HP-ICF-DHCP-SNOOP-MIB

All MIBs › HP-ICF-DHCP-SNOOP-MIB

Organization: HP Networking

Last Updated: 2016-06-01

Category: Protocol: DHCP, Vendor: HP/HPE

Description: HP ICF SNMP MIB for DHCP snooping configuration and statistics, validating DHCP traffic on HP ProCurve switch ports.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HP-ICF-DHCP-SNOOP-MIB?

HP-ICF-DHCP-SNOOP-MIB is an HP-proprietary (ICF, Industry-Consistent Framework) SNMP module for managing DHCP Snooping, a security feature on HP ProCurve switches that validates DHCP traffic on untrusted ports to prevent rogue DHCP servers and IP spoofing. It exposes configuration objects covering whether errant DHCP replies are dropped/logged, database validation settings including an SFTP server used to save the snooping binding database, and objects describing the source IP type/address of detected errant DHCP traffic. As a monitoring MIB it is squarely about a security/software feature's operational status: hpicfDhcpSnoopErrantSrcIP and hpicfDhcpSnoopErrantSrcIPType let an operator identify the source of a rogue or spoofed DHCP reply caught on the network, while hpicfDhcpSnoopErrantReplyEnable shows whether that detection/blocking behavior is active. It is a vendor-specific extension with no direct dependency on a standard IETF DHCP-snooping MIB (none exists), though it parallels similar vendor features elsewhere. It is deployed on HP ProCurve access-layer switches in enterprise networks where DHCP snooping is enabled on untrusted client-facing ports to guard against DHCP-based attacks, and administrators can download the HP-ICF-DHCP-SNOOP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HP-ICF-DHCP-SNOOP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP ProCurve switches

Monitoring Examples

An operator would check hpicfDhcpSnoopErrantReplyEnable to confirm errant-reply detection is turned on, then monitor hpicfDhcpSnoopErrantSrcIPType and hpicfDhcpSnoopErrantSrcIP to identify the address of a rogue DHCP server that sent an unauthorized reply on an untrusted port. hpicfDhcpSnoopDatabaseValidateSFTPServer would be checked to ensure the snooping binding database is being backed up to the correct SFTP server, so that bindings survive a switch reboot.

What Can Be Monitored

errant DHCP reply detection enable state
errant DHCP reply source IP address/type
DHCP snooping database SFTP backup server

Imported Objects

From HP-ICF-OID

hpSwitch

OBJECT-IDENTITY

From IF-MIB

InterfaceIndex
InterfaceIndexOrZero
ifIndex	OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From Q-BRIDGE-MIB

VlanIndex

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
MacAddress
RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using hpicfDhcpSnoopCSForwards OID:

Select an HP ProCurve switch (DHCP Snooping) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpicfDhcpSnoopCSForwards into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of snooped DHCP packets that were successfully forwarded from untrusted client ports towards trusted DHCP server ports. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
T/F hpicfDhcpSnoopAllowOverwriteBinding	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.15	TruthValue	read-write	When set to true, allows DHCP Snooping binding to be overwritten for the same IP address. When a DHCP server offers a host an IP address and if this address is already bound to an existing host in the binding table, the existing binding is overwritten for the new host if the new host is successfully able to acquire the same IP address. When false, the DHCP offer packet will be dropped.
hpicfDhcpSnoopAllowOverwriteBindingGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.14			The MIB object represents the DHCP Snooping allow-overwrite-binding information.
hpicfDhcpSnoopBaseGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.1			A collection of objects for configuring and monitoring the base DHCP snooping functionality.
IP hpicfDhcpSnoopBindingsAddress	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.4	InetAddress	not-accessible	An IP address that has been leased to this client. The type of address contained in this object is indicated by hpicfDhcpSnoopBindingsAddrType.
IPt hpicfDhcpSnoopBindingsAddrType	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.3	InetAddressType	not-accessible	The type of IP address contained in hpicfDhcpSnoopBindingsAddress. The only values expected are ipv4 or ipv6.
hpicfDhcpSnoopBindingsEntry	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1		not-accessible	A row in the table, containing a single DHCP binding.
hpicfDhcpSnoopBindingsGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.5			A collection of objects for accessing the DHCP snooping lease database.
NUM hpicfDhcpSnoopBindingsInterface	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.5	InterfaceIndex	read-only	The interface that this DHCP client is connected to.
U32 hpicfDhcpSnoopBindingsLeaseTime	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.6	Unsigned32	read-only	The number of seconds remaining until this DHCP lease times out. A value of 0xffffffff indicates an infinite lease.
MAC hpicfDhcpSnoopBindingsMacAddress	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.2	MacAddress	not-accessible	The MAC address of the DHCP client that this binding applies to.
U32 hpicfDhcpSnoopBindingsSecVlan	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.8	Unsigned32	read-only	The secondary VLAN on which this client binding was learned. If binding is learned on primary or normal VLAN, this object will be zero.
hpicfDhcpSnoopBindingsTable	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2		not-accessible	A table of DHCP bindings that have been learned by this device.
INT hpicfDhcpSnoopBindingsType	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.7	INTEGER	read-only	This object indicates how this binding was learned. A value of 'dhcp' indicates that this binding was learned by snooping a DHCP lease. A value of 'static' indicates that this binding was statically configured via the hpicfIpStaticBindingsTable.
VLA hpicfDhcpSnoopBindingsVlan	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.2.1.1	VlanIndex	not-accessible	The VLAN ID on which this client binding was learned.
T/F hpicfDhcpSnoopClearBindings	1.3.6.1.4.1.11.2.14.11.5.1.34.1.5.1	TruthValue	read-write	When the value of this object is set to TRUE, all the dynamic DHCP Snooping binding entries will be cleared. A write operation of FALSE leads to no operation and a get request for this object will always return FALSE.
IP hpicfDhcpSnoopClearBindingsIpAddr	1.3.6.1.4.1.11.2.14.11.5.1.34.1.5.3	InetAddress	read-write	Clears the dynamic DHCP Snooping binding entry that matches with the given IP address. This object will always return 0.
IPt hpicfDhcpSnoopClearBindingsIpType	1.3.6.1.4.1.11.2.14.11.5.1.34.1.5.2	InetAddressType	read-write	This object indicates the type of the IP address of the DHCP Snooping binding entry.
hpicfDhcpSnoopClearBindingsOptions	1.3.6.1.4.1.11.2.14.11.5.1.34.1.5
hpicfDhcpSnoopClearBindingsOptionsGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.15			A collection of objects for clearing all the dynamic DHCP Snooping binding entries or selectively clearing entries based on the IP address, port or VLAN.
NUM hpicfDhcpSnoopClearBindingsPort	1.3.6.1.4.1.11.2.14.11.5.1.34.1.5.4	InterfaceIndexOrZero	read-write	Clears all the dynamic DHCP Snooping binding entries that are associated with the given port. This object will always return 0.
NUM hpicfDhcpSnoopClearBindingsVlan	1.3.6.1.4.1.11.2.14.11.5.1.34.1.5.5	InterfaceIndexOrZero	read-write	Clears all the dynamic DHCP Snooping binding entries that match with the given VLAN. This object will always return 0.
