G6-DHCP-MIB

All MIBs › G6-DHCP-MIB

Organization: MICROSENS GmbH & Co. KG

Last Updated: 2018-02-12

Category: Protocol: DHCP, Vendor: MICROSENS

Description: MICROSENS G6 switch MIB for DHCP snooping and relay configuration and binding table management.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is G6-DHCP-MIB?

G6-DHCP-MIB is MICROSENS's proprietary MIB for its Generation 6 (G6) Ethernet switches, covering DHCP snooping, DHCP relay, PPPoE snooping, and ARP inspection configuration along with the DHCP snooping binding table. It exposes both feature enable/disable switches and per-relay configuration data such as the target DHCP server address and Option 82 remote-ID handling. Its status-monitoring role is software/service-oriented: whether DHCP snooping, relay, PPPoE snooping, and ARP inspection are currently enabled, and the live contents of the snooping binding table, are the key indicators of the switch's security-feature health rather than any physical sensor data. It complements standard interface indexing conventions from IF-MIB/BRIDGE-MIB when tying binding entries to physical ports. It is deployed on MICROSENS G6 access switches in networks that rely on DHCP snooping to block rogue DHCP servers and spoofed ARP traffic. Engineers can download the G6-DHCP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in G6-DHCP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

MICROSENS G6 Ethernet switch

Monitoring Examples

An administrator checks dhcpEnableDhcpSnooping and dhcpEnableDhcpRelay to confirm the security features are active, then inspects relayConfigTable entries (indexed by relayConfigIndex) for relayConfigDhcpServerAddress and relayConfigRemoteIdSource to verify Option 82 relay is pointed at the correct server. If a rogue DHCP server is detected on a port, invoking dhcpUnblockPort or dhcpClearSnoopingTable and watching the snooping binding table change confirms the mitigation took effect.

What Can Be Monitored

DHCP snooping enable/disable status
DHCP relay enable/disable status
PPPoE snooping status
ARP inspection status
DHCP relay server address configuration
blocked port status

