1-- *****************************************************************
2-- CISCO-DHCP-SNOOPING-MIB
3--
4-- March 2004, Edward Pham
5--
6-- Copyright (c) 2004-2007, 2009-2010 by cisco Systems, Inc.
7-- All rights reserved.
8-- *****************************************************************
9
10CISCO-DHCP-SNOOPING-MIB DEFINITIONS ::= BEGIN
11
12IMPORTS
13    MODULE-IDENTITY,
14    OBJECT-TYPE,
15    Unsigned32,
16    Counter32,
17    Counter64,
18    NOTIFICATION-TYPE
19        FROM SNMPv2-SMI
20    MODULE-COMPLIANCE,
21    OBJECT-GROUP,
22    NOTIFICATION-GROUP
23        FROM SNMPv2-CONF
24    TruthValue,
25    MacAddress,
26    RowStatus
27        FROM SNMPv2-TC
28    SnmpAdminString
29        FROM SNMP-FRAMEWORK-MIB
30    ifIndex,
31    ifName,
32    InterfaceIndex
33        FROM IF-MIB
34    InetAddressType,
35    InetAddress
36        FROM INET-ADDRESS-MIB
37    VlanIndex
38        FROM Q-BRIDGE-MIB
39    ciscoMgmt
40        FROM CISCO-SMI;
41
42
43ciscoDhcpSnoopingMIB MODULE-IDENTITY
44    LAST-UPDATED    "200908260000Z"
45    ORGANIZATION    "Cisco Systems, Inc."
46    CONTACT-INFO
47            "Cisco Systems
48            Customer Service
49
50            Postal: 170 W Tasman Drive
51            San Jose, CA 95134
52            USA
53
54            Tel: +1 800 553-NETS
55
56            E-mail: cs-lan-switch-snmp@cisco.com"
57    DESCRIPTION
58        "The MIB module is for configuration of DHCP Snooping
59        feature. DHCP Snooping is a security mechanism which
60        uses information gleaned from DHCP packets to provide
61        per-interface security capabilities."
62    REVISION        "200908260000Z"
63    DESCRIPTION
64        "Add cdsVlanOperStatusGroup."
65    REVISION        "200908100000Z"
66    DESCRIPTION
67        "Add new enum 'strictIpMac' to cdsIfSrcGuardFilterType
68         object."
69    REVISION        "200904120000Z"
70    DESCRIPTION
71        "Add cdsIfVlanRelayInfoOptCircuitIdDirect."
72    REVISION        "200711130000Z"
73    DESCRIPTION
74        "Add cdsNotifControlGroup and cdsBindingsNotificationGroup."
75    REVISION        "200707120000Z"
76    DESCRIPTION
77        "Add cdsIfVlanRelayInfoOptCircuitIdGroup,
78        cdsStatisticsExtGroup
79        and deprecate cdsRelayAgentRemoteIdGroup with
80        cdsRelayAgentInfoOptRemoteIdSubGroup."
81    REVISION        "200705300000Z"
82    DESCRIPTION
83        "Add cdsBindingsHostnameGroup"
84    REVISION        "200603161600Z"
85    DESCRIPTION
86        "Add cdsBindingsLimitGroup,
87        cdsStaticBindingsGroup,
88        cdsIfSrcGuardIpFilterGroup,
89        cdsIfSrcGuardTrafficFilterGroup,
90        cdsIfSrcGuardExtGroup
91        and deprecate cdsIfSrcGuardGroup with cdsIfSrcGuardGroupRev1."
92    REVISION        "200510260000Z"
93    DESCRIPTION
94        "Add cdsIfFeatureConfigGroup."
95    REVISION        "200403040000Z"
96    DESCRIPTION
97        "Initial revision of this MIB module."
98    ::= { ciscoMgmt 380 }
99
100
101ciscoDhcpSnoopingMIBNotifs  OBJECT IDENTIFIER
102    ::= { ciscoDhcpSnoopingMIB 0 }
103
104ciscoDhcpSnoopingMIBObjects  OBJECT IDENTIFIER
105    ::= { ciscoDhcpSnoopingMIB 1 }
106
107ciscoDhcpSnoopingMIBConformance  OBJECT IDENTIFIER
108    ::= { ciscoDhcpSnoopingMIB 2 }
109
110cdsGlobal  OBJECT IDENTIFIER
111    ::= { ciscoDhcpSnoopingMIBObjects 1 }
112
113cdsVlan  OBJECT IDENTIFIER
114    ::= { ciscoDhcpSnoopingMIBObjects 2 }
115
116cdsInterface  OBJECT IDENTIFIER
117    ::= { ciscoDhcpSnoopingMIBObjects 3 }
118
119cdsBindings  OBJECT IDENTIFIER
120    ::= { ciscoDhcpSnoopingMIBObjects 4 }
121
122cdsStatistics  OBJECT IDENTIFIER
123    ::= { ciscoDhcpSnoopingMIBObjects 5 }
124
125cdsSrcGuard  OBJECT IDENTIFIER
126    ::= { ciscoDhcpSnoopingMIBObjects 6 }
127
128
129-- The Global group
130
131cdsFeatureEnable OBJECT-TYPE
132    SYNTAX          TruthValue
133    MAX-ACCESS      read-write
134    STATUS          current
135    DESCRIPTION
136        "This object indicates whether the DHCP Snooping feature is
137        enabled at the device level.
138
139        Setting this object to 'false' disables the DHCP Snooping
140        feature globally thus disabling the feature at each VLAN.
141
142        Setting this object to 'true' will start the DHCP Snooping
143        feature running in the device. Once the DHCP Snooping is
144        enabled, whether the feature is running at each VLAN is
145        controlled by the cdsVlanConfigTable."
146    ::= { cdsGlobal 1 }
147
148cdsDatabaseFile OBJECT-TYPE
149    SYNTAX          SnmpAdminString
150    MAX-ACCESS      read-write
151    STATUS          current
152    DESCRIPTION
153        "This object indicates the name of the database file used
154        to store DHCP bindings information."
155    ::= { cdsGlobal 2 }
156
157cdsDatabaseUpdateInterval OBJECT-TYPE
158    SYNTAX          Unsigned32
159    UNITS           "seconds"
160    MAX-ACCESS      read-write
161    STATUS          current
162    DESCRIPTION
163        "This object indicates the time interval at which DHCP
164        bindings information will be written to the database file
165        denoted by cdsDatabaseFile object. Setting this object
166        to zero will disable the storage of DHCP bindings."
167    ::= { cdsGlobal 3 }
168
169cdsRelayAgentInfoOptEnable OBJECT-TYPE
170    SYNTAX          TruthValue
171    MAX-ACCESS      read-write
172    STATUS          current
173    DESCRIPTION
174        "This object indicates if the DHCP relay agent information
175        option (option 82) will be inserted to DHCP packets by
176        DHCP Snooping feature.
177
178        If this object is set to 'true', DHCP option 82 data will
179        be inserted to DHCP packets.
180
181        If this object is set to 'false', DHCP option 82 data
182        will not be inserted."
183    REFERENCE       "RFC 3046, DHCP Relay Agent Information Option."
184    ::= { cdsGlobal 4 }
185
186cdsRelayAgentInfoOptRemoteId OBJECT-TYPE
187    SYNTAX          MacAddress
188    MAX-ACCESS      read-only
189    STATUS          deprecated
190    DESCRIPTION
191        "This object indicates the Remote ID used as part of the
192        DHCP relay information option (option 82) data inserted
193        to DHCP packets by DHCP Snooping feature.
194
195        The value of this object is ignored whenever the value
196        of cdsRelayAgentInfoOptEnable object is 'false'.
197        This object is deprecated and superceded by
198        cdsRelayAgentInfoOptRemoteIdSub object."
199    REFERENCE       "RFC 3046, DHCP Relay Agent Information Option."
200    ::= { cdsGlobal 5 }
201
202cdsMatchMacAddressEnable OBJECT-TYPE
203    SYNTAX          TruthValue
204    MAX-ACCESS      read-write
205    STATUS          current
206    DESCRIPTION
207        "This object indicates if DHCP Snooping Mac address
208        matching is enabled.
209
210        If this object is set to 'true', DHCP Snooping Mac
211        address matching is enabled.
212
213        If this object is set to 'false', DHCP Snooping Mac
214        address matching is disabled."
215    ::= { cdsGlobal 6 }
216
217cdsGlobalMaxBindingsLimit OBJECT-TYPE
218    SYNTAX          Unsigned32
219    MAX-ACCESS      read-write
220    STATUS          current
221    DESCRIPTION
222        "This object specifies the maximum number of DHCP
223        bindings allowed in the device."
224    ::= { cdsGlobal 7 }
225
226cdsRelayAgentInfoOptRemoteIdSub OBJECT-TYPE
227    SYNTAX          OCTET STRING (SIZE  (1..64))
228    MAX-ACCESS      read-write
229    STATUS          current
230    DESCRIPTION
231        "This object specifies the Remote ID used in Agent Remote ID
232        sub-option of the DHCP relay information option (option 82)
233        data inserted to DHCP packets by DHCP Snooping feature.
234
235        The value of this object is in a format of a user-defined
236        string. Its default value is the device's MAC address.
237
238        The value of this object is ignored whenever the value
239        of cdsRelayAgentInfoOptEnable object is 'false'."
240    REFERENCE       "RFC 3046, DHCP Relay Agent Information Option."
241    ::= { cdsGlobal 8 }
242
243cdsBindingsNotifEnabled OBJECT-TYPE
244    SYNTAX          TruthValue
245    MAX-ACCESS      read-write
246    STATUS          current
247    DESCRIPTION
248        "This object specifies whether cdsBindingsNotification
249        is generated by the system.
250
251        Setting this object value to 'true' will enable
252        generation of cdsBindingsNotification.
253
254        Seting this object value to 'false' will disable
255        generation of cdsBindingsNotification."
256    ::= { cdsGlobal 9 }
257-- The DHCP Snooping Vlan Group
258--
259
260--
261-- The DHCP Snooping VLAN Config Table
262
263cdsVlanConfigTable OBJECT-TYPE
264    SYNTAX          SEQUENCE OF CdsVlanConfigEntry
265    MAX-ACCESS      not-accessible
266    STATUS          current
267    DESCRIPTION
268        "A table provides the mechanism to control DHCP Snooping
269        per VLAN. When a VLAN is created in a device supporting this
270        table, a corresponding entry of this table will be added."
