MIBs Depot

CISCO-DHCP-SNOOPING-MIB

Registered at
1.3.6.1.4.1.9.9.380
Last updated
2009-08-26 00:00
Organization
Cisco Systems, Inc.
Revisions
2009-08-26 00:00, 2009-08-10 00:00, 2009-04-12 00:00, 2007-11-13 00:00, 2007-07-12 00:00, 2007-05-30 00:00, 2006-03-16 16:00, 2005-10-26 00:00, 2004-03-04 00:00
Namespace
cisco
Source file
CISCO-DHCP-SNOOPING-MIB
Digest
sha256:a99e6b8169c90f1fa4e72060dc43fc616a3e1bb2db85fe9c7397235faf108c82

Description

The MIB module is for configuration of DHCP Snooping feature. DHCP Snooping is a security mechanism which uses information gleaned from DHCP packets to provide per-interface security capabilities.

Contact

Cisco Systems Customer Service Postal: 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-lan-switch-snmp@cisco.com

Imports

FromSymbols
CISCO-SMIciscoMgmt
IF-MIBInterfaceIndex, ifIndex, ifName
INET-ADDRESS-MIBInetAddress, InetAddressType
Q-BRIDGE-MIBVlanIndex
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Counter64, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

BRIDGE-MIB
CISCO-DHCP-SNOOPING-MIB
CISCO-SMI
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
P-BRIDGE-MIB
Q-BRIDGE-MIB
RFC1158-MIB
RFC1271-MIB
RMON-MIB
RMON2-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC
TOKEN-RING-RMON-MIB

