All MIBs › IP-MAC-BIND-MIB › swIpMacBindingAllPortState
swIpMacBindingAllPortState
Module: IP-MAC-BIND-MIB
OID (symbolic): IP-MAC-BIND-MIB::swIpMacBindingAllPortState
OID (numeric): 1.3.6.1.4.1.171.12.23.3.1
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: This object enables/disables IP-MAC binding on all the system ports. This action is only applicable when users have write privileges, and can only be viewed when users have read privileges.
Note: enable-strict (2): This means strict mode (SW learning). In this mode all packets will be sent to the CPU. The user can choose if the port will check the ARP packets and IP packets of the IP-MAC-PORT Binding entries. If the MAC address can be found or not found by the entry, the MAC address will be set as a dynamic learned or blocked entry, respectively. Other packets will be sent to the CPU and dropped.
enable-loose (4) : This means loose mode (HW learning): Only ARP packets and IP broadcast packets will be sent to the CPU. If the user chooses , the port will directly learn MAC addresses on non-ARP and non-IP broadcast packets, so these packets will be bypassed. However, if the switch receives ARP or IP broadcast packets and cannot bypass the IP MAC Binding checks, the switch will set this MAC address as blocked and all packets from this MAC address will be dropped.
What is swIpMacBindingAllPortState?
This enables or disables IP-MAC binding enforcement on every port at once, choosing between enable-strict (all traffic sent to the CPU for checking, unmatched MAC set to blocked) and enable-loose (only ARP/broadcast-IP traffic inspected in hardware, with unmatched MACs blocked). Admins pick strict mode for tighter security at higher CPU cost, or loose mode to offload most traffic to hardware learning.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.171.12.23.3.1 snmpwalk -v2c -c public <target> IP-MAC-BIND-MIB::swIpMacBindingAllPortState
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.171.12.23.3.1.1 snmpget -v2c -c public <target> IP-MAC-BIND-MIB::swIpMacBindingAllPortState.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.171.12.23.3.1.1 i <value>
Start monitoring D-Link managed switch (IP-MAC Binding security feature) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IP-MAC-BIND-MIB::swIpMacBindingAllPortState OID value, configure state conditions and alerts, and monitor any D-Link managed switch (IP-MAC Binding security feature) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.171 | d_link | DE1500-MIB |
| 1.3.6.1.4.1.171.12 | dlink_common_mgmt | DLINK-ID-REC-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.171.12.23 | swIpMacBindMIB | IP-MAC-BIND-MIB |
| 1.3.6.1.4.1.171.12.23.3 | swIpMacBindingPortMgmt | IP-MAC-BIND-MIB |
| 1.3.6.1.4.1.171.12.23.3.1 | swIpMacBindingAllPortState | IP-MAC-BIND-MIB |