MY-SMP-MIB

All MIBs › MY-SMP-MIB

Organization: D-Link Crop.

Last Updated: 2004-09-09

Category: SNMP Framework

Description: Manages D-Link switch Simple Management Protocol configuration and access control.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is MY-SMP-MIB?

MY-SMP-MIB is a D-Link proprietary MIB implementing a security case that restricts MIB access to a specified SMP (management) server only. Its objects configure the authorized SMP server address and its authentication key, an event-notification batch-size setting, policy-deletion and policy-checksum/timeout controls, and a policy-group table tracking group index and member count. As a configuration/security MIB it lets an administrator confirm which SMP server is authorized to manage the device and audit configured policy groups. It is deployed on D-Link switches using SMP-restricted management access. Engineers can download the MY-SMP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in MY-SMP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switches (SMP-restricted management)

Monitoring Examples

A security administrator confirms mySMPServer points to the correct authorized management server before troubleshooting why an unauthorized station can't manage the switch, which is the SMP restriction working as designed.

What Can Be Monitored

authorized SMP server configuration
policy group definitions

Imported Objects

From IF-MIB

ifIndex

OBJECT-TYPE

From MY-SMI

myMgmt

OBJECT-IDENTITY

From MY-SNMP-AGENT-MIB

Community

From MY-TC

ConfigStatus
IfIndex

From Q-BRIDGE-MIB

VlanId

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
mySMPMIB	1.3.6.1.4.1.171.10.97.2.39			This module defines the MIB security case requires. At present, this MIB could only be accessed by the specified SMP Server.
mySMPMIBObjects	1.3.6.1.4.1.171.10.97.2.39.1
IP mySMPServer	1.3.6.1.4.1.171.10.97.2.39.1.1	IpAddress	read-write	IP addresses for the SMP Server.
COM mySMPServerKey	1.3.6.1.4.1.171.10.97.2.39.1.2	Community	read-write	Keys for the SMP Server.
U32 mySMPEventSendSlice	1.3.6.1.4.1.171.10.97.2.39.1.3	Unsigned32	read-write	The minimum interval of sending SU security event. The variable value must be less than the one defined by mySMPHICheckInterval.
I32 mySMPPolicyDelete	1.3.6.1.4.1.171.10.97.2.39.1.4	Integer32	read-write	This variable value: 0: No action is required; other values:Delete all policy information.
OCT mySMPPolicyChecksum	1.3.6.1.4.1.171.10.97.2.39.1.5	OCTET STRING	read-only	The checksum information set on the current SMP policy table.
U32 mySMPPolicyTimeout	1.3.6.1.4.1.171.10.97.2.39.1.6	Unsigned32	read-write	Timeout time of SMP policy.
mySMPFrameRelayTable	1.3.6.1.4.1.171.10.97.2.39.1.7		not-accessible	SMP message forward table.
mySMPFrameRelayEntry	1.3.6.1.4.1.171.10.97.2.39.1.7.1		not-accessible	SMP message forward table.
U32 mySMPFrameRelayIndex	1.3.6.1.4.1.171.10.97.2.39.1.7.1.1	Unsigned32	read-only	SMP message forward table index.
OCT mySMPFrameRelayContent	1.3.6.1.4.1.171.10.97.2.39.1.7.1.2	OCTET STRING	read-write	SMP message content with maximal 1024 bytes.
U32 mySMPFrameRelayLength	1.3.6.1.4.1.171.10.97.2.39.1.7.1.3	Unsigned32	read-write	SMP message length.
IFI mySMPFrameRelayDestPort	1.3.6.1.4.1.171.10.97.2.39.1.7.1.4	IfIndex	read-write	The index of destination port SMP messages are sent to.
