Dlink-IMPB-MNG

All MIBs › Dlink-IMPB-MNG

Category: Domain: Security, Vendor: D-Link

Description: Manages IP-MAC-Port Binding (IMPB) tables and policies for access security on D-Link switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Dlink-IMPB-MNG?

This private MIB manages IP-MAC-Port Binding (IMPB) on D-Link switches, an access-security feature that locks a given IP and MAC address pair to a specific switch port to prevent IP spoofing and unauthorized device attachment. It exposes configuration/binding-table data describing bound IP address, MAC address, packet type filtered (IP/ARP/both), device type, allowed port list, and per-port bandwidth limiting for bound hosts. It is primarily a security/access-configuration MIB rather than a hardware-health MIB, but its rlIMPBMngRowStatus and rlIMPBMngAction fields let an administrator confirm whether a binding entry is active/operational, and rlIMPBMngPortBandwidthTable exposes bandwidth enforcement status per bound port. It complements standard bridge/port MIBs since bindings are applied per switch port. It is deployed on D-Link access-layer switches in environments requiring strict IP/MAC/port lockdown, such as campus or enterprise edge networks, and administrators can download the Dlink-IMPB-MNG file to load into their MIB browser before configuring bindings.

IPNetwork Monitor allows you to monitor SNMP objects defined in Dlink-IMPB-MNG. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switch

Monitoring Examples

A security administrator would walk rlIMPBMngTable/rlIMPBMngEntry to verify a specific rlIMPBMngIPAddress is correctly bound to rlIMPBMngPMACAddress on the expected rlIMPBMngPortlist, checking rlIMPBMngRowStatus to confirm the binding is active. rlIMPBMngPacketType would be checked to see whether IP, ARP, or both packet types are being filtered for that binding, and rlIMPBMngPortBandwidthTable inspected if a bound port shows unexpectedly throttled traffic. A binding entry stuck in a non-active row status would explain why a legitimate device on that port is being blocked.

What Can Be Monitored

IP-MAC-port binding entries
binding row status
filtered packet type (IP/ARP)
bound port list
per-port bandwidth limit for bound hosts

Imported Objects

From DLINK-3100-MIB

rnd	MODULE-IDENTITY

From Dlink-IMPB-FEATURES

rlImpbManagment

OBJECT-IDENTITY

From IF-MIB

InterfaceIndex
ifIndex	OBJECT-TYPE

From P-BRIDGE-MIB

EnabledStatus

From Q-BRIDGE-MIB

PortList

From SNMPv2-SMI

Counter32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
rlIMPBMngTable	1.3.6.1.4.1.171.10.94.89.89.139.1.1		not-accessible	The table specifies all IMPB station. The entry contains IP address and MAC of the station and also list of ports, packet type and Device type of this station.
rlIMPBMngEntry	1.3.6.1.4.1.171.10.94.89.89.139.1.1.1		not-accessible	The row definition for this table.
IP rlIMPBMngIPAddress	1.3.6.1.4.1.171.10.94.89.89.139.1.1.1.1	IpAddress	not-accessible	IP address of station.
IMP rlIMPBMngPacketType	1.3.6.1.4.1.171.10.94.89.89.139.1.1.1.2	IMPBPacketType	read-write	Packet type of IMPB.
MAC rlIMPBMngPMACAddress	1.3.6.1.4.1.171.10.94.89.89.139.1.1.1.3	MacAddress	read-write	Station mac address
IMP rlIMPBMngDeviceType	1.3.6.1.4.1.171.10.94.89.89.139.1.1.1.4	IMPBDeviceType	read-write	Station type
POR rlIMPBMngPortlist	1.3.6.1.4.1.171.10.94.89.89.139.1.1.1.5	PortList	read-write	List of ports that the station is configured on.
IMP rlIMPBMngMode	1.3.6.1.4.1.171.10.94.89.89.139.1.1.1.6	IMPBLockMode	read-write	Is this station locked or not.
U32 rlIMPBMngRouterBandwidth	1.3.6.1.4.1.171.10.94.89.89.139.1.1.1.7	Unsigned32	read-write	Specifies, for Router entry, , egress Bandwidth on the associated ports. Zero means disabled.
ROW rlIMPBMngRowStatus	1.3.6.1.4.1.171.10.94.89.89.139.1.1.1.8	RowStatus	read-write	A status can be destroy, active or createAndGo
INT rlIMPBMngAction	1.3.6.1.4.1.171.10.94.89.89.139.1.2	INTEGER	read-write	An action scalar which specifies the global action to take on the management DB.
rlIMPBMngPortBandwidthTable	1.3.6.1.4.1.171.10.94.89.89.139.1.3		not-accessible	The table specifies the Bandwidth value for each Port that at least one Router station is configured on it.
rlIMPBMngPortBandwidthEntry	1.3.6.1.4.1.171.10.94.89.89.139.1.3.1		not-accessible	The row definition for this table.
U32 rlIMPBMngBandwidth	1.3.6.1.4.1.171.10.94.89.89.139.1.3.1.1	Unsigned32	read-only	This variable specifies what is the Bandwidth value on the specific ifIndex. Zero means disabled.
rlIMPBMngRouterBandwidthTable	1.3.6.1.4.1.171.10.94.89.89.139.1.4		not-accessible	The table shows the Bandwidth information per configured router
rlIMPBMngRouterBandwidthEntry	1.3.6.1.4.1.171.10.94.89.89.139.1.4.1		not-accessible	The row definition for this table.
IP rlIMPBRouterIPAddress	1.3.6.1.4.1.171.10.94.89.89.139.1.4.1.1	IpAddress	not-accessible	IP address of station.
POR rlIMPBRouterPortlist	1.3.6.1.4.1.171.10.94.89.89.139.1.4.1.2	PortList	read-only	List of ports that the router is configured on.
U32 rlIMPBRouterBandwidth	1.3.6.1.4.1.171.10.94.89.89.139.1.4.1.3	Unsigned32	read-only	This variable specifies the Bandwidth value for a specific router, Zero means disabled.
INT rlIMPBMngDiscoveryLearningStatus	1.3.6.1.4.1.171.10.94.89.89.139.1.5	INTEGER	read-only	This variable specifies the discovery is NOW learning or stopped. Setting an entry in rlIMPBMngDiscoverytTable is conditioned with a value of this scalar to be set to noLearning.
POR rlIMPBMngUncheckPorts	1.3.6.1.4.1.171.10.94.89.89.139.1.6	PortList	read-write	Action scalar that defines which ports the system should be deleted from all entries in the management MIB. If an entry is remained with empty portlist the entry will be deleted also
INT rlIMPBMngLockedStations	1.3.6.1.4.1.171.10.94.89.89.139.1.7	INTEGER	read-only	Read-only scalar to count how much locked stations there are in the system
U32 rlIMPBMngGratARPPeriodTimeout	1.3.6.1.4.1.171.10.94.89.89.139.1.8	Unsigned32	read-write	The interval at which ARP Requests are transmitted on behalf of configured stations. The default value for rlIMPBGratARPPeriodTimeout object is Zero, which means don't send ARP Request. The value of this object must be restored from non-volatile storage after a re-initialization of the management system.

RFC description

D-Link IP/MAC Port Binding management MIB for preventing IP spoofing and unauthorized MAC/IP binding on switches.

Start monitoring D-Link managed switch (IP-MAC-Port Binding management) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Dlink-IMPB-MNG

What Is Dlink-IMPB-MNG?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description