MX Security Appliances SNMP
Cloud Controller SNMP Polling
The first option for SNMP polling a Meraki infrastructure is to poll the Meraki Cloud Controller. Information on how to configure this on dashboard and also on the customer side is explained in the following article.
Remember that you need to download the Meraki-Cloud-Controller-MIB from your Organization > Settings page on dashboard. Please note that the Meraki MIB is updated with OIDs of new products accordingly.
SNMP GET Requests
These are simple requests sent to the Cloud Controller from the NMS to retrieve device and status information.
The following table shows the relevant details when using that option:
| Name | OID | MX | MS | MR | Type | Length | Possible Values | Significance | Notes |
| organizationName | 29671.1.1.1.0 | x | x | x | String | Name of organization being polled as set by administrator | |||
| networkId | 29671.1.1.2.1. 1.NetId |
x | x | x | String | Network Identifier (System Generated) | NetId will be consistent throughout the Meraki MIB and consists of 8 octets. Remains the same even if the name of the network changes. Network Identifier will be part of the dashboard URL. |
||
| networkName | 29671.1.1.2.1. 2.NetId |
x | x | x | String | Network name as set by administrator | NetId will be consistent throughout the Meraki MIB and consists of 8 octets. Remains the same even if the name of the network changes. Network name will be part of the dashboard URL (Spaces will be replaced with "-"). Meraki MIB splits combined networks into separate lines (e.g. Test Network - wireless, Test Network - switch, etc.) |
||
| ssidNetworkName | 29671.1.1.3.1. 1.NetId.Integer |
x | String | A designated NetId.Integer per enabled SSID in that network. (Integer starting with 1) | NetId.Integer will be consistent throughout the Meraki MIB. NetId consists of 8 octets and remains the same even if the name of the network changes | ||||
| ssidNumber | 29671.1.1.3.1. 2.NetId.Integer |
x | Integer | Designated order of SSID starting with 1. | NetId.Integer will be consistent throughout the Meraki MIB. NetId consists of 8 octets and remains the same even if the name of the network changes | ||||
| ssidName | 29671.1.1.3.1. 3.NetId.Integer |
x | String | Name of the enabled SSID | NetId.Integer will be consistent throughout the Meraki MIB. NetId consists of 8 octets and remains the same even if the name of the network changes | ||||
| devMac | 29671.1.1.4.1. 1.DevId |
x | x | x | Hex String | The MAC address of the device in 11 22 33 44 55 66 format | DevId will be consistent throughout the Meraki MIB | ||
| devName | 29671.1.1.4.1. 2.DevId |
x | x | x | String | Device name as set by administrator | DevId will be consistent throughout the Meraki MIB | ||
| devStatus | 29671.1.1.4.1. 3.DevId |
x | x | x | Integer | offline(0) online(1) alert(2) |
The status of the device's connection to the Meraki Cloud Controller | DevId will be consistent throughout the Meraki MIB | |
| devContactedAt | 29671.1.1.4.1. 4.DevId |
x | x | x | Date&Time | Timestamp of last device check-in in 2018-9-3,20:6:43.0,+0:0 format | DevId will be consistent throughout the Meraki MIB | ||
| devClientCount | 29671.1.1.4.1. 5.DevId |
x | x | x | Integer | The number of clients currently associated with the device | DevId will be consistent throughout the Meraki MIB | ||
| devMeshStatus | 29671.1.1.4.1. 6.DevId |
x | Integer | gateway(0) repeater(1) |
Whether the device is currently acting as a gateway or a repeater | DevId will be consistent throughout the Meraki MIB | |||
| devPublicIp | 29671.1.1.4.1. 7.DevId |
x | x | x | IP address | Whether the device is currently acting as a gateway (as opposed to a repeater). Public IPv4 address of the device (At last check-in) | DevId will be consistent throughout the Meraki MIB | ||
| devSerial | 29671.1.1.4.1. 8.DevId |
x | x | x | String | Serial number of the device | DevId will be consistent throughout the Meraki MIB | ||
| devProductCode | 29671.1.1.4.1. 9.DevId |
x | x | x | String | Product/Part number of the device (e.g. MR53-HW) | DevId will be consistent throughout the Meraki MIB | ||
| devProductDescription | 29671.1.1.4.1. 10.DevId |
