ZTE-AN-DHCP-SNOOPING-MIB

All MIBs › ZTE-AN-DHCP-SNOOPING-MIB

Organization: ZTE Corporation.

Last Updated: 2014-07-31

Category: ZTE Access Node (ZTE-AN) Management

Description: Manages ZTE access node DHCP snooping, binding database, and untrusted port protection settings.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZTE-AN-DHCP-SNOOPING-MIB?

ZTE-AN-DHCP-SNOOPING-MIB is a ZTE Corporation proprietary MIB (Access Node family, built on ZTE-AN-SMI/ZTE-AN-IF-MIB/ZTE-AN-TC-MIB) implementing DHCP Snooping, a security mechanism that inspects DHCP packets to provide per-interface access security. Its objects cover a global enable flag, a clear-IP-binding action, an online-user count, a VLAN table (VID, row status), an IP-binding table (MAC, S-VID, IP address, leased time, user VID, row status), a per-interface session-limit table, and a per-interface statistics table (DHCP Discover/Offer/Request/Ack packet counts). As a security/performance MIB it lets an administrator confirm which client MAC/IP bindings DHCP Snooping has learned and watch DHCP packet volume per interface on a ZTE Access Node. It is deployed on ZTE Corporation Access Node (AN) broadband platforms. Engineers can download the ZTE-AN-DHCP-SNOOPING-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZTE-AN-DHCP-SNOOPING-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ZTE Corporation Access Node (AN) broadband platforms

Monitoring Examples

An administrator checks zxAnDsDhcpV4IpBindingTable to confirm which MAC address is bound to a client's leased IP address under DHCP Snooping on a ZTE Access Node.

What Can Be Monitored

DHCP Snooping IP/MAC bindings and per-interface DHCP packet statistics

Imported Objects

From IF-MIB

ifIndex

OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressIPv6
InetAddressPrefixLength
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
DisplayString
MacAddress
RowStatus
TruthValue

From ZTE-AN-IF-MIB

zxAnSubIfIndex

OBJECT-TYPE

From ZTE-AN-SMI

zxAnServiceSecurity

OBJECT-IDENTITY

From ZTE-AN-TC-MIB

VlanId
ZxAnSubIfIndex

How to Use in IPNetwork Monitor

Example using zxAnDsDhcpV4IfStatsDiscoverPkts OID:

Select a ZTE Corporation Access Node (AN) broadband platform (DHCP-snooping IP-binding/per-interface packet-count status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type zxAnDsDhcpV4IfStatsDiscoverPkts into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This object indicates the discover number of packets subjected to ipv4 dhcp snooping is received. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
BIT zxAnDhcpSnoopingCapabilities	1.3.6.1.4.1.3902.1082.70.40.1.1	Bits	read-only	The management capabilities of DHCP snooping. The bit value 1 means the function represented by this bit is supported by this equipment. supportIpSrcGuardIpBindingTable(0): value 1 means supporting zxAnIpv4SrcGuardIpBindingTable and zxAnIpv6SrcGuardIpBindingTable, zxAnDsDhcpV4StaticIpBindingTable and zxAnDsDhcpV6StaticIpBindingTable were deprecated. supportIpv4SrcGuardIpBindIpMask(1): value 1 means supporting IPv4 mask configuration: zxAnIpv4SrcGuardIpBindIpMask. NOTE: No recommended to display it in NMS.
zxAnDhcpSnoopingCompliances	1.3.6.1.4.1.3902.1082.70.40.4.1
zxAnDhcpSnoopingConformance	1.3.6.1.4.1.3902.1082.70.40.4
zxAnDhcpSnoopingGlobalObjects	1.3.6.1.4.1.3902.1082.70.40.1
zxAnDhcpSnoopingGroups	1.3.6.1.4.1.3902.1082.70.40.4.2
zxAnDhcpSnoopingMib	1.3.6.1.4.1.3902.1082.70.40			This MIB defines DHCP Snooping managed objects for Access Node Service Security and DHCP Snooping is a security mechanism which uses information gathered from DHCP packets to provide per-interface security capabilities
zxAnDhcpSnoopingNotifications	1.3.6.1.4.1.3902.1082.70.40.3
zxAnDhcpSnoopingObjects	1.3.6.1.4.1.3902.1082.70.40.2
INT zxAnDsDhcpV4ClearIpBindingEnable	1.3.6.1.4.1.3902.1082.70.40.2.1.1.2	INTEGER	read-write	If this object is set to 'enabled', when interface become offline this interface's records in zxAnDsDhcpV4IpBindingTable will be deleted. Otherwise, this interface's records will not be deleted.
zxAnDsDhcpV4Compliances	1.3.6.1.4.1.3902.1082.70.40.4.1.1			The compliance statement for implementing IPV4 dhcp snooping MIB.
INT zxAnDsDhcpV4GlobalEnable	1.3.6.1.4.1.3902.1082.70.40.2.1.1.1	INTEGER	read-write	Enable or disable DHCPv4 snooping.
zxAnDsDhcpV4GlobalObjects	1.3.6.1.4.1.3902.1082.70.40.2.1.1
I32 zxAnDsDhcpV4IfSessionLimit	1.3.6.1.4.1.3902.1082.70.40.2.1.9.1.1	Integer32	read-write	This object specifies the maximum number of DHCPv4 bindings allowed on this interface. This objects value will limit the number of entries in zxAnDsDhcpV4IpBindingTable.when the value is 0, that means no limit in the user interface.
zxAnDsDhcpV4IfSessionLimitEntry	1.3.6.1.4.1.3902.1082.70.40.2.1.9.1		not-accessible	A row instance contains the configuration of binding limit at each interface capable of this feature.
zxAnDsDhcpV4IfSessionLimitGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.6			The object is used to configure as well as show information regarding the ipv4 dhcp session limit data.
zxAnDsDhcpV4IfSessionLimitTable	1.3.6.1.4.1.3902.1082.70.40.2.1.9		not-accessible	This object specifies the maximum number of DHCPv4 bindings allowed on this interface. This objects value will limit the number of entries in zxAnDsDhcpV4IpBindingTable. The interfaces for which this feature must be applicable are: IfType = Physical Interface(1) for PON card: SubIfType = ONU vport sub-interface(1) for DSL card: SubIfType = DSL PVC sub-interface(6)
C32 zxAnDsDhcpV4IfStatsAckPkts	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1.4	Counter32	read-only	This object indicates the ack number of packets subjected to ipv4 dhcp snooping is received.
C32 zxAnDsDhcpV4IfStatsDeclinePkts	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1.7	Counter32	read-only	This object indicates the decline number of packets subjected to ipv4 dhcp snooping is received.
