ZTE-AN-ARP-MIB
File:
ZTE-AN-ARP-MIB.mib (27678 bytes)
Imported modules
Imported symbols
Defined Types
ZxAnArpAntiSpoofingVlanEntry |
|
SEQUENCE |
|
|
|
|
zxAnArpAntiSpoofingVid |
INTEGER |
|
|
zxAnArpAntiSpoofingVlanDirection |
INTEGER |
|
|
zxAnArpAntiSpoofingVlanRowStatus |
RowStatus |
|
ZxAnArpReplyAgentVlanEntry |
|
SEQUENCE |
|
|
|
|
zxAnArpReplyAgentVid |
INTEGER |
|
|
zxAnArpReplyAgentVlanRowStatus |
RowStatus |
|
ZxAnArpMffEntry |
|
SEQUENCE |
|
|
|
|
zxAnArpMffVid |
Integer32 |
|
|
zxAnArpMffGatewayIpAddr |
IpAddress |
|
|
zxAnArpMffGatewayIpMask |
IpAddress |
|
|
zxAnArpMffGatewayMac |
MacAddress |
|
|
zxAnArpMffGatewayMacConfMode |
INTEGER |
|
|
zxAnArpMffRowStatus |
RowStatus |
|
ZxAnArpFilterVlanConfEntry |
|
SEQUENCE |
|
|
|
|
zxAnArpFilterVlanConfVid |
Integer32 |
|
|
zxAnArpFilterVlanConfRowStatus |
RowStatus |
|
Defined Values
zxAnArpMib |
1.3.6.1.4.1.3902.1082.70.45 |
The MIB module is for configuration of ARP anti-spoofing and
ARP reply agent features.
ARP anti-spoofing is a security mechanism which validate ARP
packets seen on access ports.
ARP reply agent is a mechanism that the device how to respond
to ARP queries received from the network and ARP replies from
the customer direction. |
MODULE-IDENTITY |
|
|
|
zxAnArpAntiSpoofingIfIndex |
1.3.6.1.4.1.3902.1082.70.45.2.1.1.1 |
This object indicates the value of the physical interface from
which the zxAnArpSpoofingTrap occurs. |
Status: current |
Access: accessible-for-notify |
OBJECT-TYPE |
|
|
|
|
Integer32 |
|
|
zxAnArpAntiSpoofingSubIfIndex |
1.3.6.1.4.1.3902.1082.70.45.2.1.1.2 |
This object indicates the value of the sub-interface from which
the zxAnArpSpoofingTrap occurs.
The sub-interface for which this feature must be applicable is:
SubIfType = ONU service port sub-interface(3). |
Status: current |
Access: accessible-for-notify |
OBJECT-TYPE |
|
|
|
|
ZxAnSubIfIndex |
|
|
zxAnArpAntiSpoofingIpAddr |
1.3.6.1.4.1.3902.1082.70.45.2.1.1.3 |
This object indicates the IP address obtained at this interface
through DHCP dynamic configuration or static configuration by IP
source guard module. |
Status: current |
Access: accessible-for-notify |
OBJECT-TYPE |
|
|
|
|
IpAddress |
|
|
zxAnArpAntiSpoofingMac |
1.3.6.1.4.1.3902.1082.70.45.2.1.1.4 |
This object indicates the MAC address obtained at this interface
through DHCP dynamic configuration or static configuration by IP
source guard module. |
Status: current |
Access: accessible-for-notify |
OBJECT-TYPE |
|
|
|
|
MacAddress |
|
|
zxAnArpAntiSpoofingFakedMac |
1.3.6.1.4.1.3902.1082.70.45.2.1.1.5 |
This object indicates the faked MAC address framed by ARP spoofing
attacker from user-side interface. |
Status: current |
Access: accessible-for-notify |
OBJECT-TYPE |
|
|
|
|
MacAddress |
|
|
zxAnArpAntiSpoofingEnable |
1.3.6.1.4.1.3902.1082.70.45.2.1.1.6 |
Enable or disable ARP anti-spoofing function. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enabled(1), disabled(2) |
|
zxAnArpAntiSpoofingCapabilities |
1.3.6.1.4.1.3902.1082.70.45.2.1.1.100 |
The Arp anti-Spoofing capabilities.
The bit value 1 means the function represented by this bit is
supported by this equipment.
bit 0: value 1 means not supporting
zxAnArpAntiSpoofingVlanDirection in
zxAnArpAntiSpoofingVlanTable.
NOTE: No recommended to display it in NMS. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
BITS |
notSupportVlanDirection(0) |
|
zxAnArpAntiSpoofingVlanTable |
1.3.6.1.4.1.3902.1082.70.45.2.1.2 |
This table provides the mechanism to control ARP anti-spoofing
per VLAN. When a VLAN is created in a device supporting this
table, a corresponding entry of this table will be added.