x | x | x | String | Product name of the device (e.g. Meraki MR53 Cloud Managed AP) | DevId will be consistent throughout the Meraki MIB | ||
| devNetworkName | 29671.1.1.4.1. 11.DevId |
x | x | x | String | The name of the network this device is in. Useful in tables | DevId will be consistent throughout the Meraki MIB Meraki MIB splits combined networks into separate lines (e.g. Test Network - wireless, Test Network - switch, etc.) |
||
| devCellularStatus | 29671.1.1.4.1. 14.DevId |
x | String | Ready Connecting |
Cellular status of MX (USB takes precedence over integrated LTE) | DevId will be consistent throughout the Meraki MIB Device must be online with a USB/SIM card inserted for Cellular status to be retrieved. |
|||
| devInterfaceDevMac | 29671.1.1.5.1. 1.DevId.Integer |
x | x | x | Hex String | MAC address of the device itself. | DevId will be consistent throughout the Meraki MIB Integer starting from 0. |
||
| devInterfaceIndex | 29671.1.1.5.1. 2.DevId.Integer |
x | x | x | Integer | Designated index of an interface on the device | DevId will be consistent throughout the Meraki MIB Integer starting from 0. |
||
| devInterfaceName | 29671.1.1.5.1. 3.DevId.Integer |
x | x | x | String | wired0 wan1 (only MX64/67) apr0 (2.4GHz only MX) apr1 (5GHz only MX) wifi0 (2.4GHz only MR) wifi1 (5GHz only MR) wifi2 (BT only MR) port1 (only MX) port2 (only MX) port3 (only MX) port4 (only MX) port5 (only MX) port8 (only MX) port9 (only MX) port10 (only MX) port11 (only MX) port12 (only MX) lan1 (only MX64/67) lan2 (only MX64/67) lan3 (only MX64/67) lan4 (only MX64/67) |
Designated name of an interface on the device. wired0 (index0) indicates the following: -Uplink on switch -Uplink on MR wan1 (index0) indicates the single uplink on MX64/67 apr0 (index5) indicates the 2.4GHz radio on MX devices apr1 (index6) indicates the 5GHz radio on MX devices wifi0 (index2) indicates the 2.4GHz radio on MR devices (index0) wifi1 (index3) indicates the 5GHz radio on MR devices wifi2 (index4) indicates the bluetooth radio on MR devices portx indicates the port number on MX devices such as: port1 = uplink1 (index0) port2 = uplink2 (index1) port3 = first lan port (index2) port4 = second lan port (index3) port5 = third lan port (index4) port8 = fourth lan port (index7) port9 = fifth lan port (index8) port10 = sixth lan port (index9) port11 = sevnth lan port (index10) port12 = eighth lan port (index11) lanx indicates the LAN port number on MX64/67 devices such as: lan1 = first lan port (index1) lan2 = second lan port (index2) lan3 = third lan port (index3) lan4 = fourth lan port (index4) |
DevId will be consistent throughout the Meraki MIB Integer starting from 0. MX65 only reports on first 8 LAN ports (PoE/PoE+ not included) |
|
| devInterfaceSentPkts | 29671.1.1.5.1. 4.DevId.Integer |
x | x | x | Counter32 | 32 | Number of sent packets on an interface on the device. Triple radio MR reports on: wired0 wifi0 wifi1 wifi2 Dual Radio MR reports on: wired0 MX reports on: port1-5,8-12 apr0-1 MS reports on: wired0 |
DevId will be consistent throughout the Meraki MIB Integer starting from 0. |
|
| devInterfaceRecvPkts | 29671.1.1.5.1. 5.DevId.Integer |
x | x | x | Counter32 | 32 | Number of received packets on an interface on the device. Triple radio MR reports on: wired0 wifi0 wifi1 wifi2 Dual Radio MR reports on: wired0 MX reports on: port1-5,8-12 apr0-1 MS reports on: wired0 |
DevId will be consistent throughout the Meraki MIB Integer starting from 0. |
|
| devInterfaceSentBytes | 29671.1.1.5.1. 6.DevId.Integer |
x | x | x | Counter32 | 32 | Number of sent bytes on an interface on the device. Triple radio MR reports on: wired0 wifi0 wifi1 wifi2 Dual Radio MR reports on: wired0 MX reports on: port1-5,8-12 apr0-1 MS reports on: wired0 |
DevId will be consistent throughout the Meraki MIB Integer starting from 0. |
|
| devInterfaceRecvBytes | 29671.1.1.5.1. 7.DevId.Integer |
x | x | x | Counter32 | 32 | Number of received bytes on an interface on the device. Triple radio MR reports on: wired0 wifi0 wifi1 wifi2 Dual Radio MR reports on: wired0 MX reports on: port1-5,8-12 apr0-1 MS reports on: wired0 |
