Q-BRIDGE-MIB

MIB Reference — IPNetwork Monitor

All MIBsQ-BRIDGE-MIB

Organization: IETF Bridge MIB Working Group

Last Updated: 2006-01-09

Category: VLAN and Bridging

Description:

Defines managed objects for managing IEEE 802.1Q VLAN-aware bridges, including VLAN configuration, port VLAN membership, and VLAN forwarding database entries.

Imported Objects

From BRIDGE-MIB

dot1dBasePortOBJECT-TYPE
dot1dBasePortEntryOBJECT-TYPE
dot1dBridgeMODULE-IDENTITY

From P-BRIDGE-MIB

EnabledStatus

From RMON2-MIB

TimeFilter

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Integer32
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION
TruthValue

What Is Q-BRIDGE-MIB?

Q-BRIDGE-MIB is an IETF standards-track module (RFC 4363) that extends the base BRIDGE-MIB to manage IEEE 802.1Q VLAN-aware Ethernet switches. It exposes VLAN configuration tables, per-port VLAN membership and tagging/untagging behavior, and the VLAN-aware MAC forwarding database (FDB) that maps learned addresses to ports within each VLAN. Because it reports live FDB entries, port VLAN state, and VLAN-related counters, it is well suited to monitoring the hardware/software status of a switch's Layer 2 forwarding plane in real time. It depends on BRIDGE-MIB for base bridge/port definitions and is commonly deployed alongside P-BRIDGE-MIB and RMON2-MIB on the same switch, and any network monitoring tool that implements the q-bridge-mib standard can walk these tables directly for vendor-neutral VLAN visibility.

IPNetwork Monitor allows you to monitor SNMP objects defined in Q-BRIDGE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

What Can Be Monitored

  • VLAN forwarding database (FDB) entries / learned MAC addresses per VLAN
  • Port VLAN membership and native VLAN (PVID)
  • Port frame acceptance policy (tagged-only, admit-all, GVRP-registered)
  • Per-VLAN, per-port ingress/egress frame counters
  • GVRP/GARP VLAN registration status
  • Number of VLANs configured vs. maximum supported

Supported Devices

  • IEEE 802.1Q VLAN-aware Ethernet switches and bridges (vendor-neutral, standards-based MIB, not tied to a specific manufacturer)

Monitoring Examples

For example, a network admin can poll dot1qVlanFdbId and the associated FDB table to confirm a device is correctly learning MAC addresses on a given VLAN, or check port membership objects to catch a misconfigured trunk that is dropping traffic. Specifically, the dot1qTpFdbTable (indexed by dot1qFdbId and dot1qTpFdbAddress) reports which dot1qTpFdbPort a given MAC was learned on and whether its status is learned, self, mgmt, or other, letting a monitoring system flag stale or unexpected entries. The dot1qPortVlanTable's dot1qPvid and dot1qPortAcceptableFrameTypes objects reveal each port's native VLAN and tagging policy, so a sudden PVID change can be alerted on as a potential misconfiguration or intrusion. Per-VLAN, per-port counters such as dot1qTpVlanPortInFrames and dot1qTpVlanPortOutFrames also let a monitoring tool correlate traffic anomalies with a specific VLAN/port pair instead of the whole switch.

