MPLS-L3VPN-STD-MIB

All MIBs › MPLS-L3VPN-STD-MIB

Organization: IETF Layer-3 Virtual Private Networks Working Group.

Last Updated: 2006-01-23

Category: MPLS and Traffic Engineering, Network Interfaces, Routing Protocols, VPN and Security

Description:

Manages MPLS/BGP Layer 3 Virtual Private Networks (L3VPNs), including VRF configuration, routing, and associated interface bindings.

Imported Objects

From IANA-RTPROTO-MIB

IANAipRouteProtocol

From IF-MIB

InterfaceIndex
InterfaceIndexOrZero

From INET-ADDRESS-MIB

InetAddress
InetAddressPrefixLength
InetAddressType
InetAutonomousSystemNumber

From MPLS-LSR-STD-MIB

MplsIndexType

From MPLS-TC-STD-MIB

mplsStdMIB

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus
StorageType
TEXTUAL-CONVENTION
TimeStamp
TruthValue

From VPN-TC-STD-MIB

VPNIdOrZero

What Is MPLS-L3VPN-STD-MIB?

MPLS-L3VPN-STD-MIB is the IETF standards-track MIB (RFC 4382) for managing MPLS/BGP Layer 3 Virtual Private Networks, covering VRF (Virtual Routing and Forwarding) instance configuration, interface-to-VRF bindings, and route distribution parameters. It exposes configuration data such as the number of configured and active VRFs, per-interface VPN classification, route distribution protocols, and threshold-based notifications for route count and illegal label reception. Its monitoring value centers on VPN service health and capacity, letting operators track how many VRFs are active versus configured, whether route-count thresholds are being approached, and whether interfaces are correctly classified as VPN-facing, functioning as a fault/capacity-monitoring layer rather than raw hardware telemetry. It explicitly depends on and extends the base MPLS-related MIBs and interoperates with routing/BGP MIBs since VRFs are populated via VPN routing protocols. It is deployed on provider-edge (PE) routers in MPLS-based Layer 3 VPN networks operated by ISPs and enterprises with private WAN overlays, where network management systems poll the MPLS-L3VPN-STD-MIB OID tree to pull VRF configuration and capacity data directly from each router.

IPNetwork Monitor allows you to monitor SNMP objects defined in MPLS-L3VPN-STD-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

What Can Be Monitored

configured vs active VRF counts
VRF-to-interface bindings
per-interface VPN classification
route distribution protocol per interface
VRF route count thresholds
illegal label reception threshold

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer
MPLS provider-edge (PE) routers

Monitoring Examples

An operator would poll mplsL3VpnConfiguredVrfs and mplsL3VpnActiveVrfs to detect VRFs that failed to come up, and check mplsL3VpnConnectedInterfaces against expectations to catch a VRF losing its interface binding. The mplsL3VpnIfConfTable/mplsL3VpnIfConfEntry rows expose mplsL3VpnIfVpnClassification and mplsL3VpnIfVpnRouteDistProtocol per interface, revealing misconfigured route distribution on a customer-facing port. Approaching mplsL3VpnVrfConfMaxPossRts or triggering mplsL3VpnIllLblRcvThrsh notifications would signal a VRF nearing its route-table capacity or receiving improperly labeled traffic, both actionable fault conditions.

