hpicfArpProtectValidation – HP-ICF-ARP-PROTECT

Object

scalar r/w Bits

Additional validation checks to perform on ARP
packets during Dynamic ARP Protection.
  srcMac - Drop any ARP request or response
           packet where the source MAC address in
           the Ethernet header does not match the
           sender MAC address in the body of the
           ARP packet.
  dstMac - Drop any unicast ARP response packet
           where the destination MAC address in the
           Ethernet header does not match the target
           MAC address in the body of the ARP packet.
  ip     - Drop any ARP packet where the sender IP
           address is invalid.  Drop any ARP response
           packet where the target IP address is
           invalid.  Invalid addresses include
           0.0.0.0, 255.255.255.255, all IP multicast
           addresses, and all class E IP addresses.
These checks are only performed for ARP packets
received on untrusted ports in VLANs that are enabled
for Dynamic ARP Protection.  ARP packets received on
trusted ports, and ARP packets in VLANs for which
Dynamic ARP Protection is disabled, are forwarded
without validation.

Context

MIB: HP-ICF-ARP-PROTECT
OID: .1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.3
Type: scalar
Access: readwrite
Status: current
Parent: hpicfArpProtectGlobalCfg
Siblings: 3

Syntax

Bits

Values & Constraints

Enumerated Values

`0`	srcMac
`1`	dstMac
`2`	ip

Related Objects

Sibling Objects

Object	Type	Syntax	OID
hpicfArpProtectEnable The administrative status of the ARP Protection feature.	scalar	SNMPv2-TCTruthValue	`.1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.1`
hpicfArpProtectVlanEnable The administrative status for Dynamic ARP Protection on each VLAN. There will be one bit in this string for each possible VLAN ID. Each octet within this value specifies a set o…	scalar	OctetString	`.1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.2`
hpicfArpProtectErrantNotifyEnable Provides operational control of hpicfArpProtectErrantReply.	scalar	Enumeration	`.1.3.6.1.4.1.11.2.14.11.5.1.37.1.1.1.4`