OIDs
OID symbolicOID numericTypeAccessDescription
qBridgeMIB1.3.6.1.2.1.17.7The VLAN Bridge MIB module for managing Virtual Bridged Local Area Networks, as defined by IEEE 802.1Q-2003, including Restricted Vlan Registration defined by IEEE 802.1u-2001 and Vlan Classification defined by IEEE 802.1v-2001. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC 4363; See the RFC itself for full legal notices.
qBridgeMIBObjects1.3.6.1.2.1.17.7.1
dot1qBase1.3.6.1.2.1.17.7.1.1
INT dot1qVlanVersionNumber1.3.6.1.2.1.17.7.1.1.1INTEGERread-onlyThe version number of IEEE 802.1Q that this device supports.
VLA dot1qMaxVlanId1.3.6.1.2.1.17.7.1.1.2VlanIdread-onlyThe maximum IEEE 802.1Q VLAN-ID that this device supports.
U32 dot1qMaxSupportedVlans1.3.6.1.2.1.17.7.1.1.3Unsigned32read-onlyThe maximum number of IEEE 802.1Q VLANs that this device supports.
U32 dot1qNumVlans1.3.6.1.2.1.17.7.1.1.4Unsigned32read-onlyThe current number of IEEE 802.1Q VLANs that are configured in this device.
ENA dot1qGvrpStatus1.3.6.1.2.1.17.7.1.1.5EnabledStatusread-writeThe administrative status requested by management for GVRP. The value enabled(1) indicates that GVRP should be enabled on this device, on all ports for which it has not been specifically disabled. When disabled(2), GVRP is disabled on all ports, and all GVRP packets will be forwarded transparently. This object affects all GVRP Applicant and Registrar state machines. A transition from disabled(2) to enabled(1) will cause a reset of all GVRP state machines on all ports. The value of this object MUST be retained across reinitializations of the management system.
dot1qTp1.3.6.1.2.1.17.7.1.2
dot1qFdbTable1.3.6.1.2.1.17.7.1.2.1not-accessibleA table that contains configuration and control information for each Filtering Database currently operating on this device. Entries in this table appear automatically when VLANs are assigned FDB IDs in the dot1qVlanCurrentTable.
dot1qFdbEntry1.3.6.1.2.1.17.7.1.2.1.1not-accessibleInformation about a specific Filtering Database.
U32 dot1qFdbId1.3.6.1.2.1.17.7.1.2.1.1.1Unsigned32not-accessibleThe identity of this Filtering Database.
C32 dot1qFdbDynamicCount1.3.6.1.2.1.17.7.1.2.1.1.2Counter32read-onlyThe current number of dynamic entries in this Filtering Database.
dot1qTpFdbTable1.3.6.1.2.1.17.7.1.2.2not-accessibleA table that contains information about unicast entries for which the device has forwarding and/or filtering information. This information is used by the transparent bridging function in determining how to propagate a received frame.
dot1qTpFdbEntry1.3.6.1.2.1.17.7.1.2.2.1not-accessibleInformation about a specific unicast MAC address for which the device has some forwarding and/or filtering information.
MAC dot1qTpFdbAddress1.3.6.1.2.1.17.7.1.2.2.1.1MacAddressnot-accessibleA unicast MAC address for which the device has forwarding and/or filtering information.
I32 dot1qTpFdbPort1.3.6.1.2.1.17.7.1.2.2.1.2Integer32read-onlyEither the value '0', or the port number of the port on which a frame having a source address equal to the value of the corresponding instance of dot1qTpFdbAddress has been seen. A value of '0' indicates that the port number has not been learned but that the device does have some forwarding/filtering information about this address (e.g., in the dot1qStaticUnicastTable). Implementors are encouraged to assign the port value to this object whenever it is learned, even for addresses for which the corresponding value of dot1qTpFdbStatus is not learned(3).
INT dot1qTpFdbStatus1.3.6.1.2.1.17.7.1.2.2.1.3INTEGERread-onlyThe status of this entry. The meanings of the values are: other(1) - none of the following. This may include the case where some other MIB object (not the corresponding instance of dot1qTpFdbPort, nor an entry in the dot1qStaticUnicastTable) is being used to determine if and how frames addressed to the value of the corresponding instance of dot1qTpFdbAddress are being forwarded. invalid(2) - this entry is no longer valid (e.g., it was learned but has since aged out), but has not yet been flushed from the table. learned(3) - the value of the corresponding instance of dot1qTpFdbPort was learned and is being used. self(4) - the value of the corresponding instance of dot1qTpFdbAddress represents one of the device's addresses. The corresponding instance of dot1qTpFdbPort indicates which of the device's ports has this address. mgmt(5) - the value of the corresponding instance of dot1qTpFdbAddress is also the value of an existing instance of dot1qStaticAddress.
dot1qTpGroupTable1.3.6.1.2.1.17.7.1.2.3not-accessibleA table containing filtering information for VLANs configured into the bridge by (local or network) management, or learned dynamically, specifying the set of ports to which frames received on a VLAN for this FDB and containing a specific Group destination address are allowed to be forwarded.
dot1qTpGroupEntry1.3.6.1.2.1.17.7.1.2.3.1not-accessibleFiltering information configured into the bridge by management, or learned dynamically, specifying the set of ports to which frames received on a VLAN and containing a specific Group destination address are allowed to be forwarded. The subset of these ports learned dynamically is also provided.
MAC dot1qTpGroupAddress1.3.6.1.2.1.17.7.1.2.3.1.1MacAddressnot-accessibleThe destination Group MAC address in a frame to which this entry's filtering information applies.
