HP-ICF-ARP-PROTECT
AI MIB Summary
The HP-ICF-ARP-PROTECT MIB module provides proprietary management objects for HP Intelligent Management Center (IMC) and switch platforms to monitor and configure Dynamic ARP Protection (DARP) policies, specifically tracking ARP binding table states, violation counters, and port security enforcement actions.
This MIB module contains HP proprietary objects for managing Dynamic ARP Protection.
Main OID:
hpicfArpProtect.1.3.6.1.4.1.25506.11.1.37
33
Objects
Active
Status
7
Dependencies
Imported Objects
Objects
33 total| Object Name |
|---|
hpicfArpProtectThis MIB module contains HP proprietary
objects for managing Dynamic ARP
Protection. MODULE-IDENTITY .1.3.6.1.4.1.25506.11.1.37 |
hpicfArpProtectNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.37.0 |
hpicfArpProtectErrantReplyAn hpicfArpProtectErrantReply notification signifies that
the ARP protection entity is enabled and has detected
an errant ARP reply packet. The source and
destination addresses from the packet header are included
in the notification. NOTIFICATION-TYPE .1.3.6.1.4.1.25506.11.1.37.0.1 |
hpicfArpProtectObjects OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.37.1 |
hpicfArpProtectConfig OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.37.1.1 |
hpicfArpProtectGlobalCfg OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.37.1.1.1 |
hpicfArpProtectEnableThe administrative status of the ARP Protection
feature.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.37.1.1.1.1 |
hpicfArpProtectVlanEnableThe administrative status for Dynamic ARP Protection
on each VLAN. There will be one bit in this string
for each possible VLAN ID. Each octet within this
value specifies a set of eight VLANs, with the first
octet specifying VLAN IDs 1 through 8, the second
octet specifying VLAN IDs 9 through 16, etc. Within
each octet, the most significant bit represents the
lowest numbered VLAN ID, and the least significant
bit represents the highest numbered VLAN ID. Thus,
each possible VLAN ID of the bridge is represented by
a single bit within the value of this object. If
that bit has a value of '1', then Dynamic ARP
Protection is enabled on that VLAN; Dynamic ARP
Protection is not enabled on the VLAN its bit has a
value of '0'.rw OCTET STRING .1.3.6.1.4.1.25506.11.1.37.1.1.1.2 |
hpicfArpProtectValidationAdditional validation checks to perform on ARP
packets during Dynamic ARP Protection.
srcMac - Drop any ARP request or response
packet where the source MAC address in
the Ethernet header does not match the
sender MAC address in the body of the
ARP packet.
dstMac - Drop any unicast ARP response packet
where the destination MAC address in the
Ethernet header does not match the target
MAC address in the body of the ARP packet.
ip - Drop any ARP packet where the sender IP
address is invalid. Drop any ARP response
packet where the target IP address is
invalid. Invalid addresses include
0.0.0.0, 255.255.255.255, all IP multicast
addresses, and all class E IP addresses.
These checks are only performed for ARP packets
received on untrusted ports in VLANs that are enabled
for Dynamic ARP Protection. ARP packets received on
trusted ports, and ARP packets in VLANs for which
Dynamic ARP Protection is disabled, are forwarded
without validation.rw Bits .1.3.6.1.4.1.25506.11.1.37.1.1.1.3 |
hpicfArpProtectErrantNotifyEnableProvides operational control of hpicfArpProtectErrantReply.rw Enumeration .1.3.6.1.4.1.25506.11.1.37.1.1.1.4 |
hpicfArpProtectPortTablePer-interface configuration for Dynamic ARP
Protection. SEQUENCE OF HpicfArpProtectPortEntry .1.3.6.1.4.1.25506.11.1.37.1.1.2 |
hpicfArpProtectPortEntryDynamic ARP Protection configuration information for
a single port. HpicfArpProtectPortEntry .1.3.6.1.4.1.25506.11.1.37.1.1.2.1 |
hpicfArpProtectPortTrustThis object indicates whether this port is
trusted for Dynamic ARP Protection.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.37.1.1.2.1.1 |
hpicfArpProtectStatus OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.37.1.2 |
hpicfArpProtectVlanStatTablePer-VLAN statistics for Dynamic ARP Protection. SEQUENCE OF HpicfArpProtectVlanStatEntry .1.3.6.1.4.1.25506.11.1.37.1.2.1 |
hpicfArpProtectVlanStatEntryDynamic ARP Protection statistics for a single VLAN. HpicfArpProtectVlanStatEntry .1.3.6.1.4.1.25506.11.1.37.1.2.1.1 |
