All MIBs › CTRON-SSR-L2-MIB
Organization: Cabletron Systems, Inc.
Last Updated: 1999--0-9-
Category: VLAN and Bridging, Vendor: Cabletron/Enterasys
Description: Manages Cabletron SSR Layer 2 features including VLAN configuration, spanning tree, and MAC address tables.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CTRON-SSR-L2-MIB?
CTRON-SSR-L2-MIB is a Cabletron SmartSwitch Router (SSR) MIB originally intended to provide Layer 2 processing-subsystem visibility, including VLAN configuration, spanning tree, and MAC address tables. According to its own module description, however, this MIB is no longer supported on SSR platforms - its Layer 2 functionality has been superseded by standard MIBs (notably RMON per RFC 1757) plus Cabletron's ctron-ssr-policy MIB for filter-table programming. The only objects present are conformance/compliance group definitions (l2Group, l2Conformance, l2Compliances, l2Groups) with no live runtime data objects, so it cannot be used for actual hardware or software monitoring today. Its explicit dependency, per its own description, is on RFC 1757 RMON and the companion ctron-ssr-policy MIB, which are what current SSR platforms actually use for Layer 2 visibility and filtering. Historically it was deployed on Cabletron SmartSwitch Router platforms, but current deployments should reference RMON and ctron-ssr-policy instead. Network engineers evaluating or troubleshooting this functionality can download the CTRON-SSR-L2-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CTRON-SSR-L2-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cabletron SmartSwitch Router (SSR) - legacy/deprecated
Monitoring Examples
This module contains only conformance/compliance group definitions (l2Group, l2Conformance, l2Compliances, l2Groups) and, per its own module description, is no longer supported on SSR platforms, so there are no live data objects to describe a realistic monitoring scenario for. Administrators should instead use RMON (RFC 1757) and the ctron-ssr-policy MIB for equivalent Layer 2 visibility on current hardware.
This MIB depends on
Related MIBs
Imported Objects
From CTRON-SSR-SMI-MIB
| ssrMibs | OBJECT-IDENTITY |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| TimeTicks |
From SNMPv2-TC
| PhysAddress |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| l2Group | 1.3.6.1.4.1.52.2501.1.2 | |||
| C32 l2LearnedEntryDiscards | 1.3.6.1.4.1.52.2501.1.2.1 | Counter32 | read-only | The total number of Forwarding Database entries, which have been or would have been learned, but have been discarded due to a lack of space to store them in the Forwarding Database. If this counter is increasing, it indicates that the Forwarding Database is regularly becoming full (a condition which has unpleasant performance effects on the subnetwork). If this counter has a significant value but is not presently increasing, it indicates that the problem has been occurring but is not persistent. |
| C32 l2LearnedMacEntries | 1.3.6.1.4.1.52.2501.1.2.2 | Counter32 | read-only | The total number of MAC entries. The total number is equal to the number of unique VLAN id and MAC address pairs on the switch. |
| C32 l2LearnedFlowEntries | 1.3.6.1.4.1.52.2501.1.2.3 | Counter32 | read-only | The total number of Flow entries. The total number is equal to the number of unique VLAN id, source MAC address and destination MAC address 3-tuple on the switch. |
| l2ForwardTable | 1.3.6.1.4.1.52.2501.1.2.4 | not-accessible | A list of L2 flow entries. | |
| l2ForwardEntry | 1.3.6.1.4.1.52.2501.1.2.4.1 | not-accessible | An entry containing the L2 flow | |
| INT l2ForwardFilterId | 1.3.6.1.4.1.52.2501.1.2.4.1.1 | INTEGER | read-only | A filter number which is used to get the next row from the L2 Forwarding table. A zero implies no filter. When a number is used, the index(s) specified in the first GET_NEXT is used as a filter for future GET_NEXT's using the same FilterId. |
| PHY l2ForwardDstMacAddr | 1.3.6.1.4.1.52.2501.1.2.4.1.2 | PhysAddress | read-only | The destination MAC address which has been learned. |
| PHY l2ForwardSrcMacAddr | 1.3.6.1.4.1.52.2501.1.2.4.1.3 | PhysAddress | read-only | The source MAC address, which is present in case of a Flow, that has been learned by the switch. |
| INT l2ForwardVlanId | 1.3.6.1.4.1.52.2501.1.2.4.1.4 | INTEGER | read-only | The VLAN the destination MAC address belongs to. |