POR dot1qTpGroupEgressPorts1.3.6.1.2.1.17.7.1.2.3.1.2PortListread-onlyThe complete set of ports, in this VLAN, to which frames destined for this Group MAC address are currently being explicitly forwarded. This does not include ports for which this address is only implicitly forwarded, in the dot1qForwardAllPorts list.
POR dot1qTpGroupLearnt1.3.6.1.2.1.17.7.1.2.3.1.3PortListread-onlyThe subset of ports in dot1qTpGroupEgressPorts that were learned by GMRP or some other dynamic mechanism, in this Filtering database.
dot1qForwardAllTable1.3.6.1.2.1.17.7.1.2.4not-accessibleA table containing forwarding information for each VLAN, specifying the set of ports to which forwarding of all multicasts applies, configured statically by management or dynamically by GMRP. An entry appears in this table for all VLANs that are currently instantiated.
dot1qForwardAllEntry1.3.6.1.2.1.17.7.1.2.4.1not-accessibleForwarding information for a VLAN, specifying the set of ports to which all multicasts should be forwarded, configured statically by management or dynamically by GMRP.
POR dot1qForwardAllPorts1.3.6.1.2.1.17.7.1.2.4.1.1PortListread-onlyThe complete set of ports in this VLAN to which all multicast group-addressed frames are to be forwarded. This includes ports for which this need has been determined dynamically by GMRP, or configured statically by management.
POR dot1qForwardAllStaticPorts1.3.6.1.2.1.17.7.1.2.4.1.2PortListread-writeThe set of ports configured by management in this VLAN to which all multicast group-addressed frames are to be forwarded. Ports entered in this list will also appear in the complete set shown by dot1qForwardAllPorts. This value will be restored after the device is reset. This only applies to ports that are members of the VLAN, defined by dot1qVlanCurrentEgressPorts. A port may not be added in this set if it is already a member of the set of ports in dot1qForwardAllForbiddenPorts. The default value is a string of ones of appropriate length, to indicate the standard behaviour of using basic filtering services, i.e., forward all multicasts to all ports. The value of this object MUST be retained across reinitializations of the management system.
POR dot1qForwardAllForbiddenPorts1.3.6.1.2.1.17.7.1.2.4.1.3PortListread-writeThe set of ports configured by management in this VLAN for which the Service Requirement attribute Forward All Multicast Groups may not be dynamically registered by GMRP. This value will be restored after the device is reset. A port may not be added in this set if it is already a member of the set of ports in dot1qForwardAllStaticPorts. The default value is a string of zeros of appropriate length. The value of this object MUST be retained across reinitializations of the management system.
dot1qForwardUnregisteredTable1.3.6.1.2.1.17.7.1.2.5not-accessibleA table containing forwarding information for each VLAN, specifying the set of ports to which forwarding of multicast group-addressed frames for which no more specific forwarding information applies. This is configured statically by management and determined dynamically by GMRP. An entry appears in this table for all VLANs that are currently instantiated.
dot1qForwardUnregisteredEntry1.3.6.1.2.1.17.7.1.2.5.1not-accessibleForwarding information for a VLAN, specifying the set of ports to which all multicasts for which there is no more specific forwarding information shall be forwarded. This is configured statically by management or dynamically by GMRP.
POR dot1qForwardUnregisteredPorts1.3.6.1.2.1.17.7.1.2.5.1.1PortListread-onlyThe complete set of ports in this VLAN to which multicast group-addressed frames for which there is no more specific forwarding information will be forwarded. This includes ports for which this need has been determined dynamically by GMRP, or configured statically by management.
POR dot1qForwardUnregisteredStaticPorts1.3.6.1.2.1.17.7.1.2.5.1.2PortListread-writeThe set of ports configured by management, in this VLAN, to which multicast group-addressed frames for which there is no more specific forwarding information are to be forwarded. Ports entered in this list will also appear in the complete set shown by dot1qForwardUnregisteredPorts. This value will be restored after the device is reset. A port may not be added in this set if it is already a member of the set of ports in dot1qForwardUnregisteredForbiddenPorts. The default value is a string of zeros of appropriate length, although this has no effect with the default value of dot1qForwardAllStaticPorts. The value of this object MUST be retained across reinitializations of the management system.
POR dot1qForwardUnregisteredForbiddenPorts1.3.6.1.2.1.17.7.1.2.5.1.3PortListread-writeThe set of ports configured by management in this VLAN for which the Service Requirement attribute Forward Unregistered Multicast Groups may not be dynamically registered by GMRP. This value will be restored after the device is reset. A port may not be added in this set if it is already a member of the set of ports in dot1qForwardUnregisteredStaticPorts. The default value is a string of zeros of appropriate length. The value of this object MUST be retained across reinitializations of the management system.
dot1qStatic1.3.6.1.2.1.17.7.1.3
dot1qStaticUnicastTable1.3.6.1.2.1.17.7.1.3.1not-accessibleA table containing filtering information for Unicast MAC addresses for each Filtering Database, configured into the device by (local or network) management specifying the set of ports to which frames received from specific ports and containing specific unicast destination addresses are allowed to be forwarded. A value of zero in this table (as the port number from which frames with a specific destination address are received) is used to specify all ports for which there is no specific entry in this table for that particular destination address. Entries are valid for unicast addresses only.
