ZYXEL-IPv6SG-MIB

All MIBs › ZYXEL-IPv6SG-MIB

Organization: Enterprise Solution ZyXEL

Last Updated: 2015-01-01

Category: ZyXEL Security and Access Control

Description: Covers ZyXEL IPv6 Source Guard configuration, which validates the source of IPv6 packets in order to prevent address spoofing.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZYXEL-IPv6SG-MIB?

The ZYXEL-IPv6SG-MIB is a vendor-specific ZyXEL module that defines the object identifier subtree for IPv6 Source Guard (IPv6SG), a security feature used to validate the source of IPv6 packets and block address-spoofing attacks on ZyXEL switches. As published, the module consists mainly of the top-level registration node under which ZyXEL's IPv6SG configuration and binding-table objects are organized, rather than a full set of defined leaf objects visible in the source. In practice such a subtree would expose configuration state such as which ports/VLANs have IPv6 Source Guard enabled and the associated static/dynamic binding entries, though the specific leaf objects are not present in the reference sample. Rather than hardware health telemetry, this MIB is oriented toward security/software feature status - whether the anti-spoofing feature is active and correctly bound to legitimate hosts. It depends on ZyXEL's private enterprise MIB tree and general IPv6 networking standards, and is typically deployed in enterprise or campus networks running ZyXEL managed switches where IPv6 access-layer security is required, with ZYXEL-IPv6SG-MIB SNMP monitoring intended to confirm Source Guard bindings stay legitimate.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZYXEL-IPv6SG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ZyXEL managed switches

Monitoring Examples

Because sample_objects is empty for this MIB, no concrete object or table names can be confirmed; the module appears to define only the registration subtree for IPv6SG rather than a populated set of monitorable leaf objects. An administrator would normally expect this subtree to eventually hold per-port or per-VLAN IPv6SG binding tables, but without object names in the source a realistic polling scenario cannot be honestly described.

