CT-FASTPATH-DYNAMIC-ARP-INSPECTION-MIB
AI MIB Summary
The CT-FASTPATH-DYNAMIC-ARP-INSPECTION-MIB provides management interfaces for Enterasys FASTPATH switches to monitor and configure Dynamic ARP Inspection (DAI) security policies, including the tracking of valid versus invalid ARP packet counts, port violation statistics, and the operational state of DHCP snooping bindings used to prevent ARP spoofing attacks.
The Enterasys MIB for FASTPATH Dynamic ARP INspection
Main OID:
ctFastPathDynamicArpInspectionMIB.1.3.6.1.4.1.52.4.2.36.1
30
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
30 total| Object Name |
|---|
ctFastPathDynamicArpInspectionMIBThe Enterasys MIB for FASTPATH Dynamic ARP INspection MODULE-IDENTITY .1.3.6.1.4.1.52.4.2.36.1 |
ctAgentDaiConfigGroup OBJECT IDENTIFIER .1.3.6.1.4.1.52.4.2.36.1.1 |
ctAgentDaiSrcMacValidateThis object indicates whether Sender MAC validation in the ARP
packets is enabled.
If this object is set to 'true', validation
is enabled.
If this object is set to 'false', validation
is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.52.4.2.36.1.1.1 |
ctAgentDaiDstMacValidateThis object indicates whether Target MAC validation in the ARP
Response packets is enabled.
If this object is set to 'true', validation
is enabled.
If this object is set to 'false', validation
is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.52.4.2.36.1.1.2 |
ctAgentDaiIPValidateThis object indicates whether IP address validation in the ARP
packets is enabled.
If this object is set to 'true', validation
is enabled.
If this object is set to 'false', validation
is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.52.4.2.36.1.1.3 |
ctAgentDaiVlanConfigTableA table provides the mechanism to control Dynamic ARP
Inspection per VLAN. When a VLAN is created in a device
supporting this table, a corresponding entry of this table
will be added. SEQUENCE OF CtAgentDaiVlanConfigEntry .1.3.6.1.4.1.52.4.2.36.1.1.4 |
ctAgentDaiVlanConfigEntryA row instance contains the configuration for Dynamic
ARP Inspection at each existing VLAN. CtAgentDaiVlanConfigEntry .1.3.6.1.4.1.52.4.2.36.1.1.4.1 |
ctAgentDaiVlanIndexThis object indicates the VLAN number on which Dynamic ARP
Inspection feature is configured. VlanIndex (Q-BRIDGE-MIB) .1.3.6.1.4.1.52.4.2.36.1.1.4.1.1 |
ctAgentDaiVlanDynArpInspEnableThis object indicates whether Dynamic ARP Inspection is
enabled in this VLAN.
If this object is set to 'true', Dynamic ARP Inspection
is enabled.
If this object is set to 'false', Dynamic ARP Inspection
is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.52.4.2.36.1.1.4.1.2 |
ctAgentDaiVlanLoggingEnableThis object indicates whether the Dynamic ARP Inspection
logging is enabled on this VlAN.
If this object is set to 'true', Dynamic ARP Inspection
logging is enabled.
If this object is set to 'false', Dynamic ARP Inspection
loging is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.52.4.2.36.1.1.4.1.3 |
ctAgentDaiVlanArpAclNameThis object indicates the ARP ACL name set for this VLAN.rw DisplayString .1.3.6.1.4.1.52.4.2.36.1.1.4.1.4 |
ctAgentDaiVlanArpAclStaticFlagThis object indicates whether the ARP ACL set for this
VLAN has static flag set.
If this object is set to 'true', static flag is enabled.
