All MIBs › CT-FASTPATH-PROTECTED-PORT-MIB
Organization: Enterasys Networks, Inc.
Last Updated: 2006-03-06
Category: VLAN and Bridging, Vendor: Cabletron/Enterasys
Description: Configures protected port (private VLAN edge) settings to restrict inter-port communication on FastPath switches.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CT-FASTPATH-PROTECTED-PORT-MIB?
This is an Enterasys (Cabletron-descended) MIB for FastPath switches that configures "protected port" (private VLAN edge) functionality, restricting Layer 2 communication between designated ports on the same switch. It exposes a table of protected-port group assignments, mapping group IDs and names to lists of member ports. This module is primarily a configuration MIB for traffic isolation rather than hardware/software health monitoring, though an operator can use it to audit which ports are configured into protected-port groups, verifying isolation policy is correctly applied and catching unintended port additions or removals. It is a vendor-proprietary extension layered on top of standard Ethernet/bridge port-indexing conventions (BRIDGE-MIB). Typically deployed on Enterasys/Extreme FastPath enterprise access-layer switches to enforce private-VLAN-like port isolation for security segmentation. Network engineers evaluating or troubleshooting this functionality can download the CT-FASTPATH-PROTECTED-PORT-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CT-FASTPATH-PROTECTED-PORT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Enterasys/Extreme FastPath switches
Monitoring Examples
An administrator would poll ctAgentSwitchProtectedPortTable/ctAgentSwitchProtectedPortEntry to enumerate configured protected-port groups, using ctAgentSwitchProtectedPortGroupId and ctAgentSwitchProtectedPortGroupName to identify each group, and ctAgentSwitchProtectedPortPortList to confirm exactly which ports belong to it. Detecting a port unexpectedly missing from or present in this list would reveal a misconfiguration that could allow unintended peer-to-peer traffic between "protected" ports on the switch.
What Can Be Monitored
- protected port group membership
- port isolation group configuration
- protected port list per group
Imported Objects
From CTRON-MIB-NAMES
| ctFastPathProtectedPortMib | OBJECT-IDENTITY |
From Q-BRIDGE-MIB
| PortList |
From RFC1213-MIB
| DisplayString |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
OIDs
RFC description
Manages protected port (port security) features on Ciena/Cyan Technologies FastPath switches; vendor-private MIB.
Start monitoring Enterasys/Extreme FastPath switch (protected port) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.