CIE1000-DHCP-SNOOPING-MIB

All MIBs › CIE1000-DHCP-SNOOPING-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2014-10-10

Category: Cisco Devices, IP and Core Protocols

Description: Manages DHCP snooping security configuration and binding table on Cisco IE1000 industrial Ethernet switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CIE1000-DHCP-SNOOPING-MIB?

CIE1000-DHCP-SNOOPING-MIB is a Cisco private MIB implementing the DHCP snooping security feature on IE1000 industrial Ethernet switches. It exposes configuration objects (global snooping mode, per-interface trust mode) and a status table of dynamically learned IP-to-MAC-VLAN-interface bindings. While primarily a security feature, its status table doubles as a monitoring aid for tracking which hosts currently hold DHCP leases and on which port/VLAN, useful for device-inventory tracking and detecting rogue DHCP activity. It builds on standard DHCP concepts and depends on the switch's interface indexing (ifIndex) to associate bindings with a physical port. It is deployed in industrial automation networks that need protection against unauthorized or rogue DHCP servers on the plant floor. Engineers can download the CIE1000-DHCP-SNOOPING-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CIE1000-DHCP-SNOOPING-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco IE1000 industrial Ethernet switch

Monitoring Examples

Polling cie1000DhcpSnoopingConfigInterfaceTable's cie1000DhcpSnoopingConfigInterfaceTrustMode shows which ports are trusted versus untrusted for DHCP traffic, while cie1000DhcpSnoopingStatusAssignedIpTable (keyed by MAC address, VLAN ID and ifIndex) reveals the live table of leased IP addresses and netmasks. An unexpected new binding appearing on an untrusted port, or a sudden spike in table size, would indicate an unauthorized device or a misbehaving DHCP client on that segment.

What Can Be Monitored

DHCP snooping global mode
per-interface trust mode
DHCP binding table (IP/MAC/VLAN/interface)
assigned IP addresses and netmasks