T/F hpicfDhcpSnoopClearStats	1.3.6.1.4.1.11.2.14.11.5.1.34.1.4.1	TruthValue	read-write	When the value of this object is set to TRUE, all the dhcp-snoop statistics will be cleared. When the value of this object is set to FALSE, the operation is ignored. A get request for this object always returns FALSE.
hpicfDhcpSnoopClearStatsCompliance	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.5			The compliance statement for clearing the dhcp-snooping Statistics implementation.
hpicfDhcpSnoopClearStatsOptions	1.3.6.1.4.1.11.2.14.11.5.1.34.1.4
hpicfDhcpSnoopClearStatsOptionsGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.10			The MIB object represents the clear dhcp-snoop statistics information.
hpicfDhcpSnoopCompliance	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.1			The compliance statement for HP Routing switches that support DHCP Snooping.
hpicfDhcpSnoopCompliance10	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.10			The compliance statement for HP switches that support DHCP Snooping.
hpicfDhcpSnoopCompliance2	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.2			The compliance statement for HP Routing switches that support DHCP Snooping.
hpicfDhcpSnoopCompliance3	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.3			The compliance statement for HP Routing switches that support DHCP Snooping.
hpicfDhcpSnoopCompliance4	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.4			The compliance statement for HP switches that support DHCP Snooping.
hpicfDhcpSnoopCompliance6	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.6			The compliance statement for HP Routing switches that support DHCP Snooping.
hpicfDhcpSnoopCompliance7	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.7			The compliance statement for HP switches that support DHCP Snooping.
hpicfDhcpSnoopCompliance8	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.8			The compliance statement for HP Routing switches that support DHCP Snooping.
hpicfDhcpSnoopCompliance9	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2.9			The compliance statement for HP switches that support DHCP Snooping.
hpicfDhcpSnoopCompliances	1.3.6.1.4.1.11.2.14.11.5.1.34.2.2
hpicfDhcpSnoopConformance	1.3.6.1.4.1.11.2.14.11.5.1.34.2
C32 hpicfDhcpSnoopCSBadReleases	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.4	Counter32	read-only	Number of snooped DHCP client packets that were discarded because they were DHCPRELEASE or DHCPDECLINE packets received on a port different from the port that the address was leased to.
C32 hpicfDhcpSnoopCSForwardsEx	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.1	Counter32	read-only	Number of snooped DHCP packets that were successfully forwarded from untrusted client ports towards trusted DHCP server ports.
C32 hpicfDhcpSnoopCSMACMismatches	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.2	Counter32	read-only	Number of snooped DHCP client packets that were discarded because the MAC source address of the packet did not match the chaddr.
C32 hpicfDhcpSnoopCSUntrustedDestPorts	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.5	Counter32	read-only	Number of snooped DHCP client unicast packets that were dropped because they were destined to untrusted ports.
C32 hpicfDhcpSnoopCSUntrustedOpt82s	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.3	Counter32	read-only	Number of snooped DHCP client packets that were discarded because they were received on an untrusted port and contained a relay information option.
STR hpicfDhcpSnoopDatabaseFile	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.4	SnmpAdminString	read-write	A location to store the lease database, or to retrieve it after a reboot. The location must be given in the form of a Uniform Resource Locator (URL) as defined in RFC 2396. The allowed character sets and the encoding rules defined in RFC 2396 section 2 apply.
U32 hpicfDhcpSnoopDatabaseFTPort	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.11	Unsigned32	read-write	A location to store the port value of the FT Server. The default port value will be 69 for TFTP and 22 for SFTP.
STR hpicfDhcpSnoopDatabaseSFTPPassword	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.13	SnmpAdminString	read-write	A location to store the Password of the SFTP Server
STR hpicfDhcpSnoopDatabaseSFTPUsername	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.12	SnmpAdminString	read-write	A location to store the Username of the SFTP Server. The default value of username is root.
INT hpicfDhcpSnoopDatabaseValidateSFTPServer	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.14	INTEGER	read-write	This object sets the validate-sftp-server flag. When enabled, the user must login to the SFTP server to verify and accept the public key of the server. When disabled, the public key is accepted automatically.
U32 hpicfDhcpSnoopDatabaseWriteDelay	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.5	Unsigned32	read-write	The number of seconds to delay writing the DHCP lease database file after a database change. This potentially allows grouping multiple database changes into a single write. The default is 300 seconds.
