HUAWEI-DHCP-SNOOPING-MIB

All MIBs › HUAWEI-DHCP-SNOOPING-MIB

Organization: Huawei Technologies Co.,Ltd.

Last Updated: 2014-07-18

Category: Domain: Security, IP and Core Protocols, Vendor: Huawei

Description: Huawei DHCP snooping MIB providing objects to configure and monitor DHCP snooping security, binding tables, and untrusted port filtering.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-DHCP-SNOOPING-MIB?

HUAWEI-DHCP-SNOOPING-MIB is a Huawei-proprietary security MIB implemented on Huawei switches to configure and monitor the DHCP Snooping feature, which inspects DHCP traffic to prevent rogue DHCP servers and IP/MAC spoofing on access ports. Its data spans configuration objects (enabling snooping per VLAN or port, marking ports as trusted/untrusted) and state objects such as the DHCP snooping binding table that records learned IP-to-MAC-to-port associations. As a security/access-control feature it is monitored primarily for software/configuration status: whether snooping is enabled on the expected VLANs, how many bindings are currently learned, and whether untrusted-port filtering is actively blocking unauthorized DHCP server responses. It builds on the standard DHCP protocol (RFC 2131) and VLAN tagging (IEEE 802.1Q) concepts, since bindings and enforcement are scoped per VLAN. It is typically deployed on Huawei enterprise or campus access switches at the network edge to protect subscriber or client ports from DHCP-based attacks, and administrators typically download the HUAWEI-DHCP-SNOOPING-MIB file directly from Huawei to compile into their monitoring system.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-DHCP-SNOOPING-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Huawei enterprise/campus access switches

Monitoring Examples

An administrator would poll the VLAN-scoped snooping-enabled object and the DHCP snooping binding table to confirm which ports have learned legitimate client IP/MAC bindings, and would check the untrusted-port filtering counters to see how many rogue DHCP packets were dropped. The supplied module description text actually describes the 12-bit VLAN ID field format rather than binding-table object names, so specific binding-table object names cannot be confirmed from the given data. A sudden spike in dropped/filtered DHCP packets on an untrusted port would indicate an attempted rogue DHCP server or spoofing attack on that segment.

What Can Be Monitored

DHCP snooping enable/disable status per VLAN or port
DHCP binding table entries (IP/MAC/port)
trusted vs untrusted port configuration
filtered/dropped rogue DHCP packet counts