C32 zxAnDsDhcpV4IfStatsDiscoverPktsEx	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1.1	Counter32	read-only	This object indicates the discover number of packets subjected to ipv4 dhcp snooping is received.
zxAnDsDhcpV4IfStatsEntry	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1		not-accessible	A row instance contains the interface number, ipv4 dhcp packet information and reset ipv4 dhcp packet statistics.
zxAnDsDhcpV4IfStatsGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.7			A collection of objects which are used to reset as well ad show additional ipv4 dhcp snooping statistics information.
C32 zxAnDsDhcpV4IfStatsInformPkts	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1.8	Counter32	read-only	This object indicates the inform number of packets subjected to ipv4 dhcp snooping is received.
C32 zxAnDsDhcpV4IfStatsNackPkts	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1.5	Counter32	read-only	This object indicates the nack number of packets subjected to ipv4 dhcp snooping is received.
C32 zxAnDsDhcpV4IfStatsOfferPkts	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1.2	Counter32	read-only	This object indicates the offer number of packets subjected to ipv4 dhcp snooping is received.
C32 zxAnDsDhcpV4IfStatsReleasePkts	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1.6	Counter32	read-only	This object indicates the release number of packets subjected to ipv4 dhcp snooping is received.
C32 zxAnDsDhcpV4IfStatsRequestPkts	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1.3	Counter32	read-only	This object indicates the request number of packets subjected to ipv4 dhcp snooping is received.
INT zxAnDsDhcpV4IfStatsReset	1.3.6.1.4.1.3902.1082.70.40.2.1.50.1.100	INTEGER	read-write	This object indicates whether ipv4 dhcp statistics is cleared at this interface. If this object is set to 'reset(1)', ipv4 dhcp statistics at this interface will be cleared.
zxAnDsDhcpV4IfStatsTable	1.3.6.1.4.1.3902.1082.70.40.2.1.50		not-accessible	This table provides the ipv4 dhcp statistics information received by by the interface capable of this feature. The interfaces for which this feature must be applicable are: IfType = Physical Interface(1) for PON card: SubIfType = ONU vport sub-interface(2) for DSL card: SubIfType = DSL PVC sub-interface(6)
zxAnDsDhcpV4IpBindingEntry	1.3.6.1.4.1.3902.1082.70.40.2.1.6.1		not-accessible	A row instance contains the interface number, Mac address, service vlan number, IP address, leased time, user vlan number, and status of this instance.
zxAnDsDhcpV4IpBindingGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.2			A collection of objects which are used to delete as well as show information regarding the ipv4 dhcp bindings data.
IP zxAnDsDhcpV4IpBindingIpAddress	1.3.6.1.4.1.3902.1082.70.40.2.1.6.1.3	IpAddress	read-only	This object indicates the allocated ipv4 address of an ipv4 dhcp client host.
DAT zxAnDsDhcpV4IpBindingLeasedTime	1.3.6.1.4.1.3902.1082.70.40.2.1.6.1.4	DateAndTime	read-only	This object indicates the leased time of this ipv4 dhcp bindings.The format is 2d-1d-1d,1d:1d:1d.1d. For example, 1992-5-26,13:30:15.0.
MAC zxAnDsDhcpV4IpBindingMac	1.3.6.1.4.1.3902.1082.70.40.2.1.6.1.1	MacAddress	not-accessible	This object indicates the MAC address of an ipv4 dhcp client host.
ROW zxAnDsDhcpV4IpBindingRowStatus	1.3.6.1.4.1.3902.1082.70.40.2.1.6.1.50	RowStatus	read-create	This object is used to manage the deletion of rows in this table. This object only supports 'active(1)', and 'destroy(6)' value. Whenever an ipv4 dhcp binding is learnt by the interface, an entry will be created in this table with its RowStatus object set to 'active(1)'. Setting this object value to 'destroy(6)' will clear the ipv4 dhcp binding information.