Imported Objects

From MICROSENS-G6-MIB

g6	OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32
enterprises

From SNMPv2-TC

DisplayString
MacAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
protocol	1.3.6.1.4.1.3181.10.6.2			Microsens private MIB for Generation 6 Ethernet Switches
dhcp	1.3.6.1.4.1.3181.10.6.2.49
INT dhcpEnableDhcpRelay	1.3.6.1.4.1.3181.10.6.2.49.1	INTEGER	read-write	General enable of dhcp relay function.
INT dhcpEnableDhcpSnooping	1.3.6.1.4.1.3181.10.6.2.49.2	INTEGER	read-write	General enable of dhcp snooping function.
INT dhcpEnablePppoeSnooping	1.3.6.1.4.1.3181.10.6.2.49.3	INTEGER	read-write	General enable of PPPoE snooping also known as PPPoE Intermediate Agent function.
INT dhcpEnableArpInspection	1.3.6.1.4.1.3181.10.6.2.49.4	INTEGER	read-write	General enable of arp inspection function.
STR dhcpUnblockPort	1.3.6.1.4.1.3181.10.6.2.49.5	DisplayString	read-write	This function may be used to unblock a port that has been set to blocking state due to DHCP flooding or due to ARP storm detection. The shorthand port format like 1 for 1/1 may be used. Syntax examples: dhcp.unblock_port = 1/2,1/5 or dhcp.unblock_port = 1/1-1/4. Also the syntax .. = 0-5 to unblock the first 6 ports is supported.
STR dhcpClearSnoopingTable	1.3.6.1.4.1.3181.10.6.2.49.6	DisplayString	read-write	This function may be used to clear the content of the DHCP snooping table.
relayConfigTable	1.3.6.1.4.1.3181.10.6.2.49.7		not-accessible	This configures the DHCP relay option 82. It can be used to supply information from which port a DHCP request came in order to supply an IP based on the physical location of the requestor.
relayConfigEntry	1.3.6.1.4.1.3181.10.6.2.49.7.1		not-accessible
INT relayConfigIndex	1.3.6.1.4.1.3181.10.6.2.49.7.1.1	INTEGER	not-accessible	Automatically generated
STR relayConfigDhcpServerAddress	1.3.6.1.4.1.3181.10.6.2.49.7.1.2	DisplayString	read-write	Defines host address or network address where the dhcp server(s) resides. Also known as ip_helper_address.
INT relayConfigRemoteIdSource	1.3.6.1.4.1.3181.10.6.2.49.7.1.3	INTEGER	read-write	Defines how the switch is identified when DHCP option 82 is used. (Suboption2)
STR relayConfigCustomRemoteId	1.3.6.1.4.1.3181.10.6.2.49.7.1.4	DisplayString	read-write	This remote id is used for option 82 when 'remote_id_source' is set to USER_DEFINED.
INT relayConfigCircuitIdSource	1.3.6.1.4.1.3181.10.6.2.49.7.1.5	INTEGER	read-write	Defines how the ports are identified when option 82 is used. (Suboption1)
relayPortConfigTable	1.3.6.1.4.1.3181.10.6.2.49.8		not-accessible	This configures the DHCP relay option 82. It can be used to supply information from which port a DHCP request came in order to supply an IP based on the physical location of the requestor.
relayPortConfigEntry	1.3.6.1.4.1.3181.10.6.2.49.8.1		not-accessible
INT relayPortConfigPortIndex	1.3.6.1.4.1.3181.10.6.2.49.8.1.1	INTEGER	not-accessible	Automatically generated
INT relayPortConfigEnableDhcpRelay	1.3.6.1.4.1.3181.10.6.2.49.8.1.2	INTEGER	read-write	When enabled incoming DHCP requests are redirected to the dhcp server or network specified in 'dhcp.relay_config'
INT relayPortConfigEnableOption82	1.3.6.1.4.1.3181.10.6.2.49.8.1.3	INTEGER	read-write	When enabled incoming DHCP requests are modified in 'dhcp.relay_config'
snoopingPortConfigTable	1.3.6.1.4.1.3181.10.6.2.49.9		not-accessible	This configures the DHCP snooping function. DHCP snooping acts like a DHCP firewall between access and link ports. When enabled it ensures that for untrusted ports only DHCP requests are accepted. This prevents malicious users from injecting fake DHCP frames and thus invalid IP addresses.
snoopingPortConfigEntry	1.3.6.1.4.1.3181.10.6.2.49.9.1		not-accessible
INT snoopingPortConfigPortIndex	1.3.6.1.4.1.3181.10.6.2.49.9.1.1	INTEGER	not-accessible	Automatically generated
INT snoopingPortConfigEnableDhcpSnooping	1.3.6.1.4.1.3181.10.6.2.49.9.1.2	INTEGER	read-write	This enables the DHCP snooping function per port.
