HP-ICF-DHCP-SNOOP-MIB
File:
HP-ICF-DHCP-SNOOP-MIB.mib (39386 bytes)
Imported modules
Imported symbols
Defined Types
HpicfDhcpSnoopPortEntry |
|
SEQUENCE |
|
|
|
|
hpicfDhcpSnoopPortTrust |
TruthValue |
|
HpicfDhcpSnoopServerEntry |
|
SEQUENCE |
|
|
|
|
hpicfDhcpSnoopServerAddrType |
InetAddressType |
|
|
hpicfDhcpSnoopServerAddress |
InetAddress |
|
|
hpicfDhcpSnoopServerStatus |
RowStatus |
|
HpicfIpStaticBindingsEntry |
|
SEQUENCE |
|
|
|
|
hpicfIpStaticBindingsVlan |
VlanIndex |
|
|
hpicfIpStaticBindingsAddrType |
InetAddressType |
|
|
hpicfIpStaticBindingsAddress |
InetAddress |
|
|
hpicfIpStaticBindingsMacAddress |
MacAddress |
|
|
hpicfIpStaticBindingsInterface |
InterfaceIndex |
|
|
hpicfIpStaticBindingsStatus |
RowStatus |
|
HpicfDhcpSnoopBindingsEntry |
|
SEQUENCE |
|
|
|
|
hpicfDhcpSnoopBindingsVlan |
VlanIndex |
|
|
hpicfDhcpSnoopBindingsMacAddress |
MacAddress |
|
|
hpicfDhcpSnoopBindingsAddrType |
InetAddressType |
|
|
hpicfDhcpSnoopBindingsAddress |
InetAddress |
|
|
hpicfDhcpSnoopBindingsInterface |
InterfaceIndex |
|
|
hpicfDhcpSnoopBindingsLeaseTime |
Unsigned32 |
|
|
hpicfDhcpSnoopBindingsType |
INTEGER |
|
Defined Values
hpicfIpDhcpSnoop |
1.3.6.1.4.1.11.2.14.11.5.1.34 |
This MIB module contains HP proprietary
objects for managing DHCP Snooping. |
MODULE-IDENTITY |
|
|
|
hpicfDhcpSnoopErrantReply |
1.3.6.1.4.1.11.2.14.11.5.1.34.0.1 |
An hpicfDhcpSnoopErrantReply notification signifies that
the DHCP snooping entity has detected and dropped an
errant DHCP response packet. |
Status: current |
Access: read-only |
NOTIFICATION-TYPE |
|
|
|
hpicfDhcpSnoopEnable |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.1 |
The administrative status of the DHCP Snooping
feature. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
hpicfDhcpSnoopVlanEnable |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.2 |
The administrative status for DHCP Snooping on
each VLAN. There will be one bit in this string
for each possible VLAN ID. Each octet within this
value specifies a set of eight VLANs, with the first
octet specifying VLAN IDs 1 through 8, the second
octet specifying VLAN IDs 9 through 16, etc. Within
each octet, the most significant bit represents the
lowest numbered VLAN ID, and the least significant
bit represents the highest numbered VLAN ID. Thus,
each possible VLAN ID of the bridge is represented by
a single bit within the value of this object. If
a bit at position 'n' has a value of '1', then
DHCP Snooping is enabled on VLAN 'n'.
