All MIBs › IP-MAC-BIND-MIB
Organization: D-Link Corp.
Last Updated: 2010-04-26
Category: Domain: Security, Vendor: D-Link
Description: D-Link IP-MAC binding MIB providing SNMP objects for configuring static IP-to-MAC address bindings for network security enforcement.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is IP-MAC-BIND-MIB?
IP-MAC-BIND-MIB is a D-Link Corp. proprietary MIB implementing IP-MAC Binding, which combines DHCP snooping, ARP inspection, and IPv6 ND snooping to bind a port to authorized IP/MAC pairs. Its objects cover trap-log state, ACL mode, recovery interval, DHCP-snoop/ARP-inspection/IPv6-DHCP-snoop/ND-snoop enable flags with clear-all-entries actions, an all-port enable state, and a per-port table (state, allow-zero-IP flag, forward-DHCP-packet flag, max DHCP-snoop entries, clear-entries action, mode, stop/recover-learning threshold, learning status, IPv6 state, and IPv6 DHCP-snoop max entries). As a configuration/security MIB it lets an administrator confirm which ports are protected by IP-MAC Binding and watch for a port that auto-disabled learning due to a spoofing attempt. It is deployed on D-Link managed switches. Engineers can download the IP-MAC-BIND-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in IP-MAC-BIND-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- D-Link managed switches (IP-MAC Binding)
Monitoring Examples
An administrator checks swIpMacBindingPortLearningStatus to confirm whether a port auto-stopped learning due to exceeding its spoofing threshold on a D-Link switch.
What Can Be Monitored
- per-port IP-MAC binding enforcement and learning status
This MIB depends on
Related MIBs
Imported Objects
From DLINK-ID-REC-MIB
| dlink-common-mgmt |
From IPV6-TC
| Ipv6Address |
From RFC1213-MIB
| DisplayString |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-SMI
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DateAndTime | |
| MacAddress | |
| RowStatus |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| INT swIpMacBindingACLMode | 1.3.6.1.4.1.171.12.23.1.2 | INTEGER | read-write | When enabled (2), the IP-MAC Binding function will use the ACL mode. Note: Supported in IP-MAC binding v3.3 only. |
| INT swIpMacBindingAclStatus | 1.3.6.1.4.1.171.12.23.4.1.1.7 | INTEGER | read-only | This object indicates the ACL status of this entry. |
| INT swIpMacBindingAction | 1.3.6.1.4.1.171.12.23.4.1.1.5 | INTEGER | read-only | The action of this entry. Note: Supported in IP-MAC binding v3.5 and the earlier versions. |
| INT swIpMacBindingAllPortState | 1.3.6.1.4.1.171.12.23.3.1 | INTEGER | read-write | This object enables/disables IP-MAC binding on all the system ports. This action is only applicable when users have write privileges, and can only be viewed when users have read privileges. Note: enable-strict (2): This means strict mode (SW learning). In this mode all packets will be sent to the CPU. The user can choose if the port will check the ARP packets and IP packets of the IP-MAC-PORT Binding entries. If the MAC address can be found or not found by the entry, the MAC address will be set as a dynamic learned or blocked entry, respectively. Other packets will be sent to the CPU and dropped. enable-loose (4) : This means loose mode (HW learning): Only ARP packets and IP broadcast packets will be sent to the CPU. If the user chooses , the port will directly learn MAC addresses on non-ARP and non-IP broadcast packets, so these packets will be bypassed. However, if the switch receives ARP or IP broadcast packets and cannot bypass the IP MAC Binding checks, the switch will set this MAC address as blocked and all packets from this MAC address will be dropped. |
