All MIBs › HP-ICF-ARP-PROTECT › hpicfArpProtectVlanStatBadDstMacs
hpicfArpProtectVlanStatBadDstMacs
Module: HP-ICF-ARP-PROTECT
OID (symbolic): HP-ICF-ARP-PROTECT::hpicfArpProtectVlanStatBadDstMacs
OID (numeric): 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.6
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: The number of unicast ARP response packets received on untrusted ports that were dropped because the destination MAC address in the Ethernet header did not match the target MAC address in the body of the ARP packet. This count does not increment when destination address validation is not enabled. This count does not increment for VLANs for which Dynamic ARP Protection is not enabled.
What is hpicfArpProtectVlanStatBadDstMacs?
This read-only Counter32 counts, per its source description, unicast ARP response packets from untrusted ports dropped because the Ethernet destination MAC didn't match the ARP target MAC in the packet body, and only increments when destination MAC validation (the dstMac bit of hpicfArpProtectValidation) and Dynamic ARP Protection are both enabled for the VLAN. Admins watch this counter to catch ARP responses being misdirected or spoofed toward the wrong Ethernet destination. For example, a nonzero BadDstMacs count would suggest an attacker is crafting ARP replies that don't correctly target the requesting host's actual MAC address.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.6 snmpwalk -v2c -c public <target> HP-ICF-ARP-PROTECT::hpicfArpProtectVlanStatBadDstMacs
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.6.1 snmpget -v2c -c public <target> HP-ICF-ARP-PROTECT::hpicfArpProtectVlanStatBadDstMacs.1
Start monitoring HP Networking managed switch (Dynamic ARP Protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the HP-ICF-ARP-PROTECT::hpicfArpProtectVlanStatBadDstMacs OID value, configure state conditions and alerts, and monitor any HP Networking managed switch (Dynamic ARP Protection) from a single console.
OID Breakdown
Upper-level ancestors (12 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.11 | hp | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2 | nm | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2.14 | icf | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11 | hpicfObjects | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5 | hpicfSwitch | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1 | hpSwitch | CONFIG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.11.2.14.11.5.1.37 | hpicfArpProtect | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1 | hpicfArpProtectObjects | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2 | hpicfArpProtectStatus | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1 | hpicfArpProtectVlanStatTable | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1 | hpicfArpProtectVlanStatEntry | HP-ICF-ARP-PROTECT |
| 1.3.6.1.4.1.11.2.14.11.5.1.37.1.2.1.1.6 | hpicfArpProtectVlanStatBadDstMacs | HP-ICF-ARP-PROTECT |