TN-DHCP-SNOOPING-MIB

All MIBs › TN-DHCP-SNOOPING-MIB

Organization: Transition Networks, Inc.

Last Updated: 2015-04-20

Category: DHCP, Security and Filtering, Transition Networks Media Converters

Description: Manages Transition Networks DHCP snooping policy, trusted ports, and binding table.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TN-DHCP-SNOOPING-MIB?

TN-DHCP-SNOOPING-MIB is a Transition Networks proprietary SNMP MIB for the DHCP snooping security feature, which inspects DHCP traffic on untrusted ports to build a binding table of legitimate client IP/MAC/VLAN assignments and block rogue DHCP servers or spoofed clients. It exposes a global mode switch, a per-interface trust-mode table (trusted vs. untrusted uplinks), and a status table of currently assigned/snooped IP-to-MAC-to-port bindings. It supports monitoring the software/security status of the switch: confirming which ports are trusted, and inspecting the live binding table to see which MAC addresses currently hold which IP addresses on which interface/VLAN, useful for detecting IP spoofing or an unauthorized DHCP server. It naturally pairs with TN-DHCP-SERVER-MIB and standard bridge/VLAN MIBs on the same device for complete DHCP security visibility. It is deployed on Transition Networks managed switches in enterprise/industrial access networks needing Layer 2 DHCP security. Engineers can download the TN-DHCP-SNOOPING-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TN-DHCP-SNOOPING-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Transition Networks managed switch

Monitoring Examples

An operator polls tnDhcpSnoopingConfigInterfaceTable/tnDhcpSnoopingConfigInterfaceEntry to verify tnDhcpSnoopingConfigInterfaceTrustMode correctly marks only the uplink port as trusted, since an untrusted port set to trusted would allow a rogue DHCP server to operate. tnDhcpSnoopingStatusAssignedIpTable/tnDhcpSnoopingStatusAssignedIpEntry is checked to see live bindings of tnDhcpSnoopingStatusAssignedIpMacAddress to tnDhcpSnoopingStatusAssignedIpIpAddress per tnDhcpSnoopingStatusAssignedIpIfIndex/VlanId, letting an admin spot an unexpected duplicate IP or an unrecognized MAC address on the network.

What Can Be Monitored

global DHCP snooping mode
per-port trust mode
live IP/MAC/VLAN binding table
port/VLAN of assigned addresses

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
TEXTUAL-CONVENTION
TruthValue

