MIBs Depot

DLINKSW-DAI-MIB

Registered at
1.3.6.1.4.1.171.14.130
Last updated
2013-07-18 00:00
Organization
D-Link Corp.
Revisions
2013-07-18 00:00
Namespace
dlink
Source file
DLINKSW-DAI-MIB
Digest
sha256:4c671a34254d49b68df365c9400faeeb09a53e26a5c31127de7efb2dd20822b3

Description

This MIB module defines objects for Dynamic ARP Inspection.

Contact

D-Link Corporation Postal: No. 289, Sinhu 3rd Rd., Neihu District, Taipei City 114, Taiwan, R.O.C Tel: +886-2-66000123 E-mail: tsd@dlink.com.tw

Imports

FromSymbols
DLINK-ID-REC-MIBdlinkIndustrialCommon
DLINKSW-TC-MIBDlink2kVlanList
IF-MIBInterfaceIndex, ifIndex
INET-ADDRESS-MIBInetAddressIPv4
Q-BRIDGE-MIBVlanId, VlanIdOrNone
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter64, Gauge32, Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDateAndTime, DisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

BRIDGE-MIB
DLINK-ID-REC-MIB
DLINKSW-DAI-MIB
DLINKSW-TC-MIB
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
P-BRIDGE-MIB
Q-BRIDGE-MIB
RFC1158-MIB
RFC1271-MIB
RMON-MIB
RMON2-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC
TOKEN-RING-RMON-MIB

Textual conventions

NameOIDSyntaxAccessStatus
DaiRuleType
TEXTUAL-CONVENTION
The action type when the packets match the access profile. permit(1)- Indicates that packets that match the access profile are permitted to be forwarded by the switch. deny(2) - Indicates that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered.
current

Objects

NameOIDSyntaxAccessStatus
dDaiNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.0
dDaiObjects
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.1
dDaiGlobal
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.1.1
dDaiAddressValidate
OBJECT-TYPE
This object specifies address validation criteria used by Dynamic ARP Inspection feature. 'srcMacAddress' - indicates that source MAC address in ethernet header is checked against the sender MAC address in ARP packet. When this bit is on, packets with different MAC addresses are classified as invalid packets and are dropped. This checking is done for both ARP request and ARP response packet. 'dstMacAddress' indicates that the destination MAC address in ethernet header is checked against the target MAC address in ARP packet. When this bit is on, packets with different addresses are classified as invalid packets and are dropped. This checking is done for ARP response packet only. 'ip' indicates that the IP addresses in ARP packet are checked for invalid or unexpected IP addresses. Addresses such as 0.0.0.0, 255.255.255.255 and all IP multicast addresses are considered invalid. When this bit is on, both the sender and target IP addresses in the ARP packet are checked. This checking is done for both ARP request and response packet.
1.3.6.1.4.1.171.14.130.1.1.1Bits {srcMacAddress(0), dstMacAddress(1), ip(2)}read-writecurrent
dDaiLogBufferSize
OBJECT-TYPE
This object specifies the buffer entry number.
1.3.6.1.4.1.171.14.130.1.1.2Unsigned32read-writecurrent
dDaiClearLogBuffer
OBJECT-TYPE
This object clears all entries in dDaiLoggingBufferTable , when set to 'clear'. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.130.1.1.3INTEGER {clear(1), noOp(2)}read-writecurrent
dDaiLogBufferTable
OBJECT-TYPE
A table provides the information of logged ARP flows for system message generation.
1.3.6.1.4.1.171.14.130.1.1.4not-accessiblecurrent
dDaiLogBufferEntry
OBJECT-TYPE
An entry contains logged ARP flow data for system message generation. Entries in the log are cleared once system messages are generated on their behalf. A special entry will be populated for accounting drops of all flows that result in exceeding the number of entries of the log buffer. This special entry only contains packets counter and timestamps information.
1.3.6.1.4.1.171.14.130.1.1.4.1not-accessiblecurrent
dDaiLogBufferIndex
OBJECT-TYPE
This object uniquely identifies a logged ARP flow in the buffer.
1.3.6.1.4.1.171.14.130.1.1.4.1.1Unsigned32 (1..65535)not-accessiblecurrent
dDaiLogBufferInterface
OBJECT-TYPE
This object indicates the interface which sent the logged ARP flow.
1.3.6.1.4.1.171.14.130.1.1.4.1.2InterfaceIndexread-onlycurrent
dDaiLogBufferVlan
OBJECT-TYPE
This object indicates the VLAN ID which the logged ARP flow belongs to.
1.3.6.1.4.1.171.14.130.1.1.4.1.3VlanIdOrNoneread-onlycurrent
dDaiLogBufferSenderMacAddress
OBJECT-TYPE
This object indicates the sender MAC address of the logged ARP flow. All zeros MAC address value indicates the special entry.
1.3.6.1.4.1.171.14.130.1.1.4.1.4MacAddressread-onlycurrent
dDaiLogBufferSenderIpAddress
OBJECT-TYPE
This object indicates the sender Internet address of the logged ARP flow. The type of this address is determined by the value of dDaiLogBufferSenderAddressType object. All zeros IP address value indicates the special entry.
1.3.6.1.4.1.171.14.130.1.1.4.1.5InetAddressIPv4read-onlycurrent
dDaiLogBufferLastUpdate
OBJECT-TYPE
This object indicates the timestamp when the last packet of this flow was accounted by the system.
1.3.6.1.4.1.171.14.130.1.1.4.1.6DateAndTimeread-onlycurrent
dDaiLogBufferPacketsCount
OBJECT-TYPE
This object indicates the number of packets of this ARP flow was accounted by the system.
1.3.6.1.4.1.171.14.130.1.1.4.1.7Gauge32read-onlycurrent
dDaiVlan
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.1.2
dDaiVlanCrlFirst2K
OBJECT-TYPE
This object specifies the Dynamic ARP Inspection enabled VLAN in a string of octets containing one bit per VLAN for VLANs 1 to 2048. If the bit is set to '1', then the VLAN is enabled for Dynamic ARP Inspection.
1.3.6.1.4.1.171.14.130.1.2.1Dlink2kVlanListread-writecurrent
dDaiVlanCrlSecond2K
OBJECT-TYPE
This object specifies the Dynamic ARP Inspection enabled VLAN in a string of octets containing one bit per VLAN for VLANs 2049 to 4094. If the bit is set to '1', then the VLAN is enabled for Dynamic ARP Inspection.
1.3.6.1.4.1.171.14.130.1.2.2Dlink2kVlanListread-writecurrent
dDaiVlanCfgTable
OBJECT-TYPE
A table contains a list of configuration for Dynamic ARP Inspection per VLAN.
1.3.6.1.4.1.171.14.130.1.2.3not-accessiblecurrent
dDaiVlanCfgEntry
OBJECT-TYPE
A row instance contains the Dynamic ARP inspection configuration for a specific VLAN in the device.
1.3.6.1.4.1.171.14.130.1.2.3.1not-accessiblecurrent
dDaiVlanCfgId
OBJECT-TYPE
This object indicates the VLAN ID of the entry.
1.3.6.1.4.1.171.14.130.1.2.3.1.1VlanIdnot-accessiblecurrent
dDaiVlanFilterArpAclName
OBJECT-TYPE
This object specifies an ARP ACL name that is used to check the validity of the bindings information in ARP body. An empty string indicates that the ARP ACL is not configured on the VLAN.
1.3.6.1.4.1.171.14.130.1.2.3.1.2DisplayString (SIZE(0..32))read-createcurrent
dDaiVlanFilterArpAclStatic
OBJECT-TYPE
This object indicates whether drop the packet if the IP-to-Ethernet MAC binding pair is not permitted by the arp ACL. This object does not take effect if value of dDaiVlanFilterArpAclName on the row is an empty string. 'true' indicates the implicit denied packet is dropped and ARP packet is not compared against DHCP bindings information. 'false' indicates if ARP packet is not explicitly classified by ARP ACL, it will be compared against DHCP bindings information.
1.3.6.1.4.1.171.14.130.1.2.3.1.3TruthValueread-createcurrent
dDaiVlanAclLogging
OBJECT-TYPE
This object indicates the logging criteria for packets that are dropped or permitted based on ACL matches. 'permit' - indicates that logging is performed when packets is permitted by the configured ACL. 'deny' - indicates that logging is performed when packets is denied by the configured ACL.
1.3.6.1.4.1.171.14.130.1.2.3.1.4Bits {permit(0), deny(1)}read-createcurrent
dDaiVlanDhcpBindingLogging
OBJECT-TYPE
This object specifies the logging criteria when ARP packets is compared against DHCP bindings information. 'permit' - indicates that logging is performed for packets that are permitted as a result of comparing with DHCP bindings information. 'deny' - indicates that logging is performed for packets that are denied as a result of comparing with DHCP bindings information.
1.3.6.1.4.1.171.14.130.1.2.3.1.5Bits {permit(0), deny(1)}read-createcurrent
dDaiVlanCfgRowStatus
OBJECT-TYPE
The status of this conceptual row entry. This object is used to manage creation and deletion of rows in this table.
1.3.6.1.4.1.171.14.130.1.2.3.1.99RowStatusread-createcurrent
dDaiInterface
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.1.3
dDaiIfConfigTable
OBJECT-TYPE
A table provides the mechanism to configure the trust state for Dynamic ARP Inspection purpose at each interface capable of this feature.
1.3.6.1.4.1.171.14.130.1.3.1not-accessiblecurrent
dDaiIfConfigEntry
OBJECT-TYPE
A row instance contains the configuration to enable or disable trust state for Dynamic ARP Inspection at each interface capable of this feature.
1.3.6.1.4.1.171.14.130.1.3.1.1not-accessiblecurrent
dDaiIfTrustEnabled
OBJECT-TYPE
This object indicates whether the interface is trusted for Dynamic ARP Inspection purpose. If this object is set to 'true', the interface is trusted. ARP packets coming to this interface will be forwarded without Dynamic ARP inspection. If this object is set to 'false', the interface is not trusted. ARP packets coming to this interface will be subjected to ARP inspection.
1.3.6.1.4.1.171.14.130.1.3.1.1.1TruthValueread-writecurrent
dDaiIfRateLimitTable
OBJECT-TYPE
A table provides the mechanism to configure the rate limit for Dynamic ARP Inspection purpose at each interface capable of this feature.
1.3.6.1.4.1.171.14.130.1.3.2not-accessiblecurrent
dDaiIfRateLimitEntry
OBJECT-TYPE
A row instance contains the configuration of rate limit Dynamic ARP Inspection at each interface capable of this feature.
1.3.6.1.4.1.171.14.130.1.3.2.1not-accessiblecurrent
dDaiIfRateLimit
OBJECT-TYPE
This object indicates rate limit value for Dynamic ARP Inspection purpose. If the incoming rate of ARP packets exceeds the value of this object, ARP packets will be dropped.
1.3.6.1.4.1.171.14.130.1.3.2.1.1Unsigned32read-writecurrent
dDaiIfBurstInterval
OBJECT-TYPE
This object indicates the length of the burst duration of the ARP packets that is allowed. When the rate of ARP packet per second exceeds the limitation and the condition sustain for the configured burst duration, the interface will be put in error disable state.
1.3.6.1.4.1.171.14.130.1.3.2.1.2Unsigned32read-writecurrent
dDaiStatistics
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.1.4
dDaiVlanStatsTable
OBJECT-TYPE
A table lists the Dynamic Arp Inspection statistics per VLAN.
1.3.6.1.4.1.171.14.130.1.4.1not-accessiblecurrent
dDaiVlanStatsEntry
OBJECT-TYPE
A row instance contains Dynamic ARP Inspection statistics information for each VLAN.
1.3.6.1.4.1.171.14.130.1.4.1.1not-accessiblecurrent
dDaiVlanStatsIndex
OBJECT-TYPE
This object indicates the VLAN ID of the entry.
1.3.6.1.4.1.171.14.130.1.4.1.1.1VlanIdnot-accessiblecurrent
dDaiVlanForwarded
OBJECT-TYPE
This object indicates the number of ARP packets forwarded by Dynamic Arp Inspection feature.
1.3.6.1.4.1.171.14.130.1.4.1.1.2Counter64read-onlycurrent
dDaiVlanDropped
OBJECT-TYPE
This object indicates the number of ARP packets dropped by Dynamic ARP Inspection feature.
1.3.6.1.4.1.171.14.130.1.4.1.1.3Counter64read-onlycurrent
dDaiVlanAclPermitted
OBJECT-TYPE
This object indicates the number of ARP packets permitted by the configured ACL.
1.3.6.1.4.1.171.14.130.1.4.1.1.4Counter64read-onlycurrent
dDaiVlanDhcpBindingsPermitted
OBJECT-TYPE
This object indicates the number of ARP packets that are permitted by DHCP snooping binding database.
1.3.6.1.4.1.171.14.130.1.4.1.1.5Counter64read-onlycurrent
dDaiVlanAclDenied
OBJECT-TYPE
This object indicates the number of ARP packets denied by the associating ACL.
1.3.6.1.4.1.171.14.130.1.4.1.1.6Counter64read-onlycurrent
dDaiVlanDhcpBindingDenied
OBJECT-TYPE
This object indicates the number of ARP packets that are dropped by DHCP snooping binding database.
1.3.6.1.4.1.171.14.130.1.4.1.1.7Counter64read-onlycurrent
dDaiVlanSrcMacValidationFailures
OBJECT-TYPE
This object indicates the number of ARP packets that fail source MAC address validation.
1.3.6.1.4.1.171.14.130.1.4.1.1.8Counter64read-onlycurrent
dDaiVlanDstMacValidationFailures
OBJECT-TYPE
This object indicates the number of ARP packets that fail destination MAC address validation.
1.3.6.1.4.1.171.14.130.1.4.1.1.9Counter64read-onlycurrent
dDaiVlanIpValidationFailures
OBJECT-TYPE
This object indicates the number of ARP packets that fail IP validation.
1.3.6.1.4.1.171.14.130.1.4.1.1.10Counter64read-onlycurrent
dDaiVlanStatsClear
OBJECT-TYPE
This object clears the counters in the same row when set to 'clear'. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.130.1.4.1.1.99INTEGER {clear(1), noOp(2)}read-writecurrent
dDaiVlanStatsClearAll
OBJECT-TYPE
This object clears the counters of all entries in dDaiVlanStatsTable, when set to 'clear'. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.130.1.4.2INTEGER {clear(1), noOp(2)}read-writecurrent
dDaiAclCfg
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.1.5
dDaiArpAccessListNumber
OBJECT-TYPE
This object indicates the number of entries present in the ARP access list table.
1.3.6.1.4.1.171.14.130.1.5.1Unsigned32read-onlycurrent
dDaiArpAccessListTable
OBJECT-TYPE
The table contains information about ARP access list.
1.3.6.1.4.1.171.14.130.1.5.2not-accessiblecurrent
dDaiArpAccessListEntry
OBJECT-TYPE
An entry defined in dDaiArpAccessListTable. An entry is created/removed when an ARP access list is created/deleted.
1.3.6.1.4.1.171.14.130.1.5.2.1not-accessiblecurrent
dDaiArpAccessListName
OBJECT-TYPE
The name of the ARP access list.
1.3.6.1.4.1.171.14.130.1.5.2.1.1DisplayString (SIZE(1..32))not-accessiblecurrent
dDaiArpAccessListRowStatus
OBJECT-TYPE
This object allows the dynamic creation and deletion of an ARP access list.
1.3.6.1.4.1.171.14.130.1.5.2.1.99RowStatusread-createcurrent
dDaiArpAccessRuleTable
OBJECT-TYPE
A table consists of a list of rules for the ARP access list.
1.3.6.1.4.1.171.14.130.1.5.3not-accessiblecurrent
dDaiArpAccessRuleEntry
OBJECT-TYPE
An entry is defined dDaiArpAccessRuleTable. The first instance identifier index value identifies the dDaiArpAccessListEntry that a ARP access rule (dDaiArpAccessRuleEntry) belongs to. An entry is removed from this table when its corresponding dDaiArpAccessListEntry is deleted.
1.3.6.1.4.1.171.14.130.1.5.3.1not-accessiblecurrent
dDaiArpAccessRuleSn
OBJECT-TYPE
Specifies the sequence number of the rule. A lower number represents a higher priority. The special value of 0 means the priority will be automatically determined by the agent.
1.3.6.1.4.1.171.14.130.1.5.3.1.1Integer32 (0..65535)not-accessiblecurrent
dDaiArpAccessRuleRowStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.130.1.5.3.1.2RowStatusread-createcurrent
dDaiArpAccessRuleAction
OBJECT-TYPE
This object indicates the result of the packet examination is to permit or deny.
1.3.6.1.4.1.171.14.130.1.5.3.1.3DaiRuleTyperead-createcurrent
dDaiArpAccessRuleSenderMacAddr
OBJECT-TYPE
This object indicates the ARP sender MAC address of the entry.
1.3.6.1.4.1.171.14.130.1.5.3.1.4MacAddressread-createcurrent
dDaiArpAccessRuleSenderMacMask
OBJECT-TYPE
This object is a mask bitmap to specify a group of source MAC addresses. The bit value 1 indicates the corresponding bit will be checked. The bit value 0 indicates the corresponding bit will be ignored. In other words, when the value of all '00'Hs indicates any ARP sender MAC address is specified. When the value of all 'ff'Hs indicates host ARP sender MAC address is specified.
1.3.6.1.4.1.171.14.130.1.5.3.1.5MacAddressread-createcurrent
dDaiArpAccessRuleSenderAddr
OBJECT-TYPE
This object indicates the ARP sender IP address of the entry.
1.3.6.1.4.1.171.14.130.1.5.3.1.6IpAddressread-createcurrent
dDaiArpAccessRuleSenderAddrMask
OBJECT-TYPE
This object is a mask bitmap to specify a group of source IP addresses. The bit value 1 indicates the corresponding bit will be checked. The bit value 0 indicates the corresponding bit will be ignored. In other words, when the value of all '00'Hs indicates any ARP sender address is specified. When the value of all 'ff'Hs indicates host ARP sender address is specified.
1.3.6.1.4.1.171.14.130.1.5.3.1.7IpAddressread-createcurrent
dDaiConformance
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.2
dDaiMIBCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.2.1
dDaiMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.130.2.2

Conformance

NameOIDStatus
dDaiMIBCompliance
MODULE-COMPLIANCE
The compliance statement for DLINKSW-DAI-MIB
1.3.6.1.4.1.171.14.130.2.1.1current
dDaiVlanCtrlGroup
OBJECT-GROUP
A collection of objects providing configuration regarding the Dynamic ARP Inspection feature per VLAN.
1.3.6.1.4.1.171.14.130.2.2.1current
dDaiIfConfigGroup
OBJECT-GROUP
A collection of objects which are used to configure as well as show information regarding the interface trust state for Dynamic ARP Inspection purpose.
1.3.6.1.4.1.171.14.130.2.2.2current
dDaiIfRateLimitGroup
OBJECT-GROUP
A collection of objects which are used to configure as well as show information regarding the rate limit per interface for Dynamic ARP Inspection purpose.
1.3.6.1.4.1.171.14.130.2.2.3current
dDaiLoggingConfigGroup
OBJECT-GROUP
A collection of objects providing logging configuration for Dynamic ARP Inspection feature.
1.3.6.1.4.1.171.14.130.2.2.4current
dDaiAddressValidationGroup
OBJECT-GROUP
A collection of objects providing address validation configuration for Dynamic ARP Inspection feature.
1.3.6.1.4.1.171.14.130.2.2.5current
dDaiVlanCfgGroup
OBJECT-GROUP
A collection of objects providing additional VLAN configuration for Dynamic ARP Inspection feature.
1.3.6.1.4.1.171.14.130.2.2.6current
dDaiVlanStatisticsGroup
OBJECT-GROUP
A collection of objects providing Dynamic ARP Inspection statistics per VLAN.
1.3.6.1.4.1.171.14.130.2.2.7current
dDaiLogBufferGroup
OBJECT-GROUP
A collection of objects providing logging information or control for Dynamic ARP Inspection feature.
1.3.6.1.4.1.171.14.130.2.2.8current
dDaiAclGroup
OBJECT-GROUP
A collection of objects providing ARP access-list configuration.
1.3.6.1.4.1.171.14.130.2.2.9current
dDaiClearStatsGroup
OBJECT-GROUP
A collection of objects providing clear the Dynamic Arp Inspection statistics.
1.3.6.1.4.1.171.14.130.2.2.10current