No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

E9000 Server V100R001 HMM Alarm Handling 19

This document describes E9000 server alarms in terms of the meaning, impact on the system, possible causes, and solutions.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
DHCP Snooping

DHCP Snooping

DHCPSNP_1.3.6.1.4.1.2011.5.25.112.2.1 hwDhcpSnpChaddrAlarm

Description

The number of the discarded DHCP packets in which the CHADDR field is inconsistent with the source MAC address exceeded the threshold on the interface. (IfIndex=[IfIndex], VlanIndex=[VlanIndex],VsiIndex=[VsiIndex], Interface=[IfName], VlanID=[VlanId], DiscardedNumber=[DiscardPktAccount])

The number of the discarded DHCP packets in which the source MAC address carried in the CHADDR field is incorrect exceeded the configured threshold on the interface.

Attributes

Attribute

Description

Alarm or Event

Event

Trap Severity

Warning

Mnemonic Code

hwDhcpSnpChaddrAlarm

Trap OID

1.3.6.1.4.1.2011.5.25.112.2.1

Alarm ID

This is an event trap and does not involve alarm ID.

Alarm Type

This is an event trap and does not involve alarm type.

Raise or Clear

This is an event trap and does not involve alarm generation or clearance.

Match trap

This is an event trap and does not involve the match trap.

Parameters

Parameter

Description

IfIndex

Interface index

VlanIndex

VLAN index

VsiIndex

VSI index

Interface

Interface name

VlanID

VLAN ID

DiscardedNumber

Number of discarded DHCP packets

VB

VB OID

VB Name

VB Index

1.3.6.1.4.1.2011.5.25.112.1.15.1.1

hwDhcpSnpStatisticIfDescr

hwDhcpSnpIfIndex;

hwDhcpSnpVlanIndex;

hwDhcpSnpVsiIndex;

1.3.6.1.4.1.2011.5.25.112.1.15.1.2

hwDhcpSnpStatisticVlanId

hwDhcpSnpIfIndex;

hwDhcpSnpVlanIndex;

hwDhcpSnpVsiIndex;

1.3.6.1.4.1.2011.5.25.112.1.15.1.3

hwChaddrNomatchSrcMacDhcpPktNum

hwDhcpSnpIfIndex;

hwDhcpSnpVlanIndex;

hwDhcpSnpVsiIndex;

Impact on the System

This alarm has no adverse impacts on the system, because attack DHCP packets with incorrect CHADDR fields are discarded.

Possible Causes

Attackers sent DHCP packets with incorrect CHADDR fields.

Procedure
  • Collect log files and contact technical support personnel.

DHCPSNP_1.3.6.1.4.1.2011.5.25.112.2.4 hwUntrustedReplyPktAlarm

Description

The number of the discarded DHCP reply packets on the untrusted interface exceeded the threshold. (IfIndex=[IfIndex], VlanIndex=[VlanIndex],VsiIndex=[VsiIndex], Interface=[IfName], VlanID=[VlanId], DiscardedNumber=[DiscardPktAccount])

The number of the discarded DHCP reply packets on the untrusted interface exceeded the threshold.

Attributes

Attribute

Description

Alarm or Event

Event

Trap Severity

Warning

Mnemonic Code

hwUntrustedReplyPktAlarm

Trap OID

1.3.6.1.4.1.2011.5.25.112.2.4

Alarm ID

This is an event trap and does not involve alarm ID.

Alarm Type

This is an event trap and does not involve alarm type.

Raise or Clear

This is an event trap and does not involve alarm generation or clearance.

Match trap

This is an event trap and does not involve the match trap.

Parameters

Parameter

Description

IfIndex

Interface index

VlanIndex

VLAN index

VsiIndex

VSI index

Interface

Interface name

VlanID

VLAN ID

DiscardedNumber

Number of discarded DHCP packets

VB

VB OID

VB Name

VB Index

1.3.6.1.4.1.2011.5.25.112.1.15.1.1

hwDhcpSnpStatisticIfDescr

hwDhcpSnpIfIndex;

hwDhcpSnpVlanIndex;

hwDhcpSnpVsiIndex;

1.3.6.1.4.1.2011.5.25.112.1.15.1.2

hwDhcpSnpStatisticVlanId

hwDhcpSnpIfIndex;

hwDhcpSnpVlanIndex;

hwDhcpSnpVsiIndex;

1.3.6.1.4.1.2011.5.25.112.1.15.1.7

hwUntrustedReplyPktNum

hwDhcpSnpIfIndex;

hwDhcpSnpVlanIndex;

hwDhcpSnpVsiIndex;

Impact on the System

This alarm has no adverse impact on the system, because trusted interfaces discard all DHCP reply packets from illegitimate DHCP servers.