Imported Objects

From BRIDGE-MIB

dot1dBasePort

OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From P-BRIDGE-MIB

EnabledStatus

From Q-BRIDGE-MIB

PortList

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
MacAddress
RowStatus

From ZYXEL-ES-SMI

esMgmt

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
ENA zyIpv6sgBindingClear	1.3.6.1.4.1.890.1.15.3.108.2.2.1.9	EnabledStatus	read-write	This entry is used to clear this dynamic binding entry.
ENA zyIpv6sgBindingClearAll	1.3.6.1.4.1.890.1.15.3.108.2.1	EnabledStatus	read-write	This entry is used to clear all dynamic entries from the binding table.
IP zyIpv6sgBindingIpv6Address	1.3.6.1.4.1.890.1.15.3.108.2.2.1.2	InetAddress	not-accessible	The IPv6 address assigned to the MAC address in the binding table.
IPt zyIpv6sgBindingIpv6AddressType	1.3.6.1.4.1.890.1.15.3.108.2.2.1.1	InetAddressType	not-accessible	The type of IPv6 address.
INT zyIpv6sgBindingIpv6PrefixLength	1.3.6.1.4.1.890.1.15.3.108.2.2.1.3	INTEGER	not-accessible	The prefix length of IPv6 address. The value 128 means it is a IPv6 address.
INT zyIpv6sgBindingLeaseTime	1.3.6.1.4.1.890.1.15.3.108.2.2.1.7	INTEGER	read-only	This entry displays how much time (seconds) the binding is valid. This entry displays value 0 if the binding is always valid (for example, a static binding).
MAC zyIpv6sgBindingMacAddress	1.3.6.1.4.1.890.1.15.3.108.2.2.1.4	MacAddress	read-only	The source MAC address in this binding entry.The value 0.0.0.0.0.0 means mac is don't care.
INT zyIpv6sgBindingPort	1.3.6.1.4.1.890.1.15.3.108.2.2.1.6	INTEGER	read-only	The port number in the binding. The value 0 means any port.
INT zyIpv6sgBindingType	1.3.6.1.4.1.890.1.15.3.108.2.2.1.8	INTEGER	read-only	This entry displays how the switch learned the binding. static: This binding was learned from information provided manually by an administrator. dhcp: This binding was learned by snooping DHCP packets.
INT zyIpv6sgBindingVid	1.3.6.1.4.1.890.1.15.3.108.2.2.1.5	INTEGER	read-only	The VLAN number sets in this binding entry.
STR zyIpv6sgPolicyName	1.3.6.1.4.1.890.1.15.3.108.1.4.1.1	DisplayString	not-accessible	The name of IPv6 source guard policy.
ENA zyIpv6sgPolicyPermitLinkLocalState	1.3.6.1.4.1.890.1.15.3.108.1.4.1.4	EnabledStatus	read-write	Enable/Disable permit Link-Local on this IPv6 source guard.
STR zyIpv6sgPolicyPortAttachPolicy	1.3.6.1.4.1.890.1.15.3.108.1.5.1.1	DisplayString	read-write	Name of IPv6 source guard policy in specified port.
ROW zyIpv6sgPolicyRowStatus	1.3.6.1.4.1.890.1.15.3.108.1.4.1.100	RowStatus	read-create	This object allows IPv6 source guard policy entries to be created and deleted.
ENA zyIpv6sgPolicyValidateAddressState	1.3.6.1.4.1.890.1.15.3.108.1.4.1.2	EnabledStatus	read-write	Enable/Disable validate address on this IPv6 source guard.
ENA zyIpv6sgPolicyValidatePrefixState	1.3.6.1.4.1.890.1.15.3.108.1.4.1.3	EnabledStatus	read-write	Enable/Disable validate prefix on this IPv6 source guard.
IP zyIpv6sgStaticBindingIpv6Address	1.3.6.1.4.1.890.1.15.3.108.1.2.1.2	InetAddress	not-accessible	The source of IPv6 address in this binding entry.
IPt zyIpv6sgStaticBindingIpv6AddressType	1.3.6.1.4.1.890.1.15.3.108.1.2.1.1	InetAddressType	not-accessible	The type of IPv6 address.
INT zyIpv6sgStaticBindingIpv6PrefixLength	1.3.6.1.4.1.890.1.15.3.108.1.2.1.3	INTEGER	not-accessible	The prefix length of IPv6 address. The value 128 means it is a IPv6 address.
MAC zyIpv6sgStaticBindingMacAddress	1.3.6.1.4.1.890.1.15.3.108.1.2.1.4	MacAddress	read-write	The source MAC address in this binding entry.The value 0.0.0.0.0.0 means mac is don't care.
INT zyIpv6sgStaticBindingPort	1.3.6.1.4.1.890.1.15.3.108.1.2.1.6	INTEGER	read-write	Enter the port number in the binding. The value 0 means any port. If user set any port, the mac must be any.
ROW zyIpv6sgStaticBindingRowStatus	1.3.6.1.4.1.890.1.15.3.108.1.2.1.7	RowStatus	read-write	This object allows static binding entries to be created and deleted from static binding table.
INT zyIpv6sgStaticBindingVid	1.3.6.1.4.1.890.1.15.3.108.1.2.1.5	INTEGER	read-write	The VLAN number sets in this binding entry. The value 0 means don't care VLAN ID.
zyxelIpv6sg	1.3.6.1.4.1.890.1.15.3.108			The subtree for IPv6 Source Guard (IPv6SG)
zyxelIpv6sgBindingEntry	1.3.6.1.4.1.890.1.15.3.108.2.2.1		not-accessible	An entry contains binding entry information.
zyxelIpv6sgBindingTable	1.3.6.1.4.1.890.1.15.3.108.2.2		not-accessible	The table contains neighbor binding table information.
zyxelIpv6sgPolicyEntry	1.3.6.1.4.1.890.1.15.3.108.1.4.1		not-accessible	An entry contains IPv6 source guard policy configuration.
INT zyxelIpv6sgPolicyMaxNumberOfRules	1.3.6.1.4.1.890.1.15.3.108.1.3	INTEGER	read-only	The maximum number of IPv6 source guard policy rules that can be created.
zyxelIpv6sgPolicyPortEntry	1.3.6.1.4.1.890.1.15.3.108.1.5.1		not-accessible	IPv6 source guard configuration information for a policy.
zyxelIpv6sgPolicyPortTable	1.3.6.1.4.1.890.1.15.3.108.1.5		not-accessible	The table maintains IPv6 source guard policy configuration.
zyxelIpv6sgPolicyTable	1.3.6.1.4.1.890.1.15.3.108.1.4		not-accessible	The table contains IPv6 source guard policy configuration.
zyxelIpv6sgSetup	1.3.6.1.4.1.890.1.15.3.108.1
zyxelIpv6sgStaticBindingEntry	1.3.6.1.4.1.890.1.15.3.108.1.2.1		not-accessible	An entry contains static binding configuration.
INT zyxelIpv6sgStaticBindingMaxNumberOfRules	1.3.6.1.4.1.890.1.15.3.108.1.1	INTEGER	read-only	The maximum number of static binding rules that can be created.
zyxelIpv6sgStaticBindingTable	1.3.6.1.4.1.890.1.15.3.108.1.2		not-accessible	The table contains static binding configuration.
zyxelIpv6sgStatus	1.3.6.1.4.1.890.1.15.3.108.2

RFC description

Manages ZyXEL IPv6 Source Guard to validate IPv6 packet sources and prevent IPv6 address spoofing.

Start monitoring ZyXEL managed switches (IPv6 Source Guard binding/port-enable config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZYXEL-IPv6SG-MIB

What Is ZYXEL-IPv6SG-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description