TPLINK-DHCPSNOOPING-MIB

All MIBs › TPLINK-DHCPSNOOPING-MIB

Organization: TPLINK

Last Updated: 2012-12-17

Category: Access Control and Authentication, DHCP Management

Description: Manages TP-Link switch DHCP snooping trusted port configuration and binding table management.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TPLINK-DHCPSNOOPING-MIB?

TPLINK-DHCPSNOOPING-MIB is a TP-Link private MIB implementing DHCP snooping, a Layer 2 security feature that builds a binding table of trusted IP-to-MAC-to-port mappings learned from DHCP transactions and uses it to block spoofed or rogue DHCP traffic. It exposes configuration for enabling snooping globally and per VLAN/port, designating trusted uplink ports, and a binding table recording the leased IP address, MAC address, VLAN, and port for each learned client. Its monitoring value is software/configuration status - confirming which ports are trusted, whether snooping is active, and reviewing the binding table to verify legitimate clients are correctly tracked - rather than hardware sensor telemetry. It works together with TPLINK-DHCPFILTERING-MIB and IP-source-guard features in the same TP-Link switch family to form a layered anti-spoofing defense. It is deployed on TP-Link managed switches in networks where DHCP-based attacks (rogue servers, IP spoofing) must be prevented. Engineers can download the TPLINK-DHCPSNOOPING-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TPLINK-DHCPSNOOPING-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

TP-Link managed switch

Monitoring Examples

Specific table/object names were not present in the provided sample, so a concrete polling example is not grounded in real identifiers; based on the module description, an administrator would review the DHCP snooping binding table to confirm each active client's learned IP/MAC/port mapping and check the trusted-port configuration to ensure only legitimate uplinks can relay DHCP server responses.

What Can Be Monitored

DHCP snooping enable/disable state
trusted port configuration
DHCP binding table entries (IP, MAC, VLAN, port)

