HUAWEI-DHCP-SNOOPING-MIB
- Functions Overview
- Relationship Between Tables
- Description of Single Objects
- Description of MIB Tables
- Description of Alarm Objects
- hwDhcpSnpChaddrAlarm
- hwUntrustedReplyPktAlarm
- hwNomatchSnpBindTblDhcpPktAlarm
- hwDhcpPktRateAlarm
- hwSnpUserNumberAlarmIf
- hwSnpUserNumberAlarmIfResume
- hwSnpUserNumberAlarmVlan
- hwSnpUserNumberAlarmVlanResume
- hwSnpUserNumberAlarmGlobal
- hwSnpUserNumberAlarmGlobalResume
- hwNdSnpUserNumberAlarmIf
- hwNdSnpUserNumberAlarmIfResume
- hwNdSnpUserNumberAlarmGlobal
- hwNdSnpUserNumberAlarmGlobalResume
- hwNomatchSnpBindTblDhcpv6PktAlarm
- hwNomatchSnpBindTblNDPktAlarm
- hwSnpRemoteBackupAlarm
- hwSnpRemoteBackupAlarmResume
- hwRequestNoTrustPktAlarm
- Unsupported Objects
Functions Overview
HUAWEI-DHCP-SNOOPING-MIB is used to configure and query DHCP snooping and provide information about it. The MIB provides the functions such as configuring the DHCP snooping feature, querying the binding table and the statistics about invalid packets, checking the DHCP snooping packets, enabling the alarm function, creating and deleting entries, and reporting alarms based on the packet inspection.
Root object:
iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).huawei(2011).huaweiMgmt(5).hwDatacomm(25).hwDhcpSnpMib(112)
Relationship Between Tables
hwDhcpSnpBindTable describes the binding relationship between MAC addresses, IP addresses, interfaces, and VLANs. The binding relationship can be statically configured or dynamically generated.
hwDhcpSnpCfgTable is used to configure DHCP snooping. It covers configurations about DHCP snooping that is based on VLANs, VLAN + Port, and Layer 3 interfaces. According to the settings of objects in hwDhcpSnpCfgTable, the DHCP protocol stack matches DHCP packets, ARP packets, and IP packets with hwDhcpSnpBindTable.
hwDhcpSnpFalsePktStatisticTable records various types of illegal packets discarded because they are unmatched with hwDhcpSnpBindTable.
Description of Single Objects
hwDhcpSnpGlobal
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.1 |
hwDhcpSnpGlobal |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-write |
This object indicates the status of the global DHCP snooping. The value of this object identifies whether DHCP snooping is enabled globally before it is enabled on the port and VLAN. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpPktRateCheck
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.2 |
hwDhcpPktRateCheck |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-write |
The value of this object identifies whether checking DHCP packet rate is enabled. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpPktRate
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.3 |
hwDhcpPktRate |
Integer ( 32 bit ) ( 1..100 ) |
Read-write |
The value of this object identifies the maximum rate of DHCP packets. By default, its value is 100. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpPktRateAlarmThreshold
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.4 |
hwDhcpPktRateAlarmThreshold |
Integer ( 32 bit ) ( 1..1000 ) |
Read-write |
The value of this object identifies the alarm threshold of the DHCP packet rate. By default, its value is 100. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpPktRateAlarmEnable
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.5 |
hwDhcpPktRateAlarmEnable |
INTEGER{ enable ( 1 ), Disable ( 0 ) } |
Read-write |
The value of this object identifies whether the alarm function for DHCP packet rate is enabled. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpSnpBindTblNomatchedArpGlobalAction
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.6 |
hwDhcpSnpBindTblNomatchedArpGlobalAction |
INTEGER{ forward ( 0 ), discard ( 1 ) } |
Read-only |
The value of this object identifies the global action to process the ARP packets that are unmatched with binding entries. By default, its value is discard. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpSnpBindTblNomatchedIpGlobalAction
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.7 |
hwDhcpSnpBindTblNomatchedIpGlobalAction |
INTEGER{ forward ( 0 ), discard ( 1 ) } |
Read-only |
The value of this object identifies the global action to process the IP packets that are unmatched with binding entries. By default, its value is discard. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpSnpBindTblAutosaveFilename
This object must be set together with the hwDhcpSnpBindTblAutosave object. When multiple variables are set, the name in hwDhcpSnpBindTblAutosaveFilename is hwDhcpSnpBindTblAutosaveFilename.0 and the name in hwDhcpSnpBindTblAutosave is hwDhcpSnpBindTblAutosave.0.
