ME1200-IP-SOURCE-GUARD-MIB

All MIBs › ME1200-IP-SOURCE-GUARD-MIB

Organization: Cisco Systems, Inc

Last Updated: 2014-03-28

Category: Domain: Security, Vendor: Cisco

Description: Cisco ME1200 Metro Ethernet switch MIB for IP Source Guard configuration to validate IP traffic against DHCP snooping bindings.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ME1200-IP-SOURCE-GUARD-MIB?

ME1200-IP-SOURCE-GUARD-MIB is a Cisco proprietary module for the ME1200 Metro Ethernet switch family, providing IP Source Guard configuration to validate incoming IP traffic against DHCP snooping bindings or static entries. It exposes a global mode setting, per-interface mode and dynamic-binding entry counts, and a static configuration table mapping IP/MAC address pairs to specific interfaces and VLANs. Its monitoring value is primarily security/configuration status: administrators can confirm whether source guard is globally and per-port enabled, how many dynamic bindings are currently learned per interface, and which static IP/MAC bindings have been manually configured. It depends on DHCP snooping (a related feature/MIB) to populate the dynamic bindings that IP Source Guard enforces against. It is typically deployed on Cisco ME1200 access switches in metro Ethernet networks to prevent IP address spoofing at the edge, and administrators can download the ME1200-IP-SOURCE-GUARD-MIB file to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ME1200-IP-SOURCE-GUARD-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco ME1200 Metro Ethernet switch

Monitoring Examples

An operator would poll me1200IpSourceGuardInterfaceTable/Entry, checking me1200IpSourceGuardInterfaceMode and me1200IpSourceGuardInterfaceDynamicEntryCount to confirm a port is enforcing source guard and has learned the expected number of DHCP-snooped bindings. A port with source guard enabled but a dynamic entry count of zero when a device is known to be connected would reveal a DHCP snooping failure blocking legitimate traffic, while the static table's me1200IpSourceGuardStaticConfigIpAddress/MacAddress entries confirm manually pinned bindings.

What Can Be Monitored

global IP source guard mode
per-interface source guard mode
dynamic binding entry count per port
static IP/MAC bindings configured
VLAN association of static bindings

