ME1200-ARP-INSPECTION-MIB

All MIBs › ME1200-ARP-INSPECTION-MIB

Organization: Cisco Systems, Inc

Last Updated: 2014-03-28

Category: Domain: Security, Vendor: Cisco

Description: Cisco ME1200 Metro Ethernet switch MIB for Dynamic ARP Inspection (DAI) configuration to prevent ARP spoofing attacks.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ME1200-ARP-INSPECTION-MIB?

ME1200-ARP-INSPECTION-MIB is a Cisco proprietary module for the ME1200 Metro Ethernet switch family, providing Dynamic ARP Inspection (DAI) configuration to protect against ARP spoofing attacks. It exposes global DAI admin state along with per-port and per-VLAN configuration objects controlling inspection mode, VLAN checking, logging type, and enforcement action. Its monitoring value is primarily security/configuration status: administrators can verify whether ARP inspection is globally enabled, which ports/VLANs have it active, and how detected violations are logged or acted upon. It depends on the switch's underlying VLAN and interface index model (standard IF-MIB/Q-BRIDGE-MIB conventions) to associate ARP inspection settings with physical ports and VLANs. It is typically deployed on Cisco ME1200 access/aggregation switches in metro Ethernet networks where protection against ARP spoofing is required. Engineers can download the ME1200-ARP-INSPECTION-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ME1200-ARP-INSPECTION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco ME1200 Metro Ethernet switch

Monitoring Examples

An administrator would poll me1200ArpInspectionGlobalsAdminState together with me1200ArpInspectionPortConfigTable/Entry to confirm which ports have me1200ArpInspectionPortConfigMode enabled and check me1200ArpInspectionPortConfigLogType for logging behavior. A port showing inspection disabled while me1200ArpInspectionVlanConfigVlanId indicates the VLAN itself requires inspection would reveal a misconfiguration exposing that port to ARP spoofing.

What Can Be Monitored

global ARP inspection admin state
per-port inspection mode
per-VLAN inspection configuration
VLAN checking status
inspection logging type/action