Imported Objects

From RFC1213-MIB

ifIndex

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE

From TPLINK-MIB

tplinkMgmt

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
INT dhcpSnoopingEnable	1.3.6.1.4.1.11863.6.27.1.1.1	INTEGER	read-write	0. disable 1. enable Enable or disable the DHCP Snooping function globally.
dhcpSnoopingGlobalConfig	1.3.6.1.4.1.11863.6.27.1.1
dhcpSnoopingOption82Config	1.3.6.1.4.1.11863.6.27.1.2
INT dhcpSnoopingOption82ConfigCircuitCustomization	1.3.6.1.4.1.11863.6.27.1.2.1.1.4	INTEGER	read-write	0. disable 1. enable Enable/Disable the switch to define the Option 82 circuit id.
OCT dhcpSnoopingOption82ConfigCircuitID	1.3.6.1.4.1.11863.6.27.1.2.1.1.5	OCTET STRING	read-write	The sub-option Circuit ID for the customized Option 82.(1-64 characters)
dhcpSnoopingOption82ConfigEntry	1.3.6.1.4.1.11863.6.27.1.2.1.1		not-accessible	An entry contains of the information of dhcp snooping option 82 config.
OCT dhcpSnoopingOption82ConfigLag	1.3.6.1.4.1.11863.6.27.1.2.1.1.8	OCTET STRING	read-only	The LAG to which the port belongs to.
INT dhcpSnoopingOption82ConfigOperationStrategy	1.3.6.1.4.1.11863.6.27.1.2.1.1.3	INTEGER	read-write	Select the operation for the Option 82 filed of the DHCP request packets from the Host. 0. keep: Indicates to keep the Option 82 field of the packets. 1. replace: Indicates to replace the Option 82 field of the packets with the switch defined one. 2. drop: Indicates to discard the packets including the Option 82 field.
OCT dhcpSnoopingOption82ConfigPort	1.3.6.1.4.1.11863.6.27.1.2.1.1.1	OCTET STRING	read-only	Port number
INT dhcpSnoopingOption82ConfigRemoteCustomization	1.3.6.1.4.1.11863.6.27.1.2.1.1.6	INTEGER	read-write	0. disable 1. enable Enable/Disable the switch to define the Option 82 remote id.
OCT dhcpSnoopingOption82ConfigRemoteID	1.3.6.1.4.1.11863.6.27.1.2.1.1.7	OCTET STRING	read-write	The sub-option Remote ID for the customized Option 82.(1-64 characters)
INT dhcpSnoopingOption82ConfigSupportStatus	1.3.6.1.4.1.11863.6.27.1.2.1.1.2	INTEGER	read-write	0. disable 1. enable Select Enable/Disable the port to support the Option 82 feature.
dhcpSnoopingOption82ConfigTable	1.3.6.1.4.1.11863.6.27.1.2.1		not-accessible	A list of DHCP Snooping option 82 config entries. Here you can configure the port parameters for the DHCP Snooping option 82 feature.
OCT dhcpSnoopingPort	1.3.6.1.4.1.11863.6.27.1.3.1.1.1	OCTET STRING	read-only	Display port number
dhcpSnoopingPortConfig	1.3.6.1.4.1.11863.6.27.1.3
INT dhcpSnoopingPortConfigDeclineRateLimit	1.3.6.1.4.1.11863.6.27.1.3.1.1.5	INTEGER	read-write	0. disable 1. 5pps 2. 10pps 3. 15pps 4. 20pps 5. 25pps 6. 30pps Select Enable/Disable the Flow Control feature for the DHCP decline packets. The excessive DHCP decline packets will be discarded.
dhcpSnoopingPortConfigEntry	1.3.6.1.4.1.11863.6.27.1.3.1.1		not-accessible	An entry contains of the information of DHCP Snooping port config.
INT dhcpSnoopingPortConfigMacVerify	1.3.6.1.4.1.11863.6.27.1.3.1.1.3	INTEGER	read-write	0. disable 1. enable Select Enable/Disable the MAC Verify feature. There are two fields of the DHCP packet containing the MAC address of the Host. The MAC Verify feature is to compare the two fields and discard the packet if the two fields are different.
OCT dhcpSnoopingPortConfigPortLag	1.3.6.1.4.1.11863.6.27.1.3.1.1.6	OCTET STRING	read-only	The LAG to which the port belongs to.
INT dhcpSnoopingPortConfigRateLimit	1.3.6.1.4.1.11863.6.27.1.3.1.1.4	INTEGER	read-write	0. disable 1. 5pps 2. 10pps 3. 15pps 4. 20pps 5. 25pps 6. 30pps Select Enable/Disable the Flow Control feature for the DHCP packets. The excessive DHCP packets will be discarded.
dhcpSnoopingPortConfigTable	1.3.6.1.4.1.11863.6.27.1.3.1		not-accessible	A list of DHCP Snooping port config entries. Here you can configure the port parameters for the DHCP Snooping.
INT dhcpSnoopingPortConfigTrustedPort	1.3.6.1.4.1.11863.6.27.1.3.1.1.2	INTEGER	read-write	0. disable 1. enable Select Enable/Disable the port to be a Trusted Port. Only the Trusted Port can receive the DHCP packets from DHCP servers.
dhcpSnoopingVlanConfigEntry	1.3.6.1.4.1.11863.6.27.1.1.2.1		not-accessible	An entry contains of the DHCP Snooping function enable status information of a VLAN.
dhcpSnoopingVlanConfigTable	1.3.6.1.4.1.11863.6.27.1.1.2		not-accessible	Here you can view and modify the DHCP Snooping VLAN config table.
INT dhcpSnoopingVlanId	1.3.6.1.4.1.11863.6.27.1.1.2.1.1	INTEGER	read-create	Enter the ID number of VLAN,1-4094.
INT dhcpSnoopingVlanStatus	1.3.6.1.4.1.11863.6.27.1.1.2.1.2	INTEGER	read-create	0. disable 1. enable Enable or disable DHCP Snooping function in specified VLAN.
tplinkDhcpSnoopingMIB	1.3.6.1.4.1.11863.6.27			Private MIB for DHCP Snooping configuration.
tplinkDhcpSnoopingMIBObjects	1.3.6.1.4.1.11863.6.27.1
tplinkDhcpSnoopingNotifications	1.3.6.1.4.1.11863.6.27.2

RFC description

TP-Link vendor-private MIB for managing DHCP snooping security features, bindings, and configuration on TP-Link devices.

Start monitoring TP-Link managed switch (DHCP snooping trusted-port/binding-table status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TPLINK-DHCPSNOOPING-MIB

What Is TPLINK-DHCPSNOOPING-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description