All MIBs › SAVI-MIB › saviObjectsIfTrustStatus
saviObjectsIfTrustStatus
Module: SAVI-MIB
OID (symbolic): SAVI-MIB::saviObjectsIfTrustStatus
OID (numeric): 1.3.6.1.2.1.4.40.1.2.1.4
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: The trust status of the interface. no-trust(1), discard dhcp adv/reply and ra packet, dhcp-trust(2), permit dhcp adv/reply packet and discard ra packet, ra-trust(3), permit ra packet and discard dhcp adv/reply packet, dhcp-ra-trust(4), permit dhcp adv/reply and ra packet.
What is saviObjectsIfTrustStatus?
This object controls which control-plane packet types, DHCP and/or Router Advertisement, an interface is trusted to relay: no-trust discards both DHCP replies and RAs, dhcp-trust permits DHCP but discards RAs, ra-trust permits RAs but discards DHCP, and dhcp-ra-trust permits both. Admins configure uplink or server-facing ports as trusted for the relevant protocol while leaving end-host ports untrusted, preventing rogue DHCP servers or RA spoofing from untrusted ports. Setting saviObjectsIfTrustStatus to dhcp-trust(2) on the port connecting to the legitimate DHCP server allows its DHCP replies through while still blocking any router advertisements from that port.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.2.1.4.40.1.2.1.4 snmpwalk -v2c -c public <target> SAVI-MIB::saviObjectsIfTrustStatus
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.2.1.4.40.1.2.1.4.1 snmpget -v2c -c public <target> SAVI-MIB::saviObjectsIfTrustStatus.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.2.1.4.40.1.2.1.4.1 i <value>
Start monitoring vendor-neutral, standards-based IETF MIB, switches/routers implementing SAVI source address validation with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the SAVI-MIB::saviObjectsIfTrustStatus OID value, configure state conditions and alerts, and monitor any vendor-neutral, standards-based IETF MIB, switches/routers implementing SAVI source address validation from a single console.
OID Breakdown
Upper-level ancestors (7 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.2 | mgmt | APERTUS-NPG-MIB |
| 1.3.6.1.2.1 | mib_2 | AXON-MIB |
| 1.3.6.1.2.1.4 | ip | CHECKPOINT-MIB-2 |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.2.1.4.40 | saviMIB | SAVI-MIB |
| 1.3.6.1.2.1.4.40.1 | saviObjects | SAVI-MIB |
| 1.3.6.1.2.1.4.40.1.2 | saviObjectsIfTable | SAVI-MIB |
| 1.3.6.1.2.1.4.40.1.2.1 | saviObjectsIfEntry | SAVI-MIB |
| 1.3.6.1.2.1.4.40.1.2.1.4 | saviObjectsIfTrustStatus | SAVI-MIB |