DLINKSW-DAI-MIB
AI MIB Summary
The DLINKSW-DAI-MIB module provides management objects for monitoring and configuring Dynamic ARP Inspection (DAI) security features on D-Link network switches, specifically tracking ARP packet validation states, violation counters, and trusted interface configurations to prevent ARP spoofing attacks.
This MIB module defines objects for Dynamic ARP Inspection.
Main OID:
dlinkSwDynamicArpInspectionMIB.1.3.6.1.4.1.171.14.130
68
Objects
Active
Status
8
Dependencies
Imported Objects
Objects
68 total| Object Name |
|---|
dlinkSwDynamicArpInspectionMIBThis MIB module defines objects for Dynamic ARP Inspection. MODULE-IDENTITY .1.3.6.1.4.1.171.14.130 |
dDaiNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.0 |
dDaiObjects OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.1 |
dDaiGlobal OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.1.1 |
dDaiAddressValidateThis object specifies address validation criteria
used by Dynamic ARP Inspection feature.
'srcMacAddress' - indicates that source MAC address in
ethernet header is checked against the sender MAC address
in ARP packet. When this bit is on, packets with different
MAC addresses are classified as invalid packets and are
dropped. This checking is done for both ARP request and
ARP response packet.
'dstMacAddress' indicates that the destination MAC address
in ethernet header is checked against the target MAC address
in ARP packet. When this bit is on, packets with different
addresses are classified as invalid packets and are dropped.
This checking is done for ARP response packet only.
'ip' indicates that the IP addresses in ARP packet are checked
for invalid or unexpected IP addresses. Addresses such as
0.0.0.0, 255.255.255.255 and all IP multicast addresses are
considered invalid. When this bit is on, both the sender
and target IP addresses in the ARP packet are checked. This
checking is done for both ARP request and response packet.rw Bits .1.3.6.1.4.1.171.14.130.1.1.1 |
dDaiLogBufferSizeThis object specifies the buffer entry number.rw Unsigned32 UNITS "entries" .1.3.6.1.4.1.171.14.130.1.1.2 |
dDaiClearLogBufferThis object clears all entries in dDaiLoggingBufferTable
, when set to 'clear'.
No action is taken if this object is set to 'noOp'.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.130.1.1.3 |
dDaiLogBufferTableA table provides the information of logged ARP flows
for system message generation. SEQUENCE OF DDaiLogBufferEntry .1.3.6.1.4.1.171.14.130.1.1.4 |
dDaiLogBufferEntryAn entry contains logged ARP flow data for system
message generation. Entries in the log are cleared once
system messages are generated on their behalf.
A special entry will be populated for accounting drops of
all flows that result in exceeding the number of entries
of the log buffer. This special entry only contains packets
counter and timestamps information. DDaiLogBufferEntry .1.3.6.1.4.1.171.14.130.1.1.4.1 |
dDaiLogBufferIndexThis object uniquely identifies a logged ARP flow in the buffer. Unsigned32 .1.3.6.1.4.1.171.14.130.1.1.4.1.1 |
dDaiLogBufferInterfaceThis object indicates the interface which sent the logged
ARP flow.ro InterfaceIndex (IF-MIB) .1.3.6.1.4.1.171.14.130.1.1.4.1.2 |
dDaiLogBufferVlanThis object indicates the VLAN ID which the logged
ARP flow belongs to.ro VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.130.1.1.4.1.3 |
dDaiLogBufferSenderMacAddressThis object indicates the sender MAC address of the logged
ARP flow. All zeros MAC address value indicates the
special entry.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.130.1.1.4.1.4 |
dDaiLogBufferSenderIpAddressThis object indicates the sender Internet address
of the logged ARP flow. The type of this address is
determined by the value of dDaiLogBufferSenderAddressType
object. All zeros IP address value indicates the
special entry.ro InetAddressIPv4 (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.14.130.1.1.4.1.5 |
dDaiLogBufferLastUpdateThis object indicates the timestamp when the last packet
of this flow was accounted by the system.ro DateAndTime (SNMPv2-TC) .1.3.6.1.4.1.171.14.130.1.1.4.1.6 |
dDaiLogBufferPacketsCountThis object indicates the number of packets of this ARP flow
was accounted by the system.ro Gauge32 .1.3.6.1.4.1.171.14.130.1.1.4.1.7 |
dDaiVlan OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.1.2 |
dDaiVlanCrlFirst2KThis object specifies the Dynamic ARP Inspection enabled VLAN in a
string of octets containing one bit per VLAN for VLANs 1 to 2048.