OIDs

OID symbolic	OID numeric	Type	Access	Description
G32 mplsL3VpnActiveVrfs	1.3.6.1.2.1.10.166.11.1.1.2	Gauge32	read-only	The number of VRFs that are active on this node. That is, those VRFs whose corresponding mplsL3VpnVrfOperStatus object value is equal to operational (1).
mplsL3VpnCompliances	1.3.6.1.2.1.10.166.11.2.2
mplsL3VpnConf	1.3.6.1.2.1.10.166.11.1.2
U32 mplsL3VpnConfiguredVrfs	1.3.6.1.2.1.10.166.11.1.1.1	Unsigned32	read-only	The number of VRFs that are configured on this node.
mplsL3VpnConformance	1.3.6.1.2.1.10.166.11.2
G32 mplsL3VpnConnectedInterfaces	1.3.6.1.2.1.10.166.11.1.1.3	Gauge32	read-only	Total number of interfaces connected to a VRF.
mplsL3VpnGroups	1.3.6.1.2.1.10.166.11.2.1
mplsL3VpnIfConfEntry	1.3.6.1.2.1.10.166.11.1.2.1.1		not-accessible	An entry in this table is created by an LSR for every interface capable of supporting MPLS L3VPN. Each entry in this table is meant to correspond to an entry in the Interfaces Table.
NUM mplsL3VpnIfConfIndex	1.3.6.1.2.1.10.166.11.1.2.1.1.1	InterfaceIndex	not-accessible	This is a unique index for an entry in the mplsL3VpnIfConfTable. A non-zero index for an entry indicates the ifIndex for the corresponding interface entry in the MPLS-VPN-layer in the ifTable. Note that this table does not necessarily correspond one-to-one with all entries in the Interface MIB having an ifType of MPLS-layer; rather, only those that are enabled for MPLS L3VPN functionality.
ROW mplsL3VpnIfConfRowStatus	1.3.6.1.2.1.10.166.11.1.2.1.1.5	RowStatus	read-create	This variable is used to create, modify, and/or delete a row in this table. Rows in this table signify that the specified interface is associated with this VRF. If the row creation operation succeeds, the interface will have been associated with the specified VRF, otherwise the agent MUST not allow the association. If the agent only allows read-only operations on this table, it MUST create entries in this table as they are created on the device. When a row in this table is in active(1) state, no objects in that row can be modified except mplsL3VpnIfConfStorageType and mplsL3VpnIfConfRowStatus.
STO mplsL3VpnIfConfStorageType	1.3.6.1.2.1.10.166.11.1.2.1.1.4	StorageType	read-create	The storage type for this VPN If entry. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
mplsL3VpnIfConfTable	1.3.6.1.2.1.10.166.11.1.2.1		not-accessible	This table specifies per-interface MPLS capability and associated information.
mplsL3VpnIfGroup	1.3.6.1.2.1.10.166.11.2.1.3			Collection of objects needed for MPLS VPN interface management.
INT mplsL3VpnIfVpnClassification	1.3.6.1.2.1.10.166.11.1.2.1.1.2	INTEGER	read-create	Denotes whether this link participates in a carrier's carrier, enterprise, or inter-provider scenario.
BIT mplsL3VpnIfVpnRouteDistProtocol	1.3.6.1.2.1.10.166.11.1.2.1.1.3	Bits	read-create	Denotes the route distribution protocol across the PE-CE link. Note that more than one routing protocol may be enabled at the same time; thus, this object is specified as a bitmask. For example, static(5) and ospf(2) are a typical configuration.
U32 mplsL3VpnIllLblRcvThrsh	1.3.6.1.2.1.10.166.11.1.1.7	Unsigned32	read-write	The number of illegally received labels above which the mplsNumVrfSecIllglLblThrshExcd notification is issued. The persistence of this value mimics that of the device's configuration.
mplsL3VpnMIB	1.3.6.1.2.1.10.166.11			This MIB contains managed object definitions for the Layer-3 Multiprotocol Label Switching Virtual Private Networks. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC4382; see the RFC itself for full legal notices.
mplsL3VpnModuleFullCompliance	1.3.6.1.2.1.10.166.11.2.2.1			Compliance statement for agents that provide full support for the MPLS-L3VPN-STD-MIB
mplsL3VpnModuleReadOnlyCompliance	1.3.6.1.2.1.10.166.11.2.2.2			Compliance requirement for implementations that only provide read-only support for MPLS-L3VPN-STD-MIB. Such devices can then be monitored but cannot be configured using this MIB module.
T/F mplsL3VpnNotificationEnable	1.3.6.1.2.1.10.166.11.1.1.4	TruthValue	read-write	If this object is true, then it enables the generation of all notifications defined in this MIB. This object's value should be preserved across agent reboots.
mplsL3VpnNotificationGroup	1.3.6.1.2.1.10.166.11.2.1.10			Objects required for MPLS VPN notifications.
mplsL3VpnNotifications	1.3.6.1.2.1.10.166.11.0
NTF mplsL3VpnNumVrfRouteMaxThreshCleared	1.3.6.1.2.1.10.166.11.0.6			This notification is generated only after the number of routes contained by the specified VRF exceeds or attempts to exceed the maximum allowed value as indicated by mplsVrfMaxRouteThreshold, and then falls below this value. The emission of this notification informs the operator that the error condition has been cleared without the operator having to query the device. Note that mplsL3VpnVrfConfRteMxThrshTime denotes the interval at which the mplsNumVrfRouteMaxThreshExceeded notification will be reissued after the maximum value has been exceeded (or reached if mplsL3VpnVrfConfMaxRoutes and mplsL3VpnVrfConfHighRteThresh are equal) and the initial notification has been issued. Therefore, the generation of this notification should also be emitted with this same frequency (assuming that the error condition is cleared). Specifically, if the error condition is reached and cleared several times during the period of time specified in mplsL3VpnVrfConfRteMxThrshTime, only a single notification will be issued to indicate the first instance of the error condition as well as the first time the error condition is cleared. This behavior is intended to prevent continuous generation of notifications by an agent in the event that routes are continually added and removed to/from a VRF after it has reached its maximum value. The default value is 0. If this value is set to 0, the agent should issue a notification whenever the maximum threshold has been cleared.
NTF mplsL3VpnNumVrfSecIllglLblThrshExcd	1.3.6.1.2.1.10.166.11.0.5			This notification is generated when the number of illegal label violations on a VRF as indicated by mplsL3VpnVrfSecIllegalLblVltns has exceeded mplsL3VpnIllLblRcvThrsh. The threshold is not included in the varbind here because the value of mplsL3VpnVrfSecIllegalLblVltns should be one greater than the threshold at the time this notification is issued.
mplsL3VpnObjects	1.3.6.1.2.1.10.166.11.1
mplsL3VpnPerf	1.3.6.1.2.1.10.166.11.1.3
mplsL3VpnPerfGroup	1.3.6.1.2.1.10.166.11.2.1.4			Collection of objects needed for MPLS VPN performance information.
mplsL3VpnPerfRouteGroup	1.3.6.1.2.1.10.166.11.2.1.5			Collection of objects needed to track MPLS VPN routing table dropped routes.
mplsL3VpnRoute	1.3.6.1.2.1.10.166.11.1.4
mplsL3VpnScalarGroup	1.3.6.1.2.1.10.166.11.2.1.1			Collection of scalar objects required for MPLS VPN management.
mplsL3VpnScalars	1.3.6.1.2.1.10.166.11.1.1
mplsL3VpnSecGroup	1.3.6.1.2.1.10.166.11.2.1.7			Collection of objects needed for MPLS VPN security-related information.
G32 mplsL3VpnVrfActiveInterfaces	1.3.6.1.2.1.10.166.11.1.2.2.1.7	Gauge32	read-only	Total number of interfaces connected to this VRF with ifOperStatus = up(1). This value should increase when an interface is associated with the corresponding VRF and its corresponding ifOperStatus is equal to up(1). If an interface is associated whose ifOperStatus is not up(1), then the value is not incremented until such time as it transitions to this state. This value should be decremented when an interface is disassociated with a VRF or the corresponding ifOperStatus transitions out of the up(1) state to any other state.
U32 mplsL3VpnVrfAssociatedInterfaces	1.3.6.1.2.1.10.166.11.1.2.2.1.8	Unsigned32	read-only	Total number of interfaces connected to this VRF (independent of ifOperStatus type).
INT mplsL3VpnVrfConfAdminStatus	1.3.6.1.2.1.10.166.11.1.2.2.1.14	INTEGER	read-create	Indicates the desired operational status of this VRF.
U32 mplsL3VpnVrfConfHighRteThresh	1.3.6.1.2.1.10.166.11.1.2.2.1.10	Unsigned32	read-create	Denotes high-level water marker for the number of routes that this VRF may hold.
TIM mplsL3VpnVrfConfLastChanged	1.3.6.1.2.1.10.166.11.1.2.2.1.12	TimeStamp	read-only	The value of sysUpTime at the time of the last change of this table entry, which includes changes of VRF parameters defined in this table or addition or deletion of interfaces associated with this VRF.
U32 mplsL3VpnVrfConfMaxPossRts	1.3.6.1.2.1.10.166.11.1.1.5	Unsigned32	read-only	Denotes maximum number of routes that the device will allow all VRFs jointly to hold. If this value is set to 0, this indicates that the device is unable to determine the absolute maximum. In this case, the configured maximum MAY not actually be allowed by the device.
U32 mplsL3VpnVrfConfMaxRoutes	1.3.6.1.2.1.10.166.11.1.2.2.1.11	Unsigned32	read-create	Denotes maximum number of routes that this VRF is configured to hold. This value MUST be less than or equal to mplsL3VpnVrfConfMaxPossRts unless it is set to 0.
U32 mplsL3VpnVrfConfMidRteThresh	1.3.6.1.2.1.10.166.11.1.2.2.1.9	Unsigned32	read-create	Denotes mid-level water marker for the number of routes that this VRF may hold.
ROW mplsL3VpnVrfConfRowStatus	1.3.6.1.2.1.10.166.11.1.2.2.1.13	RowStatus	read-create	This variable is used to create, modify, and/or delete a row in this table. When a row in this table is in active(1) state, no objects in that row can be modified except mplsL3VpnVrfConfAdminStatus, mplsL3VpnVrfConfRowStatus, and mplsL3VpnVrfConfStorageType.
U32 mplsL3VpnVrfConfRteMxThrshTime	1.3.6.1.2.1.10.166.11.1.1.6	Unsigned32	read-only	Denotes the interval in seconds, at which the route max threshold notification may be reissued after the maximum value has been exceeded (or has been reached if mplsL3VpnVrfConfMaxRoutes and mplsL3VpnVrfConfHighRteThresh are equal) and the initial notification has been issued. This value is intended to prevent continuous generation of notifications by an agent in the event that routes are continually added to a VRF after it has reached its maximum value. If this value is set to 0, the agent should only issue a single notification at the time that the maximum threshold has been reached, and should not issue any more notifications until the value of routes has fallen below the configured threshold value. This is the recommended default behavior.
STO mplsL3VpnVrfConfStorageType	1.3.6.1.2.1.10.166.11.1.2.2.1.15	StorageType	read-create	The storage type for this VPN VRF entry. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
TIM mplsL3VpnVrfCreationTime	1.3.6.1.2.1.10.166.11.1.2.2.1.5	TimeStamp	read-only	The time at which this VRF entry was created.
STR mplsL3VpnVrfDescription	1.3.6.1.2.1.10.166.11.1.2.2.1.3	SnmpAdminString	read-create	The human-readable description of this VRF.
NTF mplsL3VpnVrfDown	1.3.6.1.2.1.10.166.11.0.2			This notification is generated when: a. One interface is associated with this VRF, and the ifOperStatus of this interface changes from up(1) to down(2). b. Multiple interfaces are associated with this VRF, and the ifOperStatus of all except one of these interfaces is equal to up(1), and the ifOperStatus of that interface changes from up(1) to down(2). c. The last interface with ifOperStatus equal to up(1) is disassociated from a VRF.
mplsL3VpnVrfEntry	1.3.6.1.2.1.10.166.11.1.2.2.1		not-accessible	An entry in this table is created by an LSR for every VRF capable of supporting MPLS L3VPN. The indexing provides an ordering of VRFs per-VPN interface.
mplsL3VpnVrfGroup	1.3.6.1.2.1.10.166.11.2.1.2			Collection of objects needed for MPLS VPN VRF management.
MPL mplsL3VpnVrfName	1.3.6.1.2.1.10.166.11.1.2.2.1.1	MplsL3VpnName	not-accessible	The human-readable name of this VPN. This MAY be equivalent to the [RFC2685] VPN-ID, but may also vary. If it is set to the VPN ID, it MUST be equivalent to the value of mplsL3VpnVrfVpnId. It is strongly recommended that all sites supporting VRFs that are part of the same VPN use the same naming convention for VRFs as well as the same VPN ID.
NTF mplsL3VpnVrfNumVrfRouteMaxThreshExceeded	1.3.6.1.2.1.10.166.11.0.4			This notification is generated when the number of routes contained by the specified VRF exceeds or attempts to exceed the maximum allowed value as indicated by mplsL3VpnVrfMaxRouteThreshold. In cases where mplsL3VpnVrfConfHighRteThresh is set to the same value as mplsL3VpnVrfConfMaxRoutes, mplsL3VpnVrfConfHighRteThresh need not be exceeded; rather, just reached for this notification to be issued. Note that mplsL3VpnVrfConfRteMxThrshTime denotes the interval at which the this notification will be reissued after the maximum value has been exceeded (or reached if mplsL3VpnVrfConfMaxRoutes and mplsL3VpnVrfConfHighRteThresh are equal) and the initial notification has been issued. This value is intended to prevent continuous generation of notifications by an agent in the event that routes are continually added to a VRF after it has reached its maximum value. The default value is 0 minutes. If this value is set to 0, the agent should only issue a single notification at the time that the maximum threshold has been reached, and should not issue any more notifications until the value of routes has fallen below the configured threshold value.
INT mplsL3VpnVrfOperStatus	1.3.6.1.2.1.10.166.11.1.2.2.1.6	INTEGER	read-only	Denotes whether or not a VRF is operational. A VRF is up(1) when there is at least one interface associated with the VRF whose ifOperStatus is up(1). A VRF is down(2) when: a. There does not exist at least one interface whose ifOperStatus is up(1). b. There are no interfaces associated with the VRF.
