ZYXEL-BPDU-GUARD-MIB

All MIBs › ZYXEL-BPDU-GUARD-MIB

Organization: Enterprise Solution Zyxel

Last Updated: 2014-10-23

Category: ZyXEL Security and Access Control

Description: Manages ZyXEL BPDU Guard feature to protect spanning tree topology by disabling ports receiving unexpected BPDUs.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZYXEL-BPDU-GUARD-MIB?

ZYXEL-BPDU-GUARD-MIB is a ZyXEL private module for the BPDU Guard spanning-tree protection feature, which automatically disables (err-disables) a port if it unexpectedly receives a Bridge Protocol Data Unit, protecting the STP topology from rogue switches or loops introduced on access ports. It exposes configuration objects to enable BPDU Guard per port and status objects reflecting whether a port has been shut down due to a BPDU violation. Its monitoring value is a clear fault-detection use case: polling per-port BPDU Guard status reveals whether a port has been err-disabled, which directly indicates an unauthorized switch, loop, or misconfigured device was plugged into an access port. It is closely tied to standard spanning-tree MIBs (e.g., BRIDGE-MIB/RSTP extensions) since it acts on ports participating in the spanning tree. It is deployed on ZyXEL access-layer switches on edge ports where end devices (not other switches) are expected to connect. Engineers can download the ZYXEL-BPDU-GUARD-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZYXEL-BPDU-GUARD-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ZyXEL managed switch

Monitoring Examples

No sample objects were provided for this module, so specific object names cannot be cited; conceptually, an administrator would poll per-port BPDU Guard enable status and the resulting err-disabled/shutdown state to confirm protected ports remain up under normal conditions. A port that has transitioned to an err-disabled state would reveal that a BPDU was received on an access port, indicating an unauthorized switch or network loop was connected.

What Can Be Monitored

BPDU Guard enable status per port
port err-disabled/shutdown status
BPDU violation event

Imported Objects

From BRIDGE-MIB

dot1dBasePort

OBJECT-TYPE

From P-BRIDGE-MIB

EnabledStatus

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE

From ZYXEL-ES-SMI

esMgmt

OBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using zyBpduGuardPortInfoStatus OID:

Select a ZyXEL managed switch (BPDU Guard per-port err-disable status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type zyBpduGuardPortInfoStatus into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports bPDU guard status on the port. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the value is anything other than 'forwarding', since that indicates the condition this object reports has changed to one worth investigating. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
zyxelBpduGuard	1.3.6.1.4.1.890.1.15.3.104			The subtree for bpdu guard
zyxelBpduGuardSetup	1.3.6.1.4.1.890.1.15.3.104.1
ENA zyBpduGuardState	1.3.6.1.4.1.890.1.15.3.104.1.1	EnabledStatus	read-write	Enable/Disable BPDU guard on the switch.
zyxelBpduGuardPortTable	1.3.6.1.4.1.890.1.15.3.104.1.2		not-accessible	The table contains BPDU guard port configuration.
zyxelBpduGuardPortEntry	1.3.6.1.4.1.890.1.15.3.104.1.2.1		not-accessible	An entry contains BPDU guard port configuration.
ENA zyBpduGuardPortState	1.3.6.1.4.1.890.1.15.3.104.1.2.1.1	EnabledStatus	read-write	Enable/Disable BPDU guard on the port.
zyxelBpduGuardStatus	1.3.6.1.4.1.890.1.15.3.104.2
zyxelBpduGuardPortInfoTable	1.3.6.1.4.1.890.1.15.3.104.2.1		not-accessible	The table contains BPDU guard port status.
zyxelBpduGuardPortInfoEntry	1.3.6.1.4.1.890.1.15.3.104.2.1.1		not-accessible	An entry contains BPDU guard port status.
INT zyBpduGuardPortInfoStatusEx	1.3.6.1.4.1.890.1.15.3.104.2.1.1.1	INTEGER	read-only	BPDU guard status on the port.

RFC description

Manages BPDU (Bridge Protocol Data Unit) guard settings on Zyxel switches to prevent spanning tree topology violations.

Start monitoring ZyXEL managed switch (BPDU Guard per-port err-disable status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZYXEL-BPDU-GUARD-MIB