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.8 |
hwDhcpSnpBindTblAutosaveFilename |
DisplayString ( SIZE ( 1..51 ) ) |
Read-write |
This object indicates the file name used when the binding table is backed up to the hard disk. The file is saved in full path, such as flash:/bind.tbl. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpSnpBindTblAutosave
This object must be set together with the hwDhcpSnpBindTblAutosaveFilename object. When multiple variables are set, the name in hwDhcpSnpBindTblAutosaveFilename is hwDhcpSnpBindTblAutosaveFilename.0 and the name in hwDhcpSnpBindTblAutosave is hwDhcpSnpBindTblAutosave.0.
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.9 |
hwDhcpSnpBindTblAutosave |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-write |
The value of this object identifies whether backing up the binding table to the hard disk is enabled. If enabled, you must re-enable backing up the backing table to the hard disk after the file name is modified. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpSnpGlobalThreshold
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.10 |
hwDhcpSnpGlobalThreshold |
Integer ( 32 bit ) ( 1..1000 ) |
Read-write |
The value of this object identifies the global alarm threshold of DHCP snooping. By default, its value is 100. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpPktRateDiscardNum
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.11 |
hwDhcpPktRateDiscardNum |
Counter ( 32 bit ) |
Read-only |
This object indicates the number of DHCP packets that are discarded because their rates exceed the maximum value. |
This object is implemented as defined in the corresponding MIB files. |
Description of MIB Tables
hwDhcpSnpCfgTable
This table lists configuration parameters of DHCP snooping.
The indexes of this table are hwDhcpSnpIfIndex and hwDhcpSnpVlanIndex.
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.13.1.1 |
hwDhcpSnpIfIndex |
Integer32 (0..2147483647) |
Not-accessible |
This object indicates the interface index. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.2 |
hwDhcpSnpVlanIndex |
Unsigned32 |
Not-accessible |
This object indicates the VLAN ID. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.5 |
hwDhcpSnpEnable |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether DHCP snooping is enabled. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.6 |
hwDhcpTrusted |
INTEGER{ trusted ( 1 ), untrusted ( 0 ) } |
Read-create |
This object identifies whether the Trusted function is enabled. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.7 |
hwDhcpOption82Insert |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object is used to insert Option 82 to DHCP packets. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.8 |
hwDhcpOption82Rebuild |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether the Option82 rebuild function of DHCP snooping is enabled. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.9 |
hwDhcpChaddrCheck |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether checking the consistency of CHADDR and SRC MAC is enabled. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.10 |
hwDhcpChaddrAlarmThreshold |
Integer ( 32 bit ) ( 1..1000 ) |
Read-create |
This object identifies the alarm threshold for the CHADDR check. By default, its value is 100. NOTE:
This object is valid only after the hwDhcpChaddrAlarmEnable object is set to enable. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.11 |
hwDhcpChaddrAlarmEnable |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether the alarm function is enabled for the CHADDR check. By default, its value is disable. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.12 |
hwDhcpArpCheck |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether the ARP packet check is enabled. By default, its value is disable. NOTE:
This object is valid only after the hwDhcpSnpEnable object is set to enable. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.13 |
hwDhcpSnpBindTblNomatchedArpAction |
INTEGER{ forward ( 0 ), discard ( 1 ) } |
Read-only |
This object identifies the method to process the ARP packets that do not match the DHCP snoop binding table in the interface or VLAN view. By default, its value is discard. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.14 |
hwDhcpArpAlarmThreshold |
Integer ( 32 bit ) ( 1..1000 ) |
Read-create |
This object identifies the alarm threshold for the ARP packet check. By default, its value is 100. NOTE:
This object is valid only after the hwDhcpArpAlarmEnable object is set to enable. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.15 |
hwDhcpArpAlarmEnable |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether the alarm function is enabled for the ARP packet check. By default, its value is disable. NOTE:
This object is valid only after the hwDhcpArpCheck object is set to enable. |
This object is not supported on the VLAN. This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.16 |
hwDhcpIpCheck |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether the IP packet check is enabled. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.17 |
hwDhcpSnpBindTblNomatchedIpAction |
INTEGER{ forward ( 0 ), discard ( 1 ) } |
Read-only |
This object identifies the method to process IP packets that do not match the DHCP snooping binding table in the interface or VLAN view. By default, its value is discard. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.18 |
hwDhcpIpAlarmThreshold |
Integer ( 32 bit ) ( 1..1000 ) |
Read-create |
This object identifies the alarm threshold for the IP packet check. By default, its value is 100. NOTE:
This object is valid only after the hwDhcpIpAlarmEnable object is set to enable. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.19 |
hwDhcpIpAlarmEnable |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether the alarm function is enabled for the IP packet check. By default, its value is disable. NOTE:
This object is valid only after the hwDhcpIpCheck object is set to enable. |
This object is not supported on the VLAN. This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.20 |
hwDhcpUntrustReplyAlarmThreshold |
Integer ( 32 bit ) ( 1..1000 ) |
Read-create |
This object identifies the alarm threshold for DHCP reply packets on an Untrusted interface. By default, its value is 100. NOTE:
This object is valid only after the hwDhcpUntrustReplyAlarmEnable object is set to enable. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.21 |
hwDhcpUntrustReplyAlarmEnable |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether the alarm function is enabled for the DHCP reply packets on an Untrusted interface. By default, its value is disable. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.22 |
hwDhcpSnpBindTblCheck |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether the check on the matching of IP address and MAC address with the binding table is enabled. By default, its value is disable. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.23 |
hwDhcpSnpBindTblAlarmThreshold |
Integer ( 32 bit ) ( 1..1000 ) |
Read-create |
This object identifies the alarm threshold for the IP and MAC binding check. By default, its value is 100. NOTE:
This object is valid only after the hwDhcpSnpBindTblAlarmEnable object is set to enable. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.24 |
hwDhcpSnpBindTblAlarmEnable |
INTEGER{ enable ( 1 ), disable ( 0 ) } |
Read-create |
This object identifies whether the alarm function is enabled for the IP and MAC binding check. By default, its value is disable. NOTE:
This object is valid only after the hwDhcpSnpBindTblCheck object is set to enable. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.30 |
hwDhcpSnpCfgTblRowStatus |
INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)} |
Read-create |
This object identifies the status of the row. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.31 |
hwDhcpPktIfRateCheck |
INTEGER{ enable ( 1 ), disable ( 2 ) } |
Read-create |
This object enables DHCP rate limit check on an interface. The default value is disable. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.32 |
hwDhcpPktIfRate |
Integer ( 32 bit ) ( 1..100 ) |
Read-create |
This object indicates the maximum rate of DHCP packets on an interface. The default value is 100. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.33 |
hwDhcpPktIfRateAlarmThreshold |
Integer ( 32 bit ) ( 1..1000 ) |
Read-create |
This object indicates the DHCP rate alarm threshold on an interface. The default value is 100. NOTE:
This object is valid only after the hwDhcpPktIfRateAlarmEnable object is set to enable. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.34 |
hwDhcpPktIfRateAlarmEnable |
INTEGER{ enable ( 1 ), disable ( 2 ) } |
Read-create |
This object enables DHCP rate alarm on an interface. The default value is disabled. |
This object is not supported on the VLAN. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.35 |
hwDhcpSnpIfVlanOption82RemoteID |
DisplayString(1..63) |
Read-create |
This object configures the format of the remote-ID in the option 82 field inserted in DHCP packets. |
The length supported by MIB file is smaller than 63 characters. |
1.3.6.1.4.1.2011.5.25.112.1.13.1.36 |
hwDhcpSnpIfVlanOption82CircuitID |
DisplayString(1..63) |
Read-create |
This object configures the format of the circuit-ID in the option 82 field inserted in DHCP packets. |
The length supported by MIB file is smaller than 63 characters. |
Creation Restriction
The entries can be created only when valid index and VLAN ID are specified.
