HPN-ICF-ARP-SOURCE-SUPPRESSION-MIB

Description: HP Networking ICF SNMP MIB for ARP source suppression limiting ARP requests from specific sources on HP networking devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

HPN-ICF-ARP-SOURCE-SUPPRESSION-MIB is an HPE/H3C Comware ICF private MIB defining objects for the ARP source suppression feature, which limits the number of ARP requests a switch will process for unresolved addresses from a given source, protecting the CPU from ARP-based denial-of-service attempts. It exposes a small global configuration group: an enable switch (hpnicfARPSourceSuppressionEnable) and a request limit (hpnicfARPSourceSuppressionLimit) under hpnicfARPSourceSuppressionObjects/Global. As a narrow security-hardening MIB it exposes no hardware sensors; its monitoring value lies in confirming ARP-flood mitigation is actively enabled and correctly thresholded. Persistent hits against the configured limit can indicate an ongoing ARP-based attack or a misbehaving host generating excessive unresolved ARP requests. It builds on the standard SNMPv2-SMI framework and, like other HPN-ICF modules, is deployed on HPE/H3C Comware switches and routers running the HPN-ICF-ARP-SOURCE-SUPPRESSION-MIB MIB.

An admin polls hpnicfARPSourceSuppressionEnable to confirm the feature is active and hpnicfARPSourceSuppressionLimit to verify the configured per-source ARP request ceiling. If suppression is unexpectedly disabled on a switch that should be protected, or the limit is set far above the network baseline, that drift would be visible via these two scalars during a compliance audit.

Controls and monitors ARP source suppression to limit unresolvable packets from network sources.