271    ::= { cdsVlan 1 }
272
273cdsVlanConfigEntry OBJECT-TYPE
274    SYNTAX          CdsVlanConfigEntry
275    MAX-ACCESS      not-accessible
276    STATUS          current
277    DESCRIPTION
278        "A row instance contains the configuration to enable
279        or disable DHCP Snooping at each existing VLAN."
280    INDEX           { cdsVlanIndex }
281    ::= { cdsVlanConfigTable 1 }
282
283CdsVlanConfigEntry ::= SEQUENCE {
284        cdsVlanIndex                  VlanIndex,
285        cdsVlanDhcpSnoopingEnable     TruthValue,
286        cdsVlanDhcpSnoopingOperStatus INTEGER
287}
288
289cdsVlanIndex OBJECT-TYPE
290    SYNTAX          VlanIndex
291    MAX-ACCESS      not-accessible
292    STATUS          current
293    DESCRIPTION
294        "This object indicates the VLAN number on which DHCP Snooping
295        feature is configured."
296    ::= { cdsVlanConfigEntry 1 }
297
298cdsVlanDhcpSnoopingEnable OBJECT-TYPE
299    SYNTAX          TruthValue
300    MAX-ACCESS      read-write
301    STATUS          current
302    DESCRIPTION
303        "This object indicates whether DHCP Snooping is enabled in
304        this VLAN.
305
306        If this object is set to 'true', DHCP Snooping is enabled.
307
308        If this object is set to 'false', DHCP Snooping is disabled."
309    ::= { cdsVlanConfigEntry 2 }
310
311cdsVlanDhcpSnoopingOperStatus OBJECT-TYPE
312    SYNTAX          INTEGER { operational(1), notOperational(2) }
313    MAX-ACCESS      read-only
314    STATUS          current
315    DESCRIPTION
316        "This object indicates whether DHCP Snooping is operational in
317        this VLAN.
318
319        If this object is 'operational', DHCP Snooping is running.
320
321        If this object is 'notOperational', DHCP Snooping is not running."
322    ::= { cdsVlanConfigEntry 3 }
323
324
325-- The DHCP Snooping Interface Group
326--
327
328--
329-- The DHCP Snooping Interface Config Table
330
331cdsIfConfigTable OBJECT-TYPE
332    SYNTAX          SEQUENCE OF CdsIfConfigEntry
333    MAX-ACCESS      not-accessible
334    STATUS          current
335    DESCRIPTION
336        "A table provides the mechanism to configure the trust
337        state for DHCP Snooping purpose at each interface
338        capable of this feature. Some of the interfaces
339        (but not limited to) for which this feature might be
340        applicable are: ifType = ethernetCsmacd(6)."
341    ::= { cdsInterface 1 }
342
343cdsIfConfigEntry OBJECT-TYPE
344    SYNTAX          CdsIfConfigEntry
345    MAX-ACCESS      not-accessible
346    STATUS          current
347    DESCRIPTION
348        "A row instance contains the configuration to enable
349        or disable trust state for DHCP Snooping at each
350        interface capable of this feature."
351    INDEX           { ifIndex }
352    ::= { cdsIfConfigTable 1 }
353
354CdsIfConfigEntry ::= SEQUENCE {
355        cdsIfTrustEnable TruthValue
356}
357
358cdsIfTrustEnable OBJECT-TYPE
359    SYNTAX          TruthValue
360    MAX-ACCESS      read-write
361    STATUS          current
362    DESCRIPTION
363        "This object indicates whether the interface is trusted for
364        DHCP Snooping purpose.
365
366        If this object is set to 'true', the interface is trusted.
367        DHCP packets coming to this interface will be forwarded
368        without checking.
369
370        If this object is set to 'false', the interface is not
371        trusted. DHCP packets coming to this interface will be
372        subjected to DHCP checks."
373    ::= { cdsIfConfigEntry 1 }
374
375
376-- The DHCP Snooping Rate Limit Interface Config Table
377
378cdsIfRateLimitTable OBJECT-TYPE
379    SYNTAX          SEQUENCE OF CdsIfRateLimitEntry
380    MAX-ACCESS      not-accessible
381    STATUS          current
382    DESCRIPTION
383        "A table provides the mechanism to configure the rate limit
384        for DHCP Snooping purpose at each interface capable
385        of this feature. Some of the interfaces (but not limited to)
386        for which this feature might be applicable are:
387        ifType = ethernetCsmacd(6)."
388    ::= { cdsInterface 2 }
389
390cdsIfRateLimitEntry OBJECT-TYPE
391    SYNTAX          CdsIfRateLimitEntry
392    MAX-ACCESS      not-accessible
393    STATUS          current
394    DESCRIPTION
395        "A row instance contains the configuration of rate limit
396        DHCP Snooping at each interface capable of this
397        feature."
398    INDEX           { ifIndex }
399    ::= { cdsIfRateLimitTable 1 }
400
401CdsIfRateLimitEntry ::= SEQUENCE {
402        cdsIfRateLimit Unsigned32
403}
404
405cdsIfRateLimit OBJECT-TYPE
406    SYNTAX          Unsigned32
407    UNITS           "packets per second"
408    MAX-ACCESS      read-write
409    STATUS          current
410    DESCRIPTION
411        "This object indicates rate limit value for DHCP Snooping
412        purpose. If the value of this object is 0, no rate limit is
413        applied for DHCP traffic at this interface."
414    ::= { cdsIfRateLimitEntry 1 }
415
416
417-- The DHCP Snooping Interface Feature Enable Table
418
419cdsIfFeatureConfigTable OBJECT-TYPE
420    SYNTAX          SEQUENCE OF CdsIfFeatureConfigEntry
421    MAX-ACCESS      not-accessible
422    STATUS          current
423    DESCRIPTION
424        "A table provides the mechanism to enable or disable
425        DHCP Snooping feature at each interface capable of this
426        feature. Some of the interfaces (but not limited to) for
427        which this configuration might be applicable are:
428        ifType = ethernetCsmacd(6)."
429    ::= { cdsInterface 3 }
430
431cdsIfFeatureConfigEntry OBJECT-TYPE
432    SYNTAX          CdsIfFeatureConfigEntry
433    MAX-ACCESS      not-accessible
434    STATUS          current
435    DESCRIPTION
436        "A row instance contains the configuration to enable
437        or disable DHCP Snooping at each interface capable of this
438        feature."
439    INDEX           { ifIndex }
440    ::= { cdsIfFeatureConfigTable 1 }
441
442CdsIfFeatureConfigEntry ::= SEQUENCE {
443        cdsIfFeatureEnable TruthValue
444}
445
446cdsIfFeatureEnable OBJECT-TYPE
447    SYNTAX          TruthValue
448    MAX-ACCESS      read-write
449    STATUS          current
450    DESCRIPTION
451        "This object indicates whether the  DHCP Snooping feature
452        is enabled at this interface.
453
454        If this object is set to 'true', DHCP Snooping is enabled.
455
456        If this object is set to 'false', DHCP Snooping is disabled."
457    ::= { cdsIfFeatureConfigEntry 1 }
458
459
460-- The DHCP Bindings limit table
461
462cdsIfBindingsLimitTable OBJECT-TYPE
463    SYNTAX          SEQUENCE OF CdsIfBindingsLimitEntry
464    MAX-ACCESS      not-accessible
465    STATUS          current
466    DESCRIPTION
467        "A table provides the mechanism to configure the binding limit
468        for DHCP Snooping purpose at each interface capable of
469        this feature. Some of the interfaces (but not limited to)
470        for which this feature might be applicable are:
471        ifType = ethernetCsmacd(6)."
472    ::= { cdsInterface 4 }
473
474cdsIfBindingsLimitEntry OBJECT-TYPE
475    SYNTAX          CdsIfBindingsLimitEntry
476    MAX-ACCESS      not-accessible
477    STATUS          current
478    DESCRIPTION
479        "A row instance contains the configuration of binding limit at
480        each interface capable of this feature."
481    INDEX           { ifIndex }
482    ::= { cdsIfBindingsLimitTable 1 }
483
484CdsIfBindingsLimitEntry ::= SEQUENCE {
485        cdsIfBindingsLimit Unsigned32
486}
487
488cdsIfBindingsLimit OBJECT-TYPE
489    SYNTAX          Unsigned32
490    MAX-ACCESS      read-write
491    STATUS          current
492    DESCRIPTION
493        "This object specifies the maximum number of DHCP bindings
494        allowed on this interface. This objects value will limit
495        the number of entries in cdsBindingsTable and
496        cdsStaticBindingsTable. The sum of all instances' value of
497        cdsIfBindingsLimit in this table should be less than or equal
498        to the object value of cdsGlobalMaxBindingsLimit."
499    ::= { cdsIfBindingsLimitEntry 1 }
500
501
502-- DHCP Snooping Option 82 circuit-id table
503
504cdsIfVlanRelayInfoOptCircuitIdTable OBJECT-TYPE
505    SYNTAX          SEQUENCE OF CdsIfVlanRelayInfoOptCircuitIdEntry
506    MAX-ACCESS      not-accessible
507    STATUS          current
508    DESCRIPTION
509        "Each entry in this table represent circuit-id information,
510        configured on per port per vlan."
511    ::= { cdsInterface 5 }
512
513cdsIfVlanRelayInfoOptCircuitIdEntry OBJECT-TYPE
514    SYNTAX          CdsIfVlanRelayInfoOptCircuitIdEntry
515    MAX-ACCESS      not-accessible
516    STATUS          current
517    DESCRIPTION
518        "Entry contains circuit-id information for a particular interface
519        and VLAN."
520    INDEX           {
521                        ifIndex,
522                        cdsIfVlan
523                    }
524    ::= { cdsIfVlanRelayInfoOptCircuitIdTable 1 }
525
526CdsIfVlanRelayInfoOptCircuitIdEntry ::= SEQUENCE {
527        cdsIfVlan                            VlanIndex,
528        cdsIfVlanRelayInfoOptCircuitId       OCTET STRING,
529        cdsIfVlanRelayInfoOptCircuitIdStatus RowStatus,
530        cdsIfVlanRelayInfoOptCircuitIdDirect TruthValue
531}
532
533cdsIfVlan OBJECT-TYPE
534    SYNTAX          VlanIndex
535    MAX-ACCESS      not-accessible
536    STATUS          current
537    DESCRIPTION
538        "This object indicates the VLAN on which circuit-id is
539        configured."
540    ::= { cdsIfVlanRelayInfoOptCircuitIdEntry 1 }
541
542cdsIfVlanRelayInfoOptCircuitId OBJECT-TYPE
543    SYNTAX          OCTET STRING (SIZE  (1..64))
544    MAX-ACCESS      read-create
545    STATUS          current
546    DESCRIPTION
547        "This object specifies circuit-id used in Agent Circuit ID
548        sub-option of the DHCP relay information option (option 82)
549        data inserted to DHCP packets by DHCP Snooping feature.
