All MIBs › Dlink-IMPB-ARP-INSP
Category: Domain: Security, Vendor: D-Link
Description: Manages IP-MAC-Port Binding ARP inspection for security against ARP spoofing attacks on D-Link switches.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is Dlink-IMPB-ARP-INSP?
This D-Link private MIB manages IP-MAC-Port Binding (IMPB) ARP Inspection, a Layer 2 security feature that validates ARP packets against known IP-MAC-port bindings to defend against ARP spoofing and man-in-the-middle attacks on D-Link switches. It exposes a table of ARP inspection station entries recording the IP address and port list tied to legitimate bindings, plus an action object to clear inspection state. This is primarily a security/configuration-status MIB rather than a hardware-health one, letting an admin monitor which IP-to-port bindings are currently recognized/enforced and detect anomalies such as an unexpected binding indicating a spoofing attempt. It depends on the underlying D-Link IMPB feature set and general port/interface conventions shared with other D-Link security MIBs like Dlink-ERRDISABLE-RECOVERY-MIB. It is typically deployed on D-Link access-layer switches in environments requiring Layer 2 security hardening against ARP-based attacks, where Dlink-IMPB-ARP-INSP SNMP monitoring lets an admin verify bindings remain consistent over time.
IPNetwork Monitor allows you to monitor SNMP objects defined in Dlink-IMPB-ARP-INSP. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- D-Link managed switches
Monitoring Examples
rlIMPBArpInspectionStationTable/rlIMPBArpInspectionStationEntry expose rlIMPBArpInspectionStationIPAddress and rlIMPBArpInspectionStationPortList, letting an admin verify that a given client IP is bound only to its expected switch port. rlIMPBArpInspectionStationRowStatus controls creation/deletion of these binding entries. rlIMPBArpInspectionClearAction lets an operator flush inspection state, useful for maintenance or after resolving a detected spoofing incident.
What Can Be Monitored
- IP-MAC-port binding entries
- bound IP address per station
- bound port list
- binding entry row status
Imported Objects
From DLINK-3100-MIB
| rnd | MODULE-IDENTITY |
From Dlink-IMPB-FEATURES
| rlImpbArpInspection | OBJECT-IDENTITY |
From IF-MIB
| InterfaceIndex | |
| ifIndex | OBJECT-TYPE |
From Q-BRIDGE-MIB
| PortList | |
| VlanId |
From SNMPv2-SMI
| Counter32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| MacAddress | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
RFC description
D-Link ARP inspection station configuration for MAC/IP binding validation.
Start monitoring D-Link managed switch (IMPB ARP Inspection) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.