Imported Objects

From HUAWEI-MIB

hwDatacomm

OBJECT-IDENTITY

From IF-MIB

InterfaceIndexOrZero

From P-BRIDGE-MIB

EnabledStatus

From Q-BRIDGE-MIB

VlanId
VlanIdOrNone

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
hwDhcpSnpMib	1.3.6.1.4.1.2011.5.25.112			This MIB describes objects used for DHCP Snooping.
hwDhcpSnpObjects	1.3.6.1.4.1.2011.5.25.112.1
INT hwDhcpSnpGlobal	1.3.6.1.4.1.2011.5.25.112.1.1	INTEGER	read-write	The Global Snooping. Enable this before you want to enable the port,vlan,other interfaces snooping,default is disable.
INT hwDhcpPktRateCheck	1.3.6.1.4.1.2011.5.25.112.1.2	INTEGER	read-write	Whether to check the rate of DHCP packets received,default is disabling.
I32 hwDhcpPktRate	1.3.6.1.4.1.2011.5.25.112.1.3	Integer32	read-write	The area of Dhcp packets received rate,default is 100.
I32 hwDhcpPktRateAlarmThreshold	1.3.6.1.4.1.2011.5.25.112.1.4	Integer32	read-write	The threshold of the DHCP packets rate Alarm. When the actual rate beyond the maximum rate configured and reach this threshold once, there will be a notification can be sent at the same time,default is 100.
INT hwDhcpPktRateAlarmEnable	1.3.6.1.4.1.2011.5.25.112.1.5	INTEGER	read-write	Whether to send the DHCP packets rate alarm when the actual rate beyond the maximum rate configured and reach the rate threshold,default is disabling.
INT hwDhcpSnpBindTblNomatchedArpGlobalAction	1.3.6.1.4.1.2011.5.25.112.1.6	INTEGER	read-write	How to deal with the ARP packets that do not match the DHCP snooping bind table in global view,default is forward.
INT hwDhcpSnpBindTblNomatchedIpGlobalAction	1.3.6.1.4.1.2011.5.25.112.1.7	INTEGER	read-write	How to deal with the Ip packets that do not match the DHCP snooping bind table in global view,default is forward.
STR hwDhcpSnpBindTblAutosaveFilename	1.3.6.1.4.1.2011.5.25.112.1.8	DisplayString	read-write	Auto save file name. Make sure the disk name have been given, and the file must be named with '.tbl' postfixally.
INT hwDhcpSnpBindTblAutosave	1.3.6.1.4.1.2011.5.25.112.1.9	INTEGER	read-write	Whether to save snooping bind table,default is disabling .
I32 hwDhcpSnpGlobalThreshold	1.3.6.1.4.1.2011.5.25.112.1.10	Integer32	read-write	DHCP snooping global threshold,default is disabling.
C32 hwDhcpPktRateDiscardNum	1.3.6.1.4.1.2011.5.25.112.1.11	Counter32	read-only	DHCP packets that discarded for the rate limit.
hwDhcpSnpCfgTable	1.3.6.1.4.1.2011.5.25.112.1.13		not-accessible	The DHCP snooping configuration table.
hwDhcpSnpCfgEntry	1.3.6.1.4.1.2011.5.25.112.1.13.1		not-accessible	An entry in the snooping configuration table.
NUM hwDhcpSnpIfIndex	1.3.6.1.4.1.2011.5.25.112.1.13.1.1	InterfaceIndexOrZero	not-accessible	The interface index.
VLA hwDhcpSnpVlanIndex	1.3.6.1.4.1.2011.5.25.112.1.13.1.2	VlanIdOrNone	not-accessible	The VLAN-ID or other identifier referring to this VLAN.
I32 hwDhcpSnpVsiIndex	1.3.6.1.4.1.2011.5.25.112.1.13.1.3	Integer32	not-accessible	The VSI ID.
INT hwDhcpSnpEnable	1.3.6.1.4.1.2011.5.25.112.1.13.1.5	INTEGER	read-create	Whether to enable snooping on this interface/VLAN.
INT hwDhcpTrusted	1.3.6.1.4.1.2011.5.25.112.1.13.1.6	INTEGER	read-create	This interface/VLAN is trusted or distrusted. When enabled the snooping, it turns to distrusted as default until be changed.
