PRIVATE-VLAN-MIB

All MIBs › PRIVATE-VLAN-MIB

Organization: D-Link Corp.

Last Updated: 2008-08-11

Category: Security, VLAN Management

Description: Manages D-Link private VLAN (PVLAN) port isolation, community VLAN, and promiscuous port configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is PRIVATE-VLAN-MIB?

PRIVATE-VLAN-MIB is a D-Link enterprise MIB for managing Private VLAN (PVLAN) features on D-Link Ethernet switches, a Layer 2 technology area used to isolate ports within a shared VLAN. It exposes configuration data covering port isolation settings, community VLAN groupings, and promiscuous port designation used to control which ports may communicate with each other. Its role is primarily configuration management rather than hardware health monitoring -- an admin uses it to verify and audit which switch ports are isolated, which belong to which community group, and which are promiscuous uplinks, catching misconfigurations that could allow unintended host-to-host traffic. The module explicitly notes it complements standard VLAN MIBs (referencing RFC 2674/4363-style VLAN parameter definitions) for the broader VLAN configuration picture. It is deployed on D-Link managed switches in multi-tenant or service-provider access environments where port isolation is required for security. Engineers can download the PRIVATE-VLAN-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in PRIVATE-VLAN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed Ethernet switches

Monitoring Examples

An administrator would enumerate the per-port private VLAN configuration to confirm which ports are set as isolated, community, or promiscuous, cross-referencing D-Link's standard VLAN MIB (per the module's note about referencing rfc2674q/rfc4363q) for the parent VLAN ID. Detecting that a port expected to be isolated is instead reachable from another isolated port would indicate a misapplied PVLAN policy. Community VLAN membership tables would be checked to ensure hosts in the same community can still reach each other while remaining isolated from other communities.

What Can Be Monitored

port isolation status
community VLAN membership
promiscuous port designation
private VLAN port configuration

Imported Objects

From DLINK-ID-REC-MIB

dlink-common-mgmt

From Q-BRIDGE-MIB

PortList
VlanId
VlanIdOrNone

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
swPrivateVLANMIB	1.3.6.1.4.1.171.12.69			The Private VLAN module MIB for the proprietary enterprise. Other related VLAN parameters will reference to rfc2674q(rfc4363q).mib.
swPrivateVlanCtrl	1.3.6.1.4.1.171.12.69.1
swPrivateVlanInfo	1.3.6.1.4.1.171.12.69.2
swPrivateVlanMgmt	1.3.6.1.4.1.171.12.69.3
swPrivateVlanTable	1.3.6.1.4.1.171.12.69.3.1		not-accessible	A table containing current private VLAN information.
swPrivateVlanEntry	1.3.6.1.4.1.171.12.69.3.1.1		not-accessible	The management information of a private VLAN domain.
VLA swPrivateVlanId	1.3.6.1.4.1.171.12.69.3.1.1.1	VlanId	read-only	The VLAN-ID referring to the private VLAN of the private VLAN domain. A private VLAN is the unique and common VLAN identifier of the whole private VLAN domain. Every port in a private VLAN is a member of the private VLAN. The IP subnet of the private VLAN shall be associated with the private VLAN. Only the private VLAN is visible outside of the domain.
STR swPrivateVlanName	1.3.6.1.4.1.171.12.69.3.1.1.2	DisplayString	read-create	An administratively assigned string which may be used to identify the private VLAN.
POR swPrivateVlanPromiscuousPorts	1.3.6.1.4.1.171.12.69.3.1.1.3	PortList	read-write	The promiscuous port has the ability to communicate with any port within the private VLAN. A promiscuous port is an untagged member of the private VLAN.
POR swPrivateVlanTrunkPorts	1.3.6.1.4.1.171.12.69.3.1.1.4	PortList	read-write	The trunk port, also known as the Inter-switch link, has the ability to communicate with any port within the private VLAN. A trunk port is a tagged member of the private VLAN.
ROW swPrivateVlanRowStatus	1.3.6.1.4.1.171.12.69.3.1.1.5	RowStatus	read-create	This object indicates the status of this entry.
swSecondaryVlanTable	1.3.6.1.4.1.171.12.69.3.2		not-accessible	A table containing current secondary VLAN information.
swSecondaryVlanEntry	1.3.6.1.4.1.171.12.69.3.2.1		not-accessible	The management information of a secondary VLAN of a private VLAN domain.
VLA swSecondaryVlanId	1.3.6.1.4.1.171.12.69.3.2.1.1	VlanId	read-only	The VLAN-ID referring to this SwSecondaryVLANEntry.
SEC swSecondaryVlanType	1.3.6.1.4.1.171.12.69.3.2.1.2	SecondaryVlanType	read-create	An isolated VLAN is a secondary VLAN whose distinctive characteristic is that all hosts connected to its ports are isolated at Layer 2. A private VLAN has only one isolated VLAN. If the swPrivateVlanIsolatedVlanIndex has a value of zero, this indicates there are no associated isolated VLANs in the private VLAN domain. Otherwise, it is the associated isolated VLAN ID. A community VLAN is a secondary VLAN that is associated with a group of ports that connects to a certain 'community' of end devices with mutual trust relationships. There can be multiple distinct community VLANs in a private VLAN domain.
POR swSecondaryVlanPorts	1.3.6.1.4.1.171.12.69.3.2.1.3	PortList	read-write	If swSecondaryVlanType is isolated, the ports in the isolated VLAN of the private VLAN have complete Layer 2 separation from other ports within the same private VLAN, except for the promiscuous and trunk ports. If swSecondaryVlanType is community, the ports can communicate with other ports in the same Secondary VLAN and with promiscuous ports.
ROW swSecondaryVlanRowStatus	1.3.6.1.4.1.171.12.69.3.2.1.4	RowStatus	read-create	This object indicates the status of this entry.

RFC description

Manages Private VLAN configuration on D-Link switches. Controls isolated and community VLAN parameters for traffic segregation.

Start monitoring D-Link managed Ethernet switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download PRIVATE-VLAN-MIB

What Is PRIVATE-VLAN-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description