CISCO-DYNAMIC-ARP-INSPECTION-MIB Table View

A table provides the information of logged ARP flows 
for system message generation.

cdaiLogBufferEntry row .1.3.6.1.4.1.9.9.374.1.1.7.1

A row instance contains logged ARP flow data for system
message generation. Entries in the log are cleared once
system messages are generated on their behalf. A special
entry will be populated for accounting drops of al…

Indexes

cdaiLogBufferIndex

Column	Syntax	OID
cdaiLogBufferIndex This object uniquely identifies a logged ARP flow in the buffer.	Unsigned32 Constraints: range: 1-65535	.1.3.6.1.4.1.9.9.374.1.1.7.1.1
cdaiLogBufferInterface This object indicates the interface which sent the logged ARP flow. Zero value indicates the special entry.	IF-MIBInterfaceIndexOrZero Type Constraints: range: 0..2147483647 Description: This textual convention is an extension of the InterfaceIndex convention. The latter defines a greater than zero value used to identify an interface or interface sub-layer in the managed system. This extension permits…	.1.3.6.1.4.1.9.9.374.1.1.7.1.2
cdaiLogBufferVlan This object indicates the VLAN number which the logged ARP flow belongs to. Zero value indicates the special entry.	CISCO-PRIVATE-VLAN-MIBVlanIndexOrZero Type Constraints: range: 0..4095	.1.3.6.1.4.1.9.9.374.1.1.7.1.3
cdaiLogBufferSenderMacAddress This object indicates the sender MAC address of the logged ARP flow. All zeros MAC address value indicates the special entry.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.374.1.1.7.1.4
cdaiLogBufferSenderAddressType This object indicates the sender Internet address type of the logged ARP flow.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.9.9.374.1.1.7.1.5
cdaiLogBufferSenderIpAddress This object indicates the sender Internet address of the logged ARP flow. The type of this address is determined by the value of cdaiLogBufferSenderAddressType object. All zeros IP address value indicates the special …	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.374.1.1.7.1.6
cdaiLogBufferReason This object indicates the reason for logging this ARP flow. 'unknown' indicates unknown reason. 'deny' indicates that this ARP flow is logged because it is denied by Dynamic ARP Inspection…	Enumeration Enumerated Values: 1 unknown 2 deny 3 aclDeny 4 aclPermit 5 dhcpDeny 6 dhcpPermit 7 probePermit	.1.3.6.1.4.1.9.9.374.1.1.7.1.7
cdaiLogBufferLastUpdate This object indicates the timestamp when the last packet of this flow was accounted by the system.	SNMPv2-TCDateAndTime Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.4.1.9.9.374.1.1.7.1.8
cdaiLogBufferPacketsCount This object indicates the number of packets of this ARP flow was accounted by the system.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.1.7.1.9

A table provides the mechanism to control Dynamic ARP
Inspection per VLAN. When a VLAN is created in a device
supporting this table, a corresponding entry of this table
will be added.

cdaiVlanConfigEntry row .1.3.6.1.4.1.9.9.374.1.2.1.1

A row instance contains the configuration to enable
or disable Dynamic ARP Inspection at each existing VLAN.

Indexes

cdaiVlanIndex

Column	Syntax	OID
cdaiVlanIndex This object indicates the VLAN number on which Dynamic ARP Inspection feature is configured.	Q-BRIDGE-MIBVlanIndex	.1.3.6.1.4.1.9.9.374.1.2.1.1.1
cdaiVlanDynArpInspEnable This object indicates whether Dynamic ARP Inspection is enabled in this VLAN. If this object is set to 'true', Dynamic ARP Inspection is enabled. If this object is set to 'false', Dynamic …	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.374.1.2.1.1.2

A table provides the mechanism to control Dynamic ARP
Inspection per VLAN. This table is populated for each
existing VLAN in the device as well as non-existing VLANs
which contains the Dynamic ARP Inspection configuration.

cdaiVlanCfgEntry row .1.3.6.1.4.1.9.9.374.1.2.2.1

A row instance contains the Dynamic ARP inspection
configuration for a specific VLAN in the device.