INT snoopingPortConfigDhcpFiltering	1.3.6.1.4.1.3181.10.6.2.49.9.1.3	INTEGER	read-write	DHCP filtering prevents DHCP responses being injected from a local access port. It acts like a DHCP firewall between access and link ports.
INT snoopingPortConfigSnoopingTrust	1.3.6.1.4.1.3181.10.6.2.49.9.1.4	INTEGER	read-write	DHCP responses are only accepted when they ingress on a trusted port. Typically these are the link ports. AUTO uses the port role and declares all up or downlink ports as trusted.
INT snoopingPortConfigAcceptIngressOption82	1.3.6.1.4.1.3181.10.6.2.49.9.1.5	INTEGER	read-write	Normally incoming DHCP request incoming with Option 82 set will be discarded. When enabled then this check is ignored.
INT snoopingPortConfigMacAddressVerification	1.3.6.1.4.1.3181.10.6.2.49.9.1.6	INTEGER	read-write	When a packet is received on an untrusted interface, and the source MAC address and the DHCP client MAC address do not match and this feature is enabled, the packet is dropped.
I32 snoopingPortConfigDhcpRateLimiting	1.3.6.1.4.1.3181.10.6.2.49.9.1.7	Integer32	read-write	Defines how many DHCP request are accepted per second. When the limit is reached, DHCP flooding is assumed and the port is blocked. The value 0 disables the rate limit check.
STR snoopingPortConfigClearSnoopingStatistics	1.3.6.1.4.1.3181.10.6.2.49.9.1.8	DisplayString	read-write	Reset all DHCP related statistics and reason. The snooping binding table is not affected.
pppoeConfigTable	1.3.6.1.4.1.3181.10.6.2.49.10		not-accessible	This table defines the general parameter for PPPoE Intermediate Agent feature.
pppoeConfigEntry	1.3.6.1.4.1.3181.10.6.2.49.10.1		not-accessible
INT pppoeConfigIndex	1.3.6.1.4.1.3181.10.6.2.49.10.1.1	INTEGER	not-accessible	Automatically generated
U32 pppoeConfigVendorId	1.3.6.1.4.1.3181.10.6.2.49.10.1.2	Unsigned32	read-write	Vendor identification that this device adds to a PPPoE request before forwarding it to the server.
INT pppoeConfigRemoteIdSource	1.3.6.1.4.1.3181.10.6.2.49.10.1.3	INTEGER	read-write	The remote id identifies the client that requests a PPPoE connection.
STR pppoeConfigCustomRemoteId	1.3.6.1.4.1.3181.10.6.2.49.10.1.4	DisplayString	read-write	This field is only used in a PPPoE request when the remote_id_source is set to USER_DEFINED.
INT pppoeConfigCircuitIdSource	1.3.6.1.4.1.3181.10.6.2.49.10.1.5	INTEGER	read-write	This field defines how the port on which a PPPoE request comes in is identified.
pppoePortConfigTable	1.3.6.1.4.1.3181.10.6.2.49.11		not-accessible	This table permits port specific enable of the PPPoE Intermediate Agent feature.
pppoePortConfigEntry	1.3.6.1.4.1.3181.10.6.2.49.11.1		not-accessible
INT pppoePortConfigPortIndex	1.3.6.1.4.1.3181.10.6.2.49.11.1.1	INTEGER	not-accessible	Automatically generated
INT pppoePortConfigEnablePppoeSnooping	1.3.6.1.4.1.3181.10.6.2.49.11.1.2	INTEGER	read-write	Enables PPPoE intermediate agent function also known as PPPoE Snooping for this port. Also observe the general enable parameter for PPPoE.
arpInspectionPortConfigTable	1.3.6.1.4.1.3181.10.6.2.49.12		not-accessible	This table defines the parameter for Dynamic ARP Inspection per port. These features should generally be used with untrusted ports.
arpInspectionPortConfigEntry	1.3.6.1.4.1.3181.10.6.2.49.12.1		not-accessible
INT arpInspectionPortConfigPortIndex	1.3.6.1.4.1.3181.10.6.2.49.12.1.1	INTEGER	not-accessible	Automatically generated
INT arpInspectionPortConfigEnableArpInspection	1.3.6.1.4.1.3181.10.6.2.49.12.1.2	INTEGER	read-write	Generally enables Dynamic ARP Inspection. The details need to be configured per VLAN in separate table. This feature helps preventing from man-in-the-middle attacks to the network.
I32 arpInspectionPortConfigArpRateLimiting	1.3.6.1.4.1.3181.10.6.2.49.12.1.3	Integer32	read-write	Defines how many ARP request are accepted per second. When the limit is reached, a DOS attack is assumed and the port is shut down. The value 0 disables the rate limit check.
