DFL860e-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › DFL860e-MIB

Organization: D-Link Corporation

Last Updated: 2010-09-02

Category: Domain: Security, Technology: VPN, Vendor: DFL/Clavister

Description: Manages Clavister/DFL 860e enterprise security gateway firewall policies, VPN, and system status.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DFL860e-MIB?

DFL860e-MIB is a D-Link enterprise MIB (built on the acquired Clavister NetDefend platform) for the DFL-860e security gateway/UTM firewall appliance, covering firewall/VPN policy and system performance status. It exposes system-level performance counters (CPU load, forwarded bits/packets, buffer usage, active connections) alongside protocol state-transition counters for TCP, UDP, and ICMP traffic, plus a per-interface statistics table. Its monitoring emphasis is squarely on hardware/software load and throughput health: dfl860eSysCpuLoad tracks CPU utilization, dfl860eSysBuffUse tracks memory/buffer pressure, and dfl860eSysConns/session counters reveal whether the appliance is approaching a connection-table or resource limit under attack or heavy load. It sits under D-Link's 'dlink' and 'netdefendMgmt'/'utmFirewall' enterprise structure, reflecting its lineage as a rebranded Clavister UTM product rather than a standard IETF firewall MIB. It is typically deployed on DFL-860e appliances providing perimeter firewall, VPN, and UTM services for small-to-medium business networks. Network engineers evaluating or troubleshooting this functionality can download the DFL860e-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DFL860e-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • D-Link DFL-860e security gateway
  • Clavister NetDefend-based UTM firewall appliance
  • D-Link DFL-860E firewall/UTM appliance

Monitoring Examples

An administrator would poll dfl860eSysCpuLoad and dfl860eSysBuffUse together to detect when the appliance is under heavy inspection load, and dfl860eSysConns to see if active connection counts are approaching a resource ceiling during a suspected DoS event. The dfl860eSysPscTcpSyn, dfl860eSysPscTcpOpen, and dfl860eSysPscTcpFin counters can be compared to spot an abnormal ratio of SYNs to completed connections, a classic sign of a SYN-flood attack, while dfl860eSysPscIcmp spikes could indicate an ICMP flood. dfl860eIfStatsTable would be walked per interface to correlate which network segment is generating the anomalous forwarded-packet volume seen in dfl860eSysForwardedPackets.

What Can Be Monitored

  • CPU load
  • buffer/memory usage
  • active connection count
  • forwarded bits/packets
  • TCP SYN/open/FIN counters
  • UDP and ICMP packet counters
Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
enterprises

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using dfl860eSysForwardedBits OID:

Select a D-Link DFL-860E firewall/UTM appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dfl860eSysForwardedBits into the Find box to locate it in the OID tree, then select it and click OK. The number of bits forwarded through the gateway. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

D-Link-private MIB for DFL860e security appliance management and firewall statistics.

Start monitoring D-Link DFL-860E firewall/UTM appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DFL860e-MIB