Objects

NameOIDSyntaxAccessStatus
ciscoDhcpSnoopingMIBNotifs
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.0
ciscoDhcpSnoopingMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.1
cdsGlobal
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.1.1
cdsFeatureEnable
OBJECT-TYPE
This object indicates whether the DHCP Snooping feature is enabled at the device level. Setting this object to 'false' disables the DHCP Snooping feature globally thus disabling the feature at each VLAN. Setting this object to 'true' will start the DHCP Snooping feature running in the device. Once the DHCP Snooping is enabled, whether the feature is running at each VLAN is controlled by the cdsVlanConfigTable.
1.3.6.1.4.1.9.9.380.1.1.1TruthValueread-writecurrent
cdsDatabaseFile
OBJECT-TYPE
This object indicates the name of the database file used to store DHCP bindings information.
1.3.6.1.4.1.9.9.380.1.1.2SnmpAdminStringread-writecurrent
cdsDatabaseUpdateInterval
OBJECT-TYPE
This object indicates the time interval at which DHCP bindings information will be written to the database file denoted by cdsDatabaseFile object. Setting this object to zero will disable the storage of DHCP bindings.
1.3.6.1.4.1.9.9.380.1.1.3Unsigned32read-writecurrent
cdsRelayAgentInfoOptEnable
OBJECT-TYPE
This object indicates if the DHCP relay agent information option (option 82) will be inserted to DHCP packets by DHCP Snooping feature. If this object is set to 'true', DHCP option 82 data will be inserted to DHCP packets. If this object is set to 'false', DHCP option 82 data will not be inserted.
1.3.6.1.4.1.9.9.380.1.1.4TruthValueread-writecurrent
cdsRelayAgentInfoOptRemoteId
OBJECT-TYPE
This object indicates the Remote ID used as part of the DHCP relay information option (option 82) data inserted to DHCP packets by DHCP Snooping feature. The value of this object is ignored whenever the value of cdsRelayAgentInfoOptEnable object is 'false'. This object is deprecated and superceded by cdsRelayAgentInfoOptRemoteIdSub object.
1.3.6.1.4.1.9.9.380.1.1.5MacAddressread-onlydeprecated
cdsMatchMacAddressEnable
OBJECT-TYPE
This object indicates if DHCP Snooping Mac address matching is enabled. If this object is set to 'true', DHCP Snooping Mac address matching is enabled. If this object is set to 'false', DHCP Snooping Mac address matching is disabled.
1.3.6.1.4.1.9.9.380.1.1.6TruthValueread-writecurrent
cdsGlobalMaxBindingsLimit
OBJECT-TYPE
This object specifies the maximum number of DHCP bindings allowed in the device.
1.3.6.1.4.1.9.9.380.1.1.7Unsigned32read-writecurrent
cdsRelayAgentInfoOptRemoteIdSub
OBJECT-TYPE
This object specifies the Remote ID used in Agent Remote ID sub-option of the DHCP relay information option (option 82) data inserted to DHCP packets by DHCP Snooping feature. The value of this object is in a format of a user-defined string. Its default value is the device's MAC address. The value of this object is ignored whenever the value of cdsRelayAgentInfoOptEnable object is 'false'.
1.3.6.1.4.1.9.9.380.1.1.8OCTET STRING (SIZE(1..64))read-writecurrent
cdsBindingsNotifEnabled
OBJECT-TYPE
This object specifies whether cdsBindingsNotification is generated by the system. Setting this object value to 'true' will enable generation of cdsBindingsNotification. Seting this object value to 'false' will disable generation of cdsBindingsNotification.
1.3.6.1.4.1.9.9.380.1.1.9TruthValueread-writecurrent
cdsVlan
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.1.2
cdsVlanConfigTable
OBJECT-TYPE
A table provides the mechanism to control DHCP Snooping per VLAN. When a VLAN is created in a device supporting this table, a corresponding entry of this table will be added.
