MrMeeb/snmp_mib_archive
1
0
Fork 0
mirror of https://github.com/hsnodgrass/snmp_mib_archive.git synced 2025-04-18 00:13:02 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
snmp_mib_archive/CISCO-DHCP-SNOOPING-MIB.my 2
Heston Snodgrass 89bf4b016e initial commit
2016-12-15 15:03:18 -07:00

2234 lines
67 KiB
Plaintext
Raw Blame History

-- *****************************************************************
-- CISCO-DHCP-SNOOPING-MIB
--
-- March 2004, Edward Pham
--
-- Copyright (c) 2004-2006, 2007, 2009 by cisco Systems Inc.
-- All rights reserved.
-- *****************************************************************
CISCO-DHCP-SNOOPING-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY,
OBJECT-TYPE,
Unsigned32,
Counter32,
Counter64,
NOTIFICATION-TYPE
FROM SNMPv2-SMI
MODULE-COMPLIANCE,
OBJECT-GROUP,
NOTIFICATION-GROUP
FROM SNMPv2-CONF
TruthValue,
MacAddress,
RowStatus
FROM SNMPv2-TC
SnmpAdminString
FROM SNMP-FRAMEWORK-MIB
ifIndex,
ifName,
InterfaceIndex
FROM IF-MIB
InetAddressType,
InetAddress
FROM INET-ADDRESS-MIB
VlanIndex
FROM Q-BRIDGE-MIB
ciscoMgmt
FROM CISCO-SMI;
ciscoDhcpSnoopingMIB MODULE-IDENTITY
LAST-UPDATED "200904120000Z"
ORGANIZATION "Cisco Systems, Inc."
CONTACT-INFO
"Cisco Systems
Customer Service
Postal: 170 W Tasman Drive
San Jose, CA 95134
USA
Tel: +1 800 553-NETS
E-mail: cs-lan-switch-snmp@cisco.com"
DESCRIPTION
"The MIB module is for configuration of DHCP Snooping
feature. DHCP Snooping is a security mechanism which
uses information gleaned from DHCP packets to provide
per-interface security capabilities."
REVISION "200904120000Z"
DESCRIPTION
"Add cdsIfVlanRelayInfoOptCircuitIdDirect."
REVISION "200711130000Z"
DESCRIPTION
"Add cdsNotifControlGroup and cdsBindingsNotificationGroup."
REVISION "200707120000Z"
DESCRIPTION
"Add cdsIfVlanRelayInfoOptCircuitIdGroup,
cdsStatisticsExtGroup
and deprecate cdsRelayAgentRemoteIdGroup with
cdsRelayAgentInfoOptRemoteIdSubGroup."
REVISION "200705300000Z"
DESCRIPTION
"Add cdsBindingsHostnameGroup"
REVISION "200603161600Z"
DESCRIPTION
"Add cdsBindingsLimitGroup,
cdsStaticBindingsGroup,
cdsIfSrcGuardIpFilterGroup,
cdsIfSrcGuardTrafficFilterGroup,
cdsIfSrcGuardExtGroup
and deprecate cdsIfSrcGuardGroup with cdsIfSrcGuardGroupRev1."
REVISION "200510260000Z"
DESCRIPTION
"Add cdsIfFeatureConfigGroup."
REVISION "200403040000Z"
DESCRIPTION
"Initial revision of this MIB module."
::= { ciscoMgmt 380 }
ciscoDhcpSnoopingMIBNotifs OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIB 0 }
ciscoDhcpSnoopingMIBObjects OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIB 1 }
ciscoDhcpSnoopingMIBConformance OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIB 2 }
cdsGlobal OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIBObjects 1 }
cdsVlan OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIBObjects 2 }
cdsInterface OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIBObjects 3 }
cdsBindings OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIBObjects 4 }
cdsStatistics OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIBObjects 5 }
cdsSrcGuard OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIBObjects 6 }
-- The Global group
cdsFeatureEnable OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates whether the DHCP Snooping feature is
enabled at the device level.
Setting this object to 'false' disables the DHCP Snooping
feature globally thus disabling the feature at each VLAN.
Setting this object to 'true' will start the DHCP Snooping
feature running in the device. Once the DHCP Snooping is
enabled, whether the feature is running at each VLAN is
controlled by the cdsVlanConfigTable."
::= { cdsGlobal 1 }
cdsDatabaseFile OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates the name of the database file used
to store DHCP bindings information."
::= { cdsGlobal 2 }
cdsDatabaseUpdateInterval OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates the time interval at which DHCP
bindings information will be written to the database file
denoted by cdsDatabaseFile object. Setting this object
to zero will disable the storage of DHCP bindings."
::= { cdsGlobal 3 }
cdsRelayAgentInfoOptEnable OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates if the DHCP relay agent information
option (option 82) will be inserted to DHCP packets by
DHCP Snooping feature.
If this object is set to 'true', DHCP option 82 data will
be inserted to DHCP packets.
If this object is set to 'false', DHCP option 82 data
will not be inserted."
REFERENCE "RFC 3046, DHCP Relay Agent Information Option."
::= { cdsGlobal 4 }
cdsRelayAgentInfoOptRemoteId OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"This object indicates the Remote ID used as part of the
DHCP relay information option (option 82) data inserted
to DHCP packets by DHCP Snooping feature.
The value of this object is ignored whenever the value
of cdsRelayAgentInfoOptEnable object is 'false'.
This object is deprecated and superceded by
cdsRelayAgentInfoOptRemoteIdSub object."
REFERENCE "RFC 3046, DHCP Relay Agent Information Option."
::= { cdsGlobal 5 }
cdsMatchMacAddressEnable OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates if DHCP Snooping Mac address
matching is enabled.
If this object is set to 'true', DHCP Snooping Mac
address matching is enabled.
If this object is set to 'false', DHCP Snooping Mac
address matching is disabled."
::= { cdsGlobal 6 }
cdsGlobalMaxBindingsLimit OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the maximum number of DHCP
bindings allowed in the device."
::= { cdsGlobal 7 }
cdsRelayAgentInfoOptRemoteIdSub OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (1..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the Remote ID used in Agent Remote ID
sub-option of the DHCP relay information option (option 82)
data inserted to DHCP packets by DHCP Snooping feature.
