HP-ICF-DHCP-SNOOP-MIB
This MIB module contains HP proprietary objects for managing DHCP Snooping.
Main OID:
hpicfIpDhcpSnoop.1.3.6.1.4.1.25506.11.1.34
65
Objects
Active
Status
8
Dependencies
Imported Objects
Objects
65 total| Object Name |
|---|
hpicfIpDhcpSnoopThis MIB module contains HP proprietary
objects for managing DHCP Snooping. MODULE-IDENTITY .1.3.6.1.4.1.25506.11.1.34 |
hpicfDhcpSnoopNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.0 |
hpicfDhcpSnoopErrantReplyAn hpicfDhcpSnoopErrantReply notification signifies that
the DHCP snooping entity has detected and dropped an
errant DHCP response packet. NOTIFICATION-TYPE .1.3.6.1.4.1.25506.11.1.34.0.1 |
hpicfIpDhcpSnoopObjects OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.1 |
hpicfIpDhcpSnoopConfig OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.1.1 |
hpicfDhcpSnoopGlobalCfg OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.1.1.1 |
hpicfDhcpSnoopEnableThe administrative status of the DHCP Snooping
feature.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.1.1.1 |
hpicfDhcpSnoopVlanEnableThe administrative status for DHCP Snooping on
each VLAN. There will be one bit in this string
for each possible VLAN ID. Each octet within this
value specifies a set of eight VLANs, with the first
octet specifying VLAN IDs 1 through 8, the second
octet specifying VLAN IDs 9 through 16, etc. Within
each octet, the most significant bit represents the
lowest numbered VLAN ID, and the least significant
bit represents the highest numbered VLAN ID. Thus,
each possible VLAN ID of the bridge is represented by
a single bit within the value of this object. If
a bit at position 'n' has a value of '1', then
DHCP Snooping is enabled on VLAN 'n'.
If this bit has a value of '0',DHCP Snooping
is not enabled on the VLAN 'n',rw OCTET STRING .1.3.6.1.4.1.25506.11.1.34.1.1.1.2 |
hpicfDhcpSnoopVerifyMacWhen this variable is set to 'true', DHCP Snooping
will verify that the MAC address in the chaddr field
of the DHCP header matches the source MAC address in
all DHCP packets received on untrusted ports. When
this variable is set to 'false', DHCP Snooping will
omit this check. The value of this variable is
ignored when DHCP Snooping is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.1.1.3 |
hpicfDhcpSnoopDatabaseFileA location to store the lease database, or
to retrieve it after a reboot. The location
must be given in the form of a Uniform
Resource Locator (URL) as defined in RFC
2396. The allowed character sets and the
encoding rules defined in RFC 2396 section 2
apply.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.25506.11.1.34.1.1.1.4 |
hpicfDhcpSnoopDatabaseWriteDelayThe number of seconds to delay writing the
DHCP lease database file after a database
change. This potentially allows grouping
multiple database changes into a single
write. The default is 300 seconds.rw Unsigned32 .1.3.6.1.4.1.25506.11.1.34.1.1.1.5 |
hpicfDhcpSnoopDatabaseWriteTimeoutThe number of seconds to wait for the
database file transfer to finish before
giving up and declaring a failure. A
value of 0 means continue retrying
indefinitely. The default is 300 seconds.rw Unsigned32 .1.3.6.1.4.1.25506.11.1.34.1.1.1.6 |
hpicfDhcpSnoopOpt82InsertWhen this object is set to true, DHCP snooping
will add a DHCP relay information option to
DHCP client packets that it forwards on
trusted ports, and will examine and strip DHCP
relay information options that were inserted
by this switch on DHCP server packets that it
forwards to untrusted ports. Note that when
DHCP relay and DHCP snooping are both enabled,
and this object is set to true, relay
information option processing will be handled
by DHCP snooping, and any DHCP relay settings
for relay information option processing will
be ignored. This object defaults to true.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.1.1.7 |
hpicfDhcpSnoopOpt82PolicyThis object configures the behavior of DHCP
snooping when forwarding a DHCP packet from
an untrusted port that already has a DHCP
relay information option present. The
policies supported are:
keep - forward the packet without
updating the existing option
replace - replace the existing option
with one generated by this switch
drop - drop the packet
This policy is only applied if DHCP snooping is
enabled and hpicfDhcpSnoopOpt82Insert is true.