550
551        The value of this object is in a format of a user-defined
552        string.
553
554        The value of this object is ignored whenever the value
555        of cdsRelayAgentInfoOptEnable object is 'false'."
556    REFERENCE       "RFC 3046, DHCP Relay Agent Information Option."
557    ::= { cdsIfVlanRelayInfoOptCircuitIdEntry 2 }
558
559cdsIfVlanRelayInfoOptCircuitIdStatus OBJECT-TYPE
560    SYNTAX          RowStatus
561    MAX-ACCESS      read-create
562    STATUS          current
563    DESCRIPTION
564        "This object is used to manage the creation and deletion
565        of rows in this table. It only supports 'active(1)',
566        'destroy(6)' and 'createAndGo(4)' value.
567
568        Entry in this table gets created by setting
569        cdsIfVlanRelayInfoOptCircuitIdStatus object to 'createAndGo'.
570        Entry in this table gets deleted by setting
571        cdsIfVlanRelayInfoOptCircuitIdStatus object to 'destroy'
572
573        Value of cdsIfRelayInfoOptCircuitId object can be
574        modified when the value of this RowStatus object is
575        'active'."
576    ::= { cdsIfVlanRelayInfoOptCircuitIdEntry 3 }
577
578cdsIfVlanRelayInfoOptCircuitIdDirect OBJECT-TYPE
579    SYNTAX          TruthValue
580    MAX-ACCESS      read-create
581    STATUS          current
582    DESCRIPTION
583        "This object specifies to ignore the length and type in
584        Agent Circuit ID sub-option of the DHCP relay information
585        option (option 82) data inserted to DHCP packets by
586        DHCP Snooping feature.
587
588        The value of this object is ignored whenever the value
589        of cdsRelayAgentInfoOptEnable object is 'false'."
590    ::= { cdsIfVlanRelayInfoOptCircuitIdEntry 4 }
591
592
593-- The DHCP Bindings group
594
595cdsBindingsTable OBJECT-TYPE
596    SYNTAX          SEQUENCE OF CdsBindingsEntry
597    MAX-ACCESS      not-accessible
598    STATUS          current
599    DESCRIPTION
600        "A table provides the DHCP bindings information learnt by
601        the device."
602    ::= { cdsBindings 1 }
603
604cdsBindingsEntry OBJECT-TYPE
605    SYNTAX          CdsBindingsEntry
606    MAX-ACCESS      not-accessible
607    STATUS          current
608    DESCRIPTION
609        "A row instance contains the Mac address, IP address type,
610        IP address, VLAN number, interface number, leased time, and
611        status of this instance."
612    INDEX           {
613                        cdsBindingsVlan,
614                        cdsBindingsMacAddress
615                    }
616    ::= { cdsBindingsTable 1 }
617
618CdsBindingsEntry ::= SEQUENCE {
619        cdsBindingsVlan       VlanIndex,
620        cdsBindingsMacAddress MacAddress,
621        cdsBindingsAddrType   InetAddressType,
622        cdsBindingsIpAddress  InetAddress,
623        cdsBindingsInterface  InterfaceIndex,
624        cdsBindingsLeasedTime Unsigned32,
625        cdsBindingsStatus     RowStatus,
626        cdsBindingsHostname   SnmpAdminString
627}
628
629cdsBindingsVlan OBJECT-TYPE
630    SYNTAX          VlanIndex
631    MAX-ACCESS      not-accessible
632    STATUS          current
633    DESCRIPTION
634        "This object indicates the VLAN to which a DHCP client host
635        belongs."
636    ::= { cdsBindingsEntry 1 }
637
638cdsBindingsMacAddress OBJECT-TYPE
639    SYNTAX          MacAddress
640    MAX-ACCESS      not-accessible
641    STATUS          current
642    DESCRIPTION
643        "This object indicates the MAC address of a DHCP client
644        host."
645    ::= { cdsBindingsEntry 2 }
646
647cdsBindingsAddrType OBJECT-TYPE
648    SYNTAX          InetAddressType
649    MAX-ACCESS      read-only
650    STATUS          current
651    DESCRIPTION
652        "This object indicates the type of IP address denoted
653        in cdsBindingsIpAddress object."
654    ::= { cdsBindingsEntry 3 }
655
656cdsBindingsIpAddress OBJECT-TYPE
657    SYNTAX          InetAddress
658    MAX-ACCESS      read-only
659    STATUS          current
660    DESCRIPTION
661        "This object indicates the allocated IP address of
662        a DHCP client host."
663    ::= { cdsBindingsEntry 4 }
664
665cdsBindingsInterface OBJECT-TYPE
666    SYNTAX          InterfaceIndex
667    MAX-ACCESS      read-only
668    STATUS          current
669    DESCRIPTION
670        "This object indicates the interface where a DHCP client
671        host connects to."
672    ::= { cdsBindingsEntry 5 }
673
674cdsBindingsLeasedTime OBJECT-TYPE
675    SYNTAX          Unsigned32
676    UNITS           "seconds"
677    MAX-ACCESS      read-only
678    STATUS          current
679    DESCRIPTION
680        "This object indicates the leased time of this DHCP
681        bindings."
682    ::= { cdsBindingsEntry 6 }
683
684cdsBindingsStatus OBJECT-TYPE
685    SYNTAX          RowStatus
686    MAX-ACCESS      read-create
687    STATUS          current
688    DESCRIPTION
689        "This object is used to manage the deletion of rows
690        in this table. This object only supports active(1) and
691        destroy(6) value.
692
693        Whenever a DHCP binding is learnt by the device, an
694        entry will be created by the device in this table with
695        its RowStatus object set to active(1). Setting this
696        object value to destroy(6) will clear the DHCP bindings
697        information represented by this row instance."
698    ::= { cdsBindingsEntry 7 }
699
700cdsBindingsHostname OBJECT-TYPE
701    SYNTAX          SnmpAdminString
702    MAX-ACCESS      read-only
703    STATUS          current
704    DESCRIPTION
705        "This object indicates the host name of the DHCP client
706        as denoted by DHCP option 12 field. An empty string
707        indicates absence of option 12 in DHCP packet."
708    ::= { cdsBindingsEntry 8 }
709
710
711-- The static bindings table
712
713cdsStaticBindingsTable OBJECT-TYPE
714    SYNTAX          SEQUENCE OF CdsStaticBindingsEntry
715    MAX-ACCESS      not-accessible
716    STATUS          current
717    DESCRIPTION
718        "A table provides the DHCP bindings information configured
719        by (local or network) management."
720    ::= { cdsBindings 2 }
721
722cdsStaticBindingsEntry OBJECT-TYPE
723    SYNTAX          CdsStaticBindingsEntry
724    MAX-ACCESS      not-accessible
725    STATUS          current
726    DESCRIPTION
727        "A row instance contains the Mac address, IP address type,
728        IP address, VLAN number, interface number, and status of
729        this instance."
730    INDEX           {
731                        cdsStaticBindingsVlan,
732                        cdsStaticBindingsMacAddress
733                    }
734    ::= { cdsStaticBindingsTable 1 }
735
736CdsStaticBindingsEntry ::= SEQUENCE {
737        cdsStaticBindingsVlan       VlanIndex,
738        cdsStaticBindingsMacAddress MacAddress,
739        cdsStaticBindingsAddrType   InetAddressType,
740        cdsStaticBindingsIpAddress  InetAddress,
741        cdsStaticBindingsInterface  InterfaceIndex,
742        cdsStaticBindingsStatus     RowStatus
743}
744
745cdsStaticBindingsVlan OBJECT-TYPE
746    SYNTAX          VlanIndex
747    MAX-ACCESS      not-accessible
748    STATUS          current
749    DESCRIPTION
750        "This object indicates the VLAN to which a DHCP client host
751        belongs."
752    ::= { cdsStaticBindingsEntry 1 }
753
754cdsStaticBindingsMacAddress OBJECT-TYPE
755    SYNTAX          MacAddress
756    MAX-ACCESS      not-accessible
757    STATUS          current
758    DESCRIPTION
759        "This object indicates the MAC address of a DHCP client
760        host."
761    ::= { cdsStaticBindingsEntry 2 }
762
763cdsStaticBindingsAddrType OBJECT-TYPE
764    SYNTAX          InetAddressType
765    MAX-ACCESS      read-create
766    STATUS          current
767    DESCRIPTION
768        "This object indicates the type of IP address denoted
769        in cdsStaticBindingsIpAddress object."
770    ::= { cdsStaticBindingsEntry 3 }
771
772cdsStaticBindingsIpAddress OBJECT-TYPE
773    SYNTAX          InetAddress
774    MAX-ACCESS      read-create
775    STATUS          current
776    DESCRIPTION
777        "This object indicates the allocated IP address of
778        a DHCP client host."
779    ::= { cdsStaticBindingsEntry 4 }
780
781cdsStaticBindingsInterface OBJECT-TYPE
782    SYNTAX          InterfaceIndex
783    MAX-ACCESS      read-create
784    STATUS          current
785    DESCRIPTION
786        "This object indicates the ifIndex value of the interface
787        where a DHCP client host connects to."
788    ::= { cdsStaticBindingsEntry 5 }
789
790cdsStaticBindingsStatus OBJECT-TYPE
791    SYNTAX          RowStatus
792    MAX-ACCESS      read-create
793    STATUS          current
794    DESCRIPTION
795        "This object is used to manage the creation and deletion
796        of rows in this table. An entry can be created by setting
797        the instance value of this object to 'createAndGo', and
798        deleted by setting the instance value of this object to
799        'destroy'. The value of cdsStaticBindingsAddrType,
800        cdsStaticBindingsIpAddress, cdsStaticBindingsInterface
801        object can be modified when the value of this RowStatus
802        object is 'active'."
803    ::= { cdsStaticBindingsEntry 6 }
804
805
806
807-- The DHCP Snooping Statistics group
808
809cdsTotalForwardedPkts OBJECT-TYPE
810    SYNTAX          Counter64
811    UNITS           "packets"
812    MAX-ACCESS      read-only
813    STATUS          current
814    DESCRIPTION
815        "Indicates the total number of packets subjected to
816        DHCP Snooping is forwarded."
817    ::= { cdsStatistics 1 }
818
819cdsTotalDroppedPkts OBJECT-TYPE
820    SYNTAX          Counter64
821    UNITS           "packets"
822    MAX-ACCESS      read-only
823    STATUS          current
824    DESCRIPTION
825        "Indicates the total number of packets subjected to
826        DHCP Snooping is dropped."
827    ::= { cdsStatistics 2 }
828
829cdsUntrustedPortDroppedPkts OBJECT-TYPE
830    SYNTAX          Counter64
831    UNITS           "packets"
832    MAX-ACCESS      read-only
833    STATUS          current
834    DESCRIPTION
835        "Indicates the number of packets subjected to DHCP Snooping
836        is dropped because they come from untrusted interface."