The value of this object is in a format of a user-defined
string. Its default value is the device's MAC address.
The value of this object is ignored whenever the value
of cdsRelayAgentInfoOptEnable object is 'false'."
REFERENCE "RFC 3046, DHCP Relay Agent Information Option."
::= { cdsGlobal 8 }
cdsBindingsNotifEnabled OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether cdsBindingsNotification
is generated by the system.
Setting this object value to 'true' will enable
generation of cdsBindingsNotification.
Seting this object value to 'false' will disable
generation of cdsBindingsNotification."
::= { cdsGlobal 9 }
-- The DHCP Snooping Vlan Group
--
--
-- The DHCP Snooping VLAN Config Table
cdsVlanConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsVlanConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table provides the mechanism to control DHCP Snooping
per VLAN. When a VLAN is created in a device supporting this
table, a corresponding entry of this table will be added."
::= { cdsVlan 1 }
cdsVlanConfigEntry OBJECT-TYPE
SYNTAX CdsVlanConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A row instance contains the configuration to enable
or disable DHCP Snooping at each existing VLAN."
INDEX { cdsVlanIndex }
::= { cdsVlanConfigTable 1 }
CdsVlanConfigEntry ::= SEQUENCE {
cdsVlanIndex VlanIndex,
cdsVlanDhcpSnoopingEnable TruthValue
}
cdsVlanIndex OBJECT-TYPE
SYNTAX VlanIndex
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object indicates the VLAN number on which DHCP Snooping
feature is configured."
::= { cdsVlanConfigEntry 1 }
cdsVlanDhcpSnoopingEnable OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates whether DHCP Snooping is enabled in
this VLAN.
If this object is set to 'true', DHCP Snooping is enabled.
If this object is set to 'false', DHCP Snooping is disabled."
::= { cdsVlanConfigEntry 2 }
-- The DHCP Snooping Interface Group
--
--
-- The DHCP Snooping Interface Config Table
cdsIfConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsIfConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table provides the mechanism to configure the trust
state for DHCP Snooping purpose at each interface
capable of this feature. Some of the interfaces
(but not limited to) for which this feature might be
applicable are: ifType = ethernetCsmacd(6)."
::= { cdsInterface 1 }
cdsIfConfigEntry OBJECT-TYPE
SYNTAX CdsIfConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A row instance contains the configuration to enable
or disable trust state for DHCP Snooping at each
interface capable of this feature."
INDEX { ifIndex }
::= { cdsIfConfigTable 1 }
CdsIfConfigEntry ::= SEQUENCE {
cdsIfTrustEnable TruthValue
}
cdsIfTrustEnable OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates whether the interface is trusted for
DHCP Snooping purpose.
If this object is set to 'true', the interface is trusted.
DHCP packets coming to this interface will be forwarded
without checking.
If this object is set to 'false', the interface is not
trusted. DHCP packets coming to this interface will be
subjected to DHCP checks."
::= { cdsIfConfigEntry 1 }
-- The DHCP Snooping Rate Limit Interface Config Table
cdsIfRateLimitTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsIfRateLimitEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table provides the mechanism to configure the rate limit
for DHCP Snooping purpose at each interface capable
of this feature. Some of the interfaces (but not limited to)
for which this feature might be applicable are:
ifType = ethernetCsmacd(6)."
::= { cdsInterface 2 }
cdsIfRateLimitEntry OBJECT-TYPE
SYNTAX CdsIfRateLimitEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A row instance contains the configuration of rate limit
DHCP Snooping at each interface capable of this
feature."
INDEX { ifIndex }
::= { cdsIfRateLimitTable 1 }
CdsIfRateLimitEntry ::= SEQUENCE {
cdsIfRateLimit Unsigned32
}
cdsIfRateLimit OBJECT-TYPE
SYNTAX Unsigned32
UNITS "packets per second"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates rate limit value for DHCP Snooping
purpose. If the value of this object is 0, no rate limit is
applied for DHCP traffic at this interface."
::= { cdsIfRateLimitEntry 1 }
-- The DHCP Snooping Interface Feature Enable Table
cdsIfFeatureConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsIfFeatureConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table provides the mechanism to enable or disable
DHCP Snooping feature at each interface capable of this
feature. Some of the interfaces (but not limited to) for
which this configuration might be applicable are:
ifType = ethernetCsmacd(6)."
::= { cdsInterface 3 }
cdsIfFeatureConfigEntry OBJECT-TYPE
SYNTAX CdsIfFeatureConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A row instance contains the configuration to enable
or disable DHCP Snooping at each interface capable of this
feature."
INDEX { ifIndex }
::= { cdsIfFeatureConfigTable 1 }
CdsIfFeatureConfigEntry ::= SEQUENCE {
cdsIfFeatureEnable TruthValue
}
cdsIfFeatureEnable OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates whether the DHCP Snooping feature
is enabled at this interface.
If this object is set to 'true', DHCP Snooping is enabled.
If this object is set to 'false', DHCP Snooping is disabled."
::= { cdsIfFeatureConfigEntry 1 }
-- The DHCP Bindings limit table
cdsIfBindingsLimitTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsIfBindingsLimitEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table provides the mechanism to configure the binding limit
for DHCP Snooping purpose at each interface capable of
this feature. Some of the interfaces (but not limited to)
for which this feature might be applicable are:
ifType = ethernetCsmacd(6)."
::= { cdsInterface 4 }
cdsIfBindingsLimitEntry OBJECT-TYPE
SYNTAX CdsIfBindingsLimitEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A row instance contains the configuration of binding limit at
each interface capable of this feature."
INDEX { ifIndex }
::= { cdsIfBindingsLimitTable 1 }
CdsIfBindingsLimitEntry ::= SEQUENCE {
cdsIfBindingsLimit Unsigned32
}
cdsIfBindingsLimit OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the maximum number of DHCP bindings
allowed on this interface. This objects value will limit
the number of entries in cdsBindingsTable and
cdsStaticBindingsTable. The sum of all instances' value of
cdsIfBindingsLimit in this table should be less than or equal
to the object value of cdsGlobalMaxBindingsLimit."
::= { cdsIfBindingsLimitEntry 1 }
-- DHCP Snooping Option 82 circuit-id table
cdsIfVlanRelayInfoOptCircuitIdTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsIfVlanRelayInfoOptCircuitIdEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in this table represent circuit-id information,
configured on per port per vlan."