1.3.6.1.4.1.9.9.380.1.2.1not-accessiblecurrent
cdsVlanConfigEntry
OBJECT-TYPE
A row instance contains the configuration to enable or disable DHCP Snooping at each existing VLAN.
1.3.6.1.4.1.9.9.380.1.2.1.1not-accessiblecurrent
cdsVlanIndex
OBJECT-TYPE
This object indicates the VLAN number on which DHCP Snooping feature is configured.
1.3.6.1.4.1.9.9.380.1.2.1.1.1VlanIndexnot-accessiblecurrent
cdsVlanDhcpSnoopingEnable
OBJECT-TYPE
This object indicates whether DHCP Snooping is enabled in this VLAN. If this object is set to 'true', DHCP Snooping is enabled. If this object is set to 'false', DHCP Snooping is disabled.
1.3.6.1.4.1.9.9.380.1.2.1.1.2TruthValueread-writecurrent
cdsVlanDhcpSnoopingOperStatus
OBJECT-TYPE
This object indicates whether DHCP Snooping is operational in this VLAN. If this object is 'operational', DHCP Snooping is running. If this object is 'notOperational', DHCP Snooping is not running.
1.3.6.1.4.1.9.9.380.1.2.1.1.3INTEGER {operational(1), notOperational(2)}read-onlycurrent
cdsInterface
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.1.3
cdsIfConfigTable
OBJECT-TYPE
A table provides the mechanism to configure the trust state for DHCP Snooping purpose at each interface capable of this feature. Some of the interfaces (but not limited to) for which this feature might be applicable are: ifType = ethernetCsmacd(6).
1.3.6.1.4.1.9.9.380.1.3.1not-accessiblecurrent
cdsIfConfigEntry
OBJECT-TYPE
A row instance contains the configuration to enable or disable trust state for DHCP Snooping at each interface capable of this feature.
1.3.6.1.4.1.9.9.380.1.3.1.1not-accessiblecurrent
cdsIfTrustEnable
OBJECT-TYPE
This object indicates whether the interface is trusted for DHCP Snooping purpose. If this object is set to 'true', the interface is trusted. DHCP packets coming to this interface will be forwarded without checking. If this object is set to 'false', the interface is not trusted. DHCP packets coming to this interface will be subjected to DHCP checks.
1.3.6.1.4.1.9.9.380.1.3.1.1.1TruthValueread-writecurrent
cdsIfRateLimitTable
OBJECT-TYPE
A table provides the mechanism to configure the rate limit for DHCP Snooping purpose at each interface capable of this feature. Some of the interfaces (but not limited to) for which this feature might be applicable are: ifType = ethernetCsmacd(6).
1.3.6.1.4.1.9.9.380.1.3.2not-accessiblecurrent
cdsIfRateLimitEntry
OBJECT-TYPE
A row instance contains the configuration of rate limit DHCP Snooping at each interface capable of this feature.
1.3.6.1.4.1.9.9.380.1.3.2.1not-accessiblecurrent
cdsIfRateLimit
OBJECT-TYPE
This object indicates rate limit value for DHCP Snooping purpose. If the value of this object is 0, no rate limit is applied for DHCP traffic at this interface.
1.3.6.1.4.1.9.9.380.1.3.2.1.1Unsigned32read-writecurrent
cdsIfFeatureConfigTable
OBJECT-TYPE
A table provides the mechanism to enable or disable DHCP Snooping feature at each interface capable of this feature. Some of the interfaces (but not limited to) for which this configuration might be applicable are: ifType = ethernetCsmacd(6).
1.3.6.1.4.1.9.9.380.1.3.3not-accessiblecurrent
cdsIfFeatureConfigEntry
OBJECT-TYPE
A row instance contains the configuration to enable or disable DHCP Snooping at each interface capable of this feature.
1.3.6.1.4.1.9.9.380.1.3.3.1not-accessiblecurrent
cdsIfFeatureEnable
OBJECT-TYPE
This object indicates whether the DHCP Snooping feature is enabled at this interface. If this object is set to 'true', DHCP Snooping is enabled. If this object is set to 'false', DHCP Snooping is disabled.