DevId will be consistent throughout the Meraki MIB Integer starting from 0. |
|
| vlanNetworkName | 29671.1.1.6.1. 1.DevId.VlanId |
x | x | String | A designated DevId.VlanId per enabled VLAN on the MX. (VlanId is the numeric VLAN tag) | DevId will be consistent throughout the Meraki MIB VlanId starting from 0-4096 (0 always included designating single LAN settings) |
|||
| vlanNumber | 29671.1.1.6.1. 2.DevId.VlanId |
x | x | Integer | Vlan number (even if disabled) on the device | DevId will be consistent throughout the Meraki MIB VlanId starting from 0-4096 (0 always included designating single LAN settings) |
|||
| vlanName | 29671.1.1.6.1. 3.NetId.VlanId |
x | x | String | Vlan name (even if disabled) on the device | NetId will be consistent throughout the Meraki MIB VlanId starting from 0-4096 (0 always included designating single LAN settings) |
snmpwalk -v2c -t 10 -c <community> -Ob -M +. -m +MERAKI-CLOUD-CONTROLLER-MIB <network-link>:16100
SNMP Traps
These are updates sent from the Cloud Controller to inform the NMS on device and status information.
The following table shows the relevant details when using that option:
| # | Name | OID | MX | MS | MR | Significance | Notes |
|---|---|---|---|---|---|---|---|
| 1 | testTrap | testTrap.networkName | x | x | x | A test trap to verify whether the receiving server is configured correctly. | The name of the network where the trap configuration resides will be sent as well |
| 2 | deviceGoesDownTrap | deviceGoesDownTrap .devMac.networkName .organizationName |
x | x | x | Alert when a device becomes unreachable from the Meraki cloud. | The device's mac address is enclosed |
| 3 | deviceComesOnline | deviceGoesDownTrap .devMac.networkName .organizationName |
x | x | x | Alert when a device reconnects to the Meraki cloud. | The device's mac address is enclosed |
| 4 | foreignAPDetected | foreignAPDetected.devMac .networkName .organizationName |
x | Alert when an unknown access point appears on the network | The device's mac address is enclosed | ||
| 5 | cellularNetworkUp | cellularNetworkUp .networkName .organizationName .devMac.devInterfaceModel .devInterfaceCarrier .devInterfaceName |
x | Alert when a network connects to a cellular network | devInterfaceModel: The model of the interface. Useful for cellular interfaces. devInterfaceCarrier: The carrier for the interface. Useful for cellular interfaces |
||
| 6 | cellularNetworkDown | cellularNetworkDown .networkName .organizationName .devMac .devInterfaceModel .devInterfaceCarrier .devInterfaceName |
x | Alert when a network disconnects from a cellular network | devInterfaceModel: The model of the interface. Useful for cellular interfaces. devInterfaceCarrier: The carrier for the interface. Useful for cellular interfaces |
||
| 7 | newDhcpServerAlert | newDhcpServerAlert .networkName .organizationName .devMac.devLanIp .devSubnet.vlanNumber |
x | Alert when a new dhcp server appears on the network | devLanIp: The LAN IP of the device. Useful for DHCP server alerts. devSubnet: The subnet the device is on. Useful for DHCP server alerts |
||
| 8 | noDhcpLeases | noDhcpLeases.networkName .organizationName.devMac .devLanIp.vlanNumber |
x | Alert when DHCP leases are exhausted | devLanIp: The LAN IP of the device. Useful for DHCP server alerts | ||
| 9 | uplinkStatusChanged | uplinkStatusChanged .networkName .organizationName .devMac.devInterfaceName |
x | x | x | Alert when an uplink status changes | |
| 10 | unreachableDevices Detected |
unreachableDevicesDetected .networkName .organizationName |
x | x | x | Unreachable devices have been detected on the network. Adjust firewall settings accordingly | |
| 11 | upcomingFirewall InformationChanges |
upcomingFirewallInformation Changes.networkName .organizationName |
x | x | x | Upcoming firewall information changes. Adjust firewall settings accordingly | |
| 12 | gatewayToRepeater | gatewayToRepeater .networkName .organizationName .devMac |
x | Alert when a gateway becomes a repeater | |||
| 13 | ipConflict | ipConflict.networkName .organizationName .devLanIp.devMac |
x | Alert if a client IP conflict is detected | |||