| INT swIpMacBindingARPInspectionState | 1.3.6.1.4.1.171.12.23.1.6 | INTEGER | read-write | Used to set the ARP inspection state. |
| swIpMacBindingBlockedEntry | 1.3.6.1.4.1.171.12.23.4.2.1 | not-accessible | The entry cannot be created or configured. It can only be deleted. | |
| MAC swIpMacBindingBlockedMac | 1.3.6.1.4.1.171.12.23.4.2.1.2 | MacAddress | read-only | The MAC address that was blocked. |
| INT swIpMacBindingBlockedPort | 1.3.6.1.4.1.171.12.23.4.2.1.4 | INTEGER | read-only | The port that the MAC is associated with. |
| ROW swIpMacBindingBlockedStatus | 1.3.6.1.4.1.171.12.23.4.2.1.7 | RowStatus | read-create | The status of this entry. Currently only the destroy (6) option can be used to delete this entry. |
| swIpMacBindingBlockedTable | 1.3.6.1.4.1.171.12.23.4.2 | not-accessible | This table displays information regarding the blocked MAC addresses. | |
| DAT swIpMacBindingBlockedTime | 1.3.6.1.4.1.171.12.23.4.2.1.6 | DateAndTime | read-only | This object specifies the last time that this entry was generated. |
| INT swIpMacBindingBlockedType | 1.3.6.1.4.1.171.12.23.4.2.1.5 | INTEGER | read-write | The value is always blockByAddrBind. This entry will be deleted when the value is set to 'delete'. |
| VLA swIpMacBindingBlockedVID | 1.3.6.1.4.1.171.12.23.4.2.1.1 | VlanId | read-only | This object specifies the VLAN ID. |
| STR swIpMacBindingBlockedVlanName | 1.3.6.1.4.1.171.12.23.4.2.1.3 | DisplayString | read-only | This object specifies the VLAN name. |
| swIpMacBindingCtrl | 1.3.6.1.4.1.171.12.23.1 | |||
| swIpMacBindingDHCPSnoopEntry | 1.3.6.1.4.1.171.12.23.4.3.1 | not-accessible | A list containing information about the DHCP snooping learning IP-MAC binding entry. | |
| INT swIpMacBindingDHCPSnoopEntryClearAllState | 1.3.6.1.4.1.171.12.23.1.5 | INTEGER | read-write | Used to clear all the entries created by DHCP packets. |
| IP swIpMacBindingDHCPSnoopIpIndex | 1.3.6.1.4.1.171.12.23.4.3.1.1 | IpAddress | read-only | The IP address of this entry. |
| INT swIpMacBindingDHCPSnoopLeaseTime | 1.3.6.1.4.1.171.12.23.4.3.1.3 | INTEGER | read-only | Specifies the lease time of this entry. When the lease time expires, this entry will be removed from this port. |
| MAC swIpMacBindingDHCPSnoopMac | 1.3.6.1.4.1.171.12.23.4.3.1.2 | MacAddress | read-only | The MAC address of this entry. |
| INT swIpMacBindingDHCPSnoopPort | 1.3.6.1.4.1.171.12.23.4.3.1.4 | INTEGER | read-only | Specifies the port of this entry. |
| INT swIpMacBindingDHCPSnoopState | 1.3.6.1.4.1.171.12.23.1.4 | INTEGER | read-write | When the dhcp_snoop function is enabled, all address_binding disabled ports will act as DHCP server ports (the switch will learn IP addresses through DHCP server ports (by DHCP OFFER and DHCP ACK packets)). The auto-learned IP-MAC binding entry will be mapped to a specific source port based on the MAC address learning function. This entry will be created as an ACL-mode binding entry for this specific port. Each entry is associated with a lease time. When the lease time expires, the expired entry will be removed from this port. The automatically learned binding entry can be moved from one port to another port if the DHCP snooping function has learned that the MAC address has moved to a different port. Consider a case where DHCP snooping learns a binding