INT hwDhcpOption82Insert	1.3.6.1.4.1.2011.5.25.112.1.13.1.7	INTEGER	read-create	Whether to insert Option82 to DHCP packets.
INT hwDhcpOption82Rebuild	1.3.6.1.4.1.2011.5.25.112.1.13.1.8	INTEGER	read-create	Whether to rebuild the Option82 in DHCP packets.
INT hwDhcpChaddrCheck	1.3.6.1.4.1.2011.5.25.112.1.13.1.9	INTEGER	read-create	Whether to enable check Chaddr in DHCP packets with source Mac-address in Ethernet frame.
I32 hwDhcpChaddrAlarmThreshold	1.3.6.1.4.1.2011.5.25.112.1.13.1.10	Integer32	read-create	The threshold of Chaddr check alarm. A trap can be sent when the chaddr-false DHCP packets count beyond it.
INT hwDhcpChaddrAlarmEnable	1.3.6.1.4.1.2011.5.25.112.1.13.1.11	INTEGER	read-create	Whether to send chaddr trap when its' count beyond the threshold.
INT hwDhcpArpCheck	1.3.6.1.4.1.2011.5.25.112.1.13.1.12	INTEGER	read-create	Whether to enable check ARP packets with the snooping bind table.
INT hwDhcpSnpBindTblNomatchedArpAction	1.3.6.1.4.1.2011.5.25.112.1.13.1.13	INTEGER	read-only	How to deal with the ARP packets that do not match the DHCP snooping bind table in port/VLAN view.
I32 hwDhcpArpAlarmThreshold	1.3.6.1.4.1.2011.5.25.112.1.13.1.14	Integer32	read-create	The threshold of ARP check alarm. A trap can be sent when the false ARP packets discarded count beyond it.
INT hwDhcpArpAlarmEnable	1.3.6.1.4.1.2011.5.25.112.1.13.1.15	INTEGER	read-create	Whether to send Arp trap when its count beyond the threshold.
INT hwDhcpIpCheck	1.3.6.1.4.1.2011.5.25.112.1.13.1.16	INTEGER	read-create	Whether to enable check Ip packets with the snooping bind table.
INT hwDhcpSnpBindTblNomatchedIpAction	1.3.6.1.4.1.2011.5.25.112.1.13.1.17	INTEGER	read-only	How to deal with the Ip packets that do not match the DHCP snooping bind table in port/VLAN view.
I32 hwDhcpIpAlarmThreshold	1.3.6.1.4.1.2011.5.25.112.1.13.1.18	Integer32	read-create	The threshold of IP check alarm. A trap can be sent when the false IP packets count beyond it.
INT hwDhcpIpAlarmEnable	1.3.6.1.4.1.2011.5.25.112.1.13.1.19	INTEGER	read-create	Whether to send IP trap when its count beyond the threshold.
I32 hwDhcpUntrustReplyAlarmThreshold	1.3.6.1.4.1.2011.5.25.112.1.13.1.20	Integer32	read-create	The threshold of DHCP reply packets check alarm. A trap can be sent when the DHCP reply packets count on untrusted interface/VLAN beyond it.
INT hwDhcpUntrustReplyAlarmEnable	1.3.6.1.4.1.2011.5.25.112.1.13.1.21	INTEGER	read-create	Whether to send distrust DHCP reply trap when its count beyond the threshold.
INT hwDhcpSnpBindTblCheck	1.3.6.1.4.1.2011.5.25.112.1.13.1.22	INTEGER	read-create	Whether to check DHCP request packets with the snooping bind table.
I32 hwDhcpSnpBindTblAlarmThreshold	1.3.6.1.4.1.2011.5.25.112.1.13.1.23	Integer32	read-create	The threshold of DHCP request packets checking alarm with the snooping bind table.
INT hwDhcpSnpBindTblAlarmEnable	1.3.6.1.4.1.2011.5.25.112.1.13.1.24	INTEGER	read-create	Whether to send the snooping bind table alarm when beyond its threshold.
HWM hwDhcpSnpMatchMode	1.3.6.1.4.1.2011.5.25.112.1.13.1.25	HWMatchMode	read-create	Setting the VLAN mode of the dhcp packets matched in the bind table. PVLAN(1), CVLAN(2), all(3)
INT hwDhcpSnpDynamicItemCheck	1.3.6.1.4.1.2011.5.25.112.1.13.1.26	INTEGER	read-create	Check items of Dynamic DHCP snooping binding table by IP address or Mac-address or interface.