| 14 | newSplashSignup | newSplashSignup .networkName .organizationName .ssidName.userName .userEmail |
x | Alert when a new splash user registers to an SSID | userName: Name of user connected to SSID userEmail: Email of user connected to SSID |
||
| 15 | portCableError | portCableError .networkName .organizationName .devMac .devInterfaceDescription .devInterfacePortDescription |
x | Alert when a cable error is detected | devInterfaceDescription: Description for the interface. Useful for information about ports. devInterfacePortDescription: Description for errors occurring on the interface. Useful for information about ports. |
||
| 16 | portConnected | portConnected .networkName .organizationName .devMac .devInterfaceDescription |
x | Alert when a switch port is connected | devInterfaceDescription: Description for the interface. Useful for information about ports. devInterfacePortDescription: Description for errors occurring on the interface. Useful for information about ports. |
||
| 17 | portDisconnected | portDisconnected .networkName .organizationName .devMac .devInterfaceDescription |
x | Alert when a switch port is disconnected | devInterfaceDescription: Description for the interface. Useful for information about ports. devInterfacePortDescription: Description for errors occurring on the interface. Useful for information about ports. |
||
| 18 | portSpeedChange | portSpeedChange .networkName .organizationName .devMac .devInterfaceDescription .devInterfacePortDescription |
x | Alert when a switch port link speed changed | devInterfaceDescription: Description for the interface. Useful for information about ports. devInterfacePortDescription: Description for errors occurring on the interface. Useful for information about ports. |
||
| 19 | rogueDhcpServer | rogueDhcpServer .networkName .organizationName .devMac .devSubnet .devLanIp.vlanNumber |
x | Alert when a rogue DHCP server is detected. | Contains the mac, IP, subnet and VLAN of the Rogue DHCP server. devLanIp: The LAN IP of the device. Useful for DHCP server alerts. devSubnet: The subnet the device is on. Useful for DHCP server alerts |
||
| 20 | settingsChanged | settingsChanged .networkName .organizationName .networkAdmin .changeDescription |
x | x | x | Alert when Meraki Dashboard settings are changed. | Includes information about the network admin that made the change. changeDescription: The description of a settingsChanged event networkAdmin: Name and email of a network admin |
| 21 | unreachableRadius Server |
unreachableRadiusServer .networkName .organizationName .radiusServerIp .ssidName.devLanIp |
x | x | x | Alert when a RADIUS authentication server becomes unreachable. | Contains the IP of the RADIUS server, the IP of the Meraki server having trouble connecting to it and the name of the SSID that uses the RADIUS server radiusServerIp: IP address of RADIUS server used for authentication on an SSID. |
| 22 | vpnConnectivityChange | vpnConnectivityChange .networkName .organizationName .devMac .vpnPeer .devStatus .tunnelDescription |
x | Alert when VPN connectivity changed. | Contains the IP and port of VPN peer, the mac address of the device used to VPN, and the status whether or not the VPN is on or offline. tunnelDescription: A JSON description of the tunnel's detailed information vpnPeer: IP and port of a VPN peer connected to the network |
||
| 23 | warmSpare FailoverDetected |
warmSpareFailoverDetected .networkName .organizationName .devMac.devStatus |
x | x | Alert when a warm spare failover is detected | ||
| 24 | loginAttempt | loginAttempt.networkName .organizationName .loginEmail .loginResult .loginDescription |
x | x | x | Alert when a login attempt is detected | loginEmail: The email used for the login attempt loginResult: The result of the login attempt, either success or failure loginDescription: A JSON description of the login attempt which includes the location and time of the attempt |
| 25 | malwareDetected | malwareDetected .networkName .organizationName |
x | Alert when malware has been downloaded on the network | |||
| 26 | malwareBlocked | malwareBlocked .networkName .organizationName |
x | Alert when malware download attempt has been blocked on the network | |||
