All MIBs › CT-FASTPATH-ARPACL-MIB
Organization: Enterasys Networks, Inc.
Last Updated: 2008-07-23
Category: IP and Core Protocols, VLAN and Bridging, Vendor: Cabletron/Enterasys
Description: Sets up ARP ACL entries used for ARP inspection on Cabletron FastPath switches.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CT-FASTPATH-ARPACL-MIB?
This is an Enterasys (formerly Cabletron) MIB for the FastPath switching platform, providing SNMP-based configuration of ARP Access Control Lists used for ARP inspection/filtering to prevent ARP spoofing on the switch. It exposes ACL rule tables that define permitted IP-to-MAC address bindings and the ports/VLANs to which ARP inspection ACL entries apply. Its monitoring value is primarily configuration-oriented - verifying which ARP ACL rules are active and whether ARP inspection is correctly enforcing bindings - functioning more as a security/configuration status module than a hardware-sensor MIB. As a FastPath-family module it depends on Enterasys's broader FastPath switch MIB conventions and general ARP inspection standards. It is typically deployed on Enterasys/Cabletron FastPath switches in enterprise networks where administrators need to audit ARP ACL configuration for network security compliance, and can download the CT-FASTPATH-ARPACL-MIB file to load into their MIB browser for reference.
IPNetwork Monitor allows you to monitor SNMP objects defined in CT-FASTPATH-ARPACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Enterasys/Cabletron FastPath switch
Monitoring Examples
No sample object names were supplied for this MIB, so specific OIDs cannot be cited here. Based on its stated purpose, an administrator would be expected to poll an ARP ACL rule table to confirm which IP-to-MAC bindings are permitted on a given port/VLAN, and detect a missing or incorrect binding that could indicate an ARP spoofing attempt or misconfiguration. This is a general characterization rather than a citation of confirmed object names.
What Can Be Monitored
- ARP ACL rule configuration
- ARP inspection enforcement status
Imported Objects
From CTRON-MIB-NAMES
| ctArpAclExpMib | OBJECT-IDENTITY |
From SNMPv2-SMI
| Counter32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| TimeTicks | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| MacAddress | |
| PhysAddress | |
| RowPointer | |
| RowStatus | |
| StorageType | |
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
RFC description
Configures ARP ACL (Access Control List) entries for ARP inspection on Cabletron FastPath switches.
Start monitoring Enterasys/Cabletron FastPath switch (ARP ACL) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.