::= { cdsInterface 5 }
cdsIfVlanRelayInfoOptCircuitIdEntry OBJECT-TYPE
SYNTAX CdsIfVlanRelayInfoOptCircuitIdEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Entry contains circuit-id information for a particular interface
and VLAN."
INDEX {
ifIndex,
cdsIfVlan
}
::= { cdsIfVlanRelayInfoOptCircuitIdTable 1 }
CdsIfVlanRelayInfoOptCircuitIdEntry ::= SEQUENCE {
cdsIfVlan VlanIndex,
cdsIfVlanRelayInfoOptCircuitId OCTET STRING,
cdsIfVlanRelayInfoOptCircuitIdStatus RowStatus,
cdsIfVlanRelayInfoOptCircuitIdDirect TruthValue
}
cdsIfVlan OBJECT-TYPE
SYNTAX VlanIndex
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object indicates the VLAN on which circuit-id is
configured."
::= { cdsIfVlanRelayInfoOptCircuitIdEntry 1 }
cdsIfVlanRelayInfoOptCircuitId OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (1..64))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object specifies circuit-id used in Agent Circuit ID
sub-option of the DHCP relay information option (option 82)
data inserted to DHCP packets by DHCP Snooping feature.
The value of this object is in a format of a user-defined
string.
The value of this object is ignored whenever the value
of cdsRelayAgentInfoOptEnable object is 'false'."
REFERENCE "RFC 3046, DHCP Relay Agent Information Option."
::= { cdsIfVlanRelayInfoOptCircuitIdEntry 2 }
cdsIfVlanRelayInfoOptCircuitIdStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object is used to manage the creation and deletion
of rows in this table. It only supports 'active(1)',
'destroy(6)' and 'createAndGo(4)' value.
Entry in this table gets created by setting
cdsIfVlanRelayInfoOptCircuitIdStatus object to 'createAndGo'.
Entry in this table gets deleted by setting
cdsIfVlanRelayInfoOptCircuitIdStatus object to 'destroy'
Value of cdsIfRelayInfoOptCircuitId object can be
modified when the value of this RowStatus object is
'active'."
::= { cdsIfVlanRelayInfoOptCircuitIdEntry 3 }
cdsIfVlanRelayInfoOptCircuitIdDirect OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object specifies to ignore the length and type in
Agent Circuit ID sub-option of the DHCP relay information
option (option 82) data inserted to DHCP packets by
DHCP Snooping feature.
The value of this object is ignored whenever the value
of cdsRelayAgentInfoOptEnable object is 'false'."
::= { cdsIfVlanRelayInfoOptCircuitIdEntry 4 }
-- The DHCP Bindings group
cdsBindingsTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsBindingsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table provides the DHCP bindings information learnt by
the device."
::= { cdsBindings 1 }
cdsBindingsEntry OBJECT-TYPE
SYNTAX CdsBindingsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A row instance contains the Mac address, IP address type,
IP address, VLAN number, interface number, leased time, and
status of this instance."
INDEX {
cdsBindingsVlan,
cdsBindingsMacAddress
}
::= { cdsBindingsTable 1 }
CdsBindingsEntry ::= SEQUENCE {
cdsBindingsVlan VlanIndex,
cdsBindingsMacAddress MacAddress,
cdsBindingsAddrType InetAddressType,
cdsBindingsIpAddress InetAddress,
cdsBindingsInterface InterfaceIndex,
cdsBindingsLeasedTime Unsigned32,
cdsBindingsStatus RowStatus,
cdsBindingsHostname SnmpAdminString
}
cdsBindingsVlan OBJECT-TYPE
SYNTAX VlanIndex
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object indicates the VLAN to which a DHCP client host
belongs."
::= { cdsBindingsEntry 1 }
cdsBindingsMacAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object indicates the MAC address of a DHCP client
host."
::= { cdsBindingsEntry 2 }
cdsBindingsAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the type of IP address denoted
in cdsBindingsIpAddress object."
::= { cdsBindingsEntry 3 }
cdsBindingsIpAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the allocated IP address of
a DHCP client host."
::= { cdsBindingsEntry 4 }
cdsBindingsInterface OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the interface where a DHCP client
host connects to."
::= { cdsBindingsEntry 5 }
cdsBindingsLeasedTime OBJECT-TYPE
SYNTAX Unsigned32
UNITS "seconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the leased time of this DHCP
bindings."
::= { cdsBindingsEntry 6 }
cdsBindingsStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object is used to manage the deletion of rows
in this table. This object only supports active(1) and
destroy(6) value.
Whenever a DHCP binding is learnt by the device, an
entry will be created by the device in this table with
its RowStatus object set to active(1). Setting this
object value to destroy(6) will clear the DHCP bindings
information represented by this row instance."
::= { cdsBindingsEntry 7 }
cdsBindingsHostname OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the host name of the DHCP client
as denoted by DHCP option 12 field. An empty string
indicates absence of option 12 in DHCP packet."
::= { cdsBindingsEntry 8 }
-- The static bindings table
cdsStaticBindingsTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsStaticBindingsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table provides the DHCP bindings information configured
by (local or network) management."
::= { cdsBindings 2 }
cdsStaticBindingsEntry OBJECT-TYPE
SYNTAX CdsStaticBindingsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A row instance contains the Mac address, IP address type,
IP address, VLAN number, interface number, and status of
this instance."
INDEX {
cdsStaticBindingsVlan,
cdsStaticBindingsMacAddress
}
::= { cdsStaticBindingsTable 1 }
CdsStaticBindingsEntry ::= SEQUENCE {
cdsStaticBindingsVlan VlanIndex,
cdsStaticBindingsMacAddress MacAddress,
cdsStaticBindingsAddrType InetAddressType,
cdsStaticBindingsIpAddress InetAddress,
cdsStaticBindingsInterface InterfaceIndex,
cdsStaticBindingsStatus RowStatus
}
cdsStaticBindingsVlan OBJECT-TYPE
SYNTAX VlanIndex
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object indicates the VLAN to which a DHCP client host
belongs."
::= { cdsStaticBindingsEntry 1 }
cdsStaticBindingsMacAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object indicates the MAC address of a DHCP client
host."