1.3.6.1.4.1.9.9.380.1.3.3.1.1TruthValueread-writecurrent
cdsIfBindingsLimitTable
OBJECT-TYPE
A table provides the mechanism to configure the binding limit for DHCP Snooping purpose at each interface capable of this feature. Some of the interfaces (but not limited to) for which this feature might be applicable are: ifType = ethernetCsmacd(6).
1.3.6.1.4.1.9.9.380.1.3.4not-accessiblecurrent
cdsIfBindingsLimitEntry
OBJECT-TYPE
A row instance contains the configuration of binding limit at each interface capable of this feature.
1.3.6.1.4.1.9.9.380.1.3.4.1not-accessiblecurrent
cdsIfBindingsLimit
OBJECT-TYPE
This object specifies the maximum number of DHCP bindings allowed on this interface. This objects value will limit the number of entries in cdsBindingsTable and cdsStaticBindingsTable. The sum of all instances' value of cdsIfBindingsLimit in this table should be less than or equal to the object value of cdsGlobalMaxBindingsLimit.
1.3.6.1.4.1.9.9.380.1.3.4.1.1Unsigned32read-writecurrent
cdsIfVlanRelayInfoOptCircuitIdTable
OBJECT-TYPE
Each entry in this table represent circuit-id information, configured on per port per vlan.
1.3.6.1.4.1.9.9.380.1.3.5not-accessiblecurrent
cdsIfVlanRelayInfoOptCircuitIdEntry
OBJECT-TYPE
Entry contains circuit-id information for a particular interface and VLAN.
1.3.6.1.4.1.9.9.380.1.3.5.1not-accessiblecurrent
cdsIfVlan
OBJECT-TYPE
This object indicates the VLAN on which circuit-id is configured.
1.3.6.1.4.1.9.9.380.1.3.5.1.1VlanIndexnot-accessiblecurrent
cdsIfVlanRelayInfoOptCircuitId
OBJECT-TYPE
This object specifies circuit-id used in Agent Circuit ID sub-option of the DHCP relay information option (option 82) data inserted to DHCP packets by DHCP Snooping feature. The value of this object is in a format of a user-defined string. The value of this object is ignored whenever the value of cdsRelayAgentInfoOptEnable object is 'false'.
1.3.6.1.4.1.9.9.380.1.3.5.1.2OCTET STRING (SIZE(1..64))read-createcurrent
cdsIfVlanRelayInfoOptCircuitIdStatus
OBJECT-TYPE
This object is used to manage the creation and deletion of rows in this table. It only supports 'active(1)', 'destroy(6)' and 'createAndGo(4)' value. Entry in this table gets created by setting cdsIfVlanRelayInfoOptCircuitIdStatus object to 'createAndGo'. Entry in this table gets deleted by setting cdsIfVlanRelayInfoOptCircuitIdStatus object to 'destroy' Value of cdsIfRelayInfoOptCircuitId object can be modified when the value of this RowStatus object is 'active'.
1.3.6.1.4.1.9.9.380.1.3.5.1.3RowStatusread-createcurrent
cdsIfVlanRelayInfoOptCircuitIdDirect
OBJECT-TYPE
This object specifies to ignore the length and type in Agent Circuit ID sub-option of the DHCP relay information option (option 82) data inserted to DHCP packets by DHCP Snooping feature. The value of this object is ignored whenever the value of cdsRelayAgentInfoOptEnable object is 'false'.
1.3.6.1.4.1.9.9.380.1.3.5.1.4TruthValueread-createcurrent
cdsBindings
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.1.4
cdsBindingsTable
OBJECT-TYPE
A table provides the DHCP bindings information learnt by the device.
1.3.6.1.4.1.9.9.380.1.4.1not-accessiblecurrent
cdsBindingsEntry
OBJECT-TYPE
A row instance contains the Mac address, IP address type, IP address, VLAN number, interface number, leased time, and status of this instance.
1.3.6.1.4.1.9.9.380.1.4.1.1not-accessiblecurrent
cdsBindingsVlan
OBJECT-TYPE
This object indicates the VLAN to which a DHCP client host belongs.
1.3.6.1.4.1.9.9.380.1.4.1.1.1VlanIndexnot-accessiblecurrent
cdsBindingsMacAddress
OBJECT-TYPE
This object indicates the MAC address of a DHCP client host.
