All MIBs › Dlink-IMPB-FEATURES
Last Updated: 2006-04-02
Category: Domain: Security, Vendor: D-Link
Description: Defines IP-MAC-Port Binding (IMPB) feature configuration objects for binding enforcement on D-Link switches.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is Dlink-IMPB-FEATURES?
This D-Link private enterprise MIB configures IP-MAC-Port Binding (IMPB) security features on D-Link switches, a mechanism that binds a host's IP and MAC address to a specific switch port to prevent spoofing and unauthorized network access. It exposes enable/disable configuration objects for the overall IMPB management feature and its sub-features: ARP inspection, IP inspection, address discovery, and gratuitous ARP handling. Its monitoring relevance is security/configuration status: verifying that IP-MAC binding enforcement and its associated ARP/IP inspection protections are active, which helps confirm the switch is actively defending against ARP spoofing and IP/MAC address theft. It has conceptual overlap with standard DHCP snooping/dynamic ARP inspection concepts found in other switch MIBs but is a self-contained D-Link private structure. It is deployed on D-Link managed switches in campus or enterprise access-layer networks that require strict host identity binding for security compliance. Engineers can download the Dlink-IMPB-FEATURES file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in Dlink-IMPB-FEATURES. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- D-Link managed switch
Monitoring Examples
An admin polls rlImpbManagment to confirm the overall IMPB feature is enabled, then checks rlImpbArpInspection and rlImpbIpInspection to verify that ARP and IP packet inspection against bound IP-MAC-port entries are both active. Checking rlImpbDiscovery and rlImpbGratitiousArp reveals whether automatic binding discovery and gratuitous ARP handling are turned on, helping catch a configuration gap that could allow an unbound host to bypass port security.
What Can Be Monitored
- IMPB management enable status
- ARP inspection status
- IP inspection status
- binding discovery status
- gratuitous ARP handling status
Imported Objects
From DLINK-3100-MIB
| rnd | MODULE-IDENTITY |
From IF-MIB
| InterfaceIndex | |
| ifIndex | OBJECT-TYPE |
From Q-BRIDGE-MIB
| VlanId |
From SNMPv2-SMI
| Counter32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| MacAddress | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
RFC description
IP/ARP inspection, gratuitous ARP filtering, and VLAN discovery features for D-Link switches.
Start monitoring D-Link managed switch (IP-MAC-Port Binding feature set) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.