| INT l2ForwardDstPort | 1.3.6.1.4.1.52.2501.1.2.4.1.5 | INTEGER | read-only | The physical port number in the shelf/Chassis to which the frame will be forwarded. A zero implies that the frame destined to this destination MAC address will be forwarded to multiple ports. This implies a Multicast or unknown Unicast frame. |
| OCT l2ForwardInPorts | 1.3.6.1.4.1.52.2501.1.2.4.1.6 | OCTET STRING | read-only | The set of physical ports to which this entry is contained in the L2 tables. Each octet within the value of this object specifies a set of eight ports. The first octet specifying ports 1 through 8, the second octet specifying ports 9 through 16, etc. Within each octet, the least significant bit represents the lowest numbered port and the most significant bit represents the highest numbered port. Thus, each port of the bridge is represented by a single bit within the value of this object. If that bit has a value of '1' then that port is included in the set of ports; the port is not included if its bit has a value of '0'. (Note that the setting of the bit corresponding to the port from which a frame is received is irrelevant.) The default value of this object is a string of zeroes of appropriate length. The maximum number of ports/card-module is sysHwModuleNumPorts. |
| l2PriorityTable | 1.3.6.1.4.1.52.2501.1.2.5 | not-accessible | A list of L2 flow entries. | |
| l2PriorityEntry | 1.3.6.1.4.1.52.2501.1.2.5.1 | not-accessible | An entry containing the L2 flow. | |
| INT l2PriorityIndex | 1.3.6.1.4.1.52.2501.1.2.5.1.1 | INTEGER | read-write | A unique index into the L2 priority table. |
| OCT l2PriorityDesc | 1.3.6.1.4.1.52.2501.1.2.5.1.2 | OCTET STRING | read-write | A string used to identify the flow by name. |
| PHY l2PriorityDstMacAddr | 1.3.6.1.4.1.52.2501.1.2.5.1.3 | PhysAddress | read-write | The destination MAC address which has been learned. |
| PHY l2PrioritySrcMacAddr | 1.3.6.1.4.1.52.2501.1.2.5.1.4 | PhysAddress | read-write | The source MAC address, which is present in case of a Flow, that has been learned by the switch. |
| INT l2PriorityVlanId | 1.3.6.1.4.1.52.2501.1.2.5.1.5 | INTEGER | read-write | The VLAN the destination MAC address belongs to. |
| OCT l2PriorityInPorts | 1.3.6.1.4.1.52.2501.1.2.5.1.6 | OCTET STRING | read-write | The set of physical ports which allow this source MAC address. Each octet within the value of this object specifies a set of eight ports, with the first octet specifying ports 1 through 8, the second octet specifying ports 9 through 16, etc. Within each octet, the least significant bit represents the lowest numbered port, and the most significant bit represents the highest numbered port. Thus, each port of the bridge is represented by a single bit within the value of this object. If that bit has a value of '1' then that port is included in the set of ports; the port is not included if its bit has a value of '0'. (Note that the setting of the bit corresponding to the port from which a frame is received is irrelevant.) The default value of this object is a string of zeroes of appropriate length. The maximum number of ports per Module/Card is sysHwModuleNumPorts. |
| INT l2Priority | 1.3.6.1.4.1.52.2501.1.2.5.1.7 | INTEGER | read-write | The priority for this L2 flow. There are four priority levels: low, medium, high and control. The highest priority class is reserved for router control traffic, which leaves three classes, high, medium, and low for normal data flows. Buffered traffic in higher priority classes is sent ahead of pending traffic in lower priority classes, which allows latency and throughput demands to be maintained for the higher priority traffic. To prevent low priority traffic from waiting indefinitely as higher priority traffic fills the wire, a weighted fair queuing mechanism provides adjustable minimum bandwidth guarantees at each output port, thereby ensuring that some traffic from each priority class always gets through. |
| l2FilterTable | 1.3.6.1.4.1.52.2501.1.2.6 | not-accessible | A list of L2 filters. | |
| l2FilterEntry | 1.3.6.1.4.1.52.2501.1.2.6.1 | not-accessible | An entry containing the L2 filter. | |
| INT l2FilterIndex | 1.3.6.1.4.1.52.2501.1.2.6.1.1 | INTEGER | read-write | A unique index into the table. |
| OCT l2FilterDesc | 1.3.6.1.4.1.52.2501.1.2.6.1.2 | OCTET STRING | read-write | A string used to identify the filter by an name. |
