HP-ICF-ARP-PROTECT: View SNMP OID List / Download MIB
VENDOR: HEWLETT-PACKARD
Home | MIB: HP-ICF-ARP-PROTECT | |||
---|---|---|---|---|
Download as: |
Download standard MIB format if you are planning to load a MIB file into some system (OS, Zabbix, PRTG ...) or view it with a MIB browser. CSV is more suitable for analyzing and viewing OID' and other MIB objects in excel. JSON and YAML formats are usually used in programing even though some systems can use MIB in YAML format (like Logstash).
|
|||
Object Name | OID | Type | Access | Info |
hpicfArpProtect | 1.3.6.1.4.1.11.2.14.11.5.1.37 |
This MIB module contains HP proprietary objects for managing Dynamic ARP Protection. |
||
hpicfArpProtectNotifications | 1.3.6.1.4.1.11.2.14.11.5.1.37.0 | |||
hpicfArpProtectErrantReply | 1.3.6.1.4.1.11.2.14.11.5.1.37.0.1 |
An hpicfArpProtectErrantReply notification signifies that the ARP protection entity is enabled and has detected an errant ARP reply packet. The source and destination addresses from the packet header are included in the notification. |
||
hpicfArpProtectObjects | 1.3.6.1.4.1.11.2.14.11.5.1.37.1 | |||
hpicfArpProtectConfig | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1 | |||
hpicfArpProtectGlobalCfg | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1 | |||
hpicfArpProtectEnable | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.1 | truthvalue | read-write |
The administrative status of the ARP Protection feature. |
hpicfArpProtectVlanEnable | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.2 | octet string | read-write |
The administrative status for Dynamic ARP Protection on each VLAN. There will be one bit in this string for each possible VLAN ID. Each octet within this value specifies a set of eight VLANs, with the first octet specifying VLAN IDs 1 through 8, the second octet specifying VLAN IDs 9 through 16, etc. Within each octet, the most significant bit represents the lowest numbered VLAN ID, and the least significant bit represents the highest numbered VLAN ID. Thus, each possible VLAN ID of the bridge is represented by a single bit within the value of this object. If that bit has a value of '1', then Dynamic ARP Protection is enabled on that VLAN; Dynamic ARP Protection is not enabled on the VLAN its bit has a value of '0'. |
hpicfArpProtectValidation | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.3 | bits | read-write |
Additional validation checks to perform on ARP packets during Dynamic ARP Protection. srcMac - Drop any ARP request or response packet where the source MAC address in the Ethernet header does not match the sender MAC address in the body of the ARP packet. dstMac - Drop any unicast ARP response packet where the destination MAC address in the Ethernet header does not match the target MAC address in the body of the ARP packet. ip - Drop any ARP packet where the sender IP address is invalid. Drop any ARP response packet where the target IP address is invalid. Invalid addresses include 0.0.0.0, 255.255.255.255, all IP multicast addresses, and all class E IP addresses. These checks are only performed for ARP packets received on untrusted ports in VLANs that are enabled for Dynamic ARP Protection. ARP packets received on trusted ports, and ARP packets in VLANs for which Dynamic ARP Protection is disabled, are forwarded without validation. Bits: 'ip': 2, 'dstMac': 1, 'srcMac': 0. |
hpicfArpProtectErrantNotifyEnable | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.4 | integer | read-write |
Provides operational control of hpicfArpProtectErrantReply. Enumeration: 'disabled': 2, 'enabled': 1. |
hpicfArpProtectPortTable | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.2 | no-access |
Per-interface configuration for Dynamic ARP Protection. |
|
1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.2.1 | no-access |
Dynamic ARP Protection configuration information for a single port. |
||
hpicfArpProtectPortTrust | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.2.1.1 | truthvalue | read-write |
This object indicates whether this port is trusted for Dynamic ARP Protection. |
hpicfArpProtectStatus | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2 | |||
hpicfArpProtectVlanStatTable | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1 | no-access |
Per-VLAN statistics for Dynamic ARP Protection. |
|
1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1 | no-access |
Dynamic ARP Protection statistics for a single VLAN. |
||
hpicfArpProtectVlanStatIndex | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.1 | vlanindex | no-access |
This variable uniquely identifies the VLAN that the counters in this entry apply to. The VLAN identified by this object is the same VLAN as identified by the identical value in the dot1qVlanIndex object. |
hpicfArpProtectVlanStatForwards | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.2 | counter32 | read-only |
The number of ARP packets received on untrusted ports in this VLAN that were successfully validated and forwarded. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled. |
hpicfArpProtectVlanStatBadPkts | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.3 | counter32 | read-only |
The number of ARP packets received on untrusted ports that were dropped because they were malformed in some way. This may include an unrecognized opcode, an unrecognized protocol type, an unrecognized hardware type, an invalid protocol address length, or an invalid hardware address length. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled. |
hpicfArpProtectVlanStatBadBindings | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.4 | counter32 | read-only |
The number of ARP packets received on untrusted ports that were dropped because they advertized a source IP-to-MAC binding that did not match a known, valid binding. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled. |
hpicfArpProtectVlanStatBadSrcMacs | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.5 | counter32 | read-only |
The number of ARP packets received on untrusted ports that were dropped because the source MAC address in the Ethernet header did not match the sender MAC address in the body of the ARP packet. This count does not increment when source MAC validation is not enabled. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled. |
hpicfArpProtectVlanStatBadDstMacs | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.6 | counter32 | read-only |
The number of unicast ARP response packets received on untrusted ports that were dropped because the destination MAC address in the Ethernet header did not match the target MAC address in the body of the ARP packet. This count does not increment when destination address validation is not enabled. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled. |
hpicfArpProtectVlanStatBadIpAddrs | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.7 | counter32 | read-only |
The number of ARP packets received on untrusted ports that were dropped because they contained an invalid sender IP address, or they contained an invalid target IP address in an ARP response. This count does not increment when IP address validation is not enabled. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled. |
hpicfArpProtectErrantCnt | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.3 | counter32 | no-access |
A count of hpicfArpProtectErrantReply sent from the ARP Protection entity to the SNMP entity. This count may differ from the count of notifications transmitted due to rate limiting or configuration. |
hpicfArpProtectErrantSrcMac | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.4 | macaddress | no-access |
Errant source MAC address included in a hpicfArpProtectNotification. |
hpicfArpProtectErrantSrcIpType | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.5 | inetaddresstype | no-access |
IP Address type reported in hpicfArpProtectErrantSrcIp. |
hpicfArpProtectErrantSrcIp | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.6 | inetaddress | no-access |
Errant source IP address included in a hpicfArpProtectNotification. |
hpicfArpProtectErrantDestMac | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.7 | macaddress | no-access |
Errant destination MAC address included in a hpicfArpProtectNotification. |
hpicfArpProtectErrantDestIpType | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.8 | inetaddresstype | no-access |
IP Address type reported in hpicfArpProtectErrantDestIp. |
hpicfArpProtectErrantDestIp | 1.3.6.1.4.1.11.2.14.11.5.1.37.1.9 | inetaddress | no-access |
Errant destination IP address included in a hpicfArpProtectNotification. |
hpicfArpProtectConformance | 1.3.6.1.4.1.11.2.14.11.5.1.37.2 | |||
hpicfArpProtectGroups | 1.3.6.1.4.1.11.2.14.11.5.1.37.2.1 | |||
hpicfArpProtectBaseGroup | 1.3.6.1.4.1.11.2.14.11.5.1.37.2.1.1 |
A collection of objects for configuring and monitoring the base Dynamic ARP Protection functionality. |
||
hpicfArpProtectionNotifications | 1.3.6.1.4.1.11.2.14.11.5.1.37.2.1.2 |
A group of Notifications whose implementation is mandatory when HP-ICF-ARP-PROTECTION is implemented. |
||
hpicfArpProtectCompliances | 1.3.6.1.4.1.11.2.14.11.5.1.37.2.2 | |||
hpicfArpProtectCompliance | 1.3.6.1.4.1.11.2.14.11.5.1.37.2.2.1 |
The compliance statement for HP switches that support Dynamic ARP Protection. |