I32 hwDhcpSnpMaxUserNum	1.3.6.1.4.1.2011.5.25.112.1.13.1.27	Integer32	read-create	MaxUserNumber: the limitation of the user number on the interface.
I32 hwDhcpSnpUserLimitAlarmThreshold	1.3.6.1.4.1.2011.5.25.112.1.13.1.28	Integer32	read-create	The threshold of user-number limitation. A trap can be sent when the current binding-items exceed it.
INT hwDhcpSnpUserLimitAlarmEnable	1.3.6.1.4.1.2011.5.25.112.1.13.1.29	INTEGER	read-create	Whether to send trap when the binding item number exceeds the threshold.
ROW hwDhcpSnpCfgTblRowStatus	1.3.6.1.4.1.2011.5.25.112.1.13.1.30	RowStatus	read-create	The snooping configuration table row status.
ENA hwDhcpPktIfRateCheck	1.3.6.1.4.1.2011.5.25.112.1.13.1.31	EnabledStatus	read-create	Whether to limit the rate of DHCP packets received on the interface.
I32 hwDhcpPktIfRate	1.3.6.1.4.1.2011.5.25.112.1.13.1.32	Integer32	read-create	The area of DHCP packets received rate on the interface.
I32 hwDhcpPktIfRateAlarmThreshold	1.3.6.1.4.1.2011.5.25.112.1.13.1.33	Integer32	read-create	The threshold of the DHCP packets rate Alarm on the interface. When the actual rate beyond the maximum rate configured and reach this threshold once, there will be a notification can be sent at the same time.
ENA hwDhcpPktIfRateAlarmEnable	1.3.6.1.4.1.2011.5.25.112.1.13.1.34	EnabledStatus	read-create	Whether to send the DHCP packets rate alarm when the actual rate beyond the maximum rate configured and reach the rate threshold on the interface.
STR hwDhcpSnpIfVlanOption82RemoteId	1.3.6.1.4.1.2011.5.25.112.1.13.1.35	DisplayString	read-create	Specify the remote ID in the Option 82 field.
STR hwDhcpSnpIfVlanOption82CircuitId	1.3.6.1.4.1.2011.5.25.112.1.13.1.36	DisplayString	read-create	Specify the circuit ID in the Option 82 field.
hwDhcpSnpBindTable	1.3.6.1.4.1.2011.5.25.112.1.14		not-accessible	The snooping bind table.You must give out (1)one of the interface index, VLANID and VSIID at least (2)the Mac-address,ip-address,static type if you want to create a static bind row of the table, dynamic can not be created.
hwDhcpSnpBindEntry	1.3.6.1.4.1.2011.5.25.112.1.14.1		not-accessible	An entry in the snooping bind table.
IP hwDhcpSnpBindIpIndex	1.3.6.1.4.1.2011.5.25.112.1.14.1.1	IpAddress	not-accessible	Index: the IP of the bind table.
VLA hwDhcpSnpBindPVlanIndex	1.3.6.1.4.1.2011.5.25.112.1.14.1.2	VlanId	not-accessible	Index: the P-VLAN of the bind table.
VLA hwDhcpSnpBindCVlanIndex	1.3.6.1.4.1.2011.5.25.112.1.14.1.3	VlanId	not-accessible	Index: the C-VLAN of the bind table.
I32 hwDhcpSnpBindVRFIdIndex	1.3.6.1.4.1.2011.5.25.112.1.14.1.4	Integer32	not-accessible	Index: the VRFID of the bind table.
I32 hwDhcpSnpBindVsiIndex	1.3.6.1.4.1.2011.5.25.112.1.14.1.5	Integer32	not-accessible	Index: the VSI of the bind table.
STR hwDhcpSnpBindIfDescr	1.3.6.1.4.1.2011.5.25.112.1.14.1.6	DisplayString	read-only	The description of the interfaces that bound.
VLA hwDhcpSnpBindPVlanId	1.3.6.1.4.1.2011.5.25.112.1.14.1.7	VlanId	read-only	The PVLAN Id.
VLA hwDhcpSnpBindCVlanId	1.3.6.1.4.1.2011.5.25.112.1.14.1.8	VlanId	read-only	The CVLAN Id.
I32 hwDhcpSnpBindVRFId	1.3.6.1.4.1.2011.5.25.112.1.14.1.9	Integer32	read-only	The VRFID for L3VPN.
