HH3C-DHCP-SNOOP2-MIB

All MIBs › HH3C-DHCP-SNOOP2-MIB

Organization: Hangzhou H3C Technologies Co., Ltd.

Last Updated: 2013-04-15

Category: Protocol: DHCP, Vendor: H3C/HH3C

Description: Manages DHCP snooping binding tables and trusted/untrusted port configuration on H3C switches (version 2).

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-DHCP-SNOOP2-MIB?

HH3C-DHCP-SNOOP2-MIB is the second-generation H3C proprietary MIB for managing DHCP Snooping, a security feature that inspects DHCP traffic to build a trusted IP-to-MAC-to-VLAN binding table and drop spoofed DHCP server responses on untrusted ports. It exposes global enable/configuration scalars, packet counters for sent/received/dropped DHCP snooping packets, and a detailed binding table recording each client's snooped IP address, VLAN, and secondary VLAN. For monitoring, the packet counters (hh3cDhcpSnoop2PktDropNum, hh3cDhcpSnoop2PktRcvNum) serve as software-level indicators of DHCP snooping activity and potential attack traffic, while the binding table doubles as an operational inventory of currently leased addresses and their port/VLAN placement, useful for network access troubleshooting rather than physical hardware status. It works alongside standard DHCP relay/client concepts and complements H3C's broader access-security MIB family (e.g., ARP suppression). It is deployed on H3C access-layer switches in enterprise and campus networks where DHCP spoofing protection and IP source guard are required.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-DHCP-SNOOP2-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C access-layer switches

Monitoring Examples

An administrator would poll hh3cDhcpSnoop2BindTable/hh3cDhcpSnoop2BindEntry to see each client's hh3cDhcpSnoop2BindIpAddr, hh3cDhcpSnoop2BindVlanId, and hh3cDhcpSnoop2BindSecVlanId, confirming a device received its expected lease on the correct VLAN. Watching hh3cDhcpSnoop2PktDropNum climb over time indicates the switch is actively rejecting rogue DHCP server responses, a sign of an unauthorized DHCP server on the network. hh3cDhcpSnoop2BindRefreshIntvl and hh3cDhcpSnoop2BindRefresh let an operator confirm the binding database is refreshing on schedule to avoid stale entries, and administrators can download the HH3C-DHCP-SNOOP2-MIB file directly to load it into their MIB browser.

What Can Be Monitored

DHCP snooping enable status
DHCP binding table (IP/VLAN per client)
dropped/received/sent DHCP snooping packet counts
binding database refresh interval

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From IF-MIB

InterfaceIndexOrZero
ifIndex	OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddressIPv4

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using hh3cDhcpSnoop2PktSentNum OID:

Select an H3C access-layer switch (DHCP Snooping v2) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cDhcpSnoop2PktSentNum into the Find box to locate it in the OID tree, then select it and click OK. The total number of the packets send by DHCP snooping. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cDhcpSnoop2	1.3.6.1.4.1.25506.2.124			DHCP SNOOPING MIB 2
hh3cDhcpSnoop2ScalarObjects	1.3.6.1.4.1.25506.2.124.1
hh3cDhcpSnoop2ConfigGroup	1.3.6.1.4.1.25506.2.124.1.1
T/F hh3cDhcpSnoop2Enabled	1.3.6.1.4.1.25506.2.124.1.1.1	TruthValue	read-write	If the value of this object is set to 'true', DHCP snooping is enabled.
OCT hh3cDhcpSnoop2BindDbName	1.3.6.1.4.1.25506.2.124.1.1.2	OCTET STRING	read-write	Name of the file that used to store binding information. If the value of the object is set to a zero-length string, the configuration will be removed.
U32 hh3cDhcpSnoop2BindRefreshIntvl	1.3.6.1.4.1.25506.2.124.1.1.3	Unsigned32	read-write	The refresh interval of the binding information in seconds.
INT hh3cDhcpSnoop2BindRefresh	1.3.6.1.4.1.25506.2.124.1.1.4	INTEGER	read-write	If the value of this object is set to 'on', the binding information will be refreshed immediately.
hh3cDhcpSnoop2StatisticsGroup	1.3.6.1.4.1.25506.2.124.1.2
C64 hh3cDhcpSnoop2PktSentNumEx	1.3.6.1.4.1.25506.2.124.1.2.1	Counter64	read-only	The total number of the packets send by DHCP snooping.
C64 hh3cDhcpSnoop2PktRcvNum	1.3.6.1.4.1.25506.2.124.1.2.2	Counter64	read-only	The total number of the packets received by DHCP snooping.
C64 hh3cDhcpSnoop2PktDropNum	1.3.6.1.4.1.25506.2.124.1.2.3	Counter64	read-only	The total number of the packets dropped by DHCP snooping.
hh3cDhcpSnoop2Tables	1.3.6.1.4.1.25506.2.124.2
hh3cDhcpSnoop2BindTable	1.3.6.1.4.1.25506.2.124.2.1		not-accessible	The table containing information of DHCP clients listened by DHCP snooping.
hh3cDhcpSnoop2BindEntry	1.3.6.1.4.1.25506.2.124.2.1.1		not-accessible	An entry containing information of DHCP clients.
ADR hh3cDhcpSnoop2BindIpAddr	1.3.6.1.4.1.25506.2.124.2.1.1.1	InetAddressIPv4	not-accessible	DHCP client's IP addresses collected by DHCP snooping.
U32 hh3cDhcpSnoop2BindVlanId	1.3.6.1.4.1.25506.2.124.2.1.1.2	Unsigned32	not-accessible	DHCP client's VLAN ID collected by DHCP snooping.
U32 hh3cDhcpSnoop2BindSecVlanId	1.3.6.1.4.1.25506.2.124.2.1.1.3	Unsigned32	not-accessible	DHCP client's second VLAN ID collected by DHCP snooping. 65535 means no second VLAN.
MAC hh3cDhcpSnoop2BindMacAddr	1.3.6.1.4.1.25506.2.124.2.1.1.4	MacAddress	read-only	DHCP client's MAC address collected by DHCP snooping.
U32 hh3cDhcpSnoop2BindLease	1.3.6.1.4.1.25506.2.124.2.1.1.5	Unsigned32	read-only	Left lease time in seconds collected by DHCP snooping. The value of this object cannot be 0.
NUM hh3cDhcpSnoop2BindPortIndex	1.3.6.1.4.1.25506.2.124.2.1.1.6	InterfaceIndexOrZero	read-only	DHCP client's port index collected by DHCP snooping. The value of zero means unknown port.
ROW hh3cDhcpSnoop2BindRowStatus	1.3.6.1.4.1.25506.2.124.2.1.1.7	RowStatus	read-create	RowStatus. Only destroy action is allow to use.
hh3cDhcpSnoop2IfConfigTable	1.3.6.1.4.1.25506.2.124.2.2		not-accessible	A table is used to configure DHCP snooping functions on ports.
hh3cDhcpSnoop2IfConfigEntry	1.3.6.1.4.1.25506.2.124.2.2.1		not-accessible	An entry containing DHCP snooping configurations of ports.
INT hh3cDhcpSnoop2IfTrustStatus	1.3.6.1.4.1.25506.2.124.2.2.1.1	INTEGER	read-write	Trusted status of the port.
T/F hh3cDhcpSnoop2IfCheckMac	1.3.6.1.4.1.25506.2.124.2.2.1.2	TruthValue	read-write	If the value is 'true', MAC address of DHCP packets received on the port will be checked.
T/F hh3cDhcpSnoop2IfCheckRequest	1.3.6.1.4.1.25506.2.124.2.2.1.3	TruthValue	read-write	If the value is 'true', DHCP request packets will be checked.
U32 hh3cDhcpSnoop2IfRateLimit	1.3.6.1.4.1.25506.2.124.2.2.1.4	Unsigned32	read-write	The rate limit in Kbps. If the value is 0, there is no rate limit on the port.
T/F hh3cDhcpSnoop2IfRecordBind	1.3.6.1.4.1.25506.2.124.2.2.1.5	TruthValue	read-write	If the value is 'true', information of DHCP packets received on the port will be recorded.