Imported Objects

From CISCOME1200-MIB

me1200SwitchMgmt

OBJECT-IDENTITY

From ME1200-TC

ME1200InterfaceIndex
ME1200RowEditorState

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

MacAddress
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
me1200ArpInspectionMib	1.3.6.1.4.1.9.9.815.1.63			This is a private version of the ARP Inspection MIB
me1200ArpInspectionMIBObjects	1.3.6.1.4.1.9.9.815.1.63.1
me1200ArpInspectionConfig	1.3.6.1.4.1.9.9.815.1.63.1.2
me1200ArpInspectionGlobals	1.3.6.1.4.1.9.9.815.1.63.1.2.1
T/F me1200ArpInspectionGlobalsAdminState	1.3.6.1.4.1.9.9.815.1.63.1.2.1.1	TruthValue	read-write	Enable/Disable the ARP Inspection global functionality.
me1200ArpInspectionPortConfigTable	1.3.6.1.4.1.9.9.815.1.63.1.2.2		not-accessible	This is a table for managing ARP Inspection per port basis
me1200ArpInspectionPortConfigEntry	1.3.6.1.4.1.9.9.815.1.63.1.2.2.1		not-accessible	Each port has a set of parameters
NUM me1200ArpInspectionPortConfigIfIndex	1.3.6.1.4.1.9.9.815.1.63.1.2.2.1.1	ME1200InterfaceIndex	not-accessible	Logical interface number of the physical port.
T/F me1200ArpInspectionPortConfigMode	1.3.6.1.4.1.9.9.815.1.63.1.2.2.1.2	TruthValue	read-write	Enable/Disable the ARP Inspection per-port functionality. Only when both Global Mode and Port Mode on a given port are enabled, ARP Inspection is enabled on this given port.
T/F me1200ArpInspectionPortConfigCheckVlan	1.3.6.1.4.1.9.9.815.1.63.1.2.2.1.3	TruthValue	read-write	Enable the ARP Inspection VLAN checking will log the inspected entries by referring to arpInspectionVlanConfigTable setting. Disable the ARP Inspection VLAN checking will log the inspected entries by referring to arpInspectionPortConfigTable setting.
ME1 me1200ArpInspectionPortConfigLogType	1.3.6.1.4.1.9.9.815.1.63.1.2.2.1.4	ME1200ArpInspectionLogType	read-write	The capability to log the inspected entries per port basis. none(0) will log nothing. deny(1) will log the denied entries. permit(2) will log the permitted entries. all(3) will log all kinds of inspected entries.
me1200ArpInspectionVlanConfigTable	1.3.6.1.4.1.9.9.815.1.63.1.2.3		not-accessible	This is a table for managing ARP Inspection per VLAN basis
me1200ArpInspectionVlanConfigEntry	1.3.6.1.4.1.9.9.815.1.63.1.2.3.1		not-accessible	Each VLAN has a set of parameters
I32 me1200ArpInspectionVlanConfigVlanId	1.3.6.1.4.1.9.9.815.1.63.1.2.3.1.1	Integer32	not-accessible	The VID of the VLAN.
ME1 me1200ArpInspectionVlanConfigLogType	1.3.6.1.4.1.9.9.815.1.63.1.2.3.1.2	ME1200ArpInspectionLogType	read-write	The capability to log the inspected entries per VLAN basis. none(0) will log nothing. deny(1) will log the denied entries. permit(2) will log the permitted entries. all(3) will log all kinds of inspected entries.
ME1 me1200ArpInspectionVlanConfigAction	1.3.6.1.4.1.9.9.815.1.63.1.2.3.1.100	ME1200RowEditorState	read-write	Action
me1200ArpInspectionVlanConfigTableRowEditor	1.3.6.1.4.1.9.9.815.1.63.1.2.4
I32 me1200ArpInspectionVlanConfigTableRowEditorVlanId	1.3.6.1.4.1.9.9.815.1.63.1.2.4.1	Integer32	read-write	The VID of the VLAN.
ME1 me1200ArpInspectionVlanConfigTableRowEditorLogType	1.3.6.1.4.1.9.9.815.1.63.1.2.4.2	ME1200ArpInspectionLogType	read-write	The capability to log the inspected entries per VLAN basis. none(0) will log nothing. deny(1) will log the denied entries. permit(2) will log the permitted entries. all(3) will log all kinds of inspected entries.
ME1 me1200ArpInspectionVlanConfigTableRowEditorAction	1.3.6.1.4.1.9.9.815.1.63.1.2.4.100	ME1200RowEditorState	read-write	Action
me1200ArpInspectionStaticConfigTable	1.3.6.1.4.1.9.9.815.1.63.1.2.5		not-accessible	This is a table for managing static ARP Inspection configuration
me1200ArpInspectionStaticConfigEntry	1.3.6.1.4.1.9.9.815.1.63.1.2.5.1		not-accessible	Each entry has a set of parameters
NUM me1200ArpInspectionStaticConfigIfIndex	1.3.6.1.4.1.9.9.815.1.63.1.2.5.1.1	ME1200InterfaceIndex	not-accessible	Logical interface number of the physical port.
I32 me1200ArpInspectionStaticConfigVlanId	1.3.6.1.4.1.9.9.815.1.63.1.2.5.1.2	Integer32	not-accessible	The VID of the VLAN.