INT arpInspectionPortConfigInspectionDatabase	1.3.6.1.4.1.3181.10.6.2.49.12.1.4	INTEGER	read-write	When set to another value than NONE, the MAC-IP relationship of the incoming ARPs is verified against the selected table. This ensures that only valid MACs enter the network.
STR arpInspectionPortConfigArpAclName	1.3.6.1.4.1.3181.10.6.2.49.12.1.5	DisplayString	read-write	Name of the ACL (access control list) which declares which IP/MAC relations are acceptible. Note: ACLs are configured under Management.ACL. Several ACL may be specified with a comma separated list. Example acl1, otherlist
INT arpInspectionPortConfigAclDefaultLogic	1.3.6.1.4.1.3181.10.6.2.49.12.1.6	INTEGER	read-write	Defines which action is taken when none of the ACL records matches. Default is deny which blocks the ARP.
INT arpInspectionPortConfigSourceMacValidation	1.3.6.1.4.1.3181.10.6.2.49.12.1.7	INTEGER	read-write	Checks the source MAC address in the Ethernet header against the sender MAC address in the ARP body. This check is performed on both ARP requests and responses. Packets with different MAC addresses are dropped.
INT arpInspectionPortConfigDestMacValidation	1.3.6.1.4.1.3181.10.6.2.49.12.1.8	INTEGER	read-write	Checks the destination MAC address in the Ethernet header against the target MAC address in ARP body. This check is performed for ARP responses. Packets with different MAC addresses are dropped.
INT arpInspectionPortConfigIpRangeValidation	1.3.6.1.4.1.3181.10.6.2.49.12.1.9	INTEGER	read-write	Checks ARP for invalid addresses. Invalid addresses include 0.0.0.0, 255.255.255.255, and all IP multicast and loopback addresses. Sender IP addresses are checked in all ARP requests and responses, and target IP addresses are checked only in ARP responses.
snoopingStatisticsTable	1.3.6.1.4.1.3181.10.6.2.49.100		not-accessible	Statistics indicating activity of DHCP snooping.
snoopingStatisticsEntry	1.3.6.1.4.1.3181.10.6.2.49.100.1		not-accessible
INT snoopingStatisticsPortIndex	1.3.6.1.4.1.3181.10.6.2.49.100.1.1	INTEGER	not-accessible	Automatically generated
INT snoopingStatisticsTrustMode	1.3.6.1.4.1.3181.10.6.2.49.100.1.2	INTEGER	read-only	Reflects the determined trust mode.
U32 snoopingStatisticsNumberOfDhcpProcessed	1.3.6.1.4.1.3181.10.6.2.49.100.1.3	Unsigned32	read-only	Counts the number of dhcp messages processed.
U32 snoopingStatisticsNumberOfDhcpDropped	1.3.6.1.4.1.3181.10.6.2.49.100.1.4	Unsigned32	read-only	Counts the number of dhcp messages dropped.
INT snoopingStatisticsLastDropReason	1.3.6.1.4.1.3181.10.6.2.49.100.1.5	INTEGER	read-only
snoopingTableTable	1.3.6.1.4.1.3181.10.6.2.49.101		not-accessible	This table lists the MAC-IP bindings of the untrusted ports (only) as discovered through DHCP snooping.
snoopingTableEntry	1.3.6.1.4.1.3181.10.6.2.49.101.1		not-accessible
INT snoopingTableIndex	1.3.6.1.4.1.3181.10.6.2.49.101.1.1	INTEGER	not-accessible	Automatically generated
MAC snoopingTableMac	1.3.6.1.4.1.3181.10.6.2.49.101.1.2	MacAddress	read-only	MAC address entry
OCT snoopingTableIp	1.3.6.1.4.1.3181.10.6.2.49.101.1.3	OCTET STRING	read-only	IP address associated with this MAC.
I32 snoopingTablePort	1.3.6.1.4.1.3181.10.6.2.49.101.1.4	Integer32	read-only	Port number for MAC address
I32 snoopingTableVlan	1.3.6.1.4.1.3181.10.6.2.49.101.1.5	Integer32	read-only	if non zero this MAC is part of this VLAN.
STR snoopingTableLastUpdated	1.3.6.1.4.1.3181.10.6.2.49.101.1.6	DisplayString	read-only	Time stamp when this record was written
U32 snoopingTableLastUpdatedEpoch	1.3.6.1.4.1.3181.10.6.2.49.101.1.7	Unsigned32	read-only	Time stamp in alternate format
C32 snoopingTableLeaseTime	1.3.6.1.4.1.3181.10.6.2.49.101.1.8	Counter32	read-only	Lease time as reported by DHCP server

RFC description

Generic or vendor-specific MIB for managing DHCP protocol functionality and servers.

Start monitoring MICROSENS Generation 6 (G6) managed Ethernet switch (DHCP snooping/relay, ARP inspection) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download G6-DHCP-MIB

What Is G6-DHCP-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description