Possible Causes

Bogus DHCP servers sent DHCP reply packets to DHCP clients.

Procedure
  • Collect log files and contact technical support personnel.

DHCPSNP_1.3.6.1.4.1.2011.5.25.112.2.5 hwNomatchSnpBindTblDhcpPktAlarm

Description

The number of the discarded DHCP request packets that did not match the binding table exceeded the threshold on the interface. (IfIndex=[IfIndex], VlanIndex=[VlanIndex],VsiIndex=[VsiIndex], Interface=[IfName], VlanID=[VlanId], DiscardedNumber=[DiscardPktAccount])

The number of discarded DHCP request packets that do not match any entry in the DHCP snooping binding table exceeded the threshold on the interface.

Attributes

Attribute

Description

Alarm or Event

Event

Trap Severity

Warning

Mnemonic Code

hwNomatchSnpBindTblDhcpPktAlarm

Trap OID

1.3.6.1.4.1.2011.5.25.112.2.5

Alarm ID

This is an event trap and does not involve alarm ID.

Alarm Type

This is an event trap and does not involve alarm type.

Raise or Clear

This is an event trap and does not involve alarm generation or clearance.

Match trap

This is an event trap and does not involve the match trap.

Parameters

Parameter

Description

IfIndex

Interface index

VlanIndex

VLAN index

VsiIndex

VSI index

Interface

Interface name

VlanID

VLAN ID

DiscardedNumber

Number of discarded DHCP packets

VB

VB OID

VB Name

VB Index

1.3.6.1.4.1.2011.5.25.112.1.15.1.1

hwDhcpSnpStatisticIfDescr

hwDhcpSnpIfIndex;

hwDhcpSnpVlanIndex;

hwDhcpSnpVsiIndex;

1.3.6.1.4.1.2011.5.25.112.1.15.1.2

hwDhcpSnpStatisticVlanId

hwDhcpSnpIfIndex;

hwDhcpSnpVlanIndex;

hwDhcpSnpVsiIndex;

1.3.6.1.4.1.2011.5.25.112.1.15.1.6

hwNomatchSnpBindTblDhcpPktNum

hwDhcpSnpIfIndex;

hwDhcpSnpVlanIndex;

hwDhcpSnpVsiIndex;

Impact on the System

This alarm has no adverse impacts on the system, because invalid DHCP request packets are discarded.

Possible Causes

Attackers disguised as authorized clients to communicate with DHCP servers.

Procedure
  • Collect log files and contact technical support personnel.

DHCPSNP_1.3.6.1.4.1.2011.5.25.112.2.6 hwDhcpPktRateAlarm

Description

The rate of DHCP packets exceeded the speed limit. (DiscardedNumber=[DiscardPktAccount])

The number of discarded DHCP packets whose rate exceeded the limit reached the configured threshold.

Attributes

Attribute

Description

Alarm or Event

Event

Trap Severity

Warning

Mnemonic Code

hwDhcpPktRateAlarm

Trap OID

1.3.6.1.4.1.2011.5.25.112.2.6

Alarm ID

This is an event trap and does not involve alarm ID.

Alarm Type

This is an event trap and does not involve alarm type.

Raise or Clear

This is an event trap and does not involve alarm generation or clearance.

Match trap

This is an event trap and does not involve the match trap.

Parameters

Parameter

Description

DiscardedNumber

Number of discarded DHCP packets

VB

VB OID

VB Name

VB Index

1.3.6.1.4.1.2011.5.25.112.1.11

hwDhcpPktRateDiscardNum

N/A

Impact on the System

A large number of DHCP packets exist on the network. After DHCP packet rate check is enabled, the DHCP packets from authorized clients may be discarded and the clients cannot go online, because the device discards the DHCP packets whose rate exceeds the limit.

Possible Causes

Attackers sent a large number of DHCP packets.

Procedure
  • Collect log files and contact technical support personnel.
Translation
Download
Updated: 2018-08-16

Document ID: EDOC1000015902

Views: 214106

Downloads: 1592

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next