ZXR10-DHCPSNOOPING-MIB

All MIBs › ZXR10-DHCPSNOOPING-MIB

Category: ZTE ZXR10 Routing and Switching

Description: Manages ZTE ZXR10 router DHCP snooping binding table and untrusted interface protection policies.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZXR10-DHCPSNOOPING-MIB?

ZXR10-DHCPSNOOPING-MIB is a ZTE proprietary SNMP module for the ZXR10 platform implementing DHCP snooping, a Layer 2 security feature that builds a binding table of legitimate DHCP-assigned IP/MAC/port associations and blocks rogue DHCP traffic from untrusted interfaces. It exposes configuration data such as global enable state, maximum user limits, DHCP Option 82 formatting and insertion policy, and the fields (remote ID, circuit ID, access node ID) inserted into relayed DHCP packets. This MIB is used to monitor the software-security status of the device's DHCP relay/snooping subsystem — confirming snooping is globally enabled, that the user-count limit hasn't been exceeded, and that Option 82 policy is correctly applied — which protects against DHCP starvation and spoofing attacks. It complements standard Layer 2/VLAN MIBs by adding DHCP-specific policy enforcement on top of the switching fabric. It is deployed on ZTE ZXR10 switches/routers at the broadband or enterprise access edge where untrusted client ports need DHCP-based attack protection. Engineers can download the ZXR10-DHCPSNOOPING-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZXR10-DHCPSNOOPING-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ZTE ZXR10 series switches/routers

Monitoring Examples

An operator would poll dhcpv4Snoopingglobalstate and dhcpv4Snoopingglobalmaxuser to confirm snooping is enabled and how many DHCP clients are permitted, and check dhcpv4SnoopingglobalmacVerifystate to see if MAC-address verification against DHCP leases is active. Reviewing dhcpv4SnoopingOptionFormat, dhcpv4SnoopingOptionRemoteId, and dhcpv4SnoopingOptionCircuitId reveals whether Option 82 subscriber-identification fields are being inserted correctly; a mismatch here would explain why an upstream DHCP server cannot correctly identify the originating access node.

What Can Be Monitored

DHCP snooping global enable state
maximum DHCP user/client limit
MAC verification state
Option 82 insertion policy
remote ID and circuit ID configuration