entry, and the same IP-MAC binding entry has been statically configured. Suppose that the learned information is consistent with the statically configured entry, then the automatically learned entry will not be created. Supposing that the entry has been statically configured in ARP mode, since the automatically learned entry will be created in ACL mode, the entry will become an ACL mode entry. Supposing that the entry is statically configured on one port and the entry is automatically learned on another port, then both entries will exist. When the dhcp_snoop function is disabled, all of the automatically learned binding entries will be removed. |
| INT swIpMacBindingDHCPSnoopStatus | 1.3.6.1.4.1.171.12.23.4.3.1.5 | INTEGER | read-only | Specifies the status (inactive or active) of this entry. |
| swIpMacBindingDHCPSnoopTable | 1.3.6.1.4.1.171.12.23.4.3 | not-accessible | The table specifies information regarding the IP-MAC binding entries that were learned by the DHCP snooping function. | |
| swIpMacBindingEntry | 1.3.6.1.4.1.171.12.23.4.1.1 | not-accessible | The IP-MAC binding entry used to add/delete/configure the address pair of the switch's authorized user database. | |
| swIpMacBindingInfo | 1.3.6.1.4.1.171.12.23.2 | |||
| IP swIpMacBindingIpIndex | 1.3.6.1.4.1.171.12.23.4.1.1.1 | IpAddress | read-only | The IP address of the IP-MAC binding entry. |
| INT swIpMacBindingIPv6ACLStatus | 1.3.6.1.4.1.171.12.23.4.4.1.5 | INTEGER | read-only | The ACL Status of the IPv6 IP-MAC binding entry. |
| ADR swIpMacBindingIPv6Addr | 1.3.6.1.4.1.171.12.23.4.4.1.1 | Ipv6Address | read-only | The IPv6 address of the IPv6 IP-MAC binding entry. |
| ADR swIpMacBindingIPv6DHCPSnoopAddr | 1.3.6.1.4.1.171.12.23.4.5.1.1 | Ipv6Address | read-only | The IPv6 address of this entry. |
| swIpMacBindingIPv6DHCPSnoopEntry | 1.3.6.1.4.1.171.12.23.4.5.1 | not-accessible | A list containing information about the IPv6 DHCP snooping learning IPv6 IP-MAC binding entry. | |
| INT swIpMacBindingIPv6DHCPSnoopEntryClearAllState | 1.3.6.1.4.1.171.12.23.1.9 | INTEGER | read-write | Used to clear all the entries learned by IPv6 DHCP snooping. |
| INT swIpMacBindingIPv6DHCPSnoopLeaseTime | 1.3.6.1.4.1.171.12.23.4.5.1.3 | INTEGER | read-only | Specifies the lease time of this entry. When the lease time expires, this entry will be removed. |
| MAC swIpMacBindingIPv6DHCPSnoopMac | 1.3.6.1.4.1.171.12.23.4.5.1.2 | MacAddress | read-only | The MAC address of this entry. |
| INT swIpMacBindingIPv6DHCPSnoopPort | 1.3.6.1.4.1.171.12.23.4.5.1.4 | INTEGER | read-only | Specifies the port of this entry. |
| INT swIpMacBindingIPv6DHCPSnoopState | 1.3.6.1.4.1.171.12.23.1.7 | INTEGER | read-write | This object indicates the global state of IPv6 DHCP snooping. |
| INT swIpMacBindingIPv6DHCPSnoopStatus | 1.3.6.1.4.1.171.12.23.4.5.1.5 | INTEGER | read-only | Specifies the status (inactive or active) of this entry. |
| swIpMacBindingIPv6DHCPSnoopTable | 1.3.6.1.4.1.171.12.23.4.5 | not-accessible | The table specifies information regarding the IPv6 DHCP snooping function learning IPv6 IP-MAC binding entries. | |
| swIpMacBindingIPv6Entry | 1.3.6.1.4.1.171.12.23.4.4.1 | not-accessible | The IPv6 IP-MAC binding entry is used to add/delete/configure an IPv6 address and MAC address pair in the switch's authorized user database. | |
| MAC swIpMacBindingIPv6MacAddr | 1.3.6.1.4.1.171.12.23.4.4.1.2 | MacAddress | read-create | The MAC address of the IPv6 IP-MAC binding entry. |
