TPLINK-PRIVATE-VLAN-MIB

All MIBs › TPLINK-PRIVATE-VLAN-MIB

Organization: TPLINK

Last Updated: 2010-12-20

Category: VLAN Management

Description: Manages TP-Link switch private VLAN primary and secondary VLAN associations and port roles.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TPLINK-PRIVATE-VLAN-MIB?

TPLINK-PRIVATE-VLAN-MIB is a TP-Link vendor-specific MIB for configuring Private VLANs on managed switches, defining primary/secondary VLAN associations and the private-VLAN role (promiscuous, isolated, or community) assigned to each port. This is a Layer-2 segmentation configuration MIB; its main monitoring value is verifying that port roles and VLAN associations match the intended isolation policy, since a misconfigured role could allow unintended host-to-host communication within a segment. It builds on the standard 802.1Q VLAN concept and the general private-VLAN model rather than implementing a common IETF standard MIB. It's deployed on TP-Link managed switches in multi-tenant or shared-infrastructure environments, such as hosting or shared-building networks, where host isolation within a VLAN is required, making TPLINK-PRIVATE-VLAN-MIB SNMP monitoring a standard part of verifying port-role and isolation-policy compliance there.

IPNetwork Monitor allows you to monitor SNMP objects defined in TPLINK-PRIVATE-VLAN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

TP-Link managed switches

Monitoring Examples

An administrator reviews the primary-to-secondary VLAN association table to confirm which secondary (isolated/community) VLANs are mapped under a given primary VLAN, and checks each port's assigned private-VLAN role to ensure customer-facing ports are set to isolated rather than promiscuous. A port unexpectedly configured as promiscuous in a shared-tenant VLAN would be flagged as a potential isolation-policy violation.

What Can Be Monitored

primary/secondary VLAN association
per-port private VLAN role (promiscuous/isolated/community)
private VLAN configuration table entries

Imported Objects

From RFC1213-MIB

ifIndex

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE

From TPLINK-MIB

tplinkMgmt

OBJECT-IDENTITY

From TPLINK-TC-MIB

TPRowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
tplinkPrivateVlanMIB	1.3.6.1.4.1.11863.6.18			Implementation of the privlan is mandatory for the swtich.
tplinkPrivateVlanMIBObjects	1.3.6.1.4.1.11863.6.18.1
privateVlanTable	1.3.6.1.4.1.11863.6.18.1.1		not-accessible	A list of private VLAN control entries.
privateVlanEntry	1.3.6.1.4.1.11863.6.18.1.1.1		not-accessible	PVLAN (Private Virtual Local Area Network) technology is developed for saving VLANs of uplink devices and decrease broadcast message . Private VLAN can enhance performance by conserving bandwidth, and improve security by decreasing broadcast .
INT secondaryVlan	1.3.6.1.4.1.11863.6.18.1.1.1.1	INTEGER	read-create	The ID number of the Secondary VLAN.
INT primaryVlan	1.3.6.1.4.1.11863.6.18.1.1.1.2	INTEGER	read-create	The ID number of the Primary VLAN.
OCT privateVlanPort	1.3.6.1.4.1.11863.6.18.1.1.1.3	OCTET STRING	read-only	Displays the Port number of the Private VLAN.
INT privateVlanType	1.3.6.1.4.1.11863.6.18.1.1.1.4	INTEGER	read-create	The Port Type for the port. 1. promiscuous 2. host
TPR privateVlanStatus	1.3.6.1.4.1.11863.6.18.1.1.1.5	TPRowStatus	read-create	the following two values are states: these values may be read or written active(1), notInService(2), the following value is a state: this value may be read, but not written notReady(3), the following three values are actions: these values may be written, but are never read createAndGo(4), createAndWait(5), destroy(6)
privateVlanPortTable	1.3.6.1.4.1.11863.6.18.1.2		not-accessible	A list of vlan port type control entries.
privateVlanPortEntry	1.3.6.1.4.1.11863.6.18.1.2.1		not-accessible	The PVLAN provides two Port Types for the ports, Promiscuous and Host. Usually, the Promiscuous port is used to connect to uplink devices while the Host port is used to connect to the he terminal hosts, such as PC and Server.
OCT portNum	1.3.6.1.4.1.11863.6.18.1.2.1.1	OCTET STRING	read-only	The port id.
INT portType	1.3.6.1.4.1.11863.6.18.1.2.1.2	INTEGER	read-create	The Port Type for the port. 1. promiscuous 2. host
INT portConfigPrimaryVlan	1.3.6.1.4.1.11863.6.18.1.2.1.3	INTEGER	read-create	Specify the Primary VLAN the port belongs to.
INT portConfigsecondaryVlan	1.3.6.1.4.1.11863.6.18.1.2.1.4	INTEGER	read-create	Specify the Secondary VLAN the port belongs to.
TPR vlanPortStatus	1.3.6.1.4.1.11863.6.18.1.2.1.5	TPRowStatus	read-create	the following two values are states: these values may be read or written active(1), notInService(2), the following value is a state: this value may be read, but not written notReady(3), the following three values are actions: these values may be written, but are never read createAndGo(4), createAndWait(5), destroy(6)
tplinkPrivateVlanMIBNotifications	1.3.6.1.4.1.11863.6.18.2

RFC description

Vendor-private MIB for TP-Link switches; manages Private VLAN (PVLAN) configuration for bandwidth conservation and broadcast reduction.

Start monitoring TP-Link managed switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TPLINK-PRIVATE-VLAN-MIB

What Is TPLINK-PRIVATE-VLAN-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description