837    ::= { cdsStatistics 3 }
838
839cdsForwardedWithoutOption82Pkts OBJECT-TYPE
840    SYNTAX          Counter32
841    UNITS           "packets"
842    MAX-ACCESS      read-only
843    STATUS          current
844    DESCRIPTION
845        "Indicates the number of packets subjected to DHCP Snooping
846        is forwarded without insertion of DHCP relay agent information
847        option (option 82) data."
848    ::= { cdsStatistics 4 }
849-- The IP Source Guard Group
850
851cdsIfSrcGuardConfigTable OBJECT-TYPE
852    SYNTAX          SEQUENCE OF CdsIfSrcGuardConfigEntry
853    MAX-ACCESS      not-accessible
854    STATUS          current
855    DESCRIPTION
856        "A table provides the mechanism to enable or disable
857        IP Source Guard at each physical interface capable of
858        this feature. Some of the interfaces (but not limited to)
859        for which this feature might be applicable are:
860        ifType = ethernetCsmacd(6).
861
862        When DHCP Snooping is enabled at an interface, a list of
863        IP addresses is obtained through DHCP Snooping for this
864        particular interface. If IP Source Guard is enabled, only
865        traffic from these IP addresses is allowed to pass through
866        the interface."
867    ::= { cdsSrcGuard 1 }
868
869cdsIfSrcGuardConfigEntry OBJECT-TYPE
870    SYNTAX          CdsIfSrcGuardConfigEntry
871    MAX-ACCESS      not-accessible
872    STATUS          current
873    DESCRIPTION
874        "A row instance contains the configuration to enable
875        or disable IP Source Guard as well as the configuration
876        of the filter type at each physical interface capable
877        of IP Source Guard feature."
878    INDEX           { ifIndex }
879    ::= { cdsIfSrcGuardConfigTable 1 }
880
881CdsIfSrcGuardConfigEntry ::= SEQUENCE {
882        cdsIfSrcGuardEnable     TruthValue,
883        cdsIfSrcGuardFilterType INTEGER
884}
885
886cdsIfSrcGuardEnable OBJECT-TYPE
887    SYNTAX          TruthValue
888    MAX-ACCESS      read-write
889    STATUS          deprecated
890    DESCRIPTION
891        "This object indicates whether IP Source Guard is enabled
892        at this interface.
893
894        If this object is set to 'true', IP Source Guard is
895        enabled. Traffic coming to this interface will be forwarded
896        if it is from the list of IP addresses obtained through
897        DHCP Snooping. Otherwise, it is denied.
898
899        If this object is set to 'false', IP Source Guard is
900        disabled.
901
902        This object is deprecated and superceded by
903        cdsIfSrcGuardFilterType object."
904    ::= { cdsIfSrcGuardConfigEntry 1 }
905
906cdsIfSrcGuardFilterType OBJECT-TYPE
907    SYNTAX          INTEGER  {
908                        disable(1),
909                        ip(2),
910                        ipMac(3),
911                        strictIpMac(4)
912                    }
913    MAX-ACCESS      read-write
914    STATUS          current
915    DESCRIPTION
916        "This object indicates the traffic filter type applied
917        at this interface.
918
919        'disable' indicates that Source Guard feature is disabled.
920
921        'ip' indicates that Source Guard feature is enabled and
922        only applied to IP traffic.
923
924        'ipMac' indicates that Source Guard feature is enabled and
925        applied to both IP and MAC traffic.
926
927        'strictIpMac' indicates that Source Guard feature is
928        enabled and applied to IP traffic. IP traffic originating
929        from a DHCP client will subject to validation of
930        client IP address, MAC address, VLAN and interface where
931        the DHCP client is connected."
932    ::= { cdsIfSrcGuardConfigEntry 2 }
933
934
935-- cdsIfSrcGuardAddrTable
936
937cdsIfSrcGuardAddrTable OBJECT-TYPE
938    SYNTAX          SEQUENCE OF CdsIfSrcGuardAddrEntry
939    MAX-ACCESS      not-accessible
940    STATUS          current
941    DESCRIPTION
942        "A table provides the information on IP addresses used
943        for IP Source Guard purpose at each physical interface
944        capable of this feature. Some of the interfaces
945        (but not limited to) for which this feature might be
946        applicable are: ifType = ethernetCsmacd(6)."
947    ::= { cdsSrcGuard 2 }
948
949cdsIfSrcGuardAddrEntry OBJECT-TYPE
950    SYNTAX          CdsIfSrcGuardAddrEntry
951    MAX-ACCESS      not-accessible
952    STATUS          current
953    DESCRIPTION
954        "A row instance contains the IP address type and IP
955        address used for IP Source Guard purpose at each
956        physical interface capable of this feature."
957    INDEX           {
958                        ifIndex,
959                        cdsIfSrcGuardIndex
960                    }
961    ::= { cdsIfSrcGuardAddrTable 1 }
962
963CdsIfSrcGuardAddrEntry ::= SEQUENCE {
964        cdsIfSrcGuardIndex           Unsigned32,
965        cdsIfSrcGuardAddrType        InetAddressType,
966        cdsIfSrcGuardAddress         InetAddress,
967        cdsIfSrcGuardIpFilterAction  INTEGER,
968        cdsIfSrcGuardFilterMode      INTEGER,
969        cdsIfSrcGuardMacAddress      MacAddress,
970        cdsIfSrcGuardMacFilterAction INTEGER,
971        cdsIfSrcGuardVlansLow        OCTET STRING,
972        cdsIfSrcGuardVlansHigh       OCTET STRING
973}
974
975cdsIfSrcGuardIndex OBJECT-TYPE
976    SYNTAX          Unsigned32
977    MAX-ACCESS      not-accessible
978    STATUS          current
979    DESCRIPTION
980        "This object indicates the index of this entry."
981    ::= { cdsIfSrcGuardAddrEntry 1 }
982
983cdsIfSrcGuardAddrType OBJECT-TYPE
984    SYNTAX          InetAddressType
985    MAX-ACCESS      read-only
986    STATUS          current
987    DESCRIPTION
988        "This object indicates the type of IP address denoted
989        in cdsIfSrcGuardAddress object."
990    ::= { cdsIfSrcGuardAddrEntry 2 }
991
992cdsIfSrcGuardAddress OBJECT-TYPE
993    SYNTAX          InetAddress
994    MAX-ACCESS      read-only
995    STATUS          current
996    DESCRIPTION
997        "This object indicates the IP address obtained at
998        this interface through DHCP Snooping or statically
999        configured."
1000    ::= { cdsIfSrcGuardAddrEntry 3 }
1001
1002cdsIfSrcGuardIpFilterAction OBJECT-TYPE
1003    SYNTAX          INTEGER  {
1004                        permitIpAddress(1),
1005                        denyAllIpAddress(2)
1006                    }
1007    MAX-ACCESS      read-only
1008    STATUS          current
1009    DESCRIPTION
1010        "This object indicates the IP Source Guard action
1011        applied at this interface with respect to IP traffic.
1012
1013        permitIpAddress(1) indicates that IP traffic coming
1014        from the IP address denoted by cdsIfSrcGuardAddress
1015        object will be allowed to go through.
1016
1017        denyAllIpAdress(2) indicates that all IP traffic
1018        coming to this interface will be dropped. The value
1019        of cdsIfSrcGuardAddress object will be ignored in
1020        this case."
1021    ::= { cdsIfSrcGuardAddrEntry 4 }
1022
1023cdsIfSrcGuardFilterMode OBJECT-TYPE
1024    SYNTAX          INTEGER  {
1025                        active(1),
1026                        inactiveTrustPort(2),
1027                        inactiveNoSnoopingVlan(3)
1028                    }
1029    MAX-ACCESS      read-only
1030    STATUS          current
1031    DESCRIPTION
1032        "This object indicates the Source Guard filter mode at
1033        this interface.
1034
1035        active(1) indicates that the Source Guard feature is
1036        active at this interface.
1037
1038        inactiveTrustPort(2) indicates that the Source Guard
1039        feature is inactive because this interface is a DHCP
1040        Snooping trust interface.
1041
1042        inactiveNoSnoopingVlan(3) indicates that the Source
1043        Guard feature is inactive because this interface
1044        does not have a VLAN which has DHCP Snooping enabled."
1045    ::= { cdsIfSrcGuardAddrEntry 5 }
1046
1047cdsIfSrcGuardMacAddress OBJECT-TYPE
1048    SYNTAX          MacAddress
1049    MAX-ACCESS      read-only
1050    STATUS          current
1051    DESCRIPTION
1052        "This object indicates the MAC address for Source Guard
1053        purpose."
1054    ::= { cdsIfSrcGuardAddrEntry 6 }
1055
1056cdsIfSrcGuardMacFilterAction OBJECT-TYPE
1057    SYNTAX          INTEGER  {
1058                        allowMacAddress(1),
1059                        denyAllMacAddresses(2),
1060                        permitAllMacAddresses(3)
1061                    }
1062    MAX-ACCESS      read-only
1063    STATUS          current
1064    DESCRIPTION
1065        "This object indicates the Source Guard action
1066        applied at this interface with respect to MAC traffic.
1067
1068        allowMacAddress(1) indicates that MAC traffic coming
1069        from the MAC address denoted by cdsIfSrcGuardMacAddress
1070        object will be allowed to go through.
1071
1072        denyAllMacAddresses(2) indicates that all MAC traffic
1073        coming to this interface will be dropped. The value
1074        of cdsIfSrcGuardMacAddress object will be ignored in
1075        this case.
1076
1077        permitAllMacAddresses(3) indicates that all MAC traffic
1078        coming to this interface will be allowed. The value
1079        of cdsIfSrcGuardMacAddress object will be ignored in
1080        this case."
