All MIBs › FDRY-DHCP-SNOOPING-MIB › fdryDhcpSnoopIfTrustValue
fdryDhcpSnoopIfTrustValue
Module: FDRY-DHCP-SNOOPING-MIB
OID (symbolic): FDRY-DHCP-SNOOPING-MIB::fdryDhcpSnoopIfTrustValue
OID (numeric): 1.3.6.1.4.1.1991.1.1.3.36.3.1.1.1
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-write
Description: This object indicates whether the interface is trusted for DHCP Snooping. If this object is set to 'true', the interface is trusted. DHCP packets coming to this interface will be forwarded without checking. If this object is set to 'false', the interface is not trusted. DHCP packets received on this interface will be subjected to DHCP checks.
What is fdryDhcpSnoopIfTrustValue?
This object marks a physical interface as trusted, true, or untrusted, false, for DHCP snooping purposes; DHCP packets on a trusted interface are forwarded without inspection, while packets on an untrusted interface are subjected to DHCP snooping checks. Admins mark uplinks to legitimate DHCP servers as trusted and leave access ports untrusted so rogue DHCP replies from end-user ports get filtered. For example, setting fdryDhcpSnoopIfTrustValue to true on the uplink to the corporate DHCP server, while leaving user-facing ports false, prevents a rogue server on an access port from successfully leasing addresses.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.1991.1.1.3.36.3.1.1.1 snmpwalk -v2c -c public <target> FDRY-DHCP-SNOOPING-MIB::fdryDhcpSnoopIfTrustValue
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.1991.1.1.3.36.3.1.1.1.1 snmpget -v2c -c public <target> FDRY-DHCP-SNOOPING-MIB::fdryDhcpSnoopIfTrustValue.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.1991.1.1.3.36.3.1.1.1.1 s <value>
Start monitoring Brocade/Foundry FastIron switch (DHCP Snooping) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the FDRY-DHCP-SNOOPING-MIB::fdryDhcpSnoopIfTrustValue OID value, configure state conditions and alerts, and monitor any Brocade/Foundry FastIron switch (DHCP Snooping) from a single console.
OID Breakdown
Upper-level ancestors (10 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.1991 | foundry | FOUNDRY-SN-ROOT-MIB |
| 1.3.6.1.4.1.1991.1 | products | FOUNDRY-SN-ROOT-MIB |
| 1.3.6.1.4.1.1991.1.1 | switch | FOUNDRY-SN-ROOT-MIB |
| 1.3.6.1.4.1.1991.1.1.3 | snSwitch | FOUNDRY-SN-ROOT-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.1991.1.1.3.36 | fdryDhcpSnoopMIB | FDRY-DHCP-SNOOPING-MIB |
| 1.3.6.1.4.1.1991.1.1.3.36.3 | fdryDhcpSnoopInterface | FDRY-DHCP-SNOOPING-MIB |
| 1.3.6.1.4.1.1991.1.1.3.36.3.1 | fdryDhcpSnoopIfConfigTable | FDRY-DHCP-SNOOPING-MIB |
| 1.3.6.1.4.1.1991.1.1.3.36.3.1.1 | fdryDhcpSnoopIfConfigEntry | FDRY-DHCP-SNOOPING-MIB |
| 1.3.6.1.4.1.1991.1.1.3.36.3.1.1.1 | fdryDhcpSnoopIfTrustValue | FDRY-DHCP-SNOOPING-MIB |