HPN-ICF-DHCP-SNOOP2-MIB

All MIBs › HPN-ICF-DHCP-SNOOP2-MIB

Last Updated: 2013-04-15

Category: Protocol: DHCP, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: HP Networking ICF SNMP MIB version 2 for DHCP snooping trust port configuration and binding table on HP networking devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-DHCP-SNOOP2-MIB?

HPN-ICF-DHCP-SNOOP2-MIB is HP Networking's (H3C-derived ICF platform) second-generation MIB for DHCP Snooping, a security feature that inspects DHCP traffic to build a trusted binding table and drop rogue/spoofed DHCP traffic on HP networking switches. It exposes global enable state, the binding database name and refresh interval/trigger, packet counters for DHCP packets sent/received/dropped, and a binding table recording each learned client's IP address, VLAN ID, and secondary VLAN ID. Its monitoring value lies in software/security-feature status: confirming DHCP snooping is enabled, tracking the volume of dropped (potentially malicious or misconfigured) DHCP packets via hpnicfDhcpSnoop2PktDropNum, and inspecting the live binding table to verify legitimate client-to-IP-to-VLAN mappings are being learned correctly. It builds on standard DHCP (RFC 2131) and VLAN concepts but is an HP/H3C ICF-platform-specific private MIB. It is typically deployed on HP Networking (H3C-based) switches in enterprise access-layer networks to protect against DHCP spoofing and rogue DHCP server attacks. Engineers can download the HPN-ICF-DHCP-SNOOP2-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-DHCP-SNOOP2-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP Networking (H3C ICF platform) managed switch

Monitoring Examples

An administrator polls hpnicfDhcpSnoop2Enabled to confirm the feature is active and monitors hpnicfDhcpSnoop2PktDropNum alongside hpnicfDhcpSnoop2PktRcvNum to detect an unusual spike in dropped DHCP packets, which would reveal an untrusted port receiving rogue DHCP server or spoofed client traffic. Checking hpnicfDhcpSnoop2BindTable (hpnicfDhcpSnoop2BindEntry: hpnicfDhcpSnoop2BindIpAddr, hpnicfDhcpSnoop2BindVlanId, hpnicfDhcpSnoop2BindSecVlanId) lets the admin verify that a specific client's leased IP address is correctly bound to the expected VLAN, and hpnicfDhcpSnoop2BindRefreshIntvl/hpnicfDhcpSnoop2BindRefresh confirm the binding database is being persisted/refreshed as configured.

What Can Be Monitored

DHCP snooping enable state
DHCP packets sent/received/dropped counters
DHCP binding table (IP, VLAN, secondary VLAN)
binding database refresh interval/status

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommon

OBJECT-IDENTITY

From IF-MIB

InterfaceIndexOrZero
ifIndex	OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddressIPv4