1081    ::= { cdsIfSrcGuardAddrEntry 7 }
1082
1083cdsIfSrcGuardVlansLow OBJECT-TYPE
1084    SYNTAX          OCTET STRING (SIZE  (0..256))
1085    MAX-ACCESS      read-only
1086    STATUS          current
1087    DESCRIPTION
1088        "A string of octets containing one bit per VLAN for
1089        VLANs with VlanIndex value of 0 to 2047. The first
1090        octet corresponds to VLANs with VlanIndex values
1091        of 0 through 7; the second octet to VLANs 8 through
1092        15; etc.  The most significant bit of each octet
1093        corresponds to the lowest value VlanIndex in that octet.
1094
1095        For each VLAN, if Source Guard feature is enabled then
1096        the bit corresponding to that VLAN is set to '1'.
1097
1098        Note that if the length of this string is less than
1099        256 octets, any 'missing' octets are assumed to contain
1100        the value zero. A NMS may omit any zero-valued octets
1101        from the end of this string in order to reduce SetPDU size,
1102        and the agent may also omit zero-valued trailing octets,
1103        to reduce the size of GetResponse PDUs."
1104    ::= { cdsIfSrcGuardAddrEntry 8 }
1105
1106cdsIfSrcGuardVlansHigh OBJECT-TYPE
1107    SYNTAX          OCTET STRING (SIZE  (0..256))
1108    MAX-ACCESS      read-only
1109    STATUS          current
1110    DESCRIPTION
1111        "A string of octets containing one bit per VLAN for
1112        VLANs with VlanIndex value of 2048 to 4095. The first
1113        octet corresponds to VLANs with VlanIndex values
1114        of 2048 through 2055; the second octet to VLANs 2056
1115        through 2063; etc.  The most significant bit of each
1116        octet corresponds to the lowest value VlanIndex in that
1117        octet.
1118
1119        For each VLAN, if Source Guard feature is enabled then
1120        the bit corresponding to that VLAN is set to '1'.
1121
1122        Note that if the length of this string is less than
1123        256 octets, any 'missing' octets are assumed to contain
1124        the value zero. A NMS may omit any zero-valued octets
1125        from the end of this string in order to reduce SetPDU size,
1126        and the agent may also omit zero-valued trailing octets,
1127        to reduce the size of GetResponse PDUs."
1128    ::= { cdsIfSrcGuardAddrEntry 9 }
1129
1130
1131
1132-- Notifications
1133
1134cdsBindingsNotification NOTIFICATION-TYPE
1135    OBJECTS         {
1136                        cdsBindingsAddrType,
1137                        cdsBindingsIpAddress,
1138                        ifName
1139                    }
1140    STATUS          current
1141    DESCRIPTION
1142        "This notification is generated when a DHCP binding
1143        is learnt dynamically by the device. cdsBindingsAddrType
1144        and cdsBindingsIpAddress provides the IP address
1145        allocated for the DHCP client by the DHCP server.
1146        ifName identifies the interface where the DHCP client
1147        connects to."
1148   ::= { ciscoDhcpSnoopingMIBNotifs 1 }
1149-- Conformance
1150
1151cdsMIBCompliances  OBJECT IDENTIFIER
1152    ::= { ciscoDhcpSnoopingMIBConformance 1 }
1153
1154cdsMIBGroups  OBJECT IDENTIFIER
1155    ::= { ciscoDhcpSnoopingMIBConformance 2 }
1156
1157
1158cdsMIBCompliance MODULE-COMPLIANCE
1159    STATUS          deprecated
1160    DESCRIPTION
1161        "The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
1162    MODULE          -- this module
1163    MANDATORY-GROUPS {
1164                        cdsIfConfigGroup,
1165                        cdsBindingsGroup
1166                    }
1167
1168    GROUP           cdsGlobalEnableGroup
1169    DESCRIPTION
1170        "This group is mandatory only for the platform which supports
1171        enabling the DHCP Snooping feature at device level."
1172
1173    GROUP           cdsDatabaseGroup
1174    DESCRIPTION
1175        "This group is mandatory only for the platform which supports
1176        storage of DHCP bindings information."
1177
1178    GROUP           cdsVlanConfigGroup
1179    DESCRIPTION
1180        "This group is mandatory only for the platform which supports
1181        controlling DHCP Snooping per VLAN."
1182
1183    GROUP           cdsIfRateLimitGroup
1184    DESCRIPTION
1185        "This group is mandatory only for the platform which supports
1186        DHCP Snooping rate limit per interface."
1187
1188    GROUP           cdsStatisticsGroup
1189    DESCRIPTION
1190        "This group is mandatory only for the platform which supports
1191        DHCP Snooping statistics information."
1192
1193    GROUP           cdsRelayAgentInfoOptGroup
1194    DESCRIPTION
1195        "This group is mandatory only for the platform which supports
1196        DHCP Snooping option 82 insertion information."
1197
1198    GROUP           cdsIfSrcGuardGroup
1199    DESCRIPTION
1200        "This group is mandatory only for the platform which supports
1201        IP Source Guard."
1202
1203    GROUP           cdsMatchMacAddressGroup
1204    DESCRIPTION
1205        "This group is mandatory only for the platform which supports
1206        DHCP Snooping Mac address matching."
1207    ::= { cdsMIBCompliances 1 }
1208
1209cdsMIBCompliance2 MODULE-COMPLIANCE
1210    STATUS          deprecated
1211    DESCRIPTION
1212        "The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
1213    MODULE          -- this module
1214    MANDATORY-GROUPS {
1215                        cdsIfConfigGroup,
1216                        cdsBindingsGroup
1217                    }
1218
1219    GROUP           cdsGlobalEnableGroup
1220    DESCRIPTION
1221        "This group is mandatory only for the platform which supports
1222        enabling the DHCP Snooping feature at device level."
1223
1224    GROUP           cdsDatabaseGroup
1225    DESCRIPTION
1226        "This group is mandatory only for the platform which supports
1227        storage of DHCP bindings information."
1228
1229    GROUP           cdsVlanConfigGroup
1230    DESCRIPTION
1231        "This group is mandatory only for the platform which supports
1232        controlling DHCP Snooping per VLAN."
1233
1234    GROUP           cdsIfRateLimitGroup
1235    DESCRIPTION
1236        "This group is mandatory only for the platform which supports
1237        DHCP Snooping rate limit per interface."
1238
1239    GROUP           cdsStatisticsGroup
1240    DESCRIPTION
1241        "This group is mandatory only for the platform which supports
1242        DHCP Snooping statistics information."
1243
1244    GROUP           cdsRelayAgentInfoOptGroup
1245    DESCRIPTION
1246        "This group is mandatory only for the platform which supports
1247        DHCP Snooping option 82 insertion information."
1248
1249    GROUP           cdsIfSrcGuardGroupRev1
1250    DESCRIPTION
1251        "This group is mandatory only for the platform which supports
1252        IP Source Guard."
1253
1254    GROUP           cdsMatchMacAddressGroup
1255    DESCRIPTION
1256        "This group is mandatory only for the platform which supports
1257        DHCP Snooping Mac address matching."
1258
1259    GROUP           cdsRelayAgentRemoteIdGroup
1260    DESCRIPTION
1261        "This group is mandatory only for platforms which support
1262        DHCP Option 82 remote ID relay agent."
1263
1264    GROUP           cdsIfFeatureConfigGroup
1265    DESCRIPTION
1266        "This group is mandatory only for platforms which support
1267        enable or disable of DHCP Snooping feature at the interface."
1268
1269    GROUP           cdsBindingsLimitGroup
1270    DESCRIPTION
1271        "This group is mandatory only for platforms which support
1272        binding limit for DHCP Snooping feature."
1273
1274    GROUP           cdsStaticBindingsGroup
1275    DESCRIPTION
1276        "This group is mandatory only for platforms which support
1277        the DHCP bindings data statically configured by (local
1278        or network) management."
1279
1280    GROUP           cdsIfSrcGuardIpFilterGroup
1281    DESCRIPTION
1282        "This group is mandatory only for platforms which support
1283        interface IP source guard feature."
1284
1285    GROUP           cdsIfSrcGuardExtGroup
1286    DESCRIPTION
1287        "This group is mandatory only for platforms which support
1288        interface IP and MAC source guard feature."
1289
1290    GROUP           cdsIfSrcGuardTrafficFilterGroup
1291    DESCRIPTION
1292        "This group is mandatory only for platforms which support
1293        interface IP source guard feature."
1294
1295    OBJECT          cdsStaticBindingsStatus
1296    SYNTAX          INTEGER  {
1297                        active(1),
1298                        createAndGo(4),
1299                        destroy(6)
1300                    }
1301    DESCRIPTION
1302        "Support for 'createAndWait' is not required."
1303    ::= { cdsMIBCompliances 2 }
1304
1305cdsMIBCompliance3 MODULE-COMPLIANCE
1306    STATUS          deprecated
1307    DESCRIPTION
1308        "The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
1309    MODULE          -- this module
1310    MANDATORY-GROUPS {
1311                        cdsIfConfigGroup,
1312                        cdsBindingsGroup
1313                    }
1314
1315    GROUP           cdsGlobalEnableGroup
1316    DESCRIPTION
1317        "This group is mandatory only for the platform which supports
1318        enabling the DHCP Snooping feature at device level."
1319
1320    GROUP           cdsDatabaseGroup
1321    DESCRIPTION
1322        "This group is mandatory only for the platform which supports
1323        storage of DHCP bindings information."
1324
1325    GROUP           cdsVlanConfigGroup
1326    DESCRIPTION
1327        "This group is mandatory only for the platform which supports
1328        controlling DHCP Snooping per VLAN."
1329
1330    GROUP           cdsIfRateLimitGroup
1331    DESCRIPTION
1332        "This group is mandatory only for the platform which supports
1333        DHCP Snooping rate limit per interface."
1334
1335    GROUP           cdsStatisticsGroup
1336    DESCRIPTION
1337        "This group is mandatory only for the platform which supports
1338        DHCP Snooping statistics information."
1339
1340    GROUP           cdsRelayAgentInfoOptGroup
1341    DESCRIPTION
1342        "This group is mandatory only for the platform which supports
1343        DHCP Snooping option 82 insertion information."
1344
1345    GROUP           cdsIfSrcGuardGroupRev1
1346    DESCRIPTION
1347        "This group is mandatory only for the platform which supports
1348        IP Source Guard."
1349
1350    GROUP           cdsMatchMacAddressGroup
1351    DESCRIPTION
1352        "This group is mandatory only for the platform which supports
1353        DHCP Snooping Mac address matching."
1354
1355    GROUP           cdsRelayAgentRemoteIdGroup
1356    DESCRIPTION
1357        "This group is mandatory only for platforms which support
1358        DHCP Option 82 remote ID relay agent."
1359
1360    GROUP           cdsIfFeatureConfigGroup
1361    DESCRIPTION
1362        "This group is mandatory only for platforms which support
1363        enable or disable of DHCP Snooping feature at the interface."