dot1qStaticUnicastEntry1.3.6.1.2.1.17.7.1.3.1.1not-accessibleFiltering information configured into the device by (local or network) management specifying the set of ports to which frames received from a specific port and containing a specific unicast destination address are allowed to be forwarded.
MAC dot1qStaticUnicastAddress1.3.6.1.2.1.17.7.1.3.1.1.1MacAddressnot-accessibleThe destination MAC address in a frame to which this entry's filtering information applies. This object must take the value of a unicast address.
I32 dot1qStaticUnicastReceivePort1.3.6.1.2.1.17.7.1.3.1.1.2Integer32not-accessibleEither the value '0' or the port number of the port from which a frame must be received in order for this entry's filtering information to apply. A value of zero indicates that this entry applies on all ports of the device for which there is no other applicable entry.
POR dot1qStaticUnicastAllowedToGoTo1.3.6.1.2.1.17.7.1.3.1.1.3PortListread-writeThe set of ports for which a frame with a specific unicast address will be flooded in the event that it has not been learned. It also specifies the set of ports on which a specific unicast address may be dynamically learned. The dot1qTpFdbTable will have an equivalent entry with a dot1qTpFdbPort value of '0' until this address has been learned, at which point it will be updated with the port the address has been seen on. This only applies to ports that are members of the VLAN, defined by dot1qVlanCurrentEgressPorts. The default value of this object is a string of ones of appropriate length. The value of this object MUST be retained across reinitializations of the management system.
INT dot1qStaticUnicastStatus1.3.6.1.2.1.17.7.1.3.1.1.4INTEGERread-writeThis object indicates the status of this entry. other(1) - this entry is currently in use, but the conditions under which it will remain so differ from the following values. invalid(2) - writing this value to the object removes the corresponding entry. permanent(3) - this entry is currently in use and will remain so after the next reset of the bridge. deleteOnReset(4) - this entry is currently in use and will remain so until the next reset of the bridge. deleteOnTimeout(5) - this entry is currently in use and will remain so until it is aged out. The value of this object MUST be retained across reinitializations of the management system.
dot1qStaticMulticastTable1.3.6.1.2.1.17.7.1.3.2not-accessibleA table containing filtering information for Multicast and Broadcast MAC addresses for each VLAN, configured into the device by (local or network) management specifying the set of ports to which frames received from specific ports and containing specific Multicast and Broadcast destination addresses are allowed to be forwarded. A value of zero in this table (as the port number from which frames with a specific destination address are received) is used to specify all ports for which there is no specific entry in this table for that particular destination address. Entries are valid for Multicast and Broadcast addresses only.
dot1qStaticMulticastEntry1.3.6.1.2.1.17.7.1.3.2.1not-accessibleFiltering information configured into the device by (local or network) management specifying the set of ports to which frames received from this specific port for this VLAN and containing this Multicast or Broadcast destination address are allowed to be forwarded.
MAC dot1qStaticMulticastAddress1.3.6.1.2.1.17.7.1.3.2.1.1MacAddressnot-accessibleThe destination MAC address in a frame to which this entry's filtering information applies. This object must take the value of a Multicast or Broadcast address.
I32 dot1qStaticMulticastReceivePort1.3.6.1.2.1.17.7.1.3.2.1.2Integer32not-accessibleEither the value '0' or the port number of the port from which a frame must be received in order for this entry's filtering information to apply. A value of zero indicates that this entry applies on all ports of the device for which there is no other applicable entry.
POR dot1qStaticMulticastStaticEgressPorts1.3.6.1.2.1.17.7.1.3.2.1.3PortListread-writeThe set of ports to which frames received from a specific port and destined for a specific Multicast or Broadcast MAC address must be forwarded, regardless of any dynamic information, e.g., from GMRP. A port may not be added in this set if it is already a member of the set of ports in dot1qStaticMulticastForbiddenEgressPorts. The default value of this object is a string of ones of appropriate length. The value of this object MUST be retained across reinitializations of the management system.
POR dot1qStaticMulticastForbiddenEgressPorts1.3.6.1.2.1.17.7.1.3.2.1.4PortListread-writeThe set of ports to which frames received from a specific port and destined for a specific Multicast or Broadcast MAC address must not be forwarded, regardless of any dynamic information, e.g., from GMRP. A port may not be added in this set if it is already a member of the set of ports in dot1qStaticMulticastStaticEgressPorts. The default value of this object is a string of zeros of appropriate length. The value of this object MUST be retained across reinitializations of the management system.