| INT l2FilterType | 1.3.6.1.4.1.52.2501.1.2.6.1.3 | INTEGER | read-write | The types of filters, as explained below. static-entry Based on the restrictions and the presence of source, destination MAC address they can be of three types : source-static-entry - All frames with a source address equal to srcMAC, coming through any of the inPorts will be allowed/disallowed to go to any port that is a member of the outPorts list. destination-static-entry - All frames with a destination address equal to dstMAC, coming through any of the inPorts will be allowed/ disallowed/forced to go to any port that is a member of the outPorts list. flow-static-entry - All frames with a source address equal to srcMAC and a destination address equal to dstMAC, coming through any of the inPorts list will be allowed/disallowed to go to any port that is a member of the outPorts list. address-filter Based on the restrictions and the presence of source, destination MAC address they can be of three types : source-address-filter - All frames with a source address equal to srcMAC, coming through any of the inPorts will be filtered out. destination-address-filter - All frames with a destination address equal to dstMAC, coming through any of the inPorts will be filtered out. flow-filter - All frames with a source address equal to srcMAC and a destination address equal to dstMAC, coming through any of the inPorts list will be filtered out. address-lock This locks a source address to a port. It allows learning of srcMAC addresses only on any of the ports in inPorts. |
| INT l2FilterRestrictions | 1.3.6.1.4.1.52.2501.1.2.6.1.4 | INTEGER | read-write | The restrictions which are applied when the filterType is static-entry. |
| PHY l2FilterSrcMacAddr | 1.3.6.1.4.1.52.2501.1.2.6.1.5 | PhysAddress | read-write | The source MAC address, which is present in case of a Flow, that has been learned by the switch. |
| PHY l2FilterDstMacAddr | 1.3.6.1.4.1.52.2501.1.2.6.1.6 | PhysAddress | read-write | The destination MAC address which has been learned. |
| INT l2FilterVlanId | 1.3.6.1.4.1.52.2501.1.2.6.1.7 | INTEGER | read-write | The VLAN the destination MAC address belongs to. |
| OCT l2FilterInPorts | 1.3.6.1.4.1.52.2501.1.2.6.1.8 | OCTET STRING | read-write | The set of physical ports which allow this source MAC address. Each octet within the value of this object specifies a set of eight ports, with the first octet specifying ports 1 through 8, the second octet specifying ports 9 through 16, etc. Within each octet, the least significant bit represents the lowest numbered port, and the most significant bit represents the highest numbered port. Thus, each port of the bridge is represented by a single bit within the value of this object. If that bit has a value of '1' then that port is included in the set of ports; the port is not included if its bit has a value of '0'. (Note that the setting of the bit corresponding to the port from which a frame is received is irrelevant.) The default value of this object is a string of zeroes of appropriate length. The maximum number of ports/card-module is sysHwModuleNumPorts. |
| OCT l2FilterOutPorts | 1.3.6.1.4.1.52.2501.1.2.6.1.9 | OCTET STRING | read-write | The set of ports which allow this destination MAC address. Each octet within the value of this object specifies a set of eight ports, with the first octet specifying ports 1 through 8, the second octet specifying ports 9 through 16, etc. Within each octet, the most significant bit represents the lowest numbered port, and the least significant bit represents the highest numbered port. Thus, each port of the bridge is represented by a single bit within the value of this object. If that bit has a value of '1' then that port is included in the set of ports; the port is not included if its bit has a value of '0'. (Note that the setting of the bit corresponding to the port from which a frame is received is irrelevant.) The default value of this object is a string of zeroes of appropriate length. |
| l2PortSecurityTable | 1.3.6.1.4.1.52.2501.1.2.7 | not-accessible | A list of L2 port security filters. | |
| l2PortSecurityEntry | 1.3.6.1.4.1.52.2501.1.2.7.1 | not-accessible | An entry containing the L2 filter. | |
| INT l2PortSecurityIndex | 1.3.6.1.4.1.52.2501.1.2.7.1.1 | INTEGER | read-write | A unique index into the table. |
| OCT l2PortSecurityDesc | 1.3.6.1.4.1.52.2501.1.2.7.1.2 | OCTET STRING | read-write | A string used to identify the filter by a name. |