Imported Objects

From SNMPv2-SMI

Integer32
IpAddress
OBJECT-TYPE
Unsigned32
enterprises

From SNMPv2-TC

MacAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
dhcpv4SnoopingDynamicBindingEntry	1.3.6.1.4.1.3902.3.102.33.16.1		not-accessible	MAC, VLAN and VPN is the key to locate the user-bind information, so it should be used in 'walk' action, the rest of index can be used in 'get' action.
I32 dhcpv4SnoopingDynamicBindingIfIndex	1.3.6.1.4.1.3902.3.102.33.16.1.1	Integer32	read-only	The unique value generated for the interface.
STR dhcpv4SnoopingDynamicBindingIfName	1.3.6.1.4.1.3902.3.102.33.16.1.2	DisplayString	read-only	Name of the interface.
IP dhcpv4SnoopingDynamicBindingIpAddress	1.3.6.1.4.1.3902.3.102.33.16.1.3	IpAddress	read-only	The binding source IP address.
I32 dhcpv4SnoopingDynamicBindingLifetime	1.3.6.1.4.1.3902.3.102.33.16.1.6	Integer32	read-only	The remaining lifetime of the entry. If saviObjectsBindingType=static, a value of 2147483647 represents infinity.
MAC dhcpv4SnoopingDynamicBindingMacAddr	1.3.6.1.4.1.3902.3.102.33.16.1.4	MacAddress	read-only	The binding source MAC address.
INT dhcpv4SnoopingDynamicBindingState	1.3.6.1.4.1.3902.3.102.33.16.1.5	INTEGER	read-only	The state of the binding entry.
dhcpv4SnoopingDynamicBindingTable	1.3.6.1.4.1.3902.3.102.33.16		not-accessible	The binding state table containing the state of binding between source address and anchor.
I32 dhcpv4SnoopingDynamicBindingVlanId	1.3.6.1.4.1.3902.3.102.33.16.1.7	Integer32	read-only	VLAN ID that the user belong to.
STR dhcpv4SnoopingDynamicBindingVpls	1.3.6.1.4.1.3902.3.102.33.16.1.8	DisplayString	read-only	Name of the VPLS.
dhcpv4SnoopingFileConfigEntry	1.3.6.1.4.1.3902.3.102.33.20.1		not-accessible	An entry includes DHCPv4 snooping file address.
dhcpv4SnoopingFileConfigTable	1.3.6.1.4.1.3902.3.102.33.20		not-accessible	The table includes DHCPv4 snooping file server address.
I32 dhcpv4SnoopingFileIpv6Flag	1.3.6.1.4.1.3902.3.102.33.20.1.2	Integer32	read-only	The IPv6 address flag.
INT dhcpv4SnoopingFileServerType	1.3.6.1.4.1.3902.3.102.33.20.1.1	INTEGER	read-only	The type of the server.
STR dhcpv4SnoopingFileURL	1.3.6.1.4.1.3902.3.102.33.20.1.4	DisplayString	read-only	Server URL address.
STR dhcpv4SnoopingFileVrf	1.3.6.1.4.1.3902.3.102.33.20.1.3	DisplayString	read-only	VRF name.
I32 dhcpv4Snoopingglobalfiletimeout	1.3.6.1.4.1.3902.3.102.33.18	Integer32	read-only	This object indicates the time interval at which DHCP bindings information will be written to the flash.
I32 dhcpv4Snoopingglobalfileupload	1.3.6.1.4.1.3902.3.102.33.19	Integer32	read-only	This object indicates the time interval at which DHCP bindings information will be written to the database file denoted by cdsDatabaseFile object.
INT dhcpv4SnoopingglobalmacVerifystate	1.3.6.1.4.1.3902.3.102.33.4	INTEGER	read-only	Function of MAC-verify is opened or not.
I32 dhcpv4Snoopingglobalmaxuser	1.3.6.1.4.1.3902.3.102.33.2	Integer32	read-only	The maximum user of the switch, it ranges from 1 to 2048.
INT dhcpv4Snoopingglobalramblestate	1.3.6.1.4.1.3902.3.102.33.3	INTEGER	read-only	Function of ramble is opened or not.
INT dhcpv4Snoopingglobalstate	1.3.6.1.4.1.3902.3.102.33.1	INTEGER	read-only	Function of DHCPv4 snooping is available, enable: receive the DHCPv4 packets, disable: discard the DHCPv4 packets.
dhcpv4SnoopingGlobalVlanEntry	1.3.6.1.4.1.3902.3.102.33.13.1		not-accessible	An entry includes DHCPv4 snooping parameters of option.
dhcpv4SnoopingGlobalVlanTable	1.3.6.1.4.1.3902.3.102.33.13		not-accessible	The table includes DHCPv4 snooping parameters of option.
STR dhcpv4SnoopingIfCircuitId	1.3.6.1.4.1.3902.3.102.33.14.1.7	DisplayString	read-only	The string of the circuit-id describes a series of user's circuit information. User can be located definitely throughout it. The string is not allowed to overstep 256 octets and all kinds of character can be used except ' '.
I32 dhcpv4SnoopingIfCurUserNum	1.3.6.1.4.1.3902.3.102.33.14.1.5	Integer32	read-only	The current number of user under the interface who is online.
