All MIBs › AT-DHCPSN-MIB
Organization: Allied Telesis, Inc
Last Updated: 2010-09-07
Category: IP and Core Protocols, Vendor: Allied Telesis
Description: Monitors DHCP snooping binding tables and trusted/untrusted port configuration on Allied Telesis switches.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is AT-DHCPSN-MIB?
AT-DHCPSN-MIB is a vendor-specific MIB from Allied Telesis covering DHCP Snooping, a Layer 2 security technology area that tracks and validates DHCP client-server exchanges on a switch to prevent rogue DHCP servers and IP/MAC spoofing. It exposes the DHCP snooping binding table (mapping client MAC address, leased IP, VLAN, and port), along with per-port trusted/untrusted configuration and violation-type/event tracking, per its module description noting additional violation types added for DHCP snooping. Its monitoring value is security/fault oriented: reviewing the binding table reveals which clients currently hold valid DHCP leases and on which port/VLAN, while violation counters/events reveal attempted attacks or misconfigurations, such as DHCP responses arriving on an untrusted port. It complements the vendor's broader Layer 2 security and switching MIBs rather than a single IETF standard, since DHCP snooping itself is not defined by a universal IETF MIB. It is deployed on Allied Telesis managed switches in enterprise networks that need Layer 2 DHCP security enforcement. Engineers can download the AT-DHCPSN-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in AT-DHCPSN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Allied Telesis managed switch
Monitoring Examples
No sample_objects were supplied for this module in the provided data beyond the note about added violation types, so specific table or object names cannot be cited without inventing them. A realistic use, consistent with the module's stated DHCP snooping scope, would be polling the binding table to confirm a client's MAC-to-IP-to-port mapping and checking violation event counters to detect a rogue DHCP server attempting to respond on an untrusted port. Because concrete object names were not supplied, this example remains general rather than object-specific.
What Can Be Monitored
- DHCP snooping binding table entries
- trusted/untrusted port configuration
- DHCP snooping violation events
- violation type
Imported Objects
From AT-SMI-MIB
| modules | OBJECT-IDENTITY |
From SNMPv2-SMI
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
DHCP snooping and ARP security violation monitoring for Allied Telesis switches.
Start monitoring Allied Telesis managed switches and routers with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.