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpnicfDhcpSnoop2	1.3.6.1.4.1.11.2.14.11.15.2.124			DHCP SNOOPING MIB 2
hpnicfDhcpSnoop2ScalarObjects	1.3.6.1.4.1.11.2.14.11.15.2.124.1
hpnicfDhcpSnoop2ConfigGroup	1.3.6.1.4.1.11.2.14.11.15.2.124.1.1
T/F hpnicfDhcpSnoop2Enabled	1.3.6.1.4.1.11.2.14.11.15.2.124.1.1.1	TruthValue	read-write	If the value of this object is set to 'true', DHCP snooping is enabled.
OCT hpnicfDhcpSnoop2BindDbName	1.3.6.1.4.1.11.2.14.11.15.2.124.1.1.2	OCTET STRING	read-write	Name of the file that used to store binding information. If the value of the object is set to a zero-length string, the configuration will be removed.
U32 hpnicfDhcpSnoop2BindRefreshIntvl	1.3.6.1.4.1.11.2.14.11.15.2.124.1.1.3	Unsigned32	read-write	The refresh interval of the binding information in seconds.
INT hpnicfDhcpSnoop2BindRefresh	1.3.6.1.4.1.11.2.14.11.15.2.124.1.1.4	INTEGER	read-write	If the value of this object is set to 'on', the binding information will be refreshed immediately.
hpnicfDhcpSnoop2StatisticsGroup	1.3.6.1.4.1.11.2.14.11.15.2.124.1.2
C64 hpnicfDhcpSnoop2PktSentNum	1.3.6.1.4.1.11.2.14.11.15.2.124.1.2.1	Counter64	read-only	The total number of the packets send by DHCP snooping.
C64 hpnicfDhcpSnoop2PktRcvNum	1.3.6.1.4.1.11.2.14.11.15.2.124.1.2.2	Counter64	read-only	The total number of the packets received by DHCP snooping.
C64 hpnicfDhcpSnoop2PktDropNum	1.3.6.1.4.1.11.2.14.11.15.2.124.1.2.3	Counter64	read-only	The total number of the packets dropped by DHCP snooping.
hpnicfDhcpSnoop2Tables	1.3.6.1.4.1.11.2.14.11.15.2.124.2
hpnicfDhcpSnoop2BindTable	1.3.6.1.4.1.11.2.14.11.15.2.124.2.1		not-accessible	The table containing information of DHCP clients listened by DHCP snooping.
hpnicfDhcpSnoop2BindEntry	1.3.6.1.4.1.11.2.14.11.15.2.124.2.1.1		not-accessible	An entry containing information of DHCP clients.
ADR hpnicfDhcpSnoop2BindIpAddr	1.3.6.1.4.1.11.2.14.11.15.2.124.2.1.1.1	InetAddressIPv4	not-accessible	DHCP client's IP addresses collected by DHCP snooping.
U32 hpnicfDhcpSnoop2BindVlanId	1.3.6.1.4.1.11.2.14.11.15.2.124.2.1.1.2	Unsigned32	not-accessible	DHCP client's VLAN ID collected by DHCP snooping.
U32 hpnicfDhcpSnoop2BindSecVlanId	1.3.6.1.4.1.11.2.14.11.15.2.124.2.1.1.3	Unsigned32	not-accessible	DHCP client's second VLAN ID collected by DHCP snooping. 65535 means no second VLAN.
MAC hpnicfDhcpSnoop2BindMacAddr	1.3.6.1.4.1.11.2.14.11.15.2.124.2.1.1.4	MacAddress	read-only	DHCP client's MAC address collected by DHCP snooping.
U32 hpnicfDhcpSnoop2BindLease	1.3.6.1.4.1.11.2.14.11.15.2.124.2.1.1.5	Unsigned32	read-only	Left lease time in seconds collected by DHCP snooping. The value of this object cannot be 0.
NUM hpnicfDhcpSnoop2BindPortIndex	1.3.6.1.4.1.11.2.14.11.15.2.124.2.1.1.6	InterfaceIndexOrZero	read-only	DHCP client's port index collected by DHCP snooping. The value of zero means unknown port.
ROW hpnicfDhcpSnoop2BindRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.124.2.1.1.7	RowStatus	read-create	RowStatus. Only destroy action is allow to use.
hpnicfDhcpSnoop2IfConfigTable	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2		not-accessible	A table is used to configure DHCP snooping functions on ports.
hpnicfDhcpSnoop2IfConfigEntry	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1		not-accessible	An entry containing DHCP snooping configurations of ports.
INT hpnicfDhcpSnoop2IfTrustStatus	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.1	INTEGER	read-write	Trusted status of the port.
T/F hpnicfDhcpSnoop2IfCheckMac	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.2	TruthValue	read-write	If the value is 'true', MAC address of DHCP packets received on the port will be checked.
T/F hpnicfDhcpSnoop2IfCheckRequest	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.3	TruthValue	read-write	If the value is 'true', DHCP request packets will be checked.
U32 hpnicfDhcpSnoop2IfRateLimit	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.4	Unsigned32	read-write	The rate limit in Kbps. If the value is 0, there is no rate limit on the port.
T/F hpnicfDhcpSnoop2IfRecordBind	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.5	TruthValue	read-write	If the value is 'true', information of DHCP packets received on the port will be recorded.
