Technology Overview. Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch. Published:

Transcription

1 Technology Overview Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch Published:

2 Juniper Networks, Inc North Mathilda Avenue Sunnyvale, California USA Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Technology Overview Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch NCE0055 All rights reserved. The information in this document is current as of the date on the title page. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year However, the NTP application is known to have some difficulty in the year END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ( EULA ) posted at By downloading, installing or using such software, you agree to the terms and conditions of that EULA. ii

3 Table of Contents Introduction SNMP Overview Retrieving VLAN Information Using SNMP on EX Series Ethernet Switches FAQs iii

4 Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch iv

5 Introduction This document describes how to retrieve and interpret VLAN information from an EX Series Ethernet switch using SNMP. SNMP Overview SNMP enables users to monitor network devices from a central location. Many network management systems (NMS) are based on SNMP, and support for this protocol is a key feature of most network devices. The Juniper Networks Junos operating system supports SNMP on many different Juniper Networks platforms. The Junos OS includes an onboard SNMP agent that provides remote management applications with access to detailed information about the devices on the network. A typical SNMP implementation contains three components: Managed devices Such as routers and switches. SNMP agent Process that resides on a managed device and communicates with the NMS. NMS A combination of hardware and software used to monitor and administer the network; network device that runs SNMP manager software. Also referred to as an SNMP manager. The SNMP agent exchanges network management information with the SNMP manager (NMS). The agent responds to requests for information and actions from the manager. The SNMP manager collects information about network connectivity, activity, and events by polling managed devices. SNMP implementation in the Junos OS uses a master SNMP agent (known as the SNMP process or snmpd) that resides on the managed device. Various subagents reside on different modules of the Junos OS as well (such as the Routing Engine), and these subagents are managed by the snmpd. Related Documentation Understanding SNMP Implementation in Junos OS Retrieving VLAN Information Using SNMP on EX Series Ethernet Switches FAQs on page 1 Retrieving VLAN Information Using SNMP on EX Series Ethernet Switches FAQs Sample Configuration The following is the configuration referenced in the FAQs. The configuration was done on a Juniper Networks EX4200 Series Ethernet Switch. Only configuration relevant to the FAQs is included in this sample configuration. user@host>show configuration display set 1

6 Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch set version 11.4D0.1 set interfaces ge-0/0/20 unit 0 family inet address /16 set interfaces ge-0/0/21 unit 0 family ethernet-switching vlan members vlan2 set interfaces ge-0/0/22 unit 0 family ethernet-switching vlan members vlan1 set interfaces ge-0/0/23 unit 0 family ethernet-switching port-mode trunk set interfaces ge-0/0/23 unit 0 family ethernet-switching vlan members vlan1 set interfaces vlan unit 1 family inet6 address 1::1/128 set interfaces vlan unit 2 family inet address /24 set protocols igmp-snooping vlan all set protocols rstp set protocols lldp interface all set protocols lldp-med interface all set ethernet-switching-options storm-control interface all set vlans vlan1 vlan-id 5 set vlans vlan1 l3-interface vlan.1 set vlans vlan2 vlan-id 600 set vlans vlan2 interface ge-0/0/21.0 set vlans vlan2 l3-interface vlan.2 set poe interface all How can I retrieve the names of the VLANs configured on an EX Series switch? Use the jnxexvlanname MIB object to retrieve the names of the VLANs configured on a switch. user@host> show snmp mib walk jnxexvlanname jnxexvlanname.2 = default jnxexvlanname.4 = vlan1 jnxexvlanname.5 = vlan2 To verify the results displayed in the output of the show snmp mib walk jnxexvlanname command, issue the show vlans brief command. user@host> show vlans brief Ports Name Tag Primary Address Active/Total default 0/20 vlan1 5 0/2 1::1/128 Ports Name Tag Primary Address Active/Total vlan /24 0/1 How can I retrieve the VLAN tag of a VLAN? Use the jnxexvlantag MIB object to retrieve the VLAN tag of a VLAN. The following example shows the output of the jnxexvlantag MIB object. It displays the VLAN tags of all the VLANs configured on the switch. user@host> show snmp mib walk jnxexvlantag jnxexvlantag.2 = 0 jnxexvlantag.4 = 5 jnxexvlantag.5 = 600 Use the show snmp mib get jnxexvlantag.oid command to display the VLAN tag of a specific VLAN. 2

