DFL860-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › DFL860-MIB

Organization: D-Link Corporation

Last Updated: 2010-09-02

Category: VPN and Security, Vendor: D-Link

Description: Manages D-Link DFL-860 firewall/UTM appliance configuration, VPN tunnels, and threat policies.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DFL860-MIB?

DFL860-MIB is a D-Link enterprise MIB for the DFL-860 series firewall/UTM appliance (D-Link NetDefend line), covering system resource load, traffic forwarding statistics, connection tracking, and per-interface counters. It exposes core hardware/software health indicators including CPU load, buffer usage, and active connection counts, alongside detailed packet/session-control (PSC) counters for TCP SYN, open, and FIN states and UDP/ICMP/other protocol traffic. Its principal monitoring use is device health and load: dfl860SysCpuLoad and dfl860SysBuffUse directly indicate whether the firewall's CPU or memory buffers are becoming a bottleneck, while dfl860SysConns and the PSC counters reveal connection-table pressure and possible SYN-flood or attack conditions. It sits under the vendor's broader dlink/netdefendMgmt/utmFirewall enterprise MIB tree, indicating shared structure with other D-Link NetDefend product MIBs. It is deployed on D-Link DFL-860 firewall/UTM appliances in small-to-midsize business network perimeters, where administrators can download the DFL860-MIB file for direct use in their monitoring tools.

IPNetwork Monitor allows you to monitor SNMP objects defined in DFL860-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • D-Link DFL-860 NetDefend firewall/UTM appliance

Monitoring Examples

An operator would poll dfl860SysCpuLoad and dfl860SysBuffUse to catch a firewall approaching resource exhaustion, and dfl860SysConns alongside dfl860SysPscTcpSyn versus dfl860SysPscTcpOpen to detect a disproportionate number of half-open TCP connections indicative of a SYN-flood attack. dfl860SysForwardedBits and dfl860SysForwardedPackets provide overall throughput trending, while dfl860IfStatsTable gives per-interface traffic breakdowns to isolate which link is carrying the anomalous load. A spike in dfl860SysPscIcmp combined with high dfl860SysCpuLoad would suggest an ICMP-based attack straining the device.

What Can Be Monitored

  • CPU load
  • buffer/memory usage
  • active connection count
  • TCP SYN/open/FIN connection counters
  • UDP/ICMP/other protocol packet counters
  • per-interface forwarded traffic
Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
enterprises

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using dfl860SysForwardedBits OID:

Select a D-Link DFL-860 firewall/UTM appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dfl860SysForwardedBits into the Find box to locate it in the OID tree, then select it and click OK. The number of bits forwarded through the gateway. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Provides system statistics and operational monitoring for D-Link DFL-860 series firewall appliances.

Start monitoring D-Link DFL-860 firewall/UTM appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DFL860-MIB