Brocade Communications Systems 6910 manual Dynamic Host Configuration Protocol

Dynamic Host Configuration Protocol

Dynamic ARP Inspection Interface configuration table

Name, Identifier, and Syntax	Access	Description
fdryDaiIfConfigTable	N/A	This table allows you to configure the trust state for
brcdIp.1.1.3.35.2.1		Dynamic ARP Inspection at each physical interface.
fdryDaiIfConfigEntry	N/A	A row in the fdryDaiConfigTable. Each row contains the
brcdIp.1.1.3.35.2.1.1		configuration to enable or disable the trust state for
		Dynamic ARP Inspection at each physical interface
		capable of this feature.

fdryDaiIfTrustValue brcdIp.1.1.3.35.2.1.1.1 Syntax: TruthValue

Read-write	This object indicates whether the interface is trusted
	for Dynamic ARP Inspection.
	If this object is set to 'true', the interface is trusted. ARP
	packets coming to this interface will be forwarded
	without being checked.
	If this object is set to “false”, the interface is not
	trusted. ARP packets received on this interface will be
	subjected to ARP inspection.

Dynamic Host Configuration Protocol

Dynamic Host Configuration Protocol (DHCP) snooping enables the device to filter untrusted DHCP packets in a subnet. DHCP snooping can prevent man-in-the-middle (MiM) attacks, such as a malicious user who is posing as a DHCP server and is sending false DHCP server reply packets with the intention of misdirecting other users. It can also stop unauthorized DHCP servers and prevent errors due to misconfiguration of DHCP servers.

SNMP DHCP snooping MIB objects describes how to configure the DHCP snooping feature using SNMP. It consists of the following:

•fdryDhcpSnoopGlobalClearOper: A scalar used to clear all entries in the DHCP binding database

•fdryDhcpSnoopVlanConfigTable: A table that provides the mechanism to control DHCP snooping per VLAN. When a VLAN is created on a device that supports this table, a corresponding entry of this table will be added.

•fdryDhcpSnoopIfConfigTable: A table that provides the mechanism to configure the trust state for DHCP snooping at each physical interface.

•fdryDhcpSnoopBindTable: A table that provides the information for DHCP snooping binding database learned by the device. The DHCP binding database is integrated with the enhanced ARP table. It contains the information of a DHCP entry, such as IP address, MAC address, type, state, port, VLAN ID, and lease time. (To be provided at a later date.)

42	Brocade 6910 Ethernet Access Switch MIB Reference
	53-1002582-01