7 The following example shows the output of the jnxexvlantag MIB object. It displays the VLAN tag of vlan2. show snmp mib get jnxexvlantag.5 jnxexvlantag.5 = 600 To verify the results displayed in the output of the show snmp mib get jnxexvlantag.oid command, issue the show vlans vlan-name brief command. user@host> show vlans vlan2 brief Ports Name Tag Primary Address Active/Total vlan /24 0/1 How can I retrieve the VLAN ID, the internal index of a VLAN? Use the jnxexvlanportgroupinstance MIB object to retrieve the VLAN s internal index. The following example shows the output of the jnxexvlanportgroupinstance MIB object. It displays the internal index of all the VLANs configured on the switch. user@host> show snmp mib walk jnxexvlanportgroupinstance jnxexvlanportgroupinstance.2 = 2 jnxexvlanportgroupinstance.4 = 4 jnxexvlanportgroupinstance.5 = 5 Use the show snmp mib get jnxexvlanportgroupinstance.oid command to display the internal index of a specific VLAN. The following example shows the output of the jnxexvlanportgroupinstance MIB object. It displays the internal index of vlan2. user@host> show snmp mib get jnxexvlanportgroupinstance.5 jnxexvlanportgroupinstance.5 = 5 To verify the results displayed in the output of the show snmp mib get jnxexvlanportgroupinstance.oid command, issue the show vlans vlan-name extensive command. user@host> show vlans vlan2 extensive VLAN: vlan2, Created at: Sun Dec 25 23:20: Q Tag: 600, Internal index: 5, Admin State: Enabled, Origin: Static Layer 3 interface: vlan.2 (DOWN) IPV4 addresses: /24(Primary) Protocol: Port Mode, Mac aging time: 300 seconds Number of interfaces: Tagged 0 (Active = 0), Untagged 1 (Active = 0) ge-0/0/21.0, untagged, access How can I determine the status of a port in a VLAN? 3

8 Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch Use the jnxexvlanportstatus MIB object to retrieve the status of the association between a port and the VLAN. The port status is displayed as an integer. Following are the possible values: 1 autoactive: The port is part of the VLAN because the switch has automatically added the port. 2 allowed: The port has been configured to be part of the VLAN, and is allowed to be part of the VLAN, if the port meets all other requirements. 3 allowedactive: The port has been configured to be part of the VLAN, and is allowed to be part of the VLAN, if the port meets all other requirements. However, unlike the case of allowed ports, this port has a device that is participating in the VLAN associated with the port. 4 allowednotavail: The port is active on some other VLAN, and is not available currently. This value applies to devices that do not allow a port to be part of more than one VLAN at the same time. 5 notassociated: The port is part of a port group that is not associated with the VLAN. The following example shows the output of the jnxexvlanportstatus MIB object. It displays the status of the association between a port and the VLAN. user@host> show snmp mib walk jnxexvlanportstatus jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 To retrieve the status of all ports in a specific VLAN, use the show snmp mib walk jnxexvlanportstatus.oid command. user@host> show snmp mib walk jnxexvlanportstatus.4 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 jnxexvlanportstatus = 3 How can I determine if a port associated with a VLAN is tagged or untagged? 4

