CISCO-PRIVATE-VLAN-MIB: View SNMP OID List / Download MIB

The MIB module to support Private VLAN feature on Cisco's switching devices.

A table containing Private VLAN information on the VLANs which currently exist.

A conceptual row containing the Private VLAN information on the VLANs for a particular management domain.

Indicated the VLAN type as defined for Private VLAN feature.

The VLAN ID of The associated primary VLAN used for the Private VLAN feature if cpvlanVlanPrivateVlanType has the value of isolated(3), community(4) or twoWayCommunity(5). If cpvlanVlanPrivateVlanType has the value of normal(1) or primary(2), then this object has the value of 0. Note that one isolated VLAN can only be associated with one unique primary VLAN. One primary VLAN can only be associated with one isolated VLAN. One primary VLAN can be associated with multiple VLANs of community or twoWayCommunity type; one community or twoWayCommunity VLAN can only be associated with one unique primary VLAN.

A table containing Private VLAN information on the VLANs in the VLAN Edit Buffer for a particular management domain.

A conceptual row containing the Private VLAN information on the VLANs in the VLAN Edit Buffer for a particular management domain.

The VLAN type as defined for Private VLAN feature. Note that a VLAN's Private VLAN type can not be changed once it already has any ports in it.

The VLAN ID of the associated primary VLAN used for the Private VLAN feature if cpvlanVlanEditPrivateVlanType has the value of isolated(3), community(4), twoWayCommunity(5). If cpvlanVlanEditPrivateVlanType has the value of normal(1) or primary(2), then this object has the value of 0. Note that one isolated VLAN can only be associated with one unique primary VLAN. One primary VLAN can only be associated with one isolated VLAN. One primary VLAN can be associated with multiple VLANs of community or twoWayCommunity type; one community or twoWayCommunity VLAN can only be associated with one unique primary VLAN.

A table containing information of the configuration of secondary VLAN on the ports of the device.

A conceptual row containing information of the configuration of secondary VLAN for each port. An entry is created by the managed system for each interface which can be configured as a private port for Private VLAN feature.

The VLAN ID of the secondary VLAN configured on this private port. A private port is a port that allows the ingress traffic of the secondary VLAN as well as egress traffic of its associated primary VLAN, but blocks the egress traffic of the isolated VLAN while allowing the egress traffic of the community or twoWayCommunity VLAN depending on the type of the secondary VLAN. Note that a port can join a secondary VLAN only after this secondary VLAN has been associated with a primary VLAN, i.e., the cpvlanVlanAssociatedPrimaryVlan has a non-zero value. The default value of 0 for this object means this port has not joined any secondary VLAN yet.

A table containing information of secondary VLAN to primary VLAN remapping on ports of the device.

A conceptual row containing information of secondary VLAN to primary VLAN remapping for each port. An entry is created by the managed system for each interface which can be configured as a promiscuous port for Private VLAN feature.

Indicates whether all the bits set as secondary VLANs in the corresponding remapping objects (i.e. cpvlanPromPortSecondaryRemap, cpvlanPromPortSecondaryRemap2k, cpvlanPromPortSecondaryRemap3k, cpvlanPromPortSecondaryRemap4k) can belong to multiple primary VLANs or not for this port. If this object value is false(2), then the object values of cpvlanVlanAssociatedPrimaryVlan for the secondary VLANs with their bits turned on as '1' in those remapping objects must be the same. If this object value is true(1), then the object values of cpvlanVlanAssociatedPrimaryVlan for the secondary VLANs with their bits turned on as '1' in those remapping objects need not be the same. A promiscuous port can remap a secondary VLAN to its associated primary VLAN for egress traffic on the fly as defined for Private VLAN feature.

A string of octets containing one bit per VLAN in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 0 through 7; the second octet to VLANs 8 through 15; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. A bit can only be set to '1' when the bit is corresponding to a VLAN of Private VLAN isolated, community or twoWayCommunity type which has already been associated with a primary VLAN. Setting this bit to '1' makes this promiscuous port remap the secondary VLAN to its associated primary VLAN for egress traffic on the fly, or remap the associated primary VLAN to the secondary VLAN if the secondary VLAN is of twoWayCommunity type and the object value of cpvlanPromPortTwoWayRemapCapable for this promiscuous port is true(1). Note that if the length of this string is less than 128 octets, any 'missing' octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs.

A string of octets containing one bit per VLAN for VLANs with VlanIndexOrZero values of 1024 through 2047 in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 1024 through 1031; the second octet to VLANs 1032 through 1039; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. A bit can only be set to '1' when the bit is corresponding to a VLAN of Private VLAN isolated or community type which has already been associated with a primary VLAN. Setting this bit to '1' makes this promiscuous port remap the secondary VLAN to its associated primary VLAN for egress traffic on the fly, or remap the associated primary VLAN to the secondary VLAN if the secondary VLAN is of twoWayCommunity type and the object value of cpvlanPromPortTwoWayRemapCapable for this promiscuous port is true(1). Note that if the length of this string is less than 128 octets, any 'missing' octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095.