Indexes

cdaiVlanId

Column	Syntax	OID
cdaiVlanId This object indicates the VLAN number.	Q-BRIDGE-MIBVlanIndex	.1.3.6.1.4.1.9.9.374.1.2.2.1.1
cdaiVlanDynArpInspAdmin This object specifies the administrative status of Dynamic ARP Inspection feature in this VLAN. If this object value is 'enable', Dynamic ARP Inspection is enabled. If this object value i…	Enumerationr/w Enumerated Values: 1 enable 2 disable	.1.3.6.1.4.1.9.9.374.1.2.2.1.2
cdaiVlanDynArpInspOper This object indicates the operational status of Dynamic ARP Inspection feature in this VLAN. If this object is 'active', Dynamic ARP Inspection is operationally active. If this object is …	Enumeration Enumerated Values: 1 active 2 inactive	.1.3.6.1.4.1.9.9.374.1.2.2.1.3
cdaiVlanFilterArpAclName This object specifies an ARP ACL name that Dynamic ARP Inspection feature uses to check the validity of the bindings information in ARP body. An emptry string indicates that no such ARP ACL is configured…	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.374.1.2.2.1.4
cdaiVlanFilterArpAclStatic This object specifies whether the ARP ACL denoted by cdaiVlanFilterArpAclName is statically applied by Dynamic ARP Inspection feature. This object does not take effect if value of cdaiVlanFilterArpAclName on the row is …	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.374.1.2.2.1.5
cdaiVlanAclLogging This object specifies the logging configuration that Dynamic ARP Inspection feature applies to ARP packets when they are classified by the configured ACL. 'none' indicates that no logging is performed wh…	Enumerationr/w Enumerated Values: 1 none 2 aclMatch 3 deny	.1.3.6.1.4.1.9.9.374.1.2.2.1.6
cdaiVlanDhcpBindingLogging This object specifies packet logging configuration performed by Dynamic ARP Inspection feature when ARP packets is compared against DHCP bindings information. 'none' indicates that no packet logging is p…	Enumerationr/w Enumerated Values: 1 none 2 permit 3 deny 4 all	.1.3.6.1.4.1.9.9.374.1.2.2.1.7
cdaiVlanArpProbeLogging The objects specifies if ARP-Probe packets will be logged by Dynamic ARP Inspection feature. 'true' indicates ARP-Probe packets will be logged. 'false' indicates ARP-Probe packets will not …	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.374.1.2.2.1.8
cdaiVlanCfgStorageType The objects specifies the storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.374.1.2.2.1.9
cdaiVlanCfgRowStatus The status of this conceptual row entry. This object is used to manage creation and deletion of rows in this table. Deletion of an entry in this table is only allowed if the VLAN indicated by its row inde…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.374.1.2.2.1.10

A table provides the mechanism to configure the trust
state for Dynamic ARP Inspection purpose at each physical
interface capable of this feature. Some of the interfaces
(but not limited to) for which this feature might be
applicable are: ifType = ethernetCsmacd(6).

cdaiIfConfigEntry row .1.3.6.1.4.1.9.9.374.1.3.1.1

A row instance contains the configuration to enable or
disable trust state for Dynamic ARP Inspection at each
physical interface capable of this feature.

Indexes

IF-MIBifIndex

Column	Syntax	OID
cdaiIfTrustEnable This object indicates whether the interface is trusted for Dynamic ARP Inspection purpose. If this object is set to 'true', the interface is trusted. ARP packets coming to this interface will be forwarde…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.374.1.3.1.1.1

A table provides the mechanism to configure the rate limit
for Dynamic ARP Inspection purpose at each physical interface
capable of this feature.

cdaiIfRateLimitEntry row .1.3.6.1.4.1.9.9.374.1.3.2.1

A row instance contains the configuration of rate limit
Dynamic ARP Inspection at each physical interface capable
of this feature.

Indexes

IF-MIBifIndex

Column	Syntax	OID
cdaiIfRateLimit This object indicates rate limit value for Dynamic ARP Inspection purpose. If the incoming rate of ARP packets exceeds the value of this object, ARP packets will be dropped.	packet per secondSNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.3.2.1.1

A table lists the Dynamic Arp Inspection statistics per VLAN.

cdaiVlanStatsEntry row .1.3.6.1.4.1.9.9.374.1.4.1.1

A row instance contains Dynamic ARP Inspection statistics
information for each VLAN.

Indexes

cdaiVlanStatsIndex

Column	Syntax	OID
cdaiVlanStatsIndex This object indicates the VLAN number.	Q-BRIDGE-MIBVlanIndex	.1.3.6.1.4.1.9.9.374.1.4.1.1.1
cdaiVlanForwarded This object indicates the number of ARP packets forwarded by Dynamic Arp Inspection feature.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.2
cdaiVlanDropped This object indicates the number of ARP packets dropped by Dynamic ARP Inspection feature.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.3
cdaiVlanAclPermitted This object indicates the number of ARP packets permitted by the configured ACL.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.4
cdaiVlanDhcpBindingsPermitted This object indicates the number of DHCP-binding permitted ARP packets.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.5
cdaiVlanAclDenied This object indicates the number of ARP packets denied by the configured ACL.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.6
cdaiVlanDhcpBindingDenied This object indicates the number of DHCP-binding denied ARP packets.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.7
cdaiVlanSrcMacValidationFailures This object indicates the number of ARP packets that fail source MAC address validation.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.8
cdaiVlanDestMacValidationFailures This object indicates the number of ARP packets that fail destination MAC address validation.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.9
cdaiVlanIpValidationFailures This object indicates the number of ARP packets that fail IP validation.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.10
cdaiVlanArpProbePermitted This object indicates the number of ARP Probe packets that are permitted.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.11
cdaiVlanInvalidProtocolData This object indicates the number of ARP packets that contain invalid protocol data.	packetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.374.1.4.1.1.12