MAC me1200ArpInspectionStaticConfigMacAddress	1.3.6.1.4.1.9.9.815.1.63.1.2.5.1.3	MacAddress	not-accessible	Assigned MAC address.
IP me1200ArpInspectionStaticConfigIpAddress	1.3.6.1.4.1.9.9.815.1.63.1.2.5.1.4	IpAddress	not-accessible	Assigned IPv4 address.
ME1 me1200ArpInspectionStaticConfigAction	1.3.6.1.4.1.9.9.815.1.63.1.2.5.1.100	ME1200RowEditorState	read-write	Action
me1200ArpInspectionStaticConfigTableRowEditor	1.3.6.1.4.1.9.9.815.1.63.1.2.6
NUM me1200ArpInspectionStaticConfigTableRowEditorIfIndex	1.3.6.1.4.1.9.9.815.1.63.1.2.6.1	ME1200InterfaceIndex	read-write	Logical interface number of the physical port.
I32 me1200ArpInspectionStaticConfigTableRowEditorVlanId	1.3.6.1.4.1.9.9.815.1.63.1.2.6.2	Integer32	read-write	The VID of the VLAN.
MAC me1200ArpInspectionStaticConfigTableRowEditorMacAddress	1.3.6.1.4.1.9.9.815.1.63.1.2.6.3	MacAddress	read-write	Assigned MAC address.
IP me1200ArpInspectionStaticConfigTableRowEditorIpAddress	1.3.6.1.4.1.9.9.815.1.63.1.2.6.4	IpAddress	read-write	Assigned IPv4 address.
ME1 me1200ArpInspectionStaticConfigTableRowEditorAction	1.3.6.1.4.1.9.9.815.1.63.1.2.6.100	ME1200RowEditorState	read-write	Action
me1200ArpInspectionStatus	1.3.6.1.4.1.9.9.815.1.63.1.3
me1200ArpInspectionDynamicAddressTable	1.3.6.1.4.1.9.9.815.1.63.1.3.1		not-accessible	This is a table for displaying all ARP Inspection entries
me1200ArpInspectionDynamicAddressEntry	1.3.6.1.4.1.9.9.815.1.63.1.3.1.1		not-accessible	Each entry has a set of parameters
NUM me1200ArpInspectionDynamicAddressIfIndex	1.3.6.1.4.1.9.9.815.1.63.1.3.1.1.1	ME1200InterfaceIndex	not-accessible	Logical interface number of the physical port.
I32 me1200ArpInspectionDynamicAddressVlanId	1.3.6.1.4.1.9.9.815.1.63.1.3.1.1.2	Integer32	not-accessible	The VID of the VLAN.
MAC me1200ArpInspectionDynamicAddressMacAddress	1.3.6.1.4.1.9.9.815.1.63.1.3.1.1.3	MacAddress	not-accessible	Assigned MAC address.
IP me1200ArpInspectionDynamicAddressIpAddress	1.3.6.1.4.1.9.9.815.1.63.1.3.1.1.4	IpAddress	not-accessible	Assigned IPv4 address.
ME1 me1200ArpInspectionDynamicAddressType	1.3.6.1.4.1.9.9.815.1.63.1.3.1.1.5	ME1200ArpInspectionRegisterStatus	read-only	Either static(0) or dynamic(1) for the specific ARP entry.
me1200ArpInspectionControl	1.3.6.1.4.1.9.9.815.1.63.1.4
me1200ArpInspectionControlGlobals	1.3.6.1.4.1.9.9.815.1.63.1.4.1
T/F me1200ArpInspectionControlGlobalsTranslateDynamicToStatic	1.3.6.1.4.1.9.9.815.1.63.1.4.1.1	TruthValue	read-write	To trigger the control action (only) when TRUE.
me1200ArpInspectionMIBConformance	1.3.6.1.4.1.9.9.815.1.63.2
me1200ArpInspectionMIBCompliances	1.3.6.1.4.1.9.9.815.1.63.2.1
me1200ArpInspectionMibCompliance	1.3.6.1.4.1.9.9.815.1.63.2.1.1			The compliance statement for the implementation.
me1200ArpInspectionMIBGroups	1.3.6.1.4.1.9.9.815.1.63.2.2
me1200ArpInspectionGlobalsInfoGroup	1.3.6.1.4.1.9.9.815.1.63.2.2.1			A collection of objects suitable for bulk operations.
me1200ArpInspectionPortConfigTableInfoGroup	1.3.6.1.4.1.9.9.815.1.63.2.2.2			A collection of objects suitable for bulk operations.
me1200ArpInspectionVlanConfigTableInfoGroup	1.3.6.1.4.1.9.9.815.1.63.2.2.3			A collection of objects suitable for bulk operations.
me1200ArpInspectionVlanConfigTableRowEditorInfoGroup	1.3.6.1.4.1.9.9.815.1.63.2.2.4			A collection of objects suitable for bulk operations.
me1200ArpInspectionStaticConfigTableInfoGroup	1.3.6.1.4.1.9.9.815.1.63.2.2.5			A collection of objects suitable for bulk operations.
me1200ArpInspectionStaticConfigTableRowEditorInfoGroup	1.3.6.1.4.1.9.9.815.1.63.2.2.6			A collection of objects suitable for bulk operations.
me1200ArpInspectionDynamicAddressTableInfoGroup	1.3.6.1.4.1.9.9.815.1.63.2.2.7			A collection of objects suitable for bulk operations.
me1200ArpInspectionControlGlobalsInfoGroup	1.3.6.1.4.1.9.9.815.1.63.2.2.8			A collection of objects suitable for bulk operations.

RFC description

Controls ARP inspection security features on Cisco ME1200 switches to prevent ARP spoofing attacks.

Start monitoring Cisco ME1200 Metro Ethernet switch (Dynamic ARP Inspection) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ME1200-ARP-INSPECTION-MIB

What Is ME1200-ARP-INSPECTION-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description