If the VLAN number on which ARP anti-spoofing at this interface
and ARP anti-spoofing at this interface are both enabled,the
ARP requests or ARP responses whose IP-MAC assignment is not
compliant, and for which there is therefore no matching entry
in the DHCP Snooping Table, they must be rejected. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
ZxAnArpAntiSpoofingVlanEntry |
|
zxAnArpAntiSpoofingVlanEntry |
1.3.6.1.4.1.3902.1082.70.45.2.1.2.1 |
A row instance contains the configuration to enable or disable
ARP anti-spoofing at each existing VLAN. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnArpAntiSpoofingVlanEntry |
|
|
zxAnArpAntiSpoofingVid |
1.3.6.1.4.1.3902.1082.70.45.2.1.2.1.1 |
This object indicates the VLAN number on which ARP anti-spoofing
feature is configured.
If the VLAN number on which ARP anti-spoofing at this interface
and ARP anti-spoofing at this interface are both enabled, the
ARP requests or ARP responses whose IP-MAC assignment is not
compliant, and for which there is therefore no matching entry
in the DHCP Snooping Table, they must be rejected. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
INTEGER |
1..4094 |
|
zxAnArpAntiSpoofingVlanDirection |
1.3.6.1.4.1.3902.1082.70.45.2.1.2.1.2 |
Direction of ARP anti-Spoofing. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
INTEGER |
downstream(1), upstream(2), both(3) |
|
zxAnArpAntiSpoofingVlanRowStatus |
1.3.6.1.4.1.3902.1082.70.45.2.1.2.1.50 |
This object is used to manage the creation and deletion of rows
in this table. It only supports 'active(1)','createAndGo(4)'and
'destroy(6)' value.
If this object is set to 'createAndGo(4)', the vlan number on
which ARP anti-spoofing is active(1).Setting this object value
to destroy(6),the vlan number on which ARP anti-spoofing is
inactive. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnArpReplyAgentVlanTable |
1.3.6.1.4.1.3902.1082.70.45.2.2.2 |
This table provides the mechanism to control ARP reply agent
per VLAN. When a VLAN is created in a device supporting this
table, a corresponding entry of this table will be added.
If the VLAN number on which ARP reply agent at this interface
and ARP reply agent at this interface are both enabled, The
ARP Reply Agent must respond to ARP queries received from
the network. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
ZxAnArpReplyAgentVlanEntry |
|
zxAnArpReplyAgentVlanEntry |
1.3.6.1.4.1.3902.1082.70.45.2.2.2.1 |
A row instance contains the configuration to enable or disable
ARP reply agent at each existing VLAN. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnArpReplyAgentVlanEntry |
|
|
zxAnArpReplyAgentVid |
1.3.6.1.4.1.3902.1082.70.45.2.2.2.1.1 |
This object indicates the VLAN number on which ARP reply agent
feature is configured.
If the VLAN number on which ARP reply agent at this interface
and ARP reply agent at this interface are both enabled, The ARP
Reply Agent must respond to ARP queries received from the network. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
INTEGER |
1..4094 |
|
zxAnArpReplyAgentVlanRowStatus |
1.3.6.1.4.1.3902.1082.70.45.2.2.2.1.50 |
This object is used to manage the creation and deletion of rows
in this table. It only supports 'active(1)','createAndGo(4)'and
'destroy(6)' value.
If this object is set to 'createAndGo(4)', the vlan number on
which ARP reply agent is active(1).Setting this object value to
destroy(6),the vlan number on which ARP reply agent is inactive. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnArpMffEnable |
1.3.6.1.4.1.3902.1082.70.45.2.3.1.1 |
Enable or disable MFF function. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enabled(1), disabled(2) |
|
zxAnArpMffGwTransparentEnable |
1.3.6.1.4.1.3902.1082.70.45.2.3.1.2 |
Enable or disable gateway transparent function when MFF function is
enabled.
This object is effective only when zxAnArpMffEnable is enabled. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
INTEGER |
enabled(1), disabled(2) |
|
zxAnArpMffTable |
1.3.6.1.4.1.3902.1082.70.45.2.3.2 |
This table indicates MFF configuration.MFF is MAC-Forced
Forwarding.This table supports 32 VLAN's configuration of the
MFF gateway,and 8 gateway configuration per vlan.In a same VLAN,
IP or MAC of the gateway should not be duplicated.
|
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
ZxAnArpMffEntry |
|
zxAnArpMffEntry |
1.3.6.1.4.1.3902.1082.70.45.2.3.2.1 |
A row instance contains the configuration to enable or disable
MFF at each existing VLAN. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnArpMffEntry |
|
|
zxAnArpMffVid |
1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.1 |
An index for zxAnArpMffTable. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
Integer32 |
1..4094 |
|
zxAnArpMffGatewayMac |
1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.4 |
MFF gateway MAC address. A 0 value of this variable indicates no
configure. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
MacAddress |
|
|
zxAnArpMffGatewayMacConfMode |
1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.5 |
MFF gateway MAC address configuration mode.