VLA zxAnDsDhcpV4IpBindingSVid	1.3.6.1.4.1.3902.1082.70.40.2.1.6.1.2	VlanId	not-accessible	This object indicates the service vlan to which an ipv4 dhcp client host belongs. Vlan range is from 1 to 4094.
zxAnDsDhcpV4IpBindingTable	1.3.6.1.4.1.3902.1082.70.40.2.1.6		not-accessible	This table provides the ipv4 dhcp snooping bindings information learnt by the interface capable of this feature. The interfaces for which this feature must be applicable are: IfType = Physical Interface(1) for PON card: SubIfType = ONU service port sub-interface(3) for DSL card: SubIfType = DSL PVC sub-interface(6)
VLA zxAnDsDhcpV4IpBindingUserVid	1.3.6.1.4.1.3902.1082.70.40.2.1.6.1.5	VlanId	read-only	This object indicates the vlan to which an ipv4 dhcp client host belongs. Vlan range is from 1 to 4094.
zxAnDsDhcpV4Objects	1.3.6.1.4.1.3902.1082.70.40.2.1
I32 zxAnDsDhcpV4OnlineUsers	1.3.6.1.4.1.3902.1082.70.40.2.1.1.3	Integer32	read-only	The total number of DHCPv4 snooping online users.
VLA zxAnDsDhcpV4Vid	1.3.6.1.4.1.3902.1082.70.40.2.1.2.1.1	VlanId	not-accessible	This object indicates the vlan number on which ipv4 dhcp snooping feature is configured.
zxAnDsDhcpV4VlanEntry	1.3.6.1.4.1.3902.1082.70.40.2.1.2.1		not-accessible	A row instance contains the configuration to create or destroy ipv4 dhcp snooping at each existing vlan.
zxAnDsDhcpV4VlanGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.1			The object is used to configure as well as show information regarding the ipv4 dhcp snooping feature per VLAN.
ROW zxAnDsDhcpV4VlanRowStatus	1.3.6.1.4.1.3902.1082.70.40.2.1.2.1.50	RowStatus	read-create	This object is used to manage the creation and deletion of rows in this table. It only supports 'active(1)' ,'createAndGo(4)'and 'destroy(6)' value. If this object is set to 'createAndGo(4)', the vlan number on which dhcp snooping is active(1). Setting this object value to destroy(6), the vlan number on which dhcp snooping is deleted.
zxAnDsDhcpV4VlanTable	1.3.6.1.4.1.3902.1082.70.40.2.1.2		not-accessible	This table provides the mechanism to control ipv4 dhcp snooping per vlan. When a vlan is created in a device supporting this table, a corresponding entry of this table will be added. When a vlan is destroyed in a device supporting this table, a corresponding entry of this table will be deleted.
zxAnDsDhcpV6Compliances	1.3.6.1.4.1.3902.1082.70.40.4.1.2			The compliance statement for implementing IPV6 dhcp snooping MIB.
INT zxAnDsDhcpV6GlobalEnable	1.3.6.1.4.1.3902.1082.70.40.2.2.1.1	INTEGER	read-write	Enable or disable DHCPv6 snooping.
zxAnDsDhcpV6GlobalObjects	1.3.6.1.4.1.3902.1082.70.40.2.2.1
I32 zxAnDsDhcpV6IfSessionLimit	1.3.6.1.4.1.3902.1082.70.40.2.2.9.1.1	Integer32	read-write	This object specifies the maximum number of DHCPv6 bindings allowed on this interface. This objects value will limit the number of entries in zxAnDsDhcpV6IpBindingTable.when the value is 0, that means no limit in the user interface.
zxAnDsDhcpV6IfSessionLimitEntry	1.3.6.1.4.1.3902.1082.70.40.2.2.9.1		not-accessible	A row instance contains the configuration of binding limit at each interface capable of this feature.
zxAnDsDhcpV6IfSessionLimitGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.34			The object is used to configure as well as show information regarding the ipv6 dhcp session limit data.
zxAnDsDhcpV6IfSessionLimitTable	1.3.6.1.4.1.3902.1082.70.40.2.2.9		not-accessible	This object specifies the maximum number of DHCPv6 bindings allowed on this interface. This objects value will limit the number of entries in zxAnDsDhcpV6IpBindingTable The interfaces for which this feature must be applicable are: IfType = Physical Interface(1) SubIfType = ONU vport sub-interface(1)
