HP-ICF-DHCP-SNOOP-MIB

File: HP-ICF-DHCP-SNOOP-MIB.mib (38315 bytes)

Imported modules

HP-ICF-OID IF-MIB INET-ADDRESS-MIB
Q-BRIDGE-MIB SNMP-FRAMEWORK-MIB SNMPv2-CONF
SNMPv2-SMI SNMPv2-TC

Imported symbols

hpSwitch ifIndex InterfaceIndex
InetAddressType InetAddress VlanIndex
SnmpAdminString OBJECT-GROUP MODULE-COMPLIANCE
NOTIFICATION-GROUP Unsigned32 Counter32
OBJECT-TYPE MODULE-IDENTITY NOTIFICATION-TYPE
TruthValue RowStatus MacAddress
DateAndTime

Defined Types

HpicfDhcpSnoopPortEntry  
SEQUENCE    
  hpicfDhcpSnoopPortTrust TruthValue

HpicfDhcpSnoopServerEntry  
SEQUENCE    
  hpicfDhcpSnoopServerAddrType InetAddressType
  hpicfDhcpSnoopServerAddress InetAddress
  hpicfDhcpSnoopServerStatus RowStatus

HpicfIpStaticBindingsEntry  
SEQUENCE    
  hpicfIpStaticBindingsVlan VlanIndex
  hpicfIpStaticBindingsAddrType InetAddressType
  hpicfIpStaticBindingsAddress InetAddress
  hpicfIpStaticBindingsMacAddress MacAddress
  hpicfIpStaticBindingsInterface InterfaceIndex
  hpicfIpStaticBindingsStatus RowStatus

HpicfDhcpSnoopBindingsEntry  
SEQUENCE    
  hpicfDhcpSnoopBindingsVlan VlanIndex
  hpicfDhcpSnoopBindingsMacAddress MacAddress
  hpicfDhcpSnoopBindingsAddrType InetAddressType
  hpicfDhcpSnoopBindingsAddress InetAddress
  hpicfDhcpSnoopBindingsInterface InterfaceIndex
  hpicfDhcpSnoopBindingsLeaseTime Unsigned32
  hpicfDhcpSnoopBindingsType INTEGER

Defined Values

hpicfIpDhcpSnoop 1.3.6.1.4.1.11.2.14.11.5.1.34
This MIB module contains HP proprietary objects for managing DHCP Snooping.
MODULE-IDENTITY    

hpicfDhcpSnoopNotifications 1.3.6.1.4.1.11.2.14.11.5.1.34.0
OBJECT IDENTIFIER    

hpicfDhcpSnoopErrantReply 1.3.6.1.4.1.11.2.14.11.5.1.34.0.1
An hpicfDhcpSnoopErrantReply notification signifies that the DHCP snooping entity has detected and dropped an errant DHCP response packet.
NOTIFICATION-TYPE    

hpicfIpDhcpSnoopObjects 1.3.6.1.4.1.11.2.14.11.5.1.34.1
OBJECT IDENTIFIER    

hpicfIpDhcpSnoopConfig 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1
OBJECT IDENTIFIER    

hpicfDhcpSnoopGlobalCfg 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1
OBJECT IDENTIFIER    

hpicfDhcpSnoopEnable 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.1
The administrative status of the DHCP Snooping feature.
OBJECT-TYPE    
  TruthValue  

hpicfDhcpSnoopVlanEnable 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.2
The administrative status for DHCP Snooping on each VLAN. There will be one bit in this string for each possible VLAN ID. Each octet within this value specifies a set of eight VLANs, with the first octet specifying VLAN IDs 1 through 8, the second octet specifying VLAN IDs 9 through 16, etc. Within each octet, the most significant bit represents the lowest numbered VLAN ID, and the least significant bit represents the highest numbered VLAN ID. Thus, each possible VLAN ID of the bridge is represented by a single bit within the value of this object. If a bit at position 'n' has a value of '1', then DHCP Snooping is enabled on VLAN 'n'. If this bit has a value of '0',DHCP Snooping is not enabled on the VLAN 'n',
OBJECT-TYPE    
  STRING Size(512)  

hpicfDhcpSnoopVerifyMac 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.3
When this variable is set to 'true', DHCP Snooping will verify that the MAC address in the chaddr field of the DHCP header matches the source MAC address in all DHCP packets received on untrusted ports. When this variable is set to 'false', DHCP Snooping will omit this check. The value of this variable is ignored when DHCP Snooping is disabled.
OBJECT-TYPE    
  TruthValue  

hpicfDhcpSnoopDatabaseFile 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.4
A location to store the lease database, or to retrieve it after a reboot. The location must be given in the form of a Uniform Resource Locator (URL) as defined in RFC 2396. The allowed character sets and the encoding rules defined in RFC 2396 section 2 apply.
OBJECT-TYPE    
  SnmpAdminString  

