DFL2560-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › DFL2560-MIB

Organization: D-Link Corporation

Last Updated: 2010-09-02

Category: VPN and Security, Vendor: D-Link

Description: Manages D-Link DFL-2560 enterprise firewall security configuration and traffic monitoring.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DFL2560-MIB?

DFL2560-MIB is a D-Link proprietary MIB for the DFL-2560 series enterprise unified threat management (UTM) firewall, covering system performance, connection tracking, and per-interface traffic statistics. It exposes performance counters such as CPU load, forwarded bits/packets, connection buffer usage, and protocol-specific state counters (TCP SYN/open/FIN, UDP, ICMP, and other packets), along with per-interface statistics in dfl2560IfStatsTable. Its central use is monitoring both hardware and software load on the firewall: dfl2560SysCpuLoad reveals processing strain, dfl2560SysConns and the TCP/UDP/ICMP state counters reveal connection-table pressure or potential DoS/flood activity, and buffer usage indicates whether the appliance is nearing capacity. It sits under D-Link's netdefendMgmt/utmFirewall enterprise branch and is largely self-contained, with no strong dependency on other standard MIBs evident from the object set. It is deployed at network edges or data center perimeters where the DFL-2560 firewall appliance provides UTM security services. Engineers can download the DFL2560-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DFL2560-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • D-Link DFL-2560 UTM firewall appliance

Monitoring Examples

An administrator would poll dfl2560SysCpuLoad and dfl2560SysBuffUse together to detect whether the firewall is under CPU or memory/buffer pressure during high traffic periods. Watching dfl2560SysConns alongside dfl2560SysPscTcpSyn versus dfl2560SysPscTcpOpen can reveal a SYN-flood pattern if half-open connections spike disproportionately to fully established ones. Polling dfl2560IfStatsTable per interface shows forwarded packet/byte rates on each link, helping identify which interface is saturated when dfl2560SysForwardedBits climbs sharply.

What Can Be Monitored

  • CPU load
  • forwarded bits/packets
  • connection buffer usage
  • active connection count
  • TCP SYN/open/FIN counters
  • UDP/ICMP packet counters
  • per-interface traffic statistics
Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
enterprises

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using dfl2560SysForwardedBits OID:

Select a D-Link DFL-2560 UTM firewall appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dfl2560SysForwardedBits into the Find box to locate it in the OID tree, then select it and click OK. The number of bits forwarded through the gateway. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Vendor management MIB for D-Link DFL2560 series security appliances; manages firewall configuration, status, and security policies.

Start monitoring D-Link DFL-2560 UTM firewall appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DFL2560-MIB