| INT swIpMacBindingIPv6Mode | 1.3.6.1.4.1.171.12.23.4.4.1.4 | INTEGER | read-only | The mode of the IPv6 IP-MAC binding entry. static(1): When the Static mode is employed, it means this entry is manually configured. dhcp-snooping(2): This mode cannot be configured, and when the dhcp-snooping mode is employed, it means this entry is to be learned by IPv6 DHCP snooping. nd-snooping(3): This mode cannot be configured, and when the nd-snooping mode is employed, it means this entry is to be learned by ND snooping. |
| POR swIpMacBindingIPv6Portlist | 1.3.6.1.4.1.171.12.23.4.4.1.3 | PortList | read-create | The port members of the IPv6 IP-MAC binding entry. |
| ROW swIpMacBindingIPv6RowStatus | 1.3.6.1.4.1.171.12.23.4.4.1.6 | RowStatus | read-create | The status of this conceptual row. To create a row in this table, a manager must set this object to createAndGo(4). To delete a row in this table, a manager must set this object to destroy(6). |
| swIpMacBindingIPv6Table | 1.3.6.1.4.1.171.12.23.4.4 | not-accessible | This table specifies the IPv6 IP-MAC binding information. | |
| NTF swIpMacBindingIPv6ViolationTrap | 1.3.6.1.4.1.171.12.23.5.0.4 | When the IP-MAC Binding trap is enabled, if there's a new MAC that violates the pre-defined IPv6 IP-MAC Binding configuration, a trap will be sent out. | ||
| MAC swIpMacBindingMac | 1.3.6.1.4.1.171.12.23.4.1.1.2 | MacAddress | read-create | The MAC address of the IP-MAC binding entry. |
| swIpMacBindingMgmt | 1.3.6.1.4.1.171.12.23.4 | |||
| INT swIpMacBindingMode | 1.3.6.1.4.1.171.12.23.4.1.1.6 | INTEGER | read-create | The mode of this entry. arp: This entry is specified as an ARP mode entry, and this entry will not be added as an access entry. If this object is not specified, the mode defaults to ARP mode. If the system is in ARP mode, the ARP mode entries and ACL mode entries will be effective. If the system is in ACL mode, only the ACL mode entries will be active.(Note: Supported on IP-MAC binding v3.5 and the earlier version.) acl: This entry is specified as an ACL mode entry. If the user enables the ACL mode, this entry will be added as an access entry. (Note: Supported in IP-MAC binding v3.3 only). dhcp-snooping: This mode cannot be configured, and when the dhcp-snooping mode is employed, it means that this entry has been learned by DHCP snooping. static: This entry is manually configured. |
| ADR swIpMacBindingNDSnoopAddr | 1.3.6.1.4.1.171.12.23.4.6.1.1 | Ipv6Address | read-only | The IPv6 address of this entry. |
| swIpMacBindingNDSnoopEntry | 1.3.6.1.4.1.171.12.23.4.6.1 | not-accessible | A list of information about the ND snooping learning IPv6 IP-MAC binding entry. | |
| INT swIpMacBindingNDSnoopEntryClearAllState | 1.3.6.1.4.1.171.12.23.1.10 | INTEGER | read-write | Used to clear all the entries learned by ND snooping. |
| INT swIpMacBindingNDSnoopLeaseTime | 1.3.6.1.4.1.171.12.23.4.6.1.3 | INTEGER | read-only | Specifies the lease time of this entry. When the lease time expires, this entry will be removed. |
| MAC swIpMacBindingNDSnoopMac | 1.3.6.1.4.1.171.12.23.4.6.1.2 | MacAddress | read-only | The MAC address of this entry. |
| INT swIpMacBindingNDSnoopPort | 1.3.6.1.4.1.171.12.23.4.6.1.4 | INTEGER | read-only | Specifies the port of this entry. |
| INT swIpMacBindingNDSnoopState | 1.3.6.1.4.1.171.12.23.1.8 | INTEGER | read-write | This object indicates the global state of ND snooping. |
| INT swIpMacBindingNDSnoopStatus | 1.3.6.1.4.1.171.12.23.4.6.1.5 | INTEGER | read-only | Specifies the status (inactive or active) of this entry. |