hpicfArpProtectVlanStatIndexThis variable uniquely identifies the VLAN that
the counters in this entry apply to. The VLAN
identified by this object is the same VLAN as
identified by the identical value in the
dot1qVlanIndex object. VlanIndex (Q-BRIDGE-MIB) .1.3.6.1.4.1.25506.11.1.37.1.2.1.1.1 |
hpicfArpProtectVlanStatForwardsThe number of ARP packets received on untrusted
ports in this VLAN that were successfully validated
and forwarded. This count does not increment for
VLANs for which Dynamic ARP Protection is not
enabled.ro Counter32 .1.3.6.1.4.1.25506.11.1.37.1.2.1.1.2 |
hpicfArpProtectVlanStatBadPktsThe number of ARP packets received on untrusted
ports that were dropped because they were malformed
in some way. This may include an unrecognized
opcode, an unrecognized protocol type, an
unrecognized hardware type, an invalid protocol
address length, or an invalid hardware address
length. This count does not increment for VLANs
for which Dynamic ARP Protection is not enabled.ro Counter32 .1.3.6.1.4.1.25506.11.1.37.1.2.1.1.3 |
hpicfArpProtectVlanStatBadBindingsThe number of ARP packets received on untrusted
ports that were dropped because they advertized
a source IP-to-MAC binding that did not match a
known, valid binding. This count does not increment
for VLANs for which Dynamic ARP Protection is not
enabled.ro Counter32 .1.3.6.1.4.1.25506.11.1.37.1.2.1.1.4 |
hpicfArpProtectVlanStatBadSrcMacsThe number of ARP packets received on untrusted
ports that were dropped because the source MAC
address in the Ethernet header did not match the
sender MAC address in the body of the ARP packet.
This count does not increment when source MAC
validation is not enabled. This count does not
increment for VLANs for which Dynamic ARP Protection
is not enabled.ro Counter32 .1.3.6.1.4.1.25506.11.1.37.1.2.1.1.5 |
hpicfArpProtectVlanStatBadDstMacsThe number of unicast ARP response packets received
on untrusted ports that were dropped because the
destination MAC address in the Ethernet header did
not match the target MAC address in the body of the
ARP packet. This count does not increment when
destination address validation is not enabled.
This count does not increment for VLANs for which
Dynamic ARP Protection is not enabled.ro Counter32 .1.3.6.1.4.1.25506.11.1.37.1.2.1.1.6 |
hpicfArpProtectVlanStatBadIpAddrsThe number of ARP packets received on untrusted
ports that were dropped because they contained
an invalid sender IP address, or they contained
an invalid target IP address in an ARP response.
This count does not increment when IP address
validation is not enabled. This count does not
increment for VLANs for which Dynamic ARP Protection
is not enabled.ro Counter32 .1.3.6.1.4.1.25506.11.1.37.1.2.1.1.7 |
hpicfArpProtectErrantCntA count of hpicfArpProtectErrantReply sent
from the ARP Protection entity to the SNMP
entity. This count may differ from the count
of notifications transmitted due to rate
limiting or configuration.ro Counter32 .1.3.6.1.4.1.25506.11.1.37.1.3 |
hpicfArpProtectErrantSrcMacErrant source MAC address included in a
hpicfArpProtectNotification.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.37.1.4 |
hpicfArpProtectErrantSrcIpTypeIP Address type reported in hpicfArpProtectErrantSrcIp.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.37.1.5 |
hpicfArpProtectErrantSrcIpErrant source IP address included in a
hpicfArpProtectNotification.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.37.1.6 |
hpicfArpProtectErrantDestMacErrant destination MAC address included in a
hpicfArpProtectNotification.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.25506.11.1.37.1.7 |
hpicfArpProtectErrantDestIpTypeIP Address type reported in hpicfArpProtectErrantDestIp.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.37.1.8 |
hpicfArpProtectErrantDestIpErrant destination IP address included in a
hpicfArpProtectNotification.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.25506.11.1.37.1.9 |
hpicfArpProtectConformance OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.37.2 |
hpicfArpProtectGroups OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.37.2.1 |
hpicfArpProtectCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.25506.11.1.37.2.2 |