hpicfDhcpSnoopDatabaseWriteDelay 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.5
The number of seconds to delay writing the DHCP lease database file after a database change. This potentially allows grouping multiple database changes into a single write. The default is 300 seconds.
OBJECT-TYPE    
  Unsigned32 15..86400  

hpicfDhcpSnoopDatabaseWriteTimeout 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.6
The number of seconds to wait for the database file transfer to finish before giving up and declaring a failure. A value of 0 means continue retrying indefinitely. The default is 300 seconds.
OBJECT-TYPE    
  Unsigned32 0..86400  

hpicfDhcpSnoopOpt82Insert 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.7
When this object is set to true, DHCP snooping will add a DHCP relay information option to DHCP client packets that it forwards on trusted ports, and will examine and strip DHCP relay information options that were inserted by this switch on DHCP server packets that it forwards to untrusted ports. Note that when DHCP relay and DHCP snooping are both enabled, and this object is set to true, relay information option processing will be handled by DHCP snooping, and any DHCP relay settings for relay information option processing will be ignored. This object defaults to true.
OBJECT-TYPE    
  TruthValue  

hpicfDhcpSnoopOpt82Policy 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.8
This object configures the behavior of DHCP snooping when forwarding a DHCP packet from an untrusted port that already has a DHCP relay information option present. The policies supported are: keep - forward the packet without updating the existing option replace - replace the existing option with one generated by this switch drop - drop the packet This policy is only applied if DHCP snooping is enabled and hpicfDhcpSnoopOpt82Insert is true. In all cases where this policy is applied, if there is no relay information option present in the received packet, DHCP snooping will add one. The default policy is drop.
OBJECT-TYPE    
  INTEGER keep(1), replace(2), drop(3)  

hpicfDhcpSnoopOpt82RemoteId 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.9
This object configures the value that will be used for the remote ID sub-option of the relay information option that will be inserted by DHCP snooping. The possible values are: mac - switch MAC address subnetIP - switch IP address on the VLAN on which the DHCP packet was received mgmtIP - switch IP address on the management VLAN The value of this object is ignored unless DHCP snooping is enabled and hpicfDhcpSnoopOpt82Insert is true. The default value is mac.
OBJECT-TYPE    
  INTEGER mac(1), subnetIP(2), mgmtIP(3)  

hpicfDhcpSnoopErrantReplyEnable 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.10
The operational status of hpicfDhcpSnoopErrantReply notifications. The default value is 1 (Enabled). A value of 2 represents Disabled. Writing this object requires authentication, such as provided by SNMPv3.
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2)  

hpicfDhcpSnoopPortTable 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2
Per-interface configuration for DHCP Snooping.
OBJECT-TYPE    
  SEQUENCE OF  
    HpicfDhcpSnoopPortEntry

hpicfDhcpSnoopPortEntry 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2.1
DHCP snooping configuration information for a single port.
OBJECT-TYPE    
  HpicfDhcpSnoopPortEntry  

hpicfDhcpSnoopPortTrust 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2.1.1
This object indicates whether this port is trusted for DHCP snooping.
OBJECT-TYPE    
  TruthValue  

hpicfDhcpSnoopServerTable 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3
Table of authorized DHCP server addresses.
OBJECT-TYPE    
  SEQUENCE OF  
    HpicfDhcpSnoopServerEntry

hpicfDhcpSnoopServerEntry 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1
A row in the table, containing the address of a single authorized DHCP server.
OBJECT-TYPE    
  HpicfDhcpSnoopServerEntry  

hpicfDhcpSnoopServerAddrType 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1.1
The type of address in hpicfDhcpSnoopServerAddress.
OBJECT-TYPE    
  InetAddressType  

hpicfDhcpSnoopServerAddress 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1.2
The address of a known valid DHCP server. The type of address contained in this object is indicated by hpicfDhcpSnoopServerAddrType. For DHCP snooping to allow a server to client packet to be forwarded, it must be received on a trusted port from a server address in this table. If this table is empty, all addresses are trusted. Note that this feature compares the source address of the received DHCP server packet against the addresses in this table. This means that this table needs to contain trusted server addresses as well as trusted DHCP relays that a server packet may be relayed through.
OBJECT-TYPE    
  InetAddress  

hpicfDhcpSnoopServerStatus 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1.3
The status of this DHCP server address entry. Only 'active' entries are used when validating DHCP server packets.
OBJECT-TYPE    
  RowStatus  

