CISCO-DYNAMIC-ARP-INSPECTION-MIB: View SNMP OID List / Download MIB
VENDOR: CISCO
| Home | MIB: CISCO-DYNAMIC-ARP-INSPECTION-MIB | |||
|---|---|---|---|---|
| Download as: |
Download standard MIB format if you are planning to load a MIB file into some system (OS, Zabbix, PRTG ...) or view it with a MIB browser. CSV is more suitable for analyzing and viewing OID' and other MIB objects in excel. JSON and YAML formats are usually used in programing even though some systems can use MIB in YAML format (like Logstash).
|
|||
| Object Name | OID | Type | Access | Info |
| ciscoDynamicArpInspectionMIB | 1.3.6.1.4.1.9.9.374 |
The MIB module is for configuration of Dynamic ARP Inspection feature. Dynamic ARP Inspection is a security mechanism which validate ARP packets seen on access ports. |
||
| cdaiMIBNotifs | 1.3.6.1.4.1.9.9.374.0 | |||
| cdaiMIBObjects | 1.3.6.1.4.1.9.9.374.1 | |||
| cdaiGlobal | 1.3.6.1.4.1.9.9.374.1.1 | |||
| cdaiLoggingEnable | 1.3.6.1.4.1.9.9.374.1.1.1 | truthvalue | read-write |
This object indicates whether the Dynamic ARP Inspection logging is enabled on the device. If this object is set to 'true', Dynamic ARP Inspection logging is enabled. If this object is set to 'false', Dynamic ARP Inspection logging is disabled. |
| cdaiAddressValidate | 1.3.6.1.4.1.9.9.374.1.1.2 | bits | read-write |
This object specifies address validation criteria used by Dynamic ARP Inspection feature. 'srcMacAddress' indicates that source MAC address in ethernet header is checked against the sender MAC address in ARP packet. When this bit is on, packets with different MAC addresses are classified as invalid packets and are dropped. This checking is done for both ARP request and ARP response packet. 'dstMacAddress' indicates that the destination MAC address in ethernet header is checked against the target MAC address in ARP packet. When this bit is on, packets with different addresses are classified as invalid packets and are dropped. This checking is done for ARP response packet only. 'ip' indicates that the IP addresses in ARP packet are checked for invalid or unexpected IP addresses. Addresses such as 0.0.0.0, 255.255.255.255 and all IP multicast addresses are considered invalid. When this bit is on, both the sender and target IP addresses in the ARP packet are checked. This checking is done for both ARP request and response packet. 'ipAllowZeros' works the same as 'ip' but address 0.0.0.0 is allowed. 'ip' and 'ipAllowZeros' are mutually exclusive. Bits: 'srcMacAddress': 0, 'ip': 2, 'ipAllowZeros': 3, 'dstMacAddress': 1. |
| cdaiLogBufferSize | 1.3.6.1.4.1.9.9.374.1.1.3 | unsigned32 | read-write |
This object specifies the size of the logging buffer. |
| cdaiLoggingRate | 1.3.6.1.4.1.9.9.374.1.1.4 | unsigned32 | read-write |
This object specifies the maximum number of logging entries will be logged during the time period denoted by cdaiLoggingInterval object for system message generation purpose. Zero value indicates that entry is placed in the log buffer, but a system message is not generated. |
| cdaiLoggingInterval | 1.3.6.1.4.1.9.9.374.1.1.5 | unsigned32 | read-write |
This object specifies the logging interval for system message generation purpose. Zero value indicates that system message is immediately generated (and the log buffer is always empty). Value of this object and value of cdaiLoggingRate object cannot be zero at the same time. |
| cdaiLogBufferAction | 1.3.6.1.4.1.9.9.374.1.1.6 | integer | read-write |
This objects specifies the action can be taken with respect to logging buffer. 'none' indicates that no operation is performed. This object always return value 'none' when read. 'clear' indicates that all entries in cdaiLoggingBufferTable will be cleared. Enumeration: 'none': 1, 'clear': 2. |
