ZTE-AN-SECURITY-ISOLATION-MIB

MIB Reference — IPNetwork Monitor · Updated October 06, 2026

All MIBs › ZTE-AN-SECURITY-ISOLATION-MIB

Organization: ZTE Corporation

Last Updated: 2011-05-31

Category: Network Security, ZTE Access Node (ZTE-AN) Management

Description: Manages ZTE access node subscriber traffic isolation policies to prevent inter-subscriber communication.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZTE-AN-SECURITY-ISOLATION-MIB?

ZTE-AN-SECURITY-ISOLATION-MIB is part of ZTE's Access Node security feature set and implements subscriber traffic isolation, a Layer 2 mechanism (similar to private VLAN/port isolation) that prevents direct communication between subscriber ports, forcing all traffic through the network uplink. It exposes per-port isolation-group configuration and enable state. It is fundamentally a security-configuration MIB, useful for confirming a port's isolation setting is correctly applied rather than for reporting hardware faults, though a misconfigured isolation state can itself be treated as a security-relevant fault condition. It builds on standard Ethernet VLAN/bridging concepts (IEEE 802.1Q). It is typically deployed on broadband access switches to enforce subscriber-to-subscriber traffic segregation for security and privacy. Engineers can download the ZTE-AN-SECURITY-ISOLATION-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZTE-AN-SECURITY-ISOLATION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • ZTE access node (DSLAM/OLT/Ethernet access switch)

Monitoring Examples

No specific object names were present in the source, so the following scenario is inferred from module_desc: an operator would check the isolation configuration for a subscriber port to confirm it is correctly placed in an isolated group. A port found not to be isolated when it should be would explain unexpected peer-to-peer traffic being observed between two subscriber ports, a security-relevant misconfiguration.

What Can Be Monitored

  • port isolation enable state
  • isolation group membership
  • isolated port list
Imported Objects

From IF-MIB

ifIndexOBJECT-TYPE

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION

From ZTE-AN-IF-MIB

zxAnSubIfIndexOBJECT-TYPE

From ZTE-AN-SMI

zxAnServiceSecurityOBJECT-IDENTITY

From ZTE-AN-TC-MIB

VlanId
OIDs

RFC description

Manages security isolation features on ZTE Access Node equipment, including port isolation, VLAN isolation, and security protection controls for ethernet switch ports.

Start monitoring ZTE access node (DSLAM/OLT/Ethernet access switch) (per-port traffic-isolation-group config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZTE-AN-SECURITY-ISOLATION-MIB