In all cases where this policy is applied, if
there is no relay information option present in
the received packet, DHCP snooping will add one.
The default policy is drop.rw Enumeration .1.3.6.1.4.1.25506.11.1.34.1.1.1.8 |
hpicfDhcpSnoopOpt82RemoteIdThis object configures the value that will be
used for the remote ID sub-option of the relay
information option that will be inserted by
DHCP snooping. The possible values are:
mac - switch MAC address
subnetIP - switch IP address on the VLAN on
which the DHCP packet was received
mgmtIP - switch IP address on the management
VLAN
The value of this object is ignored unless DHCP
snooping is enabled and hpicfDhcpSnoopOpt82Insert
is true. The default value is mac.rw Enumeration .1.3.6.1.4.1.25506.11.1.34.1.1.1.9 |
hpicfDhcpSnoopErrantReplyEnableThe operational status of hpicfDhcpSnoopErrantReply
notifications. The default value is 1 (Enabled). A value
of 2 represents Disabled. Writing this object requires
authentication, such as provided by SNMPv3.rw Enumeration .1.3.6.1.4.1.25506.11.1.34.1.1.1.10 |
hpicfDhcpSnoopPortTablePer-interface configuration for DHCP Snooping. SEQUENCE OF HpicfDhcpSnoopPortEntry .1.3.6.1.4.1.25506.11.1.34.1.1.2 |
hpicfDhcpSnoopPortEntryDHCP snooping configuration information for
a single port. HpicfDhcpSnoopPortEntry .1.3.6.1.4.1.25506.11.1.34.1.1.2.1 |
hpicfDhcpSnoopPortTrustThis object indicates whether this port is
trusted for DHCP snooping.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.1.2.1.1 |
hpicfDhcpSnoopServerTableTable of authorized DHCP server addresses. SEQUENCE OF HpicfDhcpSnoopServerEntry .1.3.6.1.4.1.25506.11.1.34.1.1.3 |
hpicfDhcpSnoopServerEntryA row in the table, containing the address of a
single authorized DHCP server. HpicfDhcpSnoopServerEntry .1.3.6.1.4.1.25506.11.1.34.1.1.3.1 |
hpicfDhcpSnoopServerAddrTypeThe type of address in
hpicfDhcpSnoopServerAddress. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.34.1.1.3.1.1 |
hpicfDhcpSnoopServerAddressThe address of a known valid DHCP server. The
type of address contained in this object is
indicated by hpicfDhcpSnoopServerAddrType. For
DHCP snooping to allow a server to client packet
to be forwarded, it must be received on a trusted
port from a server address in this table. If this
table is empty, all addresses are trusted.
Note that this feature compares the source address
of the received DHCP server packet against the
addresses in this table. This means that this
table needs to contain trusted server addresses
as well as trusted DHCP relays that a server
packet may be relayed through. InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.34.1.1.3.1.2 |
hpicfDhcpSnoopServerStatusThe status of this DHCP server address entry.