A string of octets containing one bit per VLAN for VLANs with VlanIndexOrZero values of 2048 through 3071 in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 2048 through 2055; the second octet to VLANs 2056 through 2063; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. A bit can only be set to '1' when the bit is corresponding to a VLAN of Private VLAN isolated or community type which has already been associated with a primary VLAN. Setting this bit to '1' makes this promiscuous port remap the secondary VLAN to its associated primary VLAN for egress traffic on the fly, or remap the associated primary VLAN to the secondary VLAN if the secondary VLAN is of twoWayCommunity type and the object value of cpvlanPromPortTwoWayRemapCapable for this promiscuous port is true(1). Note that if the length of this string is less than 128 octets, any 'missing' octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095.

A string of octets containing one bit per VLAN for VLANs with VlanIndexOrZero values of 3072 through 4095 in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 3072 through 3079; the second octet to VLANs 3080 through 3087; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. A bit can only be set to '1' when the bit is corresponding to a VLAN of Private VLAN isolated or community type which has already been associated with a primary VLAN. Setting this bit to '1' makes this promiscuous port remap the secondary VLAN to its associated primary VLAN for egress traffic on the fly, or remap the associated primary VLAN to the secondary VLAN if the secondary VLAN is of twoWayCommunity type and the object value of cpvlanPromPortTwoWayRemapCapable for this promiscuous port is true(1). Note that if the length of this string is less than 128 octets, any 'missing' octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095.

Indicates whether the port is capable to perform remapping from primary VLANs to the twoWayCommunity VLANs associated with them for the Private VLAN feature. A promiscuous port with this object value of false(2) can only perform one-way remapping from secondary VLANs to their associated primary VLANs, while a promiscuous port with this object value of true(1) can also perform remapping from primary VLANs to the twoWayCommunity VLANs associated with them in addition to that.

A table containing information of the configuration of port mode for the Private VLAN feature.

A conceptual row containing information of the configuration of port mode on each port for the Private VLAN feature. An entry of this table is created by the managed system when the capability to be a Private VLAN port is detected on an interface.

The Private VLAN port mode on this port. nonPrivateVlan(1) -- this port is configured to be a non-Private-VLAN port. host(2) -- this port is configured to be a Private-VLAN host port, i.e., private port. promiscuous(3) -- this port is configured to be a Private-VLAN promiscuous port. secondaryTrunk(4) -- this port is configured to be a Private-VLAN isolated trunk port or community trunk port. promiscuousTrunk(5) -- this port is configured to be a Private-VLAN promiscuous trunk port. Enumeration: 'promiscuousTrunk': 5, 'host': 2, 'promiscuous': 3, 'secondaryTrunk': 4, 'nonPrivateVlan': 1.

A table containing information of the configuration of a private vlan trunk port in the device. This includes secondary and normal allowed VLAN, encapsulation type, trunk native vlan (as applied to private vlan trunks).

A conceptual row containing information of the configuration of one private vlan trunk port. An entry is created by the managed system for each interface which can be configured as a private vlan trunk port

For private VLAN trunk ports, this object allows the operator to mandate the trunking behavior of the port on(1) dictates that the private VLAN port will always be a trunk. If the negotiation is supported on this port, negotiation will take place with the far end to attempt to bring the far end into trunking state. onNoNegotiate(2) is used to indicate that the interface is permanently set to be a trunk, and no negotiation takes place with the far end on the link to ensure consistent operation. This is similar to on(1) except no negotiation takes place with the far end. If a port does not support negotiation, the value of on(1) is not allowed. If the port's cpvlanTrunkPortEncapType is set to negotiate(3), onNoNegotiate(2) is not allowed. Enumeration: 'on': 1, 'onNoNegotiate': 2.

The type of VLAN encapsulation desired to be used on this private vlan trunk port. It is either a particular type, or 'negotiate' meaning whatever type results from the negotiation. dot1Q(1) indicates that the port should accept and transmit packets with IEEE 802.1q VLAN encapsulation isl(2) indicates that the port should accept and transmit packets with Inter Switch Link (ISL) VLAN encapsulation negotiate(3) indicates that the VLAN encapsulation is negotiated with the far end. The negotiated VLAN encapsulation can be dot1Q or isl. negotiate(2) is not allowed if the port does not support negotiation of VLAN encapsulation type or if its cpvlanTrunkPortDynamicState is set to onNoNegotiate(2) Enumeration: 'negotiate': 3, 'dot1Q': 1, 'isl': 2.

The VlanIndex of the VLAN which is represented by native frames on this private vlan trunk port. For private vlan trunk ports that need to drop untagged frames or not supporting the sending and receiving of native frames, this value should be set to zero

A string of octets containing one bit per VLAN for VLANs with values of 0 through 1023 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a secondary VLAN that has already been associated with a primary VLAN, it allows this private VLAN trunk port to remap the secondary VLAN to its primary VLAN for ingress traffic and to remap its associated primary VLAN to the secondary VLAN for egress traffic. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a secondary VLAN, then the local system is enabled to transmit and receive frames with proper VLAN remapping via this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a normal VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port.

