1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
|
-- ============================================================================
-- AT-DHCPSN-MIB, Allied Telesis enterprise MIB: DHCP Snooping
--
-- Copyright (c) 2009 by Allied Telesis, Inc.
-- All rights reserved.
--
-- ============================================================================
AT-DHCPSN-MIB DEFINITIONS ::= BEGIN
IMPORTS
modules
FROM AT-SMI-MIB
IpAddress, OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE
FROM SNMPv2-SMI
DisplayString
FROM SNMPv2-TC;
atDhcpsn MODULE-IDENTITY
LAST-UPDATED "201009070000Z"
ORGANIZATION
"Allied Telesis, Inc"
CONTACT-INFO
"http://www.alliedtelesis.com"
DESCRIPTION
"Added two more violation types for DHCP Snooping."
REVISION "201009070000Z"
DESCRIPTION
"Generic syntax tidy up"
REVISION "201006140445Z"
DESCRIPTION
"MIB revision history dates in descriptions updated."
REVISION "201002090130Z"
DESCRIPTION
"This MIB file contains definitions of managed objects for DHCP
Snooping in AlliedWare Plus."
REVISION "200912100130Z"
DESCRIPTION
"Initial Revision"
::= { modules 537 }
--
-- Node definitions
--
atDhcpsnEvents OBJECT IDENTIFIER ::= { atDhcpsn 0 }
atDhcpsnTrap NOTIFICATION-TYPE
OBJECTS { atDhcpsnIfIndex, atDhcpsnVid, atDhcpsnSmac, atDhcpsnOpcode, atDhcpsnCiaddr,
atDhcpsnYiaddr, atDhcpsnGiaddr, atDhcpsnSiaddr, atDhcpsnChaddr, atDhcpsnVioType
}
STATUS current
DESCRIPTION
"DHCP Snooping violation trap."
::= { atDhcpsnEvents 1 }
atArpsecTrap NOTIFICATION-TYPE
OBJECTS { atArpsecIfIndex, atArpsecClientIP, atArpsecSrcMac, atArpsecVid, atArpsecVioType
}
STATUS current
DESCRIPTION
"DHCP Snooping ARP Security violation trap."
::= { atDhcpsnEvents 2 }
atDhcpsnVariablesTable OBJECT-TYPE
SYNTAX SEQUENCE OF AtDhcpsnVariablesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains rows of DHCP Snooping information."
::= { atDhcpsn 1 }
atDhcpsnVariablesEntry OBJECT-TYPE
SYNTAX AtDhcpsnVariablesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A set of parameters that describe the DHCP Snooping features."
INDEX { atDhcpsnIfIndex }
::= { atDhcpsnVariablesTable 1 }
AtDhcpsnVariablesEntry ::=
SEQUENCE {
atDhcpsnIfIndex
INTEGER,
atDhcpsnVid
INTEGER,
atDhcpsnSmac
DisplayString,
atDhcpsnOpcode
INTEGER,
atDhcpsnCiaddr
IpAddress,
atDhcpsnYiaddr
IpAddress,
atDhcpsnGiaddr
IpAddress,
atDhcpsnSiaddr
IpAddress,
atDhcpsnChaddr
DisplayString,
atDhcpsnVioType
INTEGER
}
atDhcpsnIfIndex OBJECT-TYPE
SYNTAX INTEGER (1..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Ifindex of the port that the packet was received on."
::= { atDhcpsnVariablesEntry 1 }
atDhcpsnVid OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"VLAN ID of the port that the packet was received on."
::= { atDhcpsnVariablesEntry 2 }
atDhcpsnSmac OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Source MAC address of the packet that caused the trap."
::= { atDhcpsnVariablesEntry 3 }
atDhcpsnOpcode OBJECT-TYPE
SYNTAX INTEGER
{
bootpRequest(1),
bootpReply(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Opcode value of the BOOTP packet that caused the trap. Only
bootpRequest(1) or bootpReply(2) is valid."
::= { atDhcpsnVariablesEntry 4 }
atDhcpsnCiaddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Ciaddr value of the BOOTP packet that caused the trap."
::= { atDhcpsnVariablesEntry 5 }
atDhcpsnYiaddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Yiaddr value of the BOOTP packet that caused the trap."
::= { atDhcpsnVariablesEntry 6 }
atDhcpsnGiaddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Giaddr value of the BOOTP packet that caused the trap."
