CISCO-DYNAMIC-ARP-INSPECTION-CAPABILITY

Description: Defines SNMP agent capability statements for Cisco Dynamic ARP Inspection security MIB on Catalyst switch platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

CISCO-DYNAMIC-ARP-INSPECTION-CAPABILITY is an AGENT-CAPABILITIES conformance module documenting which objects of Cisco's CISCO-DYNAMIC-ARP-INSPECTION-MIB are implemented by the SNMP agent on Catalyst switch platforms. Dynamic ARP Inspection (DAI) is a Cisco security feature that validates ARP packets against a trusted binding table to prevent ARP spoofing and man-in-the-middle attacks, and the parent MIB it describes exposes per-VLAN DAI enable state and violation/error counters. This capability module itself carries no runtime data — it exists purely to tell an NMS or MIB browser which parts of the DAI MIB a given Catalyst platform/software release supports. It is inherently and explicitly dependent on CISCO-DYNAMIC-ARP-INSPECTION-MIB, the MIB it provides conformance statements for. It is used during network management tool integration and compliance checking rather than in day-to-day device monitoring. Engineers can download the CISCO-DYNAMIC-ARP-INSPECTION-CAPABILITY file directly to load it into their MIB browser.

This is a conformance/AGENT-CAPABILITIES module with no runtime data objects (sample_objects is empty), so no monitoring scenario can be honestly described. It would be used by an NMS to confirm that a given Cisco Catalyst switch's software release supports the specific Dynamic ARP Inspection objects it intends to poll before enabling ARP-spoofing security monitoring.

Cisco Dynamic ARP Inspection (DAI) capability MIB; defines agent capabilities for DAI security features preventing ARP spoofing attacks.