INT dot1qStaticMulticastStatus1.3.6.1.2.1.17.7.1.3.2.1.5INTEGERread-writeThis object indicates the status of this entry. other(1) - this entry is currently in use, but the conditions under which it will remain so differ from the following values. invalid(2) - writing this value to the object removes the corresponding entry. permanent(3) - this entry is currently in use and will remain so after the next reset of the bridge. deleteOnReset(4) - this entry is currently in use and will remain so until the next reset of the bridge. deleteOnTimeout(5) - this entry is currently in use and will remain so until it is aged out. The value of this object MUST be retained across reinitializations of the management system.
dot1qVlan1.3.6.1.2.1.17.7.1.4
C32 dot1qVlanNumDeletes1.3.6.1.2.1.17.7.1.4.1Counter32read-onlyThe number of times a VLAN entry has been deleted from the dot1qVlanCurrentTable (for any reason). If an entry is deleted, then inserted, and then deleted, this counter will be incremented by 2.
dot1qVlanCurrentTable1.3.6.1.2.1.17.7.1.4.2not-accessibleA table containing current configuration information for each VLAN currently configured into the device by (local or network) management, or dynamically created as a result of GVRP requests received.
dot1qVlanCurrentEntry1.3.6.1.2.1.17.7.1.4.2.1not-accessibleInformation for a VLAN configured into the device by (local or network) management, or dynamically created as a result of GVRP requests received.
TIM dot1qVlanTimeMark1.3.6.1.2.1.17.7.1.4.2.1.1TimeFilternot-accessibleA TimeFilter for this entry. See the TimeFilter textual convention to see how this works.
VLA dot1qVlanIndex1.3.6.1.2.1.17.7.1.4.2.1.2VlanIndexnot-accessibleThe VLAN-ID or other identifier referring to this VLAN.
U32 dot1qVlanFdbId1.3.6.1.2.1.17.7.1.4.2.1.3Unsigned32read-onlyThe Filtering Database used by this VLAN. This is one of the dot1qFdbId values in the dot1qFdbTable. This value is allocated automatically by the device whenever the VLAN is created: either dynamically by GVRP, or by management, in dot1qVlanStaticTable. Allocation of this value follows the learning constraints defined for this VLAN in dot1qLearningConstraintsTable.
POR dot1qVlanCurrentEgressPorts1.3.6.1.2.1.17.7.1.4.2.1.4PortListread-onlyThe set of ports that are transmitting traffic for this VLAN as either tagged or untagged frames.
POR dot1qVlanCurrentUntaggedPorts1.3.6.1.2.1.17.7.1.4.2.1.5PortListread-onlyThe set of ports that are transmitting traffic for this VLAN as untagged frames.
INT dot1qVlanStatus1.3.6.1.2.1.17.7.1.4.2.1.6INTEGERread-onlyThis object indicates the status of this entry. other(1) - this entry is currently in use, but the conditions under which it will remain so differ from the following values. permanent(2) - this entry, corresponding to an entry in dot1qVlanStaticTable, is currently in use and will remain so after the next reset of the device. The port lists for this entry include ports from the equivalent dot1qVlanStaticTable entry and ports learned dynamically. dynamicGvrp(3) - this entry is currently in use and will remain so until removed by GVRP. There is no static entry for this VLAN, and it will be removed when the last port leaves the VLAN.
TIK dot1qVlanCreationTime1.3.6.1.2.1.17.7.1.4.2.1.7TimeTicksread-onlyThe value of sysUpTime when this VLAN was created.
dot1qVlanStaticTable1.3.6.1.2.1.17.7.1.4.3not-accessibleA table containing static configuration information for each VLAN configured into the device by (local or network) management. All entries are permanent and will be restored after the device is reset.
dot1qVlanStaticEntry1.3.6.1.2.1.17.7.1.4.3.1not-accessibleStatic information for a VLAN configured into the device by (local or network) management.
STR dot1qVlanStaticName1.3.6.1.2.1.17.7.1.4.3.1.1SnmpAdminStringread-createAn administratively assigned string, which may be used to identify the VLAN.
POR dot1qVlanStaticEgressPorts1.3.6.1.2.1.17.7.1.4.3.1.2PortListread-createThe set of ports that are permanently assigned to the egress list for this VLAN by management. Changes to a bit in this object affect the per-port, per-VLAN Registrar control for Registration Fixed for the relevant GVRP state machine on each port. A port may not be added in this set if it is already a member of the set of ports in dot1qVlanForbiddenEgressPorts. The default value of this object is a string of zeros of appropriate length, indicating not fixed.
POR dot1qVlanForbiddenEgressPorts1.3.6.1.2.1.17.7.1.4.3.1.3PortListread-createThe set of ports that are prohibited by management from being included in the egress list for this VLAN. Changes to this object that cause a port to be included or excluded affect the per-port, per-VLAN Registrar control for Registration Forbidden for the relevant GVRP state machine on each port. A port may not be added in this set if it is already a member of the set of ports in dot1qVlanStaticEgressPorts. The default value of this object is a string of zeros of appropriate length, excluding all ports from the forbidden set.
POR dot1qVlanStaticUntaggedPorts1.3.6.1.2.1.17.7.1.4.3.1.4PortListread-createThe set of ports that should transmit egress packets for this VLAN as untagged. The default value of this object for the default VLAN (dot1qVlanIndex = 1) is a string of appropriate length including all ports. There is no specified default for other VLANs. If a device agent cannot support the set of ports being set, then it will reject the set operation with an error. For example, a manager might attempt to set more than one VLAN to be untagged on egress where the device does not support this IEEE 802.1Q option.