If the bit is set to '1', then the VLAN is enabled for Dynamic ARP
Inspection.rw Dlink2kVlanList (DLINKSW-TC-MIB) .1.3.6.1.4.1.171.14.130.1.2.1 |
dDaiVlanCrlSecond2KThis object specifies the Dynamic ARP Inspection enabled VLAN in a
string of octets containing one bit per VLAN for VLANs 2049 to 4094.
If the bit is set to '1', then the VLAN is enabled for Dynamic ARP
Inspection.rw Dlink2kVlanList (DLINKSW-TC-MIB) .1.3.6.1.4.1.171.14.130.1.2.2 |
dDaiVlanCfgTableA table contains a list of configuration for Dynamic ARP
Inspection per VLAN. SEQUENCE OF DDaiVlanCfgEntry .1.3.6.1.4.1.171.14.130.1.2.3 |
dDaiVlanCfgEntryA row instance contains the Dynamic ARP inspection
configuration for a specific VLAN in the device. DDaiVlanCfgEntry .1.3.6.1.4.1.171.14.130.1.2.3.1 |
dDaiVlanCfgIdThis object indicates the VLAN ID of the entry. VlanId (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.130.1.2.3.1.1 |
dDaiVlanFilterArpAclNameThis object specifies an ARP ACL name that is used to check
the validity of the bindings information in ARP body.
An empty string indicates that the ARP ACL is not configured
on the VLAN.rw DisplayString .1.3.6.1.4.1.171.14.130.1.2.3.1.2 |
dDaiVlanFilterArpAclStaticThis object indicates whether drop the packet if the
IP-to-Ethernet MAC binding pair is not permitted by the arp ACL.
This object does not take effect if value of
dDaiVlanFilterArpAclName on the row is an empty string.
'true' indicates the implicit denied packet is dropped and ARP packet
is not compared against DHCP bindings information.
'false' indicates if ARP packet is not explicitly classified by ARP
ACL, it will be compared against DHCP bindings information.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.130.1.2.3.1.3 |
dDaiVlanAclLoggingThis object indicates the logging criteria for packets that are
dropped or permitted based on ACL matches.
'permit' - indicates that logging is performed when packets
is permitted by the configured ACL.
'deny' - indicates that logging is performed when packets
is denied by the configured ACL.rw Bits .1.3.6.1.4.1.171.14.130.1.2.3.1.4 |
dDaiVlanDhcpBindingLoggingThis object specifies the logging criteria when
ARP packets is compared against DHCP bindings information.
'permit' - indicates that logging is performed for packets that
are permitted as a result of comparing with DHCP bindings
information.
'deny' - indicates that logging is performed for packets that
are denied as a result of comparing with DHCP bindings
information.rw Bits .1.3.6.1.4.1.171.14.130.1.2.3.1.5 |
dDaiVlanCfgRowStatusThe status of this conceptual row entry. This object
is used to manage creation and deletion of rows in this
table.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.130.1.2.3.1.99 |
dDaiInterface OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.1.3 |
dDaiIfConfigTableA table provides the mechanism to configure the trust
state for Dynamic ARP Inspection purpose at each
interface capable of this feature. SEQUENCE OF DDaiIfConfigEntry .1.3.6.1.4.1.171.14.130.1.3.1 |
dDaiIfConfigEntryA row instance contains the configuration to enable or
disable trust state for Dynamic ARP Inspection at each
interface capable of this feature. DDaiIfConfigEntry .1.3.6.1.4.1.171.14.130.1.3.1.1 |
dDaiIfTrustEnabledThis object indicates whether the interface is trusted for
Dynamic ARP Inspection purpose.