Imported Objects

From CIE1000-TC

CIE1000InterfaceIndex

From CISCO-IE1000-MIB

cie1000SwitchMgmt

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
cie1000DhcpSnoopingMib	1.3.6.1.4.1.9.9.832.1.56			This is a private version of the DHCP Snooping MIB
cie1000DhcpSnoopingMibObjects	1.3.6.1.4.1.9.9.832.1.56.1
cie1000DhcpSnoopingConfig	1.3.6.1.4.1.9.9.832.1.56.1.2
cie1000DhcpSnoopingConfigGlobals	1.3.6.1.4.1.9.9.832.1.56.1.2.1
T/F cie1000DhcpSnoopingConfigGlobalsMode	1.3.6.1.4.1.9.9.832.1.56.1.2.1.1	TruthValue	read-write	Indicates the DHCP snooping mode operation. Possible modes are - true: Enable DHCP snooping mode operation. When DHCP snooping mode operation is enabled, the DHCP request messages will be forwarded to trusted ports and only allow reply packets from trusted ports. false: Disable DHCP snooping mode operation.
cie1000DhcpSnoopingConfigInterfaceTable	1.3.6.1.4.1.9.9.832.1.56.1.2.2		not-accessible	This is a table of DHCP Snooping port configuration parameters
cie1000DhcpSnoopingConfigInterfaceEntry	1.3.6.1.4.1.9.9.832.1.56.1.2.2.1		not-accessible	Each port has a set of parameters
NUM cie1000DhcpSnoopingConfigInterfaceIfIndex	1.3.6.1.4.1.9.9.832.1.56.1.2.2.1.1	CIE1000InterfaceIndex	accessible-for-notify	Logical interface number of the physical port.
T/F cie1000DhcpSnoopingConfigInterfaceTrustMode	1.3.6.1.4.1.9.9.832.1.56.1.2.2.1.2	TruthValue	read-write	Indicates the DHCP snooping port mode. Possible port modes are - true: Configures the port as trusted source of the DHCP messages. false: Configures the port as untrusted source of the DHCP messages.
cie1000DhcpSnoopingStatus	1.3.6.1.4.1.9.9.832.1.56.1.3
cie1000DhcpSnoopingStatusAssignedIpTable	1.3.6.1.4.1.9.9.832.1.56.1.3.1		not-accessible	This is a table of assigned IP information in DHCP Snooping
cie1000DhcpSnoopingStatusAssignedIpEntry	1.3.6.1.4.1.9.9.832.1.56.1.3.1.1		not-accessible	Each entry has a set of parameters
MAC cie1000DhcpSnoopingStatusAssignedIpMacAddress	1.3.6.1.4.1.9.9.832.1.56.1.3.1.1.1	MacAddress	accessible-for-notify	MAC address.
I32 cie1000DhcpSnoopingStatusAssignedIpVlanId	1.3.6.1.4.1.9.9.832.1.56.1.3.1.1.2	Integer32	accessible-for-notify	The VLAN id of the VLAN.
NUM cie1000DhcpSnoopingStatusAssignedIpIfIndex	1.3.6.1.4.1.9.9.832.1.56.1.3.1.1.3	CIE1000InterfaceIndex	read-only	Logical interface number of the physical port of the DHCP client.
IP cie1000DhcpSnoopingStatusAssignedIpIpAddress	1.3.6.1.4.1.9.9.832.1.56.1.3.1.1.4	IpAddress	read-only	IP address assigned to DHCP client by DHCP server.
IP cie1000DhcpSnoopingStatusAssignedIpNetmask	1.3.6.1.4.1.9.9.832.1.56.1.3.1.1.5	IpAddress	read-only	Netmask assigned to DHCP client by DHCP server.
IP cie1000DhcpSnoopingStatusAssignedIpDhcpServerIp	1.3.6.1.4.1.9.9.832.1.56.1.3.1.1.6	IpAddress	read-only	IP address of the DHCP server that assigns the IP address and netmask.
cie1000DhcpSnoopingControl	1.3.6.1.4.1.9.9.832.1.56.1.4
cie1000DhcpSnoopingControlInterfaceClearStatisticsTable	1.3.6.1.4.1.9.9.832.1.56.1.4.1		not-accessible	This is a table to clear port statistics in DHCP Snooping
cie1000DhcpSnoopingControlInterfaceClearStatisticsEntry	1.3.6.1.4.1.9.9.832.1.56.1.4.1.1		not-accessible	Each port has a set of parameters
NUM cie1000DhcpSnoopingControlInterfaceClearStatisticsIfIndex	1.3.6.1.4.1.9.9.832.1.56.1.4.1.1.1	CIE1000InterfaceIndex	accessible-for-notify	Logical interface number of the physical port.
T/F cie1000DhcpSnoopingControlInterfaceClearStatisticsClear	1.3.6.1.4.1.9.9.832.1.56.1.4.1.1.2	TruthValue	read-write	clear statistics per physical port.
cie1000DhcpSnoopingStatistics	1.3.6.1.4.1.9.9.832.1.56.1.5
cie1000DhcpSnoopingStatisticsInterfaceTable	1.3.6.1.4.1.9.9.832.1.56.1.5.2		not-accessible	This is a table of port statistics in DHCP Snooping
cie1000DhcpSnoopingStatisticsInterfaceEntry	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1		not-accessible	Each entry has a set of parameters
NUM cie1000DhcpSnoopingStatisticsInterfaceIfIndex	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.1	CIE1000InterfaceIndex	accessible-for-notify	Logical interface number of the physical port.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxDiscover	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.2	Unsigned32	read-only	The number of discover (option 53 with value 1) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxOffer	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.3	Unsigned32	read-only	The number of offer (option 53 with value 2) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxRequest	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.4	Unsigned32	read-only	The number of request (option 53 with value 3) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxDecline	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.5	Unsigned32	read-only	The number of decline (option 53 with value 4) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxAck	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.6	Unsigned32	read-only	The number of ACK (option 53 with value 5) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxNak	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.7	Unsigned32	