ZTE-AN-ARP-MIB

File: ZTE-AN-ARP-MIB.mib (27678 bytes)

Imported modules

SNMPv2-SMI SNMPv2-CONF SNMPv2-TC
IF-MIB ZTE-AN-TC-MIB ZTE-AN-IF-MIB
ZTE-AN-SMI INET-ADDRESS-MIB

Imported symbols

OBJECT-TYPE MODULE-IDENTITY IpAddress
Integer32 NOTIFICATION-TYPE MODULE-COMPLIANCE
OBJECT-GROUP TruthValue MacAddress
RowStatus ifIndex VlanId
zxAccessNode ZxAnSubIfIndex zxAnSubIfIndex
zxAnServiceSecurity InetAddress InetAddressType
InetAddressPrefixLength

Defined Types

ZxAnArpAntiSpoofingVlanEntry  
SEQUENCE    
  zxAnArpAntiSpoofingVid INTEGER
  zxAnArpAntiSpoofingVlanDirection INTEGER
  zxAnArpAntiSpoofingVlanRowStatus RowStatus

ZxAnArpReplyAgentVlanEntry  
SEQUENCE    
  zxAnArpReplyAgentVid INTEGER
  zxAnArpReplyAgentVlanRowStatus RowStatus

ZxAnArpMffEntry  
SEQUENCE    
  zxAnArpMffVid Integer32
  zxAnArpMffGatewayIpAddr IpAddress
  zxAnArpMffGatewayIpMask IpAddress
  zxAnArpMffGatewayMac MacAddress
  zxAnArpMffGatewayMacConfMode INTEGER
  zxAnArpMffRowStatus RowStatus

ZxAnArpFilterVlanConfEntry  
SEQUENCE    
  zxAnArpFilterVlanConfVid Integer32
  zxAnArpFilterVlanConfRowStatus RowStatus

Defined Values

zxAnArpMib 1.3.6.1.4.1.3902.1082.70.45
The MIB module is for configuration of ARP anti-spoofing and ARP reply agent features. ARP anti-spoofing is a security mechanism which validate ARP packets seen on access ports. ARP reply agent is a mechanism that the device how to respond to ARP queries received from the network and ARP replies from the customer direction.
MODULE-IDENTITY    

zxAnArpMibObjects 1.3.6.1.4.1.3902.1082.70.45.2
OBJECT IDENTIFIER    

zxAnArpConformance 1.3.6.1.4.1.3902.1082.70.45.4
OBJECT IDENTIFIER    

zxAnArpAntiSpoofingObjects 1.3.6.1.4.1.3902.1082.70.45.2.1
OBJECT IDENTIFIER    

zxAnArpAntiSpoofingGlobalObjects 1.3.6.1.4.1.3902.1082.70.45.2.1.1
OBJECT IDENTIFIER    

zxAnArpAntiSpoofingIfIndex 1.3.6.1.4.1.3902.1082.70.45.2.1.1.1
This object indicates the value of the physical interface from which the zxAnArpSpoofingTrap occurs.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  Integer32  

zxAnArpAntiSpoofingSubIfIndex 1.3.6.1.4.1.3902.1082.70.45.2.1.1.2
This object indicates the value of the sub-interface from which the zxAnArpSpoofingTrap occurs. The sub-interface for which this feature must be applicable is: SubIfType = ONU service port sub-interface(3).
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  ZxAnSubIfIndex  

zxAnArpAntiSpoofingIpAddr 1.3.6.1.4.1.3902.1082.70.45.2.1.1.3
This object indicates the IP address obtained at this interface through DHCP dynamic configuration or static configuration by IP source guard module.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  IpAddress  

zxAnArpAntiSpoofingMac 1.3.6.1.4.1.3902.1082.70.45.2.1.1.4
This object indicates the MAC address obtained at this interface through DHCP dynamic configuration or static configuration by IP source guard module.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  MacAddress  

