BAY-STACK-ARP-INSPECTION-MIB

Description: Manages Dynamic ARP Inspection (DAI) configuration and violation counters on Avaya/Nortel ERS switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

BAY-STACK-ARP-INSPECTION-MIB manages Dynamic ARP Inspection (DAI) configuration on Avaya/Nortel BayStack and Ethernet Routing Switch (ERS) products, a Layer-2 security feature that validates ARP packets against trusted bindings. It exposes per-VLAN enablement, per-interface trust settings distinguishing trusted uplinks from untrusted access ports, and notification objects reporting the source MAC address of a detected violation. As primarily a security/configuration MIB, its main health signal is the violation notification stream, which reveals ARP spoofing attempts or misconfigured trust settings rather than physical hardware faults. It is a vendor extension layered on top of standard bridge/VLAN concepts and shares interface indexing with the switch's base IF-MIB. It is typically deployed on enterprise access-layer Avaya/Nortel ERS switches to protect against ARP spoofing and man-in-the-middle attacks, and this BAY-STACK-ARP-INSPECTION-MIB guide covers the relevant per-VLAN and per-interface objects.

An admin enabling bsArpInspectionVlanEnabled on a VLAN would check bsArpInspectionIfTable/bsArpInspectionIfEntry to ensure uplinks are marked bsArpInspectionIfTrusted while access ports remain untrusted. A spike in bsArpInspectionNotifications carrying a bsArpInspectionNotificationSourceMACAddr would alert the admin to a host sending forged ARP replies, indicating a potential spoofing attack on that access port.

Bay Networks (Nortel) vendor-private MIB for Dynamic ARP Inspection (DAI) configuration and statistics on stacked switches.