If this object is set to 'false', static flag is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.52.4.2.36.1.1.4.1.5 |
ctAagentDaiStatsResetClear the DAI statistics on all vlans. A value of reset(1)
is used to reset the statistics. A read on this object will
always return the value none(0). The value none(0) cannot
be forcibly set by the administrator.rw Enumeration .1.3.6.1.4.1.52.4.2.36.1.1.5 |
ctAgentDaiVlanStatsTableA table provides the mechanism to control Dynamic ARP
Inspection per VLAN. When a VLAN is created in a device
supporting this table, a corresponding entry of this table
will be added. SEQUENCE OF CtAgentDaiVlanStatsEntry .1.3.6.1.4.1.52.4.2.36.1.1.6 |
ctAgentDaiVlanStatsEntryA row instance contains the Dynamic ARP Inspection
statistics per VLAN. CtAgentDaiVlanStatsEntry .1.3.6.1.4.1.52.4.2.36.1.1.6.1 |
ctAgentDaiVlanStatsIndexThis object indicates the VLAN number on which Dynamic ARP
Inspection statistics are retrieved. VlanIndex (Q-BRIDGE-MIB) .1.3.6.1.4.1.52.4.2.36.1.1.6.1.1 |
ctAgentDaiVlanPktsForwardedNumber of valid ARP packets forwarded by DAI.ro Counter32 .1.3.6.1.4.1.52.4.2.36.1.1.6.1.2 |
ctAgentDaiVlanPktsDroppedNumber of invalid ARP packets dropped by DAI.ro Counter32 .1.3.6.1.4.1.52.4.2.36.1.1.6.1.3 |
ctAgentDaiVlanDhcpDropsNumber of ARP packets that were dropped by DAI as
there is no matching DHCP Snooping binding entry found.ro Counter32 .1.3.6.1.4.1.52.4.2.36.1.1.6.1.4 |
ctAgentDaiVlanDhcpPermitsNumber of ARP packets that were forwarded by DAI as
there is a matching DHCP Snooping binding entry found.ro Counter32 .1.3.6.1.4.1.52.4.2.36.1.1.6.1.5 |
ctAgentDaiVlanAclDropsNumber of ARP packets that were dropped by DAI as
there is no matching ARP ACL rule found for this Vlan and
the static flag is set on this vlan.ro Counter32 .1.3.6.1.4.1.52.4.2.36.1.1.6.1.6 |
ctAgentDaiVlanAclPermitsNumber of ARP packets that were permitted by DAI as
there is a matching ARP ACL rule found for this Vlan.ro Counter32 .1.3.6.1.4.1.52.4.2.36.1.1.6.1.7 |
ctAgentDaiVlanSrcMacFailuresNumber of ARP packets that were dropped by DAI as the
sender mac address in ARP packet didn't match the source
mac in ethernet header.ro Counter32 .1.3.6.1.4.1.52.4.2.36.1.1.6.1.8 |
ctAgentDaiVlanDstMacFailuresNumber of ARP packets that were dropped by DAI as the
target mac address in ARP reply packet didn't match the
destination mac in ethernet header.ro Counter32 .1.3.6.1.4.1.52.4.2.36.1.1.6.1.9 |
ctAgentDaiVlanIpValidFailuresNumber of ARP packets that were dropped by DAI as the
sender IP address in ARP packet or target IP address in
ARP reply packet is invalid. Invalid addresses include
0.0.0.0, 255.255.255.255, IP multicast addresses,
class E addresses (240.0.0.0/4), loopback addresses (127.0.0.0/8).ro Counter32 .1.3.6.1.4.1.52.4.2.36.1.1.6.1.10 |
ctAgentDaiIfConfigTableA table provides the mechanism to configure the trust
state for Dynamic ARP Inspection purpose at each physical
interface capable of this feature. SEQUENCE OF CtAgentDaiIfConfigEntry .1.3.6.1.4.1.52.4.2.36.1.1.7 |
ctAgentDaiIfConfigEntryA row instance contains the configuration for
Dynamic ARP Inspection at each physical
interface capable of this feature. CtAgentDaiIfConfigEntry .1.3.6.1.4.1.52.4.2.36.1.1.7.1 |
ctAgentDaiIfTrustEnableThis object indicates whether the interface is trusted for
Dynamic ARP Inspection purpose.
If this object is set to 'true', the interface is trusted.
ARP packets coming to this interface will be forwarded
without checking.
If this object is set to 'false', the interface is not
trusted. ARP packets coming to this interface will be
subjected to ARP inspection.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.52.4.2.36.1.1.7.1.1 |
ctAgentDaiIfRateLimitThis object indicates rate limit value for Dynamic ARP
Inspection purpose. If the incoming rate of ARP packets
exceeds the value of this object for consecutively
burst interval seconds, ARP packets will be
dropped.rw Unsigned32 .1.3.6.1.4.1.52.4.2.36.1.1.7.1.2 |
ctAgentDaiIfBurstIntervalThis object indicates the burst interval value
for rate limiting purpose on this interface.rw Unsigned32 .1.3.6.1.4.1.52.4.2.36.1.1.7.1.3 |