U32 hpnicfDhcpSnoop2IfMaxLearnNum	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.6	Unsigned32	read-write	The maximum number of binding entries that could be learned on the port. If the value is 0, it means that there is no threshold on the port.
T/F hpnicfDhcpSnoop2IfOpt82Enable	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.7	TruthValue	read-write	If DHCP snooping supports option 82 functions, the value is 'true'. If DHCP snooping does NOT support option 82 functions, the value is 'false'.
INT hpnicfDhcpSnoop2IfOpt82Strategy	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.8	INTEGER	read-write	The strategy of DHCP snooping handling option 82. 'drop' indicates DHCP snooping discarding the request packet including option 82. 'keep' indicates DHCP snooping accepting the request packet without any change of the option 82. 'replace' indicates DHCP snooping accepting the request packet on condition that it generates a new option 82 to replace the original one.
INT hpnicfDhcpSnoop2IfOpt82CIDMode	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.9	INTEGER	read-write	The mode of filling in the circuit ID suboption of DHCP option 82. 'normal' is the standard mode. 'verbose' is the detailed mode. 'userDefine' is the user-defined mode. If the value of this object is set to 'userDefine', hpnicfDhcpSnoop2IfOpt82CIDStr must also be set.
INT hpnicfDhcpSnoop2IfOpt82CIDNodeType	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.10	INTEGER	read-write	Type of access node identifier that is used to fill in the circuit ID suboption of option 82 when the value of hpnicfDhcpSnoop2IfOption82CIDMode is set to 'verbose'. The SET operation of this object must be with the SET operation of hpnicfDhcpSnoop2IfOpt82CIDMode. 'invalid' indicates that the node identifier is NOT used to fill in the circuit ID suboption of option 82. If the value of hpnicfDhcpSnoop2IfOpt82CIDMode is NOT 'verbose', the value of this object is set to 'invalid' automatically. Otherwise the value of this object cannot be set to 'invalid'. 'mac' indicates that the node identifier is filled in with the bridge MAC of DHCP snooping device. If the value of hpnicfDhcpSnoop2IfOpt82CIDMode is set to 'verbose', the default value of this object is 'mac'. 'sysname' indicates that the node identifier is filled in with the sysname of the DHCP snooping. 'userDefine' indicates the node identifier is filled in with the string defined by the object of hpnicfDhcpSnoop2IfOpt82CIDNodeStr. If the value is set to 'userDefine', the value of hpnicfDhcpSnoop2IfOpt82CIDNodeStr must also be set to a non-zero length string.
OCT hpnicfDhcpSnoop2IfOpt82CIDNodeStr	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.11	OCTET STRING	read-write	The string defined by user to fill in the node identifier in the verbose mode. If the value of hpnicfDhcpSnoop2IfOpt82CIDMode is NOT 'verbose', or the value of hpnicfDhcpSnoop2IfOpt82CIDNodeType is NOT 'userDefine', it is set to a zero-length string automatically. Otherwise it must be set to a non-zero length string. The SET operation of this object must be with the SET operation of hpnicfDhcpSnoop2IfOpt82CIDMode and hpnicfDhcpSnoop2IfOpt82CIDNodeType.
OCT hpnicfDhcpSnoop2IfOpt82CIDStr	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.12	OCTET STRING	read-write	The string defined by user to fill in the circuit ID suboption of option 82 in the user-define mode. If the value of hpnicfDhcpSnoop2IfOpt82CIDMode is NOT 'userDefine', it is set to a zero-length string automatically. Otherwise it must be set to a non-zero length string. The SET operation of this object must be with the SET operation of hpnicfDhcpSnoop2IfOpt82CIDMode.
INT hpnicfDhcpSnoop2IfOpt82CIDFormat	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.13	INTEGER	read-write	The format of the circuit ID suboption of DHCP option 82. 'hex' is the hex format. 'ascii' is the ascii format. 'undefine' is the undefine format. If the value of hpnicfDhcpSnoop2IfOpt82CIDMode is 'normal', this object is set with 'hex' automatically and cannot be set with 'undefine'. If the value of hpnicfDhcpSnoop2IfOpt82CIDMode is 'verbose', the default value of this object is 'undefine'. If the value of hpnicfDhcpSnoop2IfOpt82CIDMode is 'userDefine', this object is set with 'ascii' automatically and cannot be set with other value. The SET operation of this object must be with the SET operation of hpnicfDhcpSnoop2IfOpt82CIDMode.