| INT l2PortSecurityType | 1.3.6.1.4.1.52.2501.1.2.7.1.3 | INTEGER | read-write | The security filters are of two types : source-secure For all the ports in inPorts forward only those frames that match source-static-entry filter from the l2FilterTable. destination-secure For all the ports in inPorts forward only those frames that match destination-static-entry filter from the l2FilterTable. |
| INT l2PortSecurityVlanId | 1.3.6.1.4.1.52.2501.1.2.7.1.4 | INTEGER | read-write | The VLAN the destination MAC address belongs to. |
| OCT l2PortSecurityInPorts | 1.3.6.1.4.1.52.2501.1.2.7.1.5 | OCTET STRING | read-write | The set of physical ports which allow this source MAC address. Each octet within the value of this object specifies a set of eight ports, with the first octet specifying ports 1 through 8, the second octet specifying ports 9 through 16, etc. Within each octet, the least significant bit represents the lowest numbered port, and the most significant bit represents the highest numbered port. Thus, each port of the bridge is represented by a single bit within the value of this object. If that bit has a value of '1' then that port is included in the set of ports; the port is not included if its bit has a value of '0'. (Note that the setting of the bit corresponding to the port from which a frame is received is irrelevant.) The default value of this object is a string of zeroes of appropriate length. |
| l2PortTable | 1.3.6.1.4.1.52.2501.1.2.8 | not-accessible | A table that contains information about every physical port that is associated with this transparent bridge. | |
| l2PortEntry | 1.3.6.1.4.1.52.2501.1.2.8.1 | not-accessible | A list of information for each physical port. | |
| INT l2Port | 1.3.6.1.4.1.52.2501.1.2.8.1.1 | INTEGER | read-only | The port number of the port for which this entry contains Transparent bridging management information. |
| INT l2PortAgingStatus | 1.3.6.1.4.1.52.2501.1.2.8.1.2 | INTEGER | read-write | Whether aging is enabled or not on this port. |
| INT l2PortAgingTime | 1.3.6.1.4.1.52.2501.1.2.8.1.3 | INTEGER | read-write | The time-out period in seconds for aging out dynamically learned forwarding information. 802.1D-1990 recommends a default of 300 seconds. |
| INT l2PortDemandAgeHiBound | 1.3.6.1.4.1.52.2501.1.2.8.1.4 | INTEGER | read-only | When the number of MAC entries on a physical port's L2 table reaches the l2PortDemandAgeHiBound (95% full), a number of MAC entries based on l2PortDemandAgeLowBound percentage will be removed (aged-out) from the table. |
| INT l2PortDemandAgeLowBound | 1.3.6.1.4.1.52.2501.1.2.8.1.5 | INTEGER | read-only | The l2PortDemandAgeLowBound value determines how many MAC entries need to be aged-out. See l2PortDemandAgeHiBound. Default value is 85%. Example: if - L2 table capacity = 10,000 entries - l2PortDemandAgeHiBound = 95% - l2PortDemandAgeLowBound = 85% When the L2 table reaches 95% capacity (9500 MAC entries), 10% of the entries will be aged-out. |
| C32 l2PortDemandAgeCount | 1.3.6.1.4.1.52.2501.1.2.8.1.6 | Counter32 | read-only | The number of times demand aging has taken place on this physical port. |
| C32 l2PortLearnedEntryDiscards | 1.3.6.1.4.1.52.2501.1.2.8.1.7 | Counter32 | read-only | The total number of L2 Port table entries, which have been or would have been learned, but have been discarded due to a lack of space to store them in the Forwarding Database. If this counter is increasing, it indicates that the L2 port table is regularly becoming full (a condition which has unpleasant performance effects on the subnetwork). If this counter has a significant value but is not presently increasing, it indicates that the problem has been occurring but is not persistent. |
| C32 l2PortSrcEntries | 1.3.6.1.4.1.52.2501.1.2.8.1.8 | Counter32 | read-only | The number of MAC addresses/Flow entries that reside on this ports L2 table as a source (i.e. for a flow entry the source and destination MAC address's lie on the same LAN segment). |
| C32 l2PortDstEntries | 1.3.6.1.4.1.52.2501.1.2.8.1.9 | Counter32 | read-only | The number of MAC addresses/Flow entries that reside on this ports L2 table as a destination (i.e. for a flow entry the destination MAC address was not learned as a source). |
| C32 l2PortMgmtEntries | 1.3.6.1.4.1.52.2501.1.2.8.1.10 | Counter32 | read-only | The number of user configured entries, including filters, bridge management addresses etc. |
| INT l2PortMaxInfo | 1.3.6.1.4.1.52.2501.1.2.8.1.11 | INTEGER | read-only | The maximum size of the info/data (non-MAC) field that this port will receive or transmit. See RFC 1493 for similar OID called dot1dTpPortMaxInfo. |
