DLINKSW-DHCP-SNOOPING-MIB

All MIBs › DLINKSW-DHCP-SNOOPING-MIB

Organization: D-Link Corp.

Last Updated: 2013-09-09

Category: LAN Management

Description: Manages DHCP snooping to block unauthorized DHCP servers on D-Link switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DLINKSW-DHCP-SNOOPING-MIB?

DLINKSW-DHCP-SNOOPING-MIB is a D-Link switch enterprise MIB defining objects for the DHCP snooping security feature, which inspects DHCP traffic to block rogue/unauthorized DHCP servers and build a trusted binding table of client IP-to-MAC-to-port mappings. No sample objects were available in the source, but based on standard DHCP snooping implementations it would typically expose per-port trust configuration, snooping enable/disable state, and a binding table of learned client entries. Administrators use it to monitor the software-level security configuration and status of DHCP snooping, such as which ports are trusted and how many client bindings are currently active, to detect potential rogue DHCP activity or unauthorized port configuration. It conceptually parallels other vendors' DHCP snooping MIBs but is a D-Link-specific proprietary implementation. It is deployed on D-Link managed switches in networks where DHCP security/anti-spoofing protection is required at the access layer, and administrators can download the DLINKSW-DHCP-SNOOPING-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DLINKSW-DHCP-SNOOPING-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switches (DHCP snooping)

Monitoring Examples

Without concrete sample object names, a specific real-object monitoring example cannot be constructed for this module; typically an admin would poll a per-port trust-state object to confirm untrusted ports still block rogue DHCP server replies, and check the DHCP binding table for the expected count of active client leases per port. An unexpected binding table entry or a rogue-server-blocked event would indicate a misconfigured or malicious DHCP server on the network.

What Can Be Monitored

DHCP snooping enable/disable state
per-port trust configuration
client IP/MAC binding table
rogue DHCP detection events

Imported Objects

From DLINK-ID-REC-MIB

dlinkIndustrialCommon

OBJECT-IDENTITY

From DLINKSW-TC-MIB

Dlink2kVlanList

From IF-MIB

InterfaceIndex
InterfaceIndexOrZero
ifIndex	OBJECT-TYPE

From Q-BRIDGE-MIB

VlanId
VlanIdOrNone

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
MacAddress
RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using dDhcpSnpStatBindingCollision OID:

Select a D-Link managed switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dDhcpSnpStatBindingCollision into the Find box to locate it in the OID tree, then select it and click OK. This object indicates the number of entry that DHCP snooping create collisions with the entry exist in DHCP snooping database. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
dlinkSwDhcpSnpMIB	1.3.6.1.4.1.171.26.131			This MIB module defines objects for DHCP snooping.
dDhcpSnpMIBNotifications	1.3.6.1.4.1.171.26.131.0
dDhcpSnpMIBObjects	1.3.6.1.4.1.171.26.131.1
dDhcpSnpGlobalObjects	1.3.6.1.4.1.171.26.131.1.1
T/F dDhcpSnpGlobalEnabled	1.3.6.1.4.1.171.26.131.1.1.1	TruthValue	read-write	This object indicates the global state of the DHCP snooping.
T/F dDhcpSnpVerifyMacAddressEnabled	1.3.6.1.4.1.171.26.131.1.1.2	TruthValue	read-write	This object indicates whether the DHCP snooping validates the source MAC address matches the client hardware address in the received DHCP request packet.
T/F dDhcpSnpStationMoveDenyEnabled	1.3.6.1.4.1.171.26.131.1.1.3	TruthValue	read-write	This object indicates whether dynamic DHCP snooping binding entry with same IP and MAC address on specific port can move to another port if the Switch detects a new DHCP process belongs to same IP and MAC address.
T/F dDhcpSnpOption82AllowUntrust	1.3.6.1.4.1.171.26.131.1.1.4	TruthValue	read-write	This object indicates whether the DHCP snooping allows the DHCP request packets with relay option 82 on the untrusted interface.
T/F dDhcpSnpBootpBindEnabled	1.3.6.1.4.1.171.26.131.1.1.5	TruthValue	read-write	This object indicates whether the DHCP snooping snoops the BOOTP messages and learns the binding entry.
dDhcpSnpDatabaseObjects	1.3.6.1.4.1.171.26.131.1.2
STR dDhcpSnpDatabaseUrl	1.3.6.1.4.1.171.26.131.1.2.1	SnmpAdminString	read-write	This object indicates the URL to store the DHCP snooping binding entries to local flash or remote site.
INT dDhcpSnpDatabaseUpdateInterval	1.3.6.1.4.1.171.26.131.1.2.2	INTEGER	read-write	This object indicates the time interval at which DHCP bindings information will be written to the location that is specified by dDhcpSnpDatabaseUrl. The special value of 0 indicates disable the storing.
STR dDhcpSnpRenewDatabaseUrl	1.3.6.1.4.1.171.26.131.1.2.3	SnmpAdminString	read-write	This object indicates the URL to renew the DHCP binding database.
T/F dDhcpSnpRenewValidateDbEnabled	1.3.6.1.4.1.171.26.131.1.2.4	TruthValue	read-write	This object indicates whether the DHCP snooping verify the checksum for the entries when loading DHCP bindings information.
INT dDhcpSnpRenewDatabase	1.3.6.1.4.1.171.26.131.1.2.5	INTEGER	read-write	This object starts loading DHCP snooping binding entries, when set to 'renew'. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
DAT dDhcpSnpDbLastSucceeded	1.3.6.1.4.1.171.26.131.1.2.6	DateAndTime	read-only	This object indicates the last time at which the agent downloaded the database successfully.
DAT dDhcpSnpDbLastFailed	1.3.6.1.4.1.171.26.131.1.2.7	DateAndTime	read-only	This object indicates the last time at which the agent failed to download the database.
INT dDhcpSnpClearDatabaseStatistics	1.3.6.1.4.1.171.26.131.1.2.8	INTEGER	read-write	This object clears the DHCP snooping database statistics, when set to 'clear'. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
dDhcpSnpDbLastIgnoredCounters	1.3.6.1.4.1.171.26.131.1.2.9
C32 dDhcpSnpStatBindingCollisionEx	1.3.6.1.4.1.171.26.131.1.2.9.1	Counter32	read-only	This object indicates the number of entry that DHCP snooping create collisions with the entry exist in DHCP snooping database.
C32 dDhcpSnpStatExpiredLease	1.3.6.1.4.1.171.26.131.1.2.9.2	Counter32	read-only	This object indicates the number of entry expires in DHCP snooping database.
C32 dDhcpSnpStatInvalidInterfaces	1.3.6.1.4.1.171.26.131.1.2.9.3	Counter32	read-only	This object indicates the number of interfaces that receive the DHCP message but DHCP snooping is not performed.
C32 dDhcpSnpStatUnsupportedVlans	1.3.6.1.4.1.171.26.131.1.2.9.4	Counter32	read-only	This object indicates the number of the entry's VLAN is disabled.
