All MIBs › ZYXEL-PPPoE-MIB › zyPppoeIaPortTrustState
zyPppoeIaPortTrustState
Module: ZYXEL-PPPoE-MIB
OID (symbolic): ZYXEL-PPPoE-MIB::zyPppoeIaPortTrustState
OID (numeric): 1.3.6.1.4.1.890.1.15.3.67.1.7.1.1
Node type: OBJECT-TYPE
Type: EnabledStatus
Access: read-write
Description: Enable/Disable trusted port on the specified port. Trusted ports are uplink ports connected to PPPoE servers. If a PADO (PPPoE Active Discovery Offer), PADS (PPPoE Active Discovery Session-confirmation), or PADT (PPPoE Active Discovery Terminate) packet is sent from a PPPoE server and received on a trusted port, the Switch forwards it to all other ports. If a PADI or PADR packet is sent from a PPPoE client but received on a trusted port, the Switch forwards it to other trusted port(s). Untrusted ports are downlink ports connected to subscribers. If a PADI, PADR, or PADT packet is sent from a PPPoE client and received on an untrusted port, the Switch adds a vendor-specific tag to the packet and then forwards it to the trusted port(s). The Switch discards PADO and PADS packets which are sent from a PPPoE server but received on an untrusted port.
What is zyPppoeIaPortTrustState?
This object marks a specific port as trusted or untrusted for PPPoE intermediate agent purposes, where trusted ports are treated as uplinks toward PPPoE servers. Admins enable trust on uplink ports so PADO, PADS, and PADT packets from the server are forwarded normally, while leaving downlink subscriber ports untrusted so their discovery packets get tagged and any server-type packets received there are discarded as likely spoofing. Setting this to enabled on the port connecting to the ISP's BRAS marks it trusted, while subscriber-facing ports are left disabled so a malicious subscriber can't impersonate a PPPoE server.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.890.1.15.3.67.1.7.1.1 snmpwalk -v2c -c public <target> ZYXEL-PPPoE-MIB::zyPppoeIaPortTrustState
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.890.1.15.3.67.1.7.1.1.1 snmpget -v2c -c public <target> ZYXEL-PPPoE-MIB::zyPppoeIaPortTrustState.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.890.1.15.3.67.1.7.1.1.1 s <value>
Start monitoring ZyXEL DSLAM, ZyXEL broadband access switch (PPPoE Intermediate Agent per-interface/VLAN config status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ZYXEL-PPPoE-MIB::zyPppoeIaPortTrustState OID value, configure state conditions and alerts, and monitor any ZyXEL DSLAM, ZyXEL broadband access switch (PPPoE Intermediate Agent per-interface/VLAN config status) from a single console.
OID Breakdown
Upper-level ancestors (10 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.890 | zyxel | IES5206-MIB |
| 1.3.6.1.4.1.890.1 | products | IES5206-MIB |
| 1.3.6.1.4.1.890.1.15 | nwa1100nh | NWA1100-NH |
| 1.3.6.1.4.1.890.1.15.3 | esMgmt | NWA1100-NH |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.890.1.15.3.67 | zyxelPppoe | ZYXEL-PPPoE-MIB |
| 1.3.6.1.4.1.890.1.15.3.67.1 | zyxelPppoeIaSetup | ZYXEL-PPPoE-MIB |
| 1.3.6.1.4.1.890.1.15.3.67.1.7 | zyxelPppoeIaPortTable | ZYXEL-PPPoE-MIB |
| 1.3.6.1.4.1.890.1.15.3.67.1.7.1 | zyxelPppoeIaPortEntry | ZYXEL-PPPoE-MIB |
| 1.3.6.1.4.1.890.1.15.3.67.1.7.1.1 | zyPppoeIaPortTrustState | ZYXEL-PPPoE-MIB |