM vmpsMacConfigLastAccessed	1.3.6.1.4.1.9.9.53.1.2.1.1.3	TimeStamp	read-only	The value of sysUpTime when this entry was last used to map a MAC address to a VLAN name. Managers may opt to use this object to garbage collect entries that have not been used for a prolonged period of time.
IP vmpsMacConfigLastRequestor	1.3.6.1.4.1.9.9.53.1.2.1.1.4	IpAddress	read-only	The IP address of the device that requested the VLAN associated with the MAC of this row. The manager may use this object in an attempt to locate where a dynamic host currently resides.
STR vmpsMacConfigLastRequestPortId	1.3.6.1.4.1.9.9.53.1.2.1.1.5	DisplayString	read-only	The ID of the port included in the configuration request that corresponded to the designated entry in this table.
INT vmpsMacConfigLastResponseStatus	1.3.6.1.4.1.9.9.53.1.2.1.1.6	INTEGER	read-only	The value of the status field in the response for the last configure request for this MAC-address.
ROW vmpsMacConfigStatus	1.3.6.1.4.1.9.9.53.1.2.1.1.7	RowStatus	read-create	The row cannot be set to `active' until an appropriate value exists for vmpsMacConfigVlan.
vmpsVlanConfigTable	1.3.6.1.4.1.9.9.53.1.2.2		not-accessible	A list of VLANs with restricted access from dynamic ports. This list takes the form of a group of VLANs and a group of ports permitted for those VLANs. If no entry exists for a particular VLAN then there are no restrictions as to what ports are allowed to access that VLAN. If entries exist for a VLAN, then all ports not explicitly permitted for that VLAN are denied access (in the form of a failed configuration response).
vmpsVlanConfigEntry	1.3.6.1.4.1.9.9.53.1.2.2.1		not-accessible	An entry (conceptual row) in the vmpsVlanConfigTable.
VLA vmpsVlanName	1.3.6.1.4.1.9.9.53.1.2.2.1.1	VlanName	not-accessible	The VLAN name associated with a group of ports which are allowed access to that VLAN dynamically.
IP vmpsDeviceId	1.3.6.1.4.1.9.9.53.1.2.2.1.2	IpAddress	not-accessible	The IP address of the device containing the permitted ports.
STR vmpsPortName	1.3.6.1.4.1.9.9.53.1.2.2.1.3	DisplayString	not-accessible	The ifName of the port on which dynamic access to the specified VLAN is allowed.
ROW vmpsVlanConfigStatus	1.3.6.1.4.1.9.9.53.1.2.2.1.4	RowStatus	read-create	The status object associated with the conceptual row.
vmpsGlobalConfig	1.3.6.1.4.1.9.9.53.1.3
T/F vmpsAutoBackupEnable	1.3.6.1.4.1.9.9.53.1.3.1	TruthValue	read-write	This object enables or disables the auto-save of the downloaded VMPS configuration on to a local storage of the device. If the value is set to 'true', the VMPS configuration will be backed up into the location specified by vmpsAutoBackupFileName everytime the configuration file is downloaded.
STR vmpsAutoBackupFileName	1.3.6.1.4.1.9.9.53.1.3.2	SnmpAdminString	read-write	This object specifies the VMPS back-up configuration location, in the format of :[]. can be (but not limited to): flash, bootflash, slot0, slot1, disk0.
ciscoVlanMemberPolicyServerMIBNotifications	1.3.6.1.4.1.9.9.53.2
ciscoVlanMemberPolicyServerMIBConformance	1.3.6.1.4.1.9.9.53.3
ciscoVlanMemberPolicyServerMIBCompliances	1.3.6.1.4.1.9.9.53.3.1
ciscoVlanMemberPolicyServerMIBCompliance	1.3.6.1.4.1.9.9.53.3.1.1			The compliance statement for entities which implement the VMPS MIB. This statement is replaced by ciscoVmpsMIBCompliance2.
ciscoVmpsMIBCompliance2	1.3.6.1.4.1.9.9.53.3.1.2			The compliance statement for entities which implement the VMPS MIB. This statement is replaced by ciscoVmpsMIBCompliance3.
ciscoVmpsMIBCompliance3	1.3.6.1.4.1.9.9.53.3.1.3			The compliance statement for entities which implement the VMPS MIB.
ciscoVlanMemberPolicyServerMIBGroups	1.3.6.1.4.1.9.9.53.3.2
ciscoVlanMemberPolicyServerGroup	1.3.6.1.4.1.9.9.53.3.2.1			A collection of objects for the managing of VMPS operation.
ciscoVlanMemberPolicyServerRcpGroup	1.3.6.1.4.1.9.9.53.3.2.2			Group to support RCP downnload of VMPS database.
ciscoVmpsAutoBackupGroup	1.3.6.1.4.1.9.9.53.3.2.3			Group to support auto backup of downloaded VMPS configuration.
ciscoVlanMemberPolicyServerRcpGroup2	1.3.6.1.4.1.9.9.53.3.2.4			Group to support RCP downnload of VMPS database.

RFC description

Manages VLAN Membership Policy Server (VMPS) configuration and database operations.

Start monitoring Cisco Catalyst switches (VLAN Membership Policy Server) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-VMPS-MIB