-- ============================================================================ -- Copyright (c) 2009-2023 FS.COM Inc. All Rights Reserved. -- -- Description: The purpose of this MIB file is to provide the definition of -- the ARP trap. -- Reference: -- Version: V1.2 -- History: -- V1.0 2021-12-08 -- Initial version, created by daifei -- V1.1 2022-05-13 -- Added fsARPTrapPacketValidCheck by lkf9751 -- Added fsARPTrapHostMoveResume and fsARPTrapGatewayCheck by zkf9482 -- Added fsARPTrapDtcDropVlanPkt, fsARPTrapDtcDropVsiPkt, -- fsARPTrapDtcDropIfPkt, fsARPTrapMacMismatch, -- fsARPTrapEntryCheck by xkf9359 -- V1.2 2023-04-20 -- Added fsARPTrapPktQueue by yuanyuchen -- ============================================================================ FS-ARP-TRAP-MIB DEFINITIONS ::= BEGIN IMPORTS fsCommon FROM FS-OID-MIB DisplayString FROM SNMPv2-TC Unsigned32, IpAddress, OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE FROM SNMPv2-SMI; -- Node definitions fsARPTrap MODULE-IDENTITY LAST-UPDATED "202304201710Z" -- APR 20, 2023 at 17:10 GMT ORGANIZATION "Fiberstore Co.,Limited" CONTACT-INFO "" DESCRIPTION "This MIB file defines the ARP trap warning feature only." REVISION "202304201710Z" -- APR 20, 2023 at 17:10 GMT DESCRIPTION "Add fsARPTrapPktQueue." REVISION "202205131800Z" -- MAY 13, 2022 at 18:00 GMT DESCRIPTION "Added fsARPTrapPacketValidCheck, fsARPTrapHostMoveResume, fsARPTrapDtcDropVlanPkt, fsARPTrapDtcDropVsiPkt, fsARPTrapDtcDropIfPkt, fsARPTrapMacMismatch, fsARPTrapEntryCheck, and fsARPTrapGatewayCheck." REVISION "202112081800Z" -- DEC 08, 2021 at 18:00 GMT DESCRIPTION "The initial version of this MIB file." ::= { fsCommon 217} -- fsARPTrapEntry fsARPTrapEntry OBJECT IDENTIFIER ::= { fsARPTrap 1 } fsARPTrapsEntry OBJECT IDENTIFIER ::= { fsARPTrapEntry 0 } -- fsARPTrapsEntry fsARPTrapThresholdAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapEntryThreshold, fsARPTrapDynamicEntryNum, fsARPTrapStaticEntryNum, fsARPTrapOtherEntryNum } STATUS current DESCRIPTION "If the numbers of ARP entry on a device exceeds the threshold, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsEntry 1 } fsARPTrapThresholdResume NOTIFICATION-TYPE OBJECTS { fsARPTrapEntryThreshold, fsARPTrapDynamicEntryNum, fsARPTrapStaticEntryNum, fsARPTrapOtherEntryNum } STATUS current DESCRIPTION "If the numbers of ARP entry on a device drops below the threshold, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsEntry 2 } fsARPTrapSlotThresholdAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapEntryChassis, fsARPTrapEntrySlot, fsARPTrapEntryThreshold, fsARPTrapDynamicEntryNum } STATUS current DESCRIPTION "If the numbers of ARP entry of slot exceeds the threshold, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsEntry 3 } fsARPTrapSlotThresholdResume NOTIFICATION-TYPE OBJECTS { fsARPTrapEntryChassis, fsARPTrapEntrySlot, fsARPTrapEntryThreshold, fsARPTrapDynamicEntryNum } STATUS current DESCRIPTION "If the numbers of ARP entry of slot drops below the threshold, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsEntry 4 } fsARPTrapIfThresholdAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapEntryIfName, fsARPTrapEntryThreshold, fsARPTrapDynamicEntryNum } STATUS current DESCRIPTION "If the numbers of ARP entry exceeds the threshold of the interface, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsEntry 5 } fsARPTrapIfThresholdResume NOTIFICATION-TYPE OBJECTS { fsARPTrapEntryIfName, fsARPTrapEntryThreshold, fsARPTrapDynamicEntryNum } STATUS current DESCRIPTION "If the numbers of ARP entry drops below the threshold of the interface, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsEntry 6 } fsARPTrapSuppThresholdAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapEntryThreshold, fsARPTrapSuppEntryNum } STATUS current DESCRIPTION "If the numbers of ARP suppression entry on a device exceeds the