1.3.6.1.4.1.9.9.380.1.4.1.1.2MacAddressnot-accessiblecurrent
cdsBindingsAddrType
OBJECT-TYPE
This object indicates the type of IP address denoted in cdsBindingsIpAddress object.
1.3.6.1.4.1.9.9.380.1.4.1.1.3InetAddressTyperead-onlycurrent
cdsBindingsIpAddress
OBJECT-TYPE
This object indicates the allocated IP address of a DHCP client host.
1.3.6.1.4.1.9.9.380.1.4.1.1.4InetAddressread-onlycurrent
cdsBindingsInterface
OBJECT-TYPE
This object indicates the interface where a DHCP client host connects to.
1.3.6.1.4.1.9.9.380.1.4.1.1.5InterfaceIndexread-onlycurrent
cdsBindingsLeasedTime
OBJECT-TYPE
This object indicates the leased time of this DHCP bindings.
1.3.6.1.4.1.9.9.380.1.4.1.1.6Unsigned32read-onlycurrent
cdsBindingsStatus
OBJECT-TYPE
This object is used to manage the deletion of rows in this table. This object only supports active(1) and destroy(6) value. Whenever a DHCP binding is learnt by the device, an entry will be created by the device in this table with its RowStatus object set to active(1). Setting this object value to destroy(6) will clear the DHCP bindings information represented by this row instance.
1.3.6.1.4.1.9.9.380.1.4.1.1.7RowStatusread-createcurrent
cdsBindingsHostname
OBJECT-TYPE
This object indicates the host name of the DHCP client as denoted by DHCP option 12 field. An empty string indicates absence of option 12 in DHCP packet.
1.3.6.1.4.1.9.9.380.1.4.1.1.8SnmpAdminStringread-onlycurrent
cdsStaticBindingsTable
OBJECT-TYPE
A table provides the DHCP bindings information configured by (local or network) management.
1.3.6.1.4.1.9.9.380.1.4.2not-accessiblecurrent
cdsStaticBindingsEntry
OBJECT-TYPE
A row instance contains the Mac address, IP address type, IP address, VLAN number, interface number, and status of this instance.
1.3.6.1.4.1.9.9.380.1.4.2.1not-accessiblecurrent
cdsStaticBindingsVlan
OBJECT-TYPE
This object indicates the VLAN to which a DHCP client host belongs.
1.3.6.1.4.1.9.9.380.1.4.2.1.1VlanIndexnot-accessiblecurrent
cdsStaticBindingsMacAddress
OBJECT-TYPE
This object indicates the MAC address of a DHCP client host.
1.3.6.1.4.1.9.9.380.1.4.2.1.2MacAddressnot-accessiblecurrent
cdsStaticBindingsAddrType
OBJECT-TYPE
This object indicates the type of IP address denoted in cdsStaticBindingsIpAddress object.
1.3.6.1.4.1.9.9.380.1.4.2.1.3InetAddressTyperead-createcurrent
cdsStaticBindingsIpAddress
OBJECT-TYPE
This object indicates the allocated IP address of a DHCP client host.
1.3.6.1.4.1.9.9.380.1.4.2.1.4InetAddressread-createcurrent
cdsStaticBindingsInterface
OBJECT-TYPE
This object indicates the ifIndex value of the interface where a DHCP client host connects to.
1.3.6.1.4.1.9.9.380.1.4.2.1.5InterfaceIndexread-createcurrent
cdsStaticBindingsStatus
OBJECT-TYPE
This object is used to manage the creation and deletion of rows in this table. An entry can be created by setting the instance value of this object to 'createAndGo', and deleted by setting the instance value of this object to 'destroy'. The value of cdsStaticBindingsAddrType, cdsStaticBindingsIpAddress, cdsStaticBindingsInterface object can be modified when the value of this RowStatus object is 'active'.
1.3.6.1.4.1.9.9.380.1.4.2.1.6RowStatusread-createcurrent
cdsStatistics
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.1.5
cdsTotalForwardedPkts
OBJECT-TYPE
Indicates the total number of packets subjected to DHCP Snooping is forwarded.
1.3.6.1.4.1.9.9.380.1.5.1Counter64read-onlycurrent
cdsTotalDroppedPkts
OBJECT-TYPE
Indicates the total number of packets subjected to DHCP Snooping is dropped.
1.3.6.1.4.1.9.9.380.1.5.2Counter64read-onlycurrent
cdsUntrustedPortDroppedPkts
OBJECT-TYPE