ROW dot1qVlanStaticRowStatus1.3.6.1.2.1.17.7.1.4.3.1.5RowStatusread-createThis object indicates the status of this entry.
I32 dot1qNextFreeLocalVlanIndex1.3.6.1.2.1.17.7.1.4.4Integer32read-onlyThe next available value for dot1qVlanIndex of a local VLAN entry in dot1qVlanStaticTable. This will report values >=4096 if a new Local VLAN may be created or else the value 0 if this is not possible. A row creation operation in this table for an entry with a local VlanIndex value may fail if the current value of this object is not used as the index. Even if the value read is used, there is no guarantee that it will still be the valid index when the create operation is attempted; another manager may have already got in during the intervening time interval. In this case, dot1qNextFreeLocalVlanIndex should be re-read and the creation re-tried with the new value. This value will automatically change when the current value is used to create a new row.
dot1qPortVlanTable1.3.6.1.2.1.17.7.1.4.5not-accessibleA table containing per-port control and status information for VLAN configuration in the device.
dot1qPortVlanEntry1.3.6.1.2.1.17.7.1.4.5.1not-accessibleInformation controlling VLAN configuration for a port on the device. This is indexed by dot1dBasePort.
VLA dot1qPvid1.3.6.1.2.1.17.7.1.4.5.1.1VlanIndexread-writeThe PVID, the VLAN-ID assigned to untagged frames or Priority-Tagged frames received on this port. The value of this object MUST be retained across reinitializations of the management system.
INT dot1qPortAcceptableFrameTypes1.3.6.1.2.1.17.7.1.4.5.1.2INTEGERread-writeWhen this is admitOnlyVlanTagged(2), the device will discard untagged frames or Priority-Tagged frames received on this port. When admitAll(1), untagged frames or Priority-Tagged frames received on this port will be accepted and assigned to a VID based on the PVID and VID Set for this port. This control does not affect VLAN-independent Bridge Protocol Data Unit (BPDU) frames, such as GVRP and Spanning Tree Protocol (STP). It does affect VLAN- dependent BPDU frames, such as GMRP. The value of this object MUST be retained across reinitializations of the management system.
T/F dot1qPortIngressFiltering1.3.6.1.2.1.17.7.1.4.5.1.3TruthValueread-writeWhen this is true(1), the device will discard incoming frames for VLANs that do not include this Port in its Member set. When false(2), the port will accept all incoming frames. This control does not affect VLAN-independent BPDU frames, such as GVRP and STP. It does affect VLAN- dependent BPDU frames, such as GMRP. The value of this object MUST be retained across reinitializations of the management system.
ENA dot1qPortGvrpStatus1.3.6.1.2.1.17.7.1.4.5.1.4EnabledStatusread-writeThe state of GVRP operation on this port. The value enabled(1) indicates that GVRP is enabled on this port, as long as dot1qGvrpStatus is also enabled for this device. When disabled(2) but dot1qGvrpStatus is still enabled for the device, GVRP is disabled on this port: any GVRP packets received will be silently discarded, and no GVRP registrations will be propagated from other ports. This object affects all GVRP Applicant and Registrar state machines on this port. A transition from disabled(2) to enabled(1) will cause a reset of all GVRP state machines on this port. The value of this object MUST be retained across reinitializations of the management system.
C32 dot1qPortGvrpFailedRegistrations1.3.6.1.2.1.17.7.1.4.5.1.5Counter32read-onlyThe total number of failed GVRP registrations, for any reason, on this port.
MAC dot1qPortGvrpLastPduOrigin1.3.6.1.2.1.17.7.1.4.5.1.6MacAddressread-onlyThe Source MAC Address of the last GVRP message received on this port.
T/F dot1qPortRestrictedVlanRegistration1.3.6.1.2.1.17.7.1.4.5.1.7TruthValueread-writeThe state of Restricted VLAN Registration on this port. If the value of this control is true(1), then creation of a new dynamic VLAN entry is permitted only if there is a Static VLAN Registration Entry for the VLAN concerned, in which the Registrar Administrative Control value for this port is Normal Registration. The value of this object MUST be retained across reinitializations of the management system.
dot1qPortVlanStatisticsTable1.3.6.1.2.1.17.7.1.4.6not-accessibleA table containing per-port, per-VLAN statistics for traffic received. Separate objects are provided for both the most-significant and least-significant bits of statistics counters for ports that are associated with this transparent bridge. The most-significant bit objects are only required on high-capacity interfaces, as defined in the conformance clauses for these objects. This mechanism is provided as a way to read 64-bit counters for agents that support only SNMPv1. Note that the reporting of most-significant and least- significant counter bits separately runs the risk of missing an overflow of the lower bits in the interval between sampling. The manager must be aware of this possibility, even within the same varbindlist, when interpreting the results of a request or asynchronous notification.
dot1qPortVlanStatisticsEntry1.3.6.1.2.1.17.7.1.4.6.1not-accessibleTraffic statistics for a VLAN on an interface.
