Traffic security, In this chapter, Dynamic arp inspection vlan configuration table – Brocade 6910 Ethernet Access Switch MIB Reference User Manual
Page 73: Dai vlan configuration table, Chapter 9
Brocade 6910 Ethernet Access Switch MIB Reference
61
53-1002652-02
Chapter
9
Traffic Security
In this chapter
This chapter presents the SNMP MIB objects for various traffic security features such as Dynamic
ARP Inspections, DHCP Snooping, and IP Source Guard.
•
Dynamic ARP Inspection VLAN configuration table. . . . . . . . . . . . . . . . . . . . 61
•
Dynamic Host Configuration Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
•
Dynamic ARP Inspection VLAN configuration table
Dynamic ARP Inspection (DAI) is a security mechanism which validates all ARP packets in a subnet
and discard those packets with invalid IP to MAC address bindings. To configure the feature using
SNMP MIB objects, do the following:
1. Enable DAI on a VLAN
DAI on a VLAN is disabled by default. To enable DAI on an existing VLAN, set the object
fdryDaiVlanDynArpInspEnable in the fdryDaiVlanConfigTable to true. Set it to false to disable it.
2. Enable trust on a port
The default trust setting for a port is untrusted. To enable trust on a port, set the object
fdryDaiIfTrustValue in the fdryDaiIfConfigTable to true. Set it to false to disable trust on a port.
3. Configure a DAI ARP entry
To configure a DAI ARP entry, set the fdryDaiArpInspectIpAddr, fdryDaiArpInspectMacAddr and
fdryDaiArpInspectRowStatus (value as createAndGo) in the fdryDaiArpInspectTable. This table
displays all DAI entries. A row instance contains the configuration to map a device IP address
with its MAC address and its type, state, age and port.
DAI VLAN configuration table
Name, Identifier, and Syntax
Access
Description
fdryDaiVlanConfigTable
brcdIp.1.1.3.35.1.1
N/A
This table provides the mechanism to control Dynamic ARP
Inspection per VLAN.
fdryDaiVlanConfigEntry
brcdIp.1.1.3.35.1.1.1
N/A
When a VLAN is created on a device supporting this table, a
corresponding entry of this table is added.
This entry represents a row that contains the configuration to
enable or disable Dynamic ARP Inspection on the existing VLAN.
It is indexed by fdryDaiVlanVLanId.