C32 dDhcpSnpStatParsingFailures	1.3.6.1.4.1.171.26.131.1.2.9.5	Counter32	read-only	This object indicates the number of illegal DHCP packets.
C32 dDhcpSnpStatChecksumErrors	1.3.6.1.4.1.171.26.131.1.2.9.6	Counter32	read-only	This object indicates the number of calculated checksum value does not equal the stored checksum.
dDhcpSnpVlanObjects	1.3.6.1.4.1.171.26.131.1.3
DLI dDhcpSnpVlanCrlFirst2K	1.3.6.1.4.1.171.26.131.1.3.1	Dlink2kVlanList	read-write	This object specifies the DHCP snooping enabled VLAN in a string of octets containing one bit per VLAN for VLANs 1 to 2048. If the bit is set to '1', then the VLAN is enabled for DHCP snooping.
DLI dDhcpSnpVlanCrlSecond2K	1.3.6.1.4.1.171.26.131.1.3.2	Dlink2kVlanList	read-write	This object specifies the DHCP snooping enabled VLAN in a string of octets containing one bit per VLAN for VLANs 2049 to 4095. If the bit is set to '1', then the VLAN is enabled for DHCP snooping.
dDhcpSnpIfObjects	1.3.6.1.4.1.171.26.131.1.4
dDhcpSnpIfTrustTable	1.3.6.1.4.1.171.26.131.1.4.1		not-accessible	A table provides the mechanism to control the DHCP snooping trust state for per interface.
dDhcpSnpIfTrustEntry	1.3.6.1.4.1.171.26.131.1.4.1.1		not-accessible	A row instance contains the configuration to enable or disable trust state for per interface.
T/F dDhcpSnpIfTrustEnabled	1.3.6.1.4.1.171.26.131.1.4.1.1.1	TruthValue	read-write	This object indicates whether the trust state of DHCP snooping in this interface.
dDhcpSnpIfRateLimitTable	1.3.6.1.4.1.171.26.131.1.4.2		not-accessible	A table provides the mechanism to control the DHCP snooping rate limit for per interface.
dDhcpSnpIfRateLimitEntry	1.3.6.1.4.1.171.26.131.1.4.2.1		not-accessible	A row instance contains the configuration of rate limit on an interface.
I32 dDhcpSnpIfRateLimit	1.3.6.1.4.1.171.26.131.1.4.2.1.1	Integer32	read-write	This object indicates rate limit in this interface. The special value of -1 indicates not limit the DHCP packet to CPU on the interface.
dDhcpSnpIfBindingsLimitTable	1.3.6.1.4.1.171.26.131.1.4.3		not-accessible	A table provides the mechanism to control the DHCP snooping bindings limit for per interface.
dDhcpSnpIfBindingsLimitEntry	1.3.6.1.4.1.171.26.131.1.4.3.1		not-accessible	A row instance contains the configuration of bindings limit value on an interface.
I32 dDhcpSnpIfBindingsLimit	1.3.6.1.4.1.171.26.131.1.4.3.1.1	Integer32	read-write	This object indicates bindings limit in this interface. The special value of 0 indicates dynamically learned binding entry is not allowed on the interface. The special value of -1 indicates no binding entry number limitation on the interface.
dDhcpSnpBindingsObjects	1.3.6.1.4.1.171.26.131.1.5
dDhcpSnpBindingsTable	1.3.6.1.4.1.171.26.131.1.5.1		not-accessible	A table provides the DHCP snooping bindings information. A DHCP snooping binding can be created manually or learned dynamically.
dDhcpSnpBindingsEntry	1.3.6.1.4.1.171.26.131.1.5.1.1		not-accessible	An entry consists of information for a DHCP snooping binding.
MAC dDhcpSnpBindingsMacAddress	1.3.6.1.4.1.171.26.131.1.5.1.1.1	MacAddress	not-accessible	This object indicates the MAC address of a host.
VLA dDhcpSnpBindingsVlan	1.3.6.1.4.1.171.26.131.1.5.1.1.2	VlanId	not-accessible	This object indicates the VLAN to which a host belongs.
IP dDhcpSnpBindingsIpAddress	1.3.6.1.4.1.171.26.131.1.5.1.1.3	IpAddress	not-accessible	This object indicates the allocated IP address of host.
NUM dDhcpSnpBindingsInterface	1.3.6.1.4.1.171.26.131.1.5.1.1.4	InterfaceIndex	not-accessible	This object indicates the ifIndex value of the interface where a host connects to.
U32 dDhcpSnpBindingsLeasedTime	1.3.6.1.4.1.171.26.131.1.5.1.1.5	Unsigned32	read-create	This object indicates the leased (expiry) time of this DHCP binding.
ROW dDhcpSnpBindingsStatus	1.3.6.1.4.1.171.26.131.1.5.1.1.99	RowStatus	read-create	This object is used to manage the creation and deletion of rows in this table.
dDhcpSnpBindingsClearTable	1.3.6.1.4.1.171.26.131.1.5.2		not-accessible	A table provides mechanism to clear the DHCP snooping binding entries.
dDhcpSnpBindingsClearEntry	1.3.6.1.4.1.171.26.131.1.5.2.1		not-accessible	An entry defines the criteria to clear DHCP snooping binding entries.