From TN-TC

TNInterfaceIndex

From TRANSITION-SMI

tnProducts

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
tnDhcpSnoopingMib	1.3.6.1.4.1.868.2.5.147			The mib module for DHCP settings.
tnDhcpSnoopingMibObjects	1.3.6.1.4.1.868.2.5.147.1
tnDhcpSnoopingConfig	1.3.6.1.4.1.868.2.5.147.1.2
tnDhcpSnoopingConfigGlobals	1.3.6.1.4.1.868.2.5.147.1.2.1
T/F tnDhcpSnoopingConfigGlobalsMode	1.3.6.1.4.1.868.2.5.147.1.2.1.1	TruthValue	read-write	Indicates the DHCP snooping mode operation. Possible modes are - true: Enable DHCP snooping mode operation. When DHCP snooping mode operation is enabled, the DHCP request messages will be forwarded to trusted ports and only allow reply packets from trusted ports. false: Disable DHCP snooping mode operation.
tnDhcpSnoopingConfigInterfaceTable	1.3.6.1.4.1.868.2.5.147.1.2.2		not-accessible	This is a table of DHCP Snooping port configuration parameters
tnDhcpSnoopingConfigInterfaceEntry	1.3.6.1.4.1.868.2.5.147.1.2.2.1		not-accessible	Each port has a set of parameters
NUM tnDhcpSnoopingConfigInterfaceIfIndex	1.3.6.1.4.1.868.2.5.147.1.2.2.1.1	TNInterfaceIndex	not-accessible	Logical interface number of the physical port.
T/F tnDhcpSnoopingConfigInterfaceTrustMode	1.3.6.1.4.1.868.2.5.147.1.2.2.1.2	TruthValue	read-write	Indicates the DHCP snooping port mode. Possible port modes are - true: Configures the port as trusted source of the DHCP messages. false: Configures the port as untrusted source of the DHCP messages.
tnDhcpSnoopingStatus	1.3.6.1.4.1.868.2.5.147.1.3
tnDhcpSnoopingStatusAssignedIpTable	1.3.6.1.4.1.868.2.5.147.1.3.1		not-accessible	This is a table of assigned IP information in DHCP Snooping
tnDhcpSnoopingStatusAssignedIpEntry	1.3.6.1.4.1.868.2.5.147.1.3.1.1		not-accessible	Each entry has a set of parameters
MAC tnDhcpSnoopingStatusAssignedIpMacAddress	1.3.6.1.4.1.868.2.5.147.1.3.1.1.1	MacAddress	not-accessible	MAC address.
I32 tnDhcpSnoopingStatusAssignedIpVlanId	1.3.6.1.4.1.868.2.5.147.1.3.1.1.2	Integer32	not-accessible	The VLAN id of the VLAN.
NUM tnDhcpSnoopingStatusAssignedIpIfIndex	1.3.6.1.4.1.868.2.5.147.1.3.1.1.3	TNInterfaceIndex	read-only	Logical interface number of the physical port of the DHCP client.
IP tnDhcpSnoopingStatusAssignedIpIpAddress	1.3.6.1.4.1.868.2.5.147.1.3.1.1.4	IpAddress	read-only	IP address assigned to DHCP client by DHCP server.
IP tnDhcpSnoopingStatusAssignedIpNetmask	1.3.6.1.4.1.868.2.5.147.1.3.1.1.5	IpAddress	read-only	Netmask assigned to DHCP client by DHCP server.
IP tnDhcpSnoopingStatusAssignedIpDhcpServerIp	1.3.6.1.4.1.868.2.5.147.1.3.1.1.6	IpAddress	read-only	IP address of the DHCP server that assigns the IP address and netmask.
tnDhcpSnoopingControl	1.3.6.1.4.1.868.2.5.147.1.4
tnDhcpSnoopingControlInterfaceClearStatisticsTable	1.3.6.1.4.1.868.2.5.147.1.4.1		not-accessible	This is a table to clear port statistics in DHCP Snooping
tnDhcpSnoopingControlInterfaceClearStatisticsEntry	1.3.6.1.4.1.868.2.5.147.1.4.1.1		not-accessible	Each port has a set of parameters
NUM tnDhcpSnoopingControlInterfaceClearStatisticsIfIndex	1.3.6.1.4.1.868.2.5.147.1.4.1.1.1	TNInterfaceIndex	not-accessible	Logical interface number of the physical port.
T/F tnDhcpSnoopingControlInterfaceClearStatisticsClear	1.3.6.1.4.1.868.2.5.147.1.4.1.1.2	TruthValue	read-write	clear statistics per physical port.
tnDhcpSnoopingStatistics	1.3.6.1.4.1.868.2.5.147.1.5
tnDhcpSnoopingStatisticsInterfaceTable	1.3.6.1.4.1.868.2.5.147.1.5.2		not-accessible	This is a table of port statistics in DHCP Snooping
tnDhcpSnoopingStatisticsInterfaceEntry	1.3.6.1.4.1.868.2.5.147.1.5.2.1		not-accessible	Each entry has a set of parameters
NUM tnDhcpSnoopingStatisticsInterfaceIfIndex	1.3.6.1.4.1.868.2.5.147.1.5.2.1.1	TNInterfaceIndex	not-accessible	Logical interface number of the physical port.
U32 tnDhcpSnoopingStatisticsInterfaceRxDiscover	1.3.6.1.4.1.868.2.5.147.1.5.2.1.2	Unsigned32	read-only	The number of discover (option 53 with value 1) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxOffer	1.3.6.1.4.1.868.2.5.147.1.5.2.1.3	Unsigned32	read-only	The number of offer (option 53 with value 2) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxRequest	1.3.6.1.4.1.868.2.5.147.1.5.2.1.4	Unsigned32	read-only	The number of request (option 53 with value 3) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxDecline	1.3.6.1.4.1.868.2.5.147.1.5.2.1.5	Unsigned32	read-only	The number of decline (option 53 with value 4) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxAck	1.3.6.1.4.1.868.2.5.147.1.5.2.1.6	Unsigned32	read-only	The number of ACK (option 53 with value 5) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxNak	1.3.6.1.4.1.868.2.5.147.1.5.2.1.7	Unsigned32	read-only	The number of NAK (option 