| cdaiLogBufferTable | 1.3.6.1.4.1.9.9.374.1.1.7 | no-access |
A table provides the information of logged ARP flows for system message generation. |
|
| 1.3.6.1.4.1.9.9.374.1.1.7.1 | no-access |
A row instance contains logged ARP flow data for system message generation. Entries in the log are cleared once system messages are generated on their behalf. A special entry will be populated for accounting drops of all flows that result in exceeding the number of entries of the log buffer. Special entry only contains packets counter and timestamps information. The rest of its fields are irrelevant. |
||
| cdaiLogBufferIndex | 1.3.6.1.4.1.9.9.374.1.1.7.1.1 | unsigned32 | no-access |
This object uniquely identifies a logged ARP flow in the buffer. |
| cdaiLogBufferInterface | 1.3.6.1.4.1.9.9.374.1.1.7.1.2 | interfaceindexorzero | read-only |
This object indicates the interface which sent the logged ARP flow. Zero value indicates the special entry. |
| cdaiLogBufferVlan | 1.3.6.1.4.1.9.9.374.1.1.7.1.3 | vlanindexorzero | read-only |
This object indicates the VLAN number which the logged ARP flow belongs to. Zero value indicates the special entry. |
| cdaiLogBufferSenderMacAddress | 1.3.6.1.4.1.9.9.374.1.1.7.1.4 | macaddress | read-only |
This object indicates the sender MAC address of the logged ARP flow. All zeros MAC address value indicates the special entry. |
| cdaiLogBufferSenderAddressType | 1.3.6.1.4.1.9.9.374.1.1.7.1.5 | inetaddresstype | read-only |
This object indicates the sender Internet address type of the logged ARP flow. |
| cdaiLogBufferSenderIpAddress | 1.3.6.1.4.1.9.9.374.1.1.7.1.6 | inetaddress | read-only |
This object indicates the sender Internet address of the logged ARP flow. The type of this address is determined by the value of cdaiLogBufferSenderAddressType object. All zeros IP address value indicates the special entry. |
| cdaiLogBufferReason | 1.3.6.1.4.1.9.9.374.1.1.7.1.7 | integer | read-only |
This object indicates the reason for logging this ARP flow. 'unknown' indicates unknown reason. 'deny' indicates that this ARP flow is logged because it is denied by Dynamic ARP Inspection feature. 'aclDeny' indicates that this ARP flow is logged because it is denied by a configured ARP ACL. 'aclPermit' indicates that this ARP flow is logged because it is permitted by a configured ARP ACL. 'dhcpDeny' indicates that this ARP flow is logged because it is denied when comparing with DHCP bindings information. 'dhcpPermit' indicates that this ARP flow is logged because it is permitted when comparing with DHCP binding information. 'probePermit' indicates that this ARP flow is logged because it is a permitted ARP-Probe flow. Enumeration: 'probePermit': 7, 'deny': 2, 'dhcpPermit': 6, 'unknown': 1, 'aclPermit': 4, 'aclDeny': 3, 'dhcpDeny': 5. |
| cdaiLogBufferLastUpdate | 1.3.6.1.4.1.9.9.374.1.1.7.1.8 | dateandtime | read-only |
This object indicates the timestamp when the last packet of this flow was accounted by the system. |
| cdaiLogBufferPacketsCount | 1.3.6.1.4.1.9.9.374.1.1.7.1.9 | gauge32 | read-only |
This object indicates the number of packets of this ARP flow was accounted by the system. |
| cdaiVlan | 1.3.6.1.4.1.9.9.374.1.2 | |||
| cdaiVlanConfigTable | 1.3.6.1.4.1.9.9.374.1.2.1 | no-access |
A table provides the mechanism to control Dynamic ARP Inspection per VLAN. When a VLAN is created in a device supporting this table, a corresponding entry of this table will be added. |
|
| 1.3.6.1.4.1.9.9.374.1.2.1.1 | no-access |
A row instance contains the configuration to enable or disable Dynamic ARP Inspection at each existing VLAN. |
||
| cdaiVlanIndex | 1.3.6.1.4.1.9.9.374.1.2.1.1.1 | vlanindex | no-access |