Indicates the number of packets subjected to DHCP Snooping is dropped because they come from untrusted interface.
1.3.6.1.4.1.9.9.380.1.5.3Counter64read-onlycurrent
cdsForwardedWithoutOption82Pkts
OBJECT-TYPE
Indicates the number of packets subjected to DHCP Snooping is forwarded without insertion of DHCP relay agent information option (option 82) data.
1.3.6.1.4.1.9.9.380.1.5.4Counter32read-onlycurrent
cdsSrcGuard
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.1.6
cdsIfSrcGuardConfigTable
OBJECT-TYPE
A table provides the mechanism to enable or disable IP Source Guard at each physical interface capable of this feature. Some of the interfaces (but not limited to) for which this feature might be applicable are: ifType = ethernetCsmacd(6). When DHCP Snooping is enabled at an interface, a list of IP addresses is obtained through DHCP Snooping for this particular interface. If IP Source Guard is enabled, only traffic from these IP addresses is allowed to pass through the interface.
1.3.6.1.4.1.9.9.380.1.6.1not-accessiblecurrent
cdsIfSrcGuardConfigEntry
OBJECT-TYPE
A row instance contains the configuration to enable or disable IP Source Guard as well as the configuration of the filter type at each physical interface capable of IP Source Guard feature.
1.3.6.1.4.1.9.9.380.1.6.1.1not-accessiblecurrent
cdsIfSrcGuardEnable
OBJECT-TYPE
This object indicates whether IP Source Guard is enabled at this interface. If this object is set to 'true', IP Source Guard is enabled. Traffic coming to this interface will be forwarded if it is from the list of IP addresses obtained through DHCP Snooping. Otherwise, it is denied. If this object is set to 'false', IP Source Guard is disabled. This object is deprecated and superceded by cdsIfSrcGuardFilterType object.
1.3.6.1.4.1.9.9.380.1.6.1.1.1TruthValueread-writedeprecated
cdsIfSrcGuardFilterType
OBJECT-TYPE
This object indicates the traffic filter type applied at this interface. 'disable' indicates that Source Guard feature is disabled. 'ip' indicates that Source Guard feature is enabled and only applied to IP traffic. 'ipMac' indicates that Source Guard feature is enabled and applied to both IP and MAC traffic. 'strictIpMac' indicates that Source Guard feature is enabled and applied to IP traffic. IP traffic originating from a DHCP client will subject to validation of client IP address, MAC address, VLAN and interface where the DHCP client is connected.
1.3.6.1.4.1.9.9.380.1.6.1.1.2INTEGER {disable(1), ip(2), ipMac(3), strictIpMac(4)}read-writecurrent
cdsIfSrcGuardAddrTable
OBJECT-TYPE
A table provides the information on IP addresses used for IP Source Guard purpose at each physical interface capable of this feature. Some of the interfaces (but not limited to) for which this feature might be applicable are: ifType = ethernetCsmacd(6).
1.3.6.1.4.1.9.9.380.1.6.2not-accessiblecurrent
cdsIfSrcGuardAddrEntry
OBJECT-TYPE
A row instance contains the IP address type and IP address used for IP Source Guard purpose at each physical interface capable of this feature.
1.3.6.1.4.1.9.9.380.1.6.2.1not-accessiblecurrent
cdsIfSrcGuardIndex
OBJECT-TYPE
This object indicates the index of this entry.
1.3.6.1.4.1.9.9.380.1.6.2.1.1Unsigned32not-accessiblecurrent
cdsIfSrcGuardAddrType
OBJECT-TYPE
This object indicates the type of IP address denoted in cdsIfSrcGuardAddress object.
1.3.6.1.4.1.9.9.380.1.6.2.1.2InetAddressTyperead-onlycurrent
cdsIfSrcGuardAddress
OBJECT-TYPE
This object indicates the IP address obtained at this interface through DHCP Snooping or statically configured.
1.3.6.1.4.1.9.9.380.1.6.2.1.3InetAddressread-onlycurrent
cdsIfSrcGuardIpFilterAction
OBJECT-TYPE
