SLE-DHCP-SNOOPING-MIB

All MIBs › SLE-DHCP-SNOOPING-MIB

Organization: HANASOFT

Last Updated: 2005-07-29

Category: DASAN Networks SLE OLT Management

Description: Manages Hanasoft SLE OLT DHCP snooping security policy to prevent rogue DHCP server attacks.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is SLE-DHCP-SNOOPING-MIB?

SLE-DHCP-SNOOPING-MIB is a Hanasoft (Dasan SLE OLT platform) vendor-specific MIB for managing DHCP Snooping and the associated IP Source Guard security feature on SLE-series access/OLT devices. It exposes a device-level enable flag (sleFeatureEnable) plus per-port IP Source Guard configuration in slePortSrcGuardConfigTable (slePortSrcGuardIndex, slePortSrcGuardEnable) and a table of learned bindings in slePortSrcGuardAddressTable (slePortSrcGuardAddressIp, AddressMask, AddressMac, AddressLease), along with request/status/result control objects and notifications such as slePortSrcGuardAddressCreated/Destroyed. This lets operators confirm DHCP Snooping is active and see exactly which IP-to-MAC bindings were learned per port, the basis for blocking rogue DHCP servers and spoofed source addresses. It relies on the DASAN-SMI enterprise tree and SLE-TC-MIB textual conventions shared across other SLE feature MIBs. It is deployed on Hanasoft SLE OLT/access switches in service-provider access networks, and administrators can download the SLE-DHCP-SNOOPING-MIB file to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in SLE-DHCP-SNOOPING-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Hanasoft SLE-series OLT/access switches

Monitoring Examples

An operator polls slePortSrcGuardAddressTable to see which IP/MAC bindings were learned via DHCP Snooping on a given port and checks that slePortSrcGuardEnable is set to enable(1); an IP Source Guard port stuck at disable(0) or missing expected bindings would indicate the port is unprotected against rogue DHCP or spoofed-address attacks.

What Can Be Monitored

DHCP Snooping feature enable state
per-port IP Source Guard enable status
learned IP/MAC/lease bindings table
binding creation/destruction notifications
control command status/result objects

