All MIBs › CISCOSB-ProtectedPorts-MIB
Organization: Cisco Small Business
Last Updated: 2008-05-03
Category: Domain: Security, Vendor: Cisco
Description: Configures port isolation (protected ports) to restrict intra-VLAN traffic on Cisco Small Business switches.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCOSB-ProtectedPorts-MIB?
CISCOSB-ProtectedPorts-MIB is a Cisco Small Business private MIB implementing port isolation ("protected ports"), a Layer 2 security feature that restricts traffic forwarding between designated ports even within the same VLAN. It exposes tables defining which ports are protected, their protected-port community/type grouping, and each protected port's allowed egress port set, along with global and per-port operational status. Its monitoring value is configuration/status verification—confirming protected-port groupings and global enable state are correctly applied to enforce traffic isolation between end-user ports (e.g. in a hotel or dorm-style deployment). It has no significant external MIB dependency beyond standard bridge/VLAN concepts. It is deployed on Cisco Small Business switches used in environments needing peer-to-peer traffic isolation, such as guest networks or SMB wiring closets. Engineers can download the CISCOSB-ProtectedPorts-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCOSB-ProtectedPorts-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco Small Business switch
Monitoring Examples
An administrator would check rlProtectedPortsGlobalEnable to confirm port protection is enabled device-wide, then inspect rlProtectedPortsTable/rlProtectedPortsEntry to see which ports are marked protected via rlProtectedPortType and rlProtectedPortCommunity, and rlProtectedPortEgressPorts to verify the allowed forwarding destinations for each protected port. If a protected port's egress list unexpectedly includes another protected port, it would indicate a misconfiguration allowing unwanted intra-VLAN traffic between isolated ports.
What Can Be Monitored
- global protected-ports enable status
- per-port protected status
- protected port community/grouping
- allowed egress ports per protected port
Imported Objects
From CISCOSB-MIB
| switch001 | MODULE-IDENTITY |
From IF-MIB
| ifIndex | OBJECT-TYPE |
From Q-BRIDGE-MIB
| PortList |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
RFC description
Configures protected port mode on Cisco Small Business switches to filter Layer 2 traffic between protected ports by community groups.
Start monitoring Cisco Small Business managed switch with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.