This object indicates the IP Source Guard action applied at this interface with respect to IP traffic. permitIpAddress(1) indicates that IP traffic coming from the IP address denoted by cdsIfSrcGuardAddress object will be allowed to go through. denyAllIpAdress(2) indicates that all IP traffic coming to this interface will be dropped. The value of cdsIfSrcGuardAddress object will be ignored in this case.
1.3.6.1.4.1.9.9.380.1.6.2.1.4INTEGER {permitIpAddress(1), denyAllIpAddress(2)}read-onlycurrent
cdsIfSrcGuardFilterMode
OBJECT-TYPE
This object indicates the Source Guard filter mode at this interface. active(1) indicates that the Source Guard feature is active at this interface. inactiveTrustPort(2) indicates that the Source Guard feature is inactive because this interface is a DHCP Snooping trust interface. inactiveNoSnoopingVlan(3) indicates that the Source Guard feature is inactive because this interface does not have a VLAN which has DHCP Snooping enabled.
1.3.6.1.4.1.9.9.380.1.6.2.1.5INTEGER {active(1), inactiveTrustPort(2), inactiveNoSnoopingVlan(3)}read-onlycurrent
cdsIfSrcGuardMacAddress
OBJECT-TYPE
This object indicates the MAC address for Source Guard purpose.
1.3.6.1.4.1.9.9.380.1.6.2.1.6MacAddressread-onlycurrent
cdsIfSrcGuardMacFilterAction
OBJECT-TYPE
This object indicates the Source Guard action applied at this interface with respect to MAC traffic. allowMacAddress(1) indicates that MAC traffic coming from the MAC address denoted by cdsIfSrcGuardMacAddress object will be allowed to go through. denyAllMacAddresses(2) indicates that all MAC traffic coming to this interface will be dropped. The value of cdsIfSrcGuardMacAddress object will be ignored in this case. permitAllMacAddresses(3) indicates that all MAC traffic coming to this interface will be allowed. The value of cdsIfSrcGuardMacAddress object will be ignored in this case.
1.3.6.1.4.1.9.9.380.1.6.2.1.7INTEGER {allowMacAddress(1), denyAllMacAddresses(2), permitAllMacAddresses(3)}read-onlycurrent
cdsIfSrcGuardVlansLow
OBJECT-TYPE
A string of octets containing one bit per VLAN for VLANs with VlanIndex value of 0 to 2047. The first octet corresponds to VLANs with VlanIndex values of 0 through 7; the second octet to VLANs 8 through 15; etc. The most significant bit of each octet corresponds to the lowest value VlanIndex in that octet. For each VLAN, if Source Guard feature is enabled then the bit corresponding to that VLAN is set to '1'. Note that if the length of this string is less than 256 octets, any 'missing' octets are assumed to contain the value zero. A NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs.
1.3.6.1.4.1.9.9.380.1.6.2.1.8OCTET STRING (SIZE(0..256))read-onlycurrent
cdsIfSrcGuardVlansHigh
OBJECT-TYPE
A string of octets containing one bit per VLAN for VLANs with VlanIndex value of 2048 to 4095. The first octet corresponds to VLANs with VlanIndex values of 2048 through 2055; the second octet to VLANs 2056 through 2063; etc. The most significant bit of each octet corresponds to the lowest value VlanIndex in that octet. For each VLAN, if Source Guard feature is enabled then the bit corresponding to that VLAN is set to '1'. Note that if the length of this string is less than 256 octets, any 'missing' octets are assumed to contain the value zero. A NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs.
1.3.6.1.4.1.9.9.380.1.6.2.1.9OCTET STRING (SIZE(0..256))read-onlycurrent
ciscoDhcpSnoopingMIBConformance
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.2
cdsMIBCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.2.1
cdsMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.380.2.2