threshold, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsEntry 7 } fsARPTrapSuppThresholdResume NOTIFICATION-TYPE OBJECTS { fsARPTrapEntryThreshold, fsARPTrapSuppEntryNum } STATUS current DESCRIPTION "If the numbers of ARP suppression entry on a device drops below the threshold, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsEntry 8 } fsARPTrapEntryObjects OBJECT IDENTIFIER ::= { fsARPTrapEntry 1 } -- fsARPEntryTrapObjects fsARPTrapEntryChassis OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of chassis ID. If the value is 65535, the device is not a stacked device ." ::= { fsARPTrapEntryObjects 1 } fsARPTrapEntrySlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of slot." ::= { fsARPTrapEntryObjects 2 } fsARPTrapEntryIfName OBJECT-TYPE SYNTAX DisplayString(SIZE (0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of interface name." ::= { fsARPTrapEntryObjects 3 } fsARPTrapEntryThreshold OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of Threshold." ::= { fsARPTrapEntryObjects 4 } fsARPTrapDynamicEntryNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The numbers of ARP dynamic entry." ::= { fsARPTrapEntryObjects 5 } fsARPTrapStaticEntryNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The numbers of ARP static entry." ::= { fsARPTrapEntryObjects 6 } fsARPTrapOtherEntryNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The numbers of ARP other entry." ::= { fsARPTrapEntryObjects 7 } fsARPTrapSuppEntryNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The numbers of ARP suppression entry." ::= { fsARPTrapEntryObjects 8 } fsARPTrapPkt OBJECT IDENTIFIER ::= { fsARPTrap 2 } -- fsARPTrapLocalConflict fsARPTrapLocalConflict OBJECT IDENTIFIER ::= { fsARPTrapPkt 1 } fsARPTrapsLocal OBJECT IDENTIFIER ::= { fsARPTrapLocalConflict 0 } fsARPTrapMACConflictAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapLocalConflictIf, fsARPTrapLocalConflictMac, fsARPTrapLocalSrcIp, fsARPTrapLocalPeVlan, fsARPTrapLocalCeVlan, fsARPTrapLocalInboundIf } STATUS current DESCRIPTION "If the MAC address conflict occurred, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsLocal 1 } fsARPTrapMACConflictResume NOTIFICATION-TYPE OBJECTS { fsARPTrapLocalConflictIf, fsARPTrapLocalConflictMac, fsARPTrapLocalSrcIp, fsARPTrapLocalPeVlan, fsARPTrapLocalCeVlan, fsARPTrapLocalInboundIf } STATUS current DESCRIPTION "If the MAC address conflict was removed, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsLocal 2 } fsARPTrapMACIPConflictAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapLocalConflictIf, fsARPTrapLocalConflictMac, fsARPTrapLocalConflictIP, fsARPTrapLocalDstMac, fsARPTrapLocalDstIP, fsARPTrapLocalPeVlan, fsARPTrapLocalCeVlan, fsARPTrapLocalInboundIf } STATUS current DESCRIPTION "If a MAC and IP address conflicts occurred, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsLocal 3 } fsARPTrapMACIPConflictResume NOTIFICATION-TYPE OBJECTS { fsARPTrapLocalConflictIf, fsARPTrapLocalConflictMac, fsARPTrapLocalConflictIP, fsARPTrapLocalDstMac, fsARPTrapLocalDstIP, fsARPTrapLocalPeVlan, fsARPTrapLocalCeVlan, fsARPTrapLocalInboundIf } STATUS current DESCRIPTION "If the MAC and IP address conflicts were resolved, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsLocal 4 } fsARPTrapIPConflictAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapLocalConflictIf, fsARPTrapLocalConflictIP, fsARPTrapLocalSrcMac, fsARPTrapLocalPeVlan, fsARPTrapLocalCeVlan } STATUS current DESCRIPTION "If the device received an ARP packet with a duplicate IP address, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsLocal 5 } fsARPTrapIPConflictResume NOTIFICATION-TYPE OBJECTS { fsARPTrapLocalConflictIf, fsARPTrapLocalConflictIP, fsARPTrapLocalSrcMac, fsARPTrapLocalPeVlan, fsARPTrapLocalCeVlan } STATUS current DESCRIPTION "If the IP address conflicts were resolved, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsLocal 6 } fsARPTrapLocalObjects OBJECT IDENTIFIER ::= { fsARPTrapLocalConflict 1 } fsARPTrapLocalConflictIf OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..47)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Conflict Interface name." ::= { fsARPTrapLocalObjects 1 } fsARPTrapLocalConflictMac OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..15)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The mac address of Conflict Interface." ::= { fsARPTrapLocalObjects 2 } fsARPTrapLocalConflictIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The ip address of Conflict Interface." ::= { fsARPTrapLocalObjects 3 } fsARPTrapLocalSrcMac OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..15)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The source mac of Arp packet" ::= { fsARPTrapLocalObjects 4} fsARPTrapLocalSrcIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The source ip of Arp packet" ::= { fsARPTrapLocalObjects 5 } fsARPTrapLocalDstMac OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..15)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The destination mac of Arp packet." ::= { fsARPTrapLocalObjects 6} fsARPTrapLocalDstIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The destination ip of Arp packet." ::= { fsARPTrapLocalObjects 7 } fsARPTrapLocalPeVlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The first vlan ip of Arp packet." ::= { fsARPTrapLocalObjects 8} fsARPTrapLocalCeVlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "TThe second vlan ip of Arp packet." ::= { fsARPTrapLocalObjects 9 } fsARPTrapLocalInboundIf OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..47)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "TThe physical inbound inerface of Arp packet." ::= { fsARPTrapLocalObjects 10} -- fsARPTrapHostMove fsARPTrapHostMove OBJECT IDENTIFIER ::= { fsARPTrapPkt 2 } fsARPTrapsHostMove OBJECT IDENTIFIER ::= { fsARPTrapHostMove 0 } fsARPTrapHostMoveAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapMoveUserIP, fsARPTrapMoveUserMAC, fsARPTrapMoveLocalIf, fsARPTrapMoveLocalPeVlan, fsARPTrapMoveLocalCeVlan, fsARPTrapMoveRemoteIF, fsARPTrapMoveRemotePeVlan, fsARPTrapMoveRemoteCeVlan } STATUS current DESCRIPTION "If the device detected a user moved to another interface, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsHostMove 1 } fsARPTrapHostMoveResume NOTIFICATION-TYPE OBJECTS { fsARPTrapMoveUserIP, fsARPTrapMoveUserMAC, fsARPTrapMoveLocalIf, fsARPTrapMoveLocalPeVlan, fsARPTrapMoveLocalCeVlan, fsARPTrapMoveRemoteIF, fsARPTrapMoveRemotePeVlan, fsARPTrapMoveRemoteCeVlan } STATUS current DESCRIPTION "If the device detects that the event of the user moving to another interface is cleared, it sends a trap message to the remote monitoring device." ::= { fsARPTrapsHostMove 2 } fsARPTrapHostMoveObjects OBJECT IDENTIFIER ::= { fsARPTrapHostMove 1 } fsARPTrapMoveUserIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The ip address of user moved to another interface." ::= { fsARPTrapHostMoveObjects 1 } fsARPTrapMoveUserMAC OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..15)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The mac address of user moved to another interface." ::= { fsARPTrapHostMoveObjects 2 } fsARPTrapMoveLocalIf OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..47)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The interface before user move." ::= { fsARPTrapHostMoveObjects 3 } fsARPTrapMoveLocalPeVlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The first vlan before user move." ::= { fsARPTrapHostMoveObjects 4} fsARPTrapMoveLocalCeVlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The second vlan before user move." ::= { fsARPTrapHostMoveObjects 5 } fsARPTrapMoveRemoteIF OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..47)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The