I32 hwDhcpSnpBindVsiId	1.3.6.1.4.1.2011.5.25.112.1.14.1.10	Integer32	read-only	The VSI for L2VPN.
MAC hwDhcpSnpBindMac	1.3.6.1.4.1.2011.5.25.112.1.14.1.11	MacAddress	read-only	Mac-address bind. Value of hwDhcpSnpBindMac is optional, if you did not specify hwDhcpSnpBindMac any value when you created, invalid value 0 is returned after you perform Get operation of hwDhcpSnpBindMac.
IP hwDhcpSnpBindIp	1.3.6.1.4.1.2011.5.25.112.1.14.1.12	IpAddress	read-only	Ip-address bind.
INT hwDhcpSnpBindStatus	1.3.6.1.4.1.2011.5.25.112.1.14.1.13	INTEGER	read-only	The bind status:dynamic(1) or static(2).
I32 hwDhcpSnpBindLease	1.3.6.1.4.1.2011.5.25.112.1.14.1.14	Integer32	read-only	The time of the dynamic bind lease to be end.
ROW hwDhcpSnpBindRowStatus	1.3.6.1.4.1.2011.5.25.112.1.14.1.18	RowStatus	read-create	The snooping bind table row status.
hwDhcpSnpFalsePktStatisticTable	1.3.6.1.4.1.2011.5.25.112.1.15		not-accessible	The false packets statistic information table.
hwDhcpSnpFalsePktStatisticEntry	1.3.6.1.4.1.2011.5.25.112.1.15.1		not-accessible	An entry in the snooping false packets statistic information table.
STR hwDhcpSnpStatisticIfDescr	1.3.6.1.4.1.2011.5.25.112.1.15.1.1	DisplayString	read-only	The description of the interfaces.
VLA hwDhcpSnpStatisticVlanId	1.3.6.1.4.1.2011.5.25.112.1.15.1.2	VlanIdOrNone	read-only	The VLAN Id.
C32 hwChaddrNomatchSrcMacDhcpPktNum	1.3.6.1.4.1.2011.5.25.112.1.15.1.3	Counter32	read-only	The false packets(chaddr in DHCP packets is not same with source Mac-address in Ethernet frame) count.
C32 hwArpNomatchSnpBindTblPktNum	1.3.6.1.4.1.2011.5.25.112.1.15.1.4	Counter32	read-only	The false ARP packets match in snooping bind table count.
C32 hwIpNomatchSnpBindTblPktNum	1.3.6.1.4.1.2011.5.25.112.1.15.1.5	Counter32	read-only	The false IP packets do not match snooping bind table count.
C32 hwNomatchSnpBindTblDhcpPktNum	1.3.6.1.4.1.2011.5.25.112.1.15.1.6	Counter32	read-only	The DHCP request packets do not match the snooping bind table.
C32 hwUntrustedReplyPktNum	1.3.6.1.4.1.2011.5.25.112.1.15.1.7	Counter32	read-only	The distrusted port DHCP reply packets count.
I32 hwDhcpSnpStatisticVsiId	1.3.6.1.4.1.2011.5.25.112.1.15.1.8	Integer32	read-only	The VSI for L2VPN.
C32 hwSnpBindingItemNum	1.3.6.1.4.1.2011.5.25.112.1.15.1.9	Counter32	read-only	The number of current binding-table items.
C32 hwSnpCfgMaxUserNum	1.3.6.1.4.1.2011.5.25.112.1.15.1.10	Counter32	read-only	The limitation of the user number on the interface.
C32 hwDhcpPktIfRateDiscardNum	1.3.6.1.4.1.2011.5.25.112.1.15.1.11	Counter32	read-only	DHCP packets that discarded for the rate limit on the interface.
hwDhcpSnpCarCfgTable	1.3.6.1.4.1.2011.5.25.112.1.16		not-accessible	The DHCP Snooping CAR table for control of the traffic. The CAR is based on IP and Mac, but configured with interface and VLAN.
hwDhcpSnpCarCfgEntry	1.3.6.1.4.1.2011.5.25.112.1.16.1		not-accessible	An entry in the DHCP Snooping CAR table.
ENA hwDhcpSnpCarEnable	1.3.6.1.4.1.2011.5.25.112.1.16.1.11	EnabledStatus	read-create	Whether to apply CAR on the traffic of specific IP and Mac
I32 hwDhcpSnpCarCir	1.3.6.1.4.1.2011.5.25.112.1.16.1.12	Integer32	read-create	Committed infomation rate.Unit:kbps.
I32 hwDhcpSnpCarPir	1.3.6.1.4.1.2011.5.25.112.1.16.1.13	Integer32	read-create	Peak information rate.Unit:kbps.
