TN-IP-SOURCE-GUARD-MIB

All MIBs › TN-IP-SOURCE-GUARD-MIB

Organization: Transition Networks, Inc.

Last Updated: 2012-09-10

Category: Security and Filtering, Transition Networks Media Converters

Description: Manages Transition Networks IP source guard binding table and port filtering policy.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TN-IP-SOURCE-GUARD-MIB?

TN-IP-SOURCE-GUARD-MIB is a vendor-specific SNMP module from Transition Networks used to configure and monitor the IP Source Guard security feature on their managed Ethernet switches. It exposes configuration data such as global and per-interface enable modes, maximum allowed dynamic clients, and static IP-to-MAC-to-VLAN-to-port binding tables that filter traffic on DHCP-snooping-untrusted ports. In monitoring terms it is used to track the operational status of anti-spoofing enforcement per port and to audit which static and dynamic bindings are currently active, rather than to report hardware health metrics like temperature or CPU load. It typically works alongside DHCP Snooping tables on the same device and complements standard interface MIBs (IF-MIB) for port identification. It is deployed on access-layer switches in enterprise or carrier networks where preventing IP address spoofing on untrusted, DHCP-snooped ports is required for security compliance. Engineers can download the TN-IP-SOURCE-GUARD-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TN-IP-SOURCE-GUARD-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Transition Networks managed Ethernet switch

Monitoring Examples

An administrator would poll tnIPSourceGuardIfTable to check tnIPSourceGuardIfMode per interface and confirm that source guard is enabled on all untrusted access ports, and check tnIPSourceGuardIfMaxDynamicClients to see if a port is near its client limit (which could indicate a spoofing attempt or misconfigured host cluster). Polling tnIPSourceGuardStaticTable entries (tnIPSourceGuardStaticPort, tnIPSourceGuardStaticVlanID) verifies that manually configured bindings match intended device inventory. A sudden absence of expected dynamic-to-static entries after tnIPSourceGuardDynamicToStatic is invoked would signal a binding conversion failure worth investigating.

What Can Be Monitored

IP source guard global enable state
per-port source guard mode
maximum dynamic clients per port
static IP-MAC-VLAN-port bindings
dynamic-to-static binding conversion status

Imported Objects

From ENTITY-MIB

entPhysicalIndex

OBJECT-TYPE

From IF-MIB

InterfaceIndex
ifIndex	OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressPrefixLength
InetAddressType

From SNMPv2-CONF

NOTIFICATION-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION
TimeStamp
TruthValue