VLA mySMPFrameRelayDestVlan	1.3.6.1.4.1.171.10.97.2.39.1.7.1.5	VlanId	read-write	The VLAN ID of destination port SMP messages are sent to.
mySMPPolicyTable	1.3.6.1.4.1.171.10.97.2.39.1.8		not-accessible	Security policy table.
mySMPPolicyEntry	1.3.6.1.4.1.171.10.97.2.39.1.8.1		not-accessible	SMP policy table.
U32 mySMPGroupIndex	1.3.6.1.4.1.171.10.97.2.39.1.8.1.1	Unsigned32	read-only	The index of the policy group which the current policy is in.
U32 mySMPPolicyIndex	1.3.6.1.4.1.171.10.97.2.39.1.8.1.2	Unsigned32	read-only	The policy index.
CON mySMPPolicyStatus	1.3.6.1.4.1.171.10.97.2.39.1.8.1.3	ConfigStatus	read-write	Entry state fields. For the detailed information, pls refer to MY-TC.mib.
U32 mySMPPolicyNumber	1.3.6.1.4.1.171.10.97.2.39.1.8.1.4	Unsigned32	read-write	The policy sequence number.
IFI mySMPPolicyInstallPort	1.3.6.1.4.1.171.10.97.2.39.1.8.1.5	IfIndex	read-write	The index of port installed the policy.
INT mySMPPolicyType	1.3.6.1.4.1.171.10.97.2.39.1.8.1.6	INTEGER	read-write	The action of policy template. Hi-isolate application failure can be detected by HI only. isolate: isolation action; blocked: blocking action; addrBind: address-binding action.
OCT mySMPPolicyContent	1.3.6.1.4.1.171.10.97.2.39.1.8.1.7	OCTET STRING	read-write	Content(80 bytes) of policy template.
OCT mySMPPolicyMask	1.3.6.1.4.1.171.10.97.2.39.1.8.1.8	OCTET STRING	read-write	Mask information(80 bytes) of policy template.
STR mySMPPolicyName	1.3.6.1.4.1.171.10.97.2.39.1.8.1.9	DisplayString	read-write	Policy name fields.
mySMPPolicyGroupTable	1.3.6.1.4.1.171.10.97.2.39.1.9		not-accessible	Security policy group.
mySMPPolicyGroupEntry	1.3.6.1.4.1.171.10.97.2.39.1.9.1		not-accessible	SMP policy group.
U32 mySMPPolicyGroupIndex	1.3.6.1.4.1.171.10.97.2.39.1.9.1.1	Unsigned32	read-only	Policy group index.
U32 mySMPPolicyGroupCount	1.3.6.1.4.1.171.10.97.2.39.1.9.1.2	Unsigned32	read-write	Policy count in the policy group.
OCT mySMPPolicyGroupChecksum	1.3.6.1.4.1.171.10.97.2.39.1.9.1.3	OCTET STRING	read-write	The sole identification in the policy group.
ROW mySMPPolicyGroupStatus	1.3.6.1.4.1.171.10.97.2.39.1.9.1.4	RowStatus	read-create	The status of this conceptual row.
mySMPMIBConformance	1.3.6.1.4.1.171.10.97.2.39.3
mySMPMIBCompliances	1.3.6.1.4.1.171.10.97.2.39.3.1
myDeviceMIBCompliance	1.3.6.1.4.1.171.10.97.2.39.3.1.1			The compliance statement for entities which implement the My SMP MIB
mySMPMIBGroups	1.3.6.1.4.1.171.10.97.2.39.3.2
mySMPServerMibGroup	1.3.6.1.4.1.171.10.97.2.39.3.2.1			Collection of SMP Server information.
mySMPClientMibGroup	1.3.6.1.4.1.171.10.97.2.39.3.2.2			Collection of restricted information of SMP Client management.
mySMPPolicyMibGroup	1.3.6.1.4.1.171.10.97.2.39.3.2.3			Policy information collection.
mySMPFrameRelayMibGroup	1.3.6.1.4.1.171.10.97.2.39.3.2.4			Information collection of message forward table.
mySMPTraps	1.3.6.1.4.1.171.10.97.2.39.65535
IP mySMPSwitchIP	1.3.6.1.4.1.171.10.97.2.39.65535.1	IpAddress	accessible-for-notify	IP addresses for the switch sending the Trap.
IFI mySMPSwitchInterfaceID	1.3.6.1.4.1.171.10.97.2.39.65535.2	IfIndex	accessible-for-notify	The interface receiving the messages to be forwarded.
VLA mySMPSwitchInterfaceVLANID	1.3.6.1.4.1.171.10.97.2.39.65535.3	VlanId	accessible-for-notify	The VLAN ID of the switch interface receiving the messages to be forwarded.