1364
1365    GROUP           cdsBindingsLimitGroup
1366    DESCRIPTION
1367        "This group is mandatory only for platforms which support
1368        binding limit for DHCP Snooping feature."
1369
1370    GROUP           cdsStaticBindingsGroup
1371    DESCRIPTION
1372        "This group is mandatory only for platforms which support
1373        the DHCP bindings data statically configured by (local
1374        or network) management."
1375
1376    GROUP           cdsIfSrcGuardIpFilterGroup
1377    DESCRIPTION
1378        "This group is mandatory only for platforms which support
1379        interface IP source guard feature."
1380
1381    GROUP           cdsIfSrcGuardExtGroup
1382    DESCRIPTION
1383        "This group is mandatory only for platforms which support
1384        interface IP and MAC source guard feature."
1385
1386    GROUP           cdsIfSrcGuardTrafficFilterGroup
1387    DESCRIPTION
1388        "This group is mandatory only for platforms which support
1389        interface IP source guard feature."
1390
1391    GROUP           cdsBindingsHostnameGroup
1392    DESCRIPTION
1393        "This group is mandatory only for platforms where the host
1394        name of DHCP client in DHCP bindings data is available."
1395
1396    OBJECT          cdsStaticBindingsStatus
1397    SYNTAX          INTEGER  {
1398                        active(1),
1399                        createAndGo(4),
1400                        destroy(6)
1401                    }
1402    DESCRIPTION
1403        "Support for 'createAndWait' is not required."
1404    ::= { cdsMIBCompliances 3 }
1405
1406cdsMIBCompliance4 MODULE-COMPLIANCE
1407    STATUS          deprecated
1408    DESCRIPTION
1409        "The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
1410    MODULE          -- this module
1411    MANDATORY-GROUPS {
1412                        cdsIfConfigGroup,
1413                        cdsBindingsGroup
1414                    }
1415
1416    GROUP           cdsGlobalEnableGroup
1417    DESCRIPTION
1418        "This group is mandatory only for the platform which supports
1419        enabling the DHCP Snooping feature at device level."
1420
1421    GROUP           cdsDatabaseGroup
1422    DESCRIPTION
1423        "This group is mandatory only for the platform which supports
1424        storage of DHCP bindings information."
1425
1426    GROUP           cdsVlanConfigGroup
1427    DESCRIPTION
1428        "This group is mandatory only for the platform which supports
1429        controlling DHCP Snooping per VLAN."
1430
1431    GROUP           cdsIfRateLimitGroup
1432    DESCRIPTION
1433        "This group is mandatory only for the platform which supports
1434        DHCP Snooping rate limit per interface."
1435
1436    GROUP           cdsStatisticsGroup
1437    DESCRIPTION
1438        "This group is mandatory only for the platform which supports
1439        DHCP Snooping statistics information."
1440
1441    GROUP           cdsRelayAgentInfoOptGroup
1442    DESCRIPTION
1443        "This group is mandatory only for the platform which supports
1444        DHCP Snooping option 82 insertion information."
1445
1446    GROUP           cdsIfSrcGuardGroupRev1
1447    DESCRIPTION
1448        "This group is mandatory only for the platform which supports
1449        IP Source Guard."
1450
1451    GROUP           cdsMatchMacAddressGroup
1452    DESCRIPTION
1453        "This group is mandatory only for the platform which supports
1454        DHCP Snooping Mac address matching."
1455
1456    GROUP           cdsIfFeatureConfigGroup
1457    DESCRIPTION
1458        "This group is mandatory only for platforms which support
1459        enable or disable of DHCP Snooping feature at the interface."
1460
1461    GROUP           cdsBindingsLimitGroup
1462    DESCRIPTION
1463        "This group is mandatory only for platforms which support
1464        binding limit for DHCP Snooping feature."
1465
1466    GROUP           cdsStaticBindingsGroup
1467    DESCRIPTION
1468        "This group is mandatory only for platforms which support
1469        the DHCP bindings data statically configured by (local
1470        or network) management."
1471
1472    GROUP           cdsIfSrcGuardIpFilterGroup
1473    DESCRIPTION
1474        "This group is mandatory only for platforms which support
1475        interface IP source guard feature."
1476
1477    GROUP           cdsIfSrcGuardExtGroup
1478    DESCRIPTION
1479        "This group is mandatory only for platforms which support
1480        interface IP and MAC source guard feature."
1481
1482    GROUP           cdsIfSrcGuardTrafficFilterGroup
1483    DESCRIPTION
1484        "This group is mandatory only for platforms which support
1485        interface IP source guard feature."
1486
1487    GROUP           cdsBindingsHostnameGroup
1488    DESCRIPTION
1489        "This group is mandatory only for platforms where the host
1490        name of DHCP client in DHCP bindings data is available."
1491
1492    GROUP           cdsRelayAgentInfoOptRemoteIdSubGroup
1493    DESCRIPTION
1494        "This group is mandatory only for platforms which support
1495        configuration of remote-id sub-option for Option 82 DHCP
1496        Snooping feature."
1497
1498    GROUP           cdsIfVlanRelayInfoOptCircuitIdGroup
1499    DESCRIPTION
1500        "This group is mandatory only for platforms which support
1501        configuration of circuit-id sub-option for Option 82 DHCP
1502        Snooping feature."
1503
1504    GROUP           cdsStatisticsExtGroup
1505    DESCRIPTION
1506        "This group is mandatory only for platforms which support
1507        the counter indicating the number of packets forwarded
1508        without insertion of option 82 data."
1509
1510    OBJECT          cdsStaticBindingsStatus
1511    SYNTAX          INTEGER  {
1512                        active(1),
1513                        createAndGo(4),
1514                        destroy(6)
1515                    }
1516    DESCRIPTION
1517        "Support for 'createAndWait' is not required."
1518    ::= { cdsMIBCompliances 4 }
1519
1520cdsMIBCompliance5 MODULE-COMPLIANCE
1521    STATUS          deprecated
1522    DESCRIPTION
1523        "The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
1524    MODULE          -- this module
1525    MANDATORY-GROUPS {
1526                        cdsIfConfigGroup,
1527                        cdsBindingsGroup
1528                    }
1529
1530    GROUP           cdsGlobalEnableGroup
1531    DESCRIPTION
1532        "This group is mandatory only for the platform which supports
1533        enabling the DHCP Snooping feature at device level."
1534
1535    GROUP           cdsDatabaseGroup
1536    DESCRIPTION
1537        "This group is mandatory only for the platform which supports
1538        storage of DHCP bindings information."
1539
1540    GROUP           cdsVlanConfigGroup
1541    DESCRIPTION
1542        "This group is mandatory only for the platform which supports
1543        controlling DHCP Snooping per VLAN."
1544
1545    GROUP           cdsIfRateLimitGroup
1546    DESCRIPTION
1547        "This group is mandatory only for the platform which supports
1548        DHCP Snooping rate limit per interface."
1549
1550    GROUP           cdsStatisticsGroup
1551    DESCRIPTION
1552        "This group is mandatory only for the platform which supports
1553        DHCP Snooping statistics information."
1554
1555    GROUP           cdsRelayAgentInfoOptGroup
1556    DESCRIPTION
1557        "This group is mandatory only for the platform which supports
1558        DHCP Snooping option 82 insertion information."
1559
1560    GROUP           cdsIfSrcGuardGroupRev1
1561    DESCRIPTION
1562        "This group is mandatory only for the platform which supports
1563        IP Source Guard."
1564
1565    GROUP           cdsMatchMacAddressGroup
1566    DESCRIPTION
1567        "This group is mandatory only for the platform which supports
1568        DHCP Snooping Mac address matching."
1569
1570    GROUP           cdsIfFeatureConfigGroup
1571    DESCRIPTION
1572        "This group is mandatory only for platforms which support
1573        enable or disable of DHCP Snooping feature at the interface."
1574
1575    GROUP           cdsBindingsLimitGroup
1576    DESCRIPTION
1577        "This group is mandatory only for platforms which support
1578        binding limit for DHCP Snooping feature."
1579
1580    GROUP           cdsStaticBindingsGroup
1581    DESCRIPTION
1582        "This group is mandatory only for platforms which support
1583        the DHCP bindings data statically configured by (local
1584        or network) management."
1585
1586    GROUP           cdsIfSrcGuardIpFilterGroup
1587    DESCRIPTION
1588        "This group is mandatory only for platforms which support
1589        interface IP source guard feature."
1590
1591    GROUP           cdsIfSrcGuardExtGroup
1592    DESCRIPTION
1593        "This group is mandatory only for platforms which support
1594        interface IP and MAC source guard feature."
1595
1596    GROUP           cdsIfSrcGuardTrafficFilterGroup
1597    DESCRIPTION
1598        "This group is mandatory only for platforms which support
1599        interface IP source guard feature."
1600
1601    GROUP           cdsBindingsHostnameGroup
1602    DESCRIPTION
1603        "This group is mandatory only for platforms where the host
1604        name of DHCP client in DHCP bindings data is available."
1605
1606    GROUP           cdsRelayAgentInfoOptRemoteIdSubGroup
1607    DESCRIPTION
1608        "This group is mandatory only for platforms which support
1609        configuration of remote-id sub-option for Option 82 DHCP
1610        Snooping feature."
1611
1612    GROUP           cdsIfVlanRelayInfoOptCircuitIdGroup
1613    DESCRIPTION
1614        "This group is mandatory only for platforms which support
1615        configuration of circuit-id sub-option for Option 82 DHCP
1616        Snooping feature."
1617
1618    GROUP           cdsStatisticsExtGroup
1619    DESCRIPTION
1620        "This group is mandatory only for platforms which support
1621        the counter indicating the number of packets forwarded
1622        without insertion of option 82 data."
1623
1624    GROUP           cdsNotifControlGroup
1625    DESCRIPTION
1626        "This group is mandatory only for platforms which support
1627        bindings notification control for DHCP Snooping feature."
1628
1629    GROUP           cdsBindingsNotificationGroup
1630    DESCRIPTION
1631        "This group is mandatory only for platforms which support
1632        bindings notification for DHCP Snooping feature."
1633
1634    OBJECT          cdsStaticBindingsStatus
1635    SYNTAX          INTEGER  {
1636                        active(1),
1637                        createAndGo(4),
1638                        destroy(6)
1639                    }
1640    DESCRIPTION
1641        "Support for 'createAndWait' is not required."