INT hpnicfDhcpSnoop2IfOpt82RIDMode	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.14	INTEGER	read-write	The mode of filling in the remote ID suboption of DHCP option 82. 'normal' is the standard mode. 'userDefine' is the user-defined mode. 'sysname' is the sysname mode. If the value of this object is set to 'userDefine', hpnicfDhcpSnoop2IfOpt82RIDStr must also be set.
OCT hpnicfDhcpSnoop2IfOpt82RIDStr	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.15	OCTET STRING	read-write	The string defined by user to fill in the remote ID in the user-defined mode. If the value of hpnicfDhcpSnoop2IfOpt82RIDMode is NOT 'userDefine', this object is set with a zero-length string automatically. Otherwise it must be set with a non-zero length string. The SET operation of this object must be with the SET operation of hpnicfDhcpSnoop2IfOpt82RIDMode.
INT hpnicfDhcpSnoop2IfOpt82RIDFormat	1.3.6.1.4.1.11.2.14.11.15.2.124.2.2.1.16	INTEGER	read-write	The format of DHCP option 82 remote ID in 'normal' mode. 'hex' is the hex format. 'ascii' is the ascii format. If the value of hpnicfDhcpSnoop2IfOpt82RIDMode is 'sysname' or 'userDefine', this object is set with 'ascii' automatically and cannot be set with other value. If the value of hpnicfDhcpSnoop2IfOpt82RIDMode is 'normal', the default value of this object is 'hex'. The SET operation of this object must be with the SET operation of hpnicfDhcpSnoop2IfOpt82RIDMode.
hpnicfDhcpSnoop2IfVlanCIDTable	1.3.6.1.4.1.11.2.14.11.15.2.124.2.3		not-accessible	A table containing the information of the circuit ID suboption of DHCP option 82 in VLAN.
hpnicfDhcpSnoop2IfVlanCIDEntry	1.3.6.1.4.1.11.2.14.11.15.2.124.2.3.1		not-accessible	An entry containing the information of the circuit ID suboption of DHCP option 82 in VLAN.
U32 hpnicfDhcpSnoop2IfVlanCIDVlanIndex	1.3.6.1.4.1.11.2.14.11.15.2.124.2.3.1.1	Unsigned32	not-accessible	VLAN ID.
OCT hpnicfDhcpSnoop2IfVlanCIDStr	1.3.6.1.4.1.11.2.14.11.15.2.124.2.3.1.2	OCTET STRING	read-create	The string defined by user to fill in the circuit ID suboption of option 82.
ROW hpnicfDhcpSnoop2IfVlanCIDRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.124.2.3.1.3	RowStatus	read-create	Operation status of this table entry. Three actions are used: active, createAndGo, destroy.
hpnicfDhcpSnoop2IfVlanRIDTable	1.3.6.1.4.1.11.2.14.11.15.2.124.2.4		not-accessible	A table containing the information of the remote ID suboption of DHCP option 82 in VLAN.
hpnicfDhcpSnoop2IfVlanRIDEntry	1.3.6.1.4.1.11.2.14.11.15.2.124.2.4.1		not-accessible	An entry containing the information of the remote ID suboption of DHCP option 82 in VLAN.
U32 hpnicfDhcpSnoop2IfVlanRIDVlanIndex	1.3.6.1.4.1.11.2.14.11.15.2.124.2.4.1.1	Unsigned32	not-accessible	VLAN ID.
INT hpnicfDhcpSnoop2IfVlanRIDMode	1.3.6.1.4.1.11.2.14.11.15.2.124.2.4.1.2	INTEGER	read-create	The mode of filling in the remote ID suboption of DHCP option 82 in VLAN. 'sysname' indicates using the device sysname to fill in the suboption. 'userDefine' indicates using the string defined by hpnicfDhcpSnoop2IfVlanRIDStr to fill in the suboption. If the value of this object is set to 'userDefine', hpnicfDhcpSnoop2IfVlanRIDStr must also be set.
OCT hpnicfDhcpSnoop2IfVlanRIDStr	1.3.6.1.4.1.11.2.14.11.15.2.124.2.4.1.3	OCTET STRING	read-create	The string used to fill in the remote ID suboption. If the value of hpnicfDhcpSnoop2IfVlanRIDMode is NOT 'userDefine', this object is set with a zero-length string automatically. Otherwise it must be set with a non-zero length string. The SET operation of this object must be with the SET operation of hpnicfDhcpSnoop2IfVlanRIDMode.
ROW hpnicfDhcpSnoop2IfVlanRIDRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.124.2.4.1.4	RowStatus	read-create	Operation status of this table entry. Three actions are used: active, createAndGo, destroy.

RFC description

HPE ProCurve/Arista vendor-private MIB for DHCP snooping v2 configuration and monitoring on network switches.

Start monitoring HP Networking (H3C ICF platform) managed switch (DHCP Snooping v2) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-DHCP-SNOOP2-MIB

What Is HPN-ICF-DHCP-SNOOP2-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description