U32 dDhcpSnpBindingsClearIndex	1.3.6.1.4.1.171.26.131.1.5.2.1.1	Unsigned32	not-accessible	The index uniquely identifies this row. The only legal value for this object is 1.
MAC dDhcpSnpBindingsClearByMacAddr	1.3.6.1.4.1.171.26.131.1.5.2.1.2	MacAddress	read-write	This object indicates the specific MAC address to clear binding entry. When read, a special value of '000000000000'H is returned to indicate this criterion is not specified.
VLA dDhcpSnpBindingsClearByVlan	1.3.6.1.4.1.171.26.131.1.5.2.1.3	VlanIdOrNone	read-write	This object indicates the specific VLAN to clear binding entry. When read, a special value of 0 is returned to indicate this criterion is not specified.
IP dDhcpSnpBindingsClearByIpAddress	1.3.6.1.4.1.171.26.131.1.5.2.1.4	IpAddress	read-write	This object indicates the specific IP address to clear binding entry. When read, a special value of 0.0.0.0 returned to indicate this criterion is not specified.
NUM dDhcpSnpBindingsClearByInterface	1.3.6.1.4.1.171.26.131.1.5.2.1.5	InterfaceIndexOrZero	read-write	This object indicates the specific interface to clear binding entry. When read, a special value of 0 returned to indicate this criterion is not specified.
INT dDhcpSnpBindingsClearStatus	1.3.6.1.4.1.171.26.131.1.5.2.1.99	INTEGER	read-write	This object is used to clear snooping binding entries when set to 'clear'. No action is taken if this object is set to 'noOp'. The clearing criteria depend on other non index objects. Note: if no object is configured, all entries will be cleared.
dDhcpSnpMIBConformance	1.3.6.1.4.1.171.26.131.2
dDhcpSnpCompliances	1.3.6.1.4.1.171.26.131.2.1
dDhcpSnpCompliance	1.3.6.1.4.1.171.26.131.2.1.1			The compliance statement for entities which implement the DLINKSW-DHCP-SNOOPING-MIB.
dDhcpSnpGroups	1.3.6.1.4.1.171.26.131.2.2
dDhcpSnpGlobalEnableGroup	1.3.6.1.4.1.171.26.131.2.2.1			A collection of objects which are used to configure as well as show information regarding the feature enabling.
dDhcpSnpVlanEnableGroup	1.3.6.1.4.1.171.26.131.2.2.2			A collection of objects which are used to configure as well as show information regarding the feature enabling on each VLAN.
dDhcpSnpIfTrustGroup	1.3.6.1.4.1.171.26.131.2.2.3			A collection of objects which are used to configure as well as show information regarding the interface trust state.
dDhcpSnpBindingsGroup	1.3.6.1.4.1.171.26.131.2.2.4			A collection of objects which are used to manage DHCP bindings information.
dDhcpSnpBindingsClearGroup	1.3.6.1.4.1.171.26.131.2.2.5			A collection of objects which are used to clear DHCP bindings
dDhcpSnpVerifyMacAddressGroup	1.3.6.1.4.1.171.26.131.2.2.6			A collection of object which are used to configure as well as show information regarding the verify Mac address state.
dDhcpSnpStationMoveGroup	1.3.6.1.4.1.171.26.131.2.2.7			A collection of object which are used to configure as well as show information regarding the station move state.
dDhcpSnpBootpBindGroup	1.3.6.1.4.1.171.26.131.2.2.8			A collection of object which are used to configure as well as show information regarding the BOOTP snooping state.
dDhcpSnpRelayAgentInfoAllowGroup	1.3.6.1.4.1.171.26.131.2.2.9			A collection of object which are used to configure as well as show information regarding the allow Relay Agent information from untrust port state.
dDhcpSnpDatabaseGroup	1.3.6.1.4.1.171.26.131.2.2.10			A collection of objects which are used to configure as well as show information regarding the DHCP snooping database.
dDhcpSnpIfRateLimitGroup	1.3.6.1.4.1.171.26.131.2.2.11			A collection of objects which are used to configure as well as show information regarding the rate limit per interface.
dDhcpSnpIfBindingsLimitGroup	1.3.6.1.4.1.171.26.131.2.2.12			A collection of objects which are used to configure as well as show information regarding the bindings limit per interface.

RFC description

Manages DHCP snooping feature for tracking and filtering DHCP transactions on D-Link switches.

Start monitoring D-Link managed switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DLINKSW-DHCP-SNOOPING-MIB