| 27 | powerSupplyUp | powerSupplyUp .devMac .powerSupplyNum |
x | x | Alert when an external power supply gains connectivity | powerSupplyNum: External power supply number. Will be 0 for redundant supplies and 1+ for modular supplies | |
| 28 | powerSupplyDown | powerSupplyDown .devMac .powerSupplyNum |
x | x | Alert when an external power supply loses connectivity | powerSupplyNum: External power supply number. Will be 0 for redundant supplies and 1+ for modular supplies | |
| 29 | redundantPower SupplyBackup |
redundantPowerSupply Backup.devMac .powerSupplyNum |
x | Alert when an external redundant power supply is providing primary power to a switch. | Only applies to Layer 2 switches. powerSupplyNum: External power supply number. Will be 0 for redundant supplies and 1+ for modular supplies |
||
| 30 | redundantPower SupplyBackToPrimary |
redundantPowerSupply BackToPrimary .devMac.powerSupplyNum |
x | Alert when the internal power supply returns to providing primary power to a switch. | Only applies to Layer 2 switches. powerSupplyNum: External power supply number. Will be 0 for redundant supplies and 1+ for modular supplies. |
||
| 31 | udldError | udldError.devMac .portNumber .devInterfacePortDescription .actionTaken |
x | Alert when there are UDLD errors seen on a port | actionTaken: Action taken on the port | ||
| 32 | criticalTemperature | powerSupplyDown.devMac | x | x | Alert when a device starts operating at critical temperature |
Device Polling
The second option for SNMP polling a Meraki infrastructure is to poll the Meraki device directly. Information on how to configure this on dashboard and also on the customer side is explained in the following article.
SNMPv2-MIB
The following table shows the relevant details when using that option:
| Name | OID | Type | Length | Possible values | Significance |
|---|---|---|---|---|---|
| sysDescr | 1.3.6.1.2.1.1.1 | String | A textual description of the entity. This value should include the full name and version identification of the system's hardware type, software operating-system, and networking software. It is mandatory that this only contain printable ASCII characters. | ||
| sysObjectID | 1.3.6.1.2.1.1.2 | OID | The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determining `what kind of box' is being managed. For example, if vendor `Flintstones, Inc.' was assigned the subtree 1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'." | ||
| sysName | 1.3.6.1.2.1.1.5 | String | An administratively-assigned name for this managed node | ||
| sysORID | 1.3.6.1.2.1.1.9.1.2 | OID | An authoritative identification of a capabilities statement with respect to various MIB modules supported by the local SNMP application acting as a command responder | ||
| sysORDescr | 1.3.6.1.2.1.1.9.1.3 | String | A textual description of the capabilities identified by the corresponding instance of sysORID | ||
| sysORUpTime | 1.3.6.1.2.1.1.9.1.4 | Timeticks | The value of sysUpTime at the time this conceptual row was last instantiated |
IF-MIB
The following table shows the relevant details when using that option:
| Name | OID | Type | Length | Possible Values | Significance |
|---|---|---|---|---|---|
| ifNumber | 1.3.6.1.2.1.2.1 | Integer | 1-x | The number of network interfaces (regardless of their current state) present on this system | |
| ifIndex | 1.3.6.1.2.1.2.2.1.1 | Integer | 1-x | A unique value for each interface. Its value ranges between 1 and the value of ifNumber. | |
| ifDescr | 1.3.6.1.2.1.2.2.1.2 | String | A textual string containing information about the interface. | ||
| ifType | 1.3.6.1.2.1.2.2.1.3 | Integer | other(1), regular1822(2), hdh1822(3), ddn-x25(4), rfc877-x25(5), ethernet-csmacd(6), iso88023-csmacd(7), iso88024-tokenBus(8), iso88025-tokenRing(9), iso88026-man(10), starLan(11), proteon-10Mbit(12), proteon-80Mbit(13), hyperchannel(14), fddi(15), lapb(16), sdlc(17), ds1(18), e1(19), basicISDN(20), primaryISDN(21), propPointToPointSerial(22), ppp(23), softwareLoopback(24), eon(25), ethernet-3Mbit(26), nsip(27), slip(28), ultra(29), ds3(30), sip(31), frame-relay(32) |