If this bit has a value of '0',DHCP Snooping
is not enabled on the VLAN 'n', |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
OCTET STRING |
Size(512) |
|
hpicfDhcpSnoopVerifyMac |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.3 |
When this variable is set to 'true', DHCP Snooping
will verify that the MAC address in the chaddr field
of the DHCP header matches the source MAC address in
all DHCP packets received on untrusted ports. When
this variable is set to 'false', DHCP Snooping will
omit this check. The value of this variable is
ignored when DHCP Snooping is disabled. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
hpicfDhcpSnoopDatabaseFile |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.4 |
A location to store the lease database, or
to retrieve it after a reboot. The location
must be given in the form of a Uniform
Resource Locator (URL) as defined in RFC
2396. The allowed character sets and the
encoding rules defined in RFC 2396 section 2
apply. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
|
|
hpicfDhcpSnoopDatabaseWriteDelay |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.5 |
The number of seconds to delay writing the
DHCP lease database file after a database
change. This potentially allows grouping
multiple database changes into a single
write. The default is 300 seconds. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
15..86400 |
|
hpicfDhcpSnoopDatabaseWriteTimeout |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.6 |
The number of seconds to wait for the
database file transfer to finish before
giving up and declaring a failure. A
value of 0 means continue retrying
indefinitely. The default is 300 seconds. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
0..86400 |
|
hpicfDhcpSnoopOpt82Insert |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.7 |
When this object is set to true, DHCP snooping
will add a DHCP relay information option to
DHCP client packets that it forwards on
trusted ports, and will examine and strip DHCP
relay information options that were inserted
by this switch on DHCP server packets that it
forwards to untrusted ports. Note that when
DHCP relay and DHCP snooping are both enabled,
and this object is set to true, relay
information option processing will be handled
by DHCP snooping, and any DHCP relay settings
for relay information option processing will
be ignored. This object defaults to true. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
hpicfDhcpSnoopOpt82Policy |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.8 |
This object configures the behavior of DHCP
snooping when forwarding a DHCP packet from
an untrusted port that already has a DHCP
relay information option present. The
policies supported are:
keep - forward the packet without
updating the existing option
replace - replace the existing option
with one generated by this switch
drop - drop the packet
This policy is only applied if DHCP snooping is
enabled and hpicfDhcpSnoopOpt82Insert is true.
In all cases where this policy is applied, if
there is no relay information option present in
the received packet, DHCP snooping will add one.
The default policy is drop. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
keep(1), replace(2), drop(3) |
|
hpicfDhcpSnoopOpt82RemoteId |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.9 |
This object configures the value that will be
used for the remote ID sub-option of the relay
information option that will be inserted by
DHCP snooping. The possible values are:
mac - switch MAC address
subnetIP - switch IP address on the VLAN on
which the DHCP packet was received
mgmtIP - switch IP address on the management
VLAN
The value of this object is ignored unless DHCP
snooping is enabled and hpicfDhcpSnoopOpt82Insert
is true. The default value is mac. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
mac(1), subnetIP(2), mgmtIP(3) |
|
hpicfDhcpSnoopErrantReplyEnable |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.10 |
The operational status of hpicfDhcpSnoopErrantReply
notifications. The default value is 1 (Enabled). A value
of 2 represents Disabled. Writing this object requires
authentication, such as provided by SNMPv3. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enabled(1), disabled(2) |
|
hpicfDhcpSnoopPortEntry |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2.1 |
DHCP snooping configuration information for
a single port. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
HpicfDhcpSnoopPortEntry |
|
|
hpicfDhcpSnoopPortTrust |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2.1.1 |
This object indicates whether this port is
trusted for DHCP snooping. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
hpicfDhcpSnoopServerEntry |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1 |
A row in the table, containing the address of a
single authorized DHCP server. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
HpicfDhcpSnoopServerEntry |
|
|
hpicfDhcpSnoopServerAddress |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1.2 |
The address of a known valid DHCP server. The
type of address contained in this object is
indicated by hpicfDhcpSnoopServerAddrType. For
DHCP snooping to allow a server to client packet
to be forwarded, it must be received on a trusted
port from a server address in this table. If this
table is empty, all addresses are trusted.
Note that this feature compares the source address
of the received DHCP server packet against the
addresses in this table. This means that this
table needs to contain trusted server addresses
as well as trusted DHCP relays that a server
packet may be relayed through. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
hpicfDhcpSnoopServerStatus |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1.3 |
The status of this DHCP server address entry.