This object indicates the VLAN number on which Dynamic ARP Inspection feature is configured. |
| cdaiVlanDynArpInspEnable | 1.3.6.1.4.1.9.9.374.1.2.1.1.2 | truthvalue | read-write |
This object indicates whether Dynamic ARP Inspection is enabled in this VLAN. If this object is set to 'true', Dynamic ARP Inspection is enabled. If this object is set to 'false', Dynamic ARP Inspection is disabled. |
| cdaiVlanCfgTable | 1.3.6.1.4.1.9.9.374.1.2.2 | no-access |
A table provides the mechanism to control Dynamic ARP Inspection per VLAN. This table is populated for each existing VLAN in the device as well as non-existing VLANs which contains the Dynamic ARP Inspection configuration. |
|
| 1.3.6.1.4.1.9.9.374.1.2.2.1 | no-access |
A row instance contains the Dynamic ARP inspection configuration for a specific VLAN in the device. |
||
| cdaiVlanId | 1.3.6.1.4.1.9.9.374.1.2.2.1.1 | vlanindex | no-access |
This object indicates the VLAN number. |
| cdaiVlanDynArpInspAdmin | 1.3.6.1.4.1.9.9.374.1.2.2.1.2 | integer | read-only |
This object specifies the administrative status of Dynamic ARP Inspection feature in this VLAN. If this object value is 'enable', Dynamic ARP Inspection is enabled. If this object value is 'disable', Dynamic ARP Inspection is disabled. Enumeration: 'enable': 1, 'disable': 2. |
| cdaiVlanDynArpInspOper | 1.3.6.1.4.1.9.9.374.1.2.2.1.3 | integer | read-only |
This object indicates the operational status of Dynamic ARP Inspection feature in this VLAN. If this object is 'active', Dynamic ARP Inspection is operationally active. If this object is 'inactive', Dynamic ARP Inspection is operationally inactive. Enumeration: 'active': 1, 'inactive': 2. |
| cdaiVlanFilterArpAclName | 1.3.6.1.4.1.9.9.374.1.2.2.1.4 | snmpadminstring | read-only |
This object specifies an ARP ACL name that Dynamic ARP Inspection feature uses to check the validity of the bindings information in ARP body. An emptry string indicates that no such ARP ACL is configured for this purpose. |
| cdaiVlanFilterArpAclStatic | 1.3.6.1.4.1.9.9.374.1.2.2.1.5 | truthvalue | read-only |
This object specifies whether the ARP ACL denoted by cdaiVlanFilterArpAclName is statically applied by Dynamic ARP Inspection feature. This object does not take effect if value of cdaiVlanFilterArpAclName on the row is an empty string. 'true' indicates that ARP ACL is applied statically. The action (denied or permitted) results from applying the ARP ACL is final and ARP packet is not compared against DHCP bindings information. 'false' indicates ARP ACL is not applied statically. If ARP packet is not explicitly classified by ARP ACL, it will be compared against DHCP bindings information. |
| cdaiVlanAclLogging | 1.3.6.1.4.1.9.9.374.1.2.2.1.6 | integer | read-only |
This object specifies the logging configuration that Dynamic ARP Inspection feature applies to ARP packets when they are classified by the configured ACL. 'none' indicates that no logging is performed when packets are classified by the configured ACL. 'aclMatch' indicates that logging is performed when packets are classified by the configured ACL and the matched ACE specified a logging action. 'deny' indicates that logging is performed when packets is denied by the configured ACL. Enumeration: 'none': 1, 'deny': 3, 'aclMatch': 2. |
| cdaiVlanDhcpBindingLogging | 1.3.6.1.4.1.9.9.374.1.2.2.1.7 | integer | read-only |
This object specifies packet logging configuration performed by Dynamic ARP Inspection feature when ARP packets is compared against DHCP bindings information. 'none' indicates that no packet logging is performed. 'permit' indicates that packet logging is performed only for packets that are permitted as a result of comparing with DHCP bindings information. 'deny' indicates that packet logging is performed only for packets that are denied as a result of comparing with DHCP bindings information. 'all' indicates that packet logging is performed for all packets that are permitted or denied as a result of comparing with DHCP bindings information. Enumeration: 'none': 1, 'deny': 3, 'all': 4, 'permit': 2. |