The type of interface, distinguished according to the physical/link protocol(s) immediately `below' the network layer in the protocol stack. | |
| ifMtu | 1.3.6.1.2.1.2.2.1.4 | Integer | The size of the largest packet which can be sent/received on the interface, specified in octets. | ||
| ifSpeed | 1.3.6.1.2.1.2.2.1.5 | Guage32 | An estimate of the interface's current bandwidth in bits per second between 0 and 4,294,967,295 | ||
| ifPhysAddress | 1.3.6.1.2.1.2.2.1.6 | String | The interface's address at its protocol sub-layer. (Typically the MAC address) | ||
| ifAdminStatus | 1.3.6.1.2.1.2.2.1.7 | Integer | up(1), down(2), testing(3) |
The desired state of the interface. The testing(3) state indicates that no operational packets can be passed. | |
| ifOperStatus | 1.3.6.1.2.1.2.2.1.8 | up(1), down(2), testing(3) |
The current operational state of the interface. The testing(3) state indicates that no operational packets can be passed. | ||
| ifLastChange | 1.3.6.1.2.1.2.2.1.9 | Timeticks | Value of sysUpTime at the time the interface entered its current operational state. If the current state was entered prior to the last re-initialization of the local network management subsystem, then this object contains a zero value. | ||
| ifInOctets | 1.3.6.1.2.1.2.2.1.10 | Counter32 | 32 | The total number of octets received on the interface, including framing characters. | |
| ifInUcastPkts | 1.3.6.1.2.1.2.2.1.11 | Counter32 | 32 | The number of packets, delivered by this sub-layer to a higher (sub-)layer, which were not addressed to a multicast or broadcast address at this sub-layer. | |
| ifInNUcastPkts | 1.3.6.1.2.1.2.2.1.12 | Counter32 | 32 | The number of packets, delivered by this sub-layer to a higher (sub-)layer, which were addressed to a multicast or broadcast address at this sub-layer. | |
| ifInDiscards | 1.3.6.1.2.1.2.2.1.13 | Counter32 | 32 | The number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. One possible reason for discarding such a packet could be to free up buffer space. | |
| ifInErrors | 1.3.6.1.2.1.2.2.1.14 | Counter32 | 32 | For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character- oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. | |
| ifOutOctets | 1.3.6.1.2.1.2.2.1.16 | Counter32 | 32 | The total number of octets transmitted out of the interface, including framing characters. | |
| ifOutUcastPkts | 1.3.6.1.2.1.2.2.1.17 | Counter32 | 32 | The total number of packets that higher-level protocols requested be transmitted, and which were not addressed to a multicast or broadcast address at this sub-layer, including those that were discarded or not sent. | |
| ifOutNUcastPkts | 1.3.6.1.2.1.2.2.1.18 | Counter32 | 32 | The total number of packets that higher-level protocols requested be transmitted, and which were addressed to a multicast or broadcast address at this sub-layer, including those that were discarded or not sent | |
| ifOutDiscards | 1.3.6.1.2.1.2.2.1.19 | Counter32 | 32 | The number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being transmitted. One possible reason for discarding such a packet could be to free up buffer space. | |
| ifOutErrors | 1.3.6.1.2.1.2.2.1.20 | Counter32 | 32 | For packet-oriented interfaces, the number of outbound packets that could not be transmitted because of errors. For character-oriented or fixed-length interfaces, the number of outbound transmission units that could not be transmitted because of errors. | |
| ifOutQLen | 1.3.6.1.2.1.2.2.1.21 | Guage32 | 32 | The length of the output packet queue (in packets) | |
| ifSpecific | 1.3.6.1.2.1.2.2.1.22 | OID | Depracated by IETF | ||
| ifName | 1.3.6.1.2.1.31.1.1.1 | String | An entry containing additional management information applicable to a particular interface. | ||
| ifInMulticastPkts | 1.3.6.1.2.1.31.1.1.1.2 | Counter32 | 32 | The number of packets, delivered by this sub-layer to a higher (sub-)layer, which were addressed to a multicast address at this sub-layer. For a MAC layer protocol, this includes both Group and Functional addresses. | |
| ifInBroadcastPkts | 1.3.6.1.2.1.31.1.1.1.3 | Counter32 | 32 | The number of packets, delivered by this sub-layer to a higher (sub-)layer, which were addressed to a broadcast address at this sub-layer. | |