interface after user move." ::= { fsARPTrapHostMoveObjects 6} fsARPTrapMoveRemotePeVlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The first vlan after user move." ::= { fsARPTrapHostMoveObjects 7 } fsARPTrapMoveRemoteCeVlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The second vlan after user move." ::= { fsARPTrapHostMoveObjects 8 } -- fsARPTrapUserIpConflict fsARPTrapUserIpConflict OBJECT IDENTIFIER ::= { fsARPTrapPkt 3 } fsARPTrapsUserIpConflict OBJECT IDENTIFIER ::= { fsARPTrapUserIpConflict 0 } fsARPTrapUserIpConflictAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapUIPCPRcvMac, fsARPTrapUIPCPRcvPVid, fsARPTrapUIPCPRcvCVid, fsARPTrapUIPCPRcvIf, fsARPTrapUIPCPLocalMac, fsARPTrapUIPCPLocalIf, fsARPTrapUIPCPLocalPVid, fsARPTrapUIPCPLocalCVid, fsARPTrapUIPCPIpAddr } STATUS current DESCRIPTION "If the device detected a user IP address conflict, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsUserIpConflict 1 } fsARPTrapUserIpConflictObjs OBJECT IDENTIFIER ::= { fsARPTrapUserIpConflict 1 } fsARPTrapUIPCPRcvMac OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..15)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The mac address of New user." ::= { fsARPTrapUserIpConflictObjs 1 } fsARPTrapUIPCPRcvPVid OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The first vlan of New user." ::= { fsARPTrapUserIpConflictObjs 2} fsARPTrapUIPCPRcvCVid OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The second vlan of New user." ::= { fsARPTrapUserIpConflictObjs 3 } fsARPTrapUIPCPRcvIf OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..47)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The Interface of New user." ::= { fsARPTrapUserIpConflictObjs 4 } fsARPTrapUIPCPLocalMac OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..15)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The mac address of Old user." ::= { fsARPTrapUserIpConflictObjs 5} fsARPTrapUIPCPLocalPVid OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The first vlan of Old user." ::= { fsARPTrapUserIpConflictObjs 6 } fsARPTrapUIPCPLocalCVid OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The second vlan of Old user." ::= { fsARPTrapUserIpConflictObjs 7} fsARPTrapUIPCPLocalIf OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..47)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The Interface of Old user." ::= { fsARPTrapUserIpConflictObjs 8 } fsARPTrapUIPCPIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Conflict ip address." ::= { fsARPTrapUserIpConflictObjs 9 } -- fsARPTrapAckStrictCheck fsARPTrapAckStrictCheck OBJECT IDENTIFIER ::= { fsARPTrapPkt 4 } fsARPTrapsAckStrictCheck OBJECT IDENTIFIER ::= { fsARPTrapAckStrictCheck 0 } fsARPTrapAckStrictCheckAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapAckIfName, fsARPTrapAckSourceIP } STATUS current DESCRIPTION "If the interface received an ARP reply that was not requested by the device, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsAckStrictCheck 1 } fsARPTrapAckStrictObjs OBJECT IDENTIFIER ::= { fsARPTrapAckStrictCheck 1 } fsARPTrapAckIfName OBJECT-TYPE SYNTAX DisplayString(SIZE (0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The interface of receiving an ARP reply." ::= { fsARPTrapAckStrictObjs 1} fsARPTrapAckSourceIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The source ip of the ARP reply." ::= { fsARPTrapAckStrictObjs 2 } -- fsARPTrapSpeedLimit fsARPTrapSpeedLimit OBJECT IDENTIFIER ::= { fsARPTrapPkt 5 } fsARPTrapsSpeedLimit OBJECT IDENTIFIER ::= { fsARPTrapSpeedLimit 0 } fsARPTrapSpeedLimitAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapSpeedLimitChassis, fsARPTrapSpeedLimitSlot, fsARPTrapSpeedLimitSupValue, fsARPTrapSpeedLimitCurValue, fsARPTrapSpeedLimitSupType } STATUS current DESCRIPTION "If the rate of sending ARP packets or deliving ARP miss messages exceeded the rate