| cdaiVlanArpProbeLogging | 1.3.6.1.4.1.9.9.374.1.2.2.1.8 | truthvalue | read-only |
The objects specifies if ARP-Probe packets will be logged by Dynamic ARP Inspection feature. 'true' indicates ARP-Probe packets will be logged. 'false' indicates ARP-Probe packets will not be logged. |
| cdaiVlanCfgStorageType | 1.3.6.1.4.1.9.9.374.1.2.2.1.9 | storagetype | read-only |
The objects specifies the storage type for this conceptual row. |
| cdaiVlanCfgRowStatus | 1.3.6.1.4.1.9.9.374.1.2.2.1.10 | rowstatus | read-only |
The status of this conceptual row entry. This object is used to manage creation and deletion of rows in this table. Deletion of an entry in this table is only allowed if the VLAN indicated by its row index object does not exist in the device. Writable objects can be modified at any time even while the row is active. |
| cdaiInterface | 1.3.6.1.4.1.9.9.374.1.3 | |||
| cdaiIfConfigTable | 1.3.6.1.4.1.9.9.374.1.3.1 | no-access |
A table provides the mechanism to configure the trust state for Dynamic ARP Inspection purpose at each physical interface capable of this feature. Some of the interfaces (but not limited to) for which this feature might be applicable are: ifType = ethernetCsmacd(6). |
|
| 1.3.6.1.4.1.9.9.374.1.3.1.1 | no-access |
A row instance contains the configuration to enable or disable trust state for Dynamic ARP Inspection at each physical interface capable of this feature. |
||
| cdaiIfTrustEnable | 1.3.6.1.4.1.9.9.374.1.3.1.1.1 | truthvalue | read-write |
This object indicates whether the interface is trusted for Dynamic ARP Inspection purpose. If this object is set to 'true', the interface is trusted. ARP packets coming to this interface will be forwarded without checking. If this object is set to 'false', the interface is not trusted. ARP packets coming to this interface will be subjected to ARP inspection. |
| cdaiIfRateLimitTable | 1.3.6.1.4.1.9.9.374.1.3.2 | no-access |
A table provides the mechanism to configure the rate limit for Dynamic ARP Inspection purpose at each physical interface capable of this feature. |
|
| 1.3.6.1.4.1.9.9.374.1.3.2.1 | no-access |
A row instance contains the configuration of rate limit Dynamic ARP Inspection at each physical interface capable of this feature. |
||
| cdaiIfRateLimit | 1.3.6.1.4.1.9.9.374.1.3.2.1.1 | unsigned32 | read-write |
This object indicates rate limit value for Dynamic ARP Inspection purpose. If the incoming rate of ARP packets exceeds the value of this object, ARP packets will be dropped. |
| cdaiStatistics | 1.3.6.1.4.1.9.9.374.1.4 | |||
| cdaiVlanStatsTable | 1.3.6.1.4.1.9.9.374.1.4.1 | no-access |
A table lists the Dynamic Arp Inspection statistics per VLAN. |
|
| 1.3.6.1.4.1.9.9.374.1.4.1.1 | no-access |
A row instance contains Dynamic ARP Inspection statistics information for each VLAN. |
||
| cdaiVlanStatsIndex | 1.3.6.1.4.1.9.9.374.1.4.1.1.1 | vlanindex | no-access |
This object indicates the VLAN number. |
| cdaiVlanForwarded | 1.3.6.1.4.1.9.9.374.1.4.1.1.2 | counter32 | read-only |
This object indicates the number of ARP packets forwarded by Dynamic Arp Inspection feature. |
| cdaiVlanDropped | 1.3.6.1.4.1.9.9.374.1.4.1.1.3 | counter32 | read-only |
This object indicates the number of ARP packets dropped by Dynamic ARP Inspection feature. |
| cdaiVlanAclPermitted | 1.3.6.1.4.1.9.9.374.1.4.1.1.4 | counter32 | read-only |
This object indicates the number of ARP packets permitted by the configured ACL. |
