ZYXEL-ERR-DISABLE-MIB

All MIBs › ZYXEL-ERR-DISABLE-MIB

Organization: Enterprise Solution ZyXEL

Last Updated: 2012-07-01

Category: ZyXEL Security and Access Control

Description: Manages ZyXEL error-disable recovery for automatic re-enabling of ports shut down due to security violations.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZYXEL-ERR-DISABLE-MIB?

ZYXEL-ERR-DISABLE-MIB is a ZyXEL enterprise MIB modeling the errdisable subsystem, the mechanism that automatically shuts down a switch port when a security violation, loop, or other fault condition is detected. It exposes configuration controlling which trigger conditions (port security violations, BPDU guard, storm control, etc.) cause a port to be error-disabled, plus the recovery timers used to automatically re-enable those ports. Though largely a policy/configuration MIB, it is directly relevant to fault monitoring: administrators use it to see which ports are currently disabled and why, functioning as a link-fault status indicator, and to confirm auto-recovery timing so a compromised or flapping port does not stay silently offline. It shares port-indexing conventions with IF-MIB and works alongside other ZyXEL feature MIBs (port security, storm control) whose violations trigger errdisable events. It is deployed on ZyXEL access and aggregation switches wherever automated port lockout and self-healing recovery are used to contain faults or attacks. Network engineers evaluating or troubleshooting this functionality can download the ZYXEL-ERR-DISABLE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZYXEL-ERR-DISABLE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ZyXEL managed switch

Monitoring Examples

No sample objects were included for this MIB, but a module of this kind typically defines an err-disable status/cause table keyed by port index recording the trigger reason and a recovery-interval object. An operator would poll this table to see whether a port entered err-disable state due to a port-security or storm-control violation and whether the configured recovery timer has re-enabled it; persistent disablement without recovery would indicate an ongoing attack or fault.

What Can Be Monitored

port error-disable status
error-disable trigger cause
auto-recovery timer
affected port index