G32 mplsL3VpnVrfPerfCurrNumRoutes	1.3.6.1.2.1.10.166.11.1.3.1.1.3	Gauge32	read-only	Indicates the number of routes currently used by this VRF.
TIM mplsL3VpnVrfPerfDiscTime	1.3.6.1.2.1.10.166.11.1.3.1.1.5	TimeStamp	read-only	The value of sysUpTime on the most recent occasion at which any one or more of this entry's counters suffered a discontinuity. If no such discontinuities have occurred since the last re-initialization of the local management subsystem, then this object contains a zero value.
mplsL3VpnVrfPerfEntry	1.3.6.1.2.1.10.166.11.1.3.1.1		not-accessible	An entry in this table is created by an LSR for every VRF capable of supporting MPLS L3VPN.
C32 mplsL3VpnVrfPerfRoutesAdded	1.3.6.1.2.1.10.166.11.1.3.1.1.1	Counter32	read-only	Indicates the number of routes added to this VPN/VRF since the last discontinuity. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfPerfDiscTime.
C32 mplsL3VpnVrfPerfRoutesDeleted	1.3.6.1.2.1.10.166.11.1.3.1.1.2	Counter32	read-only	Indicates the number of routes removed from this VPN/VRF. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfPerfDiscTime.
C32 mplsL3VpnVrfPerfRoutesDropped	1.3.6.1.2.1.10.166.11.1.3.1.1.4	Counter32	read-only	This counter should be incremented when the number of routes contained by the specified VRF exceeds or attempts to exceed the maximum allowed value as indicated by mplsL3VpnVrfMaxRouteThreshold. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfPerfDiscTime.
mplsL3VpnVrfPerfTable	1.3.6.1.2.1.10.166.11.1.3.1		not-accessible	This table specifies per MPLS L3VPN VRF Table performance information.
MPL mplsL3VpnVrfRD	1.3.6.1.2.1.10.166.11.1.2.2.1.4	MplsL3VpnRouteDistinguisher	read-create	The route distinguisher for this VRF.
NTF mplsL3VpnVrfRouteMidThreshExceeded	1.3.6.1.2.1.10.166.11.0.3			This notification is generated when the number of routes contained by the specified VRF exceeds the value indicated by mplsL3VpnVrfMidRouteThreshold. A single notification MUST be generated when this threshold is exceeded, and no other notifications of this type should be issued until the value of mplsL3VpnVrfPerfCurrNumRoutes has fallen below that of mplsL3VpnVrfConfMidRteThresh.
MPL mplsL3VpnVrfRT	1.3.6.1.2.1.10.166.11.1.2.3.1.4	MplsL3VpnRouteDistinguisher	read-create	The route target distribution policy.
STR mplsL3VpnVrfRTDescr	1.3.6.1.2.1.10.166.11.1.2.3.1.5	SnmpAdminString	read-create	Description of the route target.
mplsL3VpnVrfRteEntry	1.3.6.1.2.1.10.166.11.1.4.1.1		not-accessible	An entry in this table is created by an LSR for every route present configured (either dynamically or statically) within the context of a specific VRF capable of supporting MPLS/BGP VPN. The indexing provides an ordering of VRFs per-VPN interface. Implementers need to be aware that there are quite a few index objects that together can exceed the size allowed for an Object Identifier (OID). So implementers must make sure that OIDs of column instances in this table will have no more than 128 sub-identifiers, otherwise they cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3.
mplsL3VpnVrfRteGroup	1.3.6.1.2.1.10.166.11.2.1.8			Objects required for VRF route table management.
G32 mplsL3VpnVrfRteInetCidrAge	1.3.6.1.2.1.10.166.11.1.4.1.1.10	Gauge32	read-only	The number of seconds since this route was last updated or otherwise determined to be correct. Note that no semantics of 'too old' can be implied except through knowledge of the routing protocol by which the route was learned.
IP mplsL3VpnVrfRteInetCidrDest	1.3.6.1.2.1.10.166.11.1.4.1.1.2	InetAddress	not-accessible	The destination IP address of this route. The type of this address is determined by the value of the mplsL3VpnVrfRteInetCidrDestType object. The values for the index objects mplsL3VpnVrfRteInetCidrDest and mplsL3VpnVrfRteInetCidrPfxLen must be consistent. When the value of mplsL3VpnVrfRteInetCidrDest is x, then the bitwise logical-AND of x with the value of the mask formed from the corresponding index object mplsL3VpnVrfRteInetCidrPfxLen MUST be equal to x. If not, then the index pair is not consistent and an inconsistentName error must be returned on SET or CREATE requests.
IPt mplsL3VpnVrfRteInetCidrDestType	1.3.6.1.2.1.10.166.11.1.4.1.1.1	InetAddressType	not-accessible	The type of the mplsL3VpnVrfRteInetCidrDest address, as defined in the InetAddress MIB. Only those address types that may appear in an actual routing table are allowed as values of this object.
NUM mplsL3VpnVrfRteInetCidrIfIndex	1.3.6.1.2.1.10.166.11.1.4.1.1.7	InterfaceIndexOrZero	read-create	The ifIndex value that identifies the local interface through which the next hop of this route should be reached. A value of 0 is valid and represents the scenario where no interface is specified.
I32 mplsL3VpnVrfRteInetCidrMetric1	1.3.6.1.2.1.10.166.11.1.4.1.1.12	Integer32	read-create	The primary routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric2	1.3.6.1.2.1.10.166.11.1.4.1.1.13	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric3	1.3.6.1.2.1.10.166.11.1.4.1.1.14	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric4	1.3.6.1.2.1.10.166.11.1.4.1.1.15	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric5	1.3.6.1.2.1.10.166.11.1.4.1.1.16	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
IP mplsL3VpnVrfRteInetCidrNextHop	1.3.6.1.2.1.10.166.11.1.4.1.1.6	InetAddress	not-accessible	On remote routes, the address of the next system en route. For non-remote routes, a zero-length string. The type of this address is determined by the value of the mplsL3VpnVrfRteInetCidrNHopType object.
INE mplsL3VpnVrfRteInetCidrNextHopAS	1.3.6.1.2.1.10.166.11.1.4.1.1.11	InetAutonomousSystemNumber	read-create	The Autonomous System Number of the next hop. The semantics of this object are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. When this object is unknown or not relevant, its value should be set to zero.
IPt mplsL3VpnVrfRteInetCidrNHopType	1.3.6.1.2.1.10.166.11.1.4.1.1.5	InetAddressType	not-accessible	The type of the mplsL3VpnVrfRteInetCidrNextHop address, as defined in the InetAddress MIB. Value should be set to unknown(0) for non-remote routes. Only those address types that may appear in an actual routing table are allowed as values of this object.
ADR mplsL3VpnVrfRteInetCidrPfxLen	1.3.6.1.2.1.10.166.11.1.4.1.1.3	InetAddressPrefixLength	not-accessible	Indicates the number of leading one bits that form the mask to be logical-ANDed with the destination address before being compared to the value in the mplsL3VpnVrfRteInetCidrDest field. The values for the index objects mplsL3VpnVrfRteInetCidrDest and mplsL3VpnVrfRteInetCidrPfxLen must be consistent. When the value of mplsL3VpnVrfRteInetCidrDest is x, then the bitwise logical-AND of x with the value of the mask formed from the corresponding index object mplsL3VpnVrfRteInetCidrPfxLen MUST be equal to x. If not, then the index pair is not consistent and an inconsistentName error must be returned on SET or CREATE requests.
OID mplsL3VpnVrfRteInetCidrPolicy	1.3.6.1.2.1.10.166.11.1.4.1.1.4	OBJECT IDENTIFIER	not-accessible	This object is an opaque object without any defined semantics. Its purpose is to serve as an additional index that may delineate between multiple entries to the same destination. The value { 0 0 } shall be used as the default value for this object.
IAN mplsL3VpnVrfRteInetCidrProto	1.3.6.1.2.1.10.166.11.1.4.1.1.9	IANAipRouteProtocol	read-only	The routing mechanism via which this route was learned. Inclusion of values for gateway routing protocols is not intended to imply that hosts should support those protocols.
ROW mplsL3VpnVrfRteInetCidrStatus	1.3.6.1.2.1.10.166.11.1.4.1.1.18	RowStatus	read-create	The row status variable, used according to row installation and removal conventions. A row entry cannot be modified when the status is marked as active(1).
INT mplsL3VpnVrfRteInetCidrType	1.3.6.1.2.1.10.166.11.1.4.1.1.8	INTEGER	read-create	The type of route. Note that local(3) refers to a route for which the next hop is the final destination; remote(4) refers to a route for which the next hop is not the final destination. Routes that do not result in traffic forwarding or rejection should not be displayed even if the implementation keeps them stored internally. reject(2) refers to a route that, if matched, discards the message as unreachable and returns a notification (e.g., ICMP error) to the message sender. This is used in some protocols as a means of correctly aggregating routes. blackhole(5) refers to a route that, if matched, discards the message silently.
mplsL3VpnVrfRTEntry	1.3.6.1.2.1.10.166.11.1.2.3.1		not-accessible	An entry in this table is created by an LSR for each route target configured for a VRF supporting a MPLS L3VPN instance. The indexing provides an ordering per-VRF instance. See [RFC4364] for a complete definition of a route target.
mplsL3VpnVrfRteTable	1.3.6.1.2.1.10.166.11.1.4.1		not-accessible	This table specifies per-interface MPLS L3VPN VRF Table routing information. Entries in this table define VRF routing entries associated with the specified MPLS/VPN interfaces. Note that this table contains both BGP and Interior Gateway Protocol IGP routes, as both may appear in the same VRF.
MPL mplsL3VpnVrfRteXCPointer	1.3.6.1.2.1.10.166.11.1.4.1.1.17	MplsIndexType	read-create	Index into mplsXCTable that identifies which cross- connect entry is associated with this VRF route entry by containing the mplsXCIndex of that cross-connect entry. The string containing the single-octet 0x00 indicates that a label stack is not associated with this route entry. This can be the case because the label bindings have not yet been established, or because some change in the agent has removed them. When the label stack associated with this VRF route is created, it MUST establish the associated cross-connect entry in the mplsXCTable and then set that index to the value of this object. Changes to the cross-connect object in the mplsXCTable MUST automatically be reflected in the value of this object. If this object represents a static routing entry, then the manager must ensure that this entry is maintained consistently in the corresponding mplsXCTable as well.
mplsL3VpnVrfRTGroup	1.3.6.1.2.1.10.166.11.2.1.9			Objects required for VRF route target management.
U32 mplsL3VpnVrfRTIndex	1.3.6.1.2.1.10.166.11.1.2.3.1.2	Unsigned32	not-accessible	Auxiliary index for route targets configured for a particular VRF.
ROW mplsL3VpnVrfRTRowStatus	1.3.6.1.2.1.10.166.11.1.2.3.1.6	RowStatus	read-create	This variable is used to create, modify, and/or delete a row in this table. When a row in this table is in active(1) state, no objects in that row can be modified except mplsL3VpnVrfRTRowStatus.
STO mplsL3VpnVrfRTStorageType	1.3.6.1.2.1.10.166.11.1.2.3.1.7	StorageType	read-create	The storage type for this VPN route target (RT) entry. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
mplsL3VpnVrfRTTable	1.3.6.1.2.1.10.166.11.1.2.3		not-accessible	This table specifies per-VRF route target association. Each entry identifies a connectivity policy supported as part of a VPN.
MPL mplsL3VpnVrfRTType	1.3.6.1.2.1.10.166.11.1.2.3.1.3	MplsL3VpnRtType	not-accessible	The route target distribution type.
TIM mplsL3VpnVrfSecDiscontinuityTime	1.3.6.1.2.1.10.166.11.1.2.6.1.2	TimeStamp	read-only	The value of sysUpTime on the most recent occasion at which any one or more of this entry's counters suffered a discontinuity. If no such discontinuities have occurred since the last re-initialization of the local management subsystem, then this object contains a zero value.
mplsL3VpnVrfSecEntry	1.3.6.1.2.1.10.166.11.1.2.6.1		not-accessible	An entry in this table is created by an LSR for every VRF capable of supporting MPLS L3VPN. Each entry in this table is used to indicate security-related information for each VRF entry.
C32 mplsL3VpnVrfSecIllegalLblVltns	1.3.6.1.2.1.10.166.11.1.2.6.1.1	Counter32	read-only	Indicates the number of illegally received labels on this VPN/VRF. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfSecDiscontinuityTime.
mplsL3VpnVrfSecTable	1.3.6.1.2.1.10.166.11.1.2.6		not-accessible	This table specifies per MPLS L3VPN VRF Table security-related counters.
mplsL3VpnVrfTable	1.3.6.1.2.1.10.166.11.1.2.2		not-accessible	This table specifies per-interface MPLS L3VPN VRF Table capability and associated information. Entries in this table define VRF routing instances associated with MPLS/VPN interfaces. Note that multiple interfaces can belong to the same VRF instance. The collection of all VRF instances comprises an actual VPN.
NTF mplsL3VpnVrfUp	1.3.6.1.2.1.10.166.11.0.1			This notification is generated when: a. No interface is associated with this VRF, and the first (and only first) interface associated with it has its ifOperStatus change to up(1). b. One interface is associated with this VRF, and the ifOperStatus of this interface changes to up(1). c. Multiple interfaces are associated with this VRF, and the ifOperStatus of all interfaces is down(2), and the first of those interfaces has its ifOperStatus change to up(1).
VPN mplsL3VpnVrfVpnId	1.3.6.1.2.1.10.166.11.1.2.2.1.2	VPNIdOrZero	read-create	The VPN ID as specified in [RFC2685]. If a VPN ID has not been specified for this VRF, then this variable SHOULD be set to a zero-length OCTET STRING.