From TRANSITION-SMI

tnProducts

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
tnIPSourceGuardMIB	1.3.6.1.4.1.868.2.5.31			The mib module for IP Source Guard. IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.
tnIPSourceGuardMIBObjects	1.3.6.1.4.1.868.2.5.31.1
tnIPSourceGuardMgmt	1.3.6.1.4.1.868.2.5.31.1.1
tnIPSourceGuardTable	1.3.6.1.4.1.868.2.5.31.1.1.1		not-accessible	This table is for user to configure the global settings of IP Source Guard.
tnIPSourceGuardEntry	1.3.6.1.4.1.868.2.5.31.1.1.1.1		not-accessible	Each entry represents a global configuration of IP Source Guard.
T/F tnIPSourceGuardGlobalMode	1.3.6.1.4.1.868.2.5.31.1.1.1.1.1	TruthValue	read-write	Set true(1) to enable or false(2) to disable the global IP Source Guard function. Only when both Global Mode and Port Mode on a given port are enabled, IP Source Guard is enabled on this given port.
T/F tnIPSourceGuardDynamicToStatic	1.3.6.1.4.1.868.2.5.31.1.1.1.1.2	TruthValue	read-write	Set true(1) to translate all dynamic entries to static entries. It will be always returned the default value false(2) when queried.
tnIPSourceGuardIfTable	1.3.6.1.4.1.868.2.5.31.1.1.2		not-accessible	This table lets user to configure the IP Source Guard for each port.
tnIPSourceGuardIfEntry	1.3.6.1.4.1.868.2.5.31.1.1.2.1		not-accessible	Each entry represents a IP Source Guard setting on a port.
T/F tnIPSourceGuardIfMode	1.3.6.1.4.1.868.2.5.31.1.1.2.1.1	TruthValue	read-write	Set true(1) to enable or false(2) to disable the IP Source Guard function on the given port. Only when both Global Mode and Port Mode on a given port are enabled, IP Source Guard is enabled on this given port.
INT tnIPSourceGuardIfMaxDynamicClients	1.3.6.1.4.1.868.2.5.31.1.1.2.1.2	INTEGER	read-write	Specify the maximum number of dynamic clients that can be learned on given port. This value can be 0, 1, 2 or unlimited. If the port mode is enabled and the value of max dynamic client is equal to 0, it means only allow the IP packets forwarding that are matched in static entries on the specific port.
tnIPSourceGuardStaticTable	1.3.6.1.4.1.868.2.5.31.1.1.3		not-accessible	This table lets user to configure the static entries for IP Source Guard.
tnIPSourceGuardStaticEntry	1.3.6.1.4.1.868.2.5.31.1.1.3.1		not-accessible	Each entry represents a static entry of IP Source Guard.
NUM tnIPSourceGuardStaticPort	1.3.6.1.4.1.868.2.5.31.1.1.3.1.1	InterfaceIndex	not-accessible	The port number for the settings.
INT tnIPSourceGuardStaticVlanID	1.3.6.1.4.1.868.2.5.31.1.1.3.1.2	INTEGER	not-accessible	The vlan id for the settings.
IPt tnIPSourceGuardStaticAddrType	1.3.6.1.4.1.868.2.5.31.1.1.3.1.3	InetAddressType	not-accessible	Address type of Source IP. For a detailed description of this type, please refer to INET-ADDRESS-MIB.
IP tnIPSourceGuardStaticAddr	1.3.6.1.4.1.868.2.5.31.1.1.3.1.4	InetAddress	not-accessible	Address of Source IP. For a detailed description of this type, please refer to INET-ADDRESS-MIB.
ADR tnIPSourceGuardStaticMask	1.3.6.1.4.1.868.2.5.31.1.1.3.1.5	InetAddressPrefixLength	not-accessible	Mask of Source IP. For a detailed description of this type, please refer to INET-ADDRESS-MIB.
MAC tnIPSourceGuardStaticMacAddress	1.3.6.1.4.1.868.2.5.31.1.1.3.1.6	MacAddress	read-create	Mac Address of Source IP.
ROW tnIPSourceGuardStaticRowStatus	1.3.6.1.4.1.868.2.5.31.1.1.3.1.7	RowStatus	read-create	Row status of static IP Source Guard.
tnIPSourceGuardDynamicTable	1.3.6.1.4.1.868.2.5.31.1.1.4		not-accessible	This table lets user to configure the dynamic entries for IP Source Guard.
tnIPSourceGuardDynamicEntry	1.3.6.1.4.1.868.2.5.31.1.1.4.1		not-accessible	Each entry represents a dynamic entry of IP Source Guard.
NUM tnIPSourceGuardDynamicPort	1.3.6.1.4.1.868.2.5.31.1.1.4.1.1	InterfaceIndex	not-accessible	The port number for the settings.
INT tnIPSourceGuardDynamicVlanID	1.3.6.1.4.1.868.2.5.31.1.1.4.1.2	INTEGER	not-accessible	The vlan id for the settings.
IPt tnIPSourceGuardDynamicAddrType	1.3.6.1.4.1.868.2.5.31.1.1.4.1.3	InetAddressType	not-accessible	Address type of Source IP. For a detailed description of this type, please refer to INET-ADDRESS-MIB.
IP tnIPSourceGuardDynamicAddr	1.3.6.1.4.1.868.2.5.31.1.1.4.1.4	InetAddress	not-accessible	Address of Source IP. For a detailed description of this type, please refer to INET-ADDRESS-MIB.
ADR tnIPSourceGuardDynamicMask	1.3.6.1.4.1.868.2.5.31.1.1.4.1.5	InetAddressPrefixLength	not-accessible	Mask of Source IP. For a detailed description of this type, please refer to INET-ADDRESS-MIB.
MAC tnIPSourceGuardDynamicMacAddress	1.3.6.1.4.1.868.2.5.31.1.1.4.1.6	MacAddress	read-only	Mac Address of Source IP.
tnIPSourceGuardMIBNotifications	1.3.6.1.4.1.868.2.5.31.2

RFC description

Transition Networks MIB for managing IP Source Guard security features that validate source IP addresses against DHCP snooping bindings to prevent spoofing attacks.

Start monitoring Transition Networks managed Ethernet switch (IP Source Guard binding/anti-spoofing status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TN-IP-SOURCE-GUARD-MIB

What Is TN-IP-SOURCE-GUARD-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description