hpicfIpStaticBindingsTable 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4
A table of configured static IP address bindings for this device. Active rows in this table will also be reported in the hpicfDhcpSnoopBindingsTable as entries with an hpicfDhcpSnoopBindingsLeaseTime of 0xffffffff and an hpicfDhcpSnoopBindingsType of 'static'.
OBJECT-TYPE    
  SEQUENCE OF  
    HpicfIpStaticBindingsEntry

hpicfIpStaticBindingsEntry 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1
A row in the table, containing a single static IP address binding.
OBJECT-TYPE    
  HpicfIpStaticBindingsEntry  

hpicfIpStaticBindingsVlan 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.1
The VLAN ID on which this static address binding is valid.
OBJECT-TYPE    
  VlanIndex 1..512  

hpicfIpStaticBindingsAddrType 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.2
The type of IP address contained in hpicfIpStaticBindingsAddress. The only values expected are ipv4 or ipv6.
OBJECT-TYPE    
  InetAddressType  

hpicfIpStaticBindingsAddress 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.3
The static IP address of this binding. The type of address contained in this object is indicated by hpicfIpStaticBindingsAddrType.
OBJECT-TYPE    
  InetAddress  

hpicfIpStaticBindingsMacAddress 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.4
The MAC address associated with this static binding on this VLAN.
OBJECT-TYPE    
  MacAddress  

hpicfIpStaticBindingsInterface 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.5
The interface that this static IP address binding is valid on in this VLAN.
OBJECT-TYPE    
  InterfaceIndex  

hpicfIpStaticBindingsStatus 1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.6
The status of this static IP address binding. This object cannot be set to 'active' until valid value has been configured for hpicfIpStaticBindingsMacAddress and hpicfIpStaticBindingsInterface.
OBJECT-TYPE    
  RowStatus  

hpicfIpDhcpSnoopStatus 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2
OBJECT IDENTIFIER    

hpicfDhcpSnoopGlobalStats 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1
OBJECT IDENTIFIER    

hpicfDhcpSnoopCSForwards 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.1
Number of snooped DHCP packets that were successfully forwarded from untrusted client ports towards trusted DHCP server ports.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopCSMACMismatches 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.2
Number of snooped DHCP client packets that were discarded because the MAC source address of the packet did not match the chaddr.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopCSUntrustedOpt82s 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.3
Number of snooped DHCP client packets that were discarded because they were received on an untrusted port and contained a relay information option.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopCSBadReleases 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.4
Number of snooped DHCP client packets that were discarded because they were DHCPRELEASE or DHCPDECLINE packets received on a port different from the port that the address was leased to.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopCSUntrustedDestPorts 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.5
Number of snooped DHCP client unicast packets that were dropped because they were destined to untrusted ports.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopSCForwards 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.6
Number of snooped DHCP packets that were successfully forwarded from trusted DHCP server ports to untrusted client ports.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopSCUntrustedPorts 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.7
Number of snooped DHCP server packets that were dropped because they were received from untrusted ports.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopSCUntrustedServers 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.8
Number of snooped DHCP server packets that were dropped because they were received from unauthorized DHCP server addresses.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopSCOpt82Failures 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.9
Number of snooped DHCP server packets that were dropped because they did not contain a valid relay information option.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopDBFileWriteAttempts 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.10
Number of attempts that have been made to write the DHCP lease database to a configured file location.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopDBFileWriteFailures 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.11
Number of times that an attempt to write the DHCP lease database to a configured file location has failed.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopDBFileReadStatus 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.12
This object indicates whether we were able to successfully load the DHCP lease database from the configured location after the last reboot.
OBJECT-TYPE    
  INTEGER notConfigured(1), inProgress(2), succeeded(3), failed(4)  

hpicfDhcpSnoopDBFileWriteStatus 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.13
This object indicates whether the DHCP lease database is currently synchronized with the the configured file server. 'notConfigured' means that we have not been configured with a server location. 'delaying' means that we are waiting for the write delay to expire before writing the current database. 'inProgress' means that a lease database transfer is active. 'succeeded' means that all leases in our database have been written to the server. 'failed' means that the last attempt to write our lease database failed.
OBJECT-TYPE    
  INTEGER notConfigured(1), delaying(2), inProgress(3), succeeded(4), failed(5)  

hpicfDhcpSnoopDBFileLastWriteTime 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.14
The time that we last successfully wrote our lease database to the server. This object will contain a value of all zeroes if we have not written our lease database since the last reboot.
OBJECT-TYPE    
  DateAndTime  

hpicfDhcpSnoopBindingsTable 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2
A table of DHCP bindings that have been learned by this device.
OBJECT-TYPE    
  SEQUENCE OF  
    HpicfDhcpSnoopBindingsEntry

hpicfDhcpSnoopBindingsEntry 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1
A row in the table, containing a single DHCP binding.
OBJECT-TYPE    
  HpicfDhcpSnoopBindingsEntry  