dhcpv4SnoopingIfEntry	1.3.6.1.4.1.3902.3.102.33.14.1		not-accessible	An entry includes DHCPv4 snooping running parameters of each interface.
I32 dhcpv4SnoopingIfIndex	1.3.6.1.4.1.3902.3.102.33.14.1.1	Integer32	read-only	The index value that uniquely identifies the interface to which this entry is applicable. The interface identified by a particular value of this index is the same interface as identified by the same value of the IF-MIB's ifIndex.
STR dhcpv4SnoopingIfName	1.3.6.1.4.1.3902.3.102.33.14.1.2	DisplayString	read-only	name of the interface
STR dhcpv4SnoopingIfOptCircuitId	1.3.6.1.4.1.3902.3.102.33.15.1.9	DisplayString	read-only	The string of the circuit-id describes a series of user's circuit information. User can be located definitely throughout it. The string is not allowed to overstep 256 octets and all kinds of character can be used except ' '.
INT dhcpv4SnoopingIfOptFormat	1.3.6.1.4.1.3902.3.102.33.15.1.5	INTEGER	read-only	The format includes 4 types of format defined china-tel, dsl-forum, telenor, user-cfg.
I32 dhcpv4SnoopingIfOptIndex	1.3.6.1.4.1.3902.3.102.33.15.1.1	Integer32	read-only	The index value that uniquely identifies the interface to which this entry is applicable. The interface identified by a particular value of this index is the same interface as identified by the same value of the IF-MIB's ifIndex.
STR dhcpv4SnoopingIfOptName	1.3.6.1.4.1.3902.3.102.33.15.1.2	DisplayString	read-only	Name of the interface.
INT dhcpv4SnoopingIfOptPolicy	1.3.6.1.4.1.3902.3.102.33.15.1.7	INTEGER	read-only	The policy of user-cfg includes 3 types of way which are based on interface, uniform, VLAN.
STR dhcpv4SnoopingIfOptRemoteId	1.3.6.1.4.1.3902.3.102.33.15.1.8	DisplayString	read-only	The string of remote-id indicated the server's MAC. The string is not allowed to overstep 256 octets and all kinds of character can be used except ' '.
INT dhcpv4SnoopingIfOptState	1.3.6.1.4.1.3902.3.102.33.15.1.6	INTEGER	read-only	disable: the option82 can't be inserted under interface module, enable: the option82 can be inserted based on interface module.
I32 dhcpv4SnoopingIfOptVlanId	1.3.6.1.4.1.3902.3.102.33.15.1.3	Integer32	read-only	VLAN ID.
INT dhcpv4SnoopingIfOptVlanPort	1.3.6.1.4.1.3902.3.102.33.15.1.4	INTEGER	read-only	disable: the option82 function is unavailable, enable: the option82 function is available based on Port+VLAN.
I32 dhcpv4SnoopingIfPacketRate	1.3.6.1.4.1.3902.3.102.33.14.1.8	Integer32	read-only	This object indicates rate limit value for DHCP snooping purpose. If the value of this object is 0, no rate limit is applied for DHCP traffic at this interface.
I32 dhcpv4SnoopingIfQuotaNum	1.3.6.1.4.1.3902.3.102.33.14.1.4	Integer32	read-only	The max quota number of the interface, it ranges from 1 to 2048.
STR dhcpv4SnoopingIfRemoteId	1.3.6.1.4.1.3902.3.102.33.14.1.6	DisplayString	read-only	The string of remote-id indicated the server's MAC, the string is not allowed to overstep 256 octets and all kinds of character can be used except ' '.
I32 dhcpv4SnoopingIfSleepTime	1.3.6.1.4.1.3902.3.102.33.14.1.9	Integer32	read-only	This object indicates sleep limit value for DHCP snooping purpose.
dhcpv4SnoopingIfTable	1.3.6.1.4.1.3902.3.102.33.14		not-accessible	The table includes DHCPv4 snooping running parameters of each interface.
INT dhcpv4SnoopingIfTrustStatus	1.3.6.1.4.1.3902.3.102.33.14.1.3	INTEGER	read-only	The trust status of the interface, dhcpv4-untrust(0): discard DHCPv4 adv/reply packet, dhcpv4-trust(1): permit DHCPv4 adv/reply packet.
STR dhcpv4SnoopingOptionAccessNodeId	1.3.6.1.4.1.3902.3.102.33.10	DisplayString	read-only	The string of access-node-identifier.
STR dhcpv4SnoopingOptionCircuitId	1.3.6.1.4.1.3902.3.102.33.9	DisplayString	read-only	The string of the circuit-id, the string is not allowed to overstep 256 octets and all kinds of character can be used except ' '.