C32 dot1qTpVlanPortInFrames1.3.6.1.2.1.17.7.1.4.6.1.1Counter32read-onlyThe number of valid frames received by this port from its segment that were classified as belonging to this VLAN. Note that a frame received on this port is counted by this object if and only if it is for a protocol being processed by the local forwarding process for this VLAN. This object includes received bridge management frames classified as belonging to this VLAN (e.g., GMRP, but not GVRP or STP.
C32 dot1qTpVlanPortOutFrames1.3.6.1.2.1.17.7.1.4.6.1.2Counter32read-onlyThe number of valid frames transmitted by this port to its segment from the local forwarding process for this VLAN. This includes bridge management frames originated by this device that are classified as belonging to this VLAN (e.g., GMRP, but not GVRP or STP).
C32 dot1qTpVlanPortInDiscards1.3.6.1.2.1.17.7.1.4.6.1.3Counter32read-onlyThe number of valid frames received by this port from its segment that were classified as belonging to this VLAN and that were discarded due to VLAN-related reasons. Specifically, the IEEE 802.1Q counters for Discard Inbound and Discard on Ingress Filtering.
C32 dot1qTpVlanPortInOverflowFrames1.3.6.1.2.1.17.7.1.4.6.1.4Counter32read-onlyThe number of times the associated dot1qTpVlanPortInFrames counter has overflowed.
C32 dot1qTpVlanPortOutOverflowFrames1.3.6.1.2.1.17.7.1.4.6.1.5Counter32read-onlyThe number of times the associated dot1qTpVlanPortOutFrames counter has overflowed.
C32 dot1qTpVlanPortInOverflowDiscards1.3.6.1.2.1.17.7.1.4.6.1.6Counter32read-onlyThe number of times the associated dot1qTpVlanPortInDiscards counter has overflowed.
dot1qPortVlanHCStatisticsTable1.3.6.1.2.1.17.7.1.4.7not-accessibleA table containing per-port, per-VLAN statistics for traffic on high-capacity interfaces.
dot1qPortVlanHCStatisticsEntry1.3.6.1.2.1.17.7.1.4.7.1not-accessibleTraffic statistics for a VLAN on a high-capacity interface.
C64 dot1qTpVlanPortHCInFrames1.3.6.1.2.1.17.7.1.4.7.1.1Counter64read-onlyThe number of valid frames received by this port from its segment that were classified as belonging to this VLAN. Note that a frame received on this port is counted by this object if and only if it is for a protocol being processed by the local forwarding process for this VLAN. This object includes received bridge management frames classified as belonging to this VLAN (e.g., GMRP, but not GVRP or STP).
C64 dot1qTpVlanPortHCOutFrames1.3.6.1.2.1.17.7.1.4.7.1.2Counter64read-onlyThe number of valid frames transmitted by this port to its segment from the local forwarding process for this VLAN. This includes bridge management frames originated by this device that are classified as belonging to this VLAN (e.g., GMRP, but not GVRP or STP).
C64 dot1qTpVlanPortHCInDiscards1.3.6.1.2.1.17.7.1.4.7.1.3Counter64read-onlyThe number of valid frames received by this port from its segment that were classified as belonging to this VLAN and that were discarded due to VLAN-related reasons. Specifically, the IEEE 802.1Q counters for Discard Inbound and Discard on Ingress Filtering.
dot1qLearningConstraintsTable1.3.6.1.2.1.17.7.1.4.8not-accessibleA table containing learning constraints for sets of Shared and Independent VLANs.
dot1qLearningConstraintsEntry1.3.6.1.2.1.17.7.1.4.8.1not-accessibleA learning constraint defined for a VLAN.
VLA dot1qConstraintVlan1.3.6.1.2.1.17.7.1.4.8.1.1VlanIndexnot-accessibleThe index of the row in dot1qVlanCurrentTable for the VLAN constrained by this entry.
I32 dot1qConstraintSet1.3.6.1.2.1.17.7.1.4.8.1.2Integer32not-accessibleThe identity of the constraint set to which dot1qConstraintVlan belongs. These values may be chosen by the management station.
INT dot1qConstraintType1.3.6.1.2.1.17.7.1.4.8.1.3INTEGERread-createThe type of constraint this entry defines. independent(1) - the VLAN, dot1qConstraintVlan, uses a filtering database independent from all other VLANs in the same set, defined by dot1qConstraintSet. shared(2) - the VLAN, dot1qConstraintVlan, shares the same filtering database as all other VLANs in the same set, defined by dot1qConstraintSet.
ROW dot1qConstraintStatus1.3.6.1.2.1.17.7.1.4.8.1.4RowStatusread-createThe status of this entry.
I32 dot1qConstraintSetDefault1.3.6.1.2.1.17.7.1.4.9Integer32read-writeThe identity of the constraint set to which a VLAN belongs, if there is not an explicit entry for that VLAN in dot1qLearningConstraintsTable. The value of this object MUST be retained across reinitializations of the management system.
INT dot1qConstraintTypeDefault1.3.6.1.2.1.17.7.1.4.10INTEGERread-writeThe type of constraint set to which a VLAN belongs, if there is not an explicit entry for that VLAN in dot1qLearningConstraintsTable. The types are as defined for dot1qConstraintType. The value of this object MUST be retained across reinitializations of the management system.
dot1vProtocol1.3.6.1.2.1.17.7.1.5
dot1vProtocolGroupTable1.3.6.1.2.1.17.7.1.5.1not-accessibleA table that contains mappings from Protocol Templates to Protocol Group Identifiers used for Port-and-Protocol-based VLAN Classification.
dot1vProtocolGroupEntry1.3.6.1.2.1.17.7.1.5.1.1not-accessibleA mapping from a Protocol Template to a Protocol Group Identifier.
INT dot1vProtocolTemplateFrameType1.3.6.1.2.1.17.7.1.5.1.1.1INTEGERnot-accessibleThe data-link encapsulation format or the 'detagged_frame_type' in a Protocol Template.
OCT dot1vProtocolTemplateProtocolValue1.3.6.1.2.1.17.7.1.5.1.1.2OCTET STRINGnot-accessibleThe identification of the protocol above the data-link layer in a Protocol Template. Depending on the frame type, the octet string will have one of the following values: For 'ethernet', 'rfc1042' and 'snap8021H', this is the 16-bit (2-octet) IEEE 802.3 Type Field. For 'snapOther', this is the 40-bit (5-octet) PID. For 'llcOther', this is the 2-octet IEEE 802.2 Link Service Access Point (LSAP) pair: first octet for Destination Service Access Point (DSAP) and second octet for Source Service Access Point (SSAP).