If this object is set to 'true', the interface is trusted.
ARP packets coming to this interface will be forwarded
without Dynamic ARP inspection.
If this object is set to 'false', the interface is not
trusted. ARP packets coming to this interface will be
subjected to ARP inspection.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.130.1.3.1.1.1 |
dDaiIfRateLimitTableA table provides the mechanism to configure the rate limit
for Dynamic ARP Inspection purpose at each interface
capable of this feature. SEQUENCE OF DDaiIfRateLimitEntry .1.3.6.1.4.1.171.14.130.1.3.2 |
dDaiIfRateLimitEntryA row instance contains the configuration of rate limit
Dynamic ARP Inspection at each interface capable
of this feature. DDaiIfRateLimitEntry .1.3.6.1.4.1.171.14.130.1.3.2.1 |
dDaiIfRateLimitThis object indicates rate limit value for Dynamic ARP
Inspection purpose. If the incoming rate of ARP packets
exceeds the value of this object, ARP packets will be
dropped.rw Unsigned32 UNITS "packet per second" .1.3.6.1.4.1.171.14.130.1.3.2.1.1 |
dDaiIfBurstIntervalThis object indicates the length of the burst duration
of the ARP packets that is allowed.
When the rate of ARP packet per second exceeds the limitation
and the condition sustain for the configured burst duration,
the interface will be put in error disable state.rw Unsigned32 UNITS "second" .1.3.6.1.4.1.171.14.130.1.3.2.1.2 |
dDaiStatistics OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.1.4 |
dDaiVlanStatsTableA table lists the Dynamic Arp Inspection statistics per VLAN. SEQUENCE OF DDaiVlanStatsEntry .1.3.6.1.4.1.171.14.130.1.4.1 |
dDaiVlanStatsEntryA row instance contains Dynamic ARP Inspection statistics
information for each VLAN. DDaiVlanStatsEntry .1.3.6.1.4.1.171.14.130.1.4.1.1 |
dDaiVlanStatsIndexThis object indicates the VLAN ID of the entry. VlanId (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.130.1.4.1.1.1 |
dDaiVlanForwardedThis object indicates the number of ARP packets forwarded by
Dynamic Arp Inspection feature.ro Counter64 UNITS "packets" .1.3.6.1.4.1.171.14.130.1.4.1.1.2 |
dDaiVlanDroppedThis object indicates the number of ARP packets dropped by
Dynamic ARP Inspection feature.ro Counter64 UNITS "packets" .1.3.6.1.4.1.171.14.130.1.4.1.1.3 |
dDaiVlanAclPermittedThis object indicates the number of ARP packets permitted by
the configured ACL.ro Counter64 UNITS "packets" .1.3.6.1.4.1.171.14.130.1.4.1.1.4 |
dDaiVlanDhcpBindingsPermittedThis object indicates the number of ARP packets that are permitted
by DHCP snooping binding database.ro Counter64 UNITS "packets" .1.3.6.1.4.1.171.14.130.1.4.1.1.5 |
dDaiVlanAclDeniedThis object indicates the number of ARP packets denied by the
associating ACL.ro Counter64 UNITS "packets" .1.3.6.1.4.1.171.14.130.1.4.1.1.6 |
dDaiVlanDhcpBindingDeniedThis object indicates the number of ARP packets that are dropped by
DHCP snooping binding database.ro Counter64 UNITS "packets" .1.3.6.1.4.1.171.14.130.1.4.1.1.7 |
dDaiVlanSrcMacValidationFailuresThis object indicates the number of ARP packets that fail
source MAC address validation.ro Counter64 UNITS "packets" .1.3.6.1.4.1.171.14.130.1.4.1.1.8 |
dDaiVlanDstMacValidationFailuresThis object indicates the number of ARP packets that fail
destination MAC address validation.ro Counter64 UNITS "packets" .1.3.6.1.4.1.171.14.130.1.4.1.1.9 |
dDaiVlanIpValidationFailuresThis object indicates the number of ARP packets that fail
IP validation.ro Counter64 UNITS "packets" .1.3.6.1.4.1.171.14.130.1.4.1.1.10 |
dDaiVlanStatsClearThis object clears the counters in the same row when set to
'clear'.
