HP-ICF-IPv6-DYNAMIC-LOCKDOWN-MIB
AI MIB Summary
The HP-ICF-IPv6-DYNAMIC-LOCKDOWN-MIB monitors and manages DHCPv6 Snooping dynamic lockdown states and security bindings on HP networking hardware to enforce IPv6 address validation. It provides visibility into active DHCPv6 sessions, unauthorized client detection events, and the enforcement of dynamic address filtering policies.
This MIB module contains HP proprietary objects for managing DHCPV6 Snooping.
Main OID:
hpicfIpv6Lockdown.1.3.6.1.4.1.25506.11.1.103
37
Objects
Active
Status
8
Dependencies
Imported Objects
Objects
37 total| Object Name |
|---|
hpicfIpv6LockdownThis MIB module contains HP proprietary
objects for managing DHCPV6 Snooping. MODULE-IDENTITY .1.3.6.1.4.1.25506.11.1.103 |
IMPORTSThis MIB module contains HP proprietary
objects for managing DHCPV6 Snooping. Unknown .1.3.6.1.4.1.25506.11.1.103 |
hpicfDIPLDv6SourceBindingNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.103.0 |
hpicfDIPDv6SourceBindingOutOfResourcesThis trap is sent when hardware runs out of resource
to program Dynamic IPv6 Lockdown rule. It is controlled
by the state of
hpicfcfDIPLDv6SourceBindingOutOfResourcesTrapCtrl
object.Implementation of this trap is optional. NOTIFICATION-TYPE .1.3.6.1.4.1.25506.11.1.103.0.1 |
hpicfDIPLDv6SourceBindingOutOfResourcesObjects OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.103.0.2 |
hpicfDIPLDv6SourceBindingAddrPortThe Interface Index of the port for which Dynamic
IPv6 Lockdown rule cannot be programmed into
hardware.ro InterfaceIndex (IF-MIB) .1.3.6.1.4.1.25506.11.1.103.0.2.1 |
hpicfDIPLDv6SourceBindingAddrMacAddressThe source MAC address for which Dynamic IPv6 Lockdown rule
cannot be programmed into hardware.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.103.0.2.2 |
hpicfDIPLDv6SourceBindingAddrIpAddressTypeThe Type of the IP Address of the source for which
Dynamic IPv6 lockdown rule cannot be programmed
into the hardware.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.103.0.2.3 |
hpicfDIPLDv6SourceBindingAddrIpAddressA source IP address for which Dynamic IPv6 Lockdown rule
cannot be programmed into hardware.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.103.0.2.4 |
hpicfDIPLDv6SourceBindingAddrVlanThe VLAN for which Dynamic IPv6 Lockdown rule
cannot be programmed into hardware.ro VlanIndex (Q-BRIDGE-MIB) .1.3.6.1.4.1.25506.11.1.103.0.2.5 |
hpicfDIPLDv6SourceBindingVoilationsThis notification indicates a host was denied access to
the switch based on Dynamic IPv6 lockdown protection rules.
This trap is controlled by the state of the
'hpicfDIPLDv6SourceBindingViolationsTrapCtrl' object.
Implementation of this trap is optional. NOTIFICATION-TYPE .1.3.6.1.4.1.25506.11.1.103.0.3 |
hpicfDIPLDv6SourceBindingVoilationsObjects OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.103.0.4 |
hpicfDIPLDv6SourceBindingVoilationsCountThe number of DIPLDv6 violations sent from a DIPLDv6
entity to the SNMP entity.ro Counter32 .1.3.6.1.4.1.25506.11.1.103.0.4.1 |
hpicfDIPLDv6SourceBindingVoilationsPortThe Interface Index of the port for which this
'hpicfDIPLDv6SourceBindingVoilations' applies.ro InterfaceIndex (IF-MIB) .1.3.6.1.4.1.25506.11.1.103.0.4.2 |
hpicfDIPLDv6SourceBindingVoilationsSrcIpTypeThe type of IP address contained in
'hpicfDIPLDv6SourceBindingVoilationsSrcIpAddress'.
