All MIBs › MY-ANTI-ARPCHEAT-MIB
Organization: D-Link Crop.
Last Updated: 2007-01-29
Category: Security
Description: Manages D-Link ARP spoofing prevention policy and trusted binding table entries.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is MY-ANTI-ARPCHEAT-MIB?
MY-ANTI-ARPCHEAT-MIB is a D-Link proprietary MIB that manages the switch's ARP spoofing prevention ("anti-ARP-cheat") feature, which protects against man-in-the-middle attacks by validating ARP traffic against a table of trusted IP-to-MAC bindings. It exposes configuration objects for a trusted ARP table keyed by interface, IP address, and MAC address, per VLAN, along with an operation-type object controlling how entries are added or enforced. This is a security-configuration MIB rather than a hardware-status MIB: it lets administrators define and audit which IP/MAC pairs are trusted on which interface and VLAN, helping detect or prevent unauthorized ARP spoofing attempts. It relies on standard interface and VLAN indexing conventions since bindings are tied to ifIndex and VLAN ID. It is deployed on D-Link managed switches in networks requiring ARP spoofing/poisoning protection, such as campus or data-center access-layer switching. Engineers can download the MY-ANTI-ARPCHEAT-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in MY-ANTI-ARPCHEAT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- D-Link managed switch
Monitoring Examples
A network administrator reviews myTrustedArpTable entries, trustedArpIfIndex, trustedArpIp, trustedArpMediaPhysAddress, and trustedArpVlan, to confirm only known-good IP/MAC pairs are marked trusted on a given access port and VLAN. If an unexpected ARP entry attempt is blocked or logged, trustedArpOperationType reveals whether the binding was added, deleted, or denied. Using myTrustedArpDelete, an admin can remove a stale or compromised binding after a device's MAC or IP address changes, preventing that ARP entry from becoming an attack vector.
What Can Be Monitored
- trusted ARP IP/MAC/VLAN bindings
- interface index of trusted binding
- trusted binding operation type (add/delete)
- per-VLAN ARP trust table entries
Imported Objects
From MY-SMI
| myMgmt | OBJECT-IDENTITY |
From MY-TC
| IfIndex |
From Q-BRIDGE-MIB
| VlanId |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| MacAddress |
OIDs
RFC description
Manages ARP spoofing protection by configuring trusted ARP/L2 interface bindings on D-Link switches.
Start monitoring D-Link managed switch (ARP spoofing prevention) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.