I32 hwDhcpSnpCaCbs	1.3.6.1.4.1.2011.5.25.112.1.16.1.14	Integer32	read-create	Committed burst size.Unit:Byte
I32 hwDhcpSnpCarPbs	1.3.6.1.4.1.2011.5.25.112.1.16.1.15	Integer32	read-create	Peak burst size.Unit:Byte
HWT hwDhcpSnpCarYellow	1.3.6.1.4.1.2011.5.25.112.1.16.1.16	HWTransmitAction	read-create	Yellow action: pass (1) discard (2)
HWT hwDhcpSnpCarRed	1.3.6.1.4.1.2011.5.25.112.1.16.1.17	HWTransmitAction	read-create	Red action: pass (1) discard (2)
ROW hwDhcpSnpCarRowStatus	1.3.6.1.4.1.2011.5.25.112.1.16.1.50	RowStatus	read-create	The DHCP Snooping CAR table row status.
INT hwDhcpSnpGlobalOption82Format	1.3.6.1.4.1.2011.5.25.112.1.17	INTEGER	read-write	The format type of Option82,default is hex.
INT hwDhcpSnpGlobalOption82PacketFormat	1.3.6.1.4.1.2011.5.25.112.1.18	INTEGER	read-write	The format mode of Option82,default is extended.
STR hwDhcpSnpGlobalOption82RemoteId	1.3.6.1.4.1.2011.5.25.112.1.19	DisplayString	read-write	Option82 global remote ID.
ENA hwDhcpSnpGlobalOption82RemoteIdSysName	1.3.6.1.4.1.2011.5.25.112.1.20	EnabledStatus	read-write	Config Option82 global remote ID as system name,default is disabled.
STR hwDhcpSnpGlobalOption82CircuitId	1.3.6.1.4.1.2011.5.25.112.1.21	DisplayString	read-write	Option82 global circuit ID.
hwDhcpSnpGlobalOption82PktFormatTable	1.3.6.1.4.1.2011.5.25.112.1.22		not-accessible	A table about the packet format of option82.
hwDhcpSnpGlobalOption82PktFormatEntry	1.3.6.1.4.1.2011.5.25.112.1.22.1		not-accessible	An entry about the packet format of option82.
INT hwDhcpSnpGlobalOption82Type	1.3.6.1.4.1.2011.5.25.112.1.22.1.1	INTEGER	not-accessible	The option of the option82
INT hwDhcpSnpGlobalOption82PktFormat	1.3.6.1.4.1.2011.5.25.112.1.22.1.2	INTEGER	read-write	The format of the option82
STR hwDhcpSnpGlobalOption82DefString	1.3.6.1.4.1.2011.5.25.112.1.22.1.3	DisplayString	read-write	The content of the option when the format is user defined.
hwDhcpSnpStaticBindTable	1.3.6.1.4.1.2011.5.25.112.1.23		not-accessible	The snooping static bind table.
hwDhcpSnpStaticBindEntry	1.3.6.1.4.1.2011.5.25.112.1.23.1		not-accessible	An entry in the snooping static bind table.
IP hwDhcpSnpStaticBindIpIndex	1.3.6.1.4.1.2011.5.25.112.1.23.1.1	IpAddress	not-accessible	Index: the IP of the bind table.
MAC hwDhcpSnpStaticBindMacIndex	1.3.6.1.4.1.2011.5.25.112.1.23.1.2	MacAddress	not-accessible	Index: the MAC of the bind table.
VLA hwDhcpSnpStaticBindPVlanIndex	1.3.6.1.4.1.2011.5.25.112.1.23.1.3	VlanId	not-accessible	Index: the P-VLAN of the bind table.
VLA hwDhcpSnpStaticBindCVlanIndex	1.3.6.1.4.1.2011.5.25.112.1.23.1.4	VlanId	not-accessible	Index: the C-VLAN of the bind table.
NUM hwDhcpSnpStaticBindIfIndex	1.3.6.1.4.1.2011.5.25.112.1.23.1.5	InterfaceIndexOrZero	not-accessible	Index: the interface index of the bind table.
ROW hwDhcpSnpStaticBindRowStatus	1.3.6.1.4.1.2011.5.25.112.1.23.1.20	RowStatus	read-create	The static snooping bind table row status.
ENA hwDhcpSnpServerDetectStatus	1.3.6.1.4.1.2011.5.25.112.1.24	EnabledStatus	read-write	This object indicates whether detection against the pseudo DHCP server is enabled. The default value is disabled(2).
hwDhcpSnpBdFalsePktTable	1.3.6.1.4.1.2011.5.25.112.1.25		not-accessible	The false packets statistic information table.
