DLINKSW-IP-SOURCE-GUARD-MIB
AI MIB Summary
The DLINKSW-IP-SOURCE-GUARD-MIB manages D-Link switch IP Source Guard policies by configuring static IP-to-MAC address bindings and dynamic binding tables to enforce Layer 2 port security and prevent IP spoofing attacks.
The MIB module is for configuration of IP Source Guard feature.
Main OID:
dlinkSwIpSourceGuardMIB.1.3.6.1.4.1.171.14.132
28
Objects
Active
Status
8
Dependencies
Imported Objects
Objects
28 total| Object Name |
|---|
dlinkSwIpSourceGuardMIBThe MIB module is for configuration of IP Source Guard feature. MODULE-IDENTITY .1.3.6.1.4.1.171.14.132 |
dIpSourceGuardMIBNotifs OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.132.0 |
dIpSourceGuardMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.132.1 |
dIpsgBindings OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.132.1.1 |
dIpsgStaticBindingsTableA table provides the manual bindings information.
e.g.
VLAN MAC Address IP Address Interface
-
2000 00.01.02.03.04.05 172.18.1.1 8
3000 00.05.06.07.08.09 10.1.1.1 3
4094 00.10.20.30.40.55 1.1.1.1 5
4094 00.10.20.30.40.55 1.1.1.1 6
4094 00.10.20.30.40.55 1.1.1.1 8 SEQUENCE OF DigStaticBindingsEntry .1.3.6.1.4.1.171.14.132.1.1.1 |
dIpsgStaticBindingsEntryAn entry defines a manual binding. DigStaticBindingsEntry .1.3.6.1.4.1.171.14.132.1.1.1.1 |
dIpsgStaticBindingsVlanThis object indicates the VLAN to which a host belongs. VlanId (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.132.1.1.1.1.1 |
dIpsgStaticBindingsMacAddressThis object indicates the MAC address of a host. MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.132.1.1.1.1.2 |
dIpsgStaticBindingsIpAddressThis object indicates the allocated IP address of host. InetAddressIPv4 (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.14.132.1.1.1.1.3 |
dIpsgStaticBindingsInterfaceThis object indicates the ifIndex value of the interface
where a host connects to. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.171.14.132.1.1.1.1.4 |
dIpsgStaticBindingsRowStatusThis object is used to manage the creation and deletion
of rows in this table.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.132.1.1.1.1.99 |
dIpsgSrcGuard OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.132.1.2 |
dIpsgIfSrcGuardConfigTableA table provides the mechanism to enable or disable
IP Source Guard at every interface capable of
this feature.
When DHCP Snooping is enabled at an interface, a list of
IP addresses is obtained through DHCP Snooping for this
particular interface. If IP Source Guard is enabled, only
traffic from these IP addresses is allowed to pass through
the interface. SEQUENCE OF DigIfSrcGuardConfigEntry .1.3.6.1.4.1.171.14.132.1.2.1 |
dIpsgIfSrcGuardConfigEntryA row instance contains the configuration to enable
or disable IP Source Guard as well as the configuration
of the filter type at each interface capable
of IP Source Guard feature. DigIfSrcGuardConfigEntry .1.3.6.1.4.1.171.14.132.1.2.1.1 |
dIpsgIfSrcGuardFilterTypeThis object indicates the traffic filter type applied
at this interface.
'disable' - indicates that IP Source Guard feature is disabled.
'ip' - the validation is based on source IP address and VLAN only.
'ipMac' - the validation is based on the source MAC address, VLAN and IP address.rw Enumeration .1.3.6.1.4.1.171.14.132.1.2.1.1.1 |
dIpsgIfSrcGuardAddrTableA table provides the information on IP addresses used
for IP Source Guard purpose at every interface capable of this
feature. SEQUENCE OF DigIfSrcGuardAddrEntry .1.3.6.1.4.1.171.14.132.1.2.2 |
dIpsgIfSrcGuardAddrEntryAn entry defines a binding information that is used to guard the
IP traffic.
The binding entry may be either manually configured or
automatically learned via DHCP snooping. DigIfSrcGuardAddrEntry .1.3.6.1.4.1.171.14.132.1.2.2.1 |
dIpsgIfSrcGuardIndexThis object is used to index the dIpsgIfSrcGuardAddrTable.