OID symbolic	OID numeric	Type	Access	Description
mplsL3VpnMIB	1.3.6.1.2.1.10.166.11			This MIB contains managed object definitions for the Layer-3 Multiprotocol Label Switching Virtual Private Networks. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC4382; see the RFC itself for full legal notices.
mplsL3VpnNotifications	1.3.6.1.2.1.10.166.11.0
NTF mplsL3VpnVrfUp	1.3.6.1.2.1.10.166.11.0.1			This notification is generated when: a. No interface is associated with this VRF, and the first (and only first) interface associated with it has its ifOperStatus change to up(1). b. One interface is associated with this VRF, and the ifOperStatus of this interface changes to up(1). c. Multiple interfaces are associated with this VRF, and the ifOperStatus of all interfaces is down(2), and the first of those interfaces has its ifOperStatus change to up(1).
NTF mplsL3VpnVrfDown	1.3.6.1.2.1.10.166.11.0.2			This notification is generated when: a. One interface is associated with this VRF, and the ifOperStatus of this interface changes from up(1) to down(2). b. Multiple interfaces are associated with this VRF, and the ifOperStatus of all except one of these interfaces is equal to up(1), and the ifOperStatus of that interface changes from up(1) to down(2). c. The last interface with ifOperStatus equal to up(1) is disassociated from a VRF.
NTF mplsL3VpnVrfRouteMidThreshExceeded	1.3.6.1.2.1.10.166.11.0.3			This notification is generated when the number of routes contained by the specified VRF exceeds the value indicated by mplsL3VpnVrfMidRouteThreshold. A single notification MUST be generated when this threshold is exceeded, and no other notifications of this type should be issued until the value of mplsL3VpnVrfPerfCurrNumRoutes has fallen below that of mplsL3VpnVrfConfMidRteThresh.
NTF mplsL3VpnVrfNumVrfRouteMaxThreshExceeded	1.3.6.1.2.1.10.166.11.0.4			This notification is generated when the number of routes contained by the specified VRF exceeds or attempts to exceed the maximum allowed value as indicated by mplsL3VpnVrfMaxRouteThreshold. In cases where mplsL3VpnVrfConfHighRteThresh is set to the same value as mplsL3VpnVrfConfMaxRoutes, mplsL3VpnVrfConfHighRteThresh need not be exceeded; rather, just reached for this notification to be issued. Note that mplsL3VpnVrfConfRteMxThrshTime denotes the interval at which the this notification will be reissued after the maximum value has been exceeded (or reached if mplsL3VpnVrfConfMaxRoutes and mplsL3VpnVrfConfHighRteThresh are equal) and the initial notification has been issued. This value is intended to prevent continuous generation of notifications by an agent in the event that routes are continually added to a VRF after it has reached its maximum value. The default value is 0 minutes. If this value is set to 0, the agent should only issue a single notification at the time that the maximum threshold has been reached, and should not issue any more notifications until the value of routes has fallen below the configured threshold value.
NTF mplsL3VpnNumVrfSecIllglLblThrshExcd	1.3.6.1.2.1.10.166.11.0.5			This notification is generated when the number of illegal label violations on a VRF as indicated by mplsL3VpnVrfSecIllegalLblVltns has exceeded mplsL3VpnIllLblRcvThrsh. The threshold is not included in the varbind here because the value of mplsL3VpnVrfSecIllegalLblVltns should be one greater than the threshold at the time this notification is issued.
NTF mplsL3VpnNumVrfRouteMaxThreshCleared	1.3.6.1.2.1.10.166.11.0.6			This notification is generated only after the number of routes contained by the specified VRF exceeds or attempts to exceed the maximum allowed value as indicated by mplsVrfMaxRouteThreshold, and then falls below this value. The emission of this notification informs the operator that the error condition has been cleared without the operator having to query the device. Note that mplsL3VpnVrfConfRteMxThrshTime denotes the interval at which the mplsNumVrfRouteMaxThreshExceeded notification will be reissued after the maximum value has been exceeded (or reached if mplsL3VpnVrfConfMaxRoutes and mplsL3VpnVrfConfHighRteThresh are equal) and the initial notification has been issued. Therefore, the generation of this notification should also be emitted with this same frequency (assuming that the error condition is cleared). Specifically, if the error condition is reached and cleared several times during the period of time specified in mplsL3VpnVrfConfRteMxThrshTime, only a single notification will be issued to indicate the first instance of the error condition as well as the first time the error condition is cleared. This behavior is intended to prevent continuous generation of notifications by an agent in the event that routes are continually added and removed to/from a VRF after it has reached its maximum value. The default value is 0. If this value is set to 0, the agent should issue a notification whenever the maximum threshold has been cleared.
mplsL3VpnObjects	1.3.6.1.2.1.10.166.11.1
mplsL3VpnScalars	1.3.6.1.2.1.10.166.11.1.1
U32 mplsL3VpnConfiguredVrfs	1.3.6.1.2.1.10.166.11.1.1.1	Unsigned32	read-only	The number of VRFs that are configured on this node.
G32 mplsL3VpnActiveVrfs	1.3.6.1.2.1.10.166.11.1.1.2	Gauge32	read-only	The number of VRFs that are active on this node. That is, those VRFs whose corresponding mplsL3VpnVrfOperStatus object value is equal to operational (1).
G32 mplsL3VpnConnectedInterfaces	1.3.6.1.2.1.10.166.11.1.1.3	Gauge32	read-only	Total number of interfaces connected to a VRF.
T/F mplsL3VpnNotificationEnable	1.3.6.1.2.1.10.166.11.1.1.4	TruthValue	read-write	If this object is true, then it enables the generation of all notifications defined in this MIB. This object's value should be preserved across agent reboots.
U32 mplsL3VpnVrfConfMaxPossRts	1.3.6.1.2.1.10.166.11.1.1.5	Unsigned32	read-only	Denotes maximum number of routes that the device will allow all VRFs jointly to hold. If this value is set to 0, this indicates that the device is unable to determine the absolute maximum. In this case, the configured maximum MAY not actually be allowed by the device.
U32 mplsL3VpnVrfConfRteMxThrshTime	1.3.6.1.2.1.10.166.11.1.1.6	Unsigned32	read-only	Denotes the interval in seconds, at which the route max threshold notification may be reissued after the maximum value has been exceeded (or has been reached if mplsL3VpnVrfConfMaxRoutes and mplsL3VpnVrfConfHighRteThresh are equal) and the initial notification has been issued. This value is intended to prevent continuous generation of notifications by an agent in the event that routes are continually added to a VRF after it has reached its maximum value. If this value is set to 0, the agent should only issue a single notification at the time that the maximum threshold has been reached, and should not issue any more notifications until the value of routes has fallen below the configured threshold value. This is the recommended default behavior.
U32 mplsL3VpnIllLblRcvThrsh	1.3.6.1.2.1.10.166.11.1.1.7	Unsigned32	read-write	The number of illegally received labels above which the mplsNumVrfSecIllglLblThrshExcd notification is issued. The persistence of this value mimics that of the device's configuration.
mplsL3VpnConf	1.3.6.1.2.1.10.166.11.1.2
mplsL3VpnIfConfTable	1.3.6.1.2.1.10.166.11.1.2.1		not-accessible	This table specifies per-interface MPLS capability and associated information.
mplsL3VpnIfConfEntry	1.3.6.1.2.1.10.166.11.1.2.1.1		not-accessible	An entry in this table is created by an LSR for every interface capable of supporting MPLS L3VPN. Each entry in this table is meant to correspond to an entry in the Interfaces Table.
NUM mplsL3VpnIfConfIndex	1.3.6.1.2.1.10.166.11.1.2.1.1.1	InterfaceIndex	not-accessible	This is a unique index for an entry in the mplsL3VpnIfConfTable. A non-zero index for an entry indicates the ifIndex for the corresponding interface entry in the MPLS-VPN-layer in the ifTable. Note that this table does not necessarily correspond one-to-one with all entries in the Interface MIB having an ifType of MPLS-layer; rather, only those that are enabled for MPLS L3VPN functionality.
INT mplsL3VpnIfVpnClassification	1.3.6.1.2.1.10.166.11.1.2.1.1.2	INTEGER	read-create	Denotes whether this link participates in a carrier's carrier, enterprise, or inter-provider scenario.
BIT mplsL3VpnIfVpnRouteDistProtocol	1.3.6.1.2.1.10.166.11.1.2.1.1.3	Bits	read-create	Denotes the route distribution protocol across the PE-CE link. Note that more than one routing protocol may be enabled at the same time; thus, this object is specified as a bitmask. For example, static(5) and ospf(2) are a typical configuration.
STO mplsL3VpnIfConfStorageType	1.3.6.1.2.1.10.166.11.1.2.1.1.4	StorageType	read-create	The storage type for this VPN If entry. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
ROW mplsL3VpnIfConfRowStatus	1.3.6.1.2.1.10.166.11.1.2.1.1.5	RowStatus	read-create	This variable is used to create, modify, and/or delete a row in this table. Rows in this table signify that the specified interface is associated with this VRF. If the row creation operation succeeds, the interface will have been associated with the specified VRF, otherwise the agent MUST not allow the association. If the agent only allows read-only operations on this table, it MUST create entries in this table as they are created on the device. When a row in this table is in active(1) state, no objects in that row can be modified except mplsL3VpnIfConfStorageType and mplsL3VpnIfConfRowStatus.
mplsL3VpnVrfTable	1.3.6.1.2.1.10.166.11.1.2.2		not-accessible	This table specifies per-interface MPLS L3VPN VRF Table capability and associated information. Entries in this table define VRF routing instances associated with MPLS/VPN interfaces. Note that multiple interfaces can belong to the same VRF instance. The collection of all VRF instances comprises an actual VPN.
mplsL3VpnVrfEntry	1.3.6.1.2.1.10.166.11.1.2.2.1		not-accessible	An entry in this table is created by an LSR for every VRF capable of supporting MPLS L3VPN. The indexing provides an ordering of VRFs per-VPN interface.
MPL mplsL3VpnVrfName	1.3.6.1.2.1.10.166.11.1.2.2.1.1	MplsL3VpnName	not-accessible	The human-readable name of this VPN. This MAY be equivalent to the [RFC2685] VPN-ID, but may also vary. If it is set to the VPN ID, it MUST be equivalent to the value of mplsL3VpnVrfVpnId. It is strongly recommended that all sites supporting VRFs that are part of the same VPN use the same naming convention for VRFs as well as the same VPN ID.
VPN mplsL3VpnVrfVpnId	1.3.6.1.2.1.10.166.11.1.2.2.1.2	VPNIdOrZero	read-create	The VPN ID as specified in [RFC2685]. If a VPN ID has not been specified for this VRF, then this variable SHOULD be set to a zero-length OCTET STRING.
STR mplsL3VpnVrfDescription	1.3.6.1.2.1.10.166.11.1.2.2.1.3	SnmpAdminString	read-create	The human-readable description of this VRF.
MPL mplsL3VpnVrfRD	1.3.6.1.2.1.10.166.11.1.2.2.1.4	MplsL3VpnRouteDistinguisher	read-create	The route distinguisher for this VRF.
TIM mplsL3VpnVrfCreationTime	1.3.6.1.2.1.10.166.11.1.2.2.1.5	TimeStamp	read-only	The time at which this VRF entry was created.
INT mplsL3VpnVrfOperStatus	1.3.6.1.2.1.10.166.11.1.2.2.1.6	INTEGER	read-only	Denotes whether or not a VRF is operational. A VRF is up(1) when there is at least one interface associated with the VRF whose ifOperStatus is up(1). A VRF is down(2) when: a. There does not exist at least one interface whose ifOperStatus is up(1). b. There are no interfaces associated with the VRF.
G32 mplsL3VpnVrfActiveInterfaces	1.3.6.1.2.1.10.166.11.1.2.2.1.7	Gauge32	read-only	Total number of interfaces connected to this VRF with ifOperStatus = up(1). This value should increase when an interface is associated with the corresponding VRF and its corresponding ifOperStatus is equal to up(1). If an interface is associated whose ifOperStatus is not up(1), then the value is not incremented until such time as it transitions to this state. This value should be decremented when an interface is disassociated with a VRF or the corresponding ifOperStatus transitions out of the up(1) state to any other state.
U32 mplsL3VpnVrfAssociatedInterfaces	1.3.6.1.2.1.10.166.11.1.2.2.1.8	Unsigned32	read-only	Total number of interfaces connected to this VRF (independent of ifOperStatus type).
U32 mplsL3VpnVrfConfMidRteThresh	1.3.6.1.2.1.10.166.11.1.2.2.1.9	Unsigned32	read-create	Denotes mid-level water marker for the number of routes that this VRF may hold.
U32 mplsL3VpnVrfConfHighRteThresh	1.3.6.1.2.1.10.166.11.1.2.2.1.10	Unsigned32	read-create	Denotes high-level water marker for the number of routes that this VRF may hold.
U32 mplsL3VpnVrfConfMaxRoutes	1.3.6.1.2.1.10.166.11.1.2.2.1.11	Unsigned32	read-create	Denotes maximum number of routes that this VRF is configured to hold. This value MUST be less than or equal to mplsL3VpnVrfConfMaxPossRts unless it is set to 0.
TIM mplsL3VpnVrfConfLastChanged	1.3.6.1.2.1.10.166.11.1.2.2.1.12	TimeStamp	read-only	The value of sysUpTime at the time of the last change of this table entry, which includes changes of VRF parameters defined in this table or addition or deletion of interfaces associated with this VRF.
ROW mplsL3VpnVrfConfRowStatus	1.3.6.1.2.1.10.166.11.1.2.2.1.13	RowStatus	read-create	This variable is used to create, modify, and/or delete a row in this table. When a row in this table is in active(1) state, no objects in that row can be modified except mplsL3VpnVrfConfAdminStatus, mplsL3VpnVrfConfRowStatus, and mplsL3VpnVrfConfStorageType.