U32 hh3cDhcpSnoop2IfMaxLearnNum	1.3.6.1.4.1.25506.2.124.2.2.1.6	Unsigned32	read-write	The maximum number of binding entries that could be learned on the port. If the value is 0, it means that there is no threshold on the port.
T/F hh3cDhcpSnoop2IfOpt82Enable	1.3.6.1.4.1.25506.2.124.2.2.1.7	TruthValue	read-write	If DHCP snooping supports option 82 functions, the value is 'true'. If DHCP snooping does NOT support option 82 functions, the value is 'false'.
INT hh3cDhcpSnoop2IfOpt82Strategy	1.3.6.1.4.1.25506.2.124.2.2.1.8	INTEGER	read-write	The strategy of DHCP snooping handling option 82. 'drop' indicates DHCP snooping discarding the request packet including option 82. 'keep' indicates DHCP snooping accepting the request packet without any change of the option 82. 'replace' indicates DHCP snooping accepting the request packet on condition that it generates a new option 82 to replace the original one.
INT hh3cDhcpSnoop2IfOpt82CIDMode	1.3.6.1.4.1.25506.2.124.2.2.1.9	INTEGER	read-write	The mode of filling in the circuit ID suboption of DHCP option 82. 'normal' is the standard mode. 'verbose' is the detailed mode. 'userDefine' is the user-defined mode. If the value of this object is set to 'userDefine', hh3cDhcpSnoop2IfOpt82CIDStr must also be set.
INT hh3cDhcpSnoop2IfOpt82CIDNodeType	1.3.6.1.4.1.25506.2.124.2.2.1.10	INTEGER	read-write	Type of access node identifier that is used to fill in the circuit ID suboption of option 82 when the value of hh3cDhcpSnoop2IfOption82CIDMode is set to 'verbose'. The SET operation of this object must be with the SET operation of hh3cDhcpSnoop2IfOpt82CIDMode. 'invalid' indicates that the node identifier is NOT used to fill in the circuit ID suboption of option 82. If the value of hh3cDhcpSnoop2IfOpt82CIDMode is NOT 'verbose', the value of this object is set to 'invalid' automatically. Otherwise the value of this object cannot be set to 'invalid'. 'mac' indicates that the node identifier is filled in with the bridge MAC of DHCP snooping device. If the value of hh3cDhcpSnoop2IfOpt82CIDMode is set to 'verbose', the default value of this object is 'mac'. 'sysname' indicates that the node identifier is filled in with the sysname of the DHCP snooping. 'userDefine' indicates the node identifier is filled in with the string defined by the object of hh3cDhcpSnoop2IfOpt82CIDNodeStr. If the value is set to 'userDefine', the value of hh3cDhcpSnoop2IfOpt82CIDNodeStr must also be set to a non-zero length string.
OCT hh3cDhcpSnoop2IfOpt82CIDNodeStr	1.3.6.1.4.1.25506.2.124.2.2.1.11	OCTET STRING	read-write	The string defined by user to fill in the node identifier in the verbose mode. If the value of hh3cDhcpSnoop2IfOpt82CIDMode is NOT 'verbose', or the value of hh3cDhcpSnoop2IfOpt82CIDNodeType is NOT 'userDefine', it is set to a zero-length string automatically. Otherwise it must be set to a non-zero length string. The SET operation of this object must be with the SET operation of hh3cDhcpSnoop2IfOpt82CIDMode and hh3cDhcpSnoop2IfOpt82CIDNodeType.
OCT hh3cDhcpSnoop2IfOpt82CIDStr	1.3.6.1.4.1.25506.2.124.2.2.1.12	OCTET STRING	read-write	The string defined by user to fill in the circuit ID suboption of option 82 in the user-define mode. If the value of hh3cDhcpSnoop2IfOpt82CIDMode is NOT 'userDefine', it is set to a zero-length string automatically. Otherwise it must be set to a non-zero length string. The SET operation of this object must be with the SET operation of hh3cDhcpSnoop2IfOpt82CIDMode.
INT hh3cDhcpSnoop2IfOpt82CIDFormat	1.3.6.1.4.1.25506.2.124.2.2.1.13	INTEGER	read-write	The format of the circuit ID suboption of DHCP option 82. 'hex' is the hex format. 'ascii' is the ascii format. 'undefine' is the undefine format. If the value of hh3cDhcpSnoop2IfOpt82CIDMode is 'normal', this object is set with 'hex' automatically and cannot be set with 'undefine'. If the value of hh3cDhcpSnoop2IfOpt82CIDMode is 'verbose', the default value of this object is 'undefine'. If the value of hh3cDhcpSnoop2IfOpt82CIDMode is 'userDefine', this object is set with 'ascii' automatically and cannot be set with other value. The SET operation of this object must be with the SET operation of hh3cDhcpSnoop2IfOpt82CIDMode.
