All MIBs › H3C-L2ISOLATE-MIB
Organization: Hangzhou H3C Technologies Co., Ltd.
Last Updated: 2009-05-06
Category: Technology: Switching/L2, Vendor: H3C/HH3C
Description: H3C MIB for Layer 2 port isolation management controlling intra-VLAN communication restrictions between ports.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is H3C-L2ISOLATE-MIB?
H3C-L2ISOLATE-MIB is an H3C enterprise MIB for Layer 2 port isolation, controlling whether ports within the same VLAN are permitted to communicate directly at Layer 2, and maintaining a permit-list of MAC addresses exempted from isolation. It exposes configuration data: per-VLAN isolation enable state and a table of explicitly permitted MAC addresses with row-status control for adding/removing entries. Its relevance to device status monitoring is confirming the software-enforced security/segmentation configuration is correctly and consistently applied, which is a configuration-integrity check rather than physical hardware telemetry. It depends on the device's VLAN and MAC address-table infrastructure since isolation is applied per VLAN and exceptions are keyed by MAC address. It is deployed on H3C Comware switches used to enforce private-VLAN-style host isolation in enterprise access networks. Engineers can download the H3C-L2ISOLATE-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-L2ISOLATE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- H3C Comware switch
Monitoring Examples
An administrator would poll h3cL2IsolateEnableTable/h3cL2IsolateEnableEntry keyed by h3cL2IsolateVLANIndex to confirm h3cL2IsolateEnable is set on VLANs that should have isolated ports, and check h3cL2IsolatePermitMACTable for entries in h3cL2IsoLatePermitMAC with h3cL2IsoLatePermitMACRowStatus active. If isolation is enabled on a VLAN but hosts that should be blocked can still reach each other, the permit-MAC table is the first place to check for an unintended exception entry.
What Can Be Monitored
- per-VLAN port isolation enable state
- permitted MAC address exception list
- permit-MAC entry row status
Imported Objects
From HUAWEI-3COM-OID-MIB
| h3cCommon | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| MacAddress | |
| RowStatus | |
| TruthValue |
OIDs
RFC description
Configures layer 2 isolation policies to restrict traffic forwarding between ports within VLAN segments.
Start monitoring H3C Comware switch (Layer 2 port isolation) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.