ZYXEL-IPSG-MIB

All MIBs › ZYXEL-IPSG-MIB

Organization: Enterprise Solution ZyXEL

Last Updated: 2012-07-01

Category: ZyXEL Security and Access Control

Description: Manages ZyXEL IP Source Guard binding tables to prevent IP spoofing by validating source IP and MAC.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZYXEL-IPSG-MIB?

ZYXEL-IPSG-MIB is a vendor-specific MIB from ZyXEL Communications covering the IP Source Guard (IPSG) feature on ZyXEL managed switches and routers. It exposes configuration and status data for binding tables that pair a validated source IP address, MAC address, VLAN, and port together, used to block IP/MAC spoofing at Layer 2. Its data is mostly security/access-control configuration rather than classic hardware health, but it does let an administrator confirm the software's current enforcement status and binding table state, which is a form of software-status monitoring for the anti-spoofing feature. It is a self-contained ZyXEL enterprise MIB with no strong stated dependency on other standard MIBs beyond the usual SNMPv2-SMI conventions. It is deployed on ZyXEL edge switches and gateways in networks that need to prevent DHCP/ARP spoofing attacks at the access layer, and administrators often consult the ZYXEL-IPSG-MIB MIB Browser page to review its binding-table object definitions.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZYXEL-IPSG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ZyXEL managed switch
ZyXEL security gateway/router

Monitoring Examples

An administrator would poll the IPSG binding table (the IP-to-MAC-to-port bindings referenced by the module's IP Source Guard subtree) to verify that only expected host addresses are bound to each port, and would watch for missing or unexpected bindings that indicate a spoofing attempt or misconfigured DHCP snooping. Because sample_objects is empty for this entry, exact object names cannot be confirmed beyond the general IPSG binding table structure described in the module.

What Can Be Monitored

IP Source Guard enable/disable status
IP-to-MAC-to-port binding entries
static vs dynamic binding source
binding table entry count

Imported Objects

From Q-BRIDGE-MIB

PortList

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

MacAddress
RowStatus

From ZYXEL-ES-SMI

esMgmt

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
zyxelIpsg	1.3.6.1.4.1.890.1.15.3.33			The subtree for IP Source Guard (IPSG)
zyxelArpFreezeSetup	1.3.6.1.4.1.890.1.15.3.33.1
INT zyArpFreeze	1.3.6.1.4.1.890.1.15.3.33.1.1	INTEGER	read-write	Add all learned ARP table entries to static binding table. It's meaningless while reading this entry.
POR zyArpFreezePorts	1.3.6.1.4.1.890.1.15.3.33.1.2	PortList	read-write	Add learned ARP table entries to static binding table by ports. It's meaningless while reading this entry.
INT zyArpFreezeVlan	1.3.6.1.4.1.890.1.15.3.33.1.3	INTEGER	read-write	Add learned ARP table entries to static binding table by VLAN. It's meaningless while reading this entry.
zyxelIpsgStatus	1.3.6.1.4.1.890.1.15.3.33.2
zyxelIpsgInfoTable	1.3.6.1.4.1.890.1.15.3.33.2.1		not-accessible	The table contains IGMP information.
zyxelIpsgInfoEntry	1.3.6.1.4.1.890.1.15.3.33.2.1.1		not-accessible	An entry contains IGMP information.
MAC zyIpsgInfoMacAddress	1.3.6.1.4.1.890.1.15.3.33.2.1.1.1	MacAddress	not-accessible	The source MAC address in the binding.
INT zyIpsgInfoVid	1.3.6.1.4.1.890.1.15.3.33.2.1.1.2	INTEGER	not-accessible	The source VLAN ID in the binding.
IP zyIpsgInfoIpAddress	1.3.6.1.4.1.890.1.15.3.33.2.1.1.3	IpAddress	read-only	The IP address assigned to the MAC address in the binding.
INT zyIpsgInfoLeaseTime	1.3.6.1.4.1.890.1.15.3.33.2.1.1.4	INTEGER	read-only	This entry displays how much time (seconds) the binding is valid. This entry displays value 0 if the binding is always valid (for example, a static binding).
INT zyIpsgInfoType	1.3.6.1.4.1.890.1.15.3.33.2.1.1.5	INTEGER	read-only	This entry displays how the switch learned the binding. static: This binding was learned from information provided manually by an administrator. dhcp: This binding was learned by snooping DHCP packets.
INT zyIpsgInfoPort	1.3.6.1.4.1.890.1.15.3.33.2.1.1.6	INTEGER	read-only	The port number in the binding. The value 0 means any port.
zyxelStaticBindingSetup	1.3.6.1.4.1.890.1.15.3.33.3
INT zyStaticBindingMaxNumberOfRules	1.3.6.1.4.1.890.1.15.3.33.3.1	INTEGER	read-only	The maximum number of static binding rules that can be created.
zyxelStaticBindingTable	1.3.6.1.4.1.890.1.15.3.33.3.2		not-accessible	The table contains static binding configuration.
zyxelStaticBindingEntry	1.3.6.1.4.1.890.1.15.3.33.3.2.1		not-accessible	An entry contains static binding configuration.
MAC zyStaticBindingMacAddress	1.3.6.1.4.1.890.1.15.3.33.3.2.1.1	MacAddress	not-accessible	The source MAC address in the binding.
INT zyStaticBindingVid	1.3.6.1.4.1.890.1.15.3.33.3.2.1.2	INTEGER	not-accessible	The IP address assigned to the MAC address in the binding.
IP zyStaticBindingIpAddress	1.3.6.1.4.1.890.1.15.3.33.3.2.1.3	IpAddress	read-write	Enter the source VLAN ID in the binding.
INT zyStaticBindingPort	1.3.6.1.4.1.890.1.15.3.33.3.2.1.4	INTEGER	read-write	Enter the port number in the binding. The value 0 means any port.
ROW zyStaticBindingRowStatus	1.3.6.1.4.1.890.1.15.3.33.3.2.1.5	RowStatus	read-create	This object allows static binding entries to be created and deleted from static binding table.

RFC description

ZyXEL IP Source Guard (IPSG) MIB module for managing IP source guard functionality, including ARP freeze setup and static IP-MAC bindings.

Start monitoring ZyXEL managed switch, ZyXEL security gateway/router (IP Source Guard binding-table enforcement status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZYXEL-IPSG-MIB

What Is ZYXEL-IPSG-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description