INT mplsL3VpnVrfConfAdminStatus	1.3.6.1.2.1.10.166.11.1.2.2.1.14	INTEGER	read-create	Indicates the desired operational status of this VRF.
STO mplsL3VpnVrfConfStorageType	1.3.6.1.2.1.10.166.11.1.2.2.1.15	StorageType	read-create	The storage type for this VPN VRF entry. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
mplsL3VpnVrfRTTable	1.3.6.1.2.1.10.166.11.1.2.3		not-accessible	This table specifies per-VRF route target association. Each entry identifies a connectivity policy supported as part of a VPN.
mplsL3VpnVrfRTEntry	1.3.6.1.2.1.10.166.11.1.2.3.1		not-accessible	An entry in this table is created by an LSR for each route target configured for a VRF supporting a MPLS L3VPN instance. The indexing provides an ordering per-VRF instance. See [RFC4364] for a complete definition of a route target.
U32 mplsL3VpnVrfRTIndex	1.3.6.1.2.1.10.166.11.1.2.3.1.2	Unsigned32	not-accessible	Auxiliary index for route targets configured for a particular VRF.
MPL mplsL3VpnVrfRTType	1.3.6.1.2.1.10.166.11.1.2.3.1.3	MplsL3VpnRtType	not-accessible	The route target distribution type.
MPL mplsL3VpnVrfRT	1.3.6.1.2.1.10.166.11.1.2.3.1.4	MplsL3VpnRouteDistinguisher	read-create	The route target distribution policy.
STR mplsL3VpnVrfRTDescr	1.3.6.1.2.1.10.166.11.1.2.3.1.5	SnmpAdminString	read-create	Description of the route target.
ROW mplsL3VpnVrfRTRowStatus	1.3.6.1.2.1.10.166.11.1.2.3.1.6	RowStatus	read-create	This variable is used to create, modify, and/or delete a row in this table. When a row in this table is in active(1) state, no objects in that row can be modified except mplsL3VpnVrfRTRowStatus.
STO mplsL3VpnVrfRTStorageType	1.3.6.1.2.1.10.166.11.1.2.3.1.7	StorageType	read-create	The storage type for this VPN route target (RT) entry. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
mplsL3VpnVrfSecTable	1.3.6.1.2.1.10.166.11.1.2.6		not-accessible	This table specifies per MPLS L3VPN VRF Table security-related counters.
mplsL3VpnVrfSecEntry	1.3.6.1.2.1.10.166.11.1.2.6.1		not-accessible	An entry in this table is created by an LSR for every VRF capable of supporting MPLS L3VPN. Each entry in this table is used to indicate security-related information for each VRF entry.
C32 mplsL3VpnVrfSecIllegalLblVltns	1.3.6.1.2.1.10.166.11.1.2.6.1.1	Counter32	read-only	Indicates the number of illegally received labels on this VPN/VRF. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfSecDiscontinuityTime.
TIM mplsL3VpnVrfSecDiscontinuityTime	1.3.6.1.2.1.10.166.11.1.2.6.1.2	TimeStamp	read-only	The value of sysUpTime on the most recent occasion at which any one or more of this entry's counters suffered a discontinuity. If no such discontinuities have occurred since the last re-initialization of the local management subsystem, then this object contains a zero value.
mplsL3VpnPerf	1.3.6.1.2.1.10.166.11.1.3
mplsL3VpnVrfPerfTable	1.3.6.1.2.1.10.166.11.1.3.1		not-accessible	This table specifies per MPLS L3VPN VRF Table performance information.
mplsL3VpnVrfPerfEntry	1.3.6.1.2.1.10.166.11.1.3.1.1		not-accessible	An entry in this table is created by an LSR for every VRF capable of supporting MPLS L3VPN.
C32 mplsL3VpnVrfPerfRoutesAdded	1.3.6.1.2.1.10.166.11.1.3.1.1.1	Counter32	read-only	Indicates the number of routes added to this VPN/VRF since the last discontinuity. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfPerfDiscTime.
C32 mplsL3VpnVrfPerfRoutesDeleted	1.3.6.1.2.1.10.166.11.1.3.1.1.2	Counter32	read-only	Indicates the number of routes removed from this VPN/VRF. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfPerfDiscTime.
G32 mplsL3VpnVrfPerfCurrNumRoutes	1.3.6.1.2.1.10.166.11.1.3.1.1.3	Gauge32	read-only	Indicates the number of routes currently used by this VRF.
C32 mplsL3VpnVrfPerfRoutesDropped	1.3.6.1.2.1.10.166.11.1.3.1.1.4	Counter32	read-only	This counter should be incremented when the number of routes contained by the specified VRF exceeds or attempts to exceed the maximum allowed value as indicated by mplsL3VpnVrfMaxRouteThreshold. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfPerfDiscTime.
TIM mplsL3VpnVrfPerfDiscTime	1.3.6.1.2.1.10.166.11.1.3.1.1.5	TimeStamp	read-only	The value of sysUpTime on the most recent occasion at which any one or more of this entry's counters suffered a discontinuity. If no such discontinuities have occurred since the last re-initialization of the local management subsystem, then this object contains a zero value.
mplsL3VpnRoute	1.3.6.1.2.1.10.166.11.1.4
mplsL3VpnVrfRteTable	1.3.6.1.2.1.10.166.11.1.4.1		not-accessible	This table specifies per-interface MPLS L3VPN VRF Table routing information. Entries in this table define VRF routing entries associated with the specified MPLS/VPN interfaces. Note that this table contains both BGP and Interior Gateway Protocol IGP routes, as both may appear in the same VRF.
mplsL3VpnVrfRteEntry	1.3.6.1.2.1.10.166.11.1.4.1.1		not-accessible	An entry in this table is created by an LSR for every route present configured (either dynamically or statically) within the context of a specific VRF capable of supporting MPLS/BGP VPN. The indexing provides an ordering of VRFs per-VPN interface. Implementers need to be aware that there are quite a few index objects that together can exceed the size allowed for an Object Identifier (OID). So implementers must make sure that OIDs of column instances in this table will have no more than 128 sub-identifiers, otherwise they cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3.
IPt mplsL3VpnVrfRteInetCidrDestType	1.3.6.1.2.1.10.166.11.1.4.1.1.1	InetAddressType	not-accessible	The type of the mplsL3VpnVrfRteInetCidrDest address, as defined in the InetAddress MIB. Only those address types that may appear in an actual routing table are allowed as values of this object.
IP mplsL3VpnVrfRteInetCidrDest	1.3.6.1.2.1.10.166.11.1.4.1.1.2	InetAddress	not-accessible	The destination IP address of this route. The type of this address is determined by the value of the mplsL3VpnVrfRteInetCidrDestType object. The values for the index objects mplsL3VpnVrfRteInetCidrDest and mplsL3VpnVrfRteInetCidrPfxLen must be consistent. When the value of mplsL3VpnVrfRteInetCidrDest is x, then the bitwise logical-AND of x with the value of the mask formed from the corresponding index object mplsL3VpnVrfRteInetCidrPfxLen MUST be equal to x. If not, then the index pair is not consistent and an inconsistentName error must be returned on SET or CREATE requests.
ADR mplsL3VpnVrfRteInetCidrPfxLen	1.3.6.1.2.1.10.166.11.1.4.1.1.3	InetAddressPrefixLength	not-accessible	Indicates the number of leading one bits that form the mask to be logical-ANDed with the destination address before being compared to the value in the mplsL3VpnVrfRteInetCidrDest field. The values for the index objects mplsL3VpnVrfRteInetCidrDest and mplsL3VpnVrfRteInetCidrPfxLen must be consistent. When the value of mplsL3VpnVrfRteInetCidrDest is x, then the bitwise logical-AND of x with the value of the mask formed from the corresponding index object mplsL3VpnVrfRteInetCidrPfxLen MUST be equal to x. If not, then the index pair is not consistent and an inconsistentName error must be returned on SET or CREATE requests.
OID mplsL3VpnVrfRteInetCidrPolicy	1.3.6.1.2.1.10.166.11.1.4.1.1.4	OBJECT IDENTIFIER	not-accessible	This object is an opaque object without any defined semantics. Its purpose is to serve as an additional index that may delineate between multiple entries to the same destination. The value { 0 0 } shall be used as the default value for this object.
IPt mplsL3VpnVrfRteInetCidrNHopType	1.3.6.1.2.1.10.166.11.1.4.1.1.5	InetAddressType	not-accessible	The type of the mplsL3VpnVrfRteInetCidrNextHop address, as defined in the InetAddress MIB. Value should be set to unknown(0) for non-remote routes. Only those address types that may appear in an actual routing table are allowed as values of this object.
IP mplsL3VpnVrfRteInetCidrNextHop	1.3.6.1.2.1.10.166.11.1.4.1.1.6	InetAddress	not-accessible	On remote routes, the address of the next system en route. For non-remote routes, a zero-length string. The type of this address is determined by the value of the mplsL3VpnVrfRteInetCidrNHopType object.
NUM mplsL3VpnVrfRteInetCidrIfIndex	1.3.6.1.2.1.10.166.11.1.4.1.1.7	InterfaceIndexOrZero	read-create	The ifIndex value that identifies the local interface through which the next hop of this route should be reached. A value of 0 is valid and represents the scenario where no interface is specified.
INT mplsL3VpnVrfRteInetCidrType	1.3.6.1.2.1.10.166.11.1.4.1.1.8	INTEGER	read-create	The type of route. Note that local(3) refers to a route for which the next hop is the final destination; remote(4) refers to a route for which the next hop is not the final destination. Routes that do not result in traffic forwarding or rejection should not be displayed even if the implementation keeps them stored internally. reject(2) refers to a route that, if matched, discards the message as unreachable and returns a notification (e.g., ICMP error) to the message sender. This is used in some protocols as a means of correctly aggregating routes. blackhole(5) refers to a route that, if matched, discards the message silently.
IAN mplsL3VpnVrfRteInetCidrProto	1.3.6.1.2.1.10.166.11.1.4.1.1.9	IANAipRouteProtocol	read-only	The routing mechanism via which this route was learned. Inclusion of values for gateway routing protocols is not intended to imply that hosts should support those protocols.
G32 mplsL3VpnVrfRteInetCidrAge	1.3.6.1.2.1.10.166.11.1.4.1.1.10	Gauge32	read-only	The number of seconds since this route was last updated or otherwise determined to be correct. Note that no semantics of 'too old' can be implied except through knowledge of the routing protocol by which the route was learned.
INE mplsL3VpnVrfRteInetCidrNextHopAS	1.3.6.1.2.1.10.166.11.1.4.1.1.11	InetAutonomousSystemNumber	read-create	The Autonomous System Number of the next hop. The semantics of this object are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. When this object is unknown or not relevant, its value should be set to zero.
I32 mplsL3VpnVrfRteInetCidrMetric1	1.3.6.1.2.1.10.166.11.1.4.1.1.12	Integer32	read-create	The primary routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric2	1.3.6.1.2.1.10.166.11.1.4.1.1.13	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric3	1.3.6.1.2.1.10.166.11.1.4.1.1.14	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric4	1.3.6.1.2.1.10.166.11.1.4.1.1.15	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric5	1.3.6.1.2.1.10.166.11.1.4.1.1.16	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
MPL mplsL3VpnVrfRteXCPointer	1.3.6.1.2.1.10.166.11.1.4.1.1.17	MplsIndexType	read-create	Index into mplsXCTable that identifies which cross- connect entry is associated with this VRF route entry by containing the mplsXCIndex of that cross-connect entry. The string containing the single-octet 0x00 indicates that a label stack is not associated with this route entry. This can be the case because the label bindings have not yet been established, or because some change in the agent has removed them. When the label stack associated with this VRF route is created, it MUST establish the associated cross-connect entry in the mplsXCTable and then set that index to the value of this object. Changes to the cross-connect object in the mplsXCTable MUST automatically be reflected in the value of this object. If this object represents a static routing entry, then the manager must ensure that this entry is maintained consistently in the corresponding mplsXCTable as well.
ROW mplsL3VpnVrfRteInetCidrStatus	1.3.6.1.2.1.10.166.11.1.4.1.1.18	RowStatus	read-create	The row status variable, used according to row installation and removal conventions. A row entry cannot be modified when the status is marked as active(1).
mplsL3VpnConformance	1.3.6.1.2.1.10.166.11.2
mplsL3VpnGroups	1.3.6.1.2.1.10.166.11.2.1
mplsL3VpnScalarGroup	1.3.6.1.2.1.10.166.11.2.1.1			Collection of scalar objects required for MPLS VPN management.
mplsL3VpnVrfGroup	1.3.6.1.2.1.10.166.11.2.1.2			Collection of objects needed for MPLS VPN VRF management.
mplsL3VpnIfGroup	1.3.6.1.2.1.10.166.11.2.1.3			Collection of objects needed for MPLS VPN interface management.
mplsL3VpnPerfGroup	1.3.6.1.2.1.10.166.11.2.1.4			Collection of objects needed for MPLS VPN performance information.
mplsL3VpnPerfRouteGroup	1.3.6.1.2.1.10.166.11.2.1.5			Collection of objects needed to track MPLS VPN routing table dropped routes.
mplsL3VpnSecGroup	1.3.6.1.2.1.10.166.11.2.1.7			Collection of objects needed for MPLS VPN security-related information.
mplsL3VpnVrfRteGroup	1.3.6.1.2.1.10.166.11.2.1.8			Objects required for VRF route table management.
mplsL3VpnVrfRTGroup	1.3.6.1.2.1.10.166.11.2.1.9			Objects required for VRF route target management.
mplsL3VpnNotificationGroup	1.3.6.1.2.1.10.166.11.2.1.10			Objects required for MPLS VPN notifications.
mplsL3VpnCompliances	1.3.6.1.2.1.10.166.11.2.2
mplsL3VpnModuleFullCompliance	1.3.6.1.2.1.10.166.11.2.2.1			Compliance statement for agents that provide full support for the MPLS-L3VPN-STD-MIB
mplsL3VpnModuleReadOnlyCompliance	1.3.6.1.2.1.10.166.11.2.2.2			Compliance requirement for implementations that only provide read-only support for MPLS-L3VPN-STD-MIB. Such devices can then be monitored but cannot be configured using this MIB module.