The only values expected are ipv6 or ipv6z.ro InetAddressType -- { ipv6(2), ipv6z (4) } .1.3.6.1.4.1.25506.11.1.103.0.4.3 |
hpicfDIPLDv6SourceBindingVoilationsSrcIpAddressThe source IP address for which this
'hpicfDIPLDv6SourceBindingVoilations' applies.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.103.0.4.4 |
hpicfDIPLDv6SourceBindingVoilationsDstIpTypeThe type of IP address contained in
'hpicfIpLockSourceBindingVoilationsDstIpAddress'.
The only values expected are ipv6 or ipv6z.ro InetAddressType -- { ipv6(2), ipv6z (4) } .1.3.6.1.4.1.25506.11.1.103.0.4.5 |
hpicfDIPLDv6SourceBindingVoilationsDstIpAddressThe destination IP address for which this
'hpicfDIPLDv6SourceBindingVoilations' applies.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.103.0.4.6 |
hpicfDIPLDv6SourceBindingVoilationsMacAddressThe source MAC address for which this
'hpicfDIPLDv6SourceBindingVoilations' applies.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.103.0.4.7 |
hpicfDIPLDv6SourceBindingVoilationsPktCountThis object indicates the number of packets
received from this host which were dropped.ro Counter32 .1.3.6.1.4.1.25506.11.1.103.0.4.8 |
hpicfDIPLDv6Objects OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.103.1 |
hpicfDIPLDv6Config OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.103.1.1 |
hpicfDIPLDv6LockEnableThe administrative status of the Dynamic IPv6
Lockdown feature.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.103.1.1.1 |
hpicfDIPLDv6PortTablePer-interface configuration for Dynamic IPv6
Lockdown. SEQUENCE OF HpicfDIPLDv6PortEntry .1.3.6.1.4.1.25506.11.1.103.1.1.2 |
hpicfDIPLDv6PortEntryDynamic IPv6 Lockdown configuration information
for a single port. HpicfDIPLDv6PortEntry .1.3.6.1.4.1.25506.11.1.103.1.1.2.1 |
hpicfDIPLDv6PortEnableThis object indicates whether this port is
enabled for Dynamic IPv6 Lockdown.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.103.1.1.2.1.1 |
hpicfDIPLDv6PortOperStatusThis object indicates the various states of the
current operating mode of Dynamic IPv6 Lockdown on
this port. The states are:
active - Dynamic IPv6 Lockdown is active
on this port.
noDsnoop - Dynamic IPv6 Lockdown is enabled
on this port, but DHCPv6 Snooping
is not globally enabled.
trustedPort - Dynamic IPv6 Lockdown is enabled
on this port, but is not active
because the port is a DHCPv6
Snooping trusted port.
noSnoopingVlan - Dynamic IPv6 Lockdown is enabled
on this port, but is not active
because the port is not a
member of any VLAN with DHCPv6
Snooping enabled.ro Bits .1.3.6.1.4.1.25506.11.1.103.1.1.2.1.2 |
hpicfDIPLDv6SourceBindingOutOfResourcesTrapCtrlControls generation of SNMP notifications for
traps defined in this MIB.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.103.1.1.3 |
hpicfDIPLDv6SourceBindingViolationsTrapCtrlControls generation of SNMP notifications for
traps defined in this MIB.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.103.1.1.4 |
hpicfDIPLDv6Status OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.103.1.2 |
hpicfDIPLDv6AddrTableTable of source address bindings on ports
where Dynamic IPv6 Lockdown is active that
are currently permitted. SEQUENCE OF HpicfDIPLDv6AddrEntry .1.3.6.1.4.1.25506.11.1.103.1.2.1 |
hpicfDIPLDv6AddrEntryExtension to the hpicfSAVI filtering table. HpicfDIPLDv6AddrEntry .1.3.6.1.4.1.25506.11.1.103.1.2.1.1 |
hpicfDIPLDv6AddrVlanThe VLAN on which this binding entry is permitted.ro VlanIndex (Q-BRIDGE-MIB) .1.3.6.1.4.1.25506.11.1.103.1.2.1.1.1 |
hpicfDIPLDv6ResourceAvailableThis Object provides the availability of HW resources
while adding a binding. TRUE indicates that hardware
resources were available to add a binding. FALSE indicates that
resources were not available.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.103.1.2.1.1.2 |
hpicfIpv6LockConformance OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.103.2 |
hpicfIpv6LockGroups OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.103.2.1 |
hpicfIpv6LockCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.103.2.2 |