1642    ::= { cdsMIBCompliances 5 }
1643
1644cdsMIBCompliance6 MODULE-COMPLIANCE
1645    STATUS          deprecated
1646    DESCRIPTION
1647        "The compliance statement for the CISCO-DHCP-SNOOPING-MIB.
1648         This statement is deprecated and superceded by
1649         cdsMIBCompliance7."
1650    MODULE          -- this module
1651    MANDATORY-GROUPS {
1652                        cdsIfConfigGroup,
1653                        cdsBindingsGroup
1654                    }
1655
1656    GROUP           cdsGlobalEnableGroup
1657    DESCRIPTION
1658        "This group is mandatory only for the platform which supports
1659        enabling the DHCP Snooping feature at device level."
1660
1661    GROUP           cdsDatabaseGroup
1662    DESCRIPTION
1663        "This group is mandatory only for the platform which supports
1664        enabling the DHCP Snooping feature at device level."
1665
1666    GROUP           cdsVlanConfigGroup
1667    DESCRIPTION
1668        "This group is mandatory only for the platform which supports
1669        enabling the DHCP Snooping feature at device level."
1670
1671    GROUP           cdsIfRateLimitGroup
1672    DESCRIPTION
1673        "This group is mandatory only for the platform which supports
1674        enabling the DHCP Snooping feature at device level."
1675
1676    GROUP           cdsStatisticsGroup
1677    DESCRIPTION
1678        "This group is mandatory only for the platform which supports
1679        enabling the DHCP Snooping feature at device level."
1680
1681    GROUP           cdsRelayAgentInfoOptGroup
1682    DESCRIPTION
1683        "This group is mandatory only for the platform which supports
1684        enabling the DHCP Snooping feature at device level."
1685
1686    GROUP           cdsIfSrcGuardGroupRev1
1687    DESCRIPTION
1688        "This group is mandatory only for the platform which supports
1689        IP Source Guard."
1690
1691    GROUP           cdsMatchMacAddressGroup
1692    DESCRIPTION
1693        "This group is mandatory only for the platform which supports
1694        DHCP Snooping Mac address matching."
1695
1696    GROUP           cdsIfFeatureConfigGroup
1697    DESCRIPTION
1698        "This group is mandatory only for platforms which support
1699        enable or disable of DHCP Snooping feature at the interface."
1700
1701    GROUP           cdsBindingsLimitGroup
1702    DESCRIPTION
1703        "This group is mandatory only for platforms which support
1704        binding limit for DHCP Snooping feature."
1705
1706    GROUP           cdsStaticBindingsGroup
1707    DESCRIPTION
1708        "This group is mandatory only for platforms which support
1709        the DHCP bindings data statically configured by (local
1710        or network) management."
1711
1712    GROUP           cdsIfSrcGuardIpFilterGroup
1713    DESCRIPTION
1714        "This group is mandatory only for platforms which support
1715        interface IP source guard feature."
1716
1717    GROUP           cdsIfSrcGuardExtGroup
1718    DESCRIPTION
1719        "This group is mandatory only for platforms which support
1720        interface IP and MAC source guard feature."
1721
1722    GROUP           cdsIfSrcGuardTrafficFilterGroup
1723    DESCRIPTION
1724        "This group is mandatory only for platforms which support
1725        interface IP source guard feature."
1726
1727    GROUP           cdsBindingsHostnameGroup
1728    DESCRIPTION
1729        "This group is mandatory only for platforms where the host
1730        name of DHCP client in DHCP bindings data is available."
1731
1732    GROUP           cdsRelayAgentInfoOptRemoteIdSubGroup
1733    DESCRIPTION
1734        "This group is mandatory only for platforms which support
1735        configuration of remote-id sub-option for Option 82 DHCP
1736        Snooping feature."
1737
1738    GROUP           cdsIfVlanRelayInfoOptCircuitIdGroup
1739    DESCRIPTION
1740        "This group is mandatory only for platforms which support
1741        configuration of circuit-id sub-option for Option 82 DHCP
1742        Snooping feature."
1743
1744    GROUP           cdsStatisticsExtGroup
1745    DESCRIPTION
1746        "This group is mandatory only for platforms which support
1747        the counter indicating the number of packets forwarded
1748        without insertion of option 82 data."
1749
1750    GROUP           cdsNotifControlGroup
1751    DESCRIPTION
1752        "This group is mandatory only for platforms which support
1753        bindings notification control for DHCP Snooping feature."
1754
1755    GROUP           cdsBindingsNotificationGroup
1756    DESCRIPTION
1757        "This group is mandatory only for platforms which support
1758        bindings notification for DHCP Snooping feature."
1759
1760    GROUP           cdsIfVlanRelayInfoOptCircuitIdGroupSup1
1761    DESCRIPTION
1762        "This group is mandatory only for platforms which support
1763        bindings notification control for DHCP Snooping feature."
1764
1765    OBJECT          cdsStaticBindingsStatus
1766    SYNTAX          INTEGER  {
1767                        active(1),
1768                        createAndGo(4),
1769                        destroy(6)
1770                    }
1771    DESCRIPTION
1772        "Support for 'createAndWait' is not required."
1773    ::= { cdsMIBCompliances 6 }
1774
1775
1776cdsMIBCompliance7 MODULE-COMPLIANCE
1777    STATUS          current
1778    DESCRIPTION
1779        "The compliance statement for the CISCO-DHCP-SNOOPING-MIB"
1780    MODULE          -- this module
1781    MANDATORY-GROUPS {
1782                        cdsIfConfigGroup,
1783                        cdsBindingsGroup
1784                    }
1785
1786    GROUP           cdsGlobalEnableGroup
1787    DESCRIPTION
1788        "This group is mandatory only for the platform which supports
1789        enabling the DHCP Snooping feature at device level."
1790
1791    GROUP           cdsDatabaseGroup
1792    DESCRIPTION
1793        "This group is mandatory only for the platform which supports
1794        enabling the DHCP Snooping feature at device level."
1795
1796    GROUP           cdsVlanConfigGroup
1797    DESCRIPTION
1798        "This group is mandatory only for the platform which supports
1799        enabling the DHCP Snooping feature at device level."
1800
1801    GROUP           cdsIfRateLimitGroup
1802    DESCRIPTION
1803        "This group is mandatory only for the platform which supports
1804        enabling the DHCP Snooping feature at device level."
1805
1806    GROUP           cdsStatisticsGroup
1807    DESCRIPTION
1808        "This group is mandatory only for the platform which supports
1809        enabling the DHCP Snooping feature at device level."
1810
1811    GROUP           cdsRelayAgentInfoOptGroup
1812    DESCRIPTION
1813        "This group is mandatory only for the platform which supports
1814        enabling the DHCP Snooping feature at device level."
1815
1816    GROUP           cdsIfSrcGuardGroupRev1
1817    DESCRIPTION
1818        "This group is mandatory only for the platform which supports
1819        IP Source Guard."
1820
1821    GROUP           cdsMatchMacAddressGroup
1822    DESCRIPTION
1823        "This group is mandatory only for the platform which supports
1824        DHCP Snooping Mac address matching."
1825
1826    GROUP           cdsIfFeatureConfigGroup
1827    DESCRIPTION
1828        "This group is mandatory only for platforms which support
1829        enable or disable of DHCP Snooping feature at the interface."
1830
1831    GROUP           cdsBindingsLimitGroup
1832    DESCRIPTION
1833        "This group is mandatory only for platforms which support
1834        binding limit for DHCP Snooping feature."
1835
1836    GROUP           cdsStaticBindingsGroup
1837    DESCRIPTION
1838        "This group is mandatory only for platforms which support
1839        the DHCP bindings data statically configured by (local
1840        or network) management."
1841
1842    GROUP           cdsIfSrcGuardIpFilterGroup
1843    DESCRIPTION
1844        "This group is mandatory only for platforms which support
1845        interface IP source guard feature."
1846
1847    GROUP           cdsIfSrcGuardExtGroup
1848    DESCRIPTION
1849        "This group is mandatory only for platforms which support
1850        interface IP and MAC source guard feature."
1851
1852    GROUP           cdsIfSrcGuardTrafficFilterGroup
1853    DESCRIPTION
1854        "This group is mandatory only for platforms which support
1855        interface IP source guard feature."
1856
1857    GROUP           cdsBindingsHostnameGroup
1858    DESCRIPTION
1859        "This group is mandatory only for platforms where the host
1860        name of DHCP client in DHCP bindings data is available."
1861
1862    GROUP           cdsRelayAgentInfoOptRemoteIdSubGroup
1863    DESCRIPTION
1864        "This group is mandatory only for platforms which support
1865        configuration of remote-id sub-option for Option 82 DHCP
1866        Snooping feature."
1867
1868    GROUP           cdsIfVlanRelayInfoOptCircuitIdGroup
1869    DESCRIPTION
1870        "This group is mandatory only for platforms which support
1871        configuration of circuit-id sub-option for Option 82 DHCP
1872        Snooping feature."
1873
1874    GROUP           cdsStatisticsExtGroup
1875    DESCRIPTION
1876        "This group is mandatory only for platforms which support
1877        the counter indicating the number of packets forwarded
1878        without insertion of option 82 data."
1879
1880    GROUP           cdsNotifControlGroup
1881    DESCRIPTION
1882        "This group is mandatory only for platforms which support
1883        bindings notification control for DHCP Snooping feature."
1884
1885    GROUP           cdsBindingsNotificationGroup
1886    DESCRIPTION
1887        "This group is mandatory only for platforms which support
1888        bindings notification for DHCP Snooping feature."
1889
1890    GROUP           cdsIfVlanRelayInfoOptCircuitIdGroupSup1
1891    DESCRIPTION
1892        "This group is mandatory only for platforms which support
1893        bindings notification control for DHCP Snooping feature."
1894
1895    GROUP           cdsVlanOperStatusGroup
1896    DESCRIPTION
1897        "This group is mandatory only for platforms which support
1898         operational status of DHCP Snooping feature in VLAN."
1899
1900    OBJECT          cdsStaticBindingsStatus
1901    SYNTAX          INTEGER  {
1902                        active(1),
1903                        createAndGo(4),
1904                        destroy(6)
1905                    }
1906    DESCRIPTION
1907        "Support for 'createAndWait' is not required."
1908    ::= { cdsMIBCompliances 7 }
1909
1910-- Units of Conformance
1911--
1912-- cdsGlobalGroup
1913
1914cdsGlobalEnableGroup OBJECT-GROUP
1915    OBJECTS         { cdsFeatureEnable }
1916    STATUS          current
1917    DESCRIPTION
1918        "A collection of object which are used to configure as
1919        well as show information regarding the feature enabling."