| swIpMacBindingNDSnoopTable | 1.3.6.1.4.1.171.12.23.4.6 | not-accessible | The table specifies information regarding the ND snooping function of learning IPv6 IP-MAC binding entries. | |
| swIpMacBindingNotificationBidings | 1.3.6.1.4.1.171.12.23.5.2 | |||
| swIpMacBindingNotify | 1.3.6.1.4.1.171.12.23.5 | |||
| swIpMacBindingNotifyPrefix | 1.3.6.1.4.1.171.12.23.5.0 | |||
| INT swIpMacBindingPortARPInspection | 1.3.6.1.4.1.171.12.23.3.2.1.16 | INTEGER | read-write | This object used to set ARP inspection state on the specified port. When ARP inspection is enabled on the port, the legal ARP packets will be forward, while the illegal packets will be dropped. strict : In this mode, all packets are dropped by default until a legal ARP or broadcast IP packets are detected. loose: In this mode, all packets are forwarded by default until an illegal ARP or broadcast IP packets are detected. |
| INT swIpMacBindingPortDHCPSnoopEntryClearAction | 1.3.6.1.4.1.171.12.23.3.2.1.6 | INTEGER | read-write | When set to start (2), the address binding entries learned for the specified ports will be cleared. When get, it always returns other (1). |
| INT swIpMacBindingPortDHCPSnoopMaxEntry | 1.3.6.1.4.1.171.12.23.3.2.1.5 | INTEGER | read-write | This object indicates the max entry created by DHCP packets on the specified port. Note: The max entry range is (0..N), the N value indicates the maximum number, which is determined by the project itself. When 0 is set on the specified port, there is no limit on the maximum number of entries that can be created by DHCP packets . |
| swIpMacBindingPortEntry | 1.3.6.1.4.1.171.12.23.3.2.1 | not-accessible | A list containing information about the IP-MAC binding function of a port. | |
| INT swIpMacBindingPortForwardDhcpPkt | 1.3.6.1.4.1.171.12.23.3.2.1.4 | INTEGER | read-write | This object can be set to forward DHCP packets or not forward DHCP packets on the specified port. |
| INT swIpMacBindingPortIndex | 1.3.6.1.4.1.171.12.23.3.2.1.1 | INTEGER | read-only | This object indicates the module's port number. (1..Max port number in the module). |
| INT swIpMacBindingPortIPInspection | 1.3.6.1.4.1.171.12.23.3.2.1.17 | INTEGER | read-write | This object used to set the IP inspection state on the specified port. When IP inspection is enabled on the port, the legal IP packets will be forwarded, while the illegal IP packets will be dropped. |
| INT swIpMacBindingPortIPProtocol | 1.3.6.1.4.1.171.12.23.3.2.1.18 | INTEGER | read-write | This object is used to set which kind of IP packets need to be checked by IP-MAC-PORT binding on the specified port. ipv4: Only IPv4 packets will be checked. ipv6: Only IPv6 packets will be checked. all: Both IPv4 and IPv6 packets will be checked. |
| INT swIpMacBindingPortIPv6DHCPSnoopEntryClearAction | 1.3.6.1.4.1.171.12.23.3.2.1.14 | INTEGER | read-write | When set to start (2), the address binding entries learned by IPv6 DHCP snooping on the specified ports will be cleared. When get, it always returns other (1). |
| INT swIpMacBindingPortIPv6DHCPSnoopMaxEntry | 1.3.6.1.4.1.171.12.23.3.2.1.12 | INTEGER | read-write | This object indicates the maximum number of entries that can be learned by IPv6 DHCP snooping on the specified port. Note: The maximum entry range is (0..N), the N value indicates the maximum number, which is determined by the project itself. When 0 is set on the specified port, there is no limit on the number of maximum entries that can be learned by DHCP snooping. |
