ZXR10-URPF-MIB

Description: Manages ZTE ZXR10 Unicast Reverse Path Forwarding configuration for source address anti-spoofing validation.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

ZXR10-URPF-MIB is a ZTE proprietary MIB for ZXR10 routers/switches that manages Unicast Reverse Path Forwarding (uRPF), a security feature used for source-address anti-spoofing validation by checking that inbound packets arrive on an interface consistent with the best route back to their source. Its data spans configuration (per-interface uRPF mode, ACL exceptions) for both IPv4 and IPv6, along with counters distinguishing strict versus loose checks and blocked traffic. In monitoring terms, this MIB helps verify that anti-spoofing enforcement software is correctly configured and active per interface, and (via block counters) can reveal spoofed or misrouted traffic being dropped, which is a security/fault-monitoring signal rather than a hardware health signal. It depends on the device's underlying unicast routing table (RIB) since uRPF validation logic relies on existing IPv4/IPv6 route information, and its notifications tie into standard SNMP trap conventions. It is typically deployed on edge/peering routers where anti-spoofing protection against forged source IP addresses is required. Engineers can download the ZXR10-URPF-MIB file directly to load it into their MIB browser.

An admin would poll zxr10URPFIPv4Table/zxr10URPFIPv4Entry, indexed by zxr10URPFIPv4IntfName or zxr10URPFIPv4IntfIndex, checking zxr10URPFIPv4BEx and zxr10URPFIPv4BAny counters to see how many packets were blocked under strict (exact) versus loose (any) uRPF checks. The zxr10URPFIPv4ACLName and zxr10URPFIPv4BACLName fields identify exception ACLs permitting otherwise-failing traffic, and zxr10URPFIPv4IgnoreDefaultRoute shows whether default-route-based source validation is disabled. A sudden spike in zxr10URPFIPv4BUnicast block counts on an interface would indicate a spoofing attempt or a routing asymmetry causing legitimate traffic to be dropped, while zxr10URPFObjects/zxr10URPFNotifications would signal such events via trap.

Monitors Unicast Reverse Path Forwarding (URPF) configuration on ZTE routers.