HP-ICF-ARP-PROTECT

File: HP-ICF-ARP-PROTECT.mib (18250 bytes)

Imported modules

HP-ICF-OID IF-MIB INET-ADDRESS-MIB
Q-BRIDGE-MIB SNMPv2-CONF SNMPv2-SMI
SNMPv2-TC

Imported symbols

hpSwitch ifIndex InetAddressType
InetAddress VlanIndex OBJECT-GROUP
MODULE-COMPLIANCE NOTIFICATION-GROUP Counter32
OBJECT-TYPE MODULE-IDENTITY NOTIFICATION-TYPE
TruthValue MacAddress

Defined Types

HpicfArpProtectPortEntry  
SEQUENCE    
  hpicfArpProtectPortTrust TruthValue

HpicfArpProtectVlanStatEntry  
SEQUENCE    
  hpicfArpProtectVlanStatIndex VlanIndex
  hpicfArpProtectVlanStatForwards Counter32
  hpicfArpProtectVlanStatBadPkts Counter32
  hpicfArpProtectVlanStatBadBindings Counter32
  hpicfArpProtectVlanStatBadSrcMacs Counter32
  hpicfArpProtectVlanStatBadDstMacs Counter32
  hpicfArpProtectVlanStatBadIpAddrs Counter32

Defined Values

hpicfArpProtect 1.3.6.1.4.1.11.2.14.11.5.1.37
This MIB module contains HP proprietary objects for managing Dynamic ARP Protection.
MODULE-IDENTITY    

hpicfArpProtectNotifications 1.3.6.1.4.1.11.2.14.11.5.1.37.0
OBJECT IDENTIFIER    

hpicfArpProtectErrantReply 1.3.6.1.4.1.11.2.14.11.5.1.37.0.1
An hpicfArpProtectErrantReply notification signifies that the ARP protection entity is enabled and has detected an errant ARP reply packet. The source and destination addresses from the packet header are included in the notification.
NOTIFICATION-TYPE    

hpicfArpProtectObjects 1.3.6.1.4.1.11.2.14.11.5.1.37.1
OBJECT IDENTIFIER    

hpicfArpProtectConfig 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1
OBJECT IDENTIFIER    

hpicfArpProtectGlobalCfg 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1
OBJECT IDENTIFIER    

hpicfArpProtectEnable 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.1
The administrative status of the ARP Protection feature.
OBJECT-TYPE    
  TruthValue  

hpicfArpProtectVlanEnable 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.2
The administrative status for Dynamic ARP Protection on each VLAN. There will be one bit in this string for each possible VLAN ID. Each octet within this value specifies a set of eight VLANs, with the first octet specifying VLAN IDs 1 through 8, the second octet specifying VLAN IDs 9 through 16, etc. Within each octet, the most significant bit represents the lowest numbered VLAN ID, and the least significant bit represents the highest numbered VLAN ID. Thus, each possible VLAN ID of the bridge is represented by a single bit within the value of this object. If that bit has a value of '1', then Dynamic ARP Protection is enabled on that VLAN; Dynamic ARP Protection is not enabled on the VLAN its bit has a value of '0'.
OBJECT-TYPE    
  OCTET STRING Size(512)  

hpicfArpProtectValidation 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.3
Additional validation checks to perform on ARP packets during Dynamic ARP Protection. srcMac - Drop any ARP request or response packet where the source MAC address in the Ethernet header does not match the sender MAC address in the body of the ARP packet. dstMac - Drop any unicast ARP response packet where the destination MAC address in the Ethernet header does not match the target MAC address in the body of the ARP packet. ip - Drop any ARP packet where the sender IP address is invalid. Drop any ARP response packet where the target IP address is invalid. Invalid addresses include 0.0.0.0, 255.255.255.255, all IP multicast addresses, and all class E IP addresses. These checks are only performed for ARP packets received on untrusted ports in VLANs that are enabled for Dynamic ARP Protection. ARP packets received on trusted ports, and ARP packets in VLANs for which Dynamic ARP Protection is disabled, are forwarded without validation.
OBJECT-TYPE    
  BITS srcMac(0), dstMac(1), ip(2)  

hpicfArpProtectErrantNotifyEnable 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.4
Provides operational control of hpicfArpProtectErrantReply.
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2)  

hpicfArpProtectPortTable 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.2
Per-interface configuration for Dynamic ARP Protection.
OBJECT-TYPE    
  SEQUENCE OF  
    HpicfArpProtectPortEntry

hpicfArpProtectPortEntry 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.2.1
Dynamic ARP Protection configuration information for a single port.
OBJECT-TYPE    
  HpicfArpProtectPortEntry  

hpicfArpProtectPortTrust 1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.2.1.1
This object indicates whether this port is trusted for Dynamic ARP Protection.
OBJECT-TYPE    
  TruthValue  

hpicfArpProtectStatus 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2
OBJECT IDENTIFIER    

hpicfArpProtectVlanStatTable 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1
Per-VLAN statistics for Dynamic ARP Protection.
OBJECT-TYPE    
  SEQUENCE OF  
    HpicfArpProtectVlanStatEntry

hpicfArpProtectVlanStatEntry 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1
Dynamic ARP Protection statistics for a single VLAN.
OBJECT-TYPE    
  HpicfArpProtectVlanStatEntry  

hpicfArpProtectVlanStatIndex 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.1
This variable uniquely identifies the VLAN that the counters in this entry apply to. The VLAN identified by this object is the same VLAN as identified by the identical value in the dot1qVlanIndex object.
OBJECT-TYPE    
  VlanIndex  

hpicfArpProtectVlanStatForwards 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.2
The number of ARP packets received on untrusted ports in this VLAN that were successfully validated and forwarded. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled.
OBJECT-TYPE    
  Counter32  

hpicfArpProtectVlanStatBadPkts 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.3
The number of ARP packets received on untrusted ports that were dropped because they were malformed in some way. This may include an unrecognized opcode, an unrecognized protocol type, an unrecognized hardware type, an invalid protocol address length, or an invalid hardware address length. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled.
OBJECT-TYPE    
  Counter32  

hpicfArpProtectVlanStatBadBindings 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.4
The number of ARP packets received on untrusted ports that were dropped because they advertized a source IP-to-MAC binding that did not match a known, valid binding. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled.
OBJECT-TYPE    
  Counter32  

hpicfArpProtectVlanStatBadSrcMacs 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.5
The number of ARP packets received on untrusted ports that were dropped because the source MAC address in the Ethernet header did not match the sender MAC address in the body of the ARP packet. This count does not increment when source MAC validation is not enabled. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled.
OBJECT-TYPE    
  Counter32  

hpicfArpProtectVlanStatBadDstMacs 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.6
The number of unicast ARP response packets received on untrusted ports that were dropped because the destination MAC address in the Ethernet header did not match the target MAC address in the body of the ARP packet. This count does not increment when destination address validation is not enabled. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled.
OBJECT-TYPE    
  Counter32  

hpicfArpProtectVlanStatBadIpAddrs 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.7
The number of ARP packets received on untrusted ports that were dropped because they contained an invalid sender IP address, or they contained an invalid target IP address in an ARP response. This count does not increment when IP address validation is not enabled. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled.
OBJECT-TYPE    
  Counter32  

hpicfArpProtectErrantCnt 1.3.6.1.4.1.11.2.14.11.5.1.37.1.3
A count of hpicfArpProtectErrantReply sent from the ARP Protection entity to the SNMP entity. This count may differ from the count of notifications transmitted due to rate limiting or configuration.
OBJECT-TYPE    
  Counter32  

hpicfArpProtectErrantSrcMac 1.3.6.1.4.1.11.2.14.11.5.1.37.1.4
Errant source MAC address included in a hpicfArpProtectNotification.
OBJECT-TYPE    
  MacAddress  

hpicfArpProtectErrantSrcIpType 1.3.6.1.4.1.11.2.14.11.5.1.37.1.5
IP Address type reported in hpicfArpProtectErrantSrcIp.
OBJECT-TYPE    
  InetAddressType  

hpicfArpProtectErrantSrcIp 1.3.6.1.4.1.11.2.14.11.5.1.37.1.6
Errant source IP address included in a hpicfArpProtectNotification.
OBJECT-TYPE    
  InetAddress  

hpicfArpProtectErrantDestMac 1.3.6.1.4.1.11.2.14.11.5.1.37.1.7
Errant destination MAC address included in a hpicfArpProtectNotification.
OBJECT-TYPE    
  MacAddress  

hpicfArpProtectErrantDestIpType 1.3.6.1.4.1.11.2.14.11.5.1.37.1.8
IP Address type reported in hpicfArpProtectErrantDestIp.
OBJECT-TYPE    
  InetAddressType  

hpicfArpProtectErrantDestIp 1.3.6.1.4.1.11.2.14.11.5.1.37.1.9
Errant destination IP address included in a hpicfArpProtectNotification.
OBJECT-TYPE    
  InetAddress  

hpicfArpProtectConformance 1.3.6.1.4.1.11.2.14.11.5.1.37.2
OBJECT IDENTIFIER    

hpicfArpProtectGroups 1.3.6.1.4.1.11.2.14.11.5.1.37.2.1
OBJECT IDENTIFIER    

hpicfArpProtectBaseGroup 1.3.6.1.4.1.11.2.14.11.5.1.37.2.1.1
A collection of objects for configuring and monitoring the base Dynamic ARP Protection functionality.
OBJECT-GROUP    

hpicfArpProtectionNotifications 1.3.6.1.4.1.11.2.14.11.5.1.37.2.1.2
A group of Notifications whose implementation is mandatory when HP-ICF-ARP-PROTECTION is implemented.
NOTIFICATION-GROUP    

hpicfArpProtectCompliances 1.3.6.1.4.1.11.2.14.11.5.1.37.2.2
OBJECT IDENTIFIER    

hpicfArpProtectCompliance 1.3.6.1.4.1.11.2.14.11.5.1.37.2.2.1
The compliance statement for HP switches that support Dynamic ARP Protection.
MODULE-COMPLIANCE