I32 dhcpv4SnoopingOptionCurrentUserNum	1.3.6.1.4.1.3902.3.102.33.12	Integer32	read-only	The current number of user who is online.
INT dhcpv4SnoopingOptionFormat	1.3.6.1.4.1.3902.3.102.33.5	INTEGER	read-only	The format includes 4 types of format defined china-tel, dsl-forum, telenor, user-cfg.
INT dhcpv4SnoopingOptionpolicy	1.3.6.1.4.1.3902.3.102.33.7	INTEGER	read-only	Whether the content of the option82 should be replaced by switch.
STR dhcpv4SnoopingOptionRemoteId	1.3.6.1.4.1.3902.3.102.33.8	DisplayString	read-only	The string of the remote-id, the string is not allowed to overstep 256 octets and all kinds of character can be used except ' '.
INT dhcpv4SnoopingOptionstate	1.3.6.1.4.1.3902.3.102.33.6	INTEGER	read-only	Whether the option82 is enable or not.
INT dhcpv4SnoopingOptionUserCfgPolicy	1.3.6.1.4.1.3902.3.102.33.11	INTEGER	read-only	The policy of user-cfg includes 3 types of way which are based on interface, uniform, VLAN.
dhcpv4SnoopingPortVlanEntry	1.3.6.1.4.1.3902.3.102.33.15.1		not-accessible	An entry includes DHCPv4 snooping running parameters of each interface.
dhcpv4SnoopingPortVlanTable	1.3.6.1.4.1.3902.3.102.33.15		not-accessible	The table includes DHCPv4 snooping running parameters of each interface.
dhcpv4SnoopingStaticBindingEntry	1.3.6.1.4.1.3902.3.102.33.17.1		not-accessible	MAC, VLAN and VPN is the key to locate the user-bind information, so it should be used in 'walk' action, the rest of index can be used in 'get' action.
I32 dhcpv4SnoopingStaticBindingIfIndex	1.3.6.1.4.1.3902.3.102.33.17.1.1	Integer32	read-only	The unique value generated for the interface.
STR dhcpv4SnoopingStaticBindingIfName	1.3.6.1.4.1.3902.3.102.33.17.1.2	DisplayString	read-only	Name of the interface.
IP dhcpv4SnoopingStaticBindingIpAddress	1.3.6.1.4.1.3902.3.102.33.17.1.3	IpAddress	read-only	The binding source IP address.
I32 dhcpv4SnoopingStaticBindingLifetime	1.3.6.1.4.1.3902.3.102.33.17.1.6	Integer32	read-only	The remaining lifetime of the entry. If saviObjectsBindingType=static, a value of 2147483647 represents infinity.
MAC dhcpv4SnoopingStaticBindingMacAddr	1.3.6.1.4.1.3902.3.102.33.17.1.4	MacAddress	read-only	The binding source MAC address.
INT dhcpv4SnoopingStaticBindingState	1.3.6.1.4.1.3902.3.102.33.17.1.5	INTEGER	read-only	The state of the binding entry.
dhcpv4SnoopingStaticBindingTable	1.3.6.1.4.1.3902.3.102.33.17		not-accessible	The binding state table containing the state of binding between source address and anchor.
I32 dhcpv4SnoopingStaticBindingVlanId	1.3.6.1.4.1.3902.3.102.33.17.1.7	Integer32	read-only	VLAN ID that the user belong to.
STR dhcpv4SnoopingStaticBindingVpls	1.3.6.1.4.1.3902.3.102.33.17.1.8	DisplayString	read-only	Name of the VPLS.
STR dhcpv4SnoopingVlanCircuitId	1.3.6.1.4.1.3902.3.102.33.13.1.4	DisplayString	read-only	The string of the circuit-id describes a series of user's circuit information. User can be located definitely throughout it. The string is not allowed to overstep 256 octets and all kinds of character can be used except ' '.
U32 dhcpv4SnoopingVlanId	1.3.6.1.4.1.3902.3.102.33.13.1.1	Unsigned32	read-only	VLAN ID.
STR dhcpv4SnoopingVlanRemoteId	1.3.6.1.4.1.3902.3.102.33.13.1.3	DisplayString	read-only	The string of remote-id indicated the server's MAC which is not allowed to overstep 256 octets. All kinds of character can be used except ' '.
INT dhcpv4SnoopingVlanState	1.3.6.1.4.1.3902.3.102.33.13.1.2	INTEGER	read-only	Function of DHCPv4 snooping is opened under VLAN, enable: receive the DHCPv4 packets, disable: discard the DHCPv4 packets.
zte	1.3.6.1.4.1.3902
zxr10	1.3.6.1.4.1.3902.3
zxr10dhcpv4Snooping	1.3.6.1.4.1.3902.3.102.33
zxr10switch	1.3.6.1.4.1.3902.3.102

RFC description

Provides DHCP snooping configuration and monitoring for ZTE ZXR10 switches to prevent unauthorized DHCP servers.

Start monitoring ZTE ZXR10 switches/routers with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZXR10-DHCPSNOOPING-MIB

What Is ZXR10-DHCPSNOOPING-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description