No action is taken if this object is set to 'noOp'.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.130.1.4.1.1.99 |
dDaiVlanStatsClearAllThis object clears the counters of all entries in
dDaiVlanStatsTable, when set to 'clear'.
No action is taken if this object is set to 'noOp'.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.130.1.4.2 |
dDaiAclCfg OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.1.5 |
dDaiArpAccessListNumberThis object indicates the number of entries present in the ARP
access list table.ro Unsigned32 .1.3.6.1.4.1.171.14.130.1.5.1 |
dDaiArpAccessListTableThe table contains information about ARP access list. SEQUENCE OF DDaiArpAccessListEntry .1.3.6.1.4.1.171.14.130.1.5.2 |
dDaiArpAccessListEntryAn entry defined in dDaiArpAccessListTable. An entry is
created/removed when an ARP access list is created/deleted. DDaiArpAccessListEntry .1.3.6.1.4.1.171.14.130.1.5.2.1 |
dDaiArpAccessListNameThe name of the ARP access list. DisplayString .1.3.6.1.4.1.171.14.130.1.5.2.1.1 |
dDaiArpAccessListRowStatusThis object allows the dynamic creation and deletion of an ARP
access list.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.130.1.5.2.1.99 |
dDaiArpAccessRuleTableA table consists of a list of rules for the ARP access list. SEQUENCE OF DDaiArpAccessRuleEntry .1.3.6.1.4.1.171.14.130.1.5.3 |
dDaiArpAccessRuleEntryAn entry is defined dDaiArpAccessRuleTable.
The first instance identifier index value identifies the
dDaiArpAccessListEntry that a ARP access rule (dDaiArpAccessRuleEntry)
belongs to. An entry is removed from this table when its
corresponding dDaiArpAccessListEntry is deleted. DDaiArpAccessRuleEntry .1.3.6.1.4.1.171.14.130.1.5.3.1 |
dDaiArpAccessRuleSnSpecifies the sequence number of the rule. A lower number represents
a higher priority.
The special value of 0 means the priority will be automatically determined
by the agent. Integer32 .1.3.6.1.4.1.171.14.130.1.5.3.1.1 |
dDaiArpAccessRuleRowStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.130.1.5.3.1.2 |
dDaiArpAccessRuleActionThis object indicates the result of the packet examination is to permit or deny.rw DaiRuleType .1.3.6.1.4.1.171.14.130.1.5.3.1.3 |
dDaiArpAccessRuleSenderMacAddrThis object indicates the ARP sender MAC address of the entry.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.130.1.5.3.1.4 |
dDaiArpAccessRuleSenderMacMaskThis object is a mask bitmap to specify a group of source
MAC addresses. The bit value 1 indicates the corresponding bit will
be checked. The bit value 0 indicates the corresponding bit will be
ignored. In other words, when the value of all '00'Hs indicates any ARP
sender MAC address is specified. When the value of all 'ff'Hs indicates
host ARP sender MAC address is specified.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.130.1.5.3.1.5 |
dDaiArpAccessRuleSenderAddrThis object indicates the ARP sender IP address of the entry.rw IpAddress .1.3.6.1.4.1.171.14.130.1.5.3.1.6 |
dDaiArpAccessRuleSenderAddrMaskThis object is a mask bitmap to specify a group of source IP
addresses. The bit value 1 indicates the corresponding bit will
be checked. The bit value 0 indicates the corresponding bit will be
ignored. In other words, when the value of all '00'Hs indicates any
ARP sender address is specified. When the value of all 'ff'Hs indicates
host ARP sender address is specified.rw IpAddress .1.3.6.1.4.1.171.14.130.1.5.3.1.7 |
dDaiConformance OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.2 |
dDaiMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.2.1 |
dDaiMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.130.2.2 |