INT hh3cDhcpSnoop2IfOpt82RIDMode	1.3.6.1.4.1.25506.2.124.2.2.1.14	INTEGER	read-write	The mode of filling in the remote ID suboption of DHCP option 82. 'normal' is the standard mode. 'userDefine' is the user-defined mode. 'sysname' is the sysname mode. If the value of this object is set to 'userDefine', hh3cDhcpSnoop2IfOpt82RIDStr must also be set.
OCT hh3cDhcpSnoop2IfOpt82RIDStr	1.3.6.1.4.1.25506.2.124.2.2.1.15	OCTET STRING	read-write	The string defined by user to fill in the remote ID in the user-defined mode. If the value of hh3cDhcpSnoop2IfOpt82RIDMode is NOT 'userDefine', this object is set with a zero-length string automatically. Otherwise it must be set with a non-zero length string. The SET operation of this object must be with the SET operation of hh3cDhcpSnoop2IfOpt82RIDMode.
INT hh3cDhcpSnoop2IfOpt82RIDFormat	1.3.6.1.4.1.25506.2.124.2.2.1.16	INTEGER	read-write	The format of DHCP option 82 remote ID in 'normal' mode. 'hex' is the hex format. 'ascii' is the ascii format. If the value of hh3cDhcpSnoop2IfOpt82RIDMode is 'sysname' or 'userDefine', this object is set with 'ascii' automatically and cannot be set with other value. If the value of hh3cDhcpSnoop2IfOpt82RIDMode is 'normal', the default value of this object is 'hex'. The SET operation of this object must be with the SET operation of hh3cDhcpSnoop2IfOpt82RIDMode.
hh3cDhcpSnoop2IfVlanCIDTable	1.3.6.1.4.1.25506.2.124.2.3		not-accessible	A table containing the information of the circuit ID suboption of DHCP option 82 in VLAN.
hh3cDhcpSnoop2IfVlanCIDEntry	1.3.6.1.4.1.25506.2.124.2.3.1		not-accessible	An entry containing the information of the circuit ID suboption of DHCP option 82 in VLAN.
U32 hh3cDhcpSnoop2IfVlanCIDVlanIndex	1.3.6.1.4.1.25506.2.124.2.3.1.1	Unsigned32	not-accessible	VLAN ID.
OCT hh3cDhcpSnoop2IfVlanCIDStr	1.3.6.1.4.1.25506.2.124.2.3.1.2	OCTET STRING	read-create	The string defined by user to fill in the circuit ID suboption of option 82.
ROW hh3cDhcpSnoop2IfVlanCIDRowStatus	1.3.6.1.4.1.25506.2.124.2.3.1.3	RowStatus	read-create	Operation status of this table entry. Three actions are used: active, createAndGo, destroy.
hh3cDhcpSnoop2IfVlanRIDTable	1.3.6.1.4.1.25506.2.124.2.4		not-accessible	A table containing the information of the remote ID suboption of DHCP option 82 in VLAN.
hh3cDhcpSnoop2IfVlanRIDEntry	1.3.6.1.4.1.25506.2.124.2.4.1		not-accessible	An entry containing the information of the remote ID suboption of DHCP option 82 in VLAN.
U32 hh3cDhcpSnoop2IfVlanRIDVlanIndex	1.3.6.1.4.1.25506.2.124.2.4.1.1	Unsigned32	not-accessible	VLAN ID.
INT hh3cDhcpSnoop2IfVlanRIDMode	1.3.6.1.4.1.25506.2.124.2.4.1.2	INTEGER	read-create	The mode of filling in the remote ID suboption of DHCP option 82 in VLAN. 'sysname' indicates using the device sysname to fill in the suboption. 'userDefine' indicates using the string defined by hh3cDhcpSnoop2IfVlanRIDStr to fill in the suboption. If the value of this object is set to 'userDefine', hh3cDhcpSnoop2IfVlanRIDStr must also be set.
OCT hh3cDhcpSnoop2IfVlanRIDStr	1.3.6.1.4.1.25506.2.124.2.4.1.3	OCTET STRING	read-create	The string used to fill in the remote ID suboption. If the value of hh3cDhcpSnoop2IfVlanRIDMode is NOT 'userDefine', this object is set with a zero-length string automatically. Otherwise it must be set with a non-zero length string. The SET operation of this object must be with the SET operation of hh3cDhcpSnoop2IfVlanRIDMode.
ROW hh3cDhcpSnoop2IfVlanRIDRowStatus	1.3.6.1.4.1.25506.2.124.2.4.1.4	RowStatus	read-create	Operation status of this table entry. Three actions are used: active, createAndGo, destroy.

RFC description

Monitors DHCP snooping to track DHCP bindings and detect unauthorized DHCP servers on networks.

Start monitoring H3C access-layer switch (DHCP Snooping v2) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-DHCP-SNOOP2-MIB