U32 hpicfDhcpSnoopDatabaseWriteTimeout	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.6	Unsigned32	read-write	The number of seconds to wait for the database file transfer to finish before giving up and declaring a failure. A value of 0 means continue retrying indefinitely. The default is 300 seconds.
hpicfDhcpSnoopDbaseFileGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.4			A collection of objects for configuring and monitoring DHCP snooping database file management.
hpicfDhcpSnoopDbaseFileGroup1	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.13			A collection of objects for configuring and monitoring DHCP snooping database file management.
DAT hpicfDhcpSnoopDBFileLastWriteTime	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.14	DateAndTime	read-only	The time that we last successfully wrote our lease database to the server. This object will contain a value of all zeroes if we have not written our lease database since the last reboot.
INT hpicfDhcpSnoopDBFileReadStatus	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.12	INTEGER	read-only	This object indicates whether we were able to successfully load the DHCP lease database from the configured location after the last reboot.
C32 hpicfDhcpSnoopDBFileWriteAttempts	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.10	Counter32	read-only	Number of attempts that have been made to write the DHCP lease database to a configured file location.
C32 hpicfDhcpSnoopDBFileWriteFailures	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.11	Counter32	read-only	Number of times that an attempt to write the DHCP lease database to a configured file location has failed.
INT hpicfDhcpSnoopDBFileWriteStatus	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.13	INTEGER	read-only	This object indicates whether the DHCP lease database is currently synchronized with the the configured file server. 'notConfigured' means that we have not been configured with a server location. 'delaying' means that we are waiting for the write delay to expire before writing the current database. 'inProgress' means that a lease database transfer is active. 'succeeded' means that all leases in our database have been written to the server. 'failed' means that the last attempt to write our lease database failed.
T/F hpicfDhcpSnoopEnable	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.1	TruthValue	read-write	The administrative status of the DHCP Snooping feature.
NTF hpicfDhcpSnoopErrantReply	1.3.6.1.4.1.11.2.14.11.5.1.34.0.1			An hpicfDhcpSnoopErrantReply notification signifies that the DHCP snooping entity has detected and dropped an errant DHCP response packet.
INT hpicfDhcpSnoopErrantReplyEnable	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.10	INTEGER	read-write	The operational status of hpicfDhcpSnoopErrantReply notifications. The default value is 1 (Enabled). A value of 2 represents Disabled. Writing this object requires authentication, such as provided by SNMPv3.
IP hpicfDhcpSnoopErrantSrcIP	1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.4	InetAddress	accessible-for-notify	The IP address received in the errant DHCP/BootP reply packet.
IPt hpicfDhcpSnoopErrantSrcIPType	1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.3	InetAddressType	accessible-for-notify	InetAddressType of the address reported in hpicfDhcpSnoopErrantSrcIP.
MAC hpicfDhcpSnoopErrantSrcMAC	1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.2	MacAddress	accessible-for-notify	The MAC address received in the errant DHCP/BootP reply packet.
hpicfDhcpSnoopGlobalCfg	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1
hpicfDhcpSnoopGlobalStats	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1
hpicfDhcpSnoopMaxbindingGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.11			A collection of objects for configuring and monitoring DHCP snooping maxbinding.
C32 hpicfDhcpSnoopMaxbindPktsDropped	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.18	Counter32	read-only	Total number of snooped DHCP packets that were dropped due to max-binding configuration.
hpicfDhcpSnoopNotificationGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.8			Description.
hpicfDhcpSnoopNotifications	1.3.6.1.4.1.11.2.14.11.5.1.34.0
C32 hpicfDhcpSnoopNotifyCount	1.3.6.1.4.1.11.2.14.11.5.1.34.1.3.1	Counter32	accessible-for-notify	A count of the DHCP snooping notification sent from the DHCP snooping entity to the SNMP entity. This count may be greater than the count of notifications actually transmitted by the SNMP entity due to rate limiting or configuration.
hpicfDhcpSnoopNotifyObjects	1.3.6.1.4.1.11.2.14.11.5.1.34.1.3
hpicfDhcpSnoopNotifyObjsGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.7			Group of objects used in DHCP Snooping notifications.
hpicfDhcpSnoopOpt82Group	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.2			A collection of objects for configuring and monitoring DHCP snooping relay information option behavior.