If zxAnArpMffGatewayMac has been configured, the mode should be
manual when doing a request, otherwise, the mode should be
automatic. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
manual(1), automatic(2) |
|
zxAnArpMffRowStatus |
1.3.6.1.4.1.3902.1082.70.45.2.3.2.1.50 |
This object is used to manage the creation and deletion of rows
in this table. It only supports 'active(1)','createAndGo(4)'and
'destroy(6)' value.
If this object is set to 'createAndGo(4)', the VLAN on
which MFF is active(1).Setting this object value to
destroy(6),the VLAN on which MFF is inactive. |
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnArpFilterVlanConfTable |
1.3.6.1.4.1.3902.1082.70.45.2.4.2 |
ARP filter table based on VLAN.
If the VLAN item is set, the NE will dispatch the ARP
packets downward by check the out port strictly.
|
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
ZxAnArpFilterVlanConfEntry |
|
zxAnArpFilterVlanConfEntry |
1.3.6.1.4.1.3902.1082.70.45.2.4.2.1 |
An entry in zxAnArpFilterVlanConfTable. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
ZxAnArpFilterVlanConfEntry |
|
|
zxAnArpFilterVlanConfVid |
1.3.6.1.4.1.3902.1082.70.45.2.4.2.1.1 |
This object indicates the VLAN ID on which ARP filter feature
is configured. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
Integer32 |
1..4094 |
|
zxAnArpFilterVlanConfRowStatus |
1.3.6.1.4.1.3902.1082.70.45.2.4.2.1.50 |
The status of this conceptual row.
The supported actions of this conceptual row only include:
'createAndGo' and 'destroy'.
To create a row in this table, a manager must set this object to
createAndGo(4), and must comply with the multi-variables binding
rule described in zxAnArpFilterVlanConfEntry.
To delete a row in this table, a manager must set this object to
destroy(6).
To get this object, the agent always returns active(1).
And the entry just supports createAndGo(4) and destroy(6)
operation.
|
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
zxAnArpAntiSpoofingCompliances |
1.3.6.1.4.1.3902.1082.70.45.4.1.1 |
The compliance statement for implementing Arp Anti-Spoofing MIB.
Only supports C3XX, not supports C6XX. |
Status: current |
Access: read-create |
MODULE-COMPLIANCE |
|
|
|
zxAnArpReplyAgentCompliances |
1.3.6.1.4.1.3902.1082.70.45.4.1.2 |
The compliance statement for implementing Arp Reply Agent MIB. |
Status: current |
Access: read-create |
MODULE-COMPLIANCE |
|
|
|
zxAnArpMFFCompliances |
1.3.6.1.4.1.3902.1082.70.45.4.1.3 |
The compliance statement for implementing Arp Mff MIB. |
Status: current |
Access: read-create |
MODULE-COMPLIANCE |
|
|
|
zxAnArpFilterCompliances |
1.3.6.1.4.1.3902.1082.70.45.4.1.4 |
The compliance statement for implementing Arp Filter MIB. |
Status: current |
Access: read-create |
MODULE-COMPLIANCE |
|
|
|
zxAnArpAntiSpoofingVlanGroup |
1.3.6.1.4.1.3902.1082.70.45.4.2.1 |
A collection of object which are used to configure as
well as show information regarding the Arp Anti-Spoofing
feature per VLAN. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|
zxAnArpReplyAgentVlanGroup |
1.3.6.1.4.1.3902.1082.70.45.4.2.4 |
A collection of object which are used to configure as
well as show information regarding the Arp Reply Agent
feature per VLAN. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|
zxAnArpSpoofingGlobalGroup |
1.3.6.1.4.1.3902.1082.70.45.4.2.7 |
A collection of object which are used to configure as
well as show information regarding the Arp Anti-Spoofing
Global Objects feature per user interface. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|
zxAnArpMffGlobalObjectsGroup |
1.3.6.1.4.1.3902.1082.70.45.4.2.8 |
A collection of object which are used to configure as
well as show information regarding the Arp Mff
Global Objects feature per user interface. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|
zxAnArpMffTableConfigGroup |
1.3.6.1.4.1.3902.1082.70.45.4.2.9 |
A collection of object which are used to configure as
well as show information regarding the Arp Mff Table
feature per user interface. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|
zxAnArpFilterVlanConfGroup |
1.3.6.1.4.1.3902.1082.70.45.4.2.10 |
A collection of object which are used to configure as
well as show information regarding the Arp Filter Table
feature per user interface. |
Status: current |
Access: read-create |
OBJECT-GROUP |
|
|
|