limit, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsSpeedLimit 1 } fsARPTrapSpeedLimitResume NOTIFICATION-TYPE OBJECTS { fsARPTrapSpeedLimitChassis, fsARPTrapSpeedLimitSlot, fsARPTrapSpeedLimitSupValue, fsARPTrapSpeedLimitCurValue, fsARPTrapSpeedLimitSupType } STATUS current DESCRIPTION "If the rate of sending ARP packets or deliving ARP miss messages droped below the rate limit, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsSpeedLimit 2 } fsARPTrapSpeedLimitObjs OBJECT IDENTIFIER ::= { fsARPTrapSpeedLimit 1 } fsARPTrapSpeedLimitChassis OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of chassis ID. If the value is 65535, the device is not a stacked device ." ::= { fsARPTrapSpeedLimitObjs 1 } fsARPTrapSpeedLimitSlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of slot." ::= { fsARPTrapSpeedLimitObjs 2 } fsARPTrapSpeedLimitSupValue OBJECT-TYPE SYNTAX Unsigned32 UNITS "pps" MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The threshold rate of speed limit." ::= { fsARPTrapSpeedLimitObjs 3 } fsARPTrapSpeedLimitCurValue OBJECT-TYPE SYNTAX Unsigned32 UNITS "pps" MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The current rate of speed limit." ::= { fsARPTrapSpeedLimitObjs 4 } fsARPTrapSpeedLimitSupType OBJECT-TYPE SYNTAX INTEGER { packet(1), miss(2) } MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The current rate of speed limit: 'packet' means Arp packet Speed Limit. 'miss' means Arp Miss Message Speed Limit." ::= { fsARPTrapSpeedLimitObjs 5} -- fsARPTrapPacketValidCheck fsARPTrapPacketValidCheck OBJECT IDENTIFIER ::= { fsARPTrapPkt 6 } fsARPTrapsPacketValidCheck OBJECT IDENTIFIER ::= { fsARPTrapPacketValidCheck 0 } fsARPTrapPacketValidCheckAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapPktValidCheckIf, fsARPTrapPktValidCheckMac, fsARPTrapPktValidCheckIp, fsARPTrapPktValidCheckVlan, fsARPTrapPktValidtCheckSvlan } STATUS current DESCRIPTION "If the device receives an invalid ARP packet, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsPacketValidCheck 1 } fsARPTrapPacketValidCheckObjs OBJECT IDENTIFIER ::= { fsARPTrapPacketValidCheck 1 } fsARPTrapPktValidCheckIf OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..47)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Name of the interface that received the ARP packet." ::= { fsARPTrapPacketValidCheckObjs 1 } fsARPTrapPktValidCheckMac OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..15)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION " Source MAC address of the ARP packet." ::= { fsARPTrapPacketValidCheckObjs 2 } fsARPTrapPktValidCheckIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Source IP address of ARP packet." ::= { fsARPTrapPacketValidCheckObjs 3 } fsARPTrapPktValidCheckVlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "VLAN ID of the ARP packet." ::= { fsARPTrapPacketValidCheckObjs 4 } fsARPTrapPktValidtCheckSvlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Service VLAN ID of the ARP packet." ::= { fsARPTrapPacketValidCheckObjs 5 } -- fsARPTrapGatewayCheck fsARPTrapGatewayCheck OBJECT IDENTIFIER ::= { fsARPTrapPkt 7 } fsARPTrapsGatewayCheck OBJECT IDENTIFIER ::= { fsARPTrapGatewayCheck 0 } fsARPTrapGatewayCheckAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapGatewayCheckIf, fsARPTrapGatewayCheckSlot, fsARPTrapGatewayCheckIp } STATUS current DESCRIPTION "If the ARP gateway protection feature intercepts an ARP attack packet, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsGatewayCheck 1 } fsARPTrapGatewayCheckResume NOTIFICATION-TYPE OBJECTS { fsARPTrapGatewayCheckIf, fsARPTrapGatewayCheckSlot, fsARPTrapGatewayCheckIp } STATUS current DESCRIPTION "If the device is no longer attacked for a period of time, a trap message is generated and sent to the remote monitoring device." ::= { fsARPTrapsGatewayCheck 2 } fsARPTrapGatewayCheckObjs OBJECT IDENTIFIER ::= { fsARPTrapGatewayCheck 1 } fsARPTrapGatewayCheckIf OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..47)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Name of the interface that received the ARP packet." ::= { fsARPTrapGatewayCheckObjs 1 } fsARPTrapGatewayCheckSlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Slot of interface board." ::= { fsARPTrapGatewayCheckObjs 2 } fsARPTrapGatewayCheckIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION " IP address of the ARP packet." ::= { fsARPTrapGatewayCheckObjs 3 } -- fsARPTrapDtcDropVlanPkt fsARPTrapDtcDropVlanPkt OBJECT IDENTIFIER ::= { fsARPTrapPkt 8 } fsARPTrapsDtcDropVlanPkt OBJECT IDENTIFIER ::= { fsARPTrapDtcDropVlanPkt 0 } fsARPTrapDtcDropVlanPktAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapDtcDropVlanPktChassis, fsARPTrapDtcDropVlanPktSlot, fsARPTrapDtcDropVlanPktIfName, fsARPTrapDtcDropVlanPktVlanId, fsARPTrapDtcDropVlanPktServId, fsARPTrapDtcDropVlanPktType } STATUS current DESCRIPTION "ARP detection packet loss alarm of VLAN virtual interface." ::= { fsARPTrapsDtcDropVlanPkt 1 } fsARPTrapDtcDropVlanPktObjs OBJECT IDENTIFIER ::= { fsARPTrapDtcDropVlanPkt 1 } fsARPTrapDtcDropVlanPktChassis OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The chassis number of the loss ARP detection-drop packet. If the value is 65535, the device is not a stacked device." ::= { fsARPTrapDtcDropVlanPktObjs 1 } fsARPTrapDtcDropVlanPktSlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The slot number of the ARP detection-drop packet." ::= { fsARPTrapDtcDropVlanPktObjs 2 } fsARPTrapDtcDropVlanPktIfName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Name of the interface of the ARP detection-drop packet." ::= { fsARPTrapDtcDropVlanPktObjs 3 } fsARPTrapDtcDropVlanPktVlanId OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The vlan id of the ARP detection-drop packet." ::= { fsARPTrapDtcDropVlanPktObjs 4 } fsARPTrapDtcDropVlanPktServId OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The service id of the ARP detection-drop packet." ::= { fsARPTrapDtcDropVlanPktObjs 5} fsARPTrapDtcDropVlanPktType OBJECT-TYPE SYNTAX INTEGER { sourceMacInvalidDrop(1), destMacInvalidDrop(2), ipInvalidDrop(3), ipcimNobindingDrop(4) } MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The type of the ARP detection-drop packet: 'sourceMacInvalidDrop' means Arp packet dropped by invalid source mac address. 'destMacInvalidDrop' means Arp packet dropped by invalid destination mac address. 'ipInvalidDrop' means Arp packet dropped by invalid ip address. 'ipcimNobindingDrop' means Arp packet dropped by ipcim has no binding." ::= { fsARPTrapDtcDropVlanPktObjs 6} -- fsARPTrapDtcDropVsiPkt fsARPTrapDtcDropVsiPkt OBJECT IDENTIFIER ::= { fsARPTrapPkt 9 } fsARPTrapsDtcDropVsiPkt OBJECT IDENTIFIER ::= { fsARPTrapDtcDropVsiPkt 0 } fsARPTrapDtcDropVsiPktAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapDtcDropVsiPktChassis, fsARPTrapDtcDropVsiPktSlot, fsARPTrapDtcDropVsiPktIfName, fsARPTrapDtcDropVsiPktVlanId, fsARPTrapDtcDropVsiPktServId, fsARPTrapDtcDropVsiPktType } STATUS current DESCRIPTION "ARP detection packet loss alarm of VSI virtual interface." ::= { fsARPTrapsDtcDropVsiPkt 1 } fsARPTrapDtcDropVsiPktObjs OBJECT IDENTIFIER ::= { fsARPTrapDtcDropVsiPkt 1 } fsARPTrapDtcDropVsiPktChassis OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The chassis number of the loss ARP detection-drop packet. If the value is 65535, the device is not a stacked device." ::= { fsARPTrapDtcDropVsiPktObjs 1 } fsARPTrapDtcDropVsiPktSlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The slot number of the ARP detection-drop packet." ::= { fsARPTrapDtcDropVsiPktObjs 2 } fsARPTrapDtcDropVsiPktIfName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Name of the interface of the ARP detection-drop packet." ::= { fsARPTrapDtcDropVsiPktObjs 3 } fsARPTrapDtcDropVsiPktVlanId OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The vlan id of the ARP detection-drop packet." ::= { fsARPTrapDtcDropVsiPktObjs 4 } fsARPTrapDtcDropVsiPktServId OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The service id of the ARP detection-drop packet." ::= { fsARPTrapDtcDropVsiPktObjs 5} fsARPTrapDtcDropVsiPktType OBJECT-TYPE SYNTAX INTEGER { sourceMacInvalidDrop(1), destMacInvalidDrop(2), ipInvalidDrop(3), ipcimNobindingDrop(4) } MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The type of the ARP detection-drop packet: 'sourceMacInvalidDrop' means Arp packet dropped by invalid source mac address. 'destMacInvalidDrop' means Arp packet dropped by invalid destination mac address. 'ipInvalidDrop' means Arp packet dropped by invalid ip address. 'ipcimNobindingDrop' means Arp packet dropped by ipcim has no binding." ::= { fsARPTrapDtcDropVsiPktObjs 6} -- fsARPTrapDtcDropIfPkt fsARPTrapDtcDropIfPkt OBJECT IDENTIFIER ::= { fsARPTrapPkt 10 } fsARPTrapsDtcDropIfPkt OBJECT IDENTIFIER ::= { fsARPTrapDtcDropIfPkt 0 } fsARPTrapDtcDropIfPktAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapDtcDropIfPktChassis, fsARPTrapDtcDropIfPktSlot, fsARPTrapDtcDropIfPktIfName, fsARPTrapDtcDropIfPktVlanId, fsARPTrapDtcDropIfPktServId, fsARPTrapDtcDropIfPktType } STATUS current DESCRIPTION "ARP detection packet loss alarm of layer 2 Ethernet interface" ::= { fsARPTrapsDtcDropIfPkt 1 } fsARPTrapDtcDropIfPktObjs OBJECT IDENTIFIER ::= { fsARPTrapDtcDropIfPkt 1 } fsARPTrapDtcDropIfPktChassis OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The chassis number of the loss ARP detection-drop packet. If the value is 65535, the device is not a stacked device." ::= { fsARPTrapDtcDropIfPktObjs 1 } fsARPTrapDtcDropIfPktSlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The slot number of the ARP detection-drop packet." ::= { fsARPTrapDtcDropIfPktObjs 2 } fsARPTrapDtcDropIfPktIfName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Name of the interface of the ARP detection-drop packet." ::= { fsARPTrapDtcDropIfPktObjs 3 } fsARPTrapDtcDropIfPktVlanId OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The vlan id of the ARP detection-drop packet." ::= { fsARPTrapDtcDropIfPktObjs 4 } fsARPTrapDtcDropIfPktServId OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The service id of the ARP detection-drop packet." ::= { fsARPTrapDtcDropIfPktObjs 5} fsARPTrapDtcDropIfPktType OBJECT-TYPE SYNTAX INTEGER { sourceMacInvalidDrop(1), destMacInvalidDrop(2), ipInvalidDrop(3), ipcimNobindingDrop(4) } MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The type of the ARP detection-drop packet: 'sourceMacInvalidDrop' means Arp packet dropped by invalid source mac address. 'destMacInvalidDrop' means Arp packet dropped by invalid destination mac address. 'ipInvalidDrop' means Arp packet dropped by invalid ip address. 'ipcimNobindingDrop' means Arp packet dropped by ipcim has no binding." ::= { fsARPTrapDtcDropIfPktObjs 6} -- fsARPTrapMacMismatch fsARPTrapMacMismatch OBJECT IDENTIFIER ::= { fsARPTrapPkt 11 } fsARPTrapsMacMismatch OBJECT IDENTIFIER ::= { fsARPTrapMacMismatch 0 } fsARPTrapMacMismatchAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapMacMismatchChassis, fsARPTrapMacMismatchSlot, fsARPTrapMacMismatchIfName, fsARPTrapMacMismatchIP, fsARPTrapMacMismatchVrf, fsARPTrapMacMismatchMac } STATUS current DESCRIPTION "Alarm of inconsistency between MAC address of static ARP and actual MAC address." ::= { fsARPTrapsMacMismatch 1 } fsARPTrapMacMismatchResume NOTIFICATION-TYPE OBJECTS { fsARPTrapMacMismatchChassis, fsARPTrapMacMismatchSlot, fsARPTrapMacMismatchIfName, fsARPTrapMacMismatchIP, fsARPTrapMacMismatchVrf, fsARPTrapMacMismatchMac } STATUS current DESCRIPTION "Alarm of consistency between MAC address of static ARP and actual MAC address." ::= { fsARPTrapsMacMismatch 2 } fsARPTrapMacMismatchObjs OBJECT