A string of octets containing one bit per VLAN for VLANs with values of 1024 through 2047 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a secondary VLAN that has already been associated with a primary VLAN, it allows this private VLAN trunk port to remap the secondary VLAN to its primary VLAN for ingress traffic and to remap its associated primary VLAN to the secondary VLAN for egress traffic. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a secondary VLAN, then the local system is enabled to transmit and receive frames with proper VLAN remapping via this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a normal VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of VLANs up to 4095.

A string of octets containing one bit per VLAN for VLANs with values of 2048 through 3071 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a secondary VLAN that has already been associated with a primary VLAN, it allows this private VLAN trunk port to remap the secondary VLAN to its primary VLAN for ingress traffic and to remap its associated primary VLAN to the secondary VLAN for egress traffic. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a secondary VLAN, then the local system is enabled to transmit and receive frames with proper VLAN remapping via this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a normal VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of up to 4095.

A string of octets containing one bit per VLAN for VLANs with values of 3072 through 4095 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a secondary VLAN that has already been associated with a primary VLAN, it allows this private VLAN trunk port to remap the secondary VLAN to its primary VLAN for ingress traffic and to remap its associated primary VLAN to the secondary VLAN for egress traffic. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a secondary VLAN, then the local system is enabled to transmit and receive frames with proper VLAN remapping via this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a normal VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of up to 4095.

A string of octets containing one bit per VLAN for VLANs with values of 0 through 1023 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a normal VLAN, it allows packets belonging to this vlan on this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a normal VLAN, then the local system is enabled to transmit and receive frames as normal VLAN If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a secondary VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port.

A string of octets containing one bit per VLAN for VLANs with values of 1024 through 2047 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a normal VLAN, it allows packets belonging to this vlan on this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a normal VLAN, then the local system is enabled to transmit and receive frames as normal VLAN If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a secondary VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095.

A string of octets containing one bit per VLAN for VLANs with values of 2048 through 3071 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a normal VLAN, it allows packets belonging to this vlan on this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a normal VLAN, then the local system is enabled to transmit and receive frames as normal VLAN If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a secondary VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095.

A string of octets containing one bit per VLAN for VLANs with values of 3072 through 4095 in the management domain on this port. If the VLAN represented by setting a bit to '1' in the bitmap is a normal VLAN, it allows packets belonging to this vlan on this Private VLAN trunk port. If the bit corresponding to a VLAN is set to '1' and if the corresponding VLAN is a normal VLAN, then the local system is enabled to transmit and receive frames as normal VLAN If the bit corresponding to a VLAN is set to '0', and if the corresponding VLAN is not configured as a secondary VLAN, then the system is disabled from sending and receiving frames on that VLAN via this Private VLAN trunk port. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095.

Indicates the current dynamic trunking status of the specified private VLAN port. trunking(1) indicates that the private VLAN port is currently operating as a private VLAN trunk port notTrunking(2) indicates that the private VLAN port is currently not trunking but is operating as an access port. Enumeration: 'notTrunking': 2, 'trunking': 1.

The type of VLAN encapsulation in use on this private vlan trunk port. dot1Q(1) indicates that the port accepts and transmits packets with IEEE 802.1q VLAN encapsulation isl(2) indicates that the port accepts and transmits packets with Inter Switch Link (ISL) VLAN encapsulation If the cpvlanTrunkPortDynamicStatus is notTrunking(2) or if the encapsulation type negotiation has not been completed, the object is set to notApplicable(3). Enumeration: 'notApplicable': 3, 'dot1Q': 1, 'isl': 2.

A table containing the configuration of primary VLAN SVI (Switch Virtual Interfaces) mapping for the secondary VLANs for the Private VLAN feature.

A conceptual row containing the Primary VLAN SVI mapping configuration for the existing secondary VLANs. An entry is created by the managed system for each VLAN with corresponding VLAN's cpvlanVlanPrivateVlanType of isolated(3), community(4), and twoWayCommunity(5).

An index value that uniquely identifies the Virtual LAN associated with this information.

The Vlan ID of the primary VLAN SVI this secondary VLAN is mapped to for the Private VLAN feature. This object has the value of zero if this secondary VLAN is not mapped to any primary VLAN SVI.

The compliance statement for Private VLAN feature implementation.

A collection of objects providing basic VLAN configuration for Private VLAN feature.

A collection of objects providing basic private port configuration for Private VLAN feature.

A collection of objects providing basic promiscuous port configuration for Private VLAN feature.

A collection of objects providing basic promiscuous port configuration for Private VLAN feature on devices with VlanIndexOrZero range of up to 4095.

This is an optional group with a collection of objects providing basic port mode configuration for Private VLAN feature on devices which support Private VLAN port mode feature.

This is an optional group with a collection of objects providing primary VLAN SVI mapping configuration for the Private VLAN feature on devices which support Primary VLAN SVI mapping feature.

A collection of objects providing basic private VLAN trunk port configuration for Private VLAN feature.