JUNIPER-L2CP-FEATURES-MIB

All MIBs › JUNIPER-L2CP-FEATURES-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2012-06-25

Category: Technology: Switching/L2, Technology: VLAN, Vendor: Juniper

Description: Provides managed objects for Layer 2 Control Protocol (L2CP) feature configuration and PDU tunneling on Juniper Networks devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-L2CP-FEATURES-MIB?

JUNIPER-L2CP-FEATURES-MIB is a Juniper Networks proprietary MIB for managing Layer 2 Control Protocol (L2CP) features, including Spanning Tree Protocol (STP) root/loop protection and BPDU tunneling/protection, on Juniper switching platforms. It exposes configuration and status tables for per-port STP protection settings and BPDU protection state, letting operators both configure and observe these Layer 2 security features. Its monitoring value is chiefly software/configuration status: whether root-guard and loop-guard are enabled and their current state per port, whether BPDU protection is enabled, and whether a BPDU protection error has been detected and a port disabled as a result. It builds on standard bridge/STP concepts from IEEE 802.1D/802.1w as reflected in its jnxDot1dStp-prefixed objects, indicating a dependency on standard bridge MIB conventions. It is deployed on Juniper Ethernet switches in enterprise networks where L2 loop and rogue-BPDU protection is enforced at the access layer. Engineers can download the JUNIPER-L2CP-FEATURES-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-L2CP-FEATURES-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks EX/QFX switches (L2CP protocol tunneling)

Monitoring Examples

An administrator would poll jnxDot1dStpPortProtectTable to check jnxDot1dStpPortRootProtectState and jnxDot1dStpPortLoopProtectState per port, and jnxL2cpBpduProtectPortTable to check jnxL2cpPortBpduError for ports with BPDU protection enabled. A port showing jnxL2cpPortBpduError set alongside a shutdown state would reveal that a rogue or unexpected BPDU was received and the port was automatically disabled per jnxL2cpBpduProtectDisableTimeout policy. This is a key diagnostic signal for detecting accidental switch loops or unauthorized bridging devices connected to access ports.

What Can Be Monitored

STP root-protect status per port
STP loop-protect status per port
BPDU protection enabled state
BPDU protection error/violation
BPDU protect disable timeout