IDENTIFIER ::= { fsARPTrapMacMismatch 1 } fsARPTrapMacMismatchChassis OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of chassis ID. If the value is 65535, the device is not a stacked device ." ::= { fsARPTrapMacMismatchObjs 1 } fsARPTrapMacMismatchSlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of slot." ::= { fsARPTrapMacMismatchObjs 2 } fsARPTrapMacMismatchIfName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of the interface name." ::= { fsARPTrapMacMismatchObjs 3 } fsARPTrapMacMismatchIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of ip address." ::= { fsARPTrapMacMismatchObjs 4 } fsARPTrapMacMismatchVrf OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of vrf index." ::= { fsARPTrapMacMismatchObjs 5} fsARPTrapMacMismatchMac OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..15)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of mac address." ::= { fsARPTrapMacMismatchObjs 6} -- fsARPTrapEntryCheck fsARPTrapEntryCheck OBJECT IDENTIFIER ::= { fsARPTrapPkt 12 } fsARPTrapsEntryCheck OBJECT IDENTIFIER ::= { fsARPTrapEntryCheck 0 } fsARPTrapEntryCheckAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapEntryCheckChassis, fsARPTrapEntryCheckSlot, fsARPTrapEntryCheckIfName, fsARPTrapEntryCheckIP, fsARPTrapEntryCheckMac, fsARPTrapEntryCheckPeVlan, fsARPTrapEntryCheckCeVlan, fsARPTrapEntryCheckPortIfName } STATUS current DESCRIPTION "The alarm of attempts to modify an existing ARP table entry." ::= { fsARPTrapsEntryCheck 1 } fsARPTrapEntryCheckObjs OBJECT IDENTIFIER ::= { fsARPTrapEntryCheck 1 } fsARPTrapEntryCheckChassis OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of chassis ID. If the value is 65535, the device is not a stacked device ." ::= { fsARPTrapEntryCheckObjs 1 } fsARPTrapEntryCheckSlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of slot." ::= { fsARPTrapEntryCheckObjs 2 } fsARPTrapEntryCheckIfName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of the interface name." ::= { fsARPTrapEntryCheckObjs 3 } fsARPTrapEntryCheckIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of the ip address." ::= { fsARPTrapEntryCheckObjs 4 } fsARPTrapEntryCheckMac OBJECT-TYPE SYNTAX OCTET STRING(SIZE(1..15)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of the mac address." ::= { fsARPTrapEntryCheckObjs 5} fsARPTrapEntryCheckPeVlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of the pe vlan id." ::= { fsARPTrapEntryCheckObjs 6} fsARPTrapEntryCheckCeVlan OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of the ce vlan id." ::= { fsARPTrapEntryCheckObjs 7} fsARPTrapEntryCheckPortIfName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of the port name." ::= { fsARPTrapEntryCheckObjs 8} -- fsARPTrapPktQueue fsARPTrapPktQueue OBJECT IDENTIFIER ::= { fsARPTrapPkt 13 } fsARPTrapsPktQueue OBJECT IDENTIFIER ::= { fsARPTrapPktQueue 0 } fsARPTrapPktQueThresholdAlarm NOTIFICATION-TYPE OBJECTS { fsARPTrapPktQueChassis, fsARPTrapPktQueSlot, fsARPTrapPktQueNum } STATUS current DESCRIPTION "The current size of the ARP_PKT queue exceeds the threshold." ::= { fsARPTrapsPktQueue 1 } fsARPTrapPktQueThresholdResume NOTIFICATION-TYPE OBJECTS { fsARPTrapPktQueChassis, fsARPTrapPktQueSlot, fsARPTrapPktQueNum } STATUS current DESCRIPTION "The current size of the ARP_PKT queue drops below the threshold." ::= { fsARPTrapsPktQueue 2 } fsARPTrapPktQueueObjects OBJECT IDENTIFIER ::= { fsARPTrapPktQueue 1 } fsARPTrapPktQueChassis OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of chassis ID. If the value is 65535, the device is not a stacked device." ::= { fsARPTrapPktQueueObjects 1 } fsARPTrapPktQueSlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The information of slot." ::= { fsARPTrapPktQueueObjects 2 } fsARPTrapPktQueNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The number of packets in the ARP_PKT queue." ::= { fsARPTrapPktQueueObjects 3 } END