hwDhcpSnpBdFalsePktEntry	1.3.6.1.4.1.2011.5.25.112.1.25.1		not-accessible	An entry in the snooping false packets statistic information table.
I32 hwDhcpSnpBdIndex	1.3.6.1.4.1.2011.5.25.112.1.25.1.1	Integer32	not-accessible	Bridge-domain ID.
C32 hwBdNomatchSnpBindTblDhcpPktNum	1.3.6.1.4.1.2011.5.25.112.1.25.1.2	Counter32	read-only	The DHCP request packets do not match the snooping bind table of the bridge domain.
C32 hwBdChaddrNomatchSrcMacDhcpPktNum	1.3.6.1.4.1.2011.5.25.112.1.25.1.3	Counter32	read-only	The false packets(chaddr in DHCP packets is not same with source Mac-address in Ethernet frame) count of the bridge domain.
C32 hwBdArpNomatchSnpBindTblPktNum	1.3.6.1.4.1.2011.5.25.112.1.25.1.4	Counter32	read-only	The false ARP packets match in snooping bind table count of the bridge domain.
C32 hwBdIpNomatchSnpBindTblPktNum	1.3.6.1.4.1.2011.5.25.112.1.25.1.5	Counter32	read-only	The false IP packets do not match snooping bind table count of the bridge domain.
C32 hwBdUntrustedReplyPktNum	1.3.6.1.4.1.2011.5.25.112.1.25.1.6	Counter32	read-only	The distrusted port DHCP reply packets count of the bridge domain.
C32 hwBdSnpBindingItemNum	1.3.6.1.4.1.2011.5.25.112.1.25.1.7	Counter32	read-only	The number of current binding-table items of the bridge domain.
C32 hwBdSnpCfgMaxUserNum	1.3.6.1.4.1.2011.5.25.112.1.25.1.8	Counter32	read-only	The limitation of the user number of the bridge domain.
hwDhcpSnpTraps	1.3.6.1.4.1.2011.5.25.112.2
NTF hwDhcpSnpChaddrAlarm	1.3.6.1.4.1.2011.5.25.112.2.1			CHADDR in Dhcp packets do not match source Mac-address in Ethernet frame.
NTF hwArpNomatchSnpBindTblPktAlarm	1.3.6.1.4.1.2011.5.25.112.2.2			Arp packets do not match the snooping bind table.
NTF hwIpNomatchSnpBindTblPktAlarm	1.3.6.1.4.1.2011.5.25.112.2.3			Ip packets do not match the snooping bind table.
NTF hwUntrustedReplyPktAlarm	1.3.6.1.4.1.2011.5.25.112.2.4			Untrusted ports have received the Dhcp reply packets.
NTF hwNomatchSnpBindTblDhcpPktAlarm	1.3.6.1.4.1.2011.5.25.112.2.5			There are Dhcp request packets do not match the snooping bind table.
NTF hwDhcpPktRateAlarm	1.3.6.1.4.1.2011.5.25.112.2.6			The rate of Dhcp packets received is too large.
NTF hwSnpUserNumberAlarm	1.3.6.1.4.1.2011.5.25.112.2.7			The number of the binding items exceeds the threshold of user-limit on the interface.
NTF hwSnpUserNumberAlarmIf	1.3.6.1.4.1.2011.5.25.112.2.8			The number of DHCP user on the interface exceeds alarm threshold.
NTF hwSnpUserNumberAlarmIfResume	1.3.6.1.4.1.2011.5.25.112.2.9			The number of DHCP user on the interface descends to alarm threshold.
NTF hwSnpUserNumberAlarmVlan	1.3.6.1.4.1.2011.5.25.112.2.10			The number of DHCP user on the vlan exceeds alarm threshold.
NTF hwSnpUserNumberAlarmVlanResume	1.3.6.1.4.1.2011.5.25.112.2.11			The number of DHCP user on the vlan descends to alarm threshold.
NTF hwSnpUserNumberAlarmGlobal	1.3.6.1.4.1.2011.5.25.112.2.12			The number of DHCP global user exceeds alarm threshold.
NTF hwSnpUserNumberAlarmGlobalResume	1.3.6.1.4.1.2011.5.25.112.2.13			The number of DHCP global user descends to alarm threshold.
NTF hwNdSnpUserNumberAlarmIf	1.3.6.1.4.1.2011.5.25.112.2.14			The number of ND user on the interface exceeds alarm threshold.
NTF hwNdSnpUserNumberAlarmIfResume	1.3.6.1.4.1.2011.5.25.112.2.15			The number of ND user on the interface descends to alarm threshold.
