All MIBs › FOUNDRY-IP-SOURCE-GUARD-MIB › fdryIpSrcGuardIfEnable
fdryIpSrcGuardIfEnable
Module: FOUNDRY-IP-SOURCE-GUARD-MIB
OID (symbolic): FOUNDRY-IP-SOURCE-GUARD-MIB::fdryIpSrcGuardIfEnable
OID (numeric): 1.3.6.1.4.1.1991.1.1.3.37.1.1.1.1
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-write
Description: This object indicates whether IP Source Guard is enabled at this interface. If this object is set to 'true', IP Source Guard is enabled. Traffic coming to this interface will be forwarded. If it is from the list of IP addresses obtained from DHCP snooping. Otherwise it is denied. If this object is set to 'false', IP Source Guard is disabled.
What is fdryIpSrcGuardIfEnable?
This object turns IP Source Guard on or off for a specific interface, which when enabled only forwards traffic from IP addresses learned via DHCP snooping and drops everything else. Admins enable it on access ports to stop IP spoofing by end hosts that try to use an address they weren't assigned via DHCP. For example, setting fdryIpSrcGuardIfEnable to true on a user-facing port blocks a host from sending traffic under a forged IP address not in the DHCP snooping table.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.1991.1.1.3.37.1.1.1.1 snmpwalk -v2c -c public <target> FOUNDRY-IP-SOURCE-GUARD-MIB::fdryIpSrcGuardIfEnable
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.1991.1.1.3.37.1.1.1.1.1 snmpget -v2c -c public <target> FOUNDRY-IP-SOURCE-GUARD-MIB::fdryIpSrcGuardIfEnable.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.1991.1.1.3.37.1.1.1.1.1 s <value>
Start monitoring Brocade/Foundry FastIron switch (IP Source Guard) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the FOUNDRY-IP-SOURCE-GUARD-MIB::fdryIpSrcGuardIfEnable OID value, configure state conditions and alerts, and monitor any Brocade/Foundry FastIron switch (IP Source Guard) from a single console.
OID Breakdown
Upper-level ancestors (14 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.1991 | foundry | FOUNDRY-SN-ROOT-MIB |
| 1.3.6.1.4.1.1991.1 | products | FOUNDRY-SN-ROOT-MIB |
| 1.3.6.1.4.1.1991.1.1 | switch | FOUNDRY-SN-ROOT-MIB |
| 1.3.6.1.4.1.1991.1.1.3 | snSwitch | FOUNDRY-SN-ROOT-MIB |
| 1.3.6.1.4.1.1991.1.1.3.37 | fdryIpSrcGuardMIB | FDRY-IP-SOURCE-GUARD-MIB |
| 1.3.6.1.4.1.1991.1.1.3.37.1 | fdryIpSrcGuardInterface | FDRY-IP-SOURCE-GUARD-MIB |
| 1.3.6.1.4.1.1991.1.1.3.37.1.1 | fdryIpSrcGuardIfConfigTable | FDRY-IP-SOURCE-GUARD-MIB |
| 1.3.6.1.4.1.1991.1.1.3.37.1.1.1 | fdryIpSrcGuardIfConfigEntry | FDRY-IP-SOURCE-GUARD-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.1991.1.1.3.37.1.1.1.1 | fdryIpSrcGuardIfEnable | FOUNDRY-IP-SOURCE-GUARD-MIB |