ALCATEL-IND1-NETSEC-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › ALCATEL-IND1-NETSEC-MIB

Organization: Alcatel IND

Last Updated: 2010-05-13

Category: VPN and Security, Vendor: Alcatel-Lucent

Description: Alcatel OmniSwitch network security MIB for managing ARP/DHCP inspection, IP source guard, and spoofing prevention.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ALCATEL-IND1-NETSEC-MIB?

ALCATEL-IND1-NETSEC-MIB is an Alcatel (Alcatel-Lucent) enterprise MIB for the OmniSwitch 'Birds of Prey' product line, covering the EtherBreaker network-security feature that performs ARP/DHCP inspection, IP source guard, and spoofing prevention. It exposes configuration data for port-range groups and monitoring groups, alongside fault/anomaly data describing detected security events. Its monitoring value centers on software/security-service status rather than physical hardware -- the anomaly and anomaly-state objects indicate whether the switch's built-in intrusion/spoofing detection has flagged suspicious activity on a group of interfaces, functioning as a security health signal for the switch. It belongs to the broader Alcatel IND1 enterprise MIB family used across the OmniSwitch line alongside other alcatelIND1* modules. It is typically deployed on Alcatel OmniSwitch campus/edge switches to protect Layer 2/3 access ports against ARP and DHCP-based attacks. Engineers can download the ALCATEL-IND1-NETSEC-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ALCATEL-IND1-NETSEC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • Alcatel OmniSwitch (Birds of Prey product line) switches

Monitoring Examples

The alaNetSecPortRangeGroupTable/alaNetSecPortRangeGroupEntry rows define named port ranges via alaNetSecPortRangeGroupStartIfId and alaNetSecPortRangeGroupEndIfId, while alaNetSecMonitoringGroupTable ties a named monitoring group to specific anomaly types through alaNetSecMonitoringGroupAnomaly. An administrator would poll alaNetSecMonitoringGroupAnomalyState to see whether an anomaly such as an ARP spoofing attempt or DHCP snooping violation has been detected on the interfaces in that group. A transition of this state to an alarmed value would reveal an active attack or misbehaving host on the monitored port range.

What Can Be Monitored

  • port range group configuration
  • monitoring group anomaly type
  • anomaly detection state
  • ARP/DHCP inspection activity
Imported Objects

From ALCATEL-IND1-BASE

softentIND1NetSecOBJECT-IDENTITY

From IF-MIB

InterfaceIndex

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using alaNetSecPortStatsLastIngress OID:

Select an Alcatel-Lucent Enterprise OmniSwitch switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type alaNetSecPortStatsLastIngress into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the count of Indexed Ingress packets observed during last 5 seconds. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Alcatel-Lucent enterprise-specific SNMP MIB for Birds Of Prey Product Line configuration and monitoring of network security features and EtherBreaker functionality. Provides management information for security-related objects and network protection capabilities on Alcatel-Lucent networking devices.

Start monitoring Alcatel-Lucent Enterprise OmniSwitch switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ALCATEL-IND1-NETSEC-MIB