::= { atDhcpsnVariablesEntry 7 }
atDhcpsnSiaddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Siaddr value of the BOOTP packet that caused the trap."
::= { atDhcpsnVariablesEntry 8 }
atDhcpsnChaddr OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Chaddr value of the BOOTP packet that caused the trap."
::= { atDhcpsnVariablesEntry 9 }
atDhcpsnVioType OBJECT-TYPE
SYNTAX INTEGER
{
invalidBootp(1),
invalidDhcpAck(2),
invalidDhcpRelDec(3),
invalidIp(4),
maxBindExceeded(5),
opt82InsertErr(6),
opt82RxInvalid(7),
opt82RxUntrusted(8),
opt82TxUntrusted(9),
replyRxUntrusted(10),
srcMacChaddrMismatch(11),
staticEntryExisted(12),
dbAddErr(13)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The reason that the trap was generated. invalidBootp(1) indicates
that the received BOOTP packet was invalid. For example, it is
neither BootpRequest nor BootpReply. invalidDhcpAck(2) indicates
that the received DHCP ACK was invalid. invalidDhcpRelDec(3) indicates
the DHCP Release or Decline was invalid. invalidIp(4) indicates
that the received IP packet was invalid. maxBindExceeded(5) indicates
that if the entry was added, the maximum bindings configured for
the port would be exceeded. opt82InsertErr(6) indicates that the
insertion of Option 82 failed. opt82RxInvalid(7) indicates that
the received Option 82 information was invalid. opt82RxUntrusted(8)
indicates that Option 82 information was received on an untrusted
port. opt82TxUntrusted(9) indicates that Option 82 would have been
transmitted out an untrusted port. replyRxUntrusted(10) indicates
that a BOOTP Reply was received on an untrusted port.
srcMacChaddrMismatch(11) indicates that the source MAC address of
the packet did not match the BOOTP CHADDR of the packet.
staticEntryExisted(12) indicates that the static entry to be added
already exists. dbAddErr(13) indicates that adding an entry to the
database failed."
::= { atDhcpsnVariablesEntry 10 }
-- -------------------------------------------- --
-- The ARP Security violation table
-- -------------------------------------------- --
atArpsecVariablesTable OBJECT-TYPE
SYNTAX SEQUENCE OF AtArpsecVariablesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains rows of DHCP Snooping ARP Security information."
::= { atDhcpsn 2 }
atArpsecVariablesEntry OBJECT-TYPE
SYNTAX AtArpsecVariablesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A set of parameters that describe the DHCP Snooping ARP Security features."
INDEX { atArpsecIfIndex }
::= { atArpsecVariablesTable 1 }
AtArpsecVariablesEntry ::=
SEQUENCE {
atArpsecIfIndex
INTEGER,
atArpsecClientIP
IpAddress,
atArpsecSrcMac
DisplayString,
atArpsecVid
INTEGER,
atArpsecVioType
INTEGER
}
atArpsecIfIndex OBJECT-TYPE
SYNTAX INTEGER (1..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Ifindex of the port that the ARP packet was received on."
::= { atArpsecVariablesEntry 1 }
atArpsecClientIP OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Source IP address of the ARP packet."
::= { atArpsecVariablesEntry 2 }
atArpsecSrcMac OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Source MAC address of the ARP packet."
::= { atArpsecVariablesEntry 3 }
atArpsecVid OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"VLAN ID of the port that the ARP packet was received on."
::= { atArpsecVariablesEntry 4 }
atArpsecVioType OBJECT-TYPE
SYNTAX INTEGER
{
srcIpNotFound(1),
badVLAN(2),
badPort(3),
srcIpNotAllocated(4)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The reason that the trap was generated. srcIpNotFound(1) indicates
that the Sender IP address of the ARP packet was not found in the
DHCP Snooping database. badVLAN(2) indicates that the VLAN of the
DHCP Snooping binding entry associated with the Sender IP address
of the ARP packet does not match the VLAN that the ARP packet was
received on. badPort(3) indicates that the port of the DHCP
Snooping binding entry associated with the Sender IP address of the
ARP packet does not match the port that the ARP packet was received
on. srcIpNotAllocated(4) indicates that the CHADDR of the DHCP
Snooping binding entry associated with the Sender IP address of
the ARP packet does not match the Source MAC and/or the ARP source
MAC of the ARP packet."
::= { atArpsecVariablesEntry 5 }
END
--
-- at-dhcpsn.mib
--
|
