CISCO-DYNAMIC-ARP-INSPECTION-MIB
- Registered at
- 1.3.6.1.4.1.9.9.374
- Last updated
- 2011-03-21 00:00
- Organization
- Cisco Systems, Inc.
- Revisions
- 2011-03-21 00:00, 2003-10-29 15:00
- Namespace
- cisco
- Source file
CISCO-DYNAMIC-ARP-INSPECTION-MIB- Digest
sha256:3e9f04efba828eaa7d5e2985c34cda0d77425ffb20c49d85a1aec972ea254298
Description
The MIB module is for configuration of Dynamic ARP Inspection feature. Dynamic ARP Inspection is a security mechanism which validate ARP packets seen on access ports.
Contact
Cisco Systems Customer Service Postal: 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-lan-switch-snmp@cisco.com
Imports
| From | Symbols |
|---|---|
| CISCO-PRIVATE-VLAN-MIB | VlanIndexOrZero |
| CISCO-SMI | ciscoMgmt |
| IF-MIB | InterfaceIndexOrZero, ifIndex |
| INET-ADDRESS-MIB | InetAddress, InetAddressType |
| Q-BRIDGE-MIB | VlanIndex |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Counter32, Gauge32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso |
| SNMPv2-TC | DateAndTime, DisplayString, MacAddress, RowStatus, StorageType, TEXTUAL-CONVENTION, TruthValue |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
BRIDGE-MIB CISCO-DYNAMIC-ARP-INSPECTION-MIB CISCO-PRIVATE-VLAN-MIB CISCO-SMI CISCO-TC CISCO-VTP-MIB IANAifType-MIB IF-MIB INET-ADDRESS-MIB P-BRIDGE-MIB Q-BRIDGE-MIB RFC1158-MIB RFC1271-MIB RMON-MIB RMON2-MIB SNMP-FRAMEWORK-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC TOKEN-RING-RMON-MIB
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| cdaiMIBNotifs OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.374.0 | |||
| cdaiMIBObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.374.1 | |||
| cdaiGlobal OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.374.1.1 | |||
| cdaiLoggingEnable OBJECT-TYPE This object indicates whether the Dynamic ARP Inspection logging is enabled on the device. If this object is set to 'true', Dynamic ARP Inspection logging is enabled. If this object is set to 'false', Dynamic ARP Inspection logging is disabled. | 1.3.6.1.4.1.9.9.374.1.1.1 | TruthValue | read-write | current |
| cdaiAddressValidate OBJECT-TYPE This object specifies address validation criteria used by Dynamic ARP Inspection feature. 'srcMacAddress' indicates that source MAC address in ethernet header is checked against the sender MAC address in ARP packet. When this bit is on, packets with different MAC addresses are classified as invalid packets and are dropped. This checking is done for both ARP request and ARP response packet. 'dstMacAddress' indicates that the destination MAC address in ethernet header is checked against the target MAC address in ARP packet. When this bit is on, packets with different addresses are classified as invalid packets and are dropped. This checking is done for ARP response packet only. 'ip' indicates that the IP addresses in ARP packet are checked for invalid or unexpected IP addresses. Addresses such as 0.0.0.0, 255.255.255.255 and all IP multicast addresses are considered invalid. When this bit is on, both the sender and target IP addresses in the ARP packet are checked. This checking is done for both ARP request and response packet. 'ipAllowZeros' works the same as 'ip' but address 0.0.0.0 is allowed. 'ip' and 'ipAllowZeros' are mutually exclusive. | 1.3.6.1.4.1.9.9.374.1.1.2 | Bits {srcMacAddress(0), dstMacAddress(1), ip(2), ipAllowZeros(3)} | read-write | current |
| cdaiLogBufferSize OBJECT-TYPE This object specifies the size of the logging buffer. | 1.3.6.1.4.1.9.9.374.1.1.3 | Unsigned32 | read-write | current |