Imported Objects

From CISCOME1200-MIB

me1200SwitchMgmt

OBJECT-IDENTITY

From ME1200-TC

ME1200InterfaceIndex
ME1200RowEditorState

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
me1200IpSourceGuardMIB	1.3.6.1.4.1.9.9.815.1.64			This is a private version of the IP source guard MIB
me1200IpSourceGuardMIBObjects	1.3.6.1.4.1.9.9.815.1.64.1
me1200IpSourceGuardConfig	1.3.6.1.4.1.9.9.815.1.64.1.2
me1200IpSourceGuardGlobals	1.3.6.1.4.1.9.9.815.1.64.1.2.1
T/F me1200IpSourceGuardGlobalsMode	1.3.6.1.4.1.9.9.815.1.64.1.2.1.1	TruthValue	read-write	Global mode of IP source guard. true(1) is to enable IP source guard and false(2) is to disable it.
me1200IpSourceGuardInterfaceTable	1.3.6.1.4.1.9.9.815.1.64.1.2.2		not-accessible	This is a table of IP source guard port configuration parameters
me1200IpSourceGuardInterfaceEntry	1.3.6.1.4.1.9.9.815.1.64.1.2.2.1		not-accessible	Each port has a set of parameters
NUM me1200IpSourceGuardInterfaceIfIndex	1.3.6.1.4.1.9.9.815.1.64.1.2.2.1.1	ME1200InterfaceIndex	not-accessible	Logical interface number of the physical port.
T/F me1200IpSourceGuardInterfaceMode	1.3.6.1.4.1.9.9.815.1.64.1.2.2.1.2	TruthValue	read-write	Port mode of IP source guard. true(1) is to enable IP source guard on the port and false(2) is to disable it on the port.
U32 me1200IpSourceGuardInterfaceDynamicEntryCount	1.3.6.1.4.1.9.9.815.1.64.1.2.2.1.3	Unsigned32	read-write	The dynamic entry count is the max number of dynamic entries allowed on the port.
me1200IpSourceGuardStaticConfigTable	1.3.6.1.4.1.9.9.815.1.64.1.2.3		not-accessible	The table is IP source guard static onfiguration table. The indexes are ifindex, VLAN ID, ip and netmask.
me1200IpSourceGuardStaticConfigEntry	1.3.6.1.4.1.9.9.815.1.64.1.2.3.1		not-accessible	Each entry has a set of parameters
NUM me1200IpSourceGuardStaticConfigIfIndex	1.3.6.1.4.1.9.9.815.1.64.1.2.3.1.1	ME1200InterfaceIndex	not-accessible	Logical interface number of the physical port.
I32 me1200IpSourceGuardStaticConfigVlanId	1.3.6.1.4.1.9.9.815.1.64.1.2.3.1.2	Integer32	not-accessible	The VLAN id of the VLAN.
IP me1200IpSourceGuardStaticConfigIpAddress	1.3.6.1.4.1.9.9.815.1.64.1.2.3.1.3	IpAddress	not-accessible	Assigned IP address.
MAC me1200IpSourceGuardStaticConfigMacAddress	1.3.6.1.4.1.9.9.815.1.64.1.2.3.1.4	MacAddress	read-write	Assigned MAC Address.
ME1 me1200IpSourceGuardStaticConfigAction	1.3.6.1.4.1.9.9.815.1.64.1.2.3.1.100	ME1200RowEditorState	read-write	Action
me1200IpSourceGuardStaticConfigTableRowEditor	1.3.6.1.4.1.9.9.815.1.64.1.2.4
NUM me1200IpSourceGuardStaticConfigTableRowEditorIfIndex	1.3.6.1.4.1.9.9.815.1.64.1.2.4.1	ME1200InterfaceIndex	read-write	Logical interface number of the physical port.
I32 me1200IpSourceGuardStaticConfigTableRowEditorVlanId	1.3.6.1.4.1.9.9.815.1.64.1.2.4.2	Integer32	read-write	The VLAN id of the VLAN.
IP me1200IpSourceGuardStaticConfigTableRowEditorIpAddress	1.3.6.1.4.1.9.9.815.1.64.1.2.4.3	IpAddress	read-write	Assigned IP address.
MAC me1200IpSourceGuardStaticConfigTableRowEditorMacAddress	1.3.6.1.4.1.9.9.815.1.64.1.2.4.4	MacAddress	read-write	Assigned MAC Address.
ME1 me1200IpSourceGuardStaticConfigTableRowEditorAction	1.3.6.1.4.1.9.9.815.1.64.1.2.4.100	ME1200RowEditorState	read-write	Action
me1200IpSourceGuardStatus	1.3.6.1.4.1.9.9.815.1.64.1.3
me1200IpSourceGuardDynamicStatusTable	1.3.6.1.4.1.9.9.815.1.64.1.3.2		not-accessible	This is a table of IP source guard dynamic learning status
me1200IpSourceGuardDynamicStatusEntry	1.3.6.1.4.1.9.9.815.1.64.1.3.2.1		not-accessible	Each entry has a set of parameters
NUM me1200IpSourceGuardDynamicStatusIfIndex	1.3.6.1.4.1.9.9.815.1.64.1.3.2.1.1	ME1200InterfaceIndex	not-accessible	Logical interface number of the physical port.
I32 me1200IpSourceGuardDynamicStatusVlanId	1.3.6.1.4.1.9.9.815.1.64.1.3.2.1.2	Integer32	not-accessible	The VLAN id of the VLAN.
IP me1200IpSourceGuardDynamicStatusIpAddress	1.3.6.1.4.1.9.9.815.1.64.1.3.2.1.3	IpAddress	not-accessible	Assigned IP address.
MAC me1200IpSourceGuardDynamicStatusMacAddress	1.3.6.1.4.1.9.9.815.1.64.1.3.2.1.4	MacAddress	read-only	Assigned MAC Address.
me1200IpSourceGuardControl	1.3.6.1.4.1.9.9.815.1.64.1.4
T/F me1200IpSourceGuardControlTranslateDynamicToStatic	1.3.6.1.4.1.9.9.815.1.64.1.4.1	TruthValue	read-write	The action to translate all the current dynamic entries to static entries. As this is an action so the value to get is always false(2). Set it to true(1) to do the action.
me1200IpSourceGuardMIBConformance	1.3.6.1.4.1.9.9.815.1.64.2
me1200IpSourceGuardMIBCompliances	1.3.6.1.4.1.9.9.815.1.64.2.1
me1200IpSourceGuardMIBCompliance	1.3.6.1.4.1.9.9.815.1.64.2.1.1			The compliance statement for the implementation.
me1200IpSourceGuardMIBGroups	1.3.6.1.4.1.9.9.815.1.64.2.2
me1200IpSourceGuardGlobalsInfoGroup	1.3.6.1.4.1.9.9.815.1.64.2.2.1			A collection of objects suitable for bulk operations.
me1200IpSourceGuardInterfaceInfoGroup	1.3.6.1.4.1.9.9.815.1.64.2.2.2			A collection of objects suitable for bulk operations.
me1200IpSourceGuardStaticConfigTableInfoGroup	1.3.6.1.4.1.9.9.815.1.64.2.2.3			A collection of objects suitable for bulk operations.
me1200IpSourceGuardStaticConfigTableRowEditorInfoGroup	1.3.6.1.4.1.9.9.815.1.64.2.2.4			A collection of objects suitable for bulk operations.
me1200IpSourceGuardDynamicStatusTableInfoGroup	1.3.6.1.4.1.9.9.815.1.64.2.2.5			A collection of objects suitable for bulk operations.
me1200IpSourceGuardControlInfoGroup	1.3.6.1.4.1.9.9.815.1.64.2.2.6			A collection of objects suitable for bulk operations.

RFC description

Manages IP source guard configuration to prevent invalid IP-to-MAC bindings on ME1200 switches.

Start monitoring Cisco ME1200 Metro Ethernet switch (IP Source Guard) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ME1200-IP-SOURCE-GUARD-MIB

What Is ME1200-IP-SOURCE-GUARD-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description