hpicfDhcpSnoopBindingsVlan 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.1
The VLAN ID on which this client binding was learned.
OBJECT-TYPE    
  VlanIndex 1..512  

hpicfDhcpSnoopBindingsMacAddress 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.2
The MAC address of the DHCP client that this binding applies to.
OBJECT-TYPE    
  MacAddress  

hpicfDhcpSnoopBindingsAddrType 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.3
The type of IP address contained in hpicfDhcpSnoopBindingsAddress. The only values expected are ipv4 or ipv6.
OBJECT-TYPE    
  InetAddressType  

hpicfDhcpSnoopBindingsAddress 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.4
An IP address that has been leased to this client. The type of address contained in this object is indicated by hpicfDhcpSnoopBindingsAddrType.
OBJECT-TYPE    
  InetAddress  

hpicfDhcpSnoopBindingsInterface 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.5
The interface that this DHCP client is connected to.
OBJECT-TYPE    
  InterfaceIndex  

hpicfDhcpSnoopBindingsLeaseTime 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.6
The number of seconds remaining until this DHCP lease times out. A value of 0xffffffff indicates an infinite lease.
OBJECT-TYPE    
  Unsigned32  

hpicfDhcpSnoopBindingsType 1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.7
This object indicates how this binding was learned. A value of 'dhcp' indicates that this binding was learned by snooping a DHCP lease. A value of 'static' indicates that this binding was statically configured via the hpicfIpStaticBindingsTable.
OBJECT-TYPE    
  INTEGER dhcp(1), static(2)  

hpicfDhcpSnoopNotifyObjects 1.3.6.1.4.1.11.2.14.11.5.1.34.1.3
OBJECT IDENTIFIER    

hpicfDhcpSnoopNotifyCount 1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.1
A count of the DHCP snooping notification sent from the DHCP snooping entity to the SNMP entity. This count may be greater than the count of notifications actually transmitted by the SNMP entity due to rate limiting or configuration.
OBJECT-TYPE    
  Counter32  

hpicfDhcpSnoopErrantSrcMAC 1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.2
The MAC address received in the errant DHCP/BootP reply packet.
OBJECT-TYPE    
  MacAddress  

hpicfDhcpSnoopErrantSrcIPType 1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.3
InetAddressType of the address reported in hpicfDhcpSnoopErrantSrcIP.
OBJECT-TYPE    
  InetAddressType  

hpicfDhcpSnoopErrantSrcIP 1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.4
The IP address received in the errant DHCP/BootP reply packet.
OBJECT-TYPE    
  InetAddress  

hpicfDhcpSnoopConformance 1.3.6.1.4.1.11.2.14.11.5.1.34.2
OBJECT IDENTIFIER    

hpicfIpDhcpSnoopGroups 1.3.6.1.4.1.11.2.14.11.5.1.34.2.1
OBJECT IDENTIFIER    

hpicfDhcpSnoopBaseGroup 1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.1
A collection of objects for configuring and monitoring the base DHCP snooping functionality.
OBJECT-GROUP    

hpicfDhcpSnoopOpt82Group 1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.2
A collection of objects for configuring and monitoring DHCP snooping relay information option behavior.
OBJECT-GROUP    

hpicfDhcpSnoopServersGroup 1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.3
A collection of objects for configuring and monitoring DHCP snooping trusted servers.
OBJECT-GROUP    

hpicfDhcpSnoopDbaseFileGroup 1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.4
A collection of objects for configuring and monitoring DHCP snooping database file management.
OBJECT-GROUP    

hpicfDhcpSnoopBindingsGroup 1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.5
A collection of objects for accessing the DHCP snooping lease database.
OBJECT-GROUP    

hpicfDhcpSnoopStaticBindingsGroup 1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.6
A collection of objects for managing static configuration of IP source address bindings.
OBJECT-GROUP    

hpicfDhcpSnoopNotifyObjsGroup 1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.7
Group of objects used in DHCP Snooping notifications.
OBJECT-GROUP    

hpicfDhcpSnoopNotificationGroup 1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.8
Description.
NOTIFICATION-GROUP    

hpicfDhcpSnoopCompliances 1.3.6.1.4.1.11.2.14.11.5.1.34.2.2
OBJECT IDENTIFIER    

hpicfDhcpSnoopCompliance 1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.1
This group is recommended to provide management access to the lease database.
MODULE-COMPLIANCE    

hpicfDhcpSnoopCompliance2 1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.2
This group is mandatory for implementations that support static configuration of IP source address bindings for use in IP source filtering applications.
MODULE-COMPLIANCE    

hpicfDhcpSnoopCompliance3 1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.3
Description.
MODULE-COMPLIANCE