U32 mySMPFrameContentLength	1.3.6.1.4.1.171.10.97.2.39.65535.4	Unsigned32	accessible-for-notify	The encapsulated message length, which can not exceed 1024.
OCT mySMPFrameContent	1.3.6.1.4.1.171.10.97.2.39.65535.5	OCTET STRING	accessible-for-notify	The encapsulated message whose length can not exceed 1024.
NTF mySMPFrameRelayTrap	1.3.6.1.4.1.171.10.97.2.39.65535.6			Trap message includes: IP address for the specified received message, port receiving the message, message length and message content.
OCT mySMPArpAttackSubnetIP	1.3.6.1.4.1.171.10.97.2.39.65535.7	OCTET STRING	accessible-for-notify	IP addresses for all subnets of SVI where the attack source locates.
I32 mySMPArpAttackSubnetIPNum	1.3.6.1.4.1.171.10.97.2.39.65535.8	Integer32	accessible-for-notify	Subnet IP address number.
I32 mySMPArpAttackInterfaceSlot	1.3.6.1.4.1.171.10.97.2.39.65535.9	Integer32	accessible-for-notify	The slot number for the device connecting the attack source.
I32 mySMPArpAttackInterfacePort	1.3.6.1.4.1.171.10.97.2.39.65535.10	Integer32	accessible-for-notify	The interface number for the device connecting the attack source.
VLA mySMPArpAttackInterfaceVlanID	1.3.6.1.4.1.171.10.97.2.39.65535.11	VlanId	accessible-for-notify	The VLAN ID of VLAN where the attack source locates.
OCT mySMPArpAttackFrameContent	1.3.6.1.4.1.171.10.97.2.39.65535.12	OCTET STRING	accessible-for-notify	The ARP messages sent from the attack source.
T/F mySMPArpAttackStatus	1.3.6.1.4.1.171.10.97.2.39.65535.13	TruthValue	accessible-for-notify	Show whether the device is attacked by the attack source or not. true: attack occurred; false: attack has been removed.
INT mySMPArpAttackCriticalStatus	1.3.6.1.4.1.171.10.97.2.39.65535.14	INTEGER	accessible-for-notify	The severity level of device attack by attack source: critical(1), -- Slight ARP attack, infulencing normal operation of the network and advertising the SMP Server. emergencies(2) -- Severe ARP attack, leading to network crash. System blocks this attack automatically and advertise the SMP Server.
MAC mySMPArpAttackMac	1.3.6.1.4.1.171.10.97.2.39.65535.15	MacAddress	accessible-for-notify	MAC address for the device connecting the attack source.
I32 mySMPArpAttackInterfaceIndex	1.3.6.1.4.1.171.10.97.2.39.65535.16	Integer32	accessible-for-notify	The interface index for the device connecting the attack source.
NTF mySMPArpAttackTrap	1.3.6.1.4.1.171.10.97.2.39.65535.17			Trap message includes: IP addresses for all subnets of SVI where the attack source locates, Subnet IP address number, Slot number the attack source attacks, Port number the attack source attacks, VLAN ID of the VLAN the attack source belongs to, ARP message(64 bytes), Advertisement of attack occurrance and removal, MAC address for the device connecting the attack source, Interface index for the device connecting the attack source.

RFC description

Manages SMP (Security Management Protocol) server configuration and security policies for D-Link devices with restricted access controls.

Start monitoring D-Link managed switch (SMP-restricted management access) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download MY-SMP-MIB

What Is MY-SMP-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description