::= { cdsStaticBindingsEntry 2 }
cdsStaticBindingsAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object indicates the type of IP address denoted
in cdsStaticBindingsIpAddress object."
::= { cdsStaticBindingsEntry 3 }
cdsStaticBindingsIpAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object indicates the allocated IP address of
a DHCP client host."
::= { cdsStaticBindingsEntry 4 }
cdsStaticBindingsInterface OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object indicates the ifIndex value of the interface
where a DHCP client host connects to."
::= { cdsStaticBindingsEntry 5 }
cdsStaticBindingsStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object is used to manage the creation and deletion
of rows in this table. An entry can be created by setting
the instance value of this object to 'createAndGo', and
deleted by setting the instance value of this object to
'destroy'. The value of cdsStaticBindingsAddrType,
cdsStaticBindingsIpAddress, cdsStaticBindingsInterface
object can be modified when the value of this RowStatus
object is 'active'."
::= { cdsStaticBindingsEntry 6 }
-- The DHCP Snooping Statistics group
cdsTotalForwardedPkts OBJECT-TYPE
SYNTAX Counter64
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the total number of packets subjected to
DHCP Snooping is forwarded."
::= { cdsStatistics 1 }
cdsTotalDroppedPkts OBJECT-TYPE
SYNTAX Counter64
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the total number of packets subjected to
DHCP Snooping is dropped."
::= { cdsStatistics 2 }
cdsUntrustedPortDroppedPkts OBJECT-TYPE
SYNTAX Counter64
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the number of packets subjected to DHCP Snooping
is dropped because they come from untrusted interface."
::= { cdsStatistics 3 }
cdsForwardedWithoutOption82Pkts OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the number of packets subjected to DHCP Snooping
is forwarded without insertion of DHCP relay agent information
option (option 82) data."
::= { cdsStatistics 4 }
-- The IP Source Guard Group
cdsIfSrcGuardConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsIfSrcGuardConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table provides the mechanism to enable or disable
IP Source Guard at each physical interface capable of
this feature. Some of the interfaces (but not limited to)
for which this feature might be applicable are:
ifType = ethernetCsmacd(6).
When DHCP Snooping is enabled at an interface, a list of
IP addresses is obtained through DHCP Snooping for this
particular interface. If IP Source Guard is enabled, only
traffic from these IP addresses is allowed to pass through
the interface."
::= { cdsSrcGuard 1 }
cdsIfSrcGuardConfigEntry OBJECT-TYPE
SYNTAX CdsIfSrcGuardConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A row instance contains the configuration to enable
or disable IP Source Guard as well as the configuration
of the filter type at each physical interface capable
of IP Source Guard feature."
INDEX { ifIndex }
::= { cdsIfSrcGuardConfigTable 1 }
CdsIfSrcGuardConfigEntry ::= SEQUENCE {
cdsIfSrcGuardEnable TruthValue,
cdsIfSrcGuardFilterType INTEGER
}
cdsIfSrcGuardEnable OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"This object indicates whether IP Source Guard is enabled
at this interface.
If this object is set to 'true', IP Source Guard is
enabled. Traffic coming to this interface will be forwarded
if it is from the list of IP addresses obtained through
DHCP Snooping. Otherwise, it is denied.
If this object is set to 'false', IP Source Guard is
disabled.
This object is deprecated and superceded by
cdsIfSrcGuardFilterType object."
::= { cdsIfSrcGuardConfigEntry 1 }
cdsIfSrcGuardFilterType OBJECT-TYPE
SYNTAX INTEGER {
disable(1),
ip(2),
ipMac(3)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates the traffic filter type applied
at this interface.
'disable' indicates that Source Guard feature is disabled.
'ip' indicates that Source Guard feature is enabled and
only applied to IP traffic.
'ipMac' indicates that Source Guard feature is enabled and
applied to both IP and MAC traffic."
::= { cdsIfSrcGuardConfigEntry 2 }
-- cdsIfSrcGuardAddrTable
cdsIfSrcGuardAddrTable OBJECT-TYPE
SYNTAX SEQUENCE OF CdsIfSrcGuardAddrEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table provides the information on IP addresses used
for IP Source Guard purpose at each physical interface
capable of this feature. Some of the interfaces
(but not limited to) for which this feature might be
applicable are: ifType = ethernetCsmacd(6)."
::= { cdsSrcGuard 2 }
cdsIfSrcGuardAddrEntry OBJECT-TYPE
SYNTAX CdsIfSrcGuardAddrEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A row instance contains the IP address type and IP
address used for IP Source Guard purpose at each
physical interface capable of this feature."
INDEX {
ifIndex,
cdsIfSrcGuardIndex
}
::= { cdsIfSrcGuardAddrTable 1 }
CdsIfSrcGuardAddrEntry ::= SEQUENCE {
cdsIfSrcGuardIndex Unsigned32,
cdsIfSrcGuardAddrType InetAddressType,
cdsIfSrcGuardAddress InetAddress,
cdsIfSrcGuardIpFilterAction INTEGER,
cdsIfSrcGuardFilterMode INTEGER,
cdsIfSrcGuardMacAddress MacAddress,
cdsIfSrcGuardMacFilterAction INTEGER,
cdsIfSrcGuardVlansLow OCTET STRING,
cdsIfSrcGuardVlansHigh OCTET STRING
}
cdsIfSrcGuardIndex OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object indicates the index of this entry."
::= { cdsIfSrcGuardAddrEntry 1 }
cdsIfSrcGuardAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the type of IP address denoted
in cdsIfSrcGuardAddress object."
::= { cdsIfSrcGuardAddrEntry 2 }
cdsIfSrcGuardAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the IP address obtained at
this interface through DHCP Snooping or statically
configured."
::= { cdsIfSrcGuardAddrEntry 3 }
cdsIfSrcGuardIpFilterAction OBJECT-TYPE
SYNTAX INTEGER {
permitIpAddress(1),
denyAllIpAddress(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the IP Source Guard action
applied at this interface with respect to IP traffic.
permitIpAddress(1) indicates that IP traffic coming
from the IP address denoted by cdsIfSrcGuardAddress
object will be allowed to go through.
denyAllIpAdress(2) indicates that all IP traffic
coming to this interface will be dropped. The value
of cdsIfSrcGuardAddress object will be ignored in
this case."