zxAnArpAntiSpoofingFakedMac 1.3.6.1.4.1.3902.1082.70.45.2.1.1.5
This object indicates the faked MAC address framed by ARP spoofing attacker from user-side interface.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  MacAddress  

zxAnArpAntiSpoofingEnable 1.3.6.1.4.1.3902.1082.70.45.2.1.1.6
Enable or disable ARP anti-spoofing function.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2)  

zxAnArpAntiSpoofingCapabilities 1.3.6.1.4.1.3902.1082.70.45.2.1.1.100
The Arp anti-Spoofing capabilities. The bit value 1 means the function represented by this bit is supported by this equipment. bit 0: value 1 means not supporting zxAnArpAntiSpoofingVlanDirection in zxAnArpAntiSpoofingVlanTable. NOTE: No recommended to display it in NMS.
Status: current Access: read-only
OBJECT-TYPE    
  BITS notSupportVlanDirection(0)  

zxAnArpAntiSpoofingVlanTable 1.3.6.1.4.1.3902.1082.70.45.2.1.2
This table provides the mechanism to control ARP anti-spoofing per VLAN. When a VLAN is created in a device supporting this table, a corresponding entry of this table will be added. If the VLAN number on which ARP anti-spoofing at this interface and ARP anti-spoofing at this interface are both enabled,the ARP requests or ARP responses whose IP-MAC assignment is not compliant, and for which there is therefore no matching entry in the DHCP Snooping Table, they must be rejected.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    ZxAnArpAntiSpoofingVlanEntry

zxAnArpAntiSpoofingVlanEntry 1.3.6.1.4.1.3902.1082.70.45.2.1.2.1
A row instance contains the configuration to enable or disable ARP anti-spoofing at each existing VLAN.
Status: current Access: not-accessible
OBJECT-TYPE    
  ZxAnArpAntiSpoofingVlanEntry  

zxAnArpAntiSpoofingVid 1.3.6.1.4.1.3902.1082.70.45.2.1.2.1.1
This object indicates the VLAN number on which ARP anti-spoofing feature is configured. If the VLAN number on which ARP anti-spoofing at this interface and ARP anti-spoofing at this interface are both enabled, the ARP requests or ARP responses whose IP-MAC assignment is not compliant, and for which there is therefore no matching entry in the DHCP Snooping Table, they must be rejected.
Status: current Access: not-accessible
OBJECT-TYPE    
  INTEGER 1..4094  

zxAnArpAntiSpoofingVlanDirection 1.3.6.1.4.1.3902.1082.70.45.2.1.2.1.2
Direction of ARP anti-Spoofing.
Status: current Access: read-create
OBJECT-TYPE    
  INTEGER downstream(1), upstream(2), both(3)  

zxAnArpAntiSpoofingVlanRowStatus 1.3.6.1.4.1.3902.1082.70.45.2.1.2.1.50
This object is used to manage the creation and deletion of rows in this table. It only supports 'active(1)','createAndGo(4)'and 'destroy(6)' value. If this object is set to 'createAndGo(4)', the vlan number on which ARP anti-spoofing is active(1).Setting this object value to destroy(6),the vlan number on which ARP anti-spoofing is inactive.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

zxAnArpReplyAgentObjects 1.3.6.1.4.1.3902.1082.70.45.2.2
OBJECT IDENTIFIER    

zxAnArpReplyAgentVlanTable 1.3.6.1.4.1.3902.1082.70.45.2.2.2
This table provides the mechanism to control ARP reply agent per VLAN. When a VLAN is created in a device supporting this table, a corresponding entry of this table will be added. If the VLAN number on which ARP reply agent at this interface and ARP reply agent at this interface are both enabled, The ARP Reply Agent must respond to ARP queries received from the network.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    ZxAnArpReplyAgentVlanEntry