| ifOutMulticastPkts | 1.3.6.1.2.1.31.1.1.1.4 | Counter32 | 32 | The total number of packets that higher-level protocols requested be transmitted, and which were addressed to a multicst address at this sub-layer, including those that were discarded or not sent. | |
| ifOutBroadcastPkts | 1.3.6.1.2.1.31.1.1.1.5 | Counter32 | 32 | The total number of packets that higher-level protocols requested be transmitted, and which were addressed to a broadcast address at this sub-layer, including those that were discarded or not sent. | |
| ifHCInOctets | 1.3.6.1.2.1.31.1.1.1.6 | Counter64 | 64 | The total number of octets received on the interface, including framing characters. | |
| ifHCInUcastPkts | 1.3.6.1.2.1.31.1.1.1.7 | Counter64 | 64 | The number of packets, delivered by this sub-layer to a higher (sub-)layer, which were not addressed to a multicast or broadcast address at this sub-layer. | |
| ifHCInMulticastPkts | 1.3.6.1.2.1.31.1.1.1.8 | Counter64 | 64 | The number of packets, delivered by this sub-layer to a higher (sub-)layer, which were addressed to a multicast address at this sub-layer. For a MAC layer protocol, this includes both Group and Functional addresses. | |
| ifHCInBroadcastPkts | 1.3.6.1.2.1.31.1.1.1.9 | Counter64 | 64 | The number of packets, delivered by this sub-layer to a higher (sub-)layer, which were addressed to a broadcast address at this sub-layer. | |
| ifHCOutOctets | 1.3.6.1.2.1.31.1.1.1.10 | Counter64 | 64 | The total number of octets transmitted out of the interface, including framing characters. | |
| ifHCOutUcastPkts | 1.3.6.1.2.1.31.1.1.1.11 | Counter64 | 64 | The total number of packets that higher-level protocols requested be transmitted, and which were not addressed to a multicast or broadcast address at this sub-layer, including those that were discarded or not sent. | |
| ifHCOutMulticastPkts | 1.3.6.1.2.1.31.1.1.1.12 | Counter64 | 64 | The total number of packets that higher-level protocols requested be transmitted, and which were addressed to a multicast address at this sub-layer, including those that were discarded or not sent. For a MAC layer protocol, this includes both Group and Functional addresses. | |
| ifHCOutBroadcastPkts | 1.3.6.1.2.1.31.1.1.1.13 | Counter64 | 64 | The total number of packets that higher-level protocols requested be transmitted, and which were addressed to a broadcast address at this sub-layer, including those that were discarded or not sent. | |
| ifHighSpeed | 1.3.6.1.2.1.31.1.1.1.15 | Guage32 | 32 | An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of `n' then the speed of the interface is somewhere in the range of `n-500,000' to `n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero. | |
| ifAlias | 1.3.6.1.2.1.31.1.1.1.18 | STRING | This object is an 'alias' name for the interface as specified by a network manager, and provides a non-volatile 'handle' for the interface |
Special cases and sample outputs
This section explains the expected output for special cases such as an MX with a single or dual uplinks.
Please refer to the notes for further explanations.
| Device | Uplink configuration | MIB | snmpwalk output | Notes |
|---|---|---|---|---|
| MX64/67 |
Single uplink wan1 (index1) |
IF-MIB |
F-MIB::ifOperStatus.1 = INTEGER: up(1)
IF-MIB::ifInUcastPkts.1 = Counter32: 2143265
|
Single uplink report its operational status and will toggle after any change. It will also increment the interface counters |
|
Dual uplink wan1 (index1) lan4 (index5) |
IF-MIB |
IF-MIB::ifOperStatus.1 = INTEGER: up(1) IF-MIB::ifOperStatus.5 = INTEGER: up(1)
IF-MIB::ifInUcastPkts.1 = Counter32: 2475811 IF-MIB::ifInUcastPkts.5 = Counter32: 22960 |
Both uplinks report their operational status and will toggle after any change (see below screenshot1)
Both uplinks will increment the interface counters which is useful for dual link MX64/67s |
|
| All other MXs |
Single uplink wan1 (index1) |
IF-MIB | ||
|
Dual uplink wan1 (index1) lan4 (index5) |
IF-MIB |
screenshot1

Excel files
Download the Meraki Security Appliance SNMP spreadsheet for an Excel format of the tables.

