Announcement Banner
UNSOLVED

JPLaflamme

updated

20 years ago

J

JPLaflamme

16 Posts

0

28615

November 6th, 2006 13:00

OID To retrieve dynamic address database?

I was going to right a script to snmpwalk our 3348 and 3448 switches dynamic address databases for when we have a rogue MAC address on our LAN in order to find out where it is.

Does someone know the OID for this on those switches, or if that's even what I need to accomplish this?

Thanks for the help.

Message Edited by JPLaflamme on 11-06-2006 09:34 AM

  • Mithrilhall

    2 Intern

    •

    128 Posts

    1187

    0

    Posted November 6th, 2006 14:00

    OID 1.3.6.1.2.1.17.7.1.2 (dot1qTpFdbPort)

    This will give you the "show bridge address-table".

    Here's an example of something you might see:

    OID Value
    dot1qTpFdbPort.391.0.15.31.33.109.17 2


    Take the OID after 391 and that's the MAC address...it just needs to be converted.

    The value is the port the MAC address is on.

    Message Edited by Mithrilhall on 11-06-2006 10:35 AM

    Message Edited by Mithrilhall on 11-06-2006 10:36 AM

  • Mithrilhall

    2 Intern

    •

    128 Posts

    1187

    0

    Posted November 6th, 2006 14:00

    I believe this is it....



    .1.3.6.1.2.1.17.7.1.2.2.1.2
  • JPLaflamme

    16 Posts

    1187

    0

    Posted November 6th, 2006 14:00

    Hmmm, well that certainly does show the MAC addresses eventually. It also shows all kinds of other info.

    The dynamic addresses seem to start at .1.3.6.1.2.1.17.4.3.1.1.0.

    How do I find the port associated with the MAC address?
  • JPLaflamme

    16 Posts

    1187

    0

    Posted November 6th, 2006 15:00

    Interesting. Thank you.
    I found that using snmpwalk in Linux on the OID .1.3.6.1.2.1.17.4.3.1.1 returns all the MACS in the database (in hex) but no ports.

    Message Edited by JPLaflamme on 11-06-2006 11:13 AM

  • Mithrilhall

    2 Intern

    •

    128 Posts

    1190

    0

    Posted November 6th, 2006 15:00

    Let me try it from my linux laptop and see what I get.
  • JPLaflamme

    16 Posts

    407

    0

    Posted November 6th, 2006 15:00

    I get inconsistent results on a 3448 using 1.3.6.1.2.1.17.7.1.2. Mostly timeouts for some reason. After trying and failing on 1.3.6.1.2.1.17.7.1.2 it also causes timeouts on .1.3.6.1.2.1.17.4.3.1.1. Weird. I plan on updating the firmware. Maybe that will fix something.

    I guess when I see "INTEGER: 3" that means port 1/G1?

    Seems to work much better/faster on the 3348 than the 3448

    Message Edited by JPLaflamme on 11-06-2006 11:56 AM

  • Mithrilhall

    2 Intern

    •

    128 Posts

    1190

    0

    Posted November 6th, 2006 15:00

    Doh!

    I thought you had posted 3348. Let me check what I have for 3448.
  • JPLaflamme

    16 Posts

    1190

    0

    Posted November 6th, 2006 15:00

    Hmmm, I'm not sure that .1.3.6.1.2.1.17.7.1.2 is showing me the right stuff on a powerconnect 3448
  • JPLaflamme

    16 Posts

    1190

    0

    Posted November 6th, 2006 15:00

    Sorry, I have both and will be needing to do this for both.
  • Mithrilhall

    2 Intern

    •

    128 Posts

    1190

    0

    Posted November 6th, 2006 15:00

    Works for me on both 33XX, 34XX and 6024X switches.