9 Use the jnxexvlanporttagness MIB object to retrieve information about the port and to determine if the port is tagged or untagged. The status is displayed as an integer. Following are the possible values: 1 tagged 2 untagged The following example shows the output of the jnxexvlanporttagness MIB object. It displays information about the port and whether the port is tagged or untagged. user@host> show snmp mib walk jnxexvlanporttagness jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 2 jnxexvlanporttagness = 1 jnxexvlanporttagness = 2 To verify the results displayed in the output of the show snmp mib walk jnxexvlanporttagness command, issue the show vlans vlan-name detail command. user@host> show vlans vlan1 detail VLAN: vlan1, 802.1Q Tag: 5, Admin State: Enabled Primary IPv6: 1::1/128 Number of interfaces: 2 (Active = 0) Untagged interfaces: ge-0/0/22.0 Tagged interfaces: ge-0/0/23.0 How can I determine if a port associated with a VLAN is configured as an access port or a trunk port? Use the jnxexvlanportaccessmode MIB object to retrieve the port mode information. The port mode is displayed as an integer. Following are the possible values: 1 access port 2 trunk port 5

10 Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch The following example shows the output of the jnxexvlanportaccessmode MIB object. It displays the port information. show snmp mib walk jnxexvlanportaccessmode jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 1 jnxexvlanportaccessmode = 2 jnxexvlanportaccessmode = 1 To verify the results displayed in the output of the show snmp mib walk jnxexvlanportaccessmode command, issue the show vlans vlan-name extensive command. user@host> show vlans vlan1 extensive VLAN: vlan1, Created at: Sun Dec 25 03:01: Q Tag: 5, Internal index: 4, Admin State: Enabled, Origin: Static Layer 3 interface: vlan.1 (DOWN) IPV6 addresses: 1::1/128(Primary) fe80::2e21:72ff:fe94:4441/64 Protocol: Port Mode, Mac aging time: 300 seconds Number of interfaces: Tagged 1 (Active = 0), Untagged 1 (Active = 0) ge-0/0/23.0, tagged, trunk ge-0/0/22.0, untagged, access How can I determine if the routed VLAN interfaces (RVIs) are configured with an IPv4 address or an IPv6 address? Use the jnxexvlaninterfaceprotocol MIB object to display the protocol configured on the RVI as shown in this example. user@host> show snmp mib walk jnxexvlaninterfaceprotocol jnxexvlaninterfaceprotocol.4 = 2 jnxexvlaninterfaceprotocol.5 = 1 The protocol configured is displayed as an integer. Following are the possible values: 1 Indicates that the RVI is configured with an IPv4 address. 2 Indicates that the RVI is configured with an IPv6 address. 6

11 To verify the results displayed in the output of the show snmp mib walk jnxexvlaninterfaceprotocol command, issue the show interfaces terse grep vlan command. show interfaces terse grep vlan vlan up up vlan.1 up down inet6 1::1 vlan.2 up down inet /24 How can I retrieve the IP address of an RVI? Use the jnxexvlaninterfaceipaddress MIB object to display the IP address of an RVI in hexadecimal format as shown in this example. user@host> show snmp mib walk jnxexvlaninterfaceipaddress jnxexvlaninterfaceipaddress.4 = jnxexvlaninterfaceipaddress.5 = c In the preceding sample output, the IP address displayed for the first RVI ( ) can be translated into the IPv6 address 1::1, and the IP address displayed for the second RVI (c ) can be translated into the IPv4 address To verify the results displayed in the output of the show snmp mib walk jnxexvlaninterfaceipaddress command, issue the show interfaces terse grep vlan command. user@host> show interfaces terse grep vlan vlan up up vlan.1 up down inet6 1::1 vlan.2 up down inet /24 How can I determine the length of the prefix or subnet mask in the IP address configured on an RVI? Use the jnxexvlaninterfaceprefixlength MIB object to retrieve the length of the IP address prefix or subnet mask as shown in this example. user@host> show snmp mib walk jnxexvlaninterfaceprefixlength jnxexvlaninterfaceprefixlength.4 = 0 jnxexvlaninterfaceprefixlength.5 = 8 In the preceding sample output, the first line displays the prefix length for the IPv6 address 1::1, and the second line displays the prefix length for the IPv4 address The output shows the difference between IP address length and subnet mask length. In the sample output, the first line represents vlan1, which has been configured with the IPv6 address 1::1, and the subnet mask is set to 128. The jnxexvlaninterfaceprefixlength MIB object returns 0, the difference between the IP address length of the IPv6 address (128) and the subnet mask (128), and this value is assigned to vlan1. Similarly, 24 is the subnet mask of the IP address assigned to vlan2 (the second line in the output). The jnxexvlaninterfaceprefixlength MIB object returns 8, the difference between the IP address length of the IPv4 address (32) and the subnet mask (24), and this value is assigned to vlan2. 7