Notifications

NameOIDStatus
cdsBindingsNotification
NOTIFICATION-TYPE
This notification is generated when a DHCP binding is learnt dynamically by the device. cdsBindingsAddrType and cdsBindingsIpAddress provides the IP address allocated for the DHCP client by the DHCP server. ifName identifies the interface where the DHCP client connects to.
1.3.6.1.4.1.9.9.380.0.1current

Conformance

NameOIDStatus
cdsMIBCompliance
MODULE-COMPLIANCE
The compliance statement for the CISCO-DHCP-SNOOPING-MIB
1.3.6.1.4.1.9.9.380.2.1.1deprecated
cdsMIBCompliance2
MODULE-COMPLIANCE
The compliance statement for the CISCO-DHCP-SNOOPING-MIB
1.3.6.1.4.1.9.9.380.2.1.2deprecated
cdsMIBCompliance3
MODULE-COMPLIANCE
The compliance statement for the CISCO-DHCP-SNOOPING-MIB
1.3.6.1.4.1.9.9.380.2.1.3deprecated
cdsMIBCompliance4
MODULE-COMPLIANCE
The compliance statement for the CISCO-DHCP-SNOOPING-MIB
1.3.6.1.4.1.9.9.380.2.1.4deprecated
cdsMIBCompliance5
MODULE-COMPLIANCE
The compliance statement for the CISCO-DHCP-SNOOPING-MIB
1.3.6.1.4.1.9.9.380.2.1.5deprecated
cdsMIBCompliance6
MODULE-COMPLIANCE
The compliance statement for the CISCO-DHCP-SNOOPING-MIB. This statement is deprecated and superceded by cdsMIBCompliance7.
1.3.6.1.4.1.9.9.380.2.1.6deprecated
cdsMIBCompliance7
MODULE-COMPLIANCE
The compliance statement for the CISCO-DHCP-SNOOPING-MIB
1.3.6.1.4.1.9.9.380.2.1.7current
cdsGlobalEnableGroup
OBJECT-GROUP
A collection of object which are used to configure as well as show information regarding the feature enabling.
1.3.6.1.4.1.9.9.380.2.2.1current
cdsDatabaseGroup
OBJECT-GROUP
A collection of objects which are used to configure as well as show information regarding the DHCP Snooping database filename and update interval.
1.3.6.1.4.1.9.9.380.2.2.2current
cdsVlanConfigGroup
OBJECT-GROUP
A collection of object which are used to configure as well as show information regarding the DHCP Snooping feature per VLAN.
1.3.6.1.4.1.9.9.380.2.2.3current
cdsIfConfigGroup
OBJECT-GROUP
A collection of object which are used to configure as well as show information regarding the interface trust state for DHCP Snooping purpose.
1.3.6.1.4.1.9.9.380.2.2.4current
cdsIfRateLimitGroup
OBJECT-GROUP
A collection of object which are used to configure as well as show information regarding the rate limit per interface for DHCP Snooping purpose.
1.3.6.1.4.1.9.9.380.2.2.5current
cdsBindingsGroup
OBJECT-GROUP
A collection of object which are used to configure as well as show information regarding the DHCP bindings data.
1.3.6.1.4.1.9.9.380.2.2.6current
cdsStatisticsGroup
OBJECT-GROUP
A collection of object which are used to show statistics information regarding DHCP Snooping feature.
1.3.6.1.4.1.9.9.380.2.2.7current
cdsRelayAgentInfoOptGroup
OBJECT-GROUP
A collection of objects which are used to configure as well as show information regarding DHCP Option 82 insertion.
1.3.6.1.4.1.9.9.380.2.2.8current
cdsIfSrcGuardGroup
OBJECT-GROUP
A collection of objects which are used to configure as well as show information regarding IP Source Guard purpose.
1.3.6.1.4.1.9.9.380.2.2.9deprecated
cdsRelayAgentRemoteIdGroup
OBJECT-GROUP
A collection of objects which are used to indicate information regarding DHCP Option 82 remote ID relay agent.
1.3.6.1.4.1.9.9.380.2.2.10deprecated
cdsMatchMacAddressGroup
OBJECT-GROUP
A collection of objects which are used to configure as well as show information regarding DHCP Snooping Mac address matching.
1.3.6.1.4.1.9.9.380.2.2.11current
cdsIfFeatureConfigGroup
OBJECT-GROUP
A collection of object which are used to configure as well as show information regarding enable or disable of DHCP Snooping feature at the interface.
1.3.6.1.4.1.9.9.380.2.2.12current
cdsBindingsLimitGroup
OBJECT-GROUP
A collection of objects which provides information regarding binding limit for DHCP Snooping purpose.
1.3.6.1.4.1.9.9.380.2.2.13current
cdsStaticBindingsGroup
OBJECT-GROUP
A collection of objects which is used to configure as well as show information regarding the DHCP bindings data configured by users.
1.3.6.1.4.1.9.9.380.2.2.14current
cdsIfSrcGuardIpFilterGroup
OBJECT-GROUP
A collection of objects which is used to show information regarding interface IP source guard purpose.
1.3.6.1.4.1.9.9.380.2.2.15current
cdsIfSrcGuardExtGroup
OBJECT-GROUP
A collection of objects which is used to show additional information regarding the IP source guard feature.
1.3.6.1.4.1.9.9.380.2.2.16current
cdsIfSrcGuardTrafficFilterGroup
OBJECT-GROUP
A collection of objects which is used to configure the type of traffic to be filtered by IP source guard feature.
1.3.6.1.4.1.9.9.380.2.2.17current
cdsIfSrcGuardGroupRev1
OBJECT-GROUP
A collection of objects which are used to configure as well as show information regarding IP Source Guard purpose.
1.3.6.1.4.1.9.9.380.2.2.18current
cdsBindingsHostnameGroup
OBJECT-GROUP
A collection of objects which indicates the host name of DHCP client in DHCP bindings data.
1.3.6.1.4.1.9.9.380.2.2.19current
cdsRelayAgentInfoOptRemoteIdSubGroup
OBJECT-GROUP
A collection of objects which are used to configure as well as show remote-id of option 82 DHCP Snooping.
1.3.6.1.4.1.9.9.380.2.2.20current
cdsIfVlanRelayInfoOptCircuitIdGroup
OBJECT-GROUP
A collection of objects which are used to configure as well as show circuit-id of option 82 DHCP Snooping.
1.3.6.1.4.1.9.9.380.2.2.21current
cdsStatisticsExtGroup
OBJECT-GROUP
A collection of objects which are used to show additional DHCP snooping statistics information.
1.3.6.1.4.1.9.9.380.2.2.22current
cdsNotifControlGroup
OBJECT-GROUP
A collection of object(s) which provides information on bindings notifications control for DHCP Snooping feature.
1.3.6.1.4.1.9.9.380.2.2.23current
cdsBindingsNotificationGroup
NOTIFICATION-GROUP
A collection of notification(s) which provides bindings notifications support for DHCP Snooping feature.
1.3.6.1.4.1.9.9.380.2.2.24current
cdsIfVlanRelayInfoOptCircuitIdGroupSup1
OBJECT-GROUP
A collection of objects which indicates to ignore the length and type in Agent Circuit ID sub-option of the DHCP relay information option (option 82) data inserted to DHCP packets by DHCP Snooping feature.
1.3.6.1.4.1.9.9.380.2.2.25current
cdsVlanOperStatusGroup
OBJECT-GROUP
A collection of objects which provides information on operation status of DHCP Snooping feature in VLAN.
1.3.6.1.4.1.9.9.380.2.2.26current