C32 zxAnDsDhcpV6IfStatsAdvertisePkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.2	Counter32	read-only	This object indicates the advertise number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsConfirmPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.4	Counter32	read-only	This object indicates the confirm number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsDeclinePkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.9	Counter32	read-only	This object indicates the decline number of packets subjected to ipv6 dhcp snooping is received.
zxAnDsDhcpV6IfStatsEntry	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1		not-accessible	A row instance contains the interface number, ipv6 dhcp packet information and reset ipv6 dhcp packet statistics.
zxAnDsDhcpV6IfStatsGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.35			A collection of objects which are used to reset as well ad show additional ipv6 dhcp snooping statistics information.
C32 zxAnDsDhcpV6IfStatsInformPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.11	Counter32	read-only	This object indicates the Information-request number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsRebindPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.6	Counter32	read-only	This object indicates the rebind number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsReconfigPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.10	Counter32	read-only	This object indicates the reconfigure number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsRelayFwdPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.12	Counter32	read-only	This object indicates the relay-forward number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsRelayRlyPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.13	Counter32	read-only	This object indicates the relay-reply number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsReleasePkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.8	Counter32	read-only	This object indicates the release number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsRenewPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.5	Counter32	read-only	This object indicates the renew number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsReplyPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.7	Counter32	read-only	This object indicates the reply number of packets subjected to ipv6 dhcp snooping is received.
C32 zxAnDsDhcpV6IfStatsRequestPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.3	Counter32	read-only	This object indicates the request number of packets subjected to ipv6 dhcp snooping is received.
INT zxAnDsDhcpV6IfStatsReset	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.100	INTEGER	read-write	This object indicates whether ipv6 dhcp statistics is cleared at this interface. If this object is set to 'reset(1)', ipv6 dhcp statistics at this interface will be cleared.
C32 zxAnDsDhcpV6IfStatsSolicitPkts	1.3.6.1.4.1.3902.1082.70.40.2.2.50.1.1	Counter32	read-only	This object indicates the solicit number of packets subjected to ipv6 dhcp snooping is received.
zxAnDsDhcpV6IfStatsTable	1.3.6.1.4.1.3902.1082.70.40.2.2.50		not-accessible	This table provides the ipv6 dhcp statistics information received by by the interface capable of this feature. The interfaces for which this feature must be applicable are: IfType = Physical Interface(1) for PON card: SubIfType = ONU vport sub-interface(2) for DSL card: SubIfType = DSL PVC sub-interface(6)
STR zxAnDsDhcpV6IpBindingDuid	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.7	DisplayString	read-only	This object indicates the DUID(DHCP Unique Identifier) of this DHCPv6 IP binding.
zxAnDsDhcpV6IpBindingEntry	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1		not-accessible	A row instance contains the interface number, Mac address, service vlan number, IP address, IP address prefixlen,leased time, user vlan number, and status of this instance.