12 Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch To verify the subnet mask and IP address type of a VLAN, issue the show vlans vlan-name extensive command. user@host> show vlans vlan1 extensive VLAN: vlan1, Created at: Sun Dec 25 03:01: Q Tag: 5, Internal index: 4, Admin State: Enabled, Origin: Static Layer 3 interface: vlan.1 (DOWN) IPV6 addresses: 1::1/128(Primary) fe80::2e21:72ff:fe94:4441/64 Protocol: Port Mode, Mac aging time: 300 seconds Number of interfaces: Tagged 1 (Active = 0), Untagged 1 (Active = 0) ge-0/0/23.0, tagged, trunk ge-0/0/22.0, untagged, access {master:0} You can also obtain the prefix length from the output displayed. How can I retrieve the broadcast address of a VLAN? Use the jnxexvlaninterfacebroadcastaddress MIB object to retrieve the broadcast address of a VLAN in hexadecimal format as shown in this example. user@host> show snmp mib walk jnxexvlaninterfacebroadcastaddress jnxexvlaninterfacebroadcastaddress.4 jnxexvlaninterfacebroadcastaddress.5 = c ff In the preceding sample output, the second line shows the broadcast address c ff, which translates to for the IPv4 address How can I retrieve the name of an RVI? Use the jnxexvlaninterfacedescription MIB object to retrieve the name of an RVI as shown in this example. user@host> show snmp mib walk jnxexvlaninterfacedescription jnxexvlaninterfacedescription.4 = vlan.1 jnxexvlaninterfacedescription.5 = vlan.2 How can I retrieve the interface index (ifindex) of an RVI? Use the jnxexvlansnmpifindex MIB object to retrieve the interface index (ifindex) of an RVI as shown in this example. user@host> show snmp mib walk jnxexvlansnmpifindex jnxexvlansnmpifindex.4 = 658 jnxexvlansnmpifindex.5 = 659 To verify the results displayed in the output of the show snmp mib walk jnxexvlansnmpifindex command, issue the show interfaces vlan command. user@host> show interfaces vlan Physical interface: vlan, Enabled, Physical link is Up Interface index: 128, SNMP ifindex: 502 Type: VLAN, Link-level type: VLAN, MTU: 1518, Speed: 1000mbps Device flags : Present Running Link type : Full-Duplex Link flags : None Current address: 2c:21:72:94:44:41, Hardware address: 2c:21:72:94:44:41 8

