Home/Catalog/FOUNDRY-IP-SOURCE-GUARD-MIB

FOUNDRY-IP-SOURCE-GUARD-MIB

AI MIB Summary

The FOUNDRY-IP-SOURCE-GUARD-MIB manages Brocade Foundry switch configurations for IP Source Guard, specifically monitoring and controlling untrusted port traffic filtering against the DHCP snooping binding database or static IP source bindings. This module provides visibility into active source guard bindings, filter states, and associated port security violations to enforce strict IP address-to-port mapping.

Management Information for configuration of IP Source Guard feature. IP Source Guard is a security feature that restricts IP traffic on untrusted ports by filtering traffic based on the DHCP snooping binding database or manually configured IP source bindings. Copyright 1996-2010 Brocade Communications Systems, Inc. All rights reserved. This Brocade Communications Systems SNMP Management Information Base Specification embodies Brocade Communications Systems' confidential and proprietary intellectual property. Brocade Communications Systems retains all title and ownership in the Specification, including any revisions. This Specification is supplied AS IS, and Brocade Communications Systems makes no warranty, either express or implied, as to the use, operation, condition, or performance of the specification, and any unintended consequence it may on the user environment.

Main OID:

fdryIpSrcGuardMIB.1.3.6.1.4.1.6321.1.2.3.2.10.3.37

Objects

Active

Status

Dependencies

Imported Objects

SNMPv2-SMI

FOUNDRY-SN-SWITCH-GROUP-MIB

SNMPv2-TC

Q-BRIDGE-MIB

IF-MIB

Objects

19 total

Object Name	Syntax	OID
fdryIpSrcGuardMIBManagement Information for configuration of IP Source Guard feature. IP Source Guard is a security feature that restricts IP traffic on untrusted ports by filtering traffic based on the DHCP snooping binding database or manually configured IP source bindings. Copyright 1996-2010 Brocade Communications Systems, Inc. All rights reserved. This Brocade Communications Systems SNMP Management Information Base Specification embodies Brocade Communications Systems' confidential and proprietary intellectual property. Brocade Communications Systems retains all title and ownership in the Specification, including any revisions. This Specification is supplied AS IS, and Brocade Communications Systems makes no warranty, either express or implied, as to the use, operation, condition, or performance of the specification, and any unintended consequence it may on the user environment. MODULE-IDENTITY `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37`	MODULE-IDENTITY	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37`
fdryIpSrcGuardInterface OBJECT IDENTIFIER `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.1`	OBJECT IDENTIFIER	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.1`
fdryIpSrcGuardIfConfigTableA table provides the mechanism to configure enabling or disabling IP Source Guard purpose at each physical interface. SEQUENCE OF FdryIpSrcGuardIfConfigEntry `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.1.1`	SEQUENCE OF FdryIpSrcGuardIfConfigEntry	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.1.1`
fdryIpSrcGuardIfConfigEntryA row instance contains the configuration to enable or disable IP Source Guard at each physical interface capable of this feature. FdryIpSrcGuardIfConfigEntry `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.1.1.1`	FdryIpSrcGuardIfConfigEntry	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.1.1.1`
fdryIpSrcGuardIfEnableThis object indicates whether IP Source Guard is enabled at this interface. If this object is set to 'true', IP Source Guard is enabled. Traffic coming to this interface will be forwarded. If it is from the list of IP addresses obtained from DHCP snooping. Otherwise it is denied. If this object is set to 'false', IP Source Guard is disabled.rw TruthValue (SNMPv2-TC) `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.1.1.1.1`	TruthValue (SNMPv2-TC)	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.1.1.1.1`
fdryIpSrcGuardPortVlan OBJECT IDENTIFIER `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2`	OBJECT IDENTIFIER	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2`
fdryIpSrcGuardPortVlanConfigTableA table provides the mechanism to configure enabling or disabling IP Source Guard purpose per port per VLAN. SEQUENCE OF FdryIpSrcGuardPortVlanConfigEntry `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1`	SEQUENCE OF FdryIpSrcGuardPortVlanConfigEntry	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1`
fdryIpSrcGuardPortVlanConfigEntryA row instance contains the configuration to enable or disable IP Source Guard per port per VLAN of this feature. FdryIpSrcGuardPortVlanConfigEntry `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1.1`	FdryIpSrcGuardPortVlanConfigEntry	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1.1`
fdryIpSrcGuardPortVlanPortIdThe ifIndex of the port for IP Source Guard purpose per port per VLAN. InterfaceIndex (IF-MIB) `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1.1.1`	InterfaceIndex (IF-MIB)	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1.1.1`
fdryIpSrcGuardPortVlanVlanIdThe number of VLAN for IP Source Guard purpose per port per VLAN. VlanIndex (Q-BRIDGE-MIB) `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1.1.2`	VlanIndex (Q-BRIDGE-MIB)	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1.1.2`
fdryIpSrcGuardPortVlanEnableThis object indicates whether IP Source Guard is enabled at this interface and this VLAN number. If this object is set to 'true', IP Source Guard per-port-per-VLAN is enabled. If this object is set to 'false', IP Source Guard per-port-per-VLAN is disabled.rw TruthValue (SNMPv2-TC) `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1.1.3`	TruthValue (SNMPv2-TC)	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.2.1.1.3`
fdryIpSrcGuardBind OBJECT IDENTIFIER `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3`	OBJECT IDENTIFIER	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3`
fdryIpSrcGuardBindTableA table provides the information of IP addresses used IP Source Guard purpose at each physical interface with or without specific VLAN memberships SEQUENCE OF FdryIpSrcGuardBindEntry `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1`	SEQUENCE OF FdryIpSrcGuardBindEntry	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1`
fdryIpSrcGuardBindEntryA row instance contains IP address used for IP Source Guard purpose at each physical interface with or without specific VLAN memberships . FdryIpSrcGuardBindEntry `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1`	FdryIpSrcGuardBindEntry	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1`
fdryIpSrcGuardBindIpAddrThe device IP address. IpAddress `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.1`	IpAddress	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.1`
fdryIpSrcGuardBindVlanIdThis object indicates the specific VLAN memberships on this interface. The VLAN number is optional. If you configure a VLAN number, the bindings applies to that VLAN only. If you do not configure a VLAN number, the static applies to all VLANs associated with the port. In this case, the VLAN number will be displayed as 0.rw Unsigned32 `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.2`	Unsigned32	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.2`
fdryIpSrcGuardBindRowStatusThis variable is used to create, or delete a row in this table. When a row in this table is in active(1) state, no objects in that row can be modified except this object.rw RowStatus (SNMPv2-TC) `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.3`	RowStatus (SNMPv2-TC)	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.3`
fdryIpSrcGuardBindModeThe mode of the IP Source Guard entryro BindMode `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.4`	BindMode	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.4`
fdryIpSrcGuardBindTypeThe type of the IP Source Guard entryro BindType `.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.5`	BindType	`.1.3.6.1.4.1.6321.1.2.3.2.10.3.37.3.1.1.5`