H3C-ARP-SOURCE-SUPPRESSION-MIB

Description: H3C MIB for ARP source suppression, limiting ARP requests from hosts generating excessive ARP traffic.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

H3C-ARP-SOURCE-SUPPRESSION-MIB is an H3C private-enterprise MIB for the ARP source suppression feature, a security control that limits the rate of ARP requests from any single host to protect the device from ARP-flood-based denial-of-service attacks. It exposes configuration data: whether suppression is globally enabled and the configured per-host rate limit. It is used primarily for security-configuration monitoring rather than hardware/software health: an operator confirms the feature is active and correctly thresholded, which is itself a proactive fault-prevention measure against ARP flooding. It is implemented as an H3C proprietary extension that complements standard ARP-handling behavior described in RFC 826/RFC 1213 rather than replacing it. Deployment context is H3C switches and routers in enterprise LANs seeking to mitigate ARP-flood attacks from compromised or malicious hosts. Engineers can download the H3C-ARP-SOURCE-SUPPRESSION-MIB file directly to load it into their MIB browser.

An administrator polls h3cARPSourceSuppressionEnable to confirm the feature is turned on and h3cARPSourceSuppressionLimit to verify the configured maximum ARP-requests-per-second per host. After a suspected ARP flood incident, checking h3cARPSourceSuppressionGlobal confirms whether the global suppression policy was in force at the time, helping determine whether the attack was mitigated as configured.

Controls ARP source suppression to limit unresolvable packets from specific network devices.