Imported Objects

From P-BRIDGE-MIB

EnabledStatus

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From ZYXEL-ES-SMI

esMgmt

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
NTF zyErrdisableDetect	1.3.6.1.4.1.890.1.15.3.24.4.1			The trap is sent when an error is detected on a port, such as a loop occurs or the rate limit for specific control packets is exceeded.
INT zyErrdisableDetectReasonMode	1.3.6.1.4.1.890.1.15.3.24.1.2.1.1.3	INTEGER	read-write	Select the mode that the switch takes when the number of control packets exceeds the rate limit on a port, set in the CPU protection. inactivePort - The switch disables the port on which the control packets are received. inactiveReason - The switch bypasses the processing of the specified control packets (such as ARP or IGMP packets), or drops all the specified control packets (such as BPDU) on the port. rateLimitation - The switch drops the additional control packets the port has to handle in every one second.
ENA zyErrdisableDetectReasonState	1.3.6.1.4.1.890.1.15.3.24.1.2.1.1.2	EnabledStatus	read-write	Enable/Disable the detection on switch to monitor if the configured rate limit for a specific control packet is exceeded and take the mode selected below.
INT zyErrdisableDetectReasonType	1.3.6.1.4.1.890.1.15.3.24.1.2.1.1.1	INTEGER	not-accessible	This field displays the type of control packets that may cause CPU overload.
NTF zyErrdisableRecovery	1.3.6.1.4.1.890.1.15.3.24.4.2			This trap is sent when the switch ceases the action taken on a port, such as shutting down the port or discarding packets on the port, after the specified recovery interval.
INT zyErrdisableRecoveryPort	1.3.6.1.4.1.890.1.15.3.24.2.1.1.2	INTEGER	not-accessible	This field displays which port(s) are shut down or discard packets by above reason.
INT zyErrdisableRecoveryReasonInterval	1.3.6.1.4.1.890.1.15.3.24.1.1.2.1.3	INTEGER	read-write	Enter the number of seconds (from 30 to 2592000) for the switch to wait before enabling the port which was shut down.
ENA zyErrdisableRecoveryReasonState	1.3.6.1.4.1.890.1.15.3.24.1.1.2.1.2	EnabledStatus	read-write	Enable/Disable this entry to allow/prohibit the switch to activate a port after the specified time interval, which is shut down by the supported feature.
INT zyErrdisableRecoveryReasonType	1.3.6.1.4.1.890.1.15.3.24.1.1.2.1.1	INTEGER	not-accessible	This entry displays the supported features that allow the switch to shut down a port or discard packets on a port according to the feature requirements and what action you configure.
ENA zyErrdisableRecoveryState	1.3.6.1.4.1.890.1.15.3.24.1.1.1	EnabledStatus	read-write	Enable/Disable error disabled port recovery feature on the switch. Some features, such as loop guard, allow the switch to shut down a port when an error is detected on the port. For example, if the switch detects that packets sent out the port(s) loop back to the switch, the switch can shut down the port(s) automatically. After that, you need to enable the port(s) manually. With disabled port recovery, you can set the disabled port(s) to become active again after the time interval you specify.
INT zyErrdisableRecoveryTimeToRecover	1.3.6.1.4.1.890.1.15.3.24.2.1.1.3	INTEGER	read-only	This field displays how long (seconds) those ports will be re-activated.
INT zyErrdisableRecoveryType	1.3.6.1.4.1.890.1.15.3.24.2.1.1.1	INTEGER	not-accessible	This field displays the supported features that allow the switch to shut down a port or discard packets on a port according to the feature requirements and what action you configure.
INT zyErrdisableTrapMode	1.3.6.1.4.1.890.1.15.3.24.3.3	INTEGER	read-only	This trap displays which error disable mode on this port.
INT zyErrdisableTrapPort	1.3.6.1.4.1.890.1.15.3.24.3.1	INTEGER	read-only	This trap displays error disable detect on which port(s) by reason below.
INT zyErrdisableTrapReasonType	1.3.6.1.4.1.890.1.15.3.24.3.2	INTEGER	read-only	This trap displays which port(s) are shut down or discard packets by mode below.
zyxelErrdisable	1.3.6.1.4.1.890.1.15.3.24			The subtree for errdisable
zyxelErrdisableDetect	1.3.6.1.4.1.890.1.15.3.24.1.2
zyxelErrdisableDetectReasonEntry	1.3.6.1.4.1.890.1.15.3.24.1.2.1.1		not-accessible	An entry contains errdisable detect reason configuration.
zyxelErrdisableDetectReasonTable	1.3.6.1.4.1.890.1.15.3.24.1.2.1		not-accessible	The table contains errdisable detect reason configuration.
zyxelErrdisableNotifications	1.3.6.1.4.1.890.1.15.3.24.4
zyxelErrdisableRecovery	1.3.6.1.4.1.890.1.15.3.24.1.1
zyxelErrdisableRecoveryEntry	1.3.6.1.4.1.890.1.15.3.24.2.1.1		not-accessible	An entry contains errdisable recovery information.
zyxelErrdisableRecoveryReasonEntry	1.3.6.1.4.1.890.1.15.3.24.1.1.2.1		not-accessible	An entry contains errdisable recovery reason configuration.
zyxelErrdisableRecoveryReasonTable	1.3.6.1.4.1.890.1.15.3.24.1.1.2		not-accessible	The table contains errdisable recovery reason configuration.
zyxelErrdisableRecoveryTable	1.3.6.1.4.1.890.1.15.3.24.2.1		not-accessible	The table contains errdisable recovery information.
zyxelErrdisableSetup	1.3.6.1.4.1.890.1.15.3.24.1
zyxelErrdisableStatus	1.3.6.1.4.1.890.1.15.3.24.2
zyxelErrdisableTrapInfoObject	1.3.6.1.4.1.890.1.15.3.24.3

RFC description

Vendor-private MIB for Zyxel equipment managing errdisable functionality to automatically disable ports/interfaces on error conditions.

Start monitoring ZyXEL managed switch (errdisable trigger-condition/port-recovery-timer status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZYXEL-ERR-DISABLE-MIB

What Is ZYXEL-ERR-DISABLE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description