Imported Objects

From BRIDGE-MIB

dot1dStpPort
dot1dStpPortEntry

From IF-MIB

InterfaceIndex
ifIndex	OBJECT-TYPE

From JUNIPER-SMI

jnxL2cpMibRoot

OBJECT-IDENTITY

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
jnxL2cpFeaturesMIB	1.3.6.1.4.1.2636.3.53.1			This mib module is for Juniper Networks Proprietory Layer 2 control protocol (L2CP) features
jnxL2cpObjects	1.3.6.1.4.1.2636.3.53.1.1
jnxL2cpStpProtectObjects	1.3.6.1.4.1.2636.3.53.1.1.1
jnxDot1dStpPortProtectTable	1.3.6.1.4.1.2636.3.53.1.1.1.1		not-accessible	Defines the jnxDot1dStp Port Table for providing enterprise specific extensions for Root Protect and Loop Protect to the corresponding dot1dStpPortTable entry.
jnxDot1dStpPortProtectEntry	1.3.6.1.4.1.2636.3.53.1.1.1.1.1		not-accessible	Defines an entry in the jnxDot1dStpPortProtectTable. This essentially augments the dot1dStpPortTable with additional objects.
T/F jnxDot1dStpPortRootProtectEnabled	1.3.6.1.4.1.2636.3.53.1.1.1.1.1.1	TruthValue	read-only	A Boolean value set by management indicating whether Root protect functionality is enabled on the port. If TRUE causes the Port not to be selected as Root Port, even it has the best spanning tree priority vector. This parameter should be FALSE by default.
INT jnxDot1dStpPortRootProtectState	1.3.6.1.4.1.2636.3.53.1.1.1.1.1.2	INTEGER	read-only	Indicates whether the port was prevented from being a root port. This parameter will always return 'no-error (0)' if jnxDot1dStpPortRootProtectEnabled is FALSE.
T/F jnxDot1dStpPortLoopProtectEnabled	1.3.6.1.4.1.2636.3.53.1.1.1.1.1.3	TruthValue	read-only	A Boolean value set by management indicating whether Loop protect functionality is enabled on the port. If TRUE causes the Port not to be selected as Designated Port when the received superior BPDU is aged out. This parameter should be FALSE by default.
INT jnxDot1dStpPortLoopProtectState	1.3.6.1.4.1.2636.3.53.1.1.1.1.1.4	INTEGER	read-only	Indicates whether a potential Loop was prevented on the port This parameter will always return 'no-error (0)' if jnxDot1dStpPortLoopProtectEnabled is FALSE.
jnxL2cpBpduProtectObjects	1.3.6.1.4.1.2636.3.53.1.1.2
jnxL2cpBpduProtectPortTable	1.3.6.1.4.1.2636.3.53.1.1.2.1		not-accessible	Defines a Port Table for BPDU Protect information. This contains only those ports on which BPDU Protect can be configured.
jnxL2cpBpduProtectPortEntry	1.3.6.1.4.1.2636.3.53.1.1.2.1.1		not-accessible	Defines an entry in the jnxL2cpBpduProtectPortTable. A list containing BPDU Protect information for each Port.
T/F jnxL2cpBpduProtectPortEnabled	1.3.6.1.4.1.2636.3.53.1.1.2.1.1.1	TruthValue	read-only	A Boolean value set by management indicating whether BPDU protect functionality is enabled on the port. If TRUE causes the Port to be disabled (link down) upon receipt of a BPDU. This parameter should be FALSE by default.
INT jnxL2cpPortBpduError	1.3.6.1.4.1.2636.3.53.1.1.2.1.1.2	INTEGER	read-only	Indicates whether a BPDU was received on the port. This parameter will always return 'no-error (0)' if jnxL2cpBpduProtectPortEnabled is FALSE.
INT jnxL2cpBpduProtectDisableTimeout	1.3.6.1.4.1.2636.3.53.1.1.2.2	INTEGER	read-only	Returns the value of time (in seconds) after which a port on which BPDU error was detected will be re-enabled. A returned value of 0 indicates that port will not be re-enabled automatically.
jnxLacpNotifyVars	1.3.6.1.4.1.2636.3.53.1.1.3
STR jnxLacpInterfaceName	1.3.6.1.4.1.2636.3.53.1.1.3.1	DisplayString	accessible-for-notify	Lacp member interface.
NUM jnxLacpifIndex	1.3.6.1.4.1.2636.3.53.1.1.3.2	InterfaceIndex	accessible-for-notify	Snmp ifIndex of member interface.
STR jnxLacpAggregateInterfaceName	1.3.6.1.4.1.2636.3.53.1.1.3.3	DisplayString	accessible-for-notify	Lacp Aggregate interface.
NUM jnxLacpAggregateifIndex	1.3.6.1.4.1.2636.3.53.1.1.3.4	InterfaceIndex	accessible-for-notify	Snmp ifIndex of Aggregator.
STR jnxLacpAggPortActorOperState	1.3.6.1.4.1.2636.3.53.1.1.3.5	DisplayString	accessible-for-notify	Port actor operational state.
jnxLacpAggTimeout	1.3.6.1.4.1.2636.3.53.1.1.4
dot3adAggPortTimeoutTable	1.3.6.1.4.1.2636.3.53.1.1.4.1		not-accessible	A table that contains Link Aggregation Timeout information about a port that is associated with this device. A row appears in this table for each physical port.
dot3adAggPortTimeoutEntry	1.3.6.1.4.1.2636.3.53.1.1.4.1.1		not-accessible	A list of Link Aggregation Control Protocol timeout information for a port on this device.
STR dot3adInterfaceName	1.3.6.1.4.1.2636.3.53.1.1.4.1.1.1	DisplayString	read-only	Physical port that is associated with Aggregation Port. This value is read-only.
LAC dot3adOperState	1.3.6.1.4.1.2636.3.53.1.1.4.1.1.2	LacpState	read-only	A string of 8 bits, corresponding to the current operational values of Actor_State as transmitted by the Actor in LACPDUs. The bit allocations are as defined in 30.7.2.1.20. This attribute value is read-only.
STR dot3adAggname	1.3.6.1.4.1.2636.3.53.1.1.4.1.1.3	DisplayString	read-only	Aggregation Port where Physical port is associated with. This value is read-only.
TIK dot3adInterfaceTimeout	1.3.6.1.4.1.2636.3.53.1.1.4.1.1.4	TimeTicks	read-only	This object represents the time elapsed in seconds since lacp experienced timeout. This value is read-only.
jnxL2cpNotifications	1.3.6.1.4.1.2636.3.53.1.2
jnxL2cpProtectTraps	1.3.6.1.4.1.2636.3.53.1.2.0
NTF jnxPortRootProtectStateChangeTrap	1.3.6.1.4.1.2636.3.53.1.2.0.1			Generated when the ports Root-protect state (no-error or root-prevented) changes.
NTF jnxPortLoopProtectStateChangeTrap	1.3.6.1.4.1.2636.3.53.1.2.0.2			Generated when the ports Loop-protect state (no-error or loop-prevented) changes.
NTF jnxPortBpduErrorStatusChangeTrap	1.3.6.1.4.1.2636.3.53.1.2.0.3			Generated when the ports BPDU error state (no-error or detected) changes.
jnxLacpNotificationsPrefix	1.3.6.1.4.1.2636.3.53.1.2.1
NTF jnxLacpTimeOut	1.3.6.1.4.1.2636.3.53.1.2.1.1			Lacp times out

RFC description

Manages Layer 2 control protocol features including STP root protection and BPDU protection on Juniper switches.

Start monitoring Juniper Networks EX/QFX switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-L2CP-FEATURES-MIB

What Is JUNIPER-L2CP-FEATURES-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description