Only 'active' entries are used when validating
DHCP server packets.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.1.3.1.3 |
hpicfIpStaticBindingsTableA table of configured static IP address
bindings for this device. Active rows in
this table will also be reported in the
hpicfDhcpSnoopBindingsTable as entries with
an hpicfDhcpSnoopBindingsLeaseTime of
0xffffffff and an hpicfDhcpSnoopBindingsType
of 'static'. SEQUENCE OF HpicfIpStaticBindingsEntry .1.3.6.1.4.1.25506.11.1.34.1.1.4 |
hpicfIpStaticBindingsEntryA row in the table, containing a single static
IP address binding. HpicfIpStaticBindingsEntry .1.3.6.1.4.1.25506.11.1.34.1.1.4.1 |
hpicfIpStaticBindingsVlanThe VLAN ID on which this static address
binding is valid. VlanIndex .1.3.6.1.4.1.25506.11.1.34.1.1.4.1.1 |
hpicfIpStaticBindingsAddrTypeThe type of IP address contained in
hpicfIpStaticBindingsAddress. The only
values expected are ipv4 or ipv6. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.34.1.1.4.1.2 |
hpicfIpStaticBindingsAddressThe static IP address of this binding.
The type of address contained in this
object is indicated by
hpicfIpStaticBindingsAddrType. InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.34.1.1.4.1.3 |
hpicfIpStaticBindingsMacAddressThe MAC address associated with this
static binding on this VLAN.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.1.4.1.4 |
hpicfIpStaticBindingsInterfaceThe interface that this static IP address
binding is valid on in this VLAN.rw InterfaceIndex (IF-MIB) .1.3.6.1.4.1.25506.11.1.34.1.1.4.1.5 |
hpicfIpStaticBindingsStatusThe status of this static IP address
binding. This object cannot be set to
'active' until valid value has been
configured for hpicfIpStaticBindingsMacAddress
and hpicfIpStaticBindingsInterface.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.1.4.1.6 |
hpicfIpDhcpSnoopStatus OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.1.2 |
hpicfDhcpSnoopGlobalStats OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.1.2.1 |
hpicfDhcpSnoopCSForwardsNumber of snooped DHCP packets that were successfully
forwarded from untrusted client ports towards trusted
DHCP server ports.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.1 |
hpicfDhcpSnoopCSMACMismatchesNumber of snooped DHCP client packets that were
discarded because the MAC source address of the
packet did not match the chaddr.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.2 |
hpicfDhcpSnoopCSUntrustedOpt82sNumber of snooped DHCP client packets that were
discarded because they were received on an untrusted
port and contained a relay information option.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.3 |
hpicfDhcpSnoopCSBadReleasesNumber of snooped DHCP client packets that were
discarded because they were DHCPRELEASE or DHCPDECLINE
packets received on a port different from the port
that the address was leased to.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.4 |
hpicfDhcpSnoopCSUntrustedDestPortsNumber of snooped DHCP client unicast packets that
were dropped because they were destined to untrusted
ports.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.5 |
hpicfDhcpSnoopSCForwardsNumber of snooped DHCP packets that were successfully
forwarded from trusted DHCP server ports to untrusted
client ports.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.6 |
hpicfDhcpSnoopSCUntrustedPortsNumber of snooped DHCP server packets that were
dropped because they were received from untrusted
ports.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.7 |
hpicfDhcpSnoopSCUntrustedServersNumber of snooped DHCP server packets that were
dropped because they were received from unauthorized
DHCP server addresses.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.8 |
hpicfDhcpSnoopSCOpt82FailuresNumber of snooped DHCP server packets that were
dropped because they did not contain a valid
relay information option.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.9 |
hpicfDhcpSnoopDBFileWriteAttemptsNumber of attempts that have been made to
write the DHCP lease database to a configured
file location.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.10 |
hpicfDhcpSnoopDBFileWriteFailuresNumber of times that an attempt to write the
DHCP lease database to a configured file location
has failed.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.2.1.11 |
hpicfDhcpSnoopDBFileReadStatusThis object indicates whether we were able to
successfully load the DHCP lease database from
the configured location after the last reboot.ro Enumeration .1.3.6.1.4.1.25506.11.1.34.1.2.1.12 |
hpicfDhcpSnoopDBFileWriteStatusThis object indicates whether the DHCP lease
database is currently synchronized with the
the configured file server. 'notConfigured'
means that we have not been configured with
a server location. 'delaying' means that we
are waiting for the write delay to expire
before writing the current database.