I32 dot1vProtocolGroupId1.3.6.1.2.1.17.7.1.5.1.1.3Integer32read-createRepresents a group of protocols that are associated together when assigning a VID to a frame.
ROW dot1vProtocolGroupRowStatus1.3.6.1.2.1.17.7.1.5.1.1.4RowStatusread-createThis object indicates the status of this entry.
dot1vProtocolPortTable1.3.6.1.2.1.17.7.1.5.2not-accessibleA table that contains VID sets used for Port-and-Protocol-based VLAN Classification.
dot1vProtocolPortEntry1.3.6.1.2.1.17.7.1.5.2.1not-accessibleA VID set for a port.
I32 dot1vProtocolPortGroupId1.3.6.1.2.1.17.7.1.5.2.1.1Integer32not-accessibleDesignates a group of protocols in the Protocol Group Database.
I32 dot1vProtocolPortGroupVid1.3.6.1.2.1.17.7.1.5.2.1.2Integer32read-createThe VID associated with a group of protocols for each port.
ROW dot1vProtocolPortRowStatus1.3.6.1.2.1.17.7.1.5.2.1.3RowStatusread-createThis object indicates the status of this entry.
qBridgeConformance1.3.6.1.2.1.17.7.2
qBridgeGroups1.3.6.1.2.1.17.7.2.1
qBridgeBaseGroup1.3.6.1.2.1.17.7.2.1.1A collection of objects providing device-level control and status information for the Virtual LAN bridge services.
qBridgeFdbUnicastGroup1.3.6.1.2.1.17.7.2.1.2A collection of objects providing information about all unicast addresses, learned dynamically or statically configured by management, in each Filtering Database.
qBridgeFdbMulticastGroup1.3.6.1.2.1.17.7.2.1.3A collection of objects providing information about all multicast addresses, learned dynamically or statically configured by management, in each Filtering Database.
qBridgeServiceRequirementsGroup1.3.6.1.2.1.17.7.2.1.4A collection of objects providing information about service requirements, learned dynamically or statically configured by management, in each Filtering Database.
qBridgeFdbStaticGroup1.3.6.1.2.1.17.7.2.1.5A collection of objects providing information about unicast and multicast addresses statically configured by management, in each Filtering Database or VLAN.
qBridgeVlanGroup1.3.6.1.2.1.17.7.2.1.6A collection of objects providing information about all VLANs currently configured on this device.
qBridgeVlanStaticGroup1.3.6.1.2.1.17.7.2.1.7A collection of objects providing information about VLANs statically configured by management.
qBridgePortGroup1.3.6.1.2.1.17.7.2.1.8A collection of objects providing port-level VLAN control and status information for all ports.
qBridgeVlanStatisticsGroup1.3.6.1.2.1.17.7.2.1.9A collection of objects providing per-port packet statistics for all VLANs currently configured on this device.
qBridgeVlanStatisticsOverflowGroup1.3.6.1.2.1.17.7.2.1.10A collection of objects providing overflow counters for per-port packet statistics for all VLANs currently configured on this device for high-capacity interfaces, defined as those that have the value of the corresponding instance of ifSpeed greater than 650,000,000 bits/second.
qBridgeVlanHCStatisticsGroup1.3.6.1.2.1.17.7.2.1.11A collection of objects providing per-port packet statistics for all VLANs currently configured on this device for high-capacity interfaces, defined as those that have the value of the corresponding instance of ifSpeed greater than 650,000,000 bits/second.
qBridgeLearningConstraintsGroup1.3.6.1.2.1.17.7.2.1.12A collection of objects defining the Filtering Database constraints all VLANs have with each other.
qBridgeLearningConstraintDefaultGroup1.3.6.1.2.1.17.7.2.1.13A collection of objects defining the default Filtering Database constraints for VLANs that have no specific constraints defined.
qBridgeClassificationDeviceGroup1.3.6.1.2.1.17.7.2.1.14VLAN classification information for the bridge.
qBridgeClassificationPortGroup1.3.6.1.2.1.17.7.2.1.15VLAN classification information for individual ports.
qBridgePortGroup21.3.6.1.2.1.17.7.2.1.16A collection of objects providing port-level VLAN control and status information for all ports.
qBridgeCompliances1.3.6.1.2.1.17.7.2.2
qBridgeCompliance1.3.6.1.2.1.17.7.2.2.1The compliance statement for device support of Virtual LAN Bridge services. RFC2674 was silent about the expected persistence of the read-write objects in this MIB module. Applications MUST NOT assume that the values of the read-write objects are persistent across reinitializations of the management system and MUST NOT assume that the values are not persistent across reinitializations of the management system.
qBridgeCompliance21.3.6.1.2.1.17.7.2.2.2The compliance statement for device support of Virtual LAN Bridge services. This document clarifies the persistence requirements for the read-write objects in this MIB module. All implementations claiming compliance to qBridgeCompliance2 MUST retain the values of those read-write objects that specify this requirement.

RFC description

Defines managed objects for bridges with traffic classes, multicast filtering, and Virtual LAN (VLAN) extensions as standardized in RFC 4363, covering port-based and protocol-based VLAN membership, VLAN classification, restricted VLAN registration, and IEEE 802.1Q-compliant virtual bridged local area network management.

Start monitoring IEEE 802.1Q Ethernet switches and bridges with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Q-BRIDGE-MIB