read-only	The number of NAK (option 53 with value 6) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxRelease	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.8	Unsigned32	read-only	The number of release (option 53 with value 7) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxInform	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.9	Unsigned32	read-only	The number of inform (option 53 with value 8) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxLeaseQuery	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.10	Unsigned32	read-only	The number of lease query (option 53 with value 10) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxLeaseUnassigned	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.11	Unsigned32	read-only	The number of lease unassigned (option 53 with value 11) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxLeaseUnknown	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.12	Unsigned32	read-only	The number of lease unknown (option 53 with value 12) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxLeaseActive	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.13	Unsigned32	read-only	The number of lease active (option 53 with value 13) packets received.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxDiscardChksumErr	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.14	Unsigned32	read-only	The number of discard packet that IP/UDP checksum is error.
U32 cie1000DhcpSnoopingStatisticsInterfaceRxDiscardUntrust	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.15	Unsigned32	read-only	The number of discard packet that are coming from untrusted port.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxDiscover	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.16	Unsigned32	read-only	The number of discover (option 53 with value 1) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxOffer	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.17	Unsigned32	read-only	The number of offer (option 53 with value 2) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxRequest	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.18	Unsigned32	read-only	The number of request (option 53 with value 3) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxDecline	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.19	Unsigned32	read-only	The number of decline (option 53 with value 4) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxAck	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.20	Unsigned32	read-only	The number of ACK (option 53 with value 5) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxNak	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.21	Unsigned32	read-only	The number of NAK (option 53 with value 6) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxRelease	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.22	Unsigned32	read-only	The number of release (option 53 with value 7) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxInform	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.23	Unsigned32	read-only	The number of inform (option 53 with value 8) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxLeaseQuery	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.24	Unsigned32	read-only	The number of lease query (option 53 with value 10) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxLeaseUnassigned	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.25	Unsigned32	read-only	The number of lease unassigned (option 53 with value 11) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxLeaseUnknown	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.26	Unsigned32	read-only	The number of lease unknown (option 53 with value 12) packets transmited.
U32 cie1000DhcpSnoopingStatisticsInterfaceTxLeaseActive	1.3.6.1.4.1.9.9.832.1.56.1.5.2.1.27	Unsigned32	read-only	The number of lease active (option 53 with value 13) packets transmited.
cie1000DhcpSnoopingMibConformance	1.3.6.1.4.1.9.9.832.1.56.2
cie1000DhcpSnoopingMibCompliances	1.3.6.1.4.1.9.9.832.1.56.2.1
cie1000DhcpSnoopingMibCompliance	1.3.6.1.4.1.9.9.832.1.56.2.1.1			The compliance statement for the implementation.
cie1000DhcpSnoopingMibGroups	1.3.6.1.4.1.9.9.832.1.56.2.2
cie1000DhcpSnoopingConfigGlobalsInfoGroup	1.3.6.1.4.1.9.9.832.1.56.2.2.1			A collection of objects.
cie1000DhcpSnoopingConfigInterfaceInfoGroup	1.3.6.1.4.1.9.9.832.1.56.2.2.2			A collection of objects.
cie1000DhcpSnoopingStatusAssignedIpTableInfoGroup	1.3.6.1.4.1.9.9.832.1.56.2.2.3			A collection of objects.
cie1000DhcpSnoopingControlInterfaceClearStatisticsTableInfoGroup	1.3.6.1.4.1.9.9.832.1.56.2.2.4			A collection of objects.
cie1000DhcpSnoopingStatisticsInterfaceTableInfoGroup	1.3.6.1.4.1.9.9.832.1.56.2.2.5			A collection of objects.

RFC description

Manages DHCP snooping and DHCP server configuration on Cisco CIE1000 devices; vendor-specific MIB for DHCP security features.

Start monitoring Cisco IE1000 industrial Ethernet switch with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CIE1000-DHCP-SNOOPING-MIB

What Is CIE1000-DHCP-SNOOPING-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description