zxAnDsDhcpV6IpBindingGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.31			A collection of objects which are used to delete as well as show information regarding the ipv6 dhcp bindings data.
U32 zxAnDsDhcpV6IpBindingIaid	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.8	Unsigned32	read-only	This object indicates the IAID(Identity Association) of this DHCPv6 IP binding.
INT zxAnDsDhcpV6IpBindingIaType	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.9	INTEGER	read-only	This object indicates the type of IA(Identity Association) of this DHCPv6 IP binding.
IP zxAnDsDhcpV6IpBindingIpAddress	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.3	InetAddress	not-accessible	This object indicates the allocated ipv6 address of an ipv6 dhcp client host.
ADR zxAnDsDhcpV6IpBindingIpPfxLen	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.4	InetAddressPrefixLength	read-only	This object indicates the allocated ipv6 address pfxlen of an ipv6 dhcp client host.
DAT zxAnDsDhcpV6IpBindingLeasedTime	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.5	DateAndTime	read-only	This object indicates the leased time of this ipv6 dhcp bindings.The format is 2d-1d-1d,1d:1d:1d.1d. For example, 1992-5-26,13:30:15.0.
MAC zxAnDsDhcpV6IpBindingMac	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.1	MacAddress	not-accessible	This object indicates the MAC address of an ipv6 dhcp client host.
ROW zxAnDsDhcpV6IpBindingRowStatus	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.50	RowStatus	read-create	This object is used to manage the deletion of rows in this table. This object only supports 'active(1)', and 'destroy(6)' value. Whenever an ipv6 dhcp binding is learnt by the interface, an entry will be created in this table with its RowStatus object set to 'active(1)'. Setting this object value to 'destroy(6)' will clear the ipv6 dhcp binding information.
VLA zxAnDsDhcpV6IpBindingSVid	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.2	VlanId	not-accessible	This object indicates the service vlan to which an ipv6 dhcp client host belongs. Vlan range is from 1 to 4094.
zxAnDsDhcpV6IpBindingTable	1.3.6.1.4.1.3902.1082.70.40.2.2.6		not-accessible	This table provides the ipv6 dhcp snooping bindings information learnt by the interface capable of this feature. The interfaces for which this feature must be applicable are: IfType = Physical Interface(1) for PON card: SubIfType = ONU service port sub-interface(3) for DSL card: SubIfType = DSL PVC sub-interface(6)
VLA zxAnDsDhcpV6IpBindingUserVid	1.3.6.1.4.1.3902.1082.70.40.2.2.6.1.6	VlanId	read-only	This object indicates the vlan to which an ipv6 dhcp client host belongs. Vlan range is from 1 to 4094..
zxAnDsDhcpV6Objects	1.3.6.1.4.1.3902.1082.70.40.2.2
I32 zxAnDsDhcpV6OnlineUsers	1.3.6.1.4.1.3902.1082.70.40.2.2.1.3	Integer32	read-only	The total number of DHCPv6 snooping online users.
VLA zxAnDsDhcpV6Vid	1.3.6.1.4.1.3902.1082.70.40.2.2.2.1.1	VlanId	not-accessible	This object indicates the vlan number on which ipv6 dhcp snooping feature is configured.
zxAnDsDhcpV6VlanEntry	1.3.6.1.4.1.3902.1082.70.40.2.2.2.1		not-accessible	A row instance contains the configuration to create or destroy ipv6 dhcp snooping at each existing vlan.
zxAnDsDhcpV6VlanGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.30			The object is used to configure as well as show information regarding the ipv6 dhcp snooping feature per VLAN.
ROW zxAnDsDhcpV6VlanRowStatus	1.3.6.1.4.1.3902.1082.70.40.2.2.2.1.2	RowStatus	read-create	This object is used to manage the creation and deletion of rows in this table. It only supports 'active(1)' ,'createAndGo(4)'and 'destroy(6)' value. If this object is set to 'createAndGo(4)', the vlan number on which ipv6 dhcp snooping is active(1). Setting this object value to destroy(6),the vlan number on which ipv6 dhcp snooping is deleted.
