All MIBs › CISCO-DYNAMIC-ARP-INSPECTION-MIB › cdaiAddressValidate
cdaiAddressValidate
Module: CISCO-DYNAMIC-ARP-INSPECTION-MIB
OID (symbolic): CISCO-DYNAMIC-ARP-INSPECTION-MIB::cdaiAddressValidate
OID (numeric): 1.3.6.1.4.1.9.9.374.1.1.2
Node type: OBJECT-TYPE
Type: Bits
Access: read-write
Description: This object specifies address validation criteria used by Dynamic ARP Inspection feature.
'srcMacAddress' indicates that source MAC address in ethernet header is checked against the sender MAC address in ARP packet. When this bit is on, packets with different MAC addresses are classified as invalid packets and are dropped. This checking is done for both ARP request and ARP response packet.
'dstMacAddress' indicates that the destination MAC address in ethernet header is checked against the target MAC address in ARP packet. When this bit is on, packets with different addresses are classified as invalid packets and are dropped. This checking is done for ARP response packet only.
'ip' indicates that the IP addresses in ARP packet are checked for invalid or unexpected IP addresses. Addresses such as 0.0.0.0, 255.255.255.255 and all IP multicast addresses are considered invalid. When this bit is on, both the sender and target IP addresses in the ARP packet are checked. This checking is done for both ARP request and response packet.
'ipAllowZeros' works the same as 'ip' but address 0.0.0.0 is allowed.
'ip' and 'ipAllowZeros' are mutually exclusive.
What is cdaiAddressValidate?
Specifies which address validation checks Dynamic ARP Inspection performs on ARP packets, such as verifying that the source MAC address in the Ethernet header matches the sender MAC address in the ARP payload.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.374.1.1.2 snmpwalk -v2c -c public <target> CISCO-DYNAMIC-ARP-INSPECTION-MIB::cdaiAddressValidate
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.374.1.1.2.1 snmpget -v2c -c public <target> CISCO-DYNAMIC-ARP-INSPECTION-MIB::cdaiAddressValidate.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.9.374.1.1.2.1 s <value>
Start monitoring Cisco Catalyst switches with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-DYNAMIC-ARP-INSPECTION-MIB::cdaiAddressValidate OID value, configure state conditions and alerts, and monitor any Cisco Catalyst switches from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.374 | ciscoDynamicArpInspectionMIB | CISCO-DYNAMIC-ARP-INSPECTION-MIB |
| 1.3.6.1.4.1.9.9.374.1 | cdaiMIBObjects | CISCO-DYNAMIC-ARP-INSPECTION-MIB |
| 1.3.6.1.4.1.9.9.374.1.1 | cdaiGlobal | CISCO-DYNAMIC-ARP-INSPECTION-MIB |
| 1.3.6.1.4.1.9.9.374.1.1.2 | cdaiAddressValidate | CISCO-DYNAMIC-ARP-INSPECTION-MIB |