For Layer 3 interfaces, VLAN ID must be 0; otherwise, the entry cannot be created.
For Layer 2 interfaces, the valid VLAN ID must be specified.
To create VLAN-based DHCP snooping, index must be 0.
hwDhcpOption82Insert and hwDhcpOption82Rebuild must be enabled only on the interface, so interface information must be provided.
Modification Restriction
hwDhcpOption82Insert and hwDhcpOption82Rebuild must be enabled only on the interface, so interface information must be provided.
Deletion Restriction
The entries in this table can be modified.
Access Restriction
The entries in this table can be read without restraint.
hwDhcpSnpBindTable
This table indicates the DHCP snooping binding table. It contains the binding relationship between MAC addresses and IP addresses of the specified interfaces or VLANs.
DHCP snooping is based on bindings. It checks CHADDR, ARP, IP, DHCP request, and DHCP reply packets, and then determines whether to discard packets, collect statistics on packets, or generate alarms.
The indexes of this table are hwDhcpSnpBindIpIndex, hwDhcpSnpBindPVlanIndex, hwDhcpSnpBindCVlanIndex, hwDhcpSnpBindVRFIdIndex, and hwDhcpSnpBindVsiIndex.
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.14.1.1 |
hwDhcpSnpBindIpIndex |
OCTET STRING (SIZE (4)) |
Not-accessible |
This object indicates the index of the IP address. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.2 |
hwDhcpSnpBindPVlanIndex |
INTEGER (1..4094) |
Not-accessible |
This object indicates the index of the S-VLAN ID. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.3 |
hwDhcpSnpBindCVlanIndex |
INTEGER (1..4094) |
Not-accessible |
This object indicates the index of the C-VLAN ID. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.4 |
hwDhcpSnpBindVRFIdIndex |
Integer( 32bit ) ( 0..1000 ) |
Not-accessible |
This object identifies the index of the VRF ID. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.5 |
hwDhcpSnpBindVsiIndex |
Integer (32 bit) (0..4095|65535) |
Not-accessible |
This object identifies the index of the VSI. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.6 |
hwDhcpSnpBindIfDescr |
DisplayString (SIZE (0..47 )) |
Read-create |
This object indicates the interface name. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.7 |
hwDhcpSnpBindPVlanId |
INTEGER (1..4094) |
Read-create |
This object indicates the S-VLAN ID. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.8 |
hwDhcpSnpBindCVlanId |
INTEGER (1..4094) |
Read-create |
This object indicates the C-VLAN ID. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.9 |
hwDhcpSnpBindVRFId |
Integer (32 bit) (0..1000) |
Read-only |
This object identifies an L3VPN. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.9 |
hwDhcpSnpBindVRFId |
Integer (32 bit) (0..1000) |
Read-only |
This object identifies an L3VPN. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.10 |
hwDhcpSnpBindVsiId |
Integer (32 bit) (0..4095|65535) |
Read-only |
This object identifies an L2VPN. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.12 |
hwDhcpSnpBindIp |
OCTET STRING (SIZE (4)) |
Read-create |
This object indicates the IP address of the binding entry. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.13 |
hwDhcpSnpBindStatus |
INTEGER{ dynamic (1), static (2) } |
Read-create |
This object identifies whether the binding entry is statically configured or dynamically generated. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.14 |
hwDhcpSnpBindLease |
INTEGER (0..4294967295) |
Read-only |
This object identifies the lease time of dynamic entries. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.14.1.18 |
hwDhcpSnpBindRowStatus |
INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)} |
Read-create |
This object identifies the status of the row. |
This object is implemented as defined in the corresponding MIB files. |
Creation Restriction
During setting of Layer 3 interfaces, valid full names (in character strings) of Layer 3 interfaces, such as, GigabitEthernet1/0/0, must be specified.
During setting of VLANs, valid VLAN IDs (in integers) must be specified.
To set Layer 2 interfaces in VLANs, full names and VLAN IDs must be specified and Layer 2 interfaces must have been added to the corresponding VLANs.
The hwDhcpSnpBindMac is configurable. When it is 0, the bound MAC address is invalid.
If the S-VLAN ID, C-VLAN ID, and VRF ID of the created entry are 0 and VsiIndex is 65535, the created entry is invalid.