13 Last flapped : Never Input packets : 0 Output packets: 6 Logical interface vlan.1 (Index 89) (SNMP ifindex 658) Flags: Link-Layer-Down SNMP-Traps 0x0 Encapsulation: ENET2 Input packets : 0 Output packets: 4 Protocol inet6, MTU: 1500 Flags: Is-Primary Addresses, Flags: Is-Default Is-Primary Local: 1::1 Addresses, Flags: Is-Preferred Destination: fe80::/64, Local: fe80::2e21:72ff:fe94:4441 Logical interface vlan.2 (Index 90) (SNMP ifindex 659) Flags: Link-Layer-Down SNMP-Traps 0x0 Encapsulation: ENET2 Input packets : 0 Output packets: 3 Protocol inet, MTU: 1500 Flags: None Addresses, Flags: Dest-route-down Is-Preferred Is-Primary Destination: /24, Local: , Broadcast: How can I determine the administrative status (Admin Status) of an RVI? Use the jnxexvlaninterfaceadminstatus MIB object to retrieve the administrative status (Admin Status) of a VLAN as shown in this example. The status is displayed as an integer, where 1 indicates that the interface is up and ready to pass packets, and 2 indicates that the interface is down and cannot pass packets. user@host> show snmp mib walk jnxexvlaninterfaceadminstatus jnxexvlaninterfaceadminstatus.4 = 1 jnxexvlaninterfaceadminstatus.5 = 1 In the preceding sample output, the Admin Status for both the VLAN interfaces is 1, indicating that they are up and ready to pass packets. To verify the results displayed in the output of the show snmp mib walk jnxexvlaninterfaceadminstatus command, issue the show interfaces terse grep vlan command. user@host> show interfaces terse grep vlan vlan up up vlan.1 up down inet6 1::1 vlan.2 up down inet /24 In the preceding sample output, the third column indicates the administrative status of the RVI. How can I determine the operational status (Oper Status) of a VLAN? Use the jnxexvlaninterfaceoperstatus MIB object to retrieve the operational status (Oper Status) of a VLAN as shown in this example. The status is displayed as an integer, where 1 indicates that the interface is up and ready to pass packets, and 2 indicates that the interface is down and cannot pass packets. user@host> show snmp mib walk jnxexvlaninterfaceoperstatus 9

14 Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch jnxexvlaninterfaceoperstatus.4 = 2 jnxexvlaninterfaceoperstatus.5 = 2 In the preceding sample output, the operational status for both VLAN interfaces is 2, indicating that they are down and cannot pass packets. To verify the results displayed in the output of the show snmp mib walk jnxexvlaninterfaceoperstatus command, issue the show interfaces terse grep vlan command. user@host> show interfaces terse grep vlan vlan up up vlan.1 up down inet6 1::1 vlan.2 up down inet /24 In the preceding sample output, the third column indicates the operational status of the RVI. How can I determine if a VLAN is created dynamically or statically? Use the jnxexvlantype MIB object to retrieve the type of a VLAN as shown in this example. A value of 1 indicates static VLAN and 2 indicates dynamic VLAN. user@host> show snmp mib walk jnxexvlantype jnxexvlantype.2 = 1 jnxexvlantype.4 = 1 In this example, the value displayed is 1, because both VLANs were created statically. To verify the results displayed in the output of the show snmp mib walk jnxexvlantype command, issue the show vlans vlan-name extensive command. user@host> show vlans vlan1 extensive VLAN: vlan1, Created at: Sun Dec 25 03:01: Q Tag: 5, Internal index: 4, Admin State: Enabled, Origin: Static Layer 3 interface: vlan.1 (DOWN) IPV6 addresses: 1::1/128(Primary) fe80::2e21:72ff:fe94:4441/64 Protocol: Port Mode, Mac aging time: 300 seconds Number of interfaces: Tagged 1 (Active = 0), Untagged 1 (Active = 0) ge-0/0/23.0, tagged, trunk ge-0/0/22.0, untagged, access How do I retrieve the MAC addresses added or learned over a VLAN? Use the jnxvlanmacaddress MIB object to retrieve the MAC addresses added or learned over a VLAN. user@host> show snmp mib walk jnxvlanmacaddress jnxvlanmacaddress.1 = 2c jnxvlanmacaddress.2 = 2c To verify the results displayed in the output of the show snmp mib walk jnxvlanmacaddress command, issue the show ethernet-switching mac-learning-log command. user@host> show ethernet-switching mac-learning-log Sun Dec 25 23:53: vlan_name vlan1 mac 2c:21:72:94:44:41 was added Sun Dec 25 23:53: vlan_name vlan2 mac 2c:21:72:94:44:41 was added 10

15 Related Documentation SNMP Overview on page 1 11

16 Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch 12