All MIBs › HH3C-ARP-SOURCE-SUPPRESSION-MIB
Organization: Hangzhou H3C Technologies Co., Ltd.
Last Updated: 2013-10-14
Category: Domain: Security, Vendor: H3C/HH3C
Description: Manages ARP source suppression on H3C devices to limit ARP request storms from specific hosts.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HH3C-ARP-SOURCE-SUPPRESSION-MIB?
HH3C-ARP-SOURCE-SUPPRESSION-MIB is an H3C proprietary MIB providing management objects for the ARP source suppression feature, which protects switches and routers from ARP request floods originating from a single suspicious or misbehaving host. It exposes a small set of scalar configuration objects: a global enable switch and a rate limit threshold for ARP requests per source. This is primarily a security/control-plane protection feature rather than a hardware or performance monitoring MIB, though enabling it protects device CPU health by preventing ARP-flood-induced CPU exhaustion, so administrators indirectly use it to safeguard control-plane software stability. It has no apparent dependency on other MIBs beyond basic ARP/IP addressing concepts already standardized in IETF MIBs. It is typically deployed on H3C access-layer switches and routers in environments prone to ARP spoofing or flooding attacks, such as campus or data center edge networks, where administrators can download the HH3C-ARP-SOURCE-SUPPRESSION-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-ARP-SOURCE-SUPPRESSION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- H3C access-layer switches and routers
Monitoring Examples
An administrator would check hh3cARPSourceSuppressionEnable to confirm the feature is globally active, then review hh3cARPSourceSuppressionLimit to verify the configured per-source ARP request ceiling matches policy. If a host on the network begins generating excessive ARP requests (e.g., due to malware or a misconfigured NIC), this suppression limit prevents the flood from overwhelming the switch's control-plane CPU, and the operator would confirm via hh3cARPSourceSuppressionGlobal settings that protection is enforced network-wide.
What Can Be Monitored
- ARP source suppression enable state
- configured ARP request rate limit
Imported Objects
From HH3C-OID-MIB
| hh3cCommon | OBJECT-IDENTITY |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| TruthValue |
OIDs
RFC description
Vendor-private MIB for H3C (Hangzhou H3C) network equipment; manages ARP source suppression security feature on network interfaces.
Start monitoring H3C access-layer switch/router (ARP source suppression) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.