| C32 l2PortInFrames | 1.3.6.1.4.1.52.2501.1.2.8.1.12 | Counter32 | read-only | The number of frames that have been received by this port from its segment. Note that a frame received on the interface corresponding to this port is only counted by this object if and only if it is for a protocol being processed by the local bridging function, including bridge management frames. |
| C32 l2PortOutFrames | 1.3.6.1.4.1.52.2501.1.2.8.1.13 | Counter32 | read-only | The number of frames that have been transmitted by this port to its segment. Note that a frame transmitted on the interface corresponding to this port is only counted by this object if and only if it is for a protocol being processed by the local bridging function, including bridge management frames. |
| l2PortForwardTable | 1.3.6.1.4.1.52.2501.1.2.9 | not-accessible | A table that contains information about the Forward/Flow Table that is associated with this port. | |
| l2PortForwardEntry | 1.3.6.1.4.1.52.2501.1.2.9.1 | not-accessible | A list of Flow/Forward information for this port. | |
| INT l2PortForwardPort | 1.3.6.1.4.1.52.2501.1.2.9.1.1 | INTEGER | read-only | The port number of the port for which this entry contains Transparent bridging management information. |
| INT l2PortForwardIndex | 1.3.6.1.4.1.52.2501.1.2.9.1.2 | INTEGER | read-only | A unique index into the Flow/Forward database table. |
| PHY l2PortForwardDstMacAddr | 1.3.6.1.4.1.52.2501.1.2.9.1.3 | PhysAddress | read-only | The destination MAC address which has been learned. |
| PHY l2PortForwardSrcMacAddr | 1.3.6.1.4.1.52.2501.1.2.9.1.4 | PhysAddress | read-only | The source MAC address, which is present in case of a Flow, that has been learned by the switch. |
| INT l2PortForwardVlanId | 1.3.6.1.4.1.52.2501.1.2.9.1.5 | INTEGER | read-only | The VLAN the destination MAC address belongs to. |
| INT l2PortForwardDstPort | 1.3.6.1.4.1.52.2501.1.2.9.1.6 | INTEGER | read-only | The physical port number to which the frame will be forwarded. A zero implies that the frame destined to this destination MAC address will be forwarded to multiple ports. This implies a Multicast or unknown Unicast frame. |
| INT l2PortForwardStatus | 1.3.6.1.4.1.52.2501.1.2.9.1.7 | INTEGER | read-only | The status of this entry. The meanings of the values are: other(1) : none of the following. This would include the case where some other MIB object (not the corresponding instance of dot1dTpFdbPort, nor an entry in the dot1dStaticTable) is being used to determine if and how frames addressed to the value of the corresponding instance of dot1dTpFdbAddress are being forwarded. invalid(2) : this entry is not longer valid (e.g., it was learned but has since aged-out), but has not yet been flushed from the table. learned(3) : the value of the corresponding instance of dot1dTpFdbPort was learned, and is being used. self(4) : the value of the corresponding instance of dot1dTpFdbAddress represents one of the bridge's addresses. The corresponding instance of dot1dTpFdbPort indicates which of the bridge's ports has this address. mgmt(5) : the value of the corresponding instance of dot1dTpFdbAddress is also the value of an existing instance of dot1dStaticAddress. |
| TIK l2PortForwardLastDetectedTime | 1.3.6.1.4.1.52.2501.1.2.9.1.8 | TimeTicks | read-only | The time (in hundredths of a second) since the last time this MAC address was detected by this port. |
| l2MIB | 1.3.6.1.4.1.52.2501.1.500 | This module defines a schema to access SSR Layer 2 processing subsystem. This mib is no longer supported on ssr platforms. features of this mib now exist in standard mibs. RMON I RFC 1757 provides Layer 2 information and ctron-ssr-policy mib to program filter tables. | ||
| l2Conformance | 1.3.6.1.4.1.52.2501.1.500.2 | |||
| l2Compliances | 1.3.6.1.4.1.52.2501.1.500.2.1 | |||
| l2Groups | 1.3.6.1.4.1.52.2501.1.500.2.2 | |||
| l2ConfGroupV10 | 1.3.6.1.4.1.52.2501.1.500.2.2.1 | A set of managed objects that make up version 1.0 of the SSR Layer 2 mib. | ||
| l2ComplianceV10 | 1.3.6.1.4.1.52.2501.1.500.2.2.1.1 | The compliance statement for the SSR-L2-MIB. |
RFC description
Vendor-private MIB for Cabletron Systems SSR (Secure Switch Router); defines Layer 2 switching and management objects.
Start monitoring Cabletron/Enterasys Smart Switch Router (SSR) — legacy/deprecated (Layer 2) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.