All MIBs › TN-ARP-INSPECTION-MIB
Category: Security and Filtering, Transition Networks Media Converters
Description: Manages Transition Networks ARP inspection filtering policy and validated binding table.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is TN-ARP-INSPECTION-MIB?
TN-ARP-INSPECTION-MIB is a Transition Networks proprietary SNMP module managing Dynamic ARP Inspection, a security feature that validates ARP packets against a trusted binding table to prevent ARP spoofing/man-in-the-middle attacks. It exposes global and per-port ARP inspection mode/translation settings and a static ARP inspection table of trusted port/VLAN/MAC bindings. Its monitoring value is confirming ARP inspection is enabled where expected and that the static trusted-binding table matches intended network devices, since a missing or incorrect binding can cause legitimate traffic to be dropped as suspected spoofing. It is a vendor-specific security feature not directly dependent on other standard MIBs, though it parallels similar DAI features on other vendors' switches. It is deployed on Transition Networks managed switches in access-layer network segments where ARP spoofing protection is required. Engineers can download the TN-ARP-INSPECTION-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in TN-ARP-INSPECTION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Transition Networks managed Ethernet switches
- access-layer switches with ARP spoofing protection
Monitoring Examples
An operator polls tnARPInspectionConfigTable/tnARPInspectionConfigEntry to confirm tnARPInspectionMode is enabled globally, and checks tnARPInspectionPortModeTable/tnARPInspectionPortModeEntry to verify tnARPInspectionPortMode is set correctly on each access port. The tnStaticARPInspectionTable/tnStaticARPInspectionEntry rows are reviewed to confirm a trusted device's tnStaticARPInspectionMAC is correctly bound to its tnStaticARPInspectionPort and tnStaticARPInspectionVLAN. If a legitimate host suddenly loses connectivity, checking for a missing or mismatched static binding entry is a key troubleshooting step.
What Can Be Monitored
- global and per-port ARP inspection mode
- ARP translation setting
- static trusted port/VLAN/MAC bindings
Imported Objects
From ENTITY-MIB
| entPhysicalIndex | OBJECT-TYPE |
From IF-MIB
| ifIndex | OBJECT-TYPE |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressPrefixLength | |
| InetAddressType |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-IDENTITY | |
| enterprises |
From SNMPv2-TC
| DateAndTime | |
| DisplayString | |
| MacAddress | |
| RowStatus | |
| TimeStamp | |
| TruthValue |
From TN-MGMT-MIB
| tnDevMgmt | OBJECT-IDENTITY |
OIDs
RFC description
Transition Networks enterprise MIB for managing Dynamic ARP Inspection features that protect against ARP spoofing attacks on switches.
Start monitoring Transition Networks managed Ethernet switches (Dynamic ARP Inspection trusted-binding status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.