XYLAN-MGMTSTN-MIB

All MIBs › XYLAN-MGMTSTN-MIB

Category: Xylan OmniSwitch

Description: Covers management station access control on Xylan OmniSwitch equipment, including SNMP community configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is XYLAN-MGMTSTN-MIB?

XYLAN-MGMTSTN-MIB is a private Xylan enterprise MIB that manages management-station access control for OmniSwitch devices, governing which hosts are permitted to manage the switch and via which SNMP community strings. It is expected to expose a management-station table listing permitted station IP addresses, associated community strings, and access privilege levels, following the xylan-prefixed object-naming convention used across the vendor's MIB set. Its monitoring/audit value is primarily configuration-status oriented: confirming which stations and communities currently have management access, which is important for detecting unauthorized or stale management entries rather than hardware performance. It is Xylan-specific and does not appear to depend on standard SNMP-framework MIBs beyond the basic community-based security conventions of SNMPv1/v2c. It would be deployed on Xylan (later Alcatel) OmniSwitch devices where network security/operations teams audit SNMP management access control. Security teams look up the XYLAN-MGMTSTN-MIB OID structure when auditing exactly which management-station entries and community strings are currently in force on a given switch.

IPNetwork Monitor allows you to monitor SNMP objects defined in XYLAN-MGMTSTN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Xylan (Alcatel) OmniSwitch device (legacy management-station access-control configuration)

Monitoring Examples

No sample objects were provided for this module, but by analogy with other Xylan MIBs' naming pattern, a likely management-station table would list entries keyed by station IP address along with an associated community string and access level. An administrator would review such a table periodically to confirm that only authorized management stations retain SNMP write access, flagging any unexpected or stale entry as a potential security exposure. This is inferred from naming convention, not confirmed sample data for this exact module.

What Can Be Monitored

management station access list
SNMP community string assignment
management access privilege level

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

IpAddress

From RFC1213-MIB

DisplayString

From XYLAN-BASE-MIB

xylanTrapArch

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
mgmtControl	1.3.6.1.4.1.800.2.5.1
STR stationCommunity	1.3.6.1.4.1.800.2.5.1.1.1.4	DisplayString	read-write	The community string used by this entity. Currently NOT implimented on a per NMS basis.
INT stationEnable	1.3.6.1.4.1.800.2.5.1.1.1.6	INTEGER	read-write	The enable flag for this NMS. if 1 traps are not sent to this station, if 2 trap are sent. 3 indicates that a row deletion is desired.
INT stationIndex	1.3.6.1.4.1.800.2.5.1.1.1.1	INTEGER	read-write	The entry index for a given row. A row create is done by specifying a row of 0 with the new row values.
IP stationIP	1.3.6.1.4.1.800.2.5.1.1.1.2	IpAddress	read-write	The IP address of this management entity. A delete may be performed by specifying the current row index with the new IP of 0.
INT stationPort	1.3.6.1.4.1.800.2.5.1.1.1.3	INTEGER	read-write	The UDP port used by this management entity. This defaults to the SNMP-TRAP port 162
INT stationSAPrivs	1.3.6.1.4.1.800.2.5.1.1.1.7	INTEGER	read-write	The SA priviledge flag for this NMS. If this is 2, this NMS can modify and delete any entry in the NMS table. Otherwise it is 1 and this station can modify/delete only it's own entry. NOTE: a station can't create a new entry for itself with the SA mode set.... (kinda defeats the SA doesn't it?).
OCT stationTrapFlags	1.3.6.1.4.1.800.2.5.1.1.1.5	OCTET STRING	read-write	The trap mask flags for this entity. Currently this is four unsigned ints. The default value is ALL traps enabled to this entity -> f's. The actual order of flag words sent is 0->3.... In the Xylan agent implimentation, Enable and SA are taken from the first two bits in the string.
INT systemEventTrapNumber	1.3.6.1.4.1.800.2.5.2.1	INTEGER	not-accessible	This variable is bound to the systemEvent trap. It indicates which system resource is in short supply. 10 Unspecified log event 11 Log file full 12 Log file erased 20 Unspecified memory event 21 Memory shortage 30 Unsepcified CPU event 31 Long term CPU overload 32 Short term CPU overload 40 Unspecified ffs event 41 Attempt to write to full ffs 42 System/user directed purge 43 Removed imgs/cfgs 44 Exec file removed 45 Config file removed 46 Exec file updated 47 Config file updated 50 Unspecified chassis event 51 Module failed to init 52 Module failed to load 53 Module startup failed 54 Module failed 55 Driver failed
STR systemEventTrapString	1.3.6.1.4.1.800.2.5.2.2	DisplayString	not-accessible	This variable is bound to the systemEvent trap. If it is present it will furthor clarify the specific system trap.
trapBindings	1.3.6.1.4.1.800.2.5.2
trapEntry	1.3.6.1.4.1.800.2.5.1.1.1		not-accessible	A management station entry.
trapTable	1.3.6.1.4.1.800.2.5.1.1		not-accessible	A list of management stations.

FAQ

How would a security team use XYLAN-MGMTSTN-MIB to audit SNMP access on an OmniSwitch device?
The MIB exposes a management-station table listing which host IP addresses are permitted to manage the switch, the SNMP community strings associated with them, and their access privilege levels. A security team would walk this table to confirm exactly which stations and communities currently have management access, catching unauthorized or stale entries left over from earlier configurations.

Is XYLAN-MGMTSTN-MIB more about performance monitoring or configuration auditing?
It's oriented toward configuration and access auditing rather than performance: its value is confirming which management stations and community strings are currently in force on a Xylan (later Alcatel) OmniSwitch, which matters for detecting unauthorized management access rather than tracking hardware throughput or health metrics.

RFC description

Manages Xylan OmniSwitch management station access control and SNMP community configuration.

Start monitoring Xylan (Alcatel) OmniSwitch device (management-station/community-string access-control config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download XYLAN-MGMTSTN-MIB

What Is XYLAN-MGMTSTN-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

FAQ

RFC description