NTF hwNdSnpUserNumberAlarmGlobal	1.3.6.1.4.1.2011.5.25.112.2.16			The number of ND global user exceeds alarm threshold.
NTF hwNdSnpUserNumberAlarmGlobalResume	1.3.6.1.4.1.2011.5.25.112.2.17			The number of ND global user descends to alarm threshold.
NTF hwBdNomatchSnpBindTblDhcpPktAlarm	1.3.6.1.4.1.2011.5.25.112.2.18			There are Dhcp request packets do not match the snooping bind table on the bridge domain.
NTF hwBdDhcpSnpChaddrAlarm	1.3.6.1.4.1.2011.5.25.112.2.19			CHADDR in Dhcp packets do not match source Mac-address in Ethernet frame on the bridge domain.
NTF hwBdArpNomatchSnpBindTblPktAlarm	1.3.6.1.4.1.2011.5.25.112.2.20			Arp packets do not match the snooping bind table on the bridge domain.
NTF hwBdIpNomatchSnpBindTblPktAlarm	1.3.6.1.4.1.2011.5.25.112.2.21			Ip packets do not match the snooping bind table on the bridge domain.
NTF hwBdUntrustedReplyPktAlarm	1.3.6.1.4.1.2011.5.25.112.2.22			Untrusted ports have received the Dhcp reply packets on the bridge domain.
NTF hwBdSnpUserNumberAlarm	1.3.6.1.4.1.2011.5.25.112.2.23			The number of the binding items exceeds the threshold of user-limit on the bridge domain.
NTF hwDhcpSnpChaddrAlarmResume	1.3.6.1.4.1.2011.5.25.112.2.24			The number of the discarded DHCP packets in which the CHADDR field is inconsistent with the source MAC address descends to the threshold on the interface.
NTF hwArpNomatchSnpBindTblPktAlarmResume	1.3.6.1.4.1.2011.5.25.112.2.25			The number of the discarded ARP packets that do not match the binding table descends to the threshold on the interface.
NTF hwIpNomatchSnpBindTblPktAlarmResume	1.3.6.1.4.1.2011.5.25.112.2.26			The number of the discarded IP packets that do not match the binding table descends to the threshold on the interface.
NTF hwUntrustedReplyPktAlarmResume	1.3.6.1.4.1.2011.5.25.112.2.27			The number of the discarded DHCP reply packets on the untrusted interface descends to the threshold.
NTF hwNomatchSnpBindTblDhcpPktAlarmResume	1.3.6.1.4.1.2011.5.25.112.2.28			The number of the discarded DHCP request packets that do not match the binding table descends to the threshold on the interface.
NTF hwSnpUserNumberAlarmResume	1.3.6.1.4.1.2011.5.25.112.2.29			The number of the binding items descends to the threshold of user-limit on the interface.
hwDhcpSnpCompliance	1.3.6.1.4.1.2011.5.25.112.3
hwDhcpSnpMibGroups	1.3.6.1.4.1.2011.5.25.112.3.1			The compliance statement for systems supporting this module.
hwDhcpSnpCfgGroup	1.3.6.1.4.1.2011.5.25.112.3.1.1			The DHCPSNP's Configuration group.
hwDhcpSnpBindGroup	1.3.6.1.4.1.2011.5.25.112.3.1.2			The DHCPSNP's Bind group.
hwDhcpSnpStatisticGroup	1.3.6.1.4.1.2011.5.25.112.3.1.3			The DHCPSNP's Statistic group.
hwDhcpSnpTrapGroup	1.3.6.1.4.1.2011.5.25.112.3.1.4			The DHCPSNP's Notification group.
hwDhcpSnpBdStatisticGroup	1.3.6.1.4.1.2011.5.25.112.3.1.5			The DHCPSNP's Statistic group on the bridge domain .

RFC description

DHCP snooping security features for Huawei switches, preventing unauthorized DHCP servers and binding table management.

Start monitoring Huawei enterprise/campus access switch (DHCP Snooping) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-DHCP-SNOOPING-MIB

What Is HUAWEI-DHCP-SNOOPING-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description