zxAnDsDhcpV6VlanTable	1.3.6.1.4.1.3902.1082.70.40.2.2.2		not-accessible	This table provides the mechanism to control ipv6 dhcp snooping per vlan. When a vlan is created in a device supporting this table, a corresponding entry of this table will be added. When a vlan is destroyed in a device supporting this table, a corresponding entry of this table will be deleted.
I32 zxAnIpsgIpSpoofingBlockDuration	1.3.6.1.4.1.3902.1082.70.40.2.3.1.1.8	Integer32	read-write	Indicates the port blocked duration.
INT zxAnIpsgIpSpoofingBlockIfEnable	1.3.6.1.4.1.3902.1082.70.40.2.3.1.1.7	INTEGER	read-write	Enable or disable IP source guard blocking port function.
zxAnIpsgIpSpoofingGlobalObjects	1.3.6.1.4.1.3902.1082.70.40.2.3.1.1
NTF zxAnIpsgIpSpoofingIfBlockedAlm	1.3.6.1.4.1.3902.1082.70.40.3.1.2			It indicate that the user port was blocked when IP spoofing occured.
NTF zxAnIpsgIpSpoofingIfBlockedClr	1.3.6.1.4.1.3902.1082.70.40.3.1.3			It indicate that the user port was unblocked after a setting interval.
NTF zxAnIpsgIpSpoofingTrap	1.3.6.1.4.1.3902.1082.70.40.3.1.1			This notification means the agent has detected that the IP spoofing occurs.
INT zxAnIpsgIpSpoofingTrapEnable	1.3.6.1.4.1.3902.1082.70.40.2.3.1.1.9	INTEGER	read-write	Enable or disable zxAnIpsgIpSpoofingTrap.
I32 zxAnIpsgIpSpoofTrapRptInterval	1.3.6.1.4.1.3902.1082.70.40.2.3.1.1.6	Integer32	read-write	The interval that the same IP spoofing trap report.
INT zxAnIpSrcGuardBindType	1.3.6.1.4.1.3902.1082.70.40.2.3.1.22	INTEGER	read-write	IP source guard binding type. ip(1) - IP source guard bind IP address only. ipAndMac(2) - IP source guard bind both IP address and MAC address.
zxAnIpSrcGuardCompliances	1.3.6.1.4.1.3902.1082.70.40.4.1.3			The compliance statement for implementing IP source guard MIB.
INT zxAnIpSrcGuardEnable	1.3.6.1.4.1.3902.1082.70.40.2.3.1.21	INTEGER	read-write	Enable/disable IP source guard.
zxAnIpSrcGuardGlobalObjects	1.3.6.1.4.1.3902.1082.70.40.2.3.1
T/F zxAnIpSrcGuardIfEnable	1.3.6.1.4.1.3902.1082.70.40.2.3.2.1.1	TruthValue	read-write	This object indicates whether IP Source Guard is enabled at this interface.If this object is set to 'true', IP Source Guard at this interface is enabled. If IP Source Guard at this interface and the VLAN number on which IP Source Guard at this interface are both enabled, Traffic coming to this interface will be forwarded if it is from the list of IP addresses obtained through DHCP Snooping or static configuration. Otherwise, it is denied. If this object is set to 'false', IP Source Guard at this interface is disabled. 1-true,2-false.
zxAnIpSrcGuardIfEntry	1.3.6.1.4.1.3902.1082.70.40.2.3.2.1		not-accessible	A row instance contains the configuration to enable or disable IP Source Guard at each user interface capable of this feature.
zxAnIpSrcGuardIfGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.36			The object is used to configure as well as show information regarding the IP source guard feature per user interface.
zxAnIpSrcGuardIfTable	1.3.6.1.4.1.3902.1082.70.40.2.3.2		not-accessible	This table provides the mechanism to enable or disable IP Source Guard at each user port capable of this feature. When DHCP Snooping is enabled at an interface, a list of IP addresses is obtained through DHCP Snooping for this particular interface. another list of IP addresses is obtained through static configuration. If IP Source Guard at this interface and the VLAN number on which IP Source Guard at this interface is enabled, only traffic from these IP addresses is allowed to pass through the interface. The interfaces for which this feature must be applicable are: IfType = Physical Interface(1) for PON card: SubIfType = ONU service port sub-interface(3) for DSL card: SubIfType = DSL PVC sub-interface(6)
zxAnIpSrcGuardObjects	1.3.6.1.4.1.3902.1082.70.40.2.3
zxAnIpSrcGuardTrapGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.40			The object is used to indicate the IP spoofing notification.
zxAnIpSrcGuardTraps	1.3.6.1.4.1.3902.1082.70.40.3.1
zxAnIpv4SrcGuardBindingGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.38			A collection of objects which are used to configure as well as show information regarding the ipv4 source guard bindings data.
zxAnIpv4SrcGuardIpBindingEntry	1.3.6.1.4.1.3902.1082.70.40.2.3.20.2.1		not-accessible	An entry of zxAnIpv4SrcGuardIpBindingTable.
zxAnIpv4SrcGuardIpBindingTable	1.3.6.1.4.1.3902.1082.70.40.2.3.20.2		not-accessible	This table provides the information on static IPv4 addresses used for IP source guard purpose at each interface capable of this feature. The interfaces for which this feature must be applicable are: IfType = Physical Interface(1) for PON card: SubIfType = ONU service port sub-interface(3) for DSL card: SubIfType = DSL PVC sub-interface(6)
IP zxAnIpv4SrcGuardIpBindIpAddress	1.3.6.1.4.1.3902.1082.70.40.2.3.20.2.1.1	IpAddress	not-accessible	IP address.
IP zxAnIpv4SrcGuardIpBindIpMask	1.3.6.1.4.1.3902.1082.70.40.2.3.20.2.1.4	IpAddress	read-create	IP mask.
MAC zxAnIpv4SrcGuardIpBindMac	1.3.6.1.4.1.3902.1082.70.40.2.3.20.2.1.2	MacAddress	read-create	MAC address. FF-FF-FF-FF-FF-FF means N/A.
ROW zxAnIpv4SrcGuardIpBindRowStatus	1.3.6.1.4.1.3902.1082.70.40.2.3.20.2.1.50	RowStatus	read-create	The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnIpv4SrcGuardIpBindingEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).
INT zxAnIpv4SrcGuardIpBindType	1.3.6.1.4.1.3902.1082.70.40.2.3.20.2.1.3	INTEGER	read-create	IP address binding type. If zxAnIpv4SrcGuardIpBindType is static(1), this item can't be inactive.
zxAnIpv4SrcGuardObjects	1.3.6.1.4.1.3902.1082.70.40.2.3.20
zxAnIpv6SrcGuardBindingGroup	1.3.6.1.4.1.3902.1082.70.40.4.2.39			A collection of objects which are used to configure as well as show information regarding the ipv6 source guard bindings data.
zxAnIpv6SrcGuardIpBindingEntry	1.3.6.1.4.1.3902.1082.70.40.2.3.21.2.1		not-accessible	An entry of zxAnIpv6SrcGuardIpBindingTable.
zxAnIpv6SrcGuardIpBindingTable	1.3.6.1.4.1.3902.1082.70.40.2.3.21.2		not-accessible	This table provides the information on IPv6 addresses used for IP source guard purpose at each interface capable of this feature. The interfaces for which this feature must be applicable are: IfType = Physical Interface(1) for PON card: SubIfType = ONU service port sub-interface(3) for DSL card: SubIfType = DSL PVC sub-interface(6)
ADR zxAnIpv6SrcGuardIpBindIpAddress	1.3.6.1.4.1.3902.1082.70.40.2.3.21.2.1.2	InetAddressIPv6	not-accessible	IP adress.
IPt zxAnIpv6SrcGuardIpBindIpType	1.3.6.1.4.1.3902.1082.70.40.2.3.21.2.1.1	InetAddressType	not-accessible	IP adress type.
MAC zxAnIpv6SrcGuardIpBindMac	1.3.6.1.4.1.3902.1082.70.40.2.3.21.2.1.4	MacAddress	read-create	MAC address.
ADR zxAnIpv6SrcGuardIpBindPfxLen	1.3.6.1.4.1.3902.1082.70.40.2.3.21.2.1.3	InetAddressPrefixLength	read-create	IP address prefix length.
ROW zxAnIpv6SrcGuardIpBindRowStatus	1.3.6.1.4.1.3902.1082.70.40.2.3.21.2.1.50	RowStatus	read-create	The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnIpv6SrcGuardIpBindingEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).
INT zxAnIpv6SrcGuardIpBindType	1.3.6.1.4.1.3902.1082.70.40.2.3.21.2.1.5	INTEGER	read-create	IP address binding type. If zxAnIpv6SrcGuardBindType is static(1), this item can't be inactive.
zxAnIpv6SrcGuardObjects	1.3.6.1.4.1.3902.1082.70.40.2.3.21

RFC description

ZTE DHCP snooping and IP source guard for access nodes with DHCP binding and spoofing protection.

Start monitoring ZTE Corporation Access Node (AN) broadband platforms (DHCP-snooping IP-binding/per-interface packet-count status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZTE-AN-DHCP-SNOOPING-MIB