INNOMINATE-LLDP-MIB

All MIBs › INNOMINATE-LLDP-MIB

Organization: Innominate Security Technologies AG

Last Updated: 2005-08-24

Category: Protocol: LLDP, VPN and Security, Vendor: Innominate

Description: Innominate Security Technologies MIB extending LLDP with proprietary objects for secure industrial networking device discovery.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is INNOMINATE-LLDP-MIB?

INNOMINATE-LLDP-MIB is a vendor-specific extension MIB from Innominate Security Technologies (maker of the mGuard line of industrial firewall/VPN appliances) that adds proprietary objects on top of the standard LLDP framework for secure industrial network device discovery. It exposes per-interface LLDP administrative status and configuration (such as group ID, interface ID, and maximum neighbor count), along with an interface-level statistics table tracking LLDP activity. This data supports monitoring the software/networking status of the device — confirming whether LLDP discovery is administratively enabled on an interface, how many neighbors are being tracked or exceeded, and whether Hirschmann Ring Manager (Hirma) or forwarding-database modes are engaged. As its name indicates, it is explicitly an extension of the standard IEEE 802.1AB LLDP-MIB, adding vendor-specific fields alongside the standard LLDP tables rather than replacing them. It is deployed on Innominate mGuard industrial security appliances used to segment and protect SCADA/industrial control networks, where LLDP neighbor visibility aids network topology and security auditing. Engineers can download the INNOMINATE-LLDP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in INNOMINATE-LLDP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Innominate mGuard industrial security appliance/firewall
industrial network switch/gateway

Monitoring Examples

An administrator would poll innominateLLDPInterfaceTable/innominateLLDPIfEntry to check innominateLLDPAdminStatus and confirm LLDP discovery is enabled on a given interface, and innominateLLDPIfaceMaxNeighbors to see if the configured neighbor limit has been reached — useful for detecting unexpected extra devices on a segment. innominateLLDPStatsIfTable/innominateLLDPStatsIfEntry provides per-interface LLDP statistics for tracking discovery activity over time. innominateLLDPIfaceHirmaMode and innominateLLDPIfaceFDBMode reveal whether ring-redundancy or forwarding-database-related LLDP behaviors are active on that port.

What Can Be Monitored

LLDP admin status per interface
LLDP neighbor count vs. maximum
LLDP statistics per interface
Hirma mode setting
forwarding database mode setting

Imported Objects

From IANA-ADDRESS-FAMILY-NUMBERS-MIB

AddressFamilyNumbers

From RFC1155-SMI

enterprises

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using innominateLLDPStatsIfaceTotalFDBEntryCount OID:

Select an Innominate mGuard industrial security appliance/firewall as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type innominateLLDPStatsIfaceTotalFDBEntryCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of learned entries in the forwarding database (FDB) for this port. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
innominateLldpMIB	1.3.6.1.4.1.15450.3.7			This MIB contains the proprietary extensions to the LLDP standard.
innominateLLDPConfig	1.3.6.1.4.1.15450.3.7.1
INT innominateLLDPAdminStatus	1.3.6.1.4.1.15450.3.7.1.1	INTEGER	read-write	DURABLE: Enables/disables the IEEE802.1AB functionality on this device. If disabled(2), the LLDP protocol is inactive, but the LLDP MIBs can be accessed.
innominateLLDPInterfaceTable	1.3.6.1.4.1.15450.3.7.1.2		not-accessible	This table contains variables for each interface of the switch.
innominateLLDPIfEntry	1.3.6.1.4.1.15450.3.7.1.2.1		not-accessible
INT innominateLLDPIfaceGroupID	1.3.6.1.4.1.15450.3.7.1.2.1.1	INTEGER	read-only	Index to identify an interface card. This value is never greater than innominateSysGroupCapacity.
INT innominateLLDPIfaceID	1.3.6.1.4.1.15450.3.7.1.2.1.2	INTEGER	read-only	Index to identify an interface within an interface card.
INT innominateLLDPIfaceHirmaMode	1.3.6.1.4.1.15450.3.7.1.2.1.3	INTEGER	read-write	Configure Hirschmann LLDP on this physical port. If an IEEE802.1AB capable device not manufactured by Hirschmann is connected to a port, innominateLLDPIfaceHirmaMode should be set to disabled (4) for this port.
INT innominateLLDPIfaceFDBMode	1.3.6.1.4.1.15450.3.7.1.2.1.4	INTEGER	read-write	If configured to lldpOnly(1), only received LLDP messages will be used to populate the LLDP-MIB's remTable. If configured to macOnly(2), learned mac addresses out of the switch's forwarding database (FDB) will be used to populate the LLDP-MIB's remTable. If configured to both(3), both received LLDP messages and learned mac addresses out of the switch's forwarding database (FDB) will be used to populate the LLDP-MIB's remTable. If configured to autoDetect(4) and LLDP messages are received on this port, this mode will behave like lldpOnly(1), otherwise it will behave like macOnly(2).
INT innominateLLDPIfaceMaxNeighbors	1.3.6.1.4.1.15450.3.7.1.2.1.5	INTEGER	read-write	Configure Hirschmann LLDP on this physical port. This value limits the number of entries in the remTable for this port.
innominateLLDPStatistics	1.3.6.1.4.1.15450.3.7.2
innominateLLDPStatsIfTable	1.3.6.1.4.1.15450.3.7.2.1		not-accessible	This table contains variables for each interface of the switch.
innominateLLDPStatsIfEntry	1.3.6.1.4.1.15450.3.7.2.1.1		not-accessible
INT innominateLLDPStatsIfaceGroupID	1.3.6.1.4.1.15450.3.7.2.1.1.1	INTEGER	read-only	Index to identify an interface card. This value is never greater than innominateSysGroupCapacity.
INT innominateLLDPStatsIfaceID	1.3.6.1.4.1.15450.3.7.2.1.1.2	INTEGER	read-only	Index to identify an interface within an interface card.
C32 innominateLLDPStatsIfaceTotalFDBEntryCountEx	1.3.6.1.4.1.15450.3.7.2.1.1.3	Counter32	read-only	The total number of learned entries in the forwarding database (FDB) for this port.
C32 innominateLLDPStatsIfaceTotalEntryCount	1.3.6.1.4.1.15450.3.7.2.1.1.4	Counter32	read-only	The total number of remote connections in the LLDP MIB's remTable for this port.
C32 innominateLLDPStatsIfaceIEEEEntryCount	1.3.6.1.4.1.15450.3.7.2.1.1.5	Counter32	read-only	The number of remote connections in the LLDP MIB's remTable for this port that were detected because an LLDP message from an IEEE source was received.
C32 innominateLLDPStatsIfaceHirmaEntryCount	1.3.6.1.4.1.15450.3.7.2.1.1.6	Counter32	read-only	The number of remote connections in the LLDP MIB's remTable for this port that were detected because an LLDP message from an Hirschmann source was received.
C32 innominateLLDPStatsIfaceFDBEntryCount	1.3.6.1.4.1.15450.3.7.2.1.1.7	Counter32	read-only	The number of remote connections in the LLDP MIB's remTable for this port that were detected in the forwarding database (FDB) for this port.

RFC description

Proprietary extensions to the Link Layer Discovery Protocol (LLDP) standard for network topology discovery.

Start monitoring Innominate mGuard industrial security appliance/firewall with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download INNOMINATE-LLDP-MIB