| cdaiLoggingRate OBJECT-TYPE This object specifies the maximum number of logging entries will be logged during the time period denoted by cdaiLoggingInterval object for system message generation purpose. Zero value indicates that entry is placed in the log buffer, but a system message is not generated. | 1.3.6.1.4.1.9.9.374.1.1.4 | Unsigned32 | read-write | current |
| cdaiLoggingInterval OBJECT-TYPE This object specifies the logging interval for system message generation purpose. Zero value indicates that system message is immediately generated (and the log buffer is always empty). Value of this object and value of cdaiLoggingRate object cannot be zero at the same time. | 1.3.6.1.4.1.9.9.374.1.1.5 | Unsigned32 | read-write | current |
| cdaiLogBufferAction OBJECT-TYPE This objects specifies the action can be taken with respect to logging buffer. 'none' indicates that no operation is performed. This object always return value 'none' when read. 'clear' indicates that all entries in cdaiLoggingBufferTable will be cleared. | 1.3.6.1.4.1.9.9.374.1.1.6 | INTEGER {none(1), clear(2)} | read-write | current |
| cdaiLogBufferTable OBJECT-TYPE A table provides the information of logged ARP flows for system message generation. | 1.3.6.1.4.1.9.9.374.1.1.7 | not-accessible | current | |
| cdaiLogBufferEntry OBJECT-TYPE A row instance contains logged ARP flow data for system message generation. Entries in the log are cleared once system messages are generated on their behalf. A special entry will be populated for accounting drops of all flows that result in exceeding the number of entries of the log buffer. Special entry only contains packets counter and timestamps information. The rest of its fields are irrelevant. | 1.3.6.1.4.1.9.9.374.1.1.7.1 | not-accessible | current | |
| cdaiLogBufferIndex OBJECT-TYPE This object uniquely identifies a logged ARP flow in the buffer. | 1.3.6.1.4.1.9.9.374.1.1.7.1.1 | Unsigned32 (1..65535) | not-accessible | current |
| cdaiLogBufferInterface OBJECT-TYPE This object indicates the interface which sent the logged ARP flow. Zero value indicates the special entry. | 1.3.6.1.4.1.9.9.374.1.1.7.1.2 | InterfaceIndexOrZero | read-only | current |
| cdaiLogBufferVlan OBJECT-TYPE This object indicates the VLAN number which the logged ARP flow belongs to. Zero value indicates the special entry. | 1.3.6.1.4.1.9.9.374.1.1.7.1.3 | VlanIndexOrZero | read-only | current |
| cdaiLogBufferSenderMacAddress OBJECT-TYPE This object indicates the sender MAC address of the logged ARP flow. All zeros MAC address value indicates the special entry. | 1.3.6.1.4.1.9.9.374.1.1.7.1.4 | MacAddress | read-only | current |
| cdaiLogBufferSenderAddressType OBJECT-TYPE This object indicates the sender Internet address type of the logged ARP flow. | 1.3.6.1.4.1.9.9.374.1.1.7.1.5 | InetAddressType | read-only | current |
| cdaiLogBufferSenderIpAddress OBJECT-TYPE This object indicates the sender Internet address of the logged ARP flow. The type of this address is determined by the value of cdaiLogBufferSenderAddressType object. All zeros IP address value indicates the special entry. | 1.3.6.1.4.1.9.9.374.1.1.7.1.6 | InetAddress | read-only | current |