| INT swIpMacBindingPortIPv6State | 1.3.6.1.4.1.171.12.23.3.2.1.11 | INTEGER | read-write | This object enables/disables IPv6 IP-MAC binding on the specified port. |
| INT swIpMacBindingPortLearningStatus | 1.3.6.1.4.1.171.12.23.3.2.1.10 | INTEGER | read-only | This object indicates the learning status of a port. When the status is stop (2), the port will stop learning new addresses and the packets with new addresses will be dropped. |
| swIpMacBindingPortMgmt | 1.3.6.1.4.1.171.12.23.3 | |||
| INT swIpMacBindingPortMode | 1.3.6.1.4.1.171.12.23.3.2.1.7 | INTEGER | read-write | The mode of this entry. arp: This entry is specified as an ARP mode entry, and this entry will not be added as an access entry. If this object is not specified, the mode defaults to ARP mode. If the system is in ARP mode, the ARP mode entries and ACL mode entries will be effective. If the system is in ACL mode, only the ACL mode entries will be active. acl: This entry is specified as an ACL mode entry. If the user enables the ACL mode, this entry will be added as an access entry. |
| INT swIpMacBindingPortNDSnoopEntryClearAction | 1.3.6.1.4.1.171.12.23.3.2.1.15 | INTEGER | read-write | When set to start (2), the address binding entries learnt by ND snooping on the specified ports will be cleared. When get, it always returns other (1). |
| INT swIpMacBindingPortNDSnoopMaxEntry | 1.3.6.1.4.1.171.12.23.3.2.1.13 | INTEGER | read-write | This object indicates the maximum number of entries that can be learned by ND snooping on the specified port. Note: The maximum entry range is (0..N), the N value indicates the maximum number, which is determined by the project itself. When 0 is set on the specified port, there is no limit on the maximum number of entries that can be learned by ND snooping is no limit. |
| INT swIpMacBindingPortRecoverLearning | 1.3.6.1.4.1.171.12.23.3.2.1.9 | INTEGER | read-write | When set to start (2), it will change from the stop_learning state to the normal state on the specified port. When get, it always returns other (1). |
| POR swIpMacBindingPorts | 1.3.6.1.4.1.171.12.23.4.1.1.4 | PortList | read-create | The port members of this entry. |
| INT swIpMacBindingPortState | 1.3.6.1.4.1.171.12.23.3.2.1.2 | INTEGER | read-write | This object enables (strict or loose mode)/disables IP-MAC binding on the specified port. Note: enable-strict (2): This means strict mode (SW learning). All packets are sent to the CPU. If the user chooses this option, the port will check ARP packets and IP packets by the IP-MAC-PORT Binding entries. If the MAC address can or cannot be found by the entry, the MAC will be set as a dynamic learned or blocked entry, respectively. Other packets will be sent to the CPU and dropped. enable-loose (4) : This means loose mode (HW learning): Only ARP packets and IP broadcast packets will be sent to the CPU. If the user chooses, the port will learn MAC addresses on non-ARP and non-IP broadcast packets directly, so these packets will be bypassed. However, if the switch receives ARP or IP broadcast packets and cannot bypass the IP MAC Binding checks, the switch will set this MAC address as blocked and all packets from this MAC address will be dropped. |
| INT swIpMacBindingPortStopLearningThreshold | 1.3.6.1.4.1.171.12.23.3.2.1.8 | INTEGER | read-write | This object indicates the threshold to stop learning new MAC addresses on the specified port. When the number of blocked entries exceeds the threshold, the port will stop learning new addresses. The packet with new addresses will be dropped. Note: When 0 is set on the specified port, it means no limit. |