T/F hpicfDhcpSnoopOpt82Insert	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.7	TruthValue	read-write	When this object is set to true, DHCP snooping will add a DHCP relay information option to DHCP client packets that it forwards on trusted ports, and will examine and strip DHCP relay information options that were inserted by this switch on DHCP server packets that it forwards to untrusted ports. Note that when DHCP relay and DHCP snooping are both enabled, and this object is set to true, relay information option processing will be handled by DHCP snooping, and any DHCP relay settings for relay information option processing will be ignored. This object defaults to true.
INT hpicfDhcpSnoopOpt82Policy	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.8	INTEGER	read-write	This object configures the behavior of DHCP snooping when forwarding a DHCP packet from an untrusted port that already has a DHCP relay information option present. The policies supported are: keep - forward the packet without updating the existing option replace - replace the existing option with one generated by this switch drop - drop the packet This policy is only applied if DHCP snooping is enabled and hpicfDhcpSnoopOpt82Insert is true. In all cases where this policy is applied, if there is no relay information option present in the received packet, DHCP snooping will add one. The default policy is drop.
INT hpicfDhcpSnoopOpt82RemoteId	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.9	INTEGER	read-write	This object configures the value that will be used for the remote ID sub-option of the relay information that will be inserted by DHCP snooping. The possible values are: mac - switch MAC address, subnetIP - switch IP address on the VLAN on which the DHCP packet was received, mgmtIP - switch IP address on the management VLAN. The value of this object is ignored unless DHCP snooping is enabled and hpicfDhcpSnoopOpt82Insert is true. The default value is mac.
C32 hpicfDhcpSnoopPktsDropped	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.17	Counter32	read-only	Total number of snooped DHCP packets that were dropped.
hpicfDhcpSnoopPktsGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.9			A collection of objects for monitoring the base DHCP snooping functionality.
hpicfDhcpSnoopPktsGroup1	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.12			A collection of objects for monitoring the base DHCP snooping functionality.
C32 hpicfDhcpSnoopPktsReceived	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.16	Counter32	read-only	Total number of snooped DHCP packets that were received.
C32 hpicfDhcpSnoopPktsSent	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.15	Counter32	read-only	Total number of snooped DHCP packets that were successfully sent.
U32 hpicfDhcpSnoopPortDynamicBinding	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2.1.4	Unsigned32	read-only	This object indicates the Dynamic bindings present on a port.
hpicfDhcpSnoopPortEntry	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2.1		not-accessible	DHCP snooping configuration information for a single port.
U32 hpicfDhcpSnoopPortMaxbind	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2.1.2	Unsigned32	read-write	This object indicates the maximum number of bindings allowed on a port.
U32 hpicfDhcpSnoopPortStaticBinding	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2.1.3	Unsigned32	read-only	This object indicates the static bindings present on a port.
hpicfDhcpSnoopPortTable	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2		not-accessible	Per-interface configuration for DHCP Snooping.
T/F hpicfDhcpSnoopPortTrust	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.2.1.1	TruthValue	read-write	This object indicates whether this port is trusted for DHCP snooping.
C32 hpicfDhcpSnoopSCForwards	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.6	Counter32	read-only	Number of snooped DHCP packets that were successfully forwarded from trusted DHCP server ports to untrusted client ports.
C32 hpicfDhcpSnoopSCOpt82Failures	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.9	Counter32	read-only	Number of snooped DHCP server packets that were dropped because they did not contain a valid relay information option.
C32 hpicfDhcpSnoopSCUntrustedPorts	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.7	Counter32	read-only	Number of snooped DHCP server packets that were dropped because they were received from untrusted ports.
C32 hpicfDhcpSnoopSCUntrustedServers	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2.1.8	Counter32	read-only	Number of snooped DHCP server packets that were dropped because they were received from unauthorized DHCP server addresses.
IP hpicfDhcpSnoopServerAddress	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1.2	InetAddress	not-accessible	The address of a known valid DHCP server. The type of address contained in this object is indicated by hpicfDhcpSnoopServerAddrType. For DHCP snooping to allow a server to client packet to be forwarded, it must be received on a trusted port from a server address in this table. If this table is empty, all addresses are trusted. Note that this feature compares the source address of the received DHCP server packet against the addresses in this table. This means that this table needs to contain trusted server addresses as well as trusted DHCP relays that a server packet may be relayed through.
