arpInspectionPortConfigDestMacValidation
G6-DHCP-MIB ·
.1.3.6.1.4.1.3181.10.6.2.49.12.1.8
Object
column
r/w
Enumeration
Checks the destination MAC address in the Ethernet header against the target MAC address in ARP body. This check is performed for ARP responses. Packets with different MAC addresses are dropped.
Context
- MIB
- G6-DHCP-MIB
- OID
.1.3.6.1.4.1.3181.10.6.2.49.12.1.8- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- arpInspectionPortConfigEntry
- Table
- arpInspectionPortConfigTable
- Siblings
- 8
Syntax
Enumeration
Values & Constraints
Enumerated Values
0 | disabled |
1 | enabled |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| arpInspectionPortConfigPortIndex Automatically generated | column | Integer32 | .1.3.6.1.4.1.3181.10.6.2.49.12.1.1 |
| arpInspectionPortConfigEnableArpInspection Generally enables Dynamic ARP Inspection. The details need to be configured per VLAN in separate table. This feature helps preventing from man-in-the-middle attacks to the network. | column | Enumeration | .1.3.6.1.4.1.3181.10.6.2.49.12.1.2 |
| arpInspectionPortConfigArpRateLimiting Defines how many ARP request are accepted per second. When the limit is reached, a DOS attack is assumed and the port is shut down. The value 0 disables the rate limit check. | column | Integer32 | .1.3.6.1.4.1.3181.10.6.2.49.12.1.3 |
| arpInspectionPortConfigInspectionDatabase When set to another value than NONE, the MAC-IP relationship of the incoming ARPs is verified against the selected table. This ensures that only valid MACs enter the network. | column | Enumeration | .1.3.6.1.4.1.3181.10.6.2.49.12.1.4 |
| arpInspectionPortConfigArpAclName Name of the ACL (access control list) which declares which IP/MAC relations are acceptible. Note: ACLs are configured under Management.ACL. Several ACL may be specified with a com… | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.3181.10.6.2.49.12.1.5 |
| arpInspectionPortConfigAclDefaultLogic Defines which action is taken when none of the ACL records matches. Default is deny which blocks the ARP. | column | Enumeration | .1.3.6.1.4.1.3181.10.6.2.49.12.1.6 |
| arpInspectionPortConfigSourceMacValidation Checks the source MAC address in the Ethernet header against the sender MAC address in the ARP body. This check is performed on both ARP requests and responses. Packets with diffe… | column | Enumeration | .1.3.6.1.4.1.3181.10.6.2.49.12.1.7 |
| arpInspectionPortConfigIpRangeValidation Checks ARP for invalid addresses. Invalid addresses include 0.0.0.0, 255.255.255.255, and all IP multicast and loopback addresses. Sender IP addresses are checked in all ARP reque… | column | Enumeration | .1.3.6.1.4.1.3181.10.6.2.49.12.1.9 |