All MIBs › HH3C-DHCPSNOOP-MIB › hh3cDhcpSnoopSpoofServerMac
hh3cDhcpSnoopSpoofServerMac
Module: HH3C-DHCPSNOOP-MIB
OID (symbolic): HH3C-DHCPSNOOP-MIB::hh3cDhcpSnoopSpoofServerMac
OID (numeric): 1.3.6.1.4.1.25506.2.36.2.1.1
Node type: OBJECT-TYPE
Type: MacAddress
Access: accessible-for-notify
Description: MAC address of the spoofing server and it is derived from link-layer header of offer packet. If the offer packet is relayed by dhcp relay entity, it may be the MAC address of relay entity.
What is hh3cDhcpSnoopSpoofServerMac?
This notification-only object carries the MAC address of a suspected unauthorized DHCP server, taken from the link-layer header of its DHCP-OFFER packet. It's included in the hh3cDhcpSnoopSpoofServerDetected trap so an admin receiving the alert can immediately see which device sent the rogue offer, though if the offer passed through a DHCP relay this may actually be the relay's MAC rather than the real rogue server's. For example, a trap might report hh3cDhcpSnoopSpoofServerMac as 00:aa:bb:cc:dd:ee, letting the admin trace and disconnect that port or device.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.25506 | hh3c | HH3C-OID-MIB |
| 1.3.6.1.4.1.25506.2 | hh3cCommon | HH3C-OID-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.25506.2.36 | hh3cDhcpSnoop | HH3C-DHCPSNOOP-MIB |
| 1.3.6.1.4.1.25506.2.36.2 | hh3cDhcpSnoopTraps | HH3C-DHCPSNOOP-MIB |
| 1.3.6.1.4.1.25506.2.36.2.1 | hh3cDhcpSnoopTrapsObject | HH3C-DHCPSNOOP-MIB |
| 1.3.6.1.4.1.25506.2.36.2.1.1 | hh3cDhcpSnoopSpoofServerMac | HH3C-DHCPSNOOP-MIB |