Bits (1)
BIT mplsL3VpnIfVpnRouteDistProtocol	1.3.6.1.2.1.10.166.11.1.2.1.1.3	Bits	read-create	Denotes the route distribution protocol across the PE-CE link. Note that more than one routing protocol may be enabled at the same time; thus, this object is specified as a bitmask. For example, static(5) and ospf(2) are a typical configuration.
Counter32 (4)
C32 mplsL3VpnVrfPerfRoutesAdded	1.3.6.1.2.1.10.166.11.1.3.1.1.1	Counter32	read-only	Indicates the number of routes added to this VPN/VRF since the last discontinuity. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfPerfDiscTime.
C32 mplsL3VpnVrfPerfRoutesDeleted	1.3.6.1.2.1.10.166.11.1.3.1.1.2	Counter32	read-only	Indicates the number of routes removed from this VPN/VRF. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfPerfDiscTime.
C32 mplsL3VpnVrfPerfRoutesDropped	1.3.6.1.2.1.10.166.11.1.3.1.1.4	Counter32	read-only	This counter should be incremented when the number of routes contained by the specified VRF exceeds or attempts to exceed the maximum allowed value as indicated by mplsL3VpnVrfMaxRouteThreshold. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfPerfDiscTime.
C32 mplsL3VpnVrfSecIllegalLblVltns	1.3.6.1.2.1.10.166.11.1.2.6.1.1	Counter32	read-only	Indicates the number of illegally received labels on this VPN/VRF. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of mplsL3VpnVrfSecDiscontinuityTime.
Gauge32 (5)
G32 mplsL3VpnActiveVrfs	1.3.6.1.2.1.10.166.11.1.1.2	Gauge32	read-only	The number of VRFs that are active on this node. That is, those VRFs whose corresponding mplsL3VpnVrfOperStatus object value is equal to operational (1).
G32 mplsL3VpnConnectedInterfaces	1.3.6.1.2.1.10.166.11.1.1.3	Gauge32	read-only	Total number of interfaces connected to a VRF.
G32 mplsL3VpnVrfActiveInterfaces	1.3.6.1.2.1.10.166.11.1.2.2.1.7	Gauge32	read-only	Total number of interfaces connected to this VRF with ifOperStatus = up(1). This value should increase when an interface is associated with the corresponding VRF and its corresponding ifOperStatus is equal to up(1). If an interface is associated whose ifOperStatus is not up(1), then the value is not incremented until such time as it transitions to this state. This value should be decremented when an interface is disassociated with a VRF or the corresponding ifOperStatus transitions out of the up(1) state to any other state.
G32 mplsL3VpnVrfPerfCurrNumRoutes	1.3.6.1.2.1.10.166.11.1.3.1.1.3	Gauge32	read-only	Indicates the number of routes currently used by this VRF.
G32 mplsL3VpnVrfRteInetCidrAge	1.3.6.1.2.1.10.166.11.1.4.1.1.10	Gauge32	read-only	The number of seconds since this route was last updated or otherwise determined to be correct. Note that no semantics of 'too old' can be implied except through knowledge of the routing protocol by which the route was learned.
IANAipRouteProtocol (1)
IAN mplsL3VpnVrfRteInetCidrProto	1.3.6.1.2.1.10.166.11.1.4.1.1.9	IANAipRouteProtocol	read-only	The routing mechanism via which this route was learned. Inclusion of values for gateway routing protocols is not intended to imply that hosts should support those protocols.
InetAddress (2)
IP mplsL3VpnVrfRteInetCidrDest	1.3.6.1.2.1.10.166.11.1.4.1.1.2	InetAddress	not-accessible	The destination IP address of this route. The type of this address is determined by the value of the mplsL3VpnVrfRteInetCidrDestType object. The values for the index objects mplsL3VpnVrfRteInetCidrDest and mplsL3VpnVrfRteInetCidrPfxLen must be consistent. When the value of mplsL3VpnVrfRteInetCidrDest is x, then the bitwise logical-AND of x with the value of the mask formed from the corresponding index object mplsL3VpnVrfRteInetCidrPfxLen MUST be equal to x. If not, then the index pair is not consistent and an inconsistentName error must be returned on SET or CREATE requests.
IP mplsL3VpnVrfRteInetCidrNextHop	1.3.6.1.2.1.10.166.11.1.4.1.1.6	InetAddress	not-accessible	On remote routes, the address of the next system en route. For non-remote routes, a zero-length string. The type of this address is determined by the value of the mplsL3VpnVrfRteInetCidrNHopType object.
InetAddressPrefixLength (1)
ADR mplsL3VpnVrfRteInetCidrPfxLen	1.3.6.1.2.1.10.166.11.1.4.1.1.3	InetAddressPrefixLength	not-accessible	Indicates the number of leading one bits that form the mask to be logical-ANDed with the destination address before being compared to the value in the mplsL3VpnVrfRteInetCidrDest field. The values for the index objects mplsL3VpnVrfRteInetCidrDest and mplsL3VpnVrfRteInetCidrPfxLen must be consistent. When the value of mplsL3VpnVrfRteInetCidrDest is x, then the bitwise logical-AND of x with the value of the mask formed from the corresponding index object mplsL3VpnVrfRteInetCidrPfxLen MUST be equal to x. If not, then the index pair is not consistent and an inconsistentName error must be returned on SET or CREATE requests.
InetAddressType (2)
IPt mplsL3VpnVrfRteInetCidrDestType	1.3.6.1.2.1.10.166.11.1.4.1.1.1	InetAddressType	not-accessible	The type of the mplsL3VpnVrfRteInetCidrDest address, as defined in the InetAddress MIB. Only those address types that may appear in an actual routing table are allowed as values of this object.
IPt mplsL3VpnVrfRteInetCidrNHopType	1.3.6.1.2.1.10.166.11.1.4.1.1.5	InetAddressType	not-accessible	The type of the mplsL3VpnVrfRteInetCidrNextHop address, as defined in the InetAddress MIB. Value should be set to unknown(0) for non-remote routes. Only those address types that may appear in an actual routing table are allowed as values of this object.
InetAutonomousSystemNumber (1)
INE mplsL3VpnVrfRteInetCidrNextHopAS	1.3.6.1.2.1.10.166.11.1.4.1.1.11	InetAutonomousSystemNumber	read-create	The Autonomous System Number of the next hop. The semantics of this object are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. When this object is unknown or not relevant, its value should be set to zero.
INTEGER (4)
INT mplsL3VpnIfVpnClassification	1.3.6.1.2.1.10.166.11.1.2.1.1.2	INTEGER	read-create	Denotes whether this link participates in a carrier's carrier, enterprise, or inter-provider scenario.
INT mplsL3VpnVrfConfAdminStatus	1.3.6.1.2.1.10.166.11.1.2.2.1.14	INTEGER	read-create	Indicates the desired operational status of this VRF.
INT mplsL3VpnVrfOperStatus	1.3.6.1.2.1.10.166.11.1.2.2.1.6	INTEGER	read-only	Denotes whether or not a VRF is operational. A VRF is up(1) when there is at least one interface associated with the VRF whose ifOperStatus is up(1). A VRF is down(2) when: a. There does not exist at least one interface whose ifOperStatus is up(1). b. There are no interfaces associated with the VRF.
INT mplsL3VpnVrfRteInetCidrType	1.3.6.1.2.1.10.166.11.1.4.1.1.8	INTEGER	read-create	The type of route. Note that local(3) refers to a route for which the next hop is the final destination; remote(4) refers to a route for which the next hop is not the final destination. Routes that do not result in traffic forwarding or rejection should not be displayed even if the implementation keeps them stored internally. reject(2) refers to a route that, if matched, discards the message as unreachable and returns a notification (e.g., ICMP error) to the message sender. This is used in some protocols as a means of correctly aggregating routes. blackhole(5) refers to a route that, if matched, discards the message silently.
Integer32 (5)
I32 mplsL3VpnVrfRteInetCidrMetric1	1.3.6.1.2.1.10.166.11.1.4.1.1.12	Integer32	read-create	The primary routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric2	1.3.6.1.2.1.10.166.11.1.4.1.1.13	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric3	1.3.6.1.2.1.10.166.11.1.4.1.1.14	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric4	1.3.6.1.2.1.10.166.11.1.4.1.1.15	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
I32 mplsL3VpnVrfRteInetCidrMetric5	1.3.6.1.2.1.10.166.11.1.4.1.1.16	Integer32	read-create	An alternate routing metric for this route. The semantics of this metric are determined by the routing protocol specified in the route's mplsL3VpnVrfRteInetCidrProto value. If this metric is not used, its value should be set to -1.
InterfaceIndex (1)
NUM mplsL3VpnIfConfIndex	1.3.6.1.2.1.10.166.11.1.2.1.1.1	InterfaceIndex	not-accessible	This is a unique index for an entry in the mplsL3VpnIfConfTable. A non-zero index for an entry indicates the ifIndex for the corresponding interface entry in the MPLS-VPN-layer in the ifTable. Note that this table does not necessarily correspond one-to-one with all entries in the Interface MIB having an ifType of MPLS-layer; rather, only those that are enabled for MPLS L3VPN functionality.
InterfaceIndexOrZero (1)
NUM mplsL3VpnVrfRteInetCidrIfIndex	1.3.6.1.2.1.10.166.11.1.4.1.1.7	InterfaceIndexOrZero	read-create	The ifIndex value that identifies the local interface through which the next hop of this route should be reached. A value of 0 is valid and represents the scenario where no interface is specified.
MplsIndexType (1)