- Create the table, you should specify the MAC address.
Modification Restriction
The entries in this table cannot be modified.
Before creating new entries, delete the binding entries that use the same IP, S-VLAN ID, C-VLAN ID, VRF ID, or VSI index as indexes.
Only bound entries with the same IP address, VLAN ID, and MAC address but different interfaces cannot be modified.
Deletion Restriction
Both static entries and dynamic entries can be deleted.
When deleting a binding table, the value of hwDhcpSnpBindStatus must be correct.
Access Restriction
The entries in this table can be read without restriction.
hwDhcpSnpFalsePktStatisticTable
This table collects statistics about illegal packets. It provides statistics about the discarded CHADDR packets, ARP packets, IP packets, DHCP request packets, and DHCP reply packets on the specified interfaces or VLANs for the NMS to query.
The indexes of this table are hwDhcpSnpIfIndex and hwDhcpSnpVlanIndex.
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.15.1.1 |
hwDhcpSnpStatisticIfDescr |
DisplayString |
Read-only |
This object indicates an interface name. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.15.1.2 |
hwDhcpSnpStatisticVlanId |
VlanId |
Read-only |
This object indicates a VLAN ID. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.15.1.3 |
hwChaddrNomatchSrcMacDhcpPktNum |
Counter(32bit) |
Read-only |
This object indicates the number of invalid DHCP packets whose CHADDR is inconsistent with the source MAC address. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.15.1.4 |
hwArpNomatchSnpBindTblPktNum |
Counter(32bit) |
Read-only |
This object indicates the number of ARP packets mismatching the DHCP snooping binding table. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.15.1.5 |
hwIpNomatchSnpBindTblPktNum |
Counter(32bit) |
Read-only |
This object indicates the number of IP packets mismatching the DHCP snooping binding table. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.15.1.6 |
hwNomatchSnpBindTblDhcpPktNum |
Counter(32bit) |
Read-only |
This object indicates the number of DHCP packets mismatching the DHCP snooping binding table. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.15.1.7 |
hwUntrustedReplyPktNum |
Counter(32bit) |
Read-only |
This object indicates the number of DHCP reply packets on untrusted interfaces. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.15.1.11 |
hwDhcpPktIfRateDiscardNum |
Counter(32bit) |
Read-only |
This object indicates the number of discarded packets whose rates exceed the threshold. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.15.1.12 |
hwRequestNoTrustPktNum |
Counter(32bit) |
Read-only |
This object indicates the number of DHCP request packets discarded because the interface that forwards the packets is not configured as a trusted interface. |
This object is implemented as defined in the corresponding MIB files. |
Creation Restriction
The entries in this table cannot be created.
Modification Restriction
The entries in this table cannot be modified.
Deletion Restriction
The entries in this table cannot be deleted.
Access Restriction
The values of the following objects all range from 0 to 2147483647:
hwChaddrNomatchSrcMacDhcpPktNum
hwArpNomatchSnpBindTblPktNum
hwIpNomatchSnpBindTblPktNum
hwNomatchSnpBindTblDhcpPktNum
hwUntrustedReplyPktNum
hwDhcpSnpGlobalOption82PktFormatTable
This table is used to obtain and configure global DHCP Option 82.
The index of this table is hwDhcpSnpGlobalOption82Type.
OID |
Object Name |
Syntax |
Max Access |
Description |
Implemented Specifications |
---|---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.22.1.1 |
hwDhcpSnpGlobalOption82Type |
INTEGER{ circuitid (1), remoteid (2)} |
Not-accessible |
This object indicates the DHCP Option 82 suboption type. NOTE:
Currently, only suboption 1 (circuit ID) and suboption 2 (remote ID) are supported. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.22.1.2 |
hwDhcpSnpGlobalOption82PktFormat |
INTEGER{ common (1), extend (2),userdefined(3), default(4)} |
read-write |
This object indicates the DHCP Option 82 format. |
This object is implemented as defined in the corresponding MIB files. |
1.3.6.1.4.1.2011.5.25.112.1.22.1.3 |
hwDhcpSnpGlobalOption82DefString |
Octet string (SIZE (1..255)) |
read-write |
This object indicates the content of DHCP Option 82. |
This object is implemented as defined in the corresponding MIB files. |
Creation Restriction
The entries in this table cannot be created.
