All MIBs › XYLAN-MGMTSTN-MIB
Category: Xylan OmniSwitch
Description:
Covers management station access control on Xylan OmniSwitch equipment, including SNMP community configuration.
Imported Objects
From RFC-1212
| OBJECT-TYPE |
From RFC1155-SMI
| IpAddress |
From RFC1213-MIB
| DisplayString |
From XYLAN-BASE-MIB
| xylanTrapArch | OBJECT-IDENTITY |
What Is XYLAN-MGMTSTN-MIB?
XYLAN-MGMTSTN-MIB is a private Xylan enterprise MIB that manages management-station access control for OmniSwitch devices, governing which hosts are permitted to manage the switch and via which SNMP community strings. It is expected to expose a management-station table listing permitted station IP addresses, associated community strings, and access privilege levels, following the xylan-prefixed object-naming convention used across the vendor's MIB set. Its monitoring/audit value is primarily configuration-status oriented: confirming which stations and communities currently have management access, which is important for detecting unauthorized or stale management entries rather than hardware performance. It is Xylan-specific and does not appear to depend on standard SNMP-framework MIBs beyond the basic community-based security conventions of SNMPv1/v2c. It would be deployed on Xylan (later Alcatel) OmniSwitch devices where network security/operations teams audit SNMP management access control. Security teams look up the XYLAN-MGMTSTN-MIB OID structure when auditing exactly which management-station entries and community strings are currently in force on a given switch.
IPNetwork Monitor allows you to monitor SNMP objects defined in XYLAN-MGMTSTN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- management station access list
- SNMP community string assignment
- management access privilege level
Supported Devices
- Xylan (Alcatel) OmniSwitch device (legacy management-station access-control configuration)
Monitoring Examples
No sample objects were provided for this module, but by analogy with other Xylan MIBs' naming pattern, a likely management-station table would list entries keyed by station IP address along with an associated community string and access level. An administrator would review such a table periodically to confirm that only authorized management stations retain SNMP write access, flagging any unexpected or stale entry as a potential security exposure. This is inferred from naming convention, not confirmed sample data for this exact module.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| mgmtControl | 1.3.6.1.4.1.800.2.5.1 | |||
| trapTable | 1.3.6.1.4.1.800.2.5.1.1 | not-accessible | A list of management stations. | |
| trapEntry | 1.3.6.1.4.1.800.2.5.1.1.1 | not-accessible | A management station entry. | |
| INT stationIndex | 1.3.6.1.4.1.800.2.5.1.1.1.1 | INTEGER | read-write | The entry index for a given row. A row create is done by specifying a row of 0 with the new row values. |
| IP stationIP | 1.3.6.1.4.1.800.2.5.1.1.1.2 | IpAddress | read-write | The IP address of this management entity. A delete may be performed by specifying the current row index with the new IP of 0. |
| INT stationPort | 1.3.6.1.4.1.800.2.5.1.1.1.3 | INTEGER | read-write | The UDP port used by this management entity. This defaults to the SNMP-TRAP port 162 |
| STR stationCommunity | 1.3.6.1.4.1.800.2.5.1.1.1.4 | DisplayString | read-write | The community string used by this entity. Currently NOT implimented on a per NMS basis. |
| OCT stationTrapFlags | 1.3.6.1.4.1.800.2.5.1.1.1.5 | OCTET STRING | read-write | The trap mask flags for this entity. Currently this is four unsigned ints. The default value is ALL traps enabled to this entity -> f's. The actual order of flag words sent is 0->3.... In the Xylan agent implimentation, Enable and SA are taken from the first two bits in the string. |
| INT stationEnable | 1.3.6.1.4.1.800.2.5.1.1.1.6 | INTEGER | read-write | The enable flag for this NMS. if 1 traps are not sent to this station, if 2 trap are sent. 3 indicates that a row deletion is desired. |
| INT stationSAPrivs | 1.3.6.1.4.1.800.2.5.1.1.1.7 | INTEGER | read-write | The SA priviledge flag for this NMS. If this is 2, this NMS can modify and delete any entry in the NMS table. Otherwise it is 1 and this station can modify/delete only it's own entry. NOTE: a station can't create a new entry for itself with the SA mode set.... (kinda defeats the SA doesn't it?). |
| trapBindings | 1.3.6.1.4.1.800.2.5.2 | |||
| INT systemEventTrapNumber | 1.3.6.1.4.1.800.2.5.2.1 | INTEGER | not-accessible | This variable is bound to the systemEvent trap. It indicates which system resource is in short supply. 10 Unspecified log event 11 Log file full 12 Log file erased 20 Unspecified memory event 21 Memory shortage 30 Unsepcified CPU event 31 Long term CPU overload 32 Short term CPU overload 40 Unspecified ffs event 41 Attempt to write to full ffs 42 System/user directed purge 43 Removed imgs/cfgs 44 Exec file removed 45 Config file removed 46 Exec file updated 47 Config file updated 50 Unspecified chassis event 51 Module failed to init 52 Module failed to load 53 Module startup failed 54 Module failed 55 Driver failed |
| STR systemEventTrapString | 1.3.6.1.4.1.800.2.5.2.2 | DisplayString | not-accessible | This variable is bound to the systemEvent trap. If it is present it will furthor clarify the specific system trap. |
FAQ
How would a security team use XYLAN-MGMTSTN-MIB to audit SNMP access on an OmniSwitch device?
The MIB exposes a management-station table listing which host IP addresses are permitted to manage the switch, the SNMP community strings associated with them, and their access privilege levels. A security team would walk this table to confirm exactly which stations and communities currently have management access, catching unauthorized or stale entries left over from earlier configurations.
Is XYLAN-MGMTSTN-MIB more about performance monitoring or configuration auditing?
It's oriented toward configuration and access auditing rather than performance: its value is confirming which management stations and community strings are currently in force on a Xylan (later Alcatel) OmniSwitch, which matters for detecting unauthorized management access rather than tracking hardware throughput or health metrics.
RFC description
Manages Xylan OmniSwitch management station access control and SNMP community configuration.
Start monitoring Xylan (Alcatel) OmniSwitch device (management-station/community-string access-control config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.