MPL mplsL3VpnVrfRteXCPointer	1.3.6.1.2.1.10.166.11.1.4.1.1.17	MplsIndexType	read-create	Index into mplsXCTable that identifies which cross- connect entry is associated with this VRF route entry by containing the mplsXCIndex of that cross-connect entry. The string containing the single-octet 0x00 indicates that a label stack is not associated with this route entry. This can be the case because the label bindings have not yet been established, or because some change in the agent has removed them. When the label stack associated with this VRF route is created, it MUST establish the associated cross-connect entry in the mplsXCTable and then set that index to the value of this object. Changes to the cross-connect object in the mplsXCTable MUST automatically be reflected in the value of this object. If this object represents a static routing entry, then the manager must ensure that this entry is maintained consistently in the corresponding mplsXCTable as well.
MplsL3VpnName (1)
MPL mplsL3VpnVrfName	1.3.6.1.2.1.10.166.11.1.2.2.1.1	MplsL3VpnName	not-accessible	The human-readable name of this VPN. This MAY be equivalent to the [RFC2685] VPN-ID, but may also vary. If it is set to the VPN ID, it MUST be equivalent to the value of mplsL3VpnVrfVpnId. It is strongly recommended that all sites supporting VRFs that are part of the same VPN use the same naming convention for VRFs as well as the same VPN ID.
MplsL3VpnRouteDistinguisher (2)
MPL mplsL3VpnVrfRD	1.3.6.1.2.1.10.166.11.1.2.2.1.4	MplsL3VpnRouteDistinguisher	read-create	The route distinguisher for this VRF.
MPL mplsL3VpnVrfRT	1.3.6.1.2.1.10.166.11.1.2.3.1.4	MplsL3VpnRouteDistinguisher	read-create	The route target distribution policy.
MplsL3VpnRtType (1)
MPL mplsL3VpnVrfRTType	1.3.6.1.2.1.10.166.11.1.2.3.1.3	MplsL3VpnRtType	not-accessible	The route target distribution type.
OBJECT IDENTIFIER (1)
OID mplsL3VpnVrfRteInetCidrPolicy	1.3.6.1.2.1.10.166.11.1.4.1.1.4	OBJECT IDENTIFIER	not-accessible	This object is an opaque object without any defined semantics. Its purpose is to serve as an additional index that may delineate between multiple entries to the same destination. The value { 0 0 } shall be used as the default value for this object.
RowStatus (4)
ROW mplsL3VpnIfConfRowStatus	1.3.6.1.2.1.10.166.11.1.2.1.1.5	RowStatus	read-create	This variable is used to create, modify, and/or delete a row in this table. Rows in this table signify that the specified interface is associated with this VRF. If the row creation operation succeeds, the interface will have been associated with the specified VRF, otherwise the agent MUST not allow the association. If the agent only allows read-only operations on this table, it MUST create entries in this table as they are created on the device. When a row in this table is in active(1) state, no objects in that row can be modified except mplsL3VpnIfConfStorageType and mplsL3VpnIfConfRowStatus.
ROW mplsL3VpnVrfConfRowStatus	1.3.6.1.2.1.10.166.11.1.2.2.1.13	RowStatus	read-create	This variable is used to create, modify, and/or delete a row in this table. When a row in this table is in active(1) state, no objects in that row can be modified except mplsL3VpnVrfConfAdminStatus, mplsL3VpnVrfConfRowStatus, and mplsL3VpnVrfConfStorageType.
ROW mplsL3VpnVrfRteInetCidrStatus	1.3.6.1.2.1.10.166.11.1.4.1.1.18	RowStatus	read-create	The row status variable, used according to row installation and removal conventions. A row entry cannot be modified when the status is marked as active(1).
ROW mplsL3VpnVrfRTRowStatus	1.3.6.1.2.1.10.166.11.1.2.3.1.6	RowStatus	read-create	This variable is used to create, modify, and/or delete a row in this table. When a row in this table is in active(1) state, no objects in that row can be modified except mplsL3VpnVrfRTRowStatus.
SnmpAdminString (2)
STR mplsL3VpnVrfDescription	1.3.6.1.2.1.10.166.11.1.2.2.1.3	SnmpAdminString	read-create	The human-readable description of this VRF.
STR mplsL3VpnVrfRTDescr	1.3.6.1.2.1.10.166.11.1.2.3.1.5	SnmpAdminString	read-create	Description of the route target.
StorageType (3)
STO mplsL3VpnIfConfStorageType	1.3.6.1.2.1.10.166.11.1.2.1.1.4	StorageType	read-create	The storage type for this VPN If entry. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
STO mplsL3VpnVrfConfStorageType	1.3.6.1.2.1.10.166.11.1.2.2.1.15	StorageType	read-create	The storage type for this VPN VRF entry. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
STO mplsL3VpnVrfRTStorageType	1.3.6.1.2.1.10.166.11.1.2.3.1.7	StorageType	read-create	The storage type for this VPN route target (RT) entry. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
TimeStamp (4)
TIM mplsL3VpnVrfConfLastChanged	1.3.6.1.2.1.10.166.11.1.2.2.1.12	TimeStamp	read-only	The value of sysUpTime at the time of the last change of this table entry, which includes changes of VRF parameters defined in this table or addition or deletion of interfaces associated with this VRF.
TIM mplsL3VpnVrfCreationTime	1.3.6.1.2.1.10.166.11.1.2.2.1.5	TimeStamp	read-only	The time at which this VRF entry was created.
TIM mplsL3VpnVrfPerfDiscTime	1.3.6.1.2.1.10.166.11.1.3.1.1.5	TimeStamp	read-only	The value of sysUpTime on the most recent occasion at which any one or more of this entry's counters suffered a discontinuity. If no such discontinuities have occurred since the last re-initialization of the local management subsystem, then this object contains a zero value.
TIM mplsL3VpnVrfSecDiscontinuityTime	1.3.6.1.2.1.10.166.11.1.2.6.1.2	TimeStamp	read-only	The value of sysUpTime on the most recent occasion at which any one or more of this entry's counters suffered a discontinuity. If no such discontinuities have occurred since the last re-initialization of the local management subsystem, then this object contains a zero value.
TruthValue (1)
T/F mplsL3VpnNotificationEnable	1.3.6.1.2.1.10.166.11.1.1.4	TruthValue	read-write	If this object is true, then it enables the generation of all notifications defined in this MIB. This object's value should be preserved across agent reboots.
Unsigned32 (9)
U32 mplsL3VpnConfiguredVrfs	1.3.6.1.2.1.10.166.11.1.1.1	Unsigned32	read-only	The number of VRFs that are configured on this node.
U32 mplsL3VpnIllLblRcvThrsh	1.3.6.1.2.1.10.166.11.1.1.7	Unsigned32	read-write	The number of illegally received labels above which the mplsNumVrfSecIllglLblThrshExcd notification is issued. The persistence of this value mimics that of the device's configuration.
U32 mplsL3VpnVrfAssociatedInterfaces	1.3.6.1.2.1.10.166.11.1.2.2.1.8	Unsigned32	read-only	Total number of interfaces connected to this VRF (independent of ifOperStatus type).
U32 mplsL3VpnVrfConfHighRteThresh	1.3.6.1.2.1.10.166.11.1.2.2.1.10	Unsigned32	read-create	Denotes high-level water marker for the number of routes that this VRF may hold.
U32 mplsL3VpnVrfConfMaxPossRts	1.3.6.1.2.1.10.166.11.1.1.5	Unsigned32	read-only	Denotes maximum number of routes that the device will allow all VRFs jointly to hold. If this value is set to 0, this indicates that the device is unable to determine the absolute maximum. In this case, the configured maximum MAY not actually be allowed by the device.
U32 mplsL3VpnVrfConfMaxRoutes	1.3.6.1.2.1.10.166.11.1.2.2.1.11	Unsigned32	read-create	Denotes maximum number of routes that this VRF is configured to hold. This value MUST be less than or equal to mplsL3VpnVrfConfMaxPossRts unless it is set to 0.
U32 mplsL3VpnVrfConfMidRteThresh	1.3.6.1.2.1.10.166.11.1.2.2.1.9	Unsigned32	read-create	Denotes mid-level water marker for the number of routes that this VRF may hold.
U32 mplsL3VpnVrfConfRteMxThrshTime	1.3.6.1.2.1.10.166.11.1.1.6	Unsigned32	read-only	Denotes the interval in seconds, at which the route max threshold notification may be reissued after the maximum value has been exceeded (or has been reached if mplsL3VpnVrfConfMaxRoutes and mplsL3VpnVrfConfHighRteThresh are equal) and the initial notification has been issued. This value is intended to prevent continuous generation of notifications by an agent in the event that routes are continually added to a VRF after it has reached its maximum value. If this value is set to 0, the agent should only issue a single notification at the time that the maximum threshold has been reached, and should not issue any more notifications until the value of routes has fallen below the configured threshold value. This is the recommended default behavior.
U32 mplsL3VpnVrfRTIndex	1.3.6.1.2.1.10.166.11.1.2.3.1.2	Unsigned32	not-accessible	Auxiliary index for route targets configured for a particular VRF.
VPNIdOrZero (1)
VPN mplsL3VpnVrfVpnId	1.3.6.1.2.1.10.166.11.1.2.2.1.2	VPNIdOrZero	read-create	The VPN ID as specified in [RFC2685]. If a VPN ID has not been specified for this VRF, then this variable SHOULD be set to a zero-length OCTET STRING.
No type (39)
mplsL3VpnCompliances	1.3.6.1.2.1.10.166.11.2.2
mplsL3VpnConf	1.3.6.1.2.1.10.166.11.1.2
mplsL3VpnConformance	1.3.6.1.2.1.10.166.11.2
mplsL3VpnGroups	1.3.6.1.2.1.10.166.11.2.1
mplsL3VpnIfConfEntry	1.3.6.1.2.1.10.166.11.1.2.1.1		not-accessible	An entry in this table is created by an LSR for every interface capable of supporting MPLS L3VPN. Each entry in this table is meant to correspond to an entry in the Interfaces Table.
mplsL3VpnIfConfTable	1.3.6.1.2.1.10.166.11.1.2.1		not-accessible	This table specifies per-interface MPLS capability and associated information.
mplsL3VpnIfGroup	1.3.6.1.2.1.10.166.11.2.1.3			Collection of objects needed for MPLS VPN interface management.
mplsL3VpnMIB	1.3.6.1.2.1.10.166.11			This MIB contains managed object definitions for the Layer-3 Multiprotocol Label Switching Virtual Private Networks. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC4382; see the RFC itself for full legal notices.
