CISCOSB-IPV6FHS-MIB

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCOSB-IPV6FHS-MIB

Organization: Cisco Small Business

Last Updated: 2012-12-12

Category: IP and Core Protocols, Vendor: RADLAN/Cisco SB

Description: Manages Cisco Small Business IPv6 First Hop Security (FHS) features including RA Guard and DHCPv6 Guard.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCOSB-IPV6FHS-MIB?

CISCOSB-IPV6FHS-MIB manages IPv6 First Hop Security features, including RA Guard and ND (Neighbor Discovery) Inspection, on Cisco Small Business switches, protecting against rogue router advertisements and IPv6 neighbor-discovery-based attacks on a per-VLAN basis. It exposes per-VLAN enable/disable bitmaps for these security features, spread across multiple objects covering different VLAN ID sub-ranges to cover the full VLAN ID space. As a security-configuration MIB its monitoring value is confirming which VLANs currently have RA Guard and ND Inspection actively enabled; a gap here represents an exposure to IPv6-based first-hop attacks rather than a hardware fault, but is nonetheless a critical device-security-posture status to track. It is a vendor-private MIB with no formal dependency on other MIBs, implementing Cisco's IPv6 First Hop Security feature set independent of any IETF security MIB. It is deployed on Cisco Small Business switches in networks running IPv6 where L2 security against rogue RA/ND traffic is required. Engineers can download the CISCOSB-IPV6FHS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCOSB-IPV6FHS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • Cisco Small Business switch

Monitoring Examples

An administrator would check rlFirstHopSecEnableVlanTable/rlFirstHopSecEnableVlanEntry and its per-range bitmaps (rlFirstHopSecEnableVlan1to1024, rlFirstHopSecEnableVlan1025to2048, etc.) to confirm First Hop Security is enabled on a specific VLAN, and similarly inspect rlNdInspectionEnableVlanTable/rlNdInspectionEnableVlanEntry to verify ND Inspection status for that same VLAN range. Finding a VLAN unexpectedly absent from the enabled bitmap would explain why rogue IPv6 router advertisements are getting through on that segment. These tables are polled for security-posture auditing rather than traffic/performance monitoring.

What Can Be Monitored

  • RA Guard/First Hop Security enabled VLANs
  • ND Inspection enabled VLANs
  • per-VLAN security feature status
Imported Objects

From CISCOSB-BRIDGEMIBOBJECTS-MIB

VlanList1
VlanList2
VlanList3
VlanList4

From CISCOSB-DEVICEPARAMS-MIB

rndErrorDescOBJECT-TYPE
rndErrorSeverityOBJECT-TYPE

From CISCOSB-MIB

rlMacMulticastOBJECT-IDENTITY
rndNotificationsOBJECT-IDENTITY
switch001MODULE-IDENTITY

From IF-MIB

InterfaceIndex
InterfaceIndexOrZero

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From Q-BRIDGE-MIB

PortList
VlanId
VlanIndex

From SNMPv2-SMI

Counter32
Integer32
IpAddress
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using rlFirstHopSecCountersRxNdpRA OID:

Select a Cisco Small Business switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type rlFirstHopSecCountersRxNdpRA into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the number of NDP Router Advertisement messages received on the interface. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Configures IPv6 First Hop Security features on Cisco Small Business switches, including ND inspection and VLAN-based security settings.

Start monitoring Cisco Small Business switch with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCOSB-IPV6FHS-MIB