All MIBs › ZTE-AN-MAC-ANTI-SPOOFING-MIB › zxAnMasUplinkProtectEnable
zxAnMasUplinkProtectEnable
Module: ZTE-AN-MAC-ANTI-SPOOFING-MIB
OID (symbolic): ZTE-AN-MAC-ANTI-SPOOFING-MIB::zxAnMasUplinkProtectEnable
OID (numeric): 1.3.6.1.4.1.3902.1082.70.20.1.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enable or disable global uplink-protect status.When zxAnMasEnable is enable, this value is valid. As follows are the combination of zxAnMasEnable and zxAnMasUplinkProtectEnable: 1) zxAnMasEnable is disabled, then MAC move can happen and won't be forbidden by the system. 2) zxAnMasEnable is enable and zxAnMasUplinkProtectEnable is enabled, then MAC move between user-port is forbidden, MAC can move from user-port to uplink-port and MAC can move between two uplink-port, can't move from uplink-port to user-port. This combination is the recommended configure. 3) zxAnMasEnable is enable and zxAnMasUplinkProtectEnable is disabled, then any MAC move will be forbidden by the system. 4)Only supports C3XX, not supports C6XX.
What is zxAnMasUplinkProtectEnable?
This object enables or disables global uplink-protect status, only meaningful when zxAnMasEnable is enabled; the recommended combination (both enabled) forbids MAC moves between user ports and from uplink to user ports, while allowing moves from user port to uplink or between uplink ports, and it's noted this only applies to C3XX hardware. Admins use this to fine-tune anti-spoofing behavior so legitimate uplink MAC movement is still allowed while user-side spoofing is blocked. For example, an admin following the vendor's recommended configuration would leave both zxAnMasEnable and zxAnMasUplinkProtectEnable enabled to get the balanced protection mode rather than the stricter mode that forbids all MAC movement.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.20.1.2 snmpwalk -v2c -c public <target> ZTE-AN-MAC-ANTI-SPOOFING-MIB::zxAnMasUplinkProtectEnable
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.20.1.2.1 snmpget -v2c -c public <target> ZTE-AN-MAC-ANTI-SPOOFING-MIB::zxAnMasUplinkProtectEnable.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.3902.1082.70.20.1.2.1 i <value>
Start monitoring ZTE Access Node (DSLAM/GPON broadband access equipment) (MAC anti-spoofing enforcement/conformance status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ZTE-AN-MAC-ANTI-SPOOFING-MIB::zxAnMasUplinkProtectEnable OID value, configure state conditions and alerts, and monitor any ZTE Access Node (DSLAM/GPON broadband access equipment) (MAC anti-spoofing enforcement/conformance status) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.3902 | zte | DPI-MIB |
| 1.3.6.1.4.1.3902.1082 | zxAccessNode | ZTE-AN-SMI |
| 1.3.6.1.4.1.3902.1082.70 | zxAnServiceSecurity | ZTE-AN-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.3902.1082.70.20 | zxAnMasMib | ZTE-AN-MAC-ANTI-SPOOFING-MIB |
| 1.3.6.1.4.1.3902.1082.70.20.1 | zxAnMasGlobalObjects | ZTE-AN-MAC-ANTI-SPOOFING-MIB |
| 1.3.6.1.4.1.3902.1082.70.20.1.2 | zxAnMasUplinkProtectEnable | ZTE-AN-MAC-ANTI-SPOOFING-MIB |