mplsL3VpnModuleFullCompliance	1.3.6.1.2.1.10.166.11.2.2.1			Compliance statement for agents that provide full support for the MPLS-L3VPN-STD-MIB
mplsL3VpnModuleReadOnlyCompliance	1.3.6.1.2.1.10.166.11.2.2.2			Compliance requirement for implementations that only provide read-only support for MPLS-L3VPN-STD-MIB. Such devices can then be monitored but cannot be configured using this MIB module.
mplsL3VpnNotificationGroup	1.3.6.1.2.1.10.166.11.2.1.10			Objects required for MPLS VPN notifications.
mplsL3VpnNotifications	1.3.6.1.2.1.10.166.11.0
NTF mplsL3VpnNumVrfRouteMaxThreshCleared	1.3.6.1.2.1.10.166.11.0.6			This notification is generated only after the number of routes contained by the specified VRF exceeds or attempts to exceed the maximum allowed value as indicated by mplsVrfMaxRouteThreshold, and then falls below this value. The emission of this notification informs the operator that the error condition has been cleared without the operator having to query the device. Note that mplsL3VpnVrfConfRteMxThrshTime denotes the interval at which the mplsNumVrfRouteMaxThreshExceeded notification will be reissued after the maximum value has been exceeded (or reached if mplsL3VpnVrfConfMaxRoutes and mplsL3VpnVrfConfHighRteThresh are equal) and the initial notification has been issued. Therefore, the generation of this notification should also be emitted with this same frequency (assuming that the error condition is cleared). Specifically, if the error condition is reached and cleared several times during the period of time specified in mplsL3VpnVrfConfRteMxThrshTime, only a single notification will be issued to indicate the first instance of the error condition as well as the first time the error condition is cleared. This behavior is intended to prevent continuous generation of notifications by an agent in the event that routes are continually added and removed to/from a VRF after it has reached its maximum value. The default value is 0. If this value is set to 0, the agent should issue a notification whenever the maximum threshold has been cleared.
NTF mplsL3VpnNumVrfSecIllglLblThrshExcd	1.3.6.1.2.1.10.166.11.0.5			This notification is generated when the number of illegal label violations on a VRF as indicated by mplsL3VpnVrfSecIllegalLblVltns has exceeded mplsL3VpnIllLblRcvThrsh. The threshold is not included in the varbind here because the value of mplsL3VpnVrfSecIllegalLblVltns should be one greater than the threshold at the time this notification is issued.
mplsL3VpnObjects	1.3.6.1.2.1.10.166.11.1
mplsL3VpnPerf	1.3.6.1.2.1.10.166.11.1.3
mplsL3VpnPerfGroup	1.3.6.1.2.1.10.166.11.2.1.4			Collection of objects needed for MPLS VPN performance information.
mplsL3VpnPerfRouteGroup	1.3.6.1.2.1.10.166.11.2.1.5			Collection of objects needed to track MPLS VPN routing table dropped routes.
mplsL3VpnRoute	1.3.6.1.2.1.10.166.11.1.4
mplsL3VpnScalarGroup	1.3.6.1.2.1.10.166.11.2.1.1			Collection of scalar objects required for MPLS VPN management.
mplsL3VpnScalars	1.3.6.1.2.1.10.166.11.1.1
mplsL3VpnSecGroup	1.3.6.1.2.1.10.166.11.2.1.7			Collection of objects needed for MPLS VPN security-related information.
NTF mplsL3VpnVrfDown	1.3.6.1.2.1.10.166.11.0.2			This notification is generated when: a. One interface is associated with this VRF, and the ifOperStatus of this interface changes from up(1) to down(2). b. Multiple interfaces are associated with this VRF, and the ifOperStatus of all except one of these interfaces is equal to up(1), and the ifOperStatus of that interface changes from up(1) to down(2). c. The last interface with ifOperStatus equal to up(1) is disassociated from a VRF.
mplsL3VpnVrfEntry	1.3.6.1.2.1.10.166.11.1.2.2.1		not-accessible	An entry in this table is created by an LSR for every VRF capable of supporting MPLS L3VPN. The indexing provides an ordering of VRFs per-VPN interface.
mplsL3VpnVrfGroup	1.3.6.1.2.1.10.166.11.2.1.2			Collection of objects needed for MPLS VPN VRF management.
NTF mplsL3VpnVrfNumVrfRouteMaxThreshExceeded	1.3.6.1.2.1.10.166.11.0.4			This notification is generated when the number of routes contained by the specified VRF exceeds or attempts to exceed the maximum allowed value as indicated by mplsL3VpnVrfMaxRouteThreshold. In cases where mplsL3VpnVrfConfHighRteThresh is set to the same value as mplsL3VpnVrfConfMaxRoutes, mplsL3VpnVrfConfHighRteThresh need not be exceeded; rather, just reached for this notification to be issued. Note that mplsL3VpnVrfConfRteMxThrshTime denotes the interval at which the this notification will be reissued after the maximum value has been exceeded (or reached if mplsL3VpnVrfConfMaxRoutes and mplsL3VpnVrfConfHighRteThresh are equal) and the initial notification has been issued. This value is intended to prevent continuous generation of notifications by an agent in the event that routes are continually added to a VRF after it has reached its maximum value. The default value is 0 minutes. If this value is set to 0, the agent should only issue a single notification at the time that the maximum threshold has been reached, and should not issue any more notifications until the value of routes has fallen below the configured threshold value.
mplsL3VpnVrfPerfEntry	1.3.6.1.2.1.10.166.11.1.3.1.1		not-accessible	An entry in this table is created by an LSR for every VRF capable of supporting MPLS L3VPN.
mplsL3VpnVrfPerfTable	1.3.6.1.2.1.10.166.11.1.3.1		not-accessible	This table specifies per MPLS L3VPN VRF Table performance information.
NTF mplsL3VpnVrfRouteMidThreshExceeded	1.3.6.1.2.1.10.166.11.0.3			This notification is generated when the number of routes contained by the specified VRF exceeds the value indicated by mplsL3VpnVrfMidRouteThreshold. A single notification MUST be generated when this threshold is exceeded, and no other notifications of this type should be issued until the value of mplsL3VpnVrfPerfCurrNumRoutes has fallen below that of mplsL3VpnVrfConfMidRteThresh.
mplsL3VpnVrfRteEntry	1.3.6.1.2.1.10.166.11.1.4.1.1		not-accessible	An entry in this table is created by an LSR for every route present configured (either dynamically or statically) within the context of a specific VRF capable of supporting MPLS/BGP VPN. The indexing provides an ordering of VRFs per-VPN interface. Implementers need to be aware that there are quite a few index objects that together can exceed the size allowed for an Object Identifier (OID). So implementers must make sure that OIDs of column instances in this table will have no more than 128 sub-identifiers, otherwise they cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3.
mplsL3VpnVrfRteGroup	1.3.6.1.2.1.10.166.11.2.1.8			Objects required for VRF route table management.
mplsL3VpnVrfRTEntry	1.3.6.1.2.1.10.166.11.1.2.3.1		not-accessible	An entry in this table is created by an LSR for each route target configured for a VRF supporting a MPLS L3VPN instance. The indexing provides an ordering per-VRF instance. See [RFC4364] for a complete definition of a route target.
mplsL3VpnVrfRteTable	1.3.6.1.2.1.10.166.11.1.4.1		not-accessible	This table specifies per-interface MPLS L3VPN VRF Table routing information. Entries in this table define VRF routing entries associated with the specified MPLS/VPN interfaces. Note that this table contains both BGP and Interior Gateway Protocol IGP routes, as both may appear in the same VRF.
mplsL3VpnVrfRTGroup	1.3.6.1.2.1.10.166.11.2.1.9			Objects required for VRF route target management.
mplsL3VpnVrfRTTable	1.3.6.1.2.1.10.166.11.1.2.3		not-accessible	This table specifies per-VRF route target association. Each entry identifies a connectivity policy supported as part of a VPN.
mplsL3VpnVrfSecEntry	1.3.6.1.2.1.10.166.11.1.2.6.1		not-accessible	An entry in this table is created by an LSR for every VRF capable of supporting MPLS L3VPN. Each entry in this table is used to indicate security-related information for each VRF entry.
mplsL3VpnVrfSecTable	1.3.6.1.2.1.10.166.11.1.2.6		not-accessible	This table specifies per MPLS L3VPN VRF Table security-related counters.
mplsL3VpnVrfTable	1.3.6.1.2.1.10.166.11.1.2.2		not-accessible	This table specifies per-interface MPLS L3VPN VRF Table capability and associated information. Entries in this table define VRF routing instances associated with MPLS/VPN interfaces. Note that multiple interfaces can belong to the same VRF instance. The collection of all VRF instances comprises an actual VPN.
NTF mplsL3VpnVrfUp	1.3.6.1.2.1.10.166.11.0.1			This notification is generated when: a. No interface is associated with this VRF, and the first (and only first) interface associated with it has its ifOperStatus change to up(1). b. One interface is associated with this VRF, and the ifOperStatus of this interface changes to up(1). c. Multiple interfaces are associated with this VRF, and the ifOperStatus of all interfaces is down(2), and the first of those interfaces has its ifOperStatus change to up(1).

RFC description

Standard MIB for MPLS Layer 3 VPN management; defines objects for VPN configuration, status, and performance monitoring.

Start monitoring Vendor-neutral IETF standard (MPLS/BGP L3VPN provider-edge router) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download MPLS-L3VPN-STD-MIB

This MIB depends on

Related MIBs

What Is MPLS-L3VPN-STD-MIB?

What Can Be Monitored

Supported Devices

Monitoring Examples

RFC description