'inProgress' means that a lease database
transfer is active. 'succeeded' means that
all leases in our database have been written
to the server. 'failed' means that the last
attempt to write our lease database failed.ro Enumeration .1.3.6.1.4.1.25506.11.1.34.1.2.1.13 |
hpicfDhcpSnoopDBFileLastWriteTimeThe time that we last successfully wrote
our lease database to the server. This object
will contain a value of all zeroes if we have
not written our lease database since the last
reboot.ro DateAndTime (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.2.1.14 |
hpicfDhcpSnoopBindingsTableA table of DHCP bindings that have been learned
by this device. SEQUENCE OF HpicfDhcpSnoopBindingsEntry .1.3.6.1.4.1.25506.11.1.34.1.2.2 |
hpicfDhcpSnoopBindingsEntryA row in the table, containing a single DHCP
binding. HpicfDhcpSnoopBindingsEntry .1.3.6.1.4.1.25506.11.1.34.1.2.2.1 |
hpicfDhcpSnoopBindingsVlanThe VLAN ID on which this client binding
was learned. VlanIndex .1.3.6.1.4.1.25506.11.1.34.1.2.2.1.1 |
hpicfDhcpSnoopBindingsMacAddressThe MAC address of the DHCP client that
this binding applies to. MacAddress (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.2.2.1.2 |
hpicfDhcpSnoopBindingsAddrTypeThe type of IP address contained in
hpicfDhcpSnoopBindingsAddress. The only
values expected are ipv4 or ipv6. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.34.1.2.2.1.3 |
hpicfDhcpSnoopBindingsAddressAn IP address that has been leased to
this client. The type of address contained
in this object is indicated by
hpicfDhcpSnoopBindingsAddrType. InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.34.1.2.2.1.4 |
hpicfDhcpSnoopBindingsInterfaceThe interface that this DHCP client is connected
to.ro InterfaceIndex (IF-MIB) .1.3.6.1.4.1.25506.11.1.34.1.2.2.1.5 |
hpicfDhcpSnoopBindingsLeaseTimeThe number of seconds remaining until this DHCP
lease times out. A value of 0xffffffff indicates
an infinite lease.ro Unsigned32 .1.3.6.1.4.1.25506.11.1.34.1.2.2.1.6 |
hpicfDhcpSnoopBindingsTypeThis object indicates how this binding was
learned. A value of 'dhcp' indicates that
this binding was learned by snooping a DHCP
lease. A value of 'static' indicates that
this binding was statically configured via the
hpicfIpStaticBindingsTable.ro Enumeration .1.3.6.1.4.1.25506.11.1.34.1.2.2.1.7 |
hpicfDhcpSnoopNotifyObjects OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.1.3 |
hpicfDhcpSnoopNotifyCountA count of the DHCP snooping notification sent from the DHCP
snooping entity to the SNMP entity. This count may be greater
than the count of notifications actually transmitted by the SNMP
entity due to rate limiting or configuration.ro Counter32 .1.3.6.1.4.1.25506.11.1.34.1.3.1 |
hpicfDhcpSnoopErrantSrcMACThe MAC address received in the errant DHCP/BootP reply packet.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.34.1.3.2 |
hpicfDhcpSnoopErrantSrcIPTypeInetAddressType of the address reported in hpicfDhcpSnoopErrantSrcIP.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.34.1.3.3 |
hpicfDhcpSnoopErrantSrcIPThe IP address received in the errant DHCP/BootP reply packet.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.34.1.3.4 |
hpicfDhcpSnoopConformance OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.2 |
hpicfIpDhcpSnoopGroups OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.2.1 |
hpicfDhcpSnoopCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.34.2.2 |