Imported Objects

From DASAN-SMI

sleMgmt

OBJECT-IDENTITY

From IF-MIB

InterfaceIndex

From SLE-TC-MIB

SleControlRequestResultType
SleControlStatusType

From SNMPv2-SMI

Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

MacAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
sleDhcpSnooping	1.3.6.1.4.1.6296.101.12			This MIB contains all needed informations about DHCP Snooping and all supported sle DHCP Snooping features.
sleGlobal	1.3.6.1.4.1.6296.101.12.1
sleGlobalInfo	1.3.6.1.4.1.6296.101.12.1.1
INT sleFeatureEnable	1.3.6.1.4.1.6296.101.12.1.1.1	INTEGER	read-only	This object indicates whether the DHCP Snooping feature is enabled at the device level.
sleGlobalControl	1.3.6.1.4.1.6296.101.12.1.2
INT sleGlobalControlRequest	1.3.6.1.4.1.6296.101.12.1.2.1	INTEGER	read-write	The request of a user command.
SLE sleGlobalControlStatus	1.3.6.1.4.1.6296.101.12.1.2.2	SleControlStatusType	read-only	The status of a user command.
G32 sleGlobalControlTimer	1.3.6.1.4.1.6296.101.12.1.2.3	Gauge32	read-write	The maximum wait time for the manager for a long running user command.
TIK sleGlobalControlTimeStamp	1.3.6.1.4.1.6296.101.12.1.2.4	TimeTicks	read-only	The time stamp of the last command (end of command).
SLE sleGlobalControlReqResult	1.3.6.1.4.1.6296.101.12.1.2.5	SleControlRequestResultType	read-only	The result of the last user command.
INT sleGlobalControlFeatureEnable	1.3.6.1.4.1.6296.101.12.1.2.6	INTEGER	read-write	Description.
sleGlobalNotification	1.3.6.1.4.1.6296.101.12.1.3
NTF sleGlobalFeatureEnableChanged	1.3.6.1.4.1.6296.101.12.1.3.1			Description.
slePortSrcGuard	1.3.6.1.4.1.6296.101.12.2
slePortSrcGuardConfig	1.3.6.1.4.1.6296.101.12.2.1
slePortSrcGuardConfigTable	1.3.6.1.4.1.6296.101.12.2.1.1		not-accessible	A table provides the mechanism to enable or disable IP Source Guard at each physical port capable of this feature. When DHCP Snooping is enabled at an interface, a list of IP addresses is obtained through DHCP Snooping for this particular port. If IP Source Guard is enabled, only traffic from these IP addresses is allowed to pass through the port.
slePortSrcGuardConfigEntry	1.3.6.1.4.1.6296.101.12.2.1.1.1		not-accessible	A row instance contains the configuration to enable or disable IP Source Guard at each physical port capable of this feature.
INT slePortSrcGuardIndex	1.3.6.1.4.1.6296.101.12.2.1.1.1.1	INTEGER	read-only	Same as sleBridgePortIndex.
INT slePortSrcGuardEnable	1.3.6.1.4.1.6296.101.12.2.1.1.1.2	INTEGER	read-only	This object indicates whether IP Source Guard is enabled at this port. If this object is set to 'true', IP Source Guard is enabled. Traffic coming to this interface will be forwarded if it is from the list of IP addresses obtained through DHCP Snooping. Otherwise, it is denied. If this object is set to 'false', IP Source Guard is disabled.
slePortSrcGuardConfigControl	1.3.6.1.4.1.6296.101.12.2.1.2
INT slePortSrcGuardConfigControlRequest	1.3.6.1.4.1.6296.101.12.2.1.2.1	INTEGER	read-write	The request of a user command.
SLE slePortSrcGuardConfigControlStatus	1.3.6.1.4.1.6296.101.12.2.1.2.2	SleControlStatusType	read-only	The status of a user command.
G32 slePortSrcGuardConfigControlTimer	1.3.6.1.4.1.6296.101.12.2.1.2.3	Gauge32	read-write	The maximum wait time for the manager for a long running user command.
TIK slePortSrcGuardConfigControlTimeStamp	1.3.6.1.4.1.6296.101.12.2.1.2.4	TimeTicks	read-only	The time stamp of the last command (end of command).
SLE slePortSrcGuardConfigControlReqResult	1.3.6.1.4.1.6296.101.12.2.1.2.5	SleControlRequestResultType	read-only	The result of the last user command.
INT slePortSrcGuardConfigControlIndex	1.3.6.1.4.1.6296.101.12.2.1.2.6	INTEGER	read-write	The port number that IP Source Guard is enabled at.
INT slePortSrcGuardConfigControlEnable	1.3.6.1.4.1.6296.101.12.2.1.2.7	INTEGER	read-write	The flag to specify whether IP Source Guard is enabled or not.
slePortSrcGuardConfigNotification	1.3.6.1.4.1.6296.101.12.2.1.3
NTF slePortSrcGuardConfigEnableChanged	1.3.6.1.4.1.6296.101.12.2.1.3.1			Description.
slePortSrcGuardAddress	1.3.6.1.4.1.6296.101.12.2.2
slePortSrcGuardAddressTable	1.3.6.1.4.1.6296.101.12.2.2.1		not-accessible	A table provides the information on IP addresses used for IP Source Guard purpose at each physical port capable of this feature.
slePortSrcGuardAddressEntry	1.3.6.1.4.1.6296.101.12.2.2.1.1		not-accessible	A row instance contains the IP address type and IP address used for IP Source Guard purpose at each physical port capable of this feature.
IP slePortSrcGuardAddressIp	1.3.6.1.4.1.6296.101.12.2.2.1.1.1	IpAddress	read-only	This object indicates the IP address obtained at this port through DHCP Snooping.
IP slePortSrcGuardAddressMask	1.3.6.1.4.1.6296.101.12.2.2.1.1.2	IpAddress	read-only	This object indicates the subnet mask of IP address obtained at this port through DHCP Snooping.
MAC slePortSrcGuardAddressMac	1.3.6.1.4.1.6296.101.12.2.2.1.1.3	MacAddress	read-only	This object indicates the MAC responding to IP address obtained at this port through DHCP Snooping.
I32 slePortSrcGuardAddressLease	1.3.6.1.4.1.6296.101.12.2.2.1.1.4	Integer32	read-only	This object indicates the lease time of IP address obtained at this port through DHCP Snooping.
slePortSrcGuardAddressControl	1.3.6.1.4.1.6296.101.12.2.2.2
INT slePortSrcGuardAddressControlRequest	1.3.6.1.4.1.6296.101.12.2.2.2.1	INTEGER	read-write	The request of a user command.
SLE slePortSrcGuardAddressControlStatus	1.3.6.1.4.1.6296.101.12.2.2.2.2	SleControlStatusType	read-only	The status of a user command.
G32 slePortSrcGuardAddressControlTimer	1.3.6.1.4.1.6296.101.12.2.2.2.3	Gauge32	read-write	The maximum wait time for the manager for a long running user command.
TIK slePortSrcGuardAddressControlTimeStamp	1.3.6.1.4.1.6296.101.12.2.2.2.4	TimeTicks	read-only	The time stamp of the last command (end of command).
SLE slePortSrcGuardAddressControlReqResult	1.3.6.1.4.1.6296.101.12.2.2.2.5	SleControlRequestResultType	read-only	The result of the last user command.
NUM slePortSrcGuardAddressControlIndex	1.3.6.1.4.1.6296.101.12.2.2.2.6	InterfaceIndex	read-write	Description.
IP slePortSrcGuardAddressControlIp	1.3.6.1.4.1.6296.101.12.2.2.2.7	IpAddress	read-write	Description.
IP slePortSrcGuardAddressControlMask	1.3.6.1.4.1.6296.101.12.2.2.2.8	IpAddress	read-write	Description.
slePortSrcGuardAddressNotification	1.3.6.1.4.1.6296.101.12.2.2.3
NTF slePortSrcGuardAddressCreated	1.3.6.1.4.1.6296.101.12.2.2.3.1			Description.
NTF slePortSrcGuardAddressDestroyed	1.3.6.1.4.1.6296.101.12.2.2.3.2			Description.

RFC description

Vendor-private MIB for DASAN SLE (Secure LAN Equipment); manages DHCP snooping and DHCP-related security features.

Start monitoring Hanasoft SLE-series OLT/access switches (DHCP Snooping/IP Source Guard binding status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download SLE-DHCP-SNOOPING-MIB

What Is SLE-DHCP-SNOOPING-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description