Dlink-TrafficSegmentation-MIB

Description: Manages traffic segmentation (port isolation) configuration to restrict traffic flow between ports on D-Link switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

This private MIB configures traffic segmentation (a form of private VLAN / port isolation) on D-Link switches, restricting which ports a given port's traffic is allowed to reach regardless of VLAN membership. It exposes two related tables: a segmentation configuration table defining the allowed ingress/egress port sets for each source port, and a segmentation table representing the effective/active segmentation groups. As a configuration MIB it is primarily used to verify security/isolation policy is applied correctly rather than reporting hardware faults, though rlTrafficSegConfigRowStatus and rlTrafficSegRowStatus let an administrator confirm whether a given isolation rule is active. It works alongside standard bridge/VLAN MIBs since segmentation is applied on top of normal VLAN forwarding. It is deployed on D-Link switches in scenarios needing port-level traffic isolation, such as guest networks, IoT device isolation, or hospitality-style deployments, and administrators typically download the Dlink-TrafficSegmentation-MIB file to load into their MIB browser before configuring these policies.

An administrator verifying port isolation would check rlTrafficSegConfigTable/rlTrafficSegConfigEntry for a given rlTrafficSegConfigIndex to see the configured rlTrafficSegConfigEgressPorts a port is allowed to reach, and cross-reference the active rlTrafficSegTable/rlTrafficSegEntry to confirm the running configuration matches. rlTrafficSegConfigRowStatus would be checked to ensure the isolation rule is active rather than notInService. A port unexpectedly able to reach a peer port would indicate the segmentation rule was never activated or was misconfigured.

Traffic segmentation configuration for D-Link switches, defining ingress and egress port groups for traffic isolation.