This index is for SNMP purposes only, and has no intrinsic meaning. Unsigned32 ( 1 ..65535 ) .1.3.6.1.4.1.171.14.132.1.2.2.1.1 |
dIpsgIfSrcGuardFilterModeThis object indicates the Source Guard filter mode at
this interface.
active(1) indicates that the Source Guard feature is
active at this interface.
inactiveTrustPort(2) indicates that the Source Guard
feature is inactive because this interface is a DHCP
Snooping trust interface and all IP traffic is permitted.
In this case, dIpsgIfSrcGuardIpFilterAction is 'permitAllIpAdress'.
inactiveNoSnoopingVlan(3) indicates that the Source
Guard feature is inactive because this interface
does not have a VLAN which has DHCP Snooping enabled and
no IP source verify entry is active. In this case, all IP traffic
is denied and dIpsgIfSrcGuardIpFilterAction is 'denyAllIpAddress'.
If this object is not 'active', the entry is a special entry:
traffic from any VLANs on the interface has the same behavior
indicated by dIpsgIfSrcGuardIpFilterAction and both
dIpsgIfSrcGuardVlansFirst2K and dIpsgIfSrcGuardVlansSecond2K
are empty.ro Enumeration .1.3.6.1.4.1.171.14.132.1.2.2.1.2 |
dIpsgIfSrcGuardIpAddressThis object indicates the IP address of the entry.
A special value of '0.0.0.0' indicates this object is meaningless.ro InetAddressIPv4 (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.14.132.1.2.2.1.3 |
dIpsgIfSrcGuardIpFilterActionThis object indicates the IP Source Guard action
applied at this interface with respect to IP traffic.
permitIpAddress(1) - indicates that matching IP traffic will be allowed
to go through. What is matching traffic depends on the value of
dIpsgIfSrcGuardMacFilterAction.
permitAllIpAdress(2) indicates that all IP traffic coming to this
interface will be allowed. In this case, dIpsgIfSrcGuardIpAddress
is 0.0.0.0.
denyAllIpAdress(3) indicates that all IP traffic coming to this
interface will be dropped. In this case, dIpsgIfSrcGuardIpAddress
is 0.0.0.0.
When this object is not 'permitIpAddress', the value of
dIpsgIfSrcGuardMacFilterAction is meaningless.ro Enumeration .1.3.6.1.4.1.171.14.132.1.2.2.1.4 |
dIpsgIfSrcGuardMacAddressThis object indicates the MAC address of the entry.
A special value of '000000000000'H indicates this object is
meaningless.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.132.1.2.2.1.5 |
dIpsgIfSrcGuardMacFilterActionThis object indicates the Source Guard action
applied when the traffic matching the entry:
allowMacAddress(1) - indicates that the IP traffic (compared
source IP and source MAC with dIpsgIfSrcGuardIpAddress and
dIpsgIfSrcGuardMacAddress respectively) will be allowed
to go through.
permitAllMacAddresses(2) - If dIpsgIfSrcGuardIpFilterAction is
'permitIpAddress', this value indicates that all the IP matching
traffic (compared source IP with dIpsgIfSrcGuardIpAddress only)
will be allowed to go through.
When dIpsgIfSrcGuardIpFilterAction is 'permitAllIpAdress' or
'denyAllIpAdress', this object is meaningless.
When dIpsgIfSrcGuardMacFilterAction is 'permitAllMacAddresses',
dIpsgIfSrcGuardMacAddress is meaningless and
'000000000000'H is used to indicate it.ro Enumeration .1.3.6.1.4.1.171.14.132.1.2.2.1.6 |
dIpsgIfSrcGuardVlansFirst2KThis object specifies the VLANs the entry is applied to in a
string of octets containing one bit per VLAN for VLANs 1 to 2048.
If the bit is set to '1', then the IP Source Guard is enabled on
the VLAN.ro Dlink2kVlanList (DLINKSW-TC-MIB) .1.3.6.1.4.1.171.14.132.1.2.2.1.7 |
dIpsgIfSrcGuardVlansSecond2KThis object specifies the VLANs the entry is applied to in a
string of octets containing one bit per VLAN for VLANs 2049 to 4094.
If the bit is set to '1', then the IP Source Guard is enabled on
the VLAN.ro Dlink2kVlanList (DLINKSW-TC-MIB) .1.3.6.1.4.1.171.14.132.1.2.2.1.8 |
dIpSourceGuardMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.132.2 |
dIpsgMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.132.2.1 |
dIpsgMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.132.2.2 |