::= { cdsIfSrcGuardAddrEntry 4 }
cdsIfSrcGuardFilterMode OBJECT-TYPE
SYNTAX INTEGER {
active(1),
inactiveTrustPort(2),
inactiveNoSnoopingVlan(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the Source Guard filter mode at
this interface.
active(1) indicates that the Source Guard feature is
active at this interface.
inactiveTrustPort(2) indicates that the Source Guard
feature is inactive because this interface is a DHCP
Snooping trust interface.
inactiveNoSnoopingVlan(3) indicates that the Source
Guard feature is inactive because this interface
does not have a VLAN which has DHCP Snooping enabled."
::= { cdsIfSrcGuardAddrEntry 5 }
cdsIfSrcGuardMacAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the MAC address for Source Guard
purpose."
::= { cdsIfSrcGuardAddrEntry 6 }
cdsIfSrcGuardMacFilterAction OBJECT-TYPE
SYNTAX INTEGER {
allowMacAddress(1),
denyAllMacAddresses(2),
permitAllMacAddresses(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the Source Guard action
applied at this interface with respect to MAC traffic.
allowMacAddress(1) indicates that MAC traffic coming
from the MAC address denoted by cdsIfSrcGuardMacAddress
object will be allowed to go through.
denyAllMacAddresses(2) indicates that all MAC traffic
coming to this interface will be dropped. The value
of cdsIfSrcGuardMacAddress object will be ignored in
this case.
permitAllMacAddresses(3) indicates that all MAC traffic
coming to this interface will be allowed. The value
of cdsIfSrcGuardMacAddress object will be ignored in
this case."
::= { cdsIfSrcGuardAddrEntry 7 }
cdsIfSrcGuardVlansLow OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (0..256))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A string of octets containing one bit per VLAN for
VLANs with VlanIndex value of 0 to 2047. The first
octet corresponds to VLANs with VlanIndex values
of 0 through 7; the second octet to VLANs 8 through
15; etc. The most significant bit of each octet
corresponds to the lowest value VlanIndex in that octet.
For each VLAN, if Source Guard feature is enabled then
the bit corresponding to that VLAN is set to '1'.
Note that if the length of this string is less than
256 octets, any 'missing' octets are assumed to contain
the value zero. A NMS may omit any zero-valued octets
from the end of this string in order to reduce SetPDU size,
and the agent may also omit zero-valued trailing octets,
to reduce the size of GetResponse PDUs."
::= { cdsIfSrcGuardAddrEntry 8 }
cdsIfSrcGuardVlansHigh OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (0..256))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A string of octets containing one bit per VLAN for
VLANs with VlanIndex value of 2048 to 4095. The first
octet corresponds to VLANs with VlanIndex values
of 2048 through 2055; the second octet to VLANs 2056
through 2063; etc. The most significant bit of each
octet corresponds to the lowest value VlanIndex in that
octet.
For each VLAN, if Source Guard feature is enabled then
the bit corresponding to that VLAN is set to '1'.
Note that if the length of this string is less than
256 octets, any 'missing' octets are assumed to contain
the value zero. A NMS may omit any zero-valued octets
from the end of this string in order to reduce SetPDU size,
and the agent may also omit zero-valued trailing octets,
to reduce the size of GetResponse PDUs."
::= { cdsIfSrcGuardAddrEntry 9 }
-- Notifications
cdsBindingsNotification NOTIFICATION-TYPE
OBJECTS {
cdsBindingsAddrType,
cdsBindingsIpAddress,
ifName
}
STATUS current
DESCRIPTION
"This notification is generated when a DHCP binding
is learnt dynamically by the device. cdsBindingsAddrType
and cdsBindingsIpAddress provides the IP address
allocated for the DHCP client by the DHCP server.
ifName identifies the interface where the DHCP client
connects to."
::= { ciscoDhcpSnoopingMIBNotifs 1 }
-- Conformance
cdsMIBCompliances OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIBConformance 1 }
cdsMIBGroups OBJECT IDENTIFIER
::= { ciscoDhcpSnoopingMIBConformance 2 }
cdsMIBCompliance MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
MODULE -- this module
MANDATORY-GROUPS {
cdsIfConfigGroup,
cdsBindingsGroup
}
GROUP cdsGlobalEnableGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsDatabaseGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
storage of DHCP bindings information."
GROUP cdsVlanConfigGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
controlling DHCP Snooping per VLAN."
GROUP cdsIfRateLimitGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping rate limit per interface."
GROUP cdsStatisticsGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping statistics information."
GROUP cdsRelayAgentInfoOptGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping option 82 insertion information."
GROUP cdsIfSrcGuardGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
IP Source Guard."
GROUP cdsMatchMacAddressGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping Mac address matching."
::= { cdsMIBCompliances 1 }
cdsMIBCompliance2 MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
MODULE -- this module
MANDATORY-GROUPS {
cdsIfConfigGroup,
cdsBindingsGroup
}
GROUP cdsGlobalEnableGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsDatabaseGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
storage of DHCP bindings information."
GROUP cdsVlanConfigGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
controlling DHCP Snooping per VLAN."
GROUP cdsIfRateLimitGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping rate limit per interface."
GROUP cdsStatisticsGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping statistics information."
GROUP cdsRelayAgentInfoOptGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping option 82 insertion information."
GROUP cdsIfSrcGuardGroupRev1
DESCRIPTION
"This group is mandatory only for the platform which supports
IP Source Guard."
GROUP cdsMatchMacAddressGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping Mac address matching."
GROUP cdsRelayAgentRemoteIdGroup
DESCRIPTION
"This group is mandatory only for platforms which support
DHCP Option 82 remote ID relay agent."
GROUP cdsIfFeatureConfigGroup
DESCRIPTION
"This group is mandatory only for platforms which support
enable or disable of DHCP Snooping feature at the interface."
GROUP cdsBindingsLimitGroup
DESCRIPTION
"This group is mandatory only for platforms which support
binding limit for DHCP Snooping feature."
GROUP cdsStaticBindingsGroup
DESCRIPTION
"This group is mandatory only for platforms which support
the DHCP bindings data statically configured by (local
or network) management."
GROUP cdsIfSrcGuardIpFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
GROUP cdsIfSrcGuardExtGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP and MAC source guard feature."
GROUP cdsIfSrcGuardTrafficFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
OBJECT cdsStaticBindingsStatus
SYNTAX INTEGER {
active(1),
createAndGo(4),
destroy(6)
}
DESCRIPTION
"Support for 'createAndWait' is not required."
::= { cdsMIBCompliances 2 }
cdsMIBCompliance3 MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
MODULE -- this module
MANDATORY-GROUPS {
cdsIfConfigGroup,
cdsBindingsGroup
}
GROUP cdsGlobalEnableGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsDatabaseGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
storage of DHCP bindings information."
GROUP cdsVlanConfigGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
controlling DHCP Snooping per VLAN."
GROUP cdsIfRateLimitGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping rate limit per interface."
GROUP cdsStatisticsGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping statistics information."
GROUP cdsRelayAgentInfoOptGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping option 82 insertion information."
GROUP cdsIfSrcGuardGroupRev1
DESCRIPTION
"This group is mandatory only for the platform which supports
IP Source Guard."
GROUP cdsMatchMacAddressGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping Mac address matching."
GROUP cdsRelayAgentRemoteIdGroup
DESCRIPTION
"This group is mandatory only for platforms which support
DHCP Option 82 remote ID relay agent."
GROUP cdsIfFeatureConfigGroup
DESCRIPTION
"This group is mandatory only for platforms which support
enable or disable of DHCP Snooping feature at the interface."
GROUP cdsBindingsLimitGroup
DESCRIPTION
"This group is mandatory only for platforms which support
binding limit for DHCP Snooping feature."
GROUP cdsStaticBindingsGroup
DESCRIPTION
"This group is mandatory only for platforms which support
the DHCP bindings data statically configured by (local
or network) management."
GROUP cdsIfSrcGuardIpFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
GROUP cdsIfSrcGuardExtGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP and MAC source guard feature."
GROUP cdsIfSrcGuardTrafficFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
GROUP cdsBindingsHostnameGroup
DESCRIPTION
"This group is mandatory only for platforms where the host
name of DHCP client in DHCP bindings data is available."
OBJECT cdsStaticBindingsStatus
SYNTAX INTEGER {
active(1),
createAndGo(4),
destroy(6)
}
DESCRIPTION
"Support for 'createAndWait' is not required."
::= { cdsMIBCompliances 3 }
cdsMIBCompliance4 MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
MODULE -- this module
MANDATORY-GROUPS {
cdsIfConfigGroup,
cdsBindingsGroup
}
GROUP cdsGlobalEnableGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsDatabaseGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
storage of DHCP bindings information."
GROUP cdsVlanConfigGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
controlling DHCP Snooping per VLAN."
GROUP cdsIfRateLimitGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping rate limit per interface."
GROUP cdsStatisticsGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping statistics information."
GROUP cdsRelayAgentInfoOptGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping option 82 insertion information."
GROUP cdsIfSrcGuardGroupRev1
DESCRIPTION
"This group is mandatory only for the platform which supports
IP Source Guard."
GROUP cdsMatchMacAddressGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping Mac address matching."
GROUP cdsIfFeatureConfigGroup
DESCRIPTION
"This group is mandatory only for platforms which support
enable or disable of DHCP Snooping feature at the interface."
GROUP cdsBindingsLimitGroup
DESCRIPTION
"This group is mandatory only for platforms which support
binding limit for DHCP Snooping feature."
GROUP cdsStaticBindingsGroup
DESCRIPTION
"This group is mandatory only for platforms which support
the DHCP bindings data statically configured by (local
or network) management."
GROUP cdsIfSrcGuardIpFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
GROUP cdsIfSrcGuardExtGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP and MAC source guard feature."
GROUP cdsIfSrcGuardTrafficFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
GROUP cdsBindingsHostnameGroup
DESCRIPTION
"This group is mandatory only for platforms where the host
name of DHCP client in DHCP bindings data is available."
GROUP cdsRelayAgentInfoOptRemoteIdSubGroup
DESCRIPTION
"This group is mandatory only for platforms which support
configuration of remote-id sub-option for Option 82 DHCP
Snooping feature."
GROUP cdsIfVlanRelayInfoOptCircuitIdGroup
DESCRIPTION
"This group is mandatory only for platforms which support
configuration of circuit-id sub-option for Option 82 DHCP
Snooping feature."
GROUP cdsStatisticsExtGroup
DESCRIPTION
"This group is mandatory only for platforms which support
the counter indicating the number of packets forwarded
without insertion of option 82 data."
OBJECT cdsStaticBindingsStatus
SYNTAX INTEGER {
active(1),
createAndGo(4),
destroy(6)
}
DESCRIPTION
"Support for 'createAndWait' is not required."
::= { cdsMIBCompliances 4 }
cdsMIBCompliance5 MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
MODULE -- this module
MANDATORY-GROUPS {
cdsIfConfigGroup,
cdsBindingsGroup
}
GROUP cdsGlobalEnableGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsDatabaseGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
storage of DHCP bindings information."
GROUP cdsVlanConfigGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
controlling DHCP Snooping per VLAN."
GROUP cdsIfRateLimitGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping rate limit per interface."
GROUP cdsStatisticsGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping statistics information."
GROUP cdsRelayAgentInfoOptGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping option 82 insertion information."
GROUP cdsIfSrcGuardGroupRev1
DESCRIPTION
"This group is mandatory only for the platform which supports
IP Source Guard."
GROUP cdsMatchMacAddressGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping Mac address matching."
GROUP cdsIfFeatureConfigGroup
DESCRIPTION
"This group is mandatory only for platforms which support
enable or disable of DHCP Snooping feature at the interface."
GROUP cdsBindingsLimitGroup
DESCRIPTION
"This group is mandatory only for platforms which support
binding limit for DHCP Snooping feature."
GROUP cdsStaticBindingsGroup
DESCRIPTION
"This group is mandatory only for platforms which support
the DHCP bindings data statically configured by (local
or network) management."
GROUP cdsIfSrcGuardIpFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
GROUP cdsIfSrcGuardExtGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP and MAC source guard feature."
GROUP cdsIfSrcGuardTrafficFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
GROUP cdsBindingsHostnameGroup
DESCRIPTION
"This group is mandatory only for platforms where the host
name of DHCP client in DHCP bindings data is available."