53 with value 6) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxRelease	1.3.6.1.4.1.868.2.5.147.1.5.2.1.8	Unsigned32	read-only	The number of release (option 53 with value 7) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxInform	1.3.6.1.4.1.868.2.5.147.1.5.2.1.9	Unsigned32	read-only	The number of inform (option 53 with value 8) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxLeaseQuery	1.3.6.1.4.1.868.2.5.147.1.5.2.1.10	Unsigned32	read-only	The number of lease query (option 53 with value 10) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxLeaseUnassigned	1.3.6.1.4.1.868.2.5.147.1.5.2.1.11	Unsigned32	read-only	The number of lease unassigned (option 53 with value 11) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxLeaseUnknown	1.3.6.1.4.1.868.2.5.147.1.5.2.1.12	Unsigned32	read-only	The number of lease unknown (option 53 with value 12) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxLeaseActive	1.3.6.1.4.1.868.2.5.147.1.5.2.1.13	Unsigned32	read-only	The number of lease active (option 53 with value 13) packets received.
U32 tnDhcpSnoopingStatisticsInterfaceRxDiscardChksumErr	1.3.6.1.4.1.868.2.5.147.1.5.2.1.14	Unsigned32	read-only	The number of discard packet that IP/UDP checksum is error.
U32 tnDhcpSnoopingStatisticsInterfaceRxDiscardUntrust	1.3.6.1.4.1.868.2.5.147.1.5.2.1.15	Unsigned32	read-only	The number of discard packet that are coming from untrusted port.
U32 tnDhcpSnoopingStatisticsInterfaceTxDiscover	1.3.6.1.4.1.868.2.5.147.1.5.2.1.16	Unsigned32	read-only	The number of discover (option 53 with value 1) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxOffer	1.3.6.1.4.1.868.2.5.147.1.5.2.1.17	Unsigned32	read-only	The number of offer (option 53 with value 2) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxRequest	1.3.6.1.4.1.868.2.5.147.1.5.2.1.18	Unsigned32	read-only	The number of request (option 53 with value 3) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxDecline	1.3.6.1.4.1.868.2.5.147.1.5.2.1.19	Unsigned32	read-only	The number of decline (option 53 with value 4) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxAck	1.3.6.1.4.1.868.2.5.147.1.5.2.1.20	Unsigned32	read-only	The number of ACK (option 53 with value 5) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxNak	1.3.6.1.4.1.868.2.5.147.1.5.2.1.21	Unsigned32	read-only	The number of NAK (option 53 with value 6) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxRelease	1.3.6.1.4.1.868.2.5.147.1.5.2.1.22	Unsigned32	read-only	The number of release (option 53 with value 7) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxInform	1.3.6.1.4.1.868.2.5.147.1.5.2.1.23	Unsigned32	read-only	The number of inform (option 53 with value 8) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxLeaseQuery	1.3.6.1.4.1.868.2.5.147.1.5.2.1.24	Unsigned32	read-only	The number of lease query (option 53 with value 10) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxLeaseUnassigned	1.3.6.1.4.1.868.2.5.147.1.5.2.1.25	Unsigned32	read-only	The number of lease unassigned (option 53 with value 11) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxLeaseUnknown	1.3.6.1.4.1.868.2.5.147.1.5.2.1.26	Unsigned32	read-only	The number of lease unknown (option 53 with value 12) packets transmited.
U32 tnDhcpSnoopingStatisticsInterfaceTxLeaseActive	1.3.6.1.4.1.868.2.5.147.1.5.2.1.27	Unsigned32	read-only	The number of lease active (option 53 with value 13) packets transmited.
tnDhcpSnoopingMibConformance	1.3.6.1.4.1.868.2.5.147.2
tnDhcpSnoopingMibCompliances	1.3.6.1.4.1.868.2.5.147.2.1
tnDhcpSnoopingMibCompliance	1.3.6.1.4.1.868.2.5.147.2.1.1			The compliance statement for the implementation.
tnDhcpSnoopingMibGroups	1.3.6.1.4.1.868.2.5.147.2.2
tnDhcpSnoopingConfigGlobalsInfoGroup	1.3.6.1.4.1.868.2.5.147.2.2.1			A collection of objects suitable for bulk operations.
tnDhcpSnoopingConfigInterfaceInfoGroup	1.3.6.1.4.1.868.2.5.147.2.2.2			A collection of objects suitable for bulk operations.
tnDhcpSnoopingStatusAssignedIpTableInfoGroup	1.3.6.1.4.1.868.2.5.147.2.2.3			A collection of objects suitable for bulk operations.
tnDhcpSnoopingControlInterfaceClearStatisticsTableInfoGroup	1.3.6.1.4.1.868.2.5.147.2.2.4			A collection of objects suitable for bulk operations.
tnDhcpSnoopingStatisticsInterfaceTableInfoGroup	1.3.6.1.4.1.868.2.5.147.2.2.5			A collection of objects suitable for bulk operations.

RFC description

Manages DHCP Snooping configuration on Transition Networks switches.

Start monitoring Transition Networks managed switch (DHCP snooping trust-mode/binding-table status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TN-DHCP-SNOOPING-MIB

What Is TN-DHCP-SNOOPING-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description