| cdaiVlanDhcpBindingsPermitted | 1.3.6.1.4.1.9.9.374.1.4.1.1.5 | counter32 | read-only |
This object indicates the number of DHCP-binding permitted ARP packets. |
| cdaiVlanAclDenied | 1.3.6.1.4.1.9.9.374.1.4.1.1.6 | counter32 | read-only |
This object indicates the number of ARP packets denied by the configured ACL. |
| cdaiVlanDhcpBindingDenied | 1.3.6.1.4.1.9.9.374.1.4.1.1.7 | counter32 | read-only |
This object indicates the number of DHCP-binding denied ARP packets. |
| cdaiVlanSrcMacValidationFailures | 1.3.6.1.4.1.9.9.374.1.4.1.1.8 | counter32 | read-only |
This object indicates the number of ARP packets that fail source MAC address validation. |
| cdaiVlanDestMacValidationFailures | 1.3.6.1.4.1.9.9.374.1.4.1.1.9 | counter32 | read-only |
This object indicates the number of ARP packets that fail destination MAC address validation. |
| cdaiVlanIpValidationFailures | 1.3.6.1.4.1.9.9.374.1.4.1.1.10 | counter32 | read-only |
This object indicates the number of ARP packets that fail IP validation. |
| cdaiVlanArpProbePermitted | 1.3.6.1.4.1.9.9.374.1.4.1.1.11 | counter32 | read-only |
This object indicates the number of ARP Probe packets that are permitted. |
| cdaiVlanInvalidProtocolData | 1.3.6.1.4.1.9.9.374.1.4.1.1.12 | counter32 | read-only |
This object indicates the number of ARP packets that contain invalid protocol data. |
| cdaiMIBConformance | 1.3.6.1.4.1.9.9.374.2 | |||
| cdaiMIBCompliances | 1.3.6.1.4.1.9.9.374.2.1 | |||
| cdaiMIBCompliance | 1.3.6.1.4.1.9.9.374.2.1.1 |
The compliance statement for CISCO-DYNAMIC-ARP-INSPECTION-MIB. This compliance is superceded by cdaiMIBCompliance1. |
||
| cdaiMIBCompliance1 | 1.3.6.1.4.1.9.9.374.2.1.2 |
The compliance statement for CISCO-DYNAMIC-ARP-INSPECTION-MIB |
||
| cdaiMIBGroups | 1.3.6.1.4.1.9.9.374.2.2 | |||
| cdaiGlobalLoggingGroup | 1.3.6.1.4.1.9.9.374.2.2.1 |
A collection of object which is used to configure Dynamic ARP Inspection logging. |
||
| cdaiVlanConfigGroup | 1.3.6.1.4.1.9.9.374.2.2.2 |
A collection of object which are used to configure as well as show information regarding the Dynamic ARP Inspection feature per VLAN. |
||
| cdaiIfConfigGroup | 1.3.6.1.4.1.9.9.374.2.2.3 |
A collection of object which are used to configure as well as show information regarding the interface trust state for Dynamic ARP Inspection purpose. |
||
| cdaiIfRateLimitGroup | 1.3.6.1.4.1.9.9.374.2.2.4 |
A collection of object which are used to configure as well as show information regarding the rate limit per interface for Dynamic ARP Inspection purpose. |
||
| cdaiLoggingConfigGroup | 1.3.6.1.4.1.9.9.374.2.2.5 |
A collection of object which provides logging configuration for Dynamic ARP Inspection feature. |
||
| cdaiAddressValidationGroup | 1.3.6.1.4.1.9.9.374.2.2.6 |
A collection of object which provides address validation configuration for Dynamic ARP Inspection feature. |
||
| cdaiVlanCfgGroup | 1.3.6.1.4.1.9.9.374.2.2.7 |
A collection of object which provides additional VLAN configuration for Dynamic ARP Inspection feature. |
||
| cdaiVlanStatisticsGroup | 1.3.6.1.4.1.9.9.374.2.2.8 |
A collection of object which provides Dynamic ARP Inspection statistics per VLAN. |
||
| cdaiLogBufferGroup | 1.3.6.1.4.1.9.9.374.2.2.9 |
A collection of object which provides logging information for Dynamic ARP Inspection feature. |
||
| cdaiVlanExtStatisticsGroup | 1.3.6.1.4.1.9.9.374.2.2.10 |
A collection of object which provides additional Dynamic ARP Inspection statistics per VLAN. |
||
| cdaiVlanArpProbeGroup | 1.3.6.1.4.1.9.9.374.2.2.11 |
A collection of object which provides additional VLAN configuration for ARP Probe packets. |
||
| cdaiLogBufferActionGroup | 1.3.6.1.4.1.9.9.374.2.2.12 |
A collection of object which provides log buffer action. |
||