Modification Restriction
The entries in this table can be modified without restriction.
Deletion Restriction
The entries in this table cannot be deleted.
Access Restriction
The entries in this table can be read without restriction.
Description of Alarm Objects
hwDhcpSnpChaddrAlarm
OID |
Object Name |
Bound Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.1 |
hwDhcpSnpChaddrAlarm |
|
An alarm is generated when the number of illegal CHADDR packets received by hwDhcpSnpStatisticIfDescr and hwDhcpSnpStatisticVlanId exceeds the threshold. An attacker often attacks a target by continuously changing its MAC address. |
This object is implemented as defined in the corresponding MIB files. |
hwUntrustedReplyPktAlarm
OID |
Object Name |
Bound Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.4 |
hwUntrustedReplyPktAlarm |
|
An alarm is generated when the number of illegal DHCP reply packets received by hwDhcpSnpStatisticIfDesc and hwDhcpSnpStatisticVlanId exceeds the threshold. An attacker often acts as a pseudo DHCP server to attack a target. |
This object is implemented as defined in the corresponding MIB files. |
hwNomatchSnpBindTblDhcpPktAlarm
OID |
Object Name |
Bound Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.5 |
hwNomatchSnpBindTblDhcpPktAlarm |
|
An alarm is generated when the number of illegal DHCP request packets received by hwDhcpSnpStatisticIfDescr and hwDhcpSnpStatisticVlanId exceeds the threshold. An attacker often attacks a target by sending pseudo messages for extending the IP leases. |
This object is implemented as defined in the corresponding MIB files. |
hwDhcpPktRateAlarm
OID |
Object Name |
Bound Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.6 |
hwDhcpPktRateAlarm |
|
An alarm is generated when the rate of the received DHCP packets is high. |
This object is implemented as defined in the corresponding MIB files. |
hwSnpUserNumberAlarmIf
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.8 |
hwSnpUserNumberAlarmIf |
|
The ratio of DHCP snooping binding entries learned by an interface to the maximum number of DHCP snooping binding entries reaches the upper threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwSnpUserNumberAlarmIfResume
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.9 |
hwSnpUserNumberAlarmIfResume |
|
The ratio of DHCP snooping binding entries learned by an interface to the maximum number of DHCP snooping binding entries reaches the lower threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwSnpUserNumberAlarmVlan
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.10 |
hwSnpUserNumberAlarmVlan |
|
The ratio of DHCP snooping binding entries learned in a VLAN to the maximum number of DHCP snooping binding entries reaches the upper threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwSnpUserNumberAlarmVlanResume
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.11 |
hwSnpUserNumberAlarmVlanResume |
|
The ratio of DHCP snooping binding entries learned in a VLAN to the maximum number of DHCP snooping binding entries reaches the lower threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwSnpUserNumberAlarmGlobal
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.12 |
hwSnpUserNumberAlarmGlobal |
|
The ratio of DHCP snooping binding entries learned globally to the maximum number of DHCP snooping binding entries reaches the upper threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwSnpUserNumberAlarmGlobalResume
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.13 |
hwSnpUserNumberAlarmGlobal Resume |
|
The ratio of DHCP snooping binding entries learned globally to the maximum number of DHCP snooping binding entries reaches the lower threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwNdSnpUserNumberAlarmIf
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.14 |
hwNdSnpUserNumberAlarmIf |
|
The ratio of ND snooping binding entries learned by an interface to the maximum number of ND snooping binding entries reaches the upper threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwNdSnpUserNumberAlarmIfResume
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.15 |
hwNdSnpUserNumberAlarmIfResume |
|
The ratio of ND snooping binding entries learned by an interface to the maximum number of ND snooping binding entries reaches the lower threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwNdSnpUserNumberAlarmGlobal
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.16 |
hwNdSnpUserNumberAlarmGlobal |
|
The ratio of ND snooping binding entries learned globally to the maximum number of ND snooping binding entries reaches the upper threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwNdSnpUserNumberAlarmGlobalResume
OID |
Object Name |
Binding Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.17 |
hwNdSnpUserNumberAlarmGlobalResume |
|
The ratio of ND snooping binding entries learned globally to the maximum number of ND snooping binding entries reaches the lower threshold. |
This object is implemented as defined in the corresponding MIB files. |
hwNomatchSnpBindTblDhcpv6PktAlarm
OID |
Object |
Bound Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.31 |
hwNomatchSnpBindTblDhcpv6PktAlarm |
|
This object indicates the DHCPv6 Request messages that do not match DHCP snooping binding entries. |
This object is implemented as defined in the corresponding MIB file. |
hwNomatchSnpBindTblNDPktAlarm
OID |
Object |
Bound Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.32 |
hwNomatchSnpBindTblNDPktAlarm |
|
This object indicates the ND packets that do not match ND snooping binding entries. |
This object is implemented as defined in the corresponding MIB file. |
hwSnpRemoteBackupAlarm
OID |
Object Name |
Bound Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.33 |
hwSnpRemoteBackupAlarm |
None | Failed to restore the DHCP snooping binding table from the remote server. |
This object is implemented as defined in the corresponding MIB file. |
hwSnpRemoteBackupAlarmResume
OID |
Object Name |
Bound Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.34 |
hwSnpRemoteBackupAlarmResume |
None | The DHCP snooping binding table has been successfully restored from the remote server. |
This object is implemented as defined in the corresponding MIB file. |
hwRequestNoTrustPktAlarm
OID |
Object Name |
Bound Variable |
Description |
Implemented Specifications |
---|---|---|---|---|
1.3.6.1.4.1.2011.5.25.112.2.35 |
hwRequestNoTrustPktAlarm |
|
The number of discarded DHCP request packets exceeds the threshold because the interface that forwards these packets is not configured as a trusted interface. |
This object is implemented as defined in the corresponding MIB files. |
Unsupported Objects
The functions corresponding to the following objects are not supported on the device. Do not use these MIB objects to maintain the device.
Object ID |
Object Name |
Table |
---|---|---|
1.3.6.1.4.1.2011.5.25.112.1.12 |
hwDhcpV6PktRateDiscardNum |
Single object |
1.3.6.1.4.1.2011.5.25.112.2.2 |
hwArpNomatchSnpBindTblPktAlarm |
Alarm object |
1.3.6.1.4.1.2011.5.25.112.2.3 |
hwIpNomatchSnpBindTblPktAlarm |
Alarm object |
1.3.6.1.4.1.2011.5.25.112.2.7 |
hwSnpUserNumberAlarm |
Alarm object |
1.3.6.1.4.1.2011.5.25.112.2.18 |
hwDhcpV6PktPrefixAlarm |
Alarm object |
1.3.6.1.4.1.2011.5.25.112.1.15.1.9 |
hwSnpBindingItemNum |
hwDhcpSnpFalsePktStatisticTable |
1.3.6.1.4.1.2011.5.25.112.1.15.1.10 |
hwSnpCfgMaxUserNum |
hwDhcpSnpFalsePktStatisticTable |
- Functions Overview
- Relationship Between Tables
- Description of Single Objects
- Description of MIB Tables
- Description of Alarm Objects
- hwDhcpSnpChaddrAlarm
- hwUntrustedReplyPktAlarm
- hwNomatchSnpBindTblDhcpPktAlarm
- hwDhcpPktRateAlarm
- hwSnpUserNumberAlarmIf
- hwSnpUserNumberAlarmIfResume
- hwSnpUserNumberAlarmVlan
- hwSnpUserNumberAlarmVlanResume
- hwSnpUserNumberAlarmGlobal
- hwSnpUserNumberAlarmGlobalResume
- hwNdSnpUserNumberAlarmIf
- hwNdSnpUserNumberAlarmIfResume
- hwNdSnpUserNumberAlarmGlobal
- hwNdSnpUserNumberAlarmGlobalResume
- hwNomatchSnpBindTblDhcpv6PktAlarm
- hwNomatchSnpBindTblNDPktAlarm
- hwSnpRemoteBackupAlarm
- hwSnpRemoteBackupAlarmResume
- hwRequestNoTrustPktAlarm
- Unsupported Objects