| swIpMacBindingPortTable | 1.3.6.1.4.1.171.12.23.3.2 | not-accessible | The table specifies the IP-MAC binding function of a specified port. | |
| INT swIpMacBindingPortZeroIPState | 1.3.6.1.4.1.171.12.23.3.2.1.3 | INTEGER | read-write | Specifies whether to allow ARP packets with the SIP address 0.0.0.0, regardless of whether the IP address 0.0.0.0 is set in the binding list or not. When set to enable, the ARP packets with the SIP address 0.0.0.0 will be allowed. When set to disable, ARP packets with the SIP address 0.0.0.0 will be dropped. Note: This option does not affect the IP-MAC-Port binding ACL Mode. |
| NTF swIpMacBindingRecoverLearningTrap | 1.3.6.1.4.1.171.12.23.5.0.3 | When the IP-MAC Binding trap is enabled, if the specific port changes from a stop_learning state to a normal state, a trap will be sent out. | ||
| INT swIpMacBindingRecoveryInterval | 1.3.6.1.4.1.171.12.23.1.3 | INTEGER | read-write | Specifies the seconds in which the switch will delete the blocked ARL (Address Resolution Logic) entry in order to relearn the entry. This is a mechanism by which the switch can recover an ARL entry from the blocked state to the normal state. A value of '0' means an infinite state. Note: This object is specific to models that are unable to recover a blocked MAC address without removing the blocked ARL entry and relearning the entry. |
| ROW swIpMacBindingStatus | 1.3.6.1.4.1.171.12.23.4.1.1.3 | RowStatus | read-create | The status of this entry. |
| NTF swIpMacBindingStopLearningTrap | 1.3.6.1.4.1.171.12.23.5.0.2 | When the IP-MAC Binding trap is enabled, if the specific port changes from a normal state to a stop_learning state, a trap will be sent out. | ||
| swIpMacBindingTable | 1.3.6.1.4.1.171.12.23.4.1 | not-accessible | This table specifies the IP-MAC binding information. | |
| INT swIpMacBindingTrapLogState | 1.3.6.1.4.1.171.12.23.1.1 | INTEGER | read-write | When enabled (2), whenever there is a new MAC that violates the pre-defined IP MAC Binding configuration, a trap will be sent out and the relevant information will be logged into the system. |
| IP swIpMacBindingViolationIP | 1.3.6.1.4.1.171.12.23.5.2.1 | IpAddress | accessible-for-notify | This object indicates the IP address that violates the IP-MAC Binding configuration. |
| ADR swIpMacBindingViolationIPv6Addr | 1.3.6.1.4.1.171.12.23.5.2.3 | Ipv6Address | accessible-for-notify | This object indicates the IPv6 address that violates the IPv6 IP-MAC Binding entry. |
| MAC swIpMacBindingViolationMac | 1.3.6.1.4.1.171.12.23.5.2.2 | MacAddress | accessible-for-notify | This object indicates the MAC address that violates the IP-MAC Binding configuration. |
| NTF swIpMacBindingViolationTrap | 1.3.6.1.4.1.171.12.23.5.0.1 | When the IP-MAC Binding trap is enabled, if there's a new MAC that violates the pre-defined port security configuration, a trap will be sent out. | ||
| swIpMacBindMIB | 1.3.6.1.4.1.171.12.23 | The structure of IP-MAC binding management for the proprietary enterprise. |
RFC description
IP to MAC address binding MIB for managing and monitoring IP-to-MAC address mappings. Provides SNMP objects for querying and managing dynamic address resolution tables on network devices.
Start monitoring D-Link managed switch (IP-MAC Binding security feature) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.