1920    ::= { cdsMIBGroups 1 }
1921
1922cdsDatabaseGroup OBJECT-GROUP
1923    OBJECTS         {
1924                        cdsDatabaseFile,
1925                        cdsDatabaseUpdateInterval
1926                    }
1927    STATUS          current
1928    DESCRIPTION
1929        "A collection of objects which are used to configure as
1930        well as show information regarding the DHCP Snooping
1931        database filename and update interval."
1932    ::= { cdsMIBGroups 2 }
1933
1934cdsVlanConfigGroup OBJECT-GROUP
1935    OBJECTS         { cdsVlanDhcpSnoopingEnable }
1936    STATUS          current
1937    DESCRIPTION
1938        "A collection of object which are used to configure as
1939        well as show information regarding the DHCP Snooping
1940        feature per VLAN."
1941    ::= { cdsMIBGroups 3 }
1942
1943cdsIfConfigGroup OBJECT-GROUP
1944    OBJECTS         { cdsIfTrustEnable }
1945    STATUS          current
1946    DESCRIPTION
1947        "A collection of object which are used to configure as
1948        well as show information regarding the interface trust
1949        state for DHCP Snooping purpose."
1950    ::= { cdsMIBGroups 4 }
1951
1952cdsIfRateLimitGroup OBJECT-GROUP
1953    OBJECTS         { cdsIfRateLimit }
1954    STATUS          current
1955    DESCRIPTION
1956        "A collection of object which are used to configure as
1957        well as show information regarding the rate limit per
1958        interface for DHCP Snooping purpose."
1959    ::= { cdsMIBGroups 5 }
1960
1961cdsBindingsGroup OBJECT-GROUP
1962    OBJECTS         {
1963                        cdsBindingsAddrType,
1964                        cdsBindingsIpAddress,
1965                        cdsBindingsInterface,
1966                        cdsBindingsLeasedTime,
1967                        cdsBindingsStatus
1968                    }
1969    STATUS          current
1970    DESCRIPTION
1971        "A collection of object which are used to configure as
1972        well as show information regarding the DHCP bindings
1973        data."
1974    ::= { cdsMIBGroups 6 }
1975
1976cdsStatisticsGroup OBJECT-GROUP
1977    OBJECTS         {
1978                        cdsTotalForwardedPkts,
1979                        cdsTotalDroppedPkts,
1980                        cdsUntrustedPortDroppedPkts
1981                    }
1982    STATUS          current
1983    DESCRIPTION
1984        "A collection of object which are used to show statistics
1985        information regarding DHCP Snooping feature."
1986    ::= { cdsMIBGroups 7 }
1987
1988cdsRelayAgentInfoOptGroup OBJECT-GROUP
1989    OBJECTS         { cdsRelayAgentInfoOptEnable }
1990    STATUS          current
1991    DESCRIPTION
1992        "A collection of objects which are used to configure as
1993        well as show information regarding DHCP Option 82
1994        insertion."
1995    ::= { cdsMIBGroups 8 }
1996
1997cdsIfSrcGuardGroup OBJECT-GROUP
1998    OBJECTS         {
1999                        cdsIfSrcGuardEnable,
2000                        cdsIfSrcGuardAddrType,
2001                        cdsIfSrcGuardAddress
2002                    }
2003    STATUS          deprecated
2004    DESCRIPTION
2005        "A collection of objects which are used to configure as
2006        well as show information regarding IP Source Guard
2007        purpose."
2008    ::= { cdsMIBGroups 9 }
2009
2010cdsRelayAgentRemoteIdGroup OBJECT-GROUP
2011    OBJECTS         { cdsRelayAgentInfoOptRemoteId }
2012    STATUS          deprecated
2013    DESCRIPTION
2014        "A collection of objects which are used to indicate information
2015        regarding DHCP Option 82 remote ID relay agent."
2016    ::= { cdsMIBGroups 10 }
2017
2018cdsMatchMacAddressGroup OBJECT-GROUP
2019    OBJECTS         { cdsMatchMacAddressEnable }
2020    STATUS          current
2021    DESCRIPTION
2022        "A collection of objects which are used to configure as
2023        well as show information regarding DHCP Snooping Mac
2024        address matching."
2025    ::= { cdsMIBGroups 11 }
2026
2027cdsIfFeatureConfigGroup OBJECT-GROUP
2028    OBJECTS         { cdsIfFeatureEnable }
2029    STATUS          current
2030    DESCRIPTION
2031        "A collection of object which are used to configure as
2032        well as show information regarding enable or disable of
2033        DHCP Snooping feature at the interface."
2034    ::= { cdsMIBGroups 12 }
2035
2036cdsBindingsLimitGroup OBJECT-GROUP
2037    OBJECTS         {
2038                        cdsGlobalMaxBindingsLimit,
2039                        cdsIfBindingsLimit
2040                    }
2041    STATUS          current
2042    DESCRIPTION
2043        "A collection of objects which provides information regarding
2044        binding limit for DHCP Snooping purpose."
2045    ::= { cdsMIBGroups 13 }
2046
2047cdsStaticBindingsGroup OBJECT-GROUP
2048    OBJECTS         {
2049                        cdsStaticBindingsAddrType,
2050                        cdsStaticBindingsIpAddress,
2051                        cdsStaticBindingsInterface,
2052                        cdsStaticBindingsStatus
2053                    }
2054    STATUS          current
2055    DESCRIPTION
2056        "A collection of objects which is used to configure
2057        as well as show information regarding the DHCP bindings data
2058        configured by users."
2059    ::= { cdsMIBGroups 14 }
2060
2061cdsIfSrcGuardIpFilterGroup OBJECT-GROUP
2062    OBJECTS         {
2063                        cdsIfSrcGuardIpFilterAction,
2064                        cdsIfSrcGuardFilterMode
2065                    }
2066    STATUS          current
2067    DESCRIPTION
2068        "A collection of objects which is used to show information
2069        regarding interface IP source guard purpose."
2070    ::= { cdsMIBGroups 15 }
2071
2072cdsIfSrcGuardExtGroup OBJECT-GROUP
2073    OBJECTS         {
2074                        cdsIfSrcGuardMacAddress,
2075                        cdsIfSrcGuardMacFilterAction,
2076                        cdsIfSrcGuardVlansLow,
2077                        cdsIfSrcGuardVlansHigh
2078                    }
2079    STATUS          current
2080    DESCRIPTION
2081        "A collection of objects which is used to show additional
2082        information regarding the IP source guard feature."
2083    ::= { cdsMIBGroups 16 }
2084
2085cdsIfSrcGuardTrafficFilterGroup OBJECT-GROUP
2086    OBJECTS         { cdsIfSrcGuardFilterType }
2087    STATUS          current
2088    DESCRIPTION
2089        "A collection of objects which is used to configure the
2090        type of traffic to be filtered by IP source guard feature."
2091    ::= { cdsMIBGroups 17 }
2092
2093cdsIfSrcGuardGroupRev1 OBJECT-GROUP
2094    OBJECTS         {
2095                        cdsIfSrcGuardAddrType,
2096                        cdsIfSrcGuardAddress
2097                    }
2098    STATUS          current
2099    DESCRIPTION
2100        "A collection of objects which are used to configure as
2101        well as show information regarding IP Source Guard
2102        purpose."
2103    ::= { cdsMIBGroups 18 }
2104
2105cdsBindingsHostnameGroup OBJECT-GROUP
2106    OBJECTS         { cdsBindingsHostname }
2107    STATUS          current
2108    DESCRIPTION
2109        "A collection of objects which indicates the host name
2110        of DHCP client in DHCP bindings data."
2111    ::= { cdsMIBGroups 19 }
2112
2113cdsRelayAgentInfoOptRemoteIdSubGroup OBJECT-GROUP
2114    OBJECTS         { cdsRelayAgentInfoOptRemoteIdSub }
2115    STATUS          current
2116    DESCRIPTION
2117        "A collection of objects which are used to configure
2118        as well as show remote-id of option 82 DHCP Snooping."
2119    ::= { cdsMIBGroups 20 }
2120
2121cdsIfVlanRelayInfoOptCircuitIdGroup OBJECT-GROUP
2122    OBJECTS         {
2123                        cdsIfVlanRelayInfoOptCircuitId,
2124                        cdsIfVlanRelayInfoOptCircuitIdStatus
2125                    }
2126    STATUS          current
2127    DESCRIPTION
2128        "A collection of objects which are used to configure
2129        as well as show circuit-id of option 82 DHCP Snooping."
2130    ::= { cdsMIBGroups 21 }
2131
2132cdsStatisticsExtGroup OBJECT-GROUP
2133    OBJECTS         { cdsForwardedWithoutOption82Pkts }
2134    STATUS          current
2135    DESCRIPTION
2136        "A collection of objects which are used to show
2137        additional DHCP snooping statistics information."
2138    ::= { cdsMIBGroups 22 }
2139
2140cdsNotifControlGroup OBJECT-GROUP
2141    OBJECTS         { cdsBindingsNotifEnabled }
2142    STATUS          current
2143    DESCRIPTION
2144        "A collection of object(s) which provides information
2145        on bindings notifications control for DHCP Snooping feature."
2146    ::= { cdsMIBGroups 23 }
2147
2148cdsBindingsNotificationGroup NOTIFICATION-GROUP
2149   NOTIFICATIONS    { cdsBindingsNotification }
2150    STATUS          current
2151    DESCRIPTION
2152        "A collection of notification(s) which provides bindings
2153        notifications support for DHCP Snooping feature."
2154    ::= { cdsMIBGroups 24 }
2155
2156cdsIfVlanRelayInfoOptCircuitIdGroupSup1 OBJECT-GROUP
2157    OBJECTS         { cdsIfVlanRelayInfoOptCircuitIdDirect }
2158    STATUS          current
2159    DESCRIPTION
2160        "A collection of objects which indicates to ignore the length
2161        and type in Agent Circuit ID sub-option of the DHCP relay
2162        information option (option 82) data inserted to DHCP packets by
2163        DHCP Snooping feature."
2164    ::= { cdsMIBGroups 25 }
2165
2166cdsVlanOperStatusGroup OBJECT-GROUP
2167    OBJECTS         { cdsVlanDhcpSnoopingOperStatus }
2168    STATUS          current
2169    DESCRIPTION
2170        "A collection of objects which provides information on
2171        operation status of DHCP Snooping feature in VLAN."
2172    ::= { cdsMIBGroups 26 }
2173
2174END
2175
2176
2177
2178