Only 'active' entries are used when validating
DHCP server packets. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
hpicfIpStaticBindingsTable |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4 |
A table of configured static IP address
bindings for this device. Active rows in
this table will also be reported in the
hpicfDhcpSnoopBindingsTable as entries with
an hpicfDhcpSnoopBindingsLeaseTime of
0xffffffff and an hpicfDhcpSnoopBindingsType
of 'static'. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
HpicfIpStaticBindingsEntry |
|
hpicfIpStaticBindingsEntry |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1 |
A row in the table, containing a single static
IP address binding. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
HpicfIpStaticBindingsEntry |
|
|
hpicfIpStaticBindingsVlan |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.1 |
The VLAN ID on which this static address
binding is valid. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
VlanIndex |
1..512 |
|
hpicfIpStaticBindingsAddrType |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.2 |
The type of IP address contained in
hpicfIpStaticBindingsAddress. The only
values expected are ipv4 or ipv6. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
InetAddressType |
|
|
hpicfIpStaticBindingsAddress |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.3 |
The static IP address of this binding.
The type of address contained in this
object is indicated by
hpicfIpStaticBindingsAddrType. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
hpicfIpStaticBindingsStatus |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.6 |
The status of this static IP address
binding. This object cannot be set to
'active' until valid value has been
configured for hpicfIpStaticBindingsMacAddress
and hpicfIpStaticBindingsInterface. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
hpicfDhcpSnoopCSForwards |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.1 |
Number of snooped DHCP packets that were successfully
forwarded from untrusted client ports towards trusted
DHCP server ports. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopCSMACMismatches |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.2 |
Number of snooped DHCP client packets that were
discarded because the MAC source address of the
packet did not match the chaddr. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopCSUntrustedOpt82s |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.3 |
Number of snooped DHCP client packets that were
discarded because they were received on an untrusted
port and contained a relay information option. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopCSBadReleases |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.4 |
Number of snooped DHCP client packets that were
discarded because they were DHCPRELEASE or DHCPDECLINE
packets received on a port different from the port
that the address was leased to. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopCSUntrustedDestPorts |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.5 |
Number of snooped DHCP client unicast packets that
were dropped because they were destined to untrusted
ports. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopSCForwards |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.6 |
Number of snooped DHCP packets that were successfully
forwarded from trusted DHCP server ports to untrusted
client ports. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopSCUntrustedPorts |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.7 |
Number of snooped DHCP server packets that were
dropped because they were received from untrusted
ports. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopSCUntrustedServers |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.8 |
Number of snooped DHCP server packets that were
dropped because they were received from unauthorized
DHCP server addresses. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopSCOpt82Failures |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.9 |
Number of snooped DHCP server packets that were
dropped because they did not contain a valid
relay information option. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopDBFileWriteAttempts |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.10 |
Number of attempts that have been made to
write the DHCP lease database to a configured
file location. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopDBFileWriteFailures |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.11 |
Number of times that an attempt to write the
DHCP lease database to a configured file location
has failed. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopDBFileReadStatus |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.12 |
This object indicates whether we were able to
successfully load the DHCP lease database from
the configured location after the last reboot. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
notConfigured(1), inProgress(2), succeeded(3), failed(4) |
|
hpicfDhcpSnoopDBFileWriteStatus |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.13 |
This object indicates whether the DHCP lease
database is currently synchronized with the
the configured file server. 'notConfigured'
means that we have not been configured with
a server location. 'delaying' means that we
are waiting for the write delay to expire
before writing the current database.