GROUP cdsRelayAgentInfoOptRemoteIdSubGroup
DESCRIPTION
"This group is mandatory only for platforms which support
configuration of remote-id sub-option for Option 82 DHCP
Snooping feature."
GROUP cdsIfVlanRelayInfoOptCircuitIdGroup
DESCRIPTION
"This group is mandatory only for platforms which support
configuration of circuit-id sub-option for Option 82 DHCP
Snooping feature."
GROUP cdsStatisticsExtGroup
DESCRIPTION
"This group is mandatory only for platforms which support
the counter indicating the number of packets forwarded
without insertion of option 82 data."
GROUP cdsNotifControlGroup
DESCRIPTION
"This group is mandatory only for platforms which support
bindings notification control for DHCP Snooping feature."
GROUP cdsBindingsNotificationGroup
DESCRIPTION
"This group is mandatory only for platforms which support
bindings notification for DHCP Snooping feature."
OBJECT cdsStaticBindingsStatus
SYNTAX INTEGER {
active(1),
createAndGo(4),
destroy(6)
}
DESCRIPTION
"Support for 'createAndWait' is not required."
::= { cdsMIBCompliances 5 }
cdsMIBCompliance6 MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
MODULE -- this module
MANDATORY-GROUPS {
cdsIfConfigGroup,
cdsBindingsGroup
}
GROUP cdsGlobalEnableGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsDatabaseGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsVlanConfigGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsIfRateLimitGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsStatisticsGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsRelayAgentInfoOptGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
enabling the DHCP Snooping feature at device level."
GROUP cdsIfSrcGuardGroupRev1
DESCRIPTION
"This group is mandatory only for the platform which supports
IP Source Guard."
GROUP cdsMatchMacAddressGroup
DESCRIPTION
"This group is mandatory only for the platform which supports
DHCP Snooping Mac address matching."
GROUP cdsIfFeatureConfigGroup
DESCRIPTION
"This group is mandatory only for platforms which support
enable or disable of DHCP Snooping feature at the interface."
GROUP cdsBindingsLimitGroup
DESCRIPTION
"This group is mandatory only for platforms which support
binding limit for DHCP Snooping feature."
GROUP cdsStaticBindingsGroup
DESCRIPTION
"This group is mandatory only for platforms which support
the DHCP bindings data statically configured by (local
or network) management."
GROUP cdsIfSrcGuardIpFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
GROUP cdsIfSrcGuardExtGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP and MAC source guard feature."
GROUP cdsIfSrcGuardTrafficFilterGroup
DESCRIPTION
"This group is mandatory only for platforms which support
interface IP source guard feature."
GROUP cdsBindingsHostnameGroup
DESCRIPTION
"This group is mandatory only for platforms where the host
name of DHCP client in DHCP bindings data is available."
GROUP cdsRelayAgentInfoOptRemoteIdSubGroup
DESCRIPTION
"This group is mandatory only for platforms which support
configuration of remote-id sub-option for Option 82 DHCP
Snooping feature."
GROUP cdsIfVlanRelayInfoOptCircuitIdGroup
DESCRIPTION
"This group is mandatory only for platforms which support
configuration of circuit-id sub-option for Option 82 DHCP
Snooping feature."
GROUP cdsStatisticsExtGroup
DESCRIPTION
"This group is mandatory only for platforms which support
the counter indicating the number of packets forwarded
without insertion of option 82 data."
GROUP cdsNotifControlGroup
DESCRIPTION
"This group is mandatory only for platforms which support
bindings notification control for DHCP Snooping feature."
GROUP cdsBindingsNotificationGroup
DESCRIPTION
"This group is mandatory only for platforms which support
bindings notification for DHCP Snooping feature."
GROUP cdsIfVlanRelayInfoOptCircuitIdGroupSup1
DESCRIPTION
"This group is mandatory only for platforms which support
bindings notification control for DHCP Snooping feature."
OBJECT cdsStaticBindingsStatus
SYNTAX INTEGER {
active(1),
createAndGo(4),
destroy(6)
}
DESCRIPTION
"Support for 'createAndWait' is not required."
::= { cdsMIBCompliances 6 }
-- Units of Conformance
--
-- cdsGlobalGroup
cdsGlobalEnableGroup OBJECT-GROUP
OBJECTS { cdsFeatureEnable }
STATUS current
DESCRIPTION
"A collection of object which are used to configure as
well as show information regarding the feature enabling."
::= { cdsMIBGroups 1 }
cdsDatabaseGroup OBJECT-GROUP
OBJECTS {
cdsDatabaseFile,
cdsDatabaseUpdateInterval
}
STATUS current
DESCRIPTION
"A collection of objects which are used to configure as
well as show information regarding the DHCP Snooping
database filename and update interval."
::= { cdsMIBGroups 2 }
cdsVlanConfigGroup OBJECT-GROUP
OBJECTS { cdsVlanDhcpSnoopingEnable }
STATUS current
DESCRIPTION
"A collection of object which are used to configure as
well as show information regarding the DHCP Snooping
feature per VLAN."
::= { cdsMIBGroups 3 }
cdsIfConfigGroup OBJECT-GROUP
OBJECTS { cdsIfTrustEnable }
STATUS current
DESCRIPTION
"A collection of object which are used to configure as
well as show information regarding the interface trust
state for DHCP Snooping purpose."
::= { cdsMIBGroups 4 }
cdsIfRateLimitGroup OBJECT-GROUP
OBJECTS { cdsIfRateLimit }
STATUS current
DESCRIPTION
"A collection of object which are used to configure as
well as show information regarding the rate limit per
interface for DHCP Snooping purpose."
::= { cdsMIBGroups 5 }
cdsBindingsGroup OBJECT-GROUP
OBJECTS {
cdsBindingsAddrType,
cdsBindingsIpAddress,
cdsBindingsInterface,
cdsBindingsLeasedTime,
cdsBindingsStatus
}
STATUS current
DESCRIPTION
"A collection of object which are used to configure as
well as show information regarding the DHCP bindings
data."
::= { cdsMIBGroups 6 }
cdsStatisticsGroup OBJECT-GROUP
OBJECTS {
cdsTotalForwardedPkts,
cdsTotalDroppedPkts,
cdsUntrustedPortDroppedPkts
}
STATUS current
DESCRIPTION
"A collection of object which are used to show statistics
information regarding DHCP Snooping feature."
