HPN-ICF-L2ISOLATE-MIB

Description: Manages Layer 2 port isolation groups to restrict traffic between ports within a VLAN on HP/Comware switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

HPN-ICF-L2ISOLATE-MIB is an HP/H3C Comware private MIB that manages Layer 2 port-isolation groups, a switch feature that blocks direct traffic between isolated ports within the same VLAN while still allowing them to reach an uplink. It exposes configuration objects for enabling isolation per VLAN and for maintaining a permit list of MAC addresses exempted from isolation. As primarily a configuration/security-policy MIB, it is used less for hardware health and more for auditing which VLANs have isolation enabled and which MAC addresses are allowed to bypass the restriction, though a management station can still poll it to confirm the feature's active/inactive software state on the switch. Because port isolation operates on top of standard VLAN membership, this MIB works in conjunction with bridge/VLAN MIBs (e.g., Q-BRIDGE-MIB) that define the VLANs themselves. It is typically deployed on HP/H3C Comware access-layer switches in environments needing traffic segregation between hosts on a shared VLAN, such as hosting/DMZ networks or dorm/hotel wiring closets, and administrators can download the HPN-ICF-L2ISOLATE-MIB file to load it into their MIB browser for these deployments.

An administrator checks hpnicfL2IsolateEnableTable, keyed by hpnicfL2IsolateVLANIndex, to see whether hpnicfL2IsolateEnable is set to true for a given VLAN, confirming isolation is active. They then inspect hpnicfL2IsolatePermitMACTable/hpnicfL2IsoLatePermitMAC to verify which specific MAC addresses (e.g., a shared printer or gateway) have been whitelisted to communicate across isolated ports. If an unexpected MAC shows up in the permit table with hpnicfL2IsoLatePermitMACRowStatus active, it signals a possible unauthorized policy change.

Manages Layer 2 isolation on VLAN interfaces to prevent inter-VLAN traffic on Hewlett-Packard network devices.