'inProgress' means that a lease database
transfer is active. 'succeeded' means that
all leases in our database have been written
to the server. 'failed' means that the last
attempt to write our lease database failed. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
notConfigured(1), delaying(2), inProgress(3), succeeded(4), failed(5) |
|
hpicfDhcpSnoopDBFileLastWriteTime |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.14 |
The time that we last successfully wrote
our lease database to the server. This object
will contain a value of all zeroes if we have
not written our lease database since the last
reboot. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
DateAndTime |
|
|
hpicfDhcpSnoopBindingsEntry |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1 |
A row in the table, containing a single DHCP
binding. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
HpicfDhcpSnoopBindingsEntry |
|
|
hpicfDhcpSnoopBindingsVlan |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.1 |
The VLAN ID on which this client binding
was learned. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
VlanIndex |
1..512 |
|
hpicfDhcpSnoopBindingsAddrType |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.3 |
The type of IP address contained in
hpicfDhcpSnoopBindingsAddress. The only
values expected are ipv4 or ipv6. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
InetAddressType |
|
|
hpicfDhcpSnoopBindingsAddress |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.4 |
An IP address that has been leased to
this client. The type of address contained
in this object is indicated by
hpicfDhcpSnoopBindingsAddrType. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
hpicfDhcpSnoopBindingsLeaseTime |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.6 |
The number of seconds remaining until this DHCP
lease times out. A value of 0xffffffff indicates
an infinite lease. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
hpicfDhcpSnoopBindingsType |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.7 |
This object indicates how this binding was
learned. A value of 'dhcp' indicates that
this binding was learned by snooping a DHCP
lease. A value of 'static' indicates that
this binding was statically configured via the
hpicfIpStaticBindingsTable. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
dhcp(1), static(2) |
|
hpicfDhcpSnoopNotifyCount |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.1 |
A count of the DHCP snooping notification sent from the DHCP
snooping entity to the SNMP entity. This count may be greater
than the count of notifications actually transmitted by the SNMP
entity due to rate limiting or configuration. |
Status: current |
Access: accessible-for-notify |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
hpicfDhcpSnoopErrantSrcMAC |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.2 |
The MAC address received in the errant DHCP/BootP reply packet. |
Status: current |
Access: accessible-for-notify |
OBJECT-TYPE |
|
|
|
|
MacAddress |
|
|
hpicfDhcpSnoopErrantSrcIP |
1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.4 |
The IP address received in the errant DHCP/BootP reply packet. |
Status: current |
Access: accessible-for-notify |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
hpicfDhcpSnoopBaseGroup |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.1 |
A collection of objects for configuring and
monitoring the base DHCP snooping functionality. |
Status: current |
Access: accessible-for-notify |
OBJECT-GROUP |
|
|
|
hpicfDhcpSnoopOpt82Group |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.2 |
A collection of objects for configuring and
monitoring DHCP snooping relay information
option behavior. |
Status: current |
Access: accessible-for-notify |
OBJECT-GROUP |
|
|
|
hpicfDhcpSnoopServersGroup |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.3 |
A collection of objects for configuring and
monitoring DHCP snooping trusted servers. |
Status: current |
Access: accessible-for-notify |
OBJECT-GROUP |
|
|
|
hpicfDhcpSnoopDbaseFileGroup |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.4 |
A collection of objects for configuring and
monitoring DHCP snooping database file
management. |
Status: current |
Access: accessible-for-notify |
OBJECT-GROUP |
|
|
|
hpicfDhcpSnoopBindingsGroup |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.5 |
A collection of objects for accessing the DHCP
snooping lease database. |
Status: current |
Access: accessible-for-notify |
OBJECT-GROUP |
|
|
|
hpicfDhcpSnoopStaticBindingsGroup |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.6 |
A collection of objects for managing static
configuration of IP source address bindings. |
Status: current |
Access: accessible-for-notify |
OBJECT-GROUP |
|
|
|
hpicfDhcpSnoopNotifyObjsGroup |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.7 |
Group of objects used in DHCP Snooping notifications. |
Status: current |
Access: accessible-for-notify |
OBJECT-GROUP |
|
|
|
hpicfDhcpSnoopCompliance |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.1 |
The compliance statement for HP Routing switches
that support DHCP Snooping. |
Status: deprecated |
Access: accessible-for-notify |
MODULE-COMPLIANCE |
|
|
|
hpicfDhcpSnoopCompliance2 |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.2 |
The compliance statement for HP Routing switches
that support DHCP Snooping. |
Status: current |
Access: accessible-for-notify |
MODULE-COMPLIANCE |
|
|
|
hpicfDhcpSnoopCompliance3 |
1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.3 |
The compliance statement for HP Routing switches
that support DHCP Snooping. |
Status: current |
Access: accessible-for-notify |
MODULE-COMPLIANCE |
|
|
|