| cdaiLogBufferReason OBJECT-TYPE This object indicates the reason for logging this ARP flow. 'unknown' indicates unknown reason. 'deny' indicates that this ARP flow is logged because it is denied by Dynamic ARP Inspection feature. 'aclDeny' indicates that this ARP flow is logged because it is denied by a configured ARP ACL. 'aclPermit' indicates that this ARP flow is logged because it is permitted by a configured ARP ACL. 'dhcpDeny' indicates that this ARP flow is logged because it is denied when comparing with DHCP bindings information. 'dhcpPermit' indicates that this ARP flow is logged because it is permitted when comparing with DHCP binding information. 'probePermit' indicates that this ARP flow is logged because it is a permitted ARP-Probe flow. | 1.3.6.1.4.1.9.9.374.1.1.7.1.7 | INTEGER {unknown(1), deny(2), aclDeny(3), aclPermit(4), dhcpDeny(5), dhcpPermit(6), probePermit(7)} | read-only | current |
| cdaiLogBufferLastUpdate OBJECT-TYPE This object indicates the timestamp when the last packet of this flow was accounted by the system. | 1.3.6.1.4.1.9.9.374.1.1.7.1.8 | DateAndTime | read-only | current |
| cdaiLogBufferPacketsCount OBJECT-TYPE This object indicates the number of packets of this ARP flow was accounted by the system. | 1.3.6.1.4.1.9.9.374.1.1.7.1.9 | Gauge32 | read-only | current |
| cdaiVlan OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.374.1.2 | |||
| cdaiVlanConfigTable OBJECT-TYPE A table provides the mechanism to control Dynamic ARP Inspection per VLAN. When a VLAN is created in a device supporting this table, a corresponding entry of this table will be added. | 1.3.6.1.4.1.9.9.374.1.2.1 | not-accessible | current | |
| cdaiVlanConfigEntry OBJECT-TYPE A row instance contains the configuration to enable or disable Dynamic ARP Inspection at each existing VLAN. | 1.3.6.1.4.1.9.9.374.1.2.1.1 | not-accessible | current | |
| cdaiVlanIndex OBJECT-TYPE This object indicates the VLAN number on which Dynamic ARP Inspection feature is configured. | 1.3.6.1.4.1.9.9.374.1.2.1.1.1 | VlanIndex | not-accessible | current |
| cdaiVlanDynArpInspEnable OBJECT-TYPE This object indicates whether Dynamic ARP Inspection is enabled in this VLAN. If this object is set to 'true', Dynamic ARP Inspection is enabled. If this object is set to 'false', Dynamic ARP Inspection is disabled. | 1.3.6.1.4.1.9.9.374.1.2.1.1.2 | TruthValue | read-write | current |
| cdaiVlanCfgTable OBJECT-TYPE A table provides the mechanism to control Dynamic ARP Inspection per VLAN. This table is populated for each existing VLAN in the device as well as non-existing VLANs which contains the Dynamic ARP Inspection configuration. | 1.3.6.1.4.1.9.9.374.1.2.2 | not-accessible | current | |
| cdaiVlanCfgEntry OBJECT-TYPE A row instance contains the Dynamic ARP inspection configuration for a specific VLAN in the device. | 1.3.6.1.4.1.9.9.374.1.2.2.1 | not-accessible | current | |
| cdaiVlanId OBJECT-TYPE This object indicates the VLAN number. | 1.3.6.1.4.1.9.9.374.1.2.2.1.1 | VlanIndex | not-accessible | current |
| cdaiVlanDynArpInspAdmin OBJECT-TYPE This object specifies the administrative status of Dynamic ARP Inspection feature in this VLAN. If this object value is 'enable', Dynamic ARP Inspection is enabled. If this object value is 'disable', Dynamic ARP Inspection is disabled. | 1.3.6.1.4.1.9.9.374.1.2.2.1.2 | INTEGER {enable(1), disable(2)} | read-create | current |
| cdaiVlanDynArpInspOper OBJECT-TYPE This object indicates the operational status of Dynamic ARP Inspection feature in this VLAN. If this object is 'active', Dynamic ARP Inspection is operationally active. If this object is 'inactive', Dynamic ARP Inspection is operationally inactive. | 1.3.6.1.4.1.9.9.374.1.2.2.1.3 | INTEGER {active(1), inactive(2)} | read-only | current |
| cdaiVlanFilterArpAclName OBJECT-TYPE This object specifies an ARP ACL name that Dynamic ARP Inspection feature uses to check the validity of the bindings information in ARP body. An emptry string indicates that no such ARP ACL is configured for this purpose. | 1.3.6.1.4.1.9.9.374.1.2.2.1.4 | SnmpAdminString | read-create | current |
| cdaiVlanFilterArpAclStatic OBJECT-TYPE This object specifies whether the ARP ACL denoted by cdaiVlanFilterArpAclName is statically applied by Dynamic ARP Inspection feature. This object does not take effect if value of cdaiVlanFilterArpAclName on the row is an empty string. 'true' indicates that ARP ACL is applied statically. The action (denied or permitted) results from applying the ARP ACL is final and ARP packet is not compared against DHCP bindings information. 'false' indicates ARP ACL is not applied statically. If ARP packet is not explicitly classified by ARP ACL, it will be compared against DHCP bindings information. | 1.3.6.1.4.1.9.9.374.1.2.2.1.5 | TruthValue | read-create | current |
| cdaiVlanAclLogging OBJECT-TYPE This object specifies the logging configuration that Dynamic ARP Inspection feature applies to ARP packets when they are classified by the configured ACL. 'none' indicates that no logging is performed when packets are classified by the configured ACL. 'aclMatch' indicates that logging is performed when packets are classified by the configured ACL and the matched ACE specified a logging action. 'deny' indicates that logging is performed when packets is denied by the configured ACL. | 1.3.6.1.4.1.9.9.374.1.2.2.1.6 | INTEGER {none(1), aclMatch(2), deny(3)} | read-create | current |
| cdaiVlanDhcpBindingLogging OBJECT-TYPE This object specifies packet logging configuration performed by Dynamic ARP Inspection feature when ARP packets is compared against DHCP bindings information. 'none' indicates that no packet logging is performed. 'permit' indicates that packet logging is performed only for packets that are permitted as a result of comparing with DHCP bindings information. 'deny' indicates that packet logging is performed only for packets that are denied as a result of comparing with DHCP bindings information. 'all' indicates that packet logging is performed for all packets that are permitted or denied as a result of comparing with DHCP bindings information. | 1.3.6.1.4.1.9.9.374.1.2.2.1.7 | INTEGER {none(1), permit(2), deny(3), all(4)} | read-create | current |
| cdaiVlanArpProbeLogging OBJECT-TYPE The objects specifies if ARP-Probe packets will be logged by Dynamic ARP Inspection feature. 'true' indicates ARP-Probe packets will be logged. 'false' indicates ARP-Probe packets will not be logged. | 1.3.6.1.4.1.9.9.374.1.2.2.1.8 | TruthValue | read-create | current |
| cdaiVlanCfgStorageType OBJECT-TYPE The objects specifies the storage type for this conceptual row. | 1.3.6.1.4.1.9.9.374.1.2.2.1.9 | StorageType | read-create | current |
| cdaiVlanCfgRowStatus OBJECT-TYPE The status of this conceptual row entry. This object is used to manage creation and deletion of rows in this table. Deletion of an entry in this table is only allowed if the VLAN indicated by its row index object does not exist in the device. Writable objects can be modified at any time even while the row is active. | 1.3.6.1.4.1.9.9.374.1.2.2.1.10 | RowStatus | read-create | current |
| cdaiInterface OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.374.1.3 | |||
| cdaiIfConfigTable OBJECT-TYPE A table provides the mechanism to configure the trust state for Dynamic ARP Inspection purpose at each physical interface capable of this feature. Some of the interfaces (but not limited to) for which this feature might be applicable are: ifType = ethernetCsmacd(6). | 1.3.6.1.4.1.9.9.374.1.3.1 | not-accessible | current | |
| cdaiIfConfigEntry OBJECT-TYPE A row instance contains the configuration to enable or disable trust state for Dynamic ARP Inspection at each physical interface capable of this feature. | 1.3.6.1.4.1.9.9.374.1.3.1.1 | not-accessible | current | |
| cdaiIfTrustEnable OBJECT-TYPE This object indicates whether the interface is trusted for Dynamic ARP Inspection purpose. If this object is set to 'true', the interface is trusted. ARP packets coming to this interface will be forwarded without checking. If this object is set to 'false', the interface is not trusted. ARP packets coming to this interface will be subjected to ARP inspection. | 1.3.6.1.4.1.9.9.374.1.3.1.1.1 | TruthValue | read-write | current |
| cdaiIfRateLimitTable OBJECT-TYPE A table provides the mechanism to configure the rate limit for Dynamic ARP Inspection purpose at each physical interface capable of this feature. | 1.3.6.1.4.1.9.9.374.1.3.2 | not-accessible | current | |
| cdaiIfRateLimitEntry OBJECT-TYPE A row instance contains the configuration of rate limit Dynamic ARP Inspection at each physical interface capable of this feature. | 1.3.6.1.4.1.9.9.374.1.3.2.1 | not-accessible | current | |
| cdaiIfRateLimit OBJECT-TYPE This object indicates rate limit value for Dynamic ARP Inspection purpose. If the incoming rate of ARP packets exceeds the value of this object, ARP packets will be dropped. | 1.3.6.1.4.1.9.9.374.1.3.2.1.1 | Unsigned32 | read-write | current |
| cdaiStatistics OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.374.1.4 | |||
| cdaiVlanStatsTable OBJECT-TYPE A table lists the Dynamic Arp Inspection statistics per VLAN. | 1.3.6.1.4.1.9.9.374.1.4.1 | not-accessible | current | |
| cdaiVlanStatsEntry OBJECT-TYPE A row instance contains Dynamic ARP Inspection statistics information for each VLAN. | 1.3.6.1.4.1.9.9.374.1.4.1.1 | not-accessible | current | |
| cdaiVlanStatsIndex OBJECT-TYPE This object indicates the VLAN number. | 1.3.6.1.4.1.9.9.374.1.4.1.1.1 | VlanIndex | not-accessible | current |
| cdaiVlanForwarded OBJECT-TYPE This object indicates the number of ARP packets forwarded by Dynamic Arp Inspection feature. | 1.3.6.1.4.1.9.9.374.1.4.1.1.2 | Counter32 | read-only | current |
| cdaiVlanDropped OBJECT-TYPE This object indicates the number of ARP packets dropped by Dynamic ARP Inspection feature. | 1.3.6.1.4.1.9.9.374.1.4.1.1.3 | Counter32 | read-only | current |
| cdaiVlanAclPermitted OBJECT-TYPE This object indicates the number of ARP packets permitted by the configured ACL. | 1.3.6.1.4.1.9.9.374.1.4.1.1.4 | Counter32 | read-only | current |
| cdaiVlanDhcpBindingsPermitted OBJECT-TYPE This object indicates the number of DHCP-binding permitted ARP packets. | 1.3.6.1.4.1.9.9.374.1.4.1.1.5 | Counter32 | read-only | current |
| cdaiVlanAclDenied OBJECT-TYPE This object indicates the number of ARP packets denied by the configured ACL. | 1.3.6.1.4.1.9.9.374.1.4.1.1.6 | Counter32 | read-only | current |
| cdaiVlanDhcpBindingDenied OBJECT-TYPE This object indicates the number of DHCP-binding denied ARP packets. | 1.3.6.1.4.1.9.9.374.1.4.1.1.7 | Counter32 | read-only | current |
| cdaiVlanSrcMacValidationFailures OBJECT-TYPE This object indicates the number of ARP packets that fail source MAC address validation. | 1.3.6.1.4.1.9.9.374.1.4.1.1.8 | Counter32 | read-only | current |
| cdaiVlanDestMacValidationFailures OBJECT-TYPE This object indicates the number of ARP packets that fail destination MAC address validation. | 1.3.6.1.4.1.9.9.374.1.4.1.1.9 | Counter32 | read-only | current |
| cdaiVlanIpValidationFailures OBJECT-TYPE This object indicates the number of ARP packets that fail IP validation. | 1.3.6.1.4.1.9.9.374.1.4.1.1.10 | Counter32 | read-only | current |
| cdaiVlanArpProbePermitted OBJECT-TYPE This object indicates the number of ARP Probe packets that are permitted. | 1.3.6.1.4.1.9.9.374.1.4.1.1.11 | Counter32 | read-only | current |
| cdaiVlanInvalidProtocolData OBJECT-TYPE This object indicates the number of ARP packets that contain invalid protocol data. | 1.3.6.1.4.1.9.9.374.1.4.1.1.12 | Counter32 | read-only | current |
| cdaiMIBConformance OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.374.2 | |||
| cdaiMIBCompliances OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.374.2.1 | |||
| cdaiMIBGroups OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.374.2.2 |
Conformance
| Name | OID | Status |
|---|---|---|
| cdaiMIBCompliance MODULE-COMPLIANCE The compliance statement for CISCO-DYNAMIC-ARP-INSPECTION-MIB. This compliance is superceded by cdaiMIBCompliance1. | 1.3.6.1.4.1.9.9.374.2.1.1 | deprecated |
| cdaiMIBCompliance1 MODULE-COMPLIANCE The compliance statement for CISCO-DYNAMIC-ARP-INSPECTION-MIB | 1.3.6.1.4.1.9.9.374.2.1.2 | current |
| cdaiGlobalLoggingGroup OBJECT-GROUP A collection of object which is used to configure Dynamic ARP Inspection logging. | 1.3.6.1.4.1.9.9.374.2.2.1 | current |
| cdaiVlanConfigGroup OBJECT-GROUP A collection of object which are used to configure as well as show information regarding the Dynamic ARP Inspection feature per VLAN. | 1.3.6.1.4.1.9.9.374.2.2.2 | current |
| cdaiIfConfigGroup OBJECT-GROUP A collection of object which are used to configure as well as show information regarding the interface trust state for Dynamic ARP Inspection purpose. | 1.3.6.1.4.1.9.9.374.2.2.3 | current |
| cdaiIfRateLimitGroup OBJECT-GROUP A collection of object which are used to configure as well as show information regarding the rate limit per interface for Dynamic ARP Inspection purpose. | 1.3.6.1.4.1.9.9.374.2.2.4 | current |
| cdaiLoggingConfigGroup OBJECT-GROUP A collection of object which provides logging configuration for Dynamic ARP Inspection feature. | 1.3.6.1.4.1.9.9.374.2.2.5 | current |
| cdaiAddressValidationGroup OBJECT-GROUP A collection of object which provides address validation configuration for Dynamic ARP Inspection feature. | 1.3.6.1.4.1.9.9.374.2.2.6 | current |
| cdaiVlanCfgGroup OBJECT-GROUP A collection of object which provides additional VLAN configuration for Dynamic ARP Inspection feature. | 1.3.6.1.4.1.9.9.374.2.2.7 | current |
| cdaiVlanStatisticsGroup OBJECT-GROUP A collection of object which provides Dynamic ARP Inspection statistics per VLAN. | 1.3.6.1.4.1.9.9.374.2.2.8 | current |
| cdaiLogBufferGroup OBJECT-GROUP A collection of object which provides logging information for Dynamic ARP Inspection feature. | 1.3.6.1.4.1.9.9.374.2.2.9 | current |
| cdaiVlanExtStatisticsGroup OBJECT-GROUP A collection of object which provides additional Dynamic ARP Inspection statistics per VLAN. | 1.3.6.1.4.1.9.9.374.2.2.10 | current |
| cdaiVlanArpProbeGroup OBJECT-GROUP A collection of object which provides additional VLAN configuration for ARP Probe packets. | 1.3.6.1.4.1.9.9.374.2.2.11 | current |
| cdaiLogBufferActionGroup OBJECT-GROUP A collection of object which provides log buffer action. | 1.3.6.1.4.1.9.9.374.2.2.12 | current |