zxAnArpReplyAgentVlanEntry 1.3.6.1.4.1.3902.1082.70.45.2.2.2.1
A row instance contains the configuration to enable or disable ARP reply agent at each existing VLAN.
Status: current Access: not-accessible
OBJECT-TYPE    
  ZxAnArpReplyAgentVlanEntry  

zxAnArpReplyAgentVid 1.3.6.1.4.1.3902.1082.70.45.2.2.2.1.1
This object indicates the VLAN number on which ARP reply agent feature is configured. If the VLAN number on which ARP reply agent at this interface and ARP reply agent at this interface are both enabled, The ARP Reply Agent must respond to ARP queries received from the network.
Status: current Access: not-accessible
OBJECT-TYPE    
  INTEGER 1..4094  

zxAnArpReplyAgentVlanRowStatus 1.3.6.1.4.1.3902.1082.70.45.2.2.2.1.50
This object is used to manage the creation and deletion of rows in this table. It only supports 'active(1)','createAndGo(4)'and 'destroy(6)' value. If this object is set to 'createAndGo(4)', the vlan number on which ARP reply agent is active(1).Setting this object value to destroy(6),the vlan number on which ARP reply agent is inactive.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

zxAnArpMacForcedForwardObjects 1.3.6.1.4.1.3902.1082.70.45.2.3
OBJECT IDENTIFIER    

zxAnArpMffGlobalObjects 1.3.6.1.4.1.3902.1082.70.45.2.3.1
OBJECT IDENTIFIER    

zxAnArpMffEnable 1.3.6.1.4.1.3902.1082.70.45.2.3.1.1
Enable or disable MFF function.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2)  

zxAnArpMffGwTransparentEnable 1.3.6.1.4.1.3902.1082.70.45.2.3.1.2
Enable or disable gateway transparent function when MFF function is enabled. This object is effective only when zxAnArpMffEnable is enabled.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2)  

zxAnArpMffTable 1.3.6.1.4.1.3902.1082.70.45.2.3.2
This table indicates MFF configuration.MFF is MAC-Forced Forwarding.This table supports 32 VLAN's configuration of the MFF gateway,and 8 gateway configuration per vlan.In a same VLAN, IP or MAC of the gateway should not be duplicated.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    ZxAnArpMffEntry

zxAnArpMffEntry 1.3.6.1.4.1.3902.1082.70.45.2.3.2.1
A row instance contains the configuration to enable or disable MFF at each existing VLAN.
Status: current Access: not-accessible
OBJECT-TYPE    
  ZxAnArpMffEntry  

zxAnArpMffVid 1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.1
An index for zxAnArpMffTable.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..4094  

zxAnArpMffGatewayIpAddr 1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.2
MFF gateway IP address.
Status: current Access: not-accessible
OBJECT-TYPE    
  IpAddress  

zxAnArpMffGatewayIpMask 1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.3
MFF gateway IP mask.
Status: current Access: read-create
OBJECT-TYPE    
  IpAddress  

zxAnArpMffGatewayMac 1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.4
MFF gateway MAC address. A 0 value of this variable indicates no configure.
Status: current Access: read-create
OBJECT-TYPE    
  MacAddress  

zxAnArpMffGatewayMacConfMode 1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.5
MFF gateway MAC address configuration mode. If zxAnArpMffGatewayMac has been configured, the mode should be manual when doing a request, otherwise, the mode should be automatic.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER manual(1), automatic(2)  

zxAnArpMffRowStatus 1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.50
This object is used to manage the creation and deletion of rows in this table. It only supports 'active(1)','createAndGo(4)'and 'destroy(6)' value. If this object is set to 'createAndGo(4)', the VLAN on which MFF is active(1).Setting this object value to destroy(6),the VLAN on which MFF is inactive.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