IPt hpicfDhcpSnoopServerAddrType	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1.1	InetAddressType	not-accessible	The type of address in hpicfDhcpSnoopServerAddress.
hpicfDhcpSnoopServerEntry	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1		not-accessible	A row in the table, containing the address of a single authorized DHCP server.
hpicfDhcpSnoopServersGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.3			A collection of objects for configuring and monitoring DHCP snooping trusted servers.
ROW hpicfDhcpSnoopServerStatus	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3.1.3	RowStatus	read-create	The status of this DHCP server address entry. Only 'active' entries are used when validating DHCP server packets.
hpicfDhcpSnoopServerTable	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.3		not-accessible	Table of authorized DHCP server addresses.
hpicfDhcpSnoopStaticBindingsGroup	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1.6			A collection of objects for managing static configuration of IP source address bindings.
T/F hpicfDhcpSnoopVerifyMac	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.3	TruthValue	read-write	When this variable is set to 'true', DHCP Snooping will verify that the MAC address in the chaddr field of the DHCP header matches the source MAC address in all DHCP packets received on untrusted ports. When this variable is set to 'false', DHCP Snooping will omit this check. The value of this variable is ignored when DHCP Snooping is disabled.
OCT hpicfDhcpSnoopVlanEnable	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.1.2	OCTET STRING	read-write	The administrative status for DHCP Snooping on each VLAN. There will be one bit in this string for each possible VLAN ID. Each octet within this value specifies a set of eight VLANs, with the first octet specifying VLAN IDs 1 through 8, the second octet specifying VLAN IDs 9 through 16, etc. Within each octet, the most significant bit represents the lowest numbered VLAN ID, and the least significant bit represents the highest numbered VLAN ID. Thus, each possible VLAN ID of the bridge is represented by a single bit within the value of this object. If a bit at position 'n' has a value of '1', then DHCP Snooping is enabled on VLAN 'n'. If this bit has a value of '0',DHCP Snooping is not enabled on the VLAN 'n',
hpicfIpDhcpSnoop	1.3.6.1.4.1.11.2.14.11.5.1.34			This MIB module contains HP proprietary objects for managing DHCP Snooping.
hpicfIpDhcpSnoopConfig	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1
hpicfIpDhcpSnoopGroups	1.3.6.1.4.1.11.2.14.11.5.1.34.2.1
hpicfIpDhcpSnoopObjects	1.3.6.1.4.1.11.2.14.11.5.1.34.1
hpicfIpDhcpSnoopStatus	1.3.6.1.4.1.11.2.14.11.5.1.34.1.2
IP hpicfIpStaticBindingsAddress	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.3	InetAddress	not-accessible	The static IP address of this binding. The type of address contained in this object is indicated by hpicfIpStaticBindingsAddrType.
IPt hpicfIpStaticBindingsAddrType	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.2	InetAddressType	not-accessible	The type of IP address contained in hpicfIpStaticBindingsAddress. The only values expected are ipv4 or ipv6.
hpicfIpStaticBindingsEntry	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1		not-accessible	A row in the table, containing a single static IP address binding.
NUM hpicfIpStaticBindingsInterface	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.5	InterfaceIndex	read-create	The interface that this static IP address binding is valid on in this VLAN.
MAC hpicfIpStaticBindingsMacAddress	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.4	MacAddress	read-create	The MAC address associated with this static binding on this VLAN.
ROW hpicfIpStaticBindingsStatus	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.6	RowStatus	read-create	The status of this static IP address binding. This object cannot be set to 'active' until valid value has been configured for hpicfIpStaticBindingsMacAddress and hpicfIpStaticBindingsInterface.
hpicfIpStaticBindingsTable	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4		not-accessible	A table of configured static IP address bindings for this device. Active rows in this table will also be reported in the hpicfDhcpSnoopBindingsTable as entries with an hpicfDhcpSnoopBindingsLeaseTime of 0xffffffff and an hpicfDhcpSnoopBindingsType of 'static'.
VLA hpicfIpStaticBindingsVlan	1.3.6.1.4.1.11.2.14.11.5.1.34.1.1.4.1.1	VlanIndex	not-accessible	The VLAN ID on which this static address binding is valid.

RFC description

HP proprietary MIB for DHCP Snooping, managing DHCP bindings and client IP tracking.

Start monitoring HP ProCurve switch (DHCP Snooping) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HP-ICF-DHCP-SNOOP-MIB