DFL800-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › DFL800-MIB

Organization: D-Link Corporation

Last Updated: 2010-09-02

Category: VPN and Security, Vendor: D-Link

Description: Manages D-Link DFL-800 network security appliance firewall rules and VPN configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DFL800-MIB?

DFL800-MIB is D-Link's proprietary MIB for the DFL-800 series NetDefend network security appliance, a UTM firewall/VPN gateway product, exposing system performance and firewall/session statistics for the device. Its objects span hardware/software performance monitoring (CPU load, buffer usage) and firewall-specific traffic data (forwarded bits/packets, active connections, per-protocol packet-state counters, per-interface statistics). As a monitoring target it is notable for direct CPU load and connection-state visibility, letting an administrator watch dfl800SysCpuLoad for processing overload, dfl800SysBuffUse for buffer/memory pressure, and dfl800SysConns for session-table saturation, all classic hardware/software health indicators for a security appliance under heavy load or attack. It sits under D-Link's ipsFirewall/netdefendMgmt enterprise subtree and is largely self-contained, though it complements standard IF-MIB interface counters for full traffic visibility. It is deployed on DFL-800 firewall/VPN appliances protecting small-to-midsize office or branch networks. Engineers can download the DFL800-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DFL800-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • D-Link DFL-800 NetDefend firewall/VPN appliance

Monitoring Examples

An administrator would poll dfl800SysCpuLoad and dfl800SysBuffUse on a regular interval to detect the appliance struggling under high traffic or a DoS condition, and check dfl800SysConns alongside the per-protocol counters dfl800SysPscTcpSyn/dfl800SysPscTcpOpen/dfl800SysPscTcpFin to see whether an unusual spike in half-open TCP sessions indicates a SYN flood. The dfl800IfStatsTable would be walked per interface to correlate forwarded packet/bit counts (dfl800SysForwardedBits, dfl800SysForwardedPackets) with expected traffic patterns, and dfl800SysPscIcmp/dfl800SysPscUdp/dfl800SysPscOther would reveal an abnormal shift in protocol mix suggesting a scan or flood.

What Can Be Monitored

  • CPU load
  • buffer usage
  • active connection count
  • forwarded packets/bits
  • TCP/UDP/ICMP session-state counters
  • per-interface traffic statistics
Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
enterprises

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using dfl800SysForwardedBits OID:

Select a D-Link DFL-800 NetDefend firewall/VPN appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dfl800SysForwardedBits into the Find box to locate it in the OID tree, then select it and click OK. The number of bits forwarded through the gateway. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

D-Link DFL-800 series firewall device management and performance statistics.

Start monitoring D-Link DFL-800 NetDefend firewall/VPN appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DFL800-MIB