::= { cdsMIBGroups 7 }
cdsRelayAgentInfoOptGroup OBJECT-GROUP
OBJECTS { cdsRelayAgentInfoOptEnable }
STATUS current
DESCRIPTION
"A collection of objects which are used to configure as
well as show information regarding DHCP Option 82
insertion."
::= { cdsMIBGroups 8 }
cdsIfSrcGuardGroup OBJECT-GROUP
OBJECTS {
cdsIfSrcGuardEnable,
cdsIfSrcGuardAddrType,
cdsIfSrcGuardAddress
}
STATUS deprecated
DESCRIPTION
"A collection of objects which are used to configure as
well as show information regarding IP Source Guard
purpose."
::= { cdsMIBGroups 9 }
cdsRelayAgentRemoteIdGroup OBJECT-GROUP
OBJECTS { cdsRelayAgentInfoOptRemoteId }
STATUS deprecated
DESCRIPTION
"A collection of objects which are used to indicate information
regarding DHCP Option 82 remote ID relay agent."
::= { cdsMIBGroups 10 }
cdsMatchMacAddressGroup OBJECT-GROUP
OBJECTS { cdsMatchMacAddressEnable }
STATUS current
DESCRIPTION
"A collection of objects which are used to configure as
well as show information regarding DHCP Snooping Mac
address matching."
::= { cdsMIBGroups 11 }
cdsIfFeatureConfigGroup OBJECT-GROUP
OBJECTS { cdsIfFeatureEnable }
STATUS current
DESCRIPTION
"A collection of object which are used to configure as
well as show information regarding enable or disable of
DHCP Snooping feature at the interface."
::= { cdsMIBGroups 12 }
cdsBindingsLimitGroup OBJECT-GROUP
OBJECTS {
cdsGlobalMaxBindingsLimit,
cdsIfBindingsLimit
}
STATUS current
DESCRIPTION
"A collection of objects which provides information regarding
binding limit for DHCP Snooping purpose."
::= { cdsMIBGroups 13 }
cdsStaticBindingsGroup OBJECT-GROUP
OBJECTS {
cdsStaticBindingsAddrType,
cdsStaticBindingsIpAddress,
cdsStaticBindingsInterface,
cdsStaticBindingsStatus
}
STATUS current
DESCRIPTION
"A collection of objects which is used to configure
as well as show information regarding the DHCP bindings data
configured by users."
::= { cdsMIBGroups 14 }
cdsIfSrcGuardIpFilterGroup OBJECT-GROUP
OBJECTS {
cdsIfSrcGuardIpFilterAction,
cdsIfSrcGuardFilterMode
}
STATUS current
DESCRIPTION
"A collection of objects which is used to show information
regarding interface IP source guard purpose."
::= { cdsMIBGroups 15 }
cdsIfSrcGuardExtGroup OBJECT-GROUP
OBJECTS {
cdsIfSrcGuardMacAddress,
cdsIfSrcGuardMacFilterAction,
cdsIfSrcGuardVlansLow,
cdsIfSrcGuardVlansHigh
}
STATUS current
DESCRIPTION
"A collection of objects which is used to show additional
information regarding the IP source guard feature."
::= { cdsMIBGroups 16 }
cdsIfSrcGuardTrafficFilterGroup OBJECT-GROUP
OBJECTS { cdsIfSrcGuardFilterType }
STATUS current
DESCRIPTION
"A collection of objects which is used to configure the
type of traffic to be filtered by IP source guard feature."
::= { cdsMIBGroups 17 }
cdsIfSrcGuardGroupRev1 OBJECT-GROUP
OBJECTS {
cdsIfSrcGuardAddrType,
cdsIfSrcGuardAddress
}
STATUS current
DESCRIPTION
"A collection of objects which are used to configure as
well as show information regarding IP Source Guard
purpose."
::= { cdsMIBGroups 18 }
cdsBindingsHostnameGroup OBJECT-GROUP
OBJECTS { cdsBindingsHostname }
STATUS current
DESCRIPTION
"A collection of objects which indicates the host name
of DHCP client in DHCP bindings data."
::= { cdsMIBGroups 19 }
cdsRelayAgentInfoOptRemoteIdSubGroup OBJECT-GROUP
OBJECTS { cdsRelayAgentInfoOptRemoteIdSub }
STATUS current
DESCRIPTION
"A collection of objects which are used to configure
as well as show remote-id of option 82 DHCP Snooping."
::= { cdsMIBGroups 20 }
cdsIfVlanRelayInfoOptCircuitIdGroup OBJECT-GROUP
OBJECTS {
cdsIfVlanRelayInfoOptCircuitId,
cdsIfVlanRelayInfoOptCircuitIdStatus
}
STATUS current
DESCRIPTION
"A collection of objects which are used to configure
as well as show circuit-id of option 82 DHCP Snooping."
::= { cdsMIBGroups 21 }
cdsStatisticsExtGroup OBJECT-GROUP
OBJECTS { cdsForwardedWithoutOption82Pkts }
STATUS current
DESCRIPTION
"A collection of objects which are used to show
additional DHCP snooping statistics information."
::= { cdsMIBGroups 22 }
cdsNotifControlGroup OBJECT-GROUP
OBJECTS { cdsBindingsNotifEnabled }
STATUS current
DESCRIPTION
"A collection of object(s) which provides information
on bindings notifications control for DHCP Snooping feature."
::= { cdsMIBGroups 23 }
cdsBindingsNotificationGroup NOTIFICATION-GROUP
NOTIFICATIONS { cdsBindingsNotification }
STATUS current
DESCRIPTION
"A collection of notification(s) which provides bindings
notifications support for DHCP Snooping feature."
::= { cdsMIBGroups 24 }
cdsIfVlanRelayInfoOptCircuitIdGroupSup1 OBJECT-GROUP
OBJECTS { cdsIfVlanRelayInfoOptCircuitIdDirect }
STATUS current
DESCRIPTION
"A collection of objects which indicates to ignore the length
and type in Agent Circuit ID sub-option of the DHCP relay
information option (option 82) data inserted to DHCP packets by
DHCP Snooping feature."
::= { cdsMIBGroups 25 }
END
Reference in New Issue View Git Blame Copy Permalink