zxAnArpFilterObjects 1.3.6.1.4.1.3902.1082.70.45.2.4
OBJECT IDENTIFIER    

zxAnArpFilterVlanConfTable 1.3.6.1.4.1.3902.1082.70.45.2.4.2
ARP filter table based on VLAN. If the VLAN item is set, the NE will dispatch the ARP packets downward by check the out port strictly.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    ZxAnArpFilterVlanConfEntry

zxAnArpFilterVlanConfEntry 1.3.6.1.4.1.3902.1082.70.45.2.4.2.1
An entry in zxAnArpFilterVlanConfTable.
Status: current Access: not-accessible
OBJECT-TYPE    
  ZxAnArpFilterVlanConfEntry  

zxAnArpFilterVlanConfVid 1.3.6.1.4.1.3902.1082.70.45.2.4.2.1.1
This object indicates the VLAN ID on which ARP filter feature is configured.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..4094  

zxAnArpFilterVlanConfRowStatus 1.3.6.1.4.1.3902.1082.70.45.2.4.2.1.50
The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnArpFilterVlanConfEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1). And the entry just supports createAndGo(4) and destroy(6) operation.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

zxAnArpCompliances 1.3.6.1.4.1.3902.1082.70.45.4.1
OBJECT IDENTIFIER    

zxAnArpGroups 1.3.6.1.4.1.3902.1082.70.45.4.2
OBJECT IDENTIFIER    

zxAnArpAntiSpoofingCompliances 1.3.6.1.4.1.3902.1082.70.45.4.1.1
The compliance statement for implementing Arp Anti-Spoofing MIB. Only supports C3XX, not supports C6XX.
Status: current Access: read-create
MODULE-COMPLIANCE    

zxAnArpReplyAgentCompliances 1.3.6.1.4.1.3902.1082.70.45.4.1.2
The compliance statement for implementing Arp Reply Agent MIB.
Status: current Access: read-create
MODULE-COMPLIANCE    

zxAnArpMFFCompliances 1.3.6.1.4.1.3902.1082.70.45.4.1.3
The compliance statement for implementing Arp Mff MIB.
Status: current Access: read-create
MODULE-COMPLIANCE    

zxAnArpFilterCompliances 1.3.6.1.4.1.3902.1082.70.45.4.1.4
The compliance statement for implementing Arp Filter MIB.
Status: current Access: read-create
MODULE-COMPLIANCE    

zxAnArpAntiSpoofingVlanGroup 1.3.6.1.4.1.3902.1082.70.45.4.2.1
A collection of object which are used to configure as well as show information regarding the Arp Anti-Spoofing feature per VLAN.
Status: current Access: read-create
OBJECT-GROUP    

zxAnArpReplyAgentVlanGroup 1.3.6.1.4.1.3902.1082.70.45.4.2.4
A collection of object which are used to configure as well as show information regarding the Arp Reply Agent feature per VLAN.
Status: current Access: read-create
OBJECT-GROUP    

zxAnArpSpoofingGlobalGroup 1.3.6.1.4.1.3902.1082.70.45.4.2.7
A collection of object which are used to configure as well as show information regarding the Arp Anti-Spoofing Global Objects feature per user interface.
Status: current Access: read-create
OBJECT-GROUP    

zxAnArpMffGlobalObjectsGroup 1.3.6.1.4.1.3902.1082.70.45.4.2.8
A collection of object which are used to configure as well as show information regarding the Arp Mff Global Objects feature per user interface.
Status: current Access: read-create
OBJECT-GROUP    

zxAnArpMffTableConfigGroup 1.3.6.1.4.1.3902.1082.70.45.4.2.9
A collection of object which are used to configure as well as show information regarding the Arp Mff Table feature per user interface.
Status: current Access: read-create
OBJECT-GROUP    

zxAnArpFilterVlanConfGroup 1.3.6.1.4.1.